Home > Security and SD-WAN > MX Overviews and Specifications > MX67 and MX68 Overview and Specifications

MX67 and MX68 Overview and Specifications

Designed from the ground up with a new built-in cellular modem the MX67C and MX68CW are designed to simplify any deployment that requires a backup cellular uplink. This is ideal for small remote locations with unreliable WAN circuit providers or for sites that want the highest level of redundancy and availability. The Meraki Dashboard in addition with the built-in cellular uplink allows for simple and easy deployment of the MX67C or MX68CW with minimal pre-configuration in almost any location. 

For smaller sites that don't require a backup cellular uplink but still need a capable device that can be easily deployed, the base models of the MX67 and MX68 are available without a built-in cellular uplink. The MX67 and MX68 are also available in Wireless models (MX67W / MX68CW) that can provide 802.11ac coverage for wireless clients.

Main Image - scaled.png


  • Managed via Cisco Meraki Dashboard

  • Automatic Firmware upgrades

  • WAN Link Balancing

  • Automatic WAN Failover

  • SD-WAN over Meraki AutoVPN

  • L3/L7 Stateful Firewall

  • Geo based firewall rules

  • 1:1 and 1:Many NAT

  • Configurable VLANs / DHCP support

  • Static Routing

  • Client VPN endpoint

  • Meraki AutoVPN and L2TP/IPSec VPN endpoint

  • Active Directory integration

  • Content Filtering

  • Malware Protection (AMP) w/ optional Threat Grid integration

  • IDS/IPS protection 

  • Custom Traffic Shaping

  • Historical Client Usage statistics

  • Netflow support

  • Syslog integration

  • Remote Packet Capture tools

Hardware Features

  • Dual WAN uplinks

  • Built-in Cellular CAT 6 LTE Uplink (Cellular models only, requires SIM card)

  • Built-in 802.11ac Wireless capability (Wireless models only)

  • Built-in PoE+ capabilities (MX68 only) 


The basic initial configuration of the MX67 and MX68 is just as simple as with other MX models. The links below provide additional information and instructions relating to each step in getting the device setup and configured for the first time. 

  1. Claim the device to an Organization on the Meraki Dashboard
    1. If a Dashboard Organization does not yet exist, Create one
  2. Add the device to a Dashboard Network 
    1. If a Network does not yet exist, Create one first
  3. Physically connect the device to the local network
    1. Insert an activated SIM card to allow the cellular uplink to function (Cellular models only)
    2. Ensure the cellular and/or wireless antennas are connected correctly (Cellular and Wireless models only) 
    3. Power on the device and let it check in to the Dashboard
    4. If necessary, configure a Static IP on the WAN interface through the Local Status Page to allow it to check in.
  4. Finish configuring the device from the Meraki Dashboard 
    1. Manage local VLANs
    2. Modify Firewall rules
    3. Configure VPN connectivity
    4. Configure custom APNs for cellular modems

Context and Comparisons 

  MX64 MX65 MX67 MX68
Dual WAN Uplinks Yes (With LAN conversion) Yes Yes (With LAN conversion) Yes
Backup Cellular Uplink Via 3rd Party USB Modem Via 3rd Party USB Modem Built-in (Cellular models only), Via 3rd Party USB Modem Built-in (Cellular Models Only), Via 3rd Party USB Modem
Stateful Firewall Throughput 250 Mbps 250Mbps 450 Mbps 450 Mbps
Maximum VPN Throughput 100 Mbps 100Mbps 200 Mbps 200 Mbps
Security Throughput 200 Mbps 200 Mbps 300 Mbps 300 Mbps
PoE Capabilities  No Yes, 2x GbE RJ45 LAN Ports No Yes, 2x GbE RJ45 LAN Ports
Recommended LAN Clients 50 50 50 50

Technical Breakdown 

WAN Interface

MX67 / W MX67C MX68 / W MX68CW

1x Dedicated GbE RJ45 

1x Convertible LAN GbE RJ45

1x Dedicated GbE RJ45 

1x Convertible LAN GbE RJ45

2x Dedicated GbE RJ45 2x Dedicated GbE RJ45
Cellular Uplink via 3rd Party USB Modem Built-in Cellular Uplink or 3rd Party USB Modem Cellular Uplink via 3rd Party USB Modem Built-in Cellular Uplink or 3rd Party USB Modem

LAN Interface

MX67 / C / W MX68 / W / CW
3x Dedicated GbE RJ45 10x Dedicated GbE RJ45
1x Convertible LAN/WAN GbE RJ45 2x Dedicated GbE RJ45 PoE+

802.11 Wireless Interface 

  MX67W MX68W / CW
Radio Information

802.11a/b/g/n/ac Wave 2 (2.4 or 5Ghz) 2x2 MU-MIMO

802.11a/b/g/n/ac Wave 2 (2.4 or 5Ghz) 2x2 MU-MIMO

Antennas  2 x 2 MU-MIMO with two spatial streams 2 x 2 MU-MIMO with two spatial streams
Maximum Data Rate 1.3 Gbps 1.3 Gbps

NOTE: The MX68CW has fixed antennas that serve both 802.11 and LTE connectivity and cannot be removed.  

Cellular Interface

   US / North America Bands Worldwide Bands
HSPA+ 2, 4, 5 1, 3, 5/6, 8
FDD-LTE 2, 4, 5(*), 12/17, 13(-X only), 29 1, 3, 7, 8, 20, 26/5, 28A, 28B
TDD-LTE - 34, 39, 40, 41/38
CA 2xDL-CA up to 40Mhz: 2+17, 4+17, 2+29, 4+29, 4+5, 2+5 2xDL-CA up to 40Mhz: 3+20, 3+8, 7+20, 1+8, 1+5, 3+5
Carriers Verizon, AT&T Orange, Telia, Telecom Italia, Telenor, Telefonica, Post, BT, STC, NTT docomo

Please note that any other worldwide carrier that requires only a GCF certification is also supported.

Throughput and Capabilities

  MX67 / C / W MX68 / W / CW
Recommended Maximum LAN Clients 50 50
Max Stateful Firewall Throughput in NAT mode 450 Mbps 450 Mbps
Max VPN Throughput 200 Mbps 200 Mbps

Max Concurrent VPN Tunnels (Site-to-Site or Client VPN)

50 50



  MX67  MX67W MX67C MX68 MX68W MX68CW
Mount Type Desktop / Wall Mount Desktop / Wall Mount Desktop / Wall Mount Desktop / Wall Mount Desktop / Wall Mount Desktop / Wall Mount


(h x d x w)

1.1 x 5.1 x 9.4 in /

27 x 130 x 239 mm

1.1 x 6.5 x 9.4 in /

27 x 164 x 239 mm

1.1 x 6.9 x 9.4 in /

27 x 176 x 239 mm

1.1 x 5.8 x 11.2 in /

27 x 148 x 284 mm

1.1 x 6.8 x 11.2 in / 

27 x 172 x 284 mm

1.1 x 7.0 x 11.2 in / 

27 x178 x 284 mm

Weight 1.74 lb / 0.79 kg 1.84 lb / 0.83 kg 1.87 lb / 0.85 kg 2.46 lb / 1.12 kg 2.55 lb / 1.16 kg 2.61 lb / 1.18 kg
Power Supply 18W DC 18W DC 18W DC 100W DC 100W DC 100W DC
Power Load (idle/max) 5W / 14W 15W / 23W 6W / 17W 11W / 79W 19W / 87W 19W / 89W
Operating Temperature

32°F - 113°F

0°C - 45°C

32°F - 113°F

0°C - 45°C

32°F - 113°F

0°C - 45°C

32°F - 104 °F

0°C - 40°C

32°F - 104 °F

0°C - 40°C

32°F - 104 °F

0°C - 40°C

Humidity 5% to 95% 5% to 95% 5% to 95% 5% to 95% 5% to 95% 5% to 95%


Accessory Description
MA-PWR-30WAC Meraki MX Replacement Power Adapter (MX64, MX67) (30 Watts AC)
MA-PWR-90WAC Meraki MX Replacement Power Adapter (MX65) (90 Watts AC)
MA-ANT-MX One pair of external dual-band dipole 802.11 antennas for MX64W/65W (Connector type: RP-SMA)
MA-PWR-CORD-US 1x AC Power Cable, US plug
MA-PWR-CORD-EU 1x AC Power Cable, EU plug
MA-PWR-CORD-UK 1x AC Power Cable, UK plug
MA-PWR-CORD-AU 1x AC Power Cable, AU plug

NOTE: The MX68CW has fixed antennas that serve both 802.11 and LTE connectivity and cannot be removed.   


Common Troubleshooting Steps 

My cellular uplink is stuck at 'Connecting'

Built-in Cellular - Ensure that the SIM card is inserted correctly and is activated with the correct PIN entered, if necessary. Ensure there is no external USB modem connected as the MX will prefer an external USB modem to the internal modem, if available. If a custom APN is needed, ensure it is applied from Cellular section of the Uplink tab on the Security Appliance > Appliance Settings page. 

USB Cellular - Ensure that the USB Modem is activated and able to pass traffic when connected to a PC. Ensure it is fully connected and powered on when connected to the MX. If a custom APN is needed, ensure it is applied from the Cellular section of Uplink tab on the Security Appliance > Appliance Settings page. 


My modem is connected but is getting very poor throughput

Meraki strongly recommends that the cellular uplink be used on a 4G connection with good signal strength to provide adequate bandwidth to support using the cellular connection as a backup uplink. If no 4G signal is available or the available signal is low strength, the achievable throughput may not be adequate to fully support a remote site and more restrictive traffic shaping rules should be used to ensure traffic is prioritized appropriately. 

Common Event Log Messages 

There are currently no MX67 / MX68 specific Event Log entries, for more general information about navigating the Event Log and the types of Events that could be expected please check out our Event Log documentation



Is the MX currently using the Cellular Uplink?

When the MX is using the Cellular Uplink it will display a Purple Status LED instead of the usual White LED.


Is this SD-WAN over LTE? Can LTE be used as the primary uplink?

No. LTE link can be used as failover or single-uplink only.


Can I utilize LTE for warm spare configuration?

A SIM card can be installed in either the primary or backup MX, or both, to provide LTE failover to either or both appliances.


How does LTE work for free trials?

Meraki does not supply SIM cards so while the unit can be trialed, it is up to the end user to procure a working SIM card on a compatible carrier.


Do these models support eSIM capability?

No. Currently, Meraki customers will need to acquire a SIM card from their carrier and install. 


Will the LTE devices be available in the USA and Worldwide?

Yes. There will be two models: a North American model and a Worldwide model


Should I contact Meraki Support for carrier issues?

No, you will need to bring support issues to the carrier for carrier issues. 


How do I troubleshoot carrier issues?

The Meraki Dashboard provides the ability to monitor signal strength, performance, and historical traffic for troubleshooting purposes. For additional troubleshooting related to the carrier, the carrier will need to be contacted.


If an external USB cellular modem and the internal LTE SIM card are both connected, which one takes precedence?

The external USB cellular modem will take priority over the internal LTE SIM.


Can I change the APN?

Custom APNs can be configured from Cellular section of the Uplink tab on the Security Appliance > Appliance Settings page. 


Can I change the antennas to improve my performance?

Only Meraki antennas are supported. Replacement antennas will be available for purchase.


If my antennae are lost or damaged, can I use 3rd party antennae that fit on the Meraki device?

Only the Meraki antennae are supported. Lost or malfunctioning antennae can be replaced by contacting Meraki support. 


What does the new LTE API include?

The LTE API allows configuration of APN (Access Point Name), Modem ON/OFF and reset, as well as monitoring capabilities for band, carrier, APN, SNR (Signal-to-Noise Ratio), RSRP (Reference Signals Received Power), RSRQ (Reference Signal Received Quality) 


Why are the C and W models in the MX67 series separated whereas the MX68 has CW combined in one model?

The MX68CW provides a high-end option for customers who want all features included in one unit (wireless, high port count, PoE, cellular). The MX67, MX67C, MX67W are for customers who don’t need all features in a single unit. 

Last modified



This page has no classifications.

Explore the Product

Click to Learn More

Article ID

ID: 7204

Explore Meraki

You can find out more about Cisco Meraki on our main site, including information on products, contacting sales and finding a vendor.

Explore Meraki

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case

Ask the Community

In the Meraki Community, you can keep track of the latest announcements, find answers provided by fellow Meraki users and ask questions of your own.

Visit the Community