who is meraki? - marco inc · meraki (cloud managed network) solution ... affordable. managed....
TRANSCRIPT
Meraki(Cloud Managed Network)
Solution Overview
Clay Ostlund
Sr. Systems Engineer
June - 2014
Affordable. Managed. Scalable.
About Meraki
Leader in cloud networking: 20,000+ customer networks deployedFounded in 2006 at MIT - tradition of innovation and R&D
350 employees worldwide
100% Cloud-managed edge and branch networking portfolioComplete line of wireless, switching, security, WAN optimization,
and mobile device management products
Now part of CiscoIncreasing R&D investment in Meraki products
Leveraging Cisco’s reach to bring Meraki to new markets
No near-term changes planned to pricing, licenses, product roadmap, etc.
Meraki did ~94M in revenue in 2012, Cisco purchased Meraki for 1.2B in 2013.
Reduced Operational Costs
Scales from small to large deployments
Integrated Always up to date features
Turnkey Installation & Management
Why cloud networking?
Manageability
Scalability
Lower Fixed Costs
Expertise
Monitoring
How Meraki Works
Step 1:Pick Hardware
Step 2: Cloud Subscription &
Warranty Support
Cloud License1yr, 3yr, 5yr
Step 3: Install
Install
Warranty
Step 4: Cost Savings and
complete remote
management
Hardware
Meraki “MS“
Ethernet Switches
Meraki “SM”
Mobile Device Management
Meraki “MR”
Wireless LAN
Meraki “MX “
Security Appliances
Spatial streaming is primarily observed in wireless communications where multiple-input-multiple-output (MIMO)
is being used. When wireless signals are being transmitted or received simultaneously in a MIMO environment, the signals being transmitted by the various antennae are multiplexed by using different spaces within the same spectral channel. These
spaces are known as spatial streams.
Spatial Stream / Antenna Design
Fundamentals of Spatial Streams
Transmit (x) Receive : Spatial Streams (3x3:2)
Hardware – “MR”
MR 34 MR 26 MR 18 MR 12
Max Data Rate 1.75 Gbps 900 Mbps 600 Mbps 300 Mbps
Radio Design MIMO:Spatial
Stream3x3:3 3x3:3 2X2:2 2X2:2
Radio
2.4 Ghz – 802.11ac/n
5.0 Ghz – 802.11ac/n
WIDS/WIPS Radio
2.4 Ghz – 802.11b/g/n
5.0 Ghz – 802.11a/n
WIDS/WIPS Radio
2.4 Ghz – 802.11b/g/n
5.0 Ghz – 802.11a/n
WIDS/WIPS Radio
2.4 Ghz – 802.11b/g/n
Air Marshal (WIPS) ✔ ✔ ✔ ✔
Secure Guest Wifi ✔ ✔ ✔ ✔
Layer 7 Application
Controls✔ ✔ ✔ ✔
BandSelect ✔ ✔ ✔ ✔
BYOD Support ✔ ✔ ✔ ✔
Mesh Routing ✔ ✔ ✔ ✔
RF Optimization ✔ ✔ ✔ ✔
Data Uplink (Mbps) 10/100/1000 10/100/1000 10/100/1000 10/100/1000
Hardware – “MR”
MR 66 MR 62
Max Data Rate 600 Mbps 300 Mbps
Radio Design
MIMO:Spatial Stream2x2:2 2x2:2
Radio2.4 Ghz – 802.11ac/n
5.0 Ghz – 802.11ac/n2.4 Ghz – 802.11b/g/n
Air Marshal (WIPS) ✔ ✔
Secure Guest Wifi ✔ ✔
Layer 7 Application
Controls✔ ✔
BandSelect ✔ ✔
BYOD Support ✔ ✔
Mesh Routing ✔ ✔
RF Optimization ✔ ✔
Data Uplink (Mbps) 10/100/1000 10/100/1000
Features – “MR”o Automated RF Optimization:
Performance Monitoring
Interference detection
Adaptive configuration for optimal
performance
Presence Analytics:
Intelligent Aps collect probe statistics
Location-based insights drive revenue
Presence API gives unlimited flexibilityo Application QOS:
Deep packet inspection
Traffic shaping policies
Cloud-based Application Signatures
o Air Marshal:
o Real-time detection and containment
o Heuristic threat classification engine
o Intuitive remediation with customizable
alarms
o Bonjour Gatekeeper:
o Integrated Bonjour Support
Seamless Mobility:
Seamless roaming
Fast roaming for voice and high speed
mobility
Inter-subnet mobility
Mesh Routing:
Auto-configuring mesh network
Multi-channel routing protocols
Self-healing network with per-flow
optimization
Hardware
Meraki “MS“
Ethernet Switches
Meraki “SM”
Mobile Device Management
Meraki “MR”
Wireless LAN
Meraki “MX “
Security Appliances
Hardware – “MS” – Layer 2 Access
MS220-48 MS220-24 MS220-8
Number of Ports 48 Port - 10/100/1000 24 Port - 10/100/1000 8 Port - 10/100/1000
Available POE(+) Budget 370W / 740W 370W 124W
Layer 7 Application
Controls✔ ✔ ✔
Uplinks 4 x SFP (1 GIG) 4 x SFP (1 GIG) 2 x SFP (1 GIG)
Layer 2 Support ✔ ✔ ✔
Layer 3 Support
Remote Live Tools ✔ ✔ ✔
Quality Of Service ✔ ✔ ✔
Enterprise Security
(802.1X)✔ ✔ ✔
Limited Lifetime
Warranty✔ ✔ ✔
Hardware – “MS” – Layer 3 Access
MS320-48 MS320-24
Number of Ports 48 Port - 10/100/1000 24 Port - 10/100/1000
Available POE(+) Budget 370W / 720W 370W
Layer 7 Application
Controls✔ ✔
Uplinks 4 x SFP+ (10 GIG) 4 x SFP+ (10 GIG)
Layer 2 Support ✔ ✔
Layer 3 Support ✔ ✔
Remote Live Tools ✔ ✔
Quality Of Service ✔ ✔
Enterprise Security
(802.1X)✔ ✔
Limited Lifetime
Warranty✔ ✔
Hardware – “MS” - Aggregation
MS420-24 MS420-48
Number of Ports 24 Port SFP/SFP+ 48 Port SFP/SFP
Available POE(+) Budget N/A N/A
Layer 7 Application
Controls✔ ✔
Uplinks N/A N/A
Layer 2 Support ✔ ✔
Layer 3 Support ✔ ✔
Remote Live Tools ✔ ✔
Quality Of Service ✔ ✔
Enterprise Security
(802.1X)✔ ✔
Limited Lifetime
Warranty✔ ✔
Features – “MS”o Virtual Stacking:
Scalable Management Architecture
Stack without proprietary cables
Zero-Touch Deployments
o Voice Optimization:
Performance for Voice and Video
Intelligent Power management
Optimized for rapid VoIP deployment
o Layer 7 Visibility:
Packet processing engine
Deep packet inspection
Cloud-based application signatures
Hardware
Meraki “MS“
Ethernet Switches
Meraki “SM”
Mobile Device Management
Meraki “MR”
Wireless LAN
Meraki “MX “
Security Appliances
Hardware – “MX”
MX400 MX100 MX80 MX60W MX60 Z1 (Teleworker)
Stateful Firewall
Throughput1 Gbps 500 Mbps 250 Mbps 100 Mbps 100 Mbps 50 Mbps
VPN Throughput 325 Mbps 225 Mbps 125 Mbps 50 Mbps 50 Mbps 10 Mbps
WAN
Optimization
Cache
1 TB SATA 1 TB SATA 1 TB SATA 100 MB 100 MB N/A
Interfaces
8 x GbE8 x GbE (SFP)
4 x 10 GbE (SFP+)
8 x GbE2 x GbE (SFP)
5 x GbE5 × GbE
1 × 802.11n 5 x GbE
1 x GbE WAN4 x GbE LAN
• Integrated Intrusion Detection (IDS)
• Device Aware Access Controls
(BYOD) (Layer 7)
• Category-based content filtering
• Load Balance WAN connections
• 3G/4G backup WAN connectivity
• WAN Acceleration/Optimization
Hardware – “MX”o Next Generation Firewall:
Layer 7 traffic classification and control
Intrusion detection engine
Identity based and device-aware security
o Auto VPN:
Auto-provisioning IPSec VPN
Automatically configured VPN parameters
Flexible tunneling, topology and security
policies
o 3G / 4G Failover:
Cellular support for maximum uptime
Seamless, automatic failover with traffic
prioritization
o WAN Optimization:
Universal data store with de-duplication
WAN link compression
o Content Filtering:
Identity-based filtering policies
Hardware
Meraki “MS“
Ethernet Switches
Meraki “SM”
Mobile Device Management
Meraki “MR”
Wireless LAN
Meraki “MX “
Security Appliances
Systems Manager – “SM”
• Systems Manager lets you configure,
monitor, and support devices in your
organization. 100% cloud based, Systems
Manager eliminates costly, complex
management appliances and software.
Mobile Device Management (MDM)
Systems Manager – “SM”
o Rapid Provisioning:
1:1 BYOD initiatives
Deploy network settings and policies
o Remote Live Tools:
Universal data store with de-duplication
WAN link compression
o Platform Support:
o Application Deployment:
o Integration to Apple and Google
App Stores
o Deploy MSI and PKG for PC/MAC
o Enterprise Security
Enforce Restrictions
Deploy Network Settings
o Asset Management
o Locate and track laptops and mobile
devices anywhere in the world
Cloud Value Proposition
o Maintenance & Upgrades (Quarterly Releases):
Automatic firmware maintenance
New feature implementation
Automatic implementation of performance
improvements and enhancements
o Monitoring:
Application level (layer 7) monitoring & reporting
Performance monitoring
o Technology and Configuration:
Extremely easy configuration
Fully featured Cloud Managed
Warrenty & Maintenance:
Case-based support viewable in dashboard
Firmware and Software updates/upgrades
24x7 telephone support
Management – Cloud Dashboard
• Self-provisioning for rapid deployment and expansions
• Scalable network-wide monitoring and management tools
• Integrated Wireless, LAN, and WAN management, as well as Mobile Device management
• Seamless over-the-web maintenance, upgrades, monitoring, etc.
Out of band cloud management
Scalable
• Unlimited throughput, no bottlenecks
• Add devices or sites in minutes
Reliable
• Highly available cloud with multiple datacenters
• Network functions even if connection to cloud is interrupted
• 99.99% uptime SLA
Secure
• No user traffic passes through cloud
• Fully HIPAA / PCI compliant (level 1 certified)
• 3rd party security audits, daily penetration test
Reliability and security information at meraki.com/trust
Management
data (1 kb/s)
WAN
LAN