- Last updated
- Save as PDF
After April 30, 2024, MX with Third-party USB Cellular Modems will only receive support related to security vulnerabilities for third-party USB modems. All support for Third-party USB Modems will be deprecated as of June 30, 2026.
Overview
Designed from the ground up witha new built-in cellular modem the MX67CandMX68CWaredesigned to simplify any deployment that requires a cellular uplink. This is ideal for smallremote locations with unreliable WAN circuit providers or for sites that want the highest level of redundancy and availability. The Meraki Dashboard in addition with the built-in cellular uplinkallows for simple and easy deployment of the MX67C or MX68CW with minimal pre-configurationin almost any location.
For smaller sites that don't require a cellular uplink but still need a capable device that can be easily deployed, the base models of the MX67 and MX68 are available without abuilt-in cellular uplink. The MX67 and MX68 are also available in Wireless models (MX67W / MX68CW) that can provide 802.11ac coverage for wireless clients.
Features
|
|
Hardware Features
-
Dual WAN uplinks
-
Built-in Cellular CAT 6 LTE Uplink(Cellular modelsonly, requires SIM card)
-
Built-in 802.11ac Wireless capability (Wireless modelsonly)
-
Built-in PoE+ capabilities (MX68only)
Configuration
The basic initial configuration of the MX67 and MX68is just as simple as with other MX models. The links below provide additionalinformation and instructions relating to eachstep in getting the device setup and configured for the first time.
- Claim the device to an Organization on the Meraki Dashboard
- If a Dashboard Organization does not yet exist, Create one
- Add the device to a Dashboard Network
- If a Network does not yet exist, Create one first
- Physically connect the device to the local network
- Before inserting the SIM card, ensure the SIM is activated with the PIN disabled or the correct PIN entered. It may be necessaryto use an external modem, or work with the cellular provider to have the PIN disabled or the SIM unlocked.(Cellular models only)
- If a custom APN is needed,ensure it is applied fromCellularsection of theUplinktab on theSecurity & SD-WAN > Monitor > Appliance Statuspage.(Cellular models only)
- Insert anactivated SIM card to allow the cellular uplink to function (Cellular models only)
- Ensure the cellular and/or wireless antennas are connected correctly (Cellular and Wireless models only)
- Power on the device and let it check in to the Dashboard
- If necessary, configure a Static IP on the WAN interface through the Local Status Pageto allow it to check in.
- Finish configuring the device from the Meraki Dashboard
- ManagelocalVLANs
- ModifyFirewall rules
- Configure VPN connectivity
Context and Comparisons
| MX64 | MX65 | MX67 | MX68 | |
|---|---|---|---|---|
| Dual WAN Uplinks | Yes (With LAN conversion) | Yes | Yes (With LAN conversion) | Yes |
| Cellular Uplink | Via 3rd Party USB Modem | Via 3rd Party USB Modem | Built-in (Cellular models only), Via 3rd Party USB Modem | Built-in (Cellular Models Only),Via 3rd Party USB Modem |
| Stateful Firewall Throughput | 250 Mbps | 250Mbps | 700 Mbps | 700 Mbps |
| Maximum VPN Throughput | 100 Mbps | 100Mbps | 400 Mbps | 400 Mbps |
| Security Throughput | 200 Mbps | 200 Mbps | 400 Mbps | 400 Mbps |
| PoE Capabilities | No | Yes, 2x GbE RJ45 LAN Ports | No | Yes, 2x GbE RJ45 LAN Ports |
| Recommended use case | Small branch with up to 50 users | Small branch with up to 50 users | Small branch with up to 50 users | Small branch with up to 50 users |
Technical Breakdown
WAN Interface
| MX67 / W | MX67C | MX68 / W | MX68CW |
| 1x Dedicated GbE RJ45 1x Convertible LAN GbERJ45 | 1x Dedicated GbE RJ45 1x Convertible LAN GbERJ45 | 2x Dedicated GbE RJ45 | 2x Dedicated GbE RJ45 |
| Cellular Uplink via 3rd Party USB Modem | Built-in Cellular Uplink or 3rd Party USB Modem | Cellular Uplink via 3rd Party USB Modem | Built-in Cellular Uplink or 3rd Party USB Modem |
LAN Interface
| MX67 / C / W | MX68/ W / CW |
| 3x Dedicated GbE RJ45 | 8x Dedicated GbE RJ45 |
| 1x Convertible LAN/WAN GbE RJ45 | 2x DedicatedGbE RJ45 PoE+ |
802.11 Wireless Interface
| MX67W | MX68W / CW | |
| Radio Information | 802.11a/b/g/n/ac Wave 2 (2.4 or 5Ghz) 2x2 MU-MIMO | 802.11a/b/g/n/ac Wave 2 (2.4 or 5Ghz) 2x2 MU-MIMO |
| Antennas | 2 x 2 MU-MIMO with two spatial streams | 2 x 2 MU-MIMO with two spatial streams |
| Maximum Data Rate | 1.3 Gbps | 1.3 Gbps |
NOTE: The MX68CW has fixed antennas that serve both 802.11 and LTEconnectivity and cannot be removed.
Cellular Interface
When bringing the units online for the very first time, MX67C/68CWunits shouldbe connected via a wired WAN interface to the Meraki Dashboardto retrieve an update to allow for proper use of the integrated cellular connectivity.
| US / North America Bands | Worldwide Bands | |
| HSPA+ | 2, 4, 5 | 1, 3, 5/6, 8 |
| FDD-LTE | 2, 4, 5(*), 12/17, 13, 29 | 1, 3, 7, 8, 20, 26/5,28A, 28B |
| TDD-LTE | - | 34, 39, 40, 41/38 |
| TD-SCDMA Bands | - | 34 (Band A), 39 (Band F) |
| GSM Bands | 850, 900, 1800, 1900 | 900, 1800 |
| CA | 2xDL-CAup to 40Mhz: 2+17, 4+17, 2+29, 4+29, 4+5, 2+5 | 2xDL-CA up to 40Mhz: 3+20, 3+8, 7+20, 1+8, 1+5, 3+5 |
| Certifications | PTCRB (US) | RCM (ANZ, APAC), GCF (EU) |
| Tested Carriers | Verizon, AT&T, Bell Canada, T-Mobile, Telus, Rogers | Orange, Telia, Telecom Italia, Telenor, Telefonica, Post, BT, STC, NTT docomo, Telstra, Optus, Spark NZ, Vodafone NZ, SingTel |
Carrier compatibility is generally based on havingcompatible bands on the modem. In the open market, carriers may only require regulatory domaincertifications and open market certifications, like the PTCRB and GCF, to be compatible for their network.Sometimes carriers will require additional testing before a device can be used on their network.The section Tested Carriers is based on Meraki device certifications being approved by thosespecific carriers. A carrier being listed above means that they have officially certified the Merakiproduct for their cellular network. There maybe many unlisted carriers could be functionally compatible with Meraki devices.The list of tested certified carriers is based on the carrier validating Meraki per their network parameter requirements.If a carrier you are looking to use is not listed above, it could be that they do not require additional compliance testing for their network.
Physical
| MX67 | MX67W | MX67C | MX68 | MX68W | MX68CW | |
| Mount Type | Desktop / Wall Mount | Desktop/ Wall Mount | Desktop/ Wall Mount | Desktop/ Wall Mount | Desktop/ Wall Mount | Desktop/ Wall Mount |
| Dimensions (hx d xw) | 1.1 x5.1 x 9.4 in / 27x130x239 mm | 1.1 x6.5 x 9.4 in / 27 x164 x239 mm | 1.1 x 6.9 x9.4 in / 27 x 176 x239 mm | 1.1 x5.8 x 11.2 in / 27 x148 x284 mm | 1.1 x6.8 x 11.2 in / 27 x172 x284mm | 1.1 x7.0 x11.2 in / 27 x178 x284mm |
| Weight | 1.74 lb / 0.79 kg | 1.84 lb / 0.83 kg | 1.87 lb / 0.85 kg | 2.46 lb / 1.12 kg | 2.55 lb / 1.16 kg | 2.61 lb / 1.18 kg |
| Power Supply | 18W DC | 18W DC | 18W DC | 100W DC | 100W DC | 100W DC |
| Power Load (idle/max) | 5W / 14W | 15W/ 23W | 6W / 17W | 11W / 79W | 19W / 87W | 19W / 89W |
| Operating Temperature | 32°F - 113°F 0°C - 45°C | 32°F - 113°F 0°C - 45°C | 32°F - 113°F 0°C - 45°C | 32°F - 113°F 0°C - 45°C | 32°F - 113°F 0°C - 45°C | 32°F - 113°F 0°C - 45°C |
| Humidity | 5% to 95% | 5% to 95% | 5% to 95% | 5% to 95% | 5% to 95% | 5% to 95% |
Accessories
| Accessory | Description |
| MA-PWR-30WAC | Meraki MX Replacement Power Adapter (MX64, MX67) (30 Watts AC) |
| MA-PWR-90WAC | Meraki MX Replacement Power Adapter (MX65) (90 Watts AC) |
| MA-PWR-100WAC | Meraki MX Replacement Power Adapter (MX68 / 68W / 68CW) (100 Watts AC) |
| MA-ANT-MX | One pair of external dual-band dipole 802.11 antennas for MX64W / 65W / 67W / 68W(Connector type: RP-SMA) |
| MA-PWR-CORD-US | 1x AC Power Cable, US plug |
| MA-PWR-CORD-EU | 1x AC Power Cable, EU plug |
| MA-PWR-CORD-UK | 1x AC Power Cable, UKplug |
| MA-PWR-CORD-AU | 1x AC Power Cable, AU plug |
NOTE:The MX68CW has fixed antennas that serve both 802.11 and LTEconnectivity and cannot be removed.
Warranty
MX Warranty coverage periods are as follows:
| Product | Warranty Period | Warranty Information |
|---|---|---|
| MX67/68 | Lifetime | Full lifetime hardware warranty with next-day advanced replacement included. |
| MX67/68 Accessories | 1 Year | The following are considered accessories: SFP Modules,all mounting kits and stands, interface modules, additional power cords |
Additional warranty information can be found on the Return Policy and Requesting an RMApage of the Cisco Meraki website.
If your Cisco Meraki device fails and the problem cannot be resolved by troubleshooting, contact support to address the issue. Once support determines that the device is in a failed state, they can process an RMA and send out a replacement device free of charge. In most circ*mstances, the RMA will include a pre-paid shipping label so the faulty equipment can be returned.
In order to initiate ahardware replacement for non-functioning hardware that is under warranty, you must have access to the original packaging the hardware was shipped in. The original hardware packaging includes deviceserial number and orderinformation, and may be required for return shipping.
Troubleshooting
Common Troubleshooting Steps
My cellular uplink is stuck at 'Connecting'
Built-in Cellular- Ensure the following:
- The SIM is activated with the PIN disabled or the correct PIN entered. It may be necessaryto use an external modem, or work with the cellular provider to have the PIN disabled or the SIM unlocked.
- There is no external USB modem connectedas the MX willprefer an external USB modem to the internal modem,if available.
- If a custom APN is needed,ensure it is applied from Cellular section of the Uplink tab on the Security & SD-WAN > Monitor > Appliance Status page.
- TheSIM card is fully inserted.
USB Cellular- Ensure the following:
- The USB Modem is activated and able to pass traffic when connected to a PC.
- If a custom APN is needed, ensure it is applied from the Cellular section of Uplink tab on the Security & SD-WAN > Monitor > Appliance Status page.
- It is fully connected and powered on when connected to the MX.
My modem is connected but is getting very poorthroughput
Meraki strongly recommends that the cellular uplink be used on a 4G connection with good signal strength to provide adequate bandwidth to support using the cellular connection as a backup/primaryuplink. If no 4G signal is available or the available signal is low strength, the achievable throughput may not be adequate to fully support a remote site and more restrictive traffic shaping rules should be used to ensure traffic is prioritized appropriately.
Common Event Log Messages
Common event logs exist for wired, WiFi, and cellular events. As such, no specific MX67orMX68event log entries are required at thistime.
For more general information about navigating the Event Log and the types of Events that could be expected please check out our Event Log documentation.
FAQ
Is the MX currently using the Cellular Uplink?
When the MX is using the Cellular Uplink it will display a Purple Status LED instead of the usual White LED.
Is this SD-WAN over LTE?
No.
Can LTEbe used as the primary uplink?
No, LTE is currently only supported as a fail-over link and should only be primary during a temporary WAN failure event.
Note: From MX16.2+ versions, integrated cellular MXs (MX67C and MX68CW only) have a feature available under"SD-WAN &Traffic shaping" page where cellular connection that was previously only enabled as backup can now be configured as an active uplink.
Can I utilize LTE for warm spare configuration?
Yes, LTE issupported in a warm spare configuration when using the embedded cellular modules. In order to support HA, customers must be using firmware MX 14.53, MX 15.42, or MX 16.11 or higher.At this time, if a cellular uplink is used in an HA pair, the following will occur in order:
- Primary MX WAN 1+2 fails > fails over to secondary MX
- Secondary MX WAN 1+2 fails > fails over to primary MX cellular
- Primary MX cellular fails > fails over to secondaryMX cellular
How does LTE work for free trials?
Meraki does not supply SIM cards so while the unit can be trialed,it isup to the end user to procure a working SIM card ona compatible carrier.
Do thesemodels support eSIM capability?
No. Currently, Meraki customers will need to acquire a SIM card from their carrier and install.
Will the LTE devices be available in the USA and Worldwide?
Yes. There will be two models:aNorth American model and aWorldwide model
Should I contact Meraki Supportfor carrier issues?
No, you will need to bring support issues to the carrier for carrier issues.
How do I troubleshoot carrier issues?
The Meraki Dashboard provides the ability to monitor signal strength, performance, and historical traffic for troubleshooting purposes. For additional troubleshooting related to the carrier, the carrier will need to be contacted.
If an external USB cellularmodem and the internalLTE SIM card areboth connected, which one takes precedence?
The external USB cellular modem will take priority over the internal LTE SIM.
Can I change the APN?
Custom APNs can be configuredfrom Cellular section of theUplinktab on theSecurity & SD-WAN > Monitor > Appliance Statuspage.
Can I change the antennas to improve my performance?
The MX68CW has fixed antennas for Wi-Fi and LTE that cannot be swapped. For the MX67C, only Meraki antennas are supported. Replacement antennas will be available for purchase.
If my antennae are lost or damaged, can I use 3rd party antennae that fit on the Meraki device?
Only the Meraki antennae are supported. Lost or malfunctioning antennae can be replaced by contacting Meraki support.
Why are the C and W models in the MX67 series separated whereas the MX68 has CW combined in one model?
The MX68CW provides a high-end option for customers who want all features included in one unit (wireless, high port count, PoE, cellular). The MX67, MX67C, MX67W are for customers who don’t need all features in a single unit.
