Meraki MR16
Dual-Radio 802.11n Access Point

RF Optimization with Spectrum Analysis
Meraki Auto RF is a powerful yet completely automated RF optimization system that delivers hassle-free, high-performance Wi-Fi, even under challenging interference conditions. With Auto RF, every access point on the network continuously and automatically monitors its surroundings for any source of interference that could affect Wi-Fi performance. Interference metrics, including data from a powerful spectrum analyzer built into each Meraki AP, are uploaded to the Cloud Controller. Armed with real-time and historical data, the Cloud Controller continually assesses the health of the entire network, dynamically tuning wireless channel selection, transmit power, and client connection settings to automatically adapt to changing interference conditions. The result is consistent, reliable network performance.

Multi-Radio Mesh
Meraki features self configuring, self-optimizing, and self-healing mesh networking technologies. With advanced link selection metrics, multi-channel routing protocols, automatic failure detection, and per-flow multi-gateway support, Meraki APs support high performance mesh operation. Meraki's mesh extends coverage to hard-to-wire areas and provides resiliency to cable and switch failures.

Client Band Steering
Meraki automatically optimizes RF spectrum utilization with client band steering. 802.11n clients can operate on either 5 GHz or 2.4 GHz, with the former offering a cleaner, less utilized RF spectrum. Meraki's band steering technology automatically "steers" capable clients to 5 GHz, providing a higher-performance wireless connection with less interference and without sacrificing compatibility for legacy clients or imposing burdens on the end user.

High-Density Client Support
Meraki is designed for ultra-high density wireless environments. Meraki access points feature hardware-accelerated security, highly optimized packet processing, and extra memory and CPU resources to deliver consistent, reliable performance in dense, challenging environments.

Network Access Control (NAC)
Meraki NAC provides powerful endpoint compliance assessment and enforcement capabilities without requiring any additional hardware, software, or licenses. Wireless clients are evaluated to determine whether they are protected by antivirus software. Compliant clients are then allowed onto the network while others sent to a quarantine and remediation area. Fine-grained access control policies are enforced via Meraki's integrated policy firewall, enabling identity-based access control policies for network resources. Unlike many NAC solutions, no LAN reconfiguration or integration is required.

Stateful Firewall with User and Group Policies
Meraki's wireless APs feature an integrated stateful policy firewall. This firewall enables powerful security features, including LAN isolation, which blocks clients from accessing internal LAN resources and prevents peer-to-peer traffic — critical for preventing the spread of viruses and worms. Meraki's firewall also provides fine-grained identity-based access control policies. Apply VLAN tags, access restrictions, and bandwidth limits on a per-user or per-group basis. Access control policies are created quickly and easily over the web, even in distributed environments or large-scale campus deployments. Meraki's policy firewall integrates seamlessly with Active Directory and RADIUS environments.

WPA2-Enterprise/802.1X, RADIUS Authentication
Meraki secures enterprise networks with standards-based WPA2 Enterprise security. Integrating with a RADIUS-compatible directory server such as Microsoft Active Directory or LDAP, Meraki enables scalable, fine-grained access control and encryption, enabling users to log in with their unique username and password. Meraki's RADIUS integration also provides advanced capabilities such as distributed authentication testing and group-based access control policies.

Guest Access with LAN Protection
Meraki builds in secure, Internet-only access for guests and visitors. Meraki's stateful firewall protects your network, blocking access to the LAN and preventing the spread of viruses and worms. Guest access can be customized with expiring logins, splash pages, bandwidth limits, adult content filtering and more.

Native Active Directory Integration
Meraki enables users to authenticate natively agains an Active Directory server, without an intermediate RADIUS server. This eliminates the need to configure Microsoft NPS, reducing complexity and speeding deployment. Native AD integration also eliminates RADIUS proxy hierarchies and reduces user error in multi-domain environments by eliminating the need for users to include a domain with their username.

Rogue AP Detection
Meraki provides rich out-of-the-box rogue AP detection, protecting the network from unauthorized wireless access points that may compromise network security. Meraki automatically detects rogue APs, identifying their IP address, VLAN, manufacturer, and model. Rogue detection includes network-wide visualization, email alerts, and reporting.

Teleworker VPN
Securely extend corporate network resources to teleworkers' wireless and wired clients with built-in VPN. Provide secure access to file shares, IP PBX systems, and internal applications. Connect VoIP phones from home offices, wirelessly or with an accessory Ethernet port. Enforce policies at the teleworker edge, and secure traffic with IPsec VPN technology. Meraki's VMWare-based virtual concentrator appliance eliminates the cost and complexity of hardware controllers or concentrators.

Layer 7 Application QoS
Limit BitTorrent, gaming, and other recreational traffic while prioritizing business-critical apps, voice, and video with Meraki's integrated layer 7 application traffic shaping. Meraki wireless APs feature an integrated traffic analysis and QoS engine. Layer 7 fingerprinting technology goes beyond simple hostnames and ports, identifying evasive, encrypted and encapsulated applications including P2P. Prevent recreational applications from wasting bandwidth, throttle background traffic such as software updates, and improve the user experience of real-time apps. Cloud-based application signatures are always up to date, accurately identifying hundreds of applications automatically.

Client Location Services
Meraki's Client Location Services allow administrators to accurately locate wireless clients quickly and easily on a custom floor plan or map without requiring any additional hardware, software, or licenses. Client Location Services operates by intelligently triangulating client location using the signal strength of multiple access points that "see" the client. Location can be determined with as few as three access points, making Client Location Services equally suited to small branches and large campuses. Advanced triangulation techniques employ calibrated weighted averages and AP selection algorithms to ensure accuracy. Non-WiFi clients can also be tracked with Meraki Enterprise networks in conjunction with 3rd party asset tag tracking solutions from Meraki technology partners such as Ekahau Real-Time Location Services.

Splash Pages, Walled Garden
Meraki includes easy-to-deploy splash page support, wherein clients are shown a particular web page before clicking through (or authenticating) to access the network. Meraki includes pre-built splash pages that can be completely customized. Meraki also supports walled gardens, enabling unauthenticated users to access a set of resources before authenticating.

Layer 7 User Fingerprinting
Meraki's layer 7 traffic inspection engine gleans identifying information from clients as they use the network, detecting username, operating system, device type, etc. This data is logged in a secure cloud-hosted database, enabling network administrators to look up clients easily with a Google-like search interface. Simply search for "Joe's iPad" to find a particular device, which then can be analyzed, troubleshooted, and controlled.

Adult Content Filtering
Meraki's wireless LAN includes a DNS-based adult content filter. Enabled with a single click, this filter is ideal for blocking objectionable content on guest networks. Fine-grained CIPA-compliant content filtering is available via Meraki's MX-series router/firewall product line.

User and Group Bandwidth Controls
Easily set per-user bandwidth limits with a simple drag of a slider, preventing a single client from hogging the network. When used with Meraki's group policy firewall, bandwidth limits are automatically assigned based on a user's identity, enforcing different bandwidth limits for different classes of users.

Zero-Touch AP Provisioning
When first connected, Meraki APs automatically establish a secure connection to the Meraki Cloud Controller, from which they pull their configuration, optimize for RF performance, and begin to operate. Meraki APs can be deployed with zero manual configuration. Deploy large networks quickly and cost effectively, and extend coverage to remote branches without on-site IT.

Multi-Site Management
Meraki's Cloud Controller is ideal for distributed deployments. Centrally manage dozens, hundreds, and even thousands of branches, right out of the box. Rapidly deploy new sites without on-premise IT. Push configuration changes and policies across any number of branches with a single click. Purpose-built tools make managing distributed networks a breeze.

Seamless Firmware Updates
Firmware updates are delivered seamlessly from the cloud. When firmware updates are available, an administrator simply schedules an appropriate time for APs to download and install the new version. The APs automatically verify successful installation, and they simply fall back to their previous version if an error is found. This eliminates compatibility matrices, insecure and out of date firmware, and time consuming manual updates in both campus and distributed branch deployments.

Monitoring and Alerts
Meraki APs are automatically monitored 24x7 from the cloud. Should an issue arise - including upstream network failures like cut cables, switch failures, ISP outages, etc - the Cloud Controller will alert administrators of the issue, which can be diagnosed via the Cloud Controller's powerful remote tools.

Real-Time Remote Diagnostic Tools
Meraki provides real-time visibility and control via the web, from client usage and signal strength, to WAN health tests and spectrum analysis. Operating over Meraki's real-time tunnel to the cloud, remote tools provide responsive, feature rich network management with the simplicity of a web browser, eliminating ssh tunnels, serial cables, and airplane trips to troubleshoot remote branches.

Searchable Event Log
Meraki's event log captures fine-grained network events (802.11, WPA, 802.1X, DHCP, ARP, DNS, etc.) in a secure, cloud-based database. Indexed for rapid search, this event log provides powerful troubleshooting and analysis capabilities, even in remote sites or large-scale deployments.

Summary Reports
In addition to powering rich real-time diagnostics and search, Meraki assembles network usage into an insightful report. Identify application usage, problematic clients, and hotspots. Understand device trends, including iPad, smartphone, and other device usage. Demonstrate the success of the wireless investment and monitor change over time.

VPN Tunnel Establishment
When deployed in a teleworker VPN configuration, Meraki APs utilize the cloud to automatically discover the concentrator at HQ, to traverse firewalls and NATs, and to negotiate sessions. VPN sessions therefore require zero configuration — a true plug and play experience for end users and IT administrators alike.