Cisco Meraki MS210-24
Cloud Managed Switching for the Branch

Features:

Meraki switches include all of the traditional Ethernet features found in modern enterprise access switches, including:

Branch & Campus Access

• Physical stacking with support for up to 8 stack members for built-in redundancy, performance, and access to 10Gbps uplinks when stacked with an MS225 switch
• Quality-of-Service (QoS) to prioritize mission critical traffic such as voice and video
• Voice VLAN support for simplified VoIP deployments
• CDP, LLDP advertisement and snooping, with detailed neighbor discovery and visibility
• Port Mirroring support for monitoring network traffic at line rate
• IGMP Snooping to optimize network performance for multicast applications
• Link Aggregation Control Protocol (LACP) for high-capacity trunking, with Multichassis (MLAG) support on stacked switches

---

Network Security

• IEEE 802.1X, MAB, and Hybrid authentication support for wired access control with RADIUS server monitoring
• Port security and MAC whitelisting
• Change of Authorization (CoA) and RADIUS accounting support
• DHCP snooping to prevent users from adding unauthorised DHCP servers on the network
• Rapid spanning tree, BPDU guard, root guard, and other safeguards to help prevent misconfigurations and reduce convergence time
• Per port VLAN configuration
• Multiple administrative roles with sophisticated security policy management

---

Network Troubleshooting & Automation

• Virtual Stacking lets administators manage up to thousands of ports in a single interface without having to physically connect stack members
• Configuration templates for rapid, zero-touch provisioning and auditing of all sites
• Network Topology for automatic and interactive network mapping
• Remote cable testing, packet capture and client discovery
• Automatic and scheduled firmware upgrades for the complete network

---

Converged Voice, Video and Data Environments

The Meraki switch family is designed to unify data, voice, and video onto a single IP backbone. All Meraki switches support rich qualityof-service (QoS) functionality for prioritizing data, voice, and video traffic. The switches support eight class-of-service (CoS) queues on every port, enabling them to maintain end-to-end traffic prioritization.

PoE models provide power VoIP telephones, IP security cameras, wireless access points (APs), and other IP devices. In addition, using CDP and LLDP, PoE power is intelligently budgeted to maximize the number of PoE clients supported. For the most power-hungry applications, support for Cisco UPoE is also available. The Meraki MC products work flawlessly with Meraki switches, and create a unique and powerful experience to installing, supporting and troubleshooting VoIP technology

---

Application Layer Visibility

Meraki is the only switch to include integrated Layer 7 fingerprinting. Identify hundreds of applications from business apps to BitTorrent and YouTube. User fingerprinting with Google-like search allows administrators to easily identify and control individual users, PCs, iMacs, iPads, Androids, and other devices. This unprecedented visibility allows optimizing of network resources and maintaining optimal network performance.

---

Unified Software Architecture

Meraki switches run the same Meraki operating system used by all of Meraki's products. The use of a common operating system allows Meraki to deliver a consistent experience across all product lines. When connected, MS210 switches automatically connect to the Meraki cloud, download configuration, and join the appropriate network. If new firmware is required, this is retrieved by the switch and updated automatically. This ensures the network is kept up-todate with bug fixes, security updates, and new features.

Troubleshooting

Packet capture

Run a packet capture on this port

---

Cable test

Run a cable test on this port
Warning: This test will disrupt traffic to 100 or 10Mbit devices

---

Cycle port

Disable and re-enable this port
Warning: PoE powered devices will be temporarily powered down

---

Simplified Management and Operations

---

Designed for Reliability & Environmental Efficiency

The Meraki switch family was designed for reliable, long-lived operation in wiring closet environments, which may be prone to high temperatures and limited ventilation. By minimizing total component count and only using proven switching silicon, Meraki is able to deliver highly reliable products with exceptional mean time between failure (MTBF) ratings.

Each Meraki switch also operates with a split-plane architecture, where silicon-based switching and data forwarding are separated from software-based control and management. By decoupling the underlying switching logic from control, each unit is able to deliver wire-speed switching even when advanced software features such as Layer 7 host and OS fingerprinting are enabled.

Finally, the highly integrated designs of Meraki switches result in power and cooling savings in large deployment environments of 30-60% when compared with similar managed Gigabit switches.

---

Cloud Management:

Cisco Meraki's cloud based management provides centralized visibility & control over Cisco Meraki's wired & wireless networking hardware, without the cost and complexity of wireless controllers or overlay management systems. Integrated with Cisco Meraki's entire product portfolio, cloud management provides feature rich, scalable, and intuitive centralized management for networks of any size.

Highlights

• Unified visibility and control of the entire network via a single dashboard: wireless, switching, and security appliances
• Streamlines large networks with tens of thousands of endpoints
• Zero-touch provisioning for rapid deployment
• Built-in multi site network management tools
• Automated network monitoring and alerts
• Intuitive interface eliminates costly training or added staff
• Network tagging engine - search and sync settings by tag
• Role-based administration and auditable change logs
• Continuous feature updates delivered from the cloud
• Highly available and secure (PCI / HIPAA compliant)

Cloud Managed Networks

Cisco Meraki's hardware products are built from the ground up for cloud management. As a result, they come out of the box with centralized control, layer 7 device and application visibility, real time web-based diagnostics, monitoring, reporting, and much more.

Cisco Meraki networks deploy quickly and easily, without training or dedicated staff. Moreover, Cisco Meraki provides a rich feature set that provides complete control over devices, users, and applications, allowing for flexible access policies and rich security without added cost or complexity.

Cisco Meraki's cloud management provides the features, security, and scalability for networks of any size. Cisco Meraki scales from small sites to campuses, and even distributed networks with thousands of sites. Cisco Meraki devices, which self-provision via the cloud, can be deployed in branches without IT. Firmware and security signature updates are delivered seamlessly, over the web. With the cloud, branches can automatically establish secure VPN tunnels between one another with a single click.

With a secure, PCI and HIPAA compliant architecture and fault tolerant design that preserves local network functionality during WAN outages, Cisco Meraki is field proven in high security and mission critical network applications.

Cloud Management Architecture

Cisco Meraki's architecture provides feature rich network management without on-site management appliances or WiFi controllers.

Every Cisco Meraki device - including wirelesss access points, Ethernet switches, and security appliances - connects over the Internet to Cisco Meraki's datacenters, which run Cisco Meraki's cloud management platform. These connections, secured via SSL, utilize a patented protocol that provides real time visibility and control, yet uses minimal bandwidth overhead (typically 1 kbps or less.)

In place of traditional command-line based network configuration, Cisco Meraki provides a rich web based dashboard, providing visibility and control over up to tens of thousands of Cisco Meraki devices, anywhere in the world. Tools, designed to scale to large and distributed networks, make policy changes, firmware updates, deploying new branches, etc. simple and expedient, regardless of size or location. Cisco Meraki's real time protocols combine the immediacy of on-premise management applications with the simplicity and centralized control of a cloud application.

Every Cisco Meraki device is engineered for cloud management. Specifically, this means that Cisco Meraki devices are designed with memory and CPU resources to perform packet processing, QoS, layer 3-7 security, encryption, etc. at the network edge. As a result, no network traffic passes through the cloud, with the cloud providing management functionality out of the data path. This architecture enables networks to scale horizontally, adding capacity simply by adding more endpoints, without concern for centralized bottlenecks or chokepoints. Equally important, since all packet processing is performed on premise, end-user functionality is not compromised if the network's connection to the cloud is interrupted.

Cisco Meraki's cloud platform is designed to spread computation and storage across independent server clusters in geographically isolated datacenters. Any server or datacenter can fail without affecting customers or the rest of the system. Additionally, Cisco Meraki's datacenter design is field proven to support tens of thousands of endpoints.

Cloud Management Architecture

Powerful Insight and Troubleshooting Tools

Cisco Meraki's cloud architecture delivers powerful insight and includes live tools integrated directly into the dashboard, giving instant analysis of performance, connectivity, and more. Using live tools, network administrators no longer need to go on site to perform routine troubleshooting tests. Visibility into devices, users, and applications gives administrators the information needed to enforce security policies and enable the performance needed in today's demanding network environments.

Troubleshooting tools such as ping, traceroute, throughput, and even live packet captures are integrated directly into the Cisco Meraki dashboard, dramatically reducing resolution times and enabling troubleshooting at remote locations without on-site IT staff.

Layer 7 application visibility

Out-of-Band Control Plane

Cisco Meraki's out-of-band control plane separates network management data from user data. Management data (e.g., configuration, statistics, monitoring, etc.) flows from Cisco Meraki devices (wireless access points, switches, and security appliances) to Cisco Meraki's cloud over a secure Internet connection. User data (web browsing, internal applications, etc.) does not flow through the cloud, instead flowing directly to its destination on the LAN or across the WAN.

Advantages of an out of band control plane:

Scalability

• Unlimited throughput: no centralized controller bottlenecks
• Add devices or sites without MPLS tunnels
• Add switching capacity without stacking limitations

Reliability

• Redundant cloud service provides high availability
• Network functions even if management traffic is interrupted

Security

• No user traffic passes through Cisco Meraki's datacenters
• Fully HIPAA / PCI compliant

What happens if a network loses connectivity to the Cisco Meraki cloud?
Because of Cisco Meraki's out of band architecture, most end users are not affected if Cisco Meraki wireless APs, switches, or security appliances cannot communicate with Cisco Meraki's cloud services (e.g., because of a temporary WAN failure):

• Users can access the local network (printers, file shares, etc.)
• If WAN connectivity is available, users can access the Internet
• Network policies (firewall rules, QoS, etc.) continue to be enforced
• Users can authenticate via 802.1X/RADIUS and can roam wirelessly between access points
• Users can initiate and renew DHCP leases
• Established VPN tunnels continue to operate
• Local configuration tools are available (e.g., device IP configuration)

While Cisco Meraki's cloud is unreachable, management, monitoring, and hosted services are temporarily unavailable:

• Configuration and diagnostic tools are unavailable
• Usage statistics are stored locally until the connection to the cloud is re-established, at which time they are pushed to the cloud
• Splash pages and related functionality are unavailable

Cisco Meraki Datacenter Design

Cisco Meraki's cloud management service is colocated in tier-1, SAS70 type II certified datacenters. These datacenters feature state of the art physical and cyber security and highly reliable designs. All Cisco Meraki services are replicated across multiple independent datacenters, so that customer-facing services fail over rapidly in the event of a catastrophic datacenter failure.

Security Tools for Administrators

In addition to Cisco Meraki's secure out-of-band architecture and hardened datacenters, Cisco Meraki provides a number of tools for administrators to maximize the security of their network deployments. These tools provide optimal protection, visibility, and control over your Cisco Meraki network.

Two-factor authentication
Two-factor authentication adds an extra layer of security to an organization's network by requiring access to an administrator's phone, in addition to her username and password, in order to log in to Cisco Meraki's cloud services. Cisco Meraki's two factor authentication implementation uses secure, convenient, and cost effective SMS technology: after entering their username and password, an administrator is sent an a one-time passcode via SMS, which they must enter before authentication is complete. In the event that a hacker guesses or learns an administrator's password, she still will not be able to access the organization's account, as the hacker does not have the administrator's phone. Cisco Meraki includes two-factor authentication for all enterprise users at no additional cost.

Password policies
Organization-wide security policies for Cisco Meraki accounts help protect access to the Cisco Meraki dashboard. These tools allow administrators to:

• Force periodic password changes (e.g., every 90 days)
• Require minimum password length and complexity
• Lock users out after repeated failed login attempts
• Disallow password reuse
• Restrict logins by IP address

Role-based administration
Role-based administration lets supervisors appoint administrators for specific subsets of an organization, and specify whether they have read-only access to reports and troubleshooting tools, administer managed guest access, or can make configuration changes to the network. This minimizes the chance of accidental or malicious misconfiguration, and restricts errors to isolated parts of the network.

Configuration change alerts
The Cisco Meraki system can automatically send human-readable email and text message alerts when configuration changes are made, enabling the entire IT organization to stay abreast of new policies. Change alerts are particularly important with large or distributed IT organizations.

Configuration and login audits
Cisco Meraki logs the time, IP, and approximate location (city, state) of logged in administrators. A searchable configuration change log indicates what configuration changes were made, who they were made by, and which part of the organization the change occurred in.

SSL certificates
Cisco Meraki accounts can only be accessed via https, ensuring that all communication between an administrator's browser and Cisco Meraki's cloud services is encrypted.

Idle Timeout
30 seconds before being logged out, users are shown a notice that allows them to extend their session. Once time expires, users are asked to log in again.

Specifications:

• Interfaces
  • 24 × 10/100/1000BASE-T Ethernet (RJ45) with auto-MDIX crossover
  • 802.3af/802.3at Power-over-Ethernet (PoE/PoE+) on MS210-24P, available on all ports (maximum of 30W per port for PoE+)
  • 4 × 1GbE SFP interfaces for uplink
  • 2 × Stacking interfaces
  • Auto negotiation and crossover detection
• Management
  • Managed via the cloud using the Meraki dashboard
  • Integrated with Meraki Wireless and complete portfolio of IT products and solutions
  • No-touch remote deployment (no staging needed)
  • Detailed historical per-port and per-client usage statistics
  • DHCP, client, and hostname fingerprinting
  • SNMPd and SYSLOG support for integration with other network management solutions
  • Seamless over-the-web firmware upgrades with scheduling & control
• Remote diagnostics
  • Email, SMS and Mobile push notification alerts
  • Cable testing and link failure detection with alerting
  • Live remote packet capture
  • Dynamic and interactive network discovery and topology
  • Aggregated event logs with instant search
• Flexible stacking
  • Physical stacking of up to 8 switches with 80 Gbps stack bandwidth on all models
  • Virtual stacking supports thousands of switch ports in a single logical stack for unified management, monitoring, and configuration
• Ethernet switching capabilities
  • 802.1p Quality of Service prioritization
  • 802.1Q VLAN tagging with 4,095 addressable tags
  • 802.1w, 802.1D Rapid Spanning Tree Protocol (RSTP, STP)
  • Broadcast storm control
  • 802.1ab Link Layer Discovery Protocol (LLDP) and Cisco Discovery Protocol (CDP)
  • 802.3ad link aggregation with up to 8 ports per aggregate, Multichassis aggregates supported on stacked switches
  • IGMP snooping for multicast filtering
  • MAC forwarding entries: 16K on 24-port models, 32K on 48-port models
• Security
  • Integrated two-factor authentication for Dashboard management
  • Role-based access control (RBAC) with granular device and configuration control
  • Corporate wide password policy enforcement
  • IEEE 802.1X RADIUS, hybrid authentication and RADIUS server testing
  • MAC-based RADIUS authentication (MAB)
  • Port security: Sticky MAC, MAC whitelisting
  • DHCP snooping, detection and blocking
  • STP Enhancements: BPDU guard, Root guard
  • IPv4 ACLs
• Power over Ethernet:
  • 802.3af (PoE) 15.4 W per port and 802.3at (PoE+) 30 W per port
  • Maximum PoE output (24P): 370 W
  • PoE available on all ports simultaneously

• Performance
  • Non-blocking switching fabric
  • Switching capacity: 128Gbps (24-port models), 176Gbps (48-port models)
  • Forwarding rate (mpps): 41.67 (24-port models), 77.38 (48-port models)
  • Jumbo Frame Support (9578 byte Ethernet frame)
  • Flow control support
• Layer 3
  • Static Routing (maximum of 16 static routes supported)
  • DHCP Relay
• Power
  • Power input: 100 - 240 VAC, 47-63 Hz
  • Power consumption: 15 - 448 W
  • RPS interface: Requires RPS-2300 chassis, see Cisco RPS-2300 Datasheet for further information
• Mounting
  • 1U Rack-mountable with included rack mount hardware
  • 2-post front mounting options available
  • Desktop-mountable with included feet
• Environment
  • Operating temperature: 32°F to 104°F (0°C to 40°C)
  • Humidity: 5 to 95% non-condensing
  • MS225-24, MS225-48 feature fanless operation
• Regulatory
  • CSA-US (US, Canada)
  • FCC (USA)
  • IC (Canada)
  • CE (Europe)
  • RCM (Australia/New Zealand)
  • RoHS
• Warranty
  • Full lifetime hardware warranty with next-day advanced replacement included
• MTBF at 25°C
  • MS210-24: 590,165
  • MS210-24P: 391,648
• Physical dimensions (H×W×D)
  • MS210-24: 1.72 x 19.08 x 9.84"(4.38 x 48.46 x 25cm)
  • MS210-24P: 1.72 x 19.08 x 9.84"(4.38 x 48.46 x 25cm)
• Physical Weight
  • MS210-24: 6.03 lb (2.73 kg)
  • MS210-24P: 8.18 lb (3.71 kg)

Accessories:

Optics

The Cisco Meraki MS support pluggable optics for high-speed connectivity. Cisco Meraki offers several standards-based Gigabit and 10 Gigabit pluggable modules.

Model	Description	Standard	Range	Compatibility
MA-SFP-1GB-TX	Cisco Meraki 1GbE Module for Category 5 Copper Wire, RJ-45	1000BASE-T	100m	MS220/320/420 Family
MA-SFP-1GB-SX	Cisco Meraki 1 GbE SFP SX Multi-Mode Fiber Module	1000BASE-SX	550m	MS220/320/420 Family
MA-SFP-1GB-LX10	Cisco Meraki 1 GbE SFP LX10 Single-Mode Fiber Module	1000BASE-LX10	10km	MS220/320/420 Family

Note: Cisco Meraki SFPs use LC connectors. Cisco Meraki does not guarantee third-party optic and support

Power Options

Back end of MS320-24P shown, highlighting redundant power supplies

MS220 Family
Model	Description	Available PoE / PoE+ Power	Default Power Supply	Optional Redundant Power Supply
MS220-8-HW	Cloud-Managed L2 8 Port Gigabit Switch	-	Internal	-
MS220-8P-HW	Cloud-Managed L2 8 Port Gigabit 124W PoE Switch	124W	Internal	-
MS210-24-HW	Cloud-Managed L2 24 Port Gigabit Switch	-	Internal	External Redundant Power Option
MS210-24P-HW	Cloud-Managed L2 24 Port Gigabit 370W PoE Switch	370W	Internal	External Redundant Power Option
MS220-48-HW	Cloud-Managed L2 24 Port Gigabit 370W PoE Switch	-	Internal	External Redundant Power Option
MS220-48LP-HW	Cloud-Managed L2 48 Port Gigabit 370W PoE Switch	370W	Internal	External Redundant Power Option
MS220-48FP-HW	Cloud-Managed L2 48 Port Gigabit 740W PoE Switch	740W	Internal	External Redundant Power Option

MS Family Switches Compare:

Access and Aggregation Switches for Any Environment

	MS120 Series	MS210 Series	MS225 Series	MS250 Series	MS350 Series
Deployment Scenarios
Recommended For
	Branch/basic access Secure LAN connectivity Layer 2 access switching	Branch/basic access Secure LAN connectivity Basic layer 3 connectivity	Branch/basic access Secure LAN connectivity Basic layer 3 connectivity	General purpose deployments Secure LAN connectivity Basic voice and video, internet browsing Hardware options for redundancy Layer 3 access switching	High-performance networks with hardware options for redundancy High-density wireless deployments Secure LAN connectivity Media-rich and high-bandwidth applications Wireless-first office environments Multigigabit and UPoE options Layer 3 access switching
Hardware Configuration
Interfaces
	24 / 48 × gigabit ethernet	24 / 48 × gigabit ethernet 2 × stacking ports 1 × management port with auto-MDIX	24 / 48 × gigabit ethernet 2 × stacking ports 1 × management port with auto-MDIX	24 / 48 × gigabit ethernet 2 × stacking ports 1 × management port with auto-MDIX	24 / 48 × gigabit ethernet 8 × multigigabit ethernet (24X only) 2 × stacking ports 1 × management port with auto-MDIX
Uplinks
	4 × 1G (SFP) uplinks, dedicated	4 × 1G (SFP) uplinks, dedicated	4 × 10G (SFP+) uplinks, dedicated	4 × 10G (SFP+) uplinks, dedicated	4 × 10G (SFP+) uplinks, dedicated
Stacking
	Virtual only	80G (2 × 40G) MS225 compatible Virtual	80G (2 × 40G) Virtual	80G (2 × 40G) Virtual	160G (2 × 80G) Virtual
Power Configuration
	Internal	Internal RPS Supported* *Cisco RPS-2300	Internal RPS Supported* *Cisco RPS-2300	Removable PSU* Field Replaceable 24/48: 250W PSU 24P/48LP: 640W PSU 48FP: 1025W PSU *Redundant PSU sold separately	Removable PSU* Field Replaceable 24/48: 250W PSU 24P/48LP: 640W PSU 48FP/24X: 1025W PSU *Redundant PSU sold separately
Available POE Power
	24P: 370W (PoE, PoE+) 48LP: 370W (PoE, PoE+)	24P: 370W (PoE, PoE+) 48LP: 370W (PoE, PoE+) 48FP: 740W (PoE, PoE+)	24P: 370W (PoE, PoE+) 48LP: 370W (PoE, PoE+) 48FP: 740W (PoE, PoE+)	24P: 370W (PoE, PoE+) 48LP: 370W (PoE, PoE+) 48FP: 740W (PoE, PoE+)	24P: 370W (PoE, PoE+) 24X: 740W (PoE, PoE+, UPoE) 48LP: 370W (PoE, PoE+) 48FP: 740W (PoE, PoE+)
Switching Performance
Switching Capacity
	MS120-24: 56Gbps MS120-48: 104Gbps	MS210-24: 56Gbps MS210-48: 104Gbps	MS225-24: 128Gbps MS225-48: 176Gbps	MS250-24: 128Gbps MS250-48: 176Gbps	MS350-24: 128Gbps MS350-24X: 272Gbps MS350-48: 176Gbps
Forwarding Rate
	MS120-24: 41.67Mpps MS120-48: 77.38Mpps	MS210-24: 41.67Mpps MS210-48: 77.38Mpps	MS225-24: 92.24Mpps MS225-48: 127.98Mpps	MS250-24: 92.24Mpps MS250-48: 127.98Mpps	MS350-24: 95.24Mpps MS350-24X: 202.3Mpps MS350-48: 127.98Mpps
MAC Entries
	MS120-24: 16K entries MS120-48: 32K entries	MS210-24: 16K entries MS210-48: 32K entries	MS225-24: 16K entries MS225-48: 32K entries	MS250-24: 16K entries MS250-48: 32K entries	MS350-24: 96K entries MS350-24X: 512K entries MS350-48: 96K entries
Stacking Bandwith
	—	80G bi-directional	80G bi-directional	80G bi-directional	160G bi-directional
Routing Performance & Scalability
Routing Features
	DHCP Relay	Static routing only DHCP Relay	Static routing only DHCP Relay	Static + Dynamic routing DHCP Server + DHCP Relay Warm spare (VRRP)	Static + Dynamic routing DHCP Server + DHCP Relay Warm spare (VRRP)
Routed Interfaces
	—	16	16	1024	8K 16K (MS350-24X only)
Routed Hosts
	—	4096	4096	4096	96K 512K (MS350-24X only)

Documentation:

Download the Cisco Meraki MS210 Series Datasheet (PDF).

Download the Cisco Meraki MS Family Datasheet (PDF).

Download the Cisco Meraki Cloud Management Datasheet (PDF).