I am getting a new 1Gbps fiber connection and will be connecting it to a new MX85.
I will have a normal full stack Meraki LAN with maybe 10-12 APs behind the MX's Advanced Security License.
However, the MX85 only does Adv Sec to LAN at 500Mbit. So that leaves 500Mbit on the table. Is there a way to designate a single or multiple LAN ports on the MX as "non advanced security" ports that draw on the full 1Gbps capacity if I want to do a fast download or upload using a "secure enough" device?
My ISP says they can also just give me another ethernet cable that uses the same bandwidth but if possible I though this might be cleaner.
No - I'm afraid you can't be selective about how Advanced Security features are applied to different ports. From a security perspective, I'm not sure that's a great idea anyway. If you need more throughput, better to get a more powerful MX, I'd have thought..?
The rest of my network will be just fine with 500mbit. It’s really going to be for the one off situations where i need a lot of bandwidth. I’ll just use the extra Ethernet from the isp
Oh and as an aside I would be more than happy to buy a bigger MX. I love Meraki gear but its easy to come across bandwidth these days but harder to find an MX that can take advantage of it at a reasonable cost. Im not some industry pro but Im wondering if you know how much it costs to take advantage of a 1Gbps line using your gear with adv security? From what I can see, its the MX95 which, out the door with a 3 year adv sec license can be yours for only.... $17,000 US MSRP.
would that give me more bandwidth on certain clients listed under the policy? what does that give me?
@RumorConsumer as far as I know the only hard bandwidth limits are the stateful firewall throughput and VPN one - i.e. 1Gbps and 500Mbps for the MX85. The advanced throughput is an expected level of performance, though it is actually 750Mbps according to the datasheet:
Oh interesting. This document seems to suggest that with security options it will drop to 500Mbit:
How should we interpret the disparity?
Plus, I am going to have a paltry 20 users max all doing relatively little. I need the bandwidth for my own mad science. Is it likely I will see better performance w adv security with such little user weight?
whats the MX68 uplift? are they finding more headroom for performance? any links?
Oh wow. Thats cool. I have a 68 currently that these very 0s and 1s are traveling through.
@Ryan_Miles any info on whether MX85 got a similar treatment or what kind of adv sec performance I *might* see given that Ill mostly have barely any traffic on this 1Gbps line with adv sec on? Do you think Id see more than 750?