cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

MX Series and Gig Home Office Network

Highlighted
Here to help

MX Series and Gig Home Office Network

When will Meraki build a Home Office tier security router that won't cripple a Gig Internet connection when SPI is enabled?

13 REPLIES 13
Highlighted
Getting noticed

Re: MX Series and Gig Home Office Network

As an aside, I'm not sure there's anything that can be disabled to make the MX67/68 push a gigabit. It seems like the appliance is inherently limited at the rated throughput.

Highlighted
Kind of a big deal

Re: MX Series and Gig Home Office Network

The MX67 is the closest and is software limited to 450Mb/s.  It can deliver 450Mb/s with everything enabled.

Highlighted
Getting noticed

Re: MX Series and Gig Home Office Network

Where Can I see the ability to handle traffic regarding the feautures that I have enabled in my MX?

Regards,
Highlighted
Getting noticed

Re: MX Series and Gig Home Office Network

The MX Sizing Guide is the best reference for this info: https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mx_sizing_guide.pdf

I've found that the "Max Stateful (L3) firewall throughput in NAT mode " number to be an extremely accurate top limit of the best throughput you'll ever see out the WAN side of the MX.

Meanwhile, the "max throughput with all features enabled" is a bit pessimistic. In the real world I usually see it performing closer to the former number than the latter number.
Highlighted
Kind of a big deal

Re: MX Series and Gig Home Office Network

The reality is that for many domestic installations, another router/security appliance has to be placed ahead of the MX to handle such commonly used services as multicast IPTV and true IPv6. Effectively this diverts some of the used bandwidth away from the MX, which means the under-capacity is less obvious in practice than it is in theory.🤓

Robin St.Clair | Principal, Caithness Analytics | @uberseehandel
Highlighted
Head in the Cloud

Re: MX Series and Gig Home Office Network

If you have disabled the advanced security features (AMP and IPS) you still have to make sure your uplink speed is set correctly in the traffic shaping page.

If that parameter is set lower to your actual max bandwidth your MX will enforce the configured speed by shaping to it.  That's how the MX can correctly calculate bandwidth for it's CBWFQ config.

Highlighted
Getting noticed

Re: MX Series and Gig Home Office Network

Unfortunately you can't set the max bandwidth above the rated bandwidth of the appliance. With a gigabit circuit I never saw more than about 460-470mbit out of my MX68.
Highlighted
Here to help

Re: MX Series and Gig Home Office Network

Hope there will be something like a MX69 which will support for 1Gig WAN with full IPv6 and maybe a fiber sfp for internet uplink 🙂

 

As a MX250 is way too expensive for my home setup, while there is a need for these high download and upload speeds..

Highlighted
Here to help

Re: MX Series and Gig Home Office Network

Agreed, an MX250 is way overkill feature wise for a home network as well...we just need a simple, even a new 70 series, that would address at least 1 Gig WAN w/SFP and stateful firewall...the rest of the stuff could fall in line feature wise with the rest of portfolio

Highlighted
Here to help

Re: MX Series and Gig Home Office Network

Looking at something like the Firewalla Pro that is plastered all over my Facebook timeline, it claims to do 3 Gbps with DPI/Stateful inspection...I feel like this shouldn't be a huge hurdle to get into the product as a baseline feature...I realize it probably requires a HW respin of some sort, but Meraki is falling behind in the MVO feature list for HO/SMB devices, and the coming ubiquity of Gig internet connections...

Highlighted
Getting noticed

Re: MX Series and Gig Home Office Network

I've had a similar problem for a client. 


We have put in a full stack at both his delis and loves the dashboard (albeit read only). All the till guys said that a site-to-site VPN would never work (to link the pricing etc between the venues) -but it did just work!

 

We wanted to put in an MX and also MS/MR into his house so that he could update the tills without the need for RDP and generally improve his home network. The problem was he has 1Gbps up and down at home and laughed when I said it was only the MX250 that could supply the speed. Even suggested perhaps MX100. No idea why he needs 1Gbps, but that's another story. 

 

We have ended up ordering a Z3 for him at home and the desktop used for RDP will simply be plugged into that and used to connect to the two sites. The downside for us (and Meraki) is that we could have another full stack order. 

Highlighted
Getting noticed

Re: MX Series and Gig Home Office Network

Honestly I would be totally happy with just being to get 1gbit symmetric NAT/L3 FW performance, and accept the tradeoff that the speeds are the currently quoted MX67/68 speeds if I turn on IDS, AMP, or use site to site VPN. It's understandable why the latter features require significant computational power in order to reliably push 1gbit, but 1gbit NAT is something easily achievable on the ARM chips that are used for the MX67/68 -- in fact, there are plenty of pro-sumer products that can do this.

 

At-home use cases for 1gbit are almost always about download speeds. It is the difference between a Windows 10 installer downloading in 2 minutes or 5 minutes. Or a Xbox video game title downloading in 10 minutes vs 20 minutes. That's something that consumers appreciate, especially when in a lot of places, fiber to the premise gigabit is being offered at a lower monthly price than 100-200mbit cable internet.

Highlighted
Here to help

Re: MX Series and Gig Home Office Network

Just for visual reference 😉 

20200429_131356.jpg

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.