Meraki MX67C Operating and maintenance instructions

Meraki MX67C Installation Guide
This document describes how to install and set up the MX67C security appliance. Additional reference
documents are available online at: www.meraki.com/library/products.
MX67C Overview
The Meraki MX67C (model: MX67C-HW-NA & MX67C-HW-WW) is an enterprise security appliance
designed for distributed deployments that require remote administration. It is ideal for network
administrators who demand both ease of deployment and a state-of-the-art feature set. This appliance
provides the following new features:
USB port, to support approved 3G/4G cards for failover to cellular networks.
Support for 10 LAN connections (2 of 10 offer 802.3at support)
Wall screws and anchors for mounting drywall surface, either vertically or horizontally
MX67C Operational Temperature: 32 o F to 104 o F (0 o C to 40 o C)
Package Contents
In addition to the MX67C, the following are provided.
SIM Slot Pin

The MX67C Ports and Connections
USB, Ethernet (LAN/WAN), SIM, K-Lock, Power, Antennas
The MX67C front panel
Ports and Status Indicators
The MX67C uses a single LED to inform the user of the device's status.

Function
LED Status
Meaning
Power Up/Boot
Solid Orange
Power is applied
Connecting
Rainbow
Device in process of connecting to the Meraki Dashboard
Connected
Solid White
Fully operational
Upgrading
Flashing
White
During boot or no WAN link
LTE Enabled
Purple
LTE is on and connected
The MX67C back panel
Additional functions on the back panel are described below, from left to right.
LAN ports
Ten (Ports 3 through 12) provide connectivity to computers, printers, access points, or
Ethernet switches. Two of these ten (Ports 11 and 12) also provide PoE+ (802.3at) support.
Two LEDs -- one for activity, another for connectivity. A steady green LED indicates
bidirectional connectivity while a flashing green LED indicates traffic.
Internet ports
Two ports provide connectivity to the WAN.
Power input
Designed for use only with the unit’s power supply.
Antenna ports
Two RP-SMA ports for dipole antennas (two antennas included)
The MX67C side panel
Restore button
Insert a paper clip if a reset is required.
A brief, momentary press: To delete a downloaded configuration and reboot.
Press and hold for more than 10 sec: To force the unit into a full factory reset.

Kensington
Security Slot
The slot is a portion of the Kensington lock system and is compatible with any Kensington
cable.
USB port
USB 2.0 for 3G/4G wireless cards.
The MX67C bottom panel

Please note that the serial number is located on the product label, which is located on the bottom of the
MX67C. The blank region in the center of the label will be populated with regulatory marks on
commercial units.
Mounting hardware
The supplied wall screws and anchors allow you to mount the appliance on a drywall surface, either
vertically or horizontally. The distance between the holes you drill should be 165 mm.
For mounting on drywall, use a ¼ -in drill bit, then insert the plastic and screw assemblies.
For mounting on wood or a similar surface, use only the screws.
Allow the heads of the screws to stick out far enough to be inserted securely into the back of the
appliance.
This equipment is only suitable for mounting at heights ≤ 2 m
Warning: This equipment may not work when mains power fails.
Connecting to the WAN
All Meraki MX devices must have an IP address. This section describes how to configure your local area
network before you deploy it. A local management web service, running on the appliance, is accessed
through a browser running on a client PC. This web service is used for configuring and monitoring basic
ISP/WAN connectivity.

Setting up a static IP address
To ensure that the client PC is redirected to the local web service in the following step, you must disable
all other network services (e.g., Wi-Fi) on your client machine.
Do the following to configure basic connectivity and other networking parameters:
1. Using a client machine such as a laptop, connect to one of the ten LAN ports of the MX.
2. Using a browser on the client machine, access the appliance's built-in web service by browsing
to http://setup.meraki.com. (You do not have to be connected to the Internet to reach this address)
3. Click Uplink configuration under the Local status tab.
4. Choose Static for the IP Assignment option.
5. Enter the IP address, subnet mask, default gateway IP and DNS server information.
Setting up a DHCP IP address
By default all MX devices are configured to DHCP from upstream WAN / ISP servers. Simply plug one of
the MX's WAN / Internet ports into your upstream circuit and wait a few minutes for the unit to negotiate
a DHCP address.
Icon
When the WAN connection is fully enabled, the Internet 1 or 2 LED 1 will turn green.
Additional settings
Please note that all these settings below are accessible only via the local management console.
Setting VLANs
If your WAN uplink is on a trunk port, choose VLAN tagging > Use VLAN tagging and enter the
appropriate value for VLAN ID for your network.
Setting PPPoE
PPPoE authentication may be required if you are connecting the MX to a DSL circuit. You need to know
your authentication option and credentials (supplied by your ISP) in order to complete these steps.
Choose Connection Type > PPPoE.
Select your Authentication option.
If you select Use authentication, enter appropriate values for Username and Password.

Web proxy settings
These settings take effect if the MX device has to fall back to using HTTP to contact the Cloud Controller.
By default, web proxy is disabled. To enable web proxy, do the following:
Choose Web proxy > Yes.
Enter values as appropriate for Hostname or IP and Port.
If you require authentication, choose Authentication > Use authentication, and enter appropriate
values for Username and Password.
To apply all configuration settings to the appliance, be sure to click Save Settings at the bottom of the
page.
Configuring physical link settings
To configure physical link settings on the Ethernet ports, click Local status > Ethernet configuration.
You can enable half duplex, full duplex, and auto-negotiation, as well as set 10- or 100-Mbps data rates.
Regulatory
FCC Compliance Statement
This device complies with part 15 of the FCC rules. Operation is subject to the following two conditions: (1)
This device may not cause harmful interference, and (2) this device must accept any interference
received, including interference that may cause undesired operation.
Party issuing Supplier’s Declaration of Conformity
Cisco Meraki
500 Terry A. Francois Blvd.
San Francisco, CA
94158
USA
[e-mail]
FCC Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant
to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful interference
to radio communications. However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or television reception, which can
be determined by turning the equipment off and on, the user is encouraged to correct the interference by
one of the following measures:
• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
FCC Caution
Any changes or modifications no expressly approved by Cisco could void the user’s authority to operate
this equipment. This Transmitter must not be co-located or operation in conjunction with any other
antenna or transmitter.
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 22 cm between the radiator
and your body. This transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.
Industry Canada Statement
This MX67C complies with license-exempt RSSs of the Industry Canada Rules. Operation is subject to the
following two conditions: (1) This device may not cause harmful interference, and (2) this device must
accept any interference received, including interference that may cause undesired operation.
Ce dispositif est conforme à la norme RSS d’Industrie Canada applicable aux appareils radio exempts de
licence. Son fonctionnement est sujet aux deux conditions suivantes: (1) le dispositif ne doit pas produire
de brouillage préjudiciable, et (2) ce dispositif doit accepter tout brouillage reçu, y compris un brouillage
susceptible de provoquer un fonctionnement indésirable.
This radio transmitter has been approved by Innovation, Science and Economic Development Canada to
operate with the antenna types listed below, with the maximum permissible gain indicated. Antenna
types not included in this list that have a gain greater than the maximum gain indicated for any type
listed are strictly prohibited for use with this device.
Antenna types: Dipole
Antenna gain (in dBi): 2.72dBi
Innovation, Sciences et Développement économique Canada a approuvé l'utilisation de ce transmetteur
radio avec les types d'antenne énumérés ci-dessous, le gain maximal admissible étant indiqué. Les types
d'antennes non inclus dans cette liste qui ont un gain supérieur au gain maximal indiqué pour tout type
listé sont strictement interdits pour une utilisation avec cet appareil.
Antenna types: Dipole
Antenna gain (in dBi): 2.72dBi

Industry Canada Radiation Exposure Statement
This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 22 cm between the radiator &
your body.
Déclaration d’exposition aux radiations
Cet équipement est conforme aux limites d’exposition aux rayonnements IC établies pour un
environnement non con trôlé. Cet équipement doit être installé et utilisé avec un minimum de 22 cm de
distance entre la source de rayonnement et votre corps.
Taiwan NCC Statement
減少電磁波影響，請妥適使用