Cisco Meraki MR36H Full English Description

Listing Title

Full Commercial Product Description

1. Dedicated Third Radio for 24/7 WIDS/WIPS & RF Analytics: Continuous background scanning across full 2.4GHz/5GHz bands identifies non-Wi‑Fi interference sources (microwaves, Bluetooth room devices, electrical motors) and unauthorized rogue wireless transmitters at all times. The Meraki cloud dynamically adjusts AP channel selection, transmit power levels and client roaming handoff thresholds based on real-time spectrum data to maintain consistent high-performance wireless connectivity. Air Marshal delivers real-time wireless threat detection and automatic rogue AP containment with cloud-based security forensic logging.
2. Self-Healing Multi-Hop Wireless Mesh Networking: MR36H APs automatically establish wireless mesh backhaul links to extend wireless coverage to remote building wings without physical Ethernet cabling. If the primary wired uplink fails, the AP seamlessly switches to mesh routing to preserve internet access for all connected wireless clients, supporting load-balanced mesh gateway deployments for scalable campus/hotel-wide coverage extension.
3. Layer7 Deep Packet Inspection (DPI) Application-Aware QoS & Identity-Based Stateful Layer3-7 Firewall: The integrated DPI engine classifies hundreds of distinct application-level traffic streams, including enterprise VoIP voice, HD video streaming, cloud SaaS business applications, social media and P2P file sharing. Network administrators configure granular QoS priority rules to prioritize latency-sensitive mission-critical business communications while enforcing configurable bandwidth rate caps on recreational non-business traffic to eliminate wireless network congestion during peak user hours. Identity-aware firewall supports device-specific access control policies and integrates with enterprise Active Directory/LDAP/RADIUS identity databases for unified endpoint access management.
4. Unified Enterprise Wireless Security Suite with Native WPA3 Support: AES hardware-accelerated encryption supporting WEP, WPA‑PSK, WPA2‑PSK personal encryption; WPA2‑Enterprise and WPA3‑Enterprise 192‑bit AES security standards with full IEEE 802.1X EAP‑TLS/PEAP/EAP‑FAST enterprise authentication suites. Fully customizable branded captive portal splash pages deliver secure internet-only guest visitor access with built-in wireless client isolation to block peer-to-peer communication between untrusted guest devices, reducing network security attack surfaces. Additional security features include hidden SSID broadcast suppression, MAC address ACL filtering, Meraki Teleworker IPsec VPN for secure remote branch corporate LAN extension and identity policy firewall for granular user/device network access control.
5. BLE-Powered Presence Location Analytics: The integrated BLE radio enables cloud-hosted visitor and endpoint tracking metrics including client capture rate, average session duration and repeat visitor statistics, ideal for hotel guest behavior analysis, dorm occupancy tracking and office space utilization reporting.
6. Integrated 4-Port Gigabit Switch with PoE Passthrough: Unique wall-plate wired switching capability eliminates the need for separate wall network jacks. The primary uplink port accepts 802.3af/at PoE input to power the MR36H itself, while PoE passthrough delivers power to downstream IP phones, room televisions, security cameras and wired workstations via the three auxiliary gigabit LAN portsCisco Mera....

Four Independent Radio Hardware Architecture

1. 2.4 GHz Wi‑Fi 6 (802.11b/g/n/ax) Client Radio: 2×2 UL/DL MU‑MIMO two spatial streams, supports 20/40 MHz channel bonding, transmit beamforming, maximal ratio combining (MRC), cyclic shift diversity (CSD), A‑MPDU/A‑MSDU packet aggregation, OFDMA uplink/downlink scheduling and 1024‑QAM modulation. Max single-band PHY throughput: 573 Mbps, integrated omnidirectional internal PIFA antennas optimized for uniform in-room wireless coverage.
2. 5 GHz Wi‑Fi 6 (802.11a/n/ac/ax) Client Radio: 2×2 UL/DL MU‑MIMO two spatial streams, supports 20/40/80 MHz wide channel widths, DFS radar frequency avoidance, beamforming, MRC receive diversity, OFDMA multi-user scheduling and 1024‑QAM modulation. Max single-band PHY throughput: 1201 Mbps, integrated internal antennas with reduced adjacent-channel RF interference for medium-density in-room client environments.
   Total aggregate dual-band client Wi‑Fi PHY throughput reaches1.7 Gbps.
3. Dedicated Independent Dual-Band Third Radio: Separate fully isolated radio operating concurrently with the two Wi‑Fi client radios, continuously scanning both 2.4GHz and 5GHz frequency bands 24/7 for Air Marshal WIDS/WIPS threat detection and full-spectrum RF analytics without impacting client data throughput.
4. Integrated Bluetooth 5.0 Low‑Energy Radio: Always-on independent BLE radio for iBeacon deployment, BLE device scanning and location analytics presence tracking functionality.

Core Hardware Interfaces & Built-In Switch

1. Eth0 Primary Uplink Port (PoE Input + Passthrough): 10/100/1000BASE‑T auto-sensing RJ45 port, IEEE 802.3af Class 3 / 802.3at PoE PD compliant (37–57V DC PoE input). This uplink port delivers all management uplink data traffic and accepts PoE power supply for the MR36H unit; it also supports PoE passthrough to feed power to downstream wired devices connected to the auxiliary LAN ports.
2. Eth1 / Eth2 / Eth3 Auxiliary Gigabit LAN Ports: Three additional 10/100/1000BASE‑T RJ45 wired ports, forming a total four-port integrated gigabit switch. Designed for wired room devices including IP televisions, desktop PCs, IP phones and security cameras, with PoE passthrough power distribution capability from the primary uplink portCisco Mera....
3. DC Power Input Jack: Auxiliary center-positive 12V DC power connector for alternative local power supply deployments where PoE-capable switches or injectors are unavailable; matching 12V DC external power adapter sold separately and not bundled with standard AP packaging.
4. Control & Security Hardware Components: Recessed factory reset button (long press 5+ seconds fully erases local AP configuration), concealed internal cable routing bay, anti-tamper security screw mounting holes integrated into the single-gang wall plate chassis.
5. Multi-Color Front Status LED Array: Single front-mounted multi-color LED indicator for power supply state, Meraki cloud dashboard internet connectivity, wireless radio active operation and hardware fault alarm notifications.
6. No external RF antenna ports; all four radio arrays utilize factory-integrated non-detachable omnidirectional internal antennas optimized for short-range in-room coverage.

Supported Operation Modes

1. Cloud-Managed CAPWAP Gateway Access Point Mode (Default): Zero-touch Meraki cloud orchestration for all wireless client access, centralized RF tuning, enterprise security policy enforcement and automated background firmware upgrades.
2. Wireless Mesh Backhaul Node Mode: Self-configuring multi-hop wireless mesh routing to extend wireless coverage to remote building zones lacking physical Ethernet uplink cabling; automatic failover between wired primary uplink and wireless mesh gateway links upon wired network outage.
3. Integrated Layer 2 Gigabit Switch Mode: Built-in four-port gigabit Ethernet switch operates concurrently with wireless radios, enabling simultaneous wired and wireless client connectivity for in-room devices.

Power Supply Compatibility

1. Full-performance PoE operation: IEEE 802.3af Class 3 PoE PD input (minimum 15W power draw) or IEEE 802.3at PoE+ PD input for full PoE passthrough capability to downstream wired PoE devices. Maximum total power consumption under full four-radio load + active switch ports is 25W, fully compliant with 802.3at PoE+ standardsCisco Mera....
2. Local DC power alternative: Separate 12V DC external power adapter (sold separately, not bundled with standard AP packaging).
3. Typical full-load power consumption: Maximum 25 W under simultaneous active four-radio operation with all four gigabit switch ports populated and PoE passthrough enabled.

Physical & Environmental Specifications

• Form Factor: Standard North American single-gang wall switch plate chassis
• Dimensions: Compact wall-plate enclosure optimized for retrofitting standard single-gang electrical wall boxes
• Unit Weight: Lightweight white fire-resistant plastic wall plate chassis
• Mounting Options: Single-gang electrical wall box flush mounting (primary deployment method); desktop placement with optional anti-slip rubber feet for temporary staging deployments
• Operating Temperature Range: 0°C ~ +40°C indoor use only (not rated for outdoor deployment)
• Storage Temperature Range: -20°C ~ +70°C
• Operating Humidity: 5% – 95% non-condensing
• Storage Humidity: 5% – 90% non-condensing
• System Memory & Storage: Embedded Meraki custom cloud-managed operating system, dedicated four-radio wireless processing chipset + integrated gigabit switch controller, onboard flash storage for cloud firmware images and persistent local configuration cache
• Regulatory RF Certifications: Global multi-domain SKU supporting FCC Part 15 (North America), ETSI EN 300328 / EN 301893 (EMEA), TELEC Japan, KCC Korea domestic RF emission compliance, EMI Class B household electronic equipment certification
• Maximum Concurrent Client Capacity: Up to 70 connected wireless clients; recommended maximum 35 simultaneous active business/guest users for stable low-latency throughput performance
• Warranty: Limited lifetime hardware warranty for original end-user purchasers

Key Specification Bullet Points

• Model: MR36H-HW (Cisco Meraki Single-Gang Wall-Plate Quad-Radio Wi‑Fi 6 802.11ax Cloud-Managed Indoor Hospitality In-Room Wireless Access Point with Built-In 4-Port Gigabit Switch & PoE Passthrough, Dedicated 24/7 WIDS/WIPS RF Scanning Radio + Integrated BLE 5.0 Location Beacon/IoT Scanning Radio)
• Wireless Standard: IEEE 802.11a/b/g/n/ac/ax Wi‑Fi 6 concurrent dual-band client radios (2.4GHz + 5GHz), 2×2 UL/DL MU‑MIMO two spatial streams per radio; independent third dual-band Wi‑Fi scanning radio; integrated Bluetooth 5.0 LE IoT/location radio
• Max Combined Aggregate Client PHY Throughput: Up to 1.7 Gbps (573 Mbps 2.4GHz + 1201 Mbps 5GHz)
• Antennas: Non-detachable built-in omnidirectional internal PIFA antennas for all Wi‑Fi and BLE radios, optimized for short-range in-room coverage
• Wired Interfaces: Integrated 4-port gigabit Ethernet switch; 1 × PoE input/passthrough primary uplink RJ45, 3 × auxiliary gigabit LAN RJ45 ports; IEEE 802.3af/at PoE PD supported with PoE passthrough functionality
• Operation Modes: Cloud-managed CAPWAP AP gateway mode, self-healing multi-hop wireless mesh backhaul node mode, integrated Layer2 gigabit wired switch mode
• Core Exclusive Cloud-Managed & Hardware Functions: Single-gang wall-plate hospitality form factor with built-in 4-port gigabit switch and PoE passthrough; quad-radio architecture with dedicated independent third Wi‑Fi radio for round-the-clock Air Marshal WIDS/WIPS threat detection and continuous full-band RF spectrum analytics; integrated BLE 5.0 radio for location beacons and visitor presence analytics; Meraki cloud dashboard zero-touch provisioning; automatic cloud-driven RF optimization with 24/7 spectrum visibility; self-healing zero-configuration multi-hop wireless mesh networking; Layer7 DPI application-aware QoS traffic shaping & identity-based stateful Layer3-7 firewall; multi-SSID 802.1Q VLAN network segmentation; customizable branded captive portal guest access with wireless client isolation; native full WPA3 enterprise wireless security suite
• QoS: WMM TSPEC wireless multimedia VoIP voice and HD video traffic prioritization with configurable application bandwidth rate limiting
• Network Stack: Native IPv4 stack; static IP address configurable on primary PoE uplink port
• Security: WEP/WPA/WPA2/WPA3 PSK/Enterprise 802.1X EAP enterprise authentication, MAC address ACL filtering, dedicated third radio Air Marshal rogue AP detection & automatic containment, hidden SSID broadcast suppression, wireless client device isolation, Meraki Teleworker IPsec remote site VPN, identity-based Layer3-7 stateful policy firewall
• Management: Meraki cloud dashboard web graphical user interface, Meraki mobile monitoring smartphone/tablet application, SNMPv3 third-party network monitoring integration, centralized cloud event logging and customizable email/SMS fault alert notifications
• Power Options: IEEE 802.3af/at PoE input via primary uplink port or separate 12V DC local power adapter (sold separately, not included in standard packaging); supports PoE passthrough to downstream wired PoE devices
• Physical Mount: Standard single-gang electrical wall box flush mounting; optional desktop staging mount with anti-slip rubber feet
• Environmental Restriction: Indoor use only, operating temperature range 0°C~40°C
• Typical Deployment Scenarios: Hotel guest room in-room unified wired/wireless networks, university student dormitories, hospital patient suites, office wall-mounted workstation jack replacements, small retail fitting rooms, hospitality multi-unit residential building in-room wireless deployments
• Warranty: Limited lifetime hardware warranty for original end-user purchasers

Model Quick Reference

• MR36H-HW: Base hardware SKU of Meraki MR36H single-gang wall-plate quad-radio Wi‑Fi 6 cloud-managed hospitality in-room AP with built-in 4-port gigabit switch, PoE passthrough, dedicated WIDS/WIPS scanning radio and integrated BLE 5.0 beacon radio
• Platform Differentiation vs Standard Ceiling-Mount MR36: MR36 is ceiling-mounted indoor AP with only one gigabit uplink port and no integrated wired switch; MR36H is hospitality wall-plate variant with unique four-port gigabit switch, PoE passthrough and single-gang wall box mounting form factor, optimized for guest room in-room wired/wireless convergenceCisco
• Platform Distinction vs Standalone Small Business WAP Series APs (WAP121/WAP321/WAP581/WAP712): Meraki MR36H operates exclusively under Meraki cloud centralized management with zero-touch provisioning, automated cloud RF optimization, native self-healing wireless mesh networking, dedicated third-radio enterprise wireless intrusion prevention, integrated BLE presence analytics and unique hospitality wall-plate switching hardware; Cisco Small Business WAP series are standalone autonomous APs without cloud controller dependency or Meraki exclusive multi-radio security, BLE analytics and built-in gigabit switch hardware
• Upgraded Alternatives: Meraki MR56H next-generation Wi‑Fi 6E wall-plate hospitality access point for modern high-bandwidth hotel/dorm deployments