Cisco Meraki MR86-HW Full English Description

Listing Title

Full Commercial Product Description

1. 2.4 GHz Client Radio: Premium 4×4 UL/DL MU-MIMO 802.11b/g/n/ax Wi‑Fi 6 radio, supporting 40 MHz maximum channel width, transmit beamforming, 1024-QAM and high receive sensitivity. Max single-radio PHY throughput reaches 1147 Mbps, primarily serving legacy IoT sensors, POS terminals, handheld scanners and low-bandwidth visitor devices, while supporting wireless mesh interconnection with other Meraki outdoor APsCisco Mera....
2. 5 GHz Client Radio: Flagship 4×4 UL/DL MU-MIMO 802.11a/n/ac/ax Wi‑Fi 6 radio with native 80 MHz wide channel support, DFS radar frequency avoidance, advanced beamforming, multi-user UL/DL MU-MIMO scheduling and 1024-QAM modulation. Max single-radio PHY throughput hits 2402 Mbps, optimized for high-speed mobile/laptop clients, low-interference wireless mesh relays and long-distance P2P/PtMP inter-building backhaul linksCisco.
3. Dedicated Third Dual‑Band Scanning Radio: Isolated 2×2 dual-band radio running 24/7 independent of client serving radios, delivering continuous full-spectrum RF monitoring and Air Marshal wireless intrusion prevention without sacrificing client throughput or bridge link stability. It continuously scans 2.4 GHz and 5 GHz airwaves to identify RF interference sources and unauthorized rogue access points, enabling automatic rogue containment and cloud-hosted security forensic logging for PCI-DSS and industrial compliance auditsCisco.
4. Fourth Integrated Bluetooth Low Energy Radio: Concurrent BLE beaconing and scanning functionality, supporting iBeacon deployments, visitor foot traffic analytics, industrial asset tracking and retail location measurement. Meraki’s open Scanning API exports raw location data for third-party smart building and IoT platform integrationsCisco.

1. 24/7 Air Marshal WIDS/WIPS & Continuous RF Spectrum Analytics: The dedicated third dual-band radio performs persistent background spectrum scanning across full 2.4 GHz and 5 GHz bands to detect non-Wi-Fi interference sources and unauthorized rogue wireless transmitters at all times. Air Marshal provides real-time wireless threat detection, automatic rogue AP containment and cloud-hosted security forensic logging to meet enterprise compliance audit requirementsCisco.
2. Self-Healing Multi-Hop Wireless Mesh & Long-Range P2P/PtMP Bridging: MR86 units automatically establish multi-hop wireless mesh backhaul links to connect geographically separated buildings without laying physical fiber/Ethernet cabling. If the primary wired uplink or main P2P wireless bridge link fails, the AP seamlessly switches to alternate mesh radio links to preserve network connectivity, supporting hub-and-spoke PtMP campus deployments with automatic load balancing across available wireless channels.
3. Layer7 Deep Packet Inspection (DPI) Application-Aware QoS & Identity-Based Stateful Layer3-7 Firewall: The integrated DPI engine classifies hundreds of distinct application-level traffic streams, including industrial control SCADA traffic, enterprise VoIP voice, HD video surveillance streams, cloud SaaS business applications and recreational streaming services. Network administrators configure granular QoS priority rules to prioritize latency-sensitive mission-critical industrial and enterprise communications while enforcing configurable bandwidth rate caps on non-essential traffic to eliminate link congestion over limited wireless backhaul bandwidth. Identity-aware firewall supports device-specific access control policies and integrates with enterprise Active Directory/LDAP/RADIUS identity databases, Cisco ISE and EMM/MDM tools for unified endpoint access managementCisco.
4. Unified Enterprise Wireless Security Suite with Native Full WPA3 Support: AES hardware-accelerated encryption supporting WEP, WPA‑PSK, WPA2‑PSK personal encryption; WPA2‑Enterprise, WPA3‑Personal, WPA3‑Enhanced Open (OWE) and WPA3‑Enterprise 192‑bit AES security standards with full IEEE 802.1X EAP‑TLS/PEAP/EAP‑FAST enterprise authentication suites. Fully customizable branded captive portal splash pages deliver secure internet-only guest visitor access with built-in wireless client isolation to block peer-to-peer communication between untrusted guest devices, reducing network security attack surfaces. Additional security features include hidden SSID broadcast suppression, MAC address ACL filtering, Meraki Teleworker IPsec VPN for secure remote branch corporate LAN extension, identity policy firewall for granular user/device network access control and built-in Cisco Umbrella DNS-layer threat security to block malware, phishing and ransomware traffic at the wireless edgeCisco.

Four Independent Radio Hardware Architecture

1. Radio R1 (2.4 GHz Wi‑Fi 6 802.11b/g/n/ax): 4×4 UL/DL MU‑MIMO four spatial streams, supports 20/40 MHz channel bonding, transmit beamforming, maximal ratio combining (MRC), cyclic shift diversity (CSD), A‑MPDU/A‑MSDU packet aggregation, UL/DL OFDMA scheduling, TWT target wake time and 1024‑QAM modulation. Max single-radio PHY throughput: 1147 Mbps, diplexed to four shared N-type external antenna connectors for omnidirectional coverage antennas.
2. Radio R2 (5 GHz Wi‑Fi 6 802.11a/n/ac/ax): 4×4 UL/DL MU‑MIMO four spatial streams, supports 20/40/80 MHz wide channel widths, DFS radar frequency avoidance, beamforming, MRC receive diversity, UL/DL OFDMA multi-user scheduling, TWT, BSS Coloring and 1024‑QAM modulation. Max single-radio PHY throughput: 2402 Mbps, diplexed to four shared N-type external antenna connectors for high-gain directional bridge antennas.
   Total aggregate dual-radio PHY frame throughput reaches3.55 GbpsCisco.
3. Dedicated Independent Dual-Band Third Scanning Radio: Separate fully isolated radio operating concurrently with the two client radios, continuously scanning full 2.4GHz/5GHz frequency bands 24/7 for Air Marshal WIDS/WIPS threat detection and full-spectrum RF analytics without impacting client data throughput or bridge link performance.
4. Integrated Bluetooth Low Energy Fourth Radio: Always-on independent BLE radio for iBeacon deployment, BLE device scanning and location analytics presence tracking functionality.

Core Hardware Interfaces

1. ETH0 Primary PoE Uplink Port: 10/100/1000/2500BASE-T multigigabit RJ45 port, IEEE 802.3at PoE+ PD compliant (42.5–57V DC PoE input). This single primary port receives PoE power supply for the entire AP unit and carries upstream bridge/client traffic to the core LAN; static IP addresses can be assigned to ETH0 via dashboard or local web interfaceCisco Mera....
2. Four N-Type Female External Antenna Connectors: Four diplexed N-type ports shared by both 2.4 GHz and 5 GHz dual-band client radios, fully detachable to support interchangeable high-gain directional, sector and omnidirectional dual-band external antennas for custom long-range bridge or wide-area coverage deployments. No built-in internal omnidirectional antennas are fitted to the MR86Cisco Mera....
3. DC Power Input Jack: Auxiliary center-positive 12V DC power connector for alternative local power supply deployments where PoE injectors are unavailable; matching external power adapter sold separately and not bundled with standard AP packaging.
4. Control & Security Hardware Components: Recessed pinhole factory reset button (10-second hold for full configuration wipe), integrated grounding post + grounding strap for outdoor lightning/static protection, waterproof cable gland for sealed cable routing, Torx anti-tamper mounting fasteners and chassis security screws.
5. Multi-Color Front Status LED Indicator Panel: Single front-mounted multi-color LED with standardized status states: Orange = Booting, Rainbow = Initializing/Spectrum Scan, Blinking Blue = Firmware Upgrade, Green = Gateway mode no clients, Blue = Gateway mode active clients, Blinking Orange = Uplink failure. Supports Run Dark mode to disable LED illumination for low-visibility deployments.

Supported Operation Modes

1. Cloud-Managed CAPWAP Gateway Access Point Mode (Default): Zero-touch Meraki cloud orchestration for outdoor Wi-Fi client access, centralized RF tuning, enterprise security policy enforcement and automated background firmware upgrades.
2. Wireless Point-to-Point (P2P) Bridge Mode: Dedicated long-range backhaul link between two MR86 units deployed at separate buildings, using matched directional dual-band antennas on the 5 GHz radio band for stable long-distance inter-building connectivity.
3. Wireless Point-to-Multipoint (PtMP) Hub-and-Spoke Mode: Central hub MR86 connects multiple remote spoke MR86 units via separate 5 GHz radio channels for campus-wide multi-building wireless backhaul.
4. Self-Healing Multi-Hop Wireless Mesh Backhaul Node Mode: Multi-hop relay deployment where intermediate MR86 units pass wireless traffic between upstream gateway APs and downstream remote site APs with automatic link failover between 2.4 GHz and 5 GHz radio bands.

Power Supply Compatibility

1. Full-performance PoE operation: IEEE 802.3at PoE+ PD input (30W maximum power draw) to power all four radios, LED indicators and Ethernet port with full hardware functionality enabled. IEEE 802.3af Class 3 PoE PD input (15W maximum power draw) operates in limited low-power mode with reduced transmit power and restricted port bandwidthCisco Mera....
2. Local DC power alternative: Separate 12V DC external power adapter (sold separately, not included in standard packaging).
3. Typical full-load power consumption: Maximum 30 W under simultaneous active four-radio operation with Ethernet port populated and all RF scanning features fully enabled.

Physical & Environmental Specifications

• Dimensions: 300 mm × 152.9 mm × 54.9 mm (Width × Depth × Height)
• Unit Weight: 1.5 kg (3.31 lbs), lightweight weatherproof composite chassis
• Mounting Options: Vertical wall mounting, utility pole V-bar mounting; full mounting hardware, grounding strap and waterproof cable glands included in packaging.
• Operating Temperature Range: -40°C ~ +55°C (-40 °F to 131 °F) wide industrial outdoor temperature range, fully operational in extreme cold and hot climatesCisco Mera....
• Storage Temperature Range: -40°C ~ +70°C (-40 °F to 158 °F)
• Operating Humidity: 5% – 95% non-condensing
• Storage Humidity: 5% – 90% non-condensing
• Environmental Rating: IP67 fully waterproof and dustproof enclosure, resistant to rain, snow, sand, salt spray and industrial airborne particulate contamination.
• System Memory & Storage: Embedded Meraki custom cloud-managed operating system, dedicated four-radio wireless processing chipset, onboard flash storage for cloud firmware images and persistent local configuration cache
• Regulatory RF Certifications: Global multi-domain SKU supporting FCC Part 15 (North America), ETSI EN 300328 / EN 301893 (EMEA), TELEC Japan, KCC Korea domestic RF emission compliance, EMI Class B industrial electronic equipment certification
• Maximum Concurrent Client Capacity: Up to 50 connected outdoor Wi-Fi clients across dual bands; recommended maximum 25 simultaneous active business/IoT users for stable low-latency throughput performance.
• Warranty: Limited lifetime hardware warranty for original end-user purchasers

Key Specification Bullet Points

• Model: MR86-HW (Cisco Meraki Four-Radio Wi‑Fi 6 802.11ax Cloud-Managed IP67 Outdoor Industrial Wireless Access Point, Two Independent 4×4 UL/DL MU-MIMO Dual-Band Client Radios on Isolated 2.4 GHz / 5 GHz Bands, Dedicated Third Dual-Band 24/7 WIDS/WIPS RF Scanning Radio + Fourth Integrated Bluetooth Low Energy Location Beacon/IoT Scanning Radio, Four Shared Diplexed N-Type External Detachable Dual-Band Antenna Ports, Single 2.5G Multigigabit PoE+ Uplink Port, Native Long-Range P2P/PtMP Wireless Bridging & Cloud Location Analytics Capability)
• Wireless Standard: IEEE 802.11a/b/g/n/ac/ax Wi‑Fi 6 dual concurrent independent client radios (R1:2.4 GHz, R2:5 GHz), all client radios support 4×4 UL/DL MU-MIMO four spatial streams; independent third dual-band Wi‑Fi scanning radio; integrated fourth Bluetooth Low Energy IoT/location radio
• Max Combined Aggregate Dual-Radio PHY Frame Throughput: Up to 3.55 Gbps (1147 Mbps 2.4GHz + 2402 Mbps 5GHz)
• Antennas: Four shared diplexed N-type female detachable dual-band antenna connectors; no built-in internal omnidirectional antennas, fully compatible with third-party high-gain directional, sector and omnidirectional dual-band external antennas
• Wired Interfaces: 1 × 10/100/1000/2500BASE-T ETH0 PoE primary uplink port (IEEE 802.3at/802.3af PoE PD supported); no secondary wired LAN extension port
• Operation Modes: Cloud-managed CAPWAP AP client access mode, dedicated point-to-point (P2P) wireless bridge mode, point-to-multipoint (PtMP) hub-and-spoke backhaul mode, self-healing multi-hop wireless mesh relay node mode
• Core Exclusive Cloud-Managed & Hardware Functions: IP67 ruggedized industrial outdoor weatherproof enclosure with ultra-wide extreme temperature operating range (-40°C to +55°C); dual isolated frequency band radios (2.4 GHz /5 GHz) with flagship symmetric 4×4 MU-MIMO Wi‑Fi 6 and native 80 MHz 5 GHz channel support for extreme high-density venue deployments; four shared diplexed N-type external antenna ports supporting fully customizable high-gain directional dual-band bridge antennas; dedicated independent third Wi‑Fi radio for round-the-clock Air Marshal WIDS/WIPS threat detection and continuous full 2.4/5 GHz band RF spectrum analytics; fourth integrated BLE radio for location beacons and visitor presence analytics; single 2.5G multigigabit PoE uplink port eliminating wired backhaul bottlenecks; Meraki cloud dashboard zero-touch provisioning; automatic cloud-driven RF optimization with 24/7 Air Marshal WIDS/WIPS spectrum scanning; self-healing zero-configuration multi-hop wireless mesh backhaul networking; Layer7 DPI application-aware QoS traffic shaping & identity-based stateful Layer3-7 firewall; multi-SSID 802.1Q VLAN network segmentation; enterprise-grade wireless security suite with rogue AP containment, native WPA3 enterprise encryption and built-in Cisco Umbrella DNS threat protection
• QoS: WMM TSPEC wireless multimedia VoIP voice and HD video surveillance traffic prioritization with configurable application bandwidth rate limiting for limited wireless backhaul links
• Network Stack: Native IPv4 stack; static IP address configurable on primary ETH0 PoE uplink port
• Security: WEP/WPA/WPA2/WPA3 PSK/Enterprise 802.1X EAP enterprise authentication, MAC address ACL filtering, full-time Air Marshal rogue AP detection & automatic containment, hidden SSID broadcast suppression, wireless client device isolation, Meraki Teleworker IPsec remote site VPN, identity-based Layer3-7 stateful policy firewall, Cisco ISE & EMM/MDM integration, built-in PCI/HIPAA compliance audit reporting, Cisco Umbrella DNS anti-malware/phishing filtering
• Management: Meraki cloud dashboard web graphical user interface, Meraki mobile monitoring smartphone/tablet application, SNMPv3 third-party network monitoring integration, centralized cloud event logging and customizable email/SMS fault alert notifications
• Power Options: IEEE 802.3at PoE+ (30W full performance) / IEEE 802.3af PoE low-power input via primary ETH0 uplink port or separate 12V DC local power adapter (sold separately, not included in standard packaging)
• Physical Mount: Vertical wall mount, utility pole V-bar mount with complete included waterproof mounting hardware, integrated grounding strap for outdoor lightning/static protection
• Environmental Restriction: Outdoor industrial deployment only, IP67 waterproof/dustproof rating, operating temperature range -40°C ~ +55°C
• Typical Deployment Scenarios: Stadium, arena and large open-air venue ultra-high-density public Wi-Fi deployments; long-range inter-building point-to-point wireless bridge links between corporate campuses, industrial manufacturing yards, hospital satellite buildings and remote rural sites; point-to-multipoint hub-and-spoke municipal outdoor Wi-Fi networks; large parking lot, campus lawn and covered outdoor patio public Wi-Fi coverage; industrial warehouse high-density indoor wireless IoT sensor and IP surveillance camera coverage; retail outdoor location analytics deployments; utility, mining and agricultural remote site wireless connectivity deployments
• Warranty: Limited lifetime hardware warranty for original end-user purchasers

Model Quick Reference

• MR86-HW: Base hardware SKU of Meraki MR86 four-radio Wi‑Fi 6 IP67 outdoor industrial cloud-managed AP with isolated 2.4/5 GHz dual-band symmetric 4×4 MU-MIMO client radios, dedicated WIDS/WIPS scanning radio, integrated BLE beacon radio, four shared diplexed N-type external dual-band antenna ports, single 2.5G multigigabit PoE+ uplink port and native P2P/PtMP long-range wireless bridging + cloud location analytics functionality
• Platform Differentiation vs Legacy MR84: MR84 is 802.11ac Wave 2 Wi‑Fi 5 hardware with max 2.5Gbps aggregate throughput, limited 80 MHz channel support and no native WPA3; MR86 upgrades to full Wi‑Fi 6 (802.11ax) with UL/DL OFDMA, 1024-QAM, native WPA3 security, higher 3.55Gbps total throughput, improved receive sensitivity and built-in Cisco Umbrella DNS threat protection for modern high-density outdoor deployments.
• Platform Distinction vs Three-Radio MR58: MR58 includes three isolated single-band radios (5.2 GHz /5.8 GHz /2.4 GHz) for multi-channel interference-free multi-hop backhaul deployments; MR86 deploys dual high-performance symmetric 4×4 Wi‑Fi 6 client radios plus dedicated security and BLE radios, prioritizing high-density client serving capacity for public venue deployments.
• Platform Distinction vs Mid-Tier MR74/MR76 Outdoor APs: MR74/MR76 feature only 2×2 MU-MIMO client radios with maximum 1.3Gbps /1.7Gbps aggregate throughput; MR86 upgrades to dual symmetric 4×4 MU-MIMO Wi‑Fi 6 radios delivering 3.55Gbps total throughput, supporting far higher concurrent client loads for stadium-scale ultra-congested RF environments.
• Upgraded Alternatives: Meraki CW9164 Wi‑Fi 6E outdoor access point for modern clean 6GHz spectrum outdoor client Wi-Fi deployments