Layer 3 switch with optional mGig/ UPoE/802.3bt
Adaptive policy device and app security exclusive to the MS390.
The Meraki MS390 addresses the most demanding enterprise applications by combining the simplicity of the Meraki dashboard with powerful switching hardware. To satisfy high-bandwidth applications and the deployment of high-speed 802.11ax/wifi-6 access points, the MS390 provides multigigabit ports, 480G stacking, and modular 10/40G uplinks.
The MS390 delivers resiliency with fast stack convergence and StackPower. The MS390 provides Adaptive Policy using an over-the-wire tag which segments traffic into security groups to deliver scalable security. The MS390 is integrated under the Meraki dashboard to provide a simply powerful solution to the most demanding wired access applications.
Adaptive Policy provides simple & scalable security policies to segment traffic using Security Groups. Security Groups are created in the dashboard using natural language such as “IOT device” & “Guest.” The security policy intent (e.g., Permit or Deny) is then simply provisioned between Security Groups which results in the segmentation of each group's traffic.
By making security policy management intuitive and scalable relative to legacy IP-address based Access Control Lists, Adaptive Policy empowers operators to confidently secure their network traffic independent of future network changes.
By pooling & distributing power across MS390s using a series of StackPower cables, StackPower provides simple and resilient power distribution across the stack.
Main Features
Maximize your bandwidth
MS390-48: 48 1GbE, MS390-48P: 48 1GbE PoE+, MS390-48U: 48 1GbE UPoE,
MS390-48UX: 36 2.5GbE UPoE + 12 mGbE UPoE, MS390-48UX2: 48 5GbE UPoE
Two 40G or four/eight 10G modular fiber uplinks
480 Gbps of physical stacking, up to eight units
Power/PoE
All models include a power supply
Modular power supply/fans
StackPower
Enterprise hardware and support
Reliable platform with 24/7 Meraki support
1RU rack-mountable
Flexible mounting options
Non-blocking switch fabric
Cloud managed
Email alerts for switch management
Remote troubleshooting tools, zero-touch provisioning
Manage ports from a GUI-based dashboard; per-port and per-client usage statistics
Secure, user-scheduled firmware updates
Features and Capabilities
Management
Managed via Cisco Meraki Dashboard
Zero-touch remote provisioning (no staging needed)
Basic configuration capability via local management page
Detailed historical per-port and per-client usage statistics
Operating System, device, and hostname fingerprinting
Automatic firmware upgrades with scheduling control
SNMP and SYSLOG support for integration with other network management solutions
Security
Integrated multi-factor authentication for Dashboard management
Role-based access control (RBAC) with granular device and configuration control
Corporate wide password policy enforcement
IEEE 802.1X RADIUS and MAB, hybrid authentication and RADIUS server testing
Single-Host/Multi-Domain/Multi-Host/Multi Authentication
Port security: Sticky MAC, MAC whitelisting
DHCP snooping, detection and blocking, Dynamic ARP Inspection
IPv4 and IPv6 ACLs
Secure Connect
Adaptive Policy
Remote Diagnostics
Email, SMS and Mobile push notification alerts
Ping, traceroute, cable testing, and link failure detection with alerting
Dynamic and interactive network discovery and topology
Combined event and configuration change logs with instant search
Remote packet capture
Stacking
Physically stack up to 8 switches with 480 Gbps of stacking bandwidth on all models
Virtual stacking supports thousands of switch ports in a single logical stack for unified management, monitoring, and configuration
StackPower in a ring topology supporting upto 4 switches
Faster convergence
Ethernet Switching Capabilities
802.1p Quality of Service, 8 queues (w/ 6 configurable for DSCP-to-CoS mapping)
802.1Q VLAN and trunking support for up to 4,094 VLANs (1000 active VLANs with STP enabled)
Single Instance of 802.1s Multiple Spanning Tree Protocol (interoperable with RSTP, STP, PVST, RPVST)
STP Enhancements: BPDU guard, Root guard, Loop guard, UDLD
802.1ab Link Layer Discovery Protocol (LLDP) and Cisco Discovery Protocol (CDP)
Dynamic ARP Inspection to prevent man-in-the-middle attacks
802.3ad Link aggregation with up to 8 ports per aggregate, Multichassis aggregates supported on stacked switches
Broadcast storm control
Port mirroring
IGMP snooping for multicast filtering
MAC Forwarding Entries: 32K
