Cisco Meraki MR28

Basic Information

The Cisco Meraki MR28 is a dual-band, 802.11ax (Wi-Fi 6), 2x2:2, cloud-managed entry-level access point. It serves as a replacement for the MR20 model. Management occurs via the intuitive, browser-based Meraki cloud dashboard. The device requires a Meraki MR Enterprise or Advanced license for operation, which is purchased on a per-device, per-year basis and available in terms of 1, 3, 5, 7, or 10 years. Firmware updates are automatically delivered via the cloud, ensuring the latest stable version and security fixes are always applied. The MR28's End-of-Sales Date was June 1, 2023, and its End-of-Support Date is June 13, 2028.

Analysis: The MR28 is designed for straightforward deployment and management in small to medium-density environments, leveraging Cisco Meraki's cloud-centric ecosystem. Its reliance on a mandatory annual license ensures continuous access to cloud features, support, and automatic updates, but also represents an ongoing operational cost. The specified End-of-Support date provides a clear lifecycle for enterprise planning.

Technical Specifications

• Model: MR28 (MR28-HW)
• Wireless Standards: 802.11a/b/g/n/ac/ax (Wi-Fi 6)
• Radios: Concurrent 2.4 GHz and 5 GHz Wi-Fi, plus Bluetooth Low Energy (BLE 5) radio
• Antenna: Internal, with 5.4 dBi gain for 2.4 GHz and 6 dBi for 5 GHz
• Ethernet Port: 1 x 10/100/1000 Mbps RJ-45 with 802.3af PoE
• Power: 802.3af Power over Ethernet (PoE), maximum 15W consumption. Also compatible with specific Meraki AC adapters (MA-PWR-30W-XX, sold separately).
• Display: Multi-color LED indicator for system status
• Dimensions: 202 × 124 × 25.8 mm (approximately 8" x 4.9" x 1")
• Weight: 272 g (approximately 0.60 lb or 9.6 oz)
• Operating Environment: 0 °C to 40 °C (32 °F to 104 °F); 5 – 95% RH (non-condensing)

Analysis: The MR28's technical specifications highlight its role as a modern Wi-Fi 6 access point. The dual-band Wi-Fi 6 radios with 2x2:2 MU-MIMO and OFDMA support ensure efficient data transmission for multiple clients, making it suitable for environments with numerous mobile devices. The inclusion of BLE 5 broadens its utility for IoT applications. Standard Gigabit Ethernet with 802.3af PoE simplifies deployment by reducing cabling needs. Its compact dimensions and light weight facilitate discreet installation in various indoor settings. While processor, RAM, and storage details are not publicly emphasized, typical for an AP, the overall design focuses on robust wireless connectivity and ease of integration into Meraki's cloud ecosystem.

Support & Compatibility

• Latest Version: Firmware updates are automatic and managed via the Meraki cloud.
• OS Support: Managed through a web-based Meraki Dashboard, accessible from any modern web browser.
• End of Support Date: June 13, 2028.
• Localization: Supports country-specific frequency bands and uses region-specific AC adapters (e.g., AU, EU, CN, UK, US).
• Available Drivers: Not applicable; firmware is automatically updated by the cloud.
• Compatibility: Seamlessly integrates with other Cisco Meraki hardware, including MS switches and MX security appliances. It also works with Meraki Systems Manager for device posture policies and supports native integration with SES-imagotag Electronic Shelf Labels (ESL).

Analysis: The MR28 benefits from Meraki's comprehensive cloud-managed support model, where firmware updates and security patches are automatically applied, minimizing manual intervention. The web-based dashboard offers universal accessibility for management. Its defined End-of-Support date is critical for long-term planning. Broad compatibility within the Meraki ecosystem and specific integrations like ESL enhance its utility in diverse enterprise environments. The absence of traditional drivers simplifies deployment, aligning with the plug-and-play philosophy.

Security Status

• Security Features: Integrated Layer 7 firewall, Wireless Intrusion Detection/Prevention System (WIDS/WIPS) with Air Marshal, flexible guest access with device isolation, VLAN tagging (802.1q), IPsec VPN tunneling, PCI compliance reporting, Enterprise Mobility Management (EMM) & Mobile Device Management (MDM) integration, Cisco ISE integration for Guest access and BYOD Posturing.
• Encryption Support: WEP*, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X, WPA3 - Personal, WPA3 - Enterprise, WPA3 - Enhanced Open (OWE). Supports TKIP and AES encryption.
• Authentication Methods: Enterprise authentication with 802.1X and Active Directory integration, EAP-TLS, EAP-TTLS, EAP-MSCHAPv2, EAP-SIM. Features a captive portal with multiple authentication options.
• Physical Security: Includes a security screw to prevent accidental dislodging and theft.
• Operational Security: "Run Dark" mode disables the LED for reduced visibility.
• Certifications: PCI compliance reporting is supported.

Analysis: The MR28 offers a robust suite of enterprise-grade security features, leveraging its cloud management for continuous protection. Automatic firmware updates ensure timely application of security fixes. The comprehensive encryption and authentication options, including WPA3 and 802.1X, provide strong network access control. Integrated Layer 7 firewall and WIDS/WIPS capabilities offer advanced threat detection and prevention. The physical security measures and "Run Dark" mode further enhance its security posture, making it a reliable choice for secure wireless deployments.

Performance & Benchmarks

• Benchmark Scores: Dual-radio aggregate frame rate up to 1.5 Gbps, with 1201 Mbps on the 5 GHz band and 287 Mbps on the 2.4 GHz band.
• Real-world Performance Metrics: Features 2x2:2 MU-MIMO 802.11ax with UL/DL OFDMA and 1024-QAM for efficient transmission to multiple clients. It offers enhanced transmit power and receive sensitivity. The device is optimized for voice and video traffic and includes application-aware traffic shaping.
• Power Consumption: Maximum 15W via 802.3af PoE.
• Comparison with Similar Assets: Positioned as an entry-level Wi-Fi 6 access point, suitable for basic to medium-density deployments. Higher-end models like the MR36, MR44, or MR46 offer greater throughput and more radio streams for high-density environments.

Analysis: The MR28 delivers solid Wi-Fi 6 performance for its class, with an aggregate throughput of 1.5 Gbps. Its MU-MIMO and OFDMA capabilities significantly improve efficiency in environments with multiple connected devices, enhancing the user experience. Optimization for voice and video, coupled with application-aware traffic shaping, ensures critical applications receive priority. The low power consumption makes it an energy-efficient choice. While capable for medium-density, it is not designed for the most demanding, high-density scenarios, where other Meraki models excel.

User Reviews & Feedback

User feedback consistently highlights the Cisco Meraki MR28's strengths in ease of deployment and management. Its cloud-managed nature, with features like zero-touch provisioning and an intuitive browser-based dashboard, receives high praise for simplifying network setup and ongoing administration. Users appreciate the enterprise-grade security features, including automatic firmware updates and comprehensive threat protection, which contribute to a reliable and secure wireless environment. The MR28 is frequently recommended for small businesses, home offices, retail spaces, hospitality, and educational settings due to its dependable Wi-Fi performance in basic to medium-density deployments. Its optimization for voice and video is also a noted advantage.

A common point of consideration is the mandatory licensing model, which, while enabling all cloud features and support, represents a recurring cost. Users also note that while excellent for its intended use, the MR28 is not designed for very high-density environments, where more powerful Meraki models would be more appropriate.

Summary

The Cisco Meraki MR28 is a robust, cloud-managed Wi-Fi 6 access point tailored for small to medium-density enterprise environments. Its core strength lies in its seamless integration with the Meraki cloud platform, offering unparalleled ease of deployment through zero-touch provisioning and simplified management via an intuitive web-based dashboard. The device provides reliable dual-band 802.11ax connectivity with 2x2:2 MU-MIMO and OFDMA, delivering an aggregate frame rate of up to 1.5 Gbps, optimized for voice and video applications. Comprehensive enterprise-grade security features, including a Layer 7 firewall, WIDS/WIPS, WPA3 encryption, and various authentication methods, are automatically maintained through cloud-delivered firmware updates, ensuring a continuously secure network posture. Compatibility within the broader Meraki ecosystem and specific integrations like ESL further enhance its utility.

While the MR28 excels in its target deployments, its primary limitation is its suitability for only basic to medium-density scenarios, with higher-density environments requiring more advanced Meraki models. The mandatory annual licensing model, while providing continuous support and feature updates, is an ongoing operational expense to consider. Overall, the MR28 stands out as an excellent choice for organizations seeking a secure, high-performance, and easily manageable wireless solution for typical office, retail, or educational settings, prioritizing operational simplicity and robust security.

Information provided is based on publicly available data and may vary depending on specific device configurations. For up-to-date information, please consult official manufacturer resources.