Z-Series Product Highlights
4 GbE ports for printers, phones and
other wired devices
1 PoE-enabled port for VoIP phones and
other powered devices
Dual-concurrent 802.11ac Wave 2 radios
with up to 1.3 Gbps data rate
Auto VPN for intelligent site-to-site VPN
connectivity
802.1x port authentication for wired
devices
Layer 7 application trac shaping and
prioritization
Layer 3 firewall to separate corporate
data from personal trac
Up to 4 SSIDs with integrated enterprise
security and personal / guest access
Optional desk stand
Self-configuring, plug-and-play
deployment
Ideal for telecommuters using VoIP and
remote applications
Sleek, low profile design
Built-in 100 Mbps CAT 3 LTE
connectivity (Z3C)
Fast, Reliable Connectivity for the Modern Teleworker
The Cisco Meraki Z-Series teleworker gateway is an enterprise class
firewall, VPN gateway and router. Each model oers five gigabit
ethernet ports and wireless for connectivity. Each model is designed
to securely extend the power of Meraki cloud managed networking
to employees, IT sta, and executives working from home.
Using Meraki’s proven and highly scalable Auto VPN technology, ad-
ministrators can deploy network services including VoIP and remote
endpoints with automatic, zero-touch provisioning. Additionally the
Z-series provides secure wired and wireless access, and increases
end-user productivity through Layer 7 trac shaping.
All models feature a high-performance stateful firewall, support for
VLANs, inter-VLAN routing, and isolation to segregate corporate data
from recreational trac. The Z-series oers the latest in wireless per-
formance with 802.11ac Wave 2 technology with MU-MIMO support
to provide reliable and high speed network access for most demand-
ing business applications and latest devices.
Z-Series and Meraki Cloud Management: A Powerful Combo
All Meraki devices are managed via the Meraki cloud, with an intui-
tive browser-based interface. Since the Z-series is self-configuring
and managed over the web, you can rapidly deploy at remote loca-
tions without any assistance from end-users.
Meraki Cloud services monitor all devices 24x7 and deliver real-time
alerts if any device encounters a problem. Remote diagnostics tools
enable real-time troubleshooting through any web browser. New
features and enhancements are delivered seamlessly over the web,
so you never have to manually download software updates or worry
about missing security patches.
Meraki Z-Series
CLOUD MANAGED TELEWORKER GATEWAY
Datasheet | Z Series
Z3 Z3C
Recommended use cases
Teleworker with VoIP or PoE, IoT, and M2M
Teleworker with VoIP or PoE, IoT, and M2M
Recommended clients
Up to 5 devices Up to 5 devices
Stateful Firewall Throughput
100 Mbps 100 Mbps
Maximum VPN Throughput
50 Mbps 50 Mbps
WAN Interfaces
1 x GbE RJ45
1 x USB (cellular failover
1
)
1 x GbE RJ45
1 x Integrated CAT 3 LTE
Cellular Modem (cellular failover)
1 x USB (cellular failover
1
)
LAN Interfaces
4 x GbE 4 x GbE
PoE
1 x PoE enabled port (802.3af, 15.5W) 1 x PoE enabled port (802.3af, 15.5W)
Dimensions
(w x d x h)
6.83” x 4.41” x 1.04”
(173.4mm x 112mm x 26.3mm)
7.9” x 4.41” x 1.04”
(200mm x 112mm x 26 mm)
Weight
0.85 lbs (0.386 kg)
1.1 lbs (0.487 kg)
Power Supply
50W (54 V / 0.92 A)
Power supply included
50W (54 V / 0.92 A)
Power supply included
Operating
Temperature
32°F to 104°F (0°C to 40°C) 32°F to 104°F (0°C to 40°C)
Humidity
5% to 95% non-condensing 5% to 95% non-condensing
Models
Accessories
1
Requires separate cellular modem
Desk Stand (sold separately) 50W Power Adapter Spare Power Cord (sold separately)
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
2
Auto VPN
Leveraging Meraki’s cloud architecture, VPN tunnels to HQ or the
data center can be enabled via a single click without any command-
line configurations or multi-step key permission setups. Meraki’s
patent-pending Auto VPN technology automatically tunnels, hole
punches, sets up route tables, and establishes the IPsec connections,
completely eliminating the complexity seen in traditional site-to-site
VPN solutions.
Application-aware trac shaping
The Z-Series includes an integrated layer 7 packet inspection,
classification, and control engine, enabling you to set QoS policies
based on trac type. Prioritize your mission critical applications like
VoIP or remote desktop, while setting limits on recreational trac,
e.g., peer-to-peer and video streaming.
Simple, powerful security from end to end
With end-to-end VPN encryption, corporate data is always protected.
Additionally the Meraki Z-series supports 802.1x wired port
authentication, oering network and endpoint security no matter
where the gateway may be deployed
Self-configuring, self-optimizing, self-healing
When plugged in, the Z-Series automatically connects to the Meraki
cloud, downloads its configuration, and joins your network. In case of
WAN IP address changes, the Z-Series self heals by re-establishing
the site-to-site VPN tunnels using the new IP address. Also, if a
supported SIM card is installed or a 3G/4G modem is connected and
primary WAN uplink connectivity fails, the Z-Series will automatically
failover to cellular.
Industry-leading cloud management
Meraki’s award-winning cloud management architecture unifies WAN,
LAN, and wireless management under a web based dashboard, and
scales easily from small deployments to large, multi-site deployments
with tens of thousands of devices. The Meraki dashboard provides
intuitive yet powerful role-based administration, firmware updates,
configuration changes, email alerts, and easy to audit change logs.
Features
AUTO CONFIGURING SITETOSITE VPN
APPLICATION VISIBILITY AND CONTROL
MULTISITE MANAGEMENT VIA THE MERAKI CLOUD
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
3
Specifications
Performance
Firewall Throughput - 100 Mbps
VPN Throughput - 50 Mbps
Recommended for 5 clients or fewer
Interfaces
WAN interface: 1x GbE
LAN interfaces: 4x GbE
PoE: 1 x 802.3af enabled port
1x USB 2.0 port for 3G / 4G connectivity
1 x CAT 3 LTE modem for cellular connectivity (Z3C only)
Network and Security Services
Stateful firewall, 1:1 NAT, DMZ
Auto (site-to-site IPsec) VPN
Client VPN (IPsec L2TP), limit 2 authorized users (with Meraki-hosted authentication only)
Automatic Layer 3 failover (including VPN connections)
Application level (Layer 7) trac analysis and shaping
Multiple WAN IP, PPPoE, NAT
VLAN support and DHCP services
802.1x wired port authentication
Static routing
User and device quarantine
Integrated Wireless
4 SSIDs
2x 802.11a/b/g/n/ac (2.4Ghz or 5 Ghz), 2x2 MU-MIMO with 2 spatial streams
Max data rate - 1.3 Gbps
4x internal dipole antennas (gain: 3 dBi @ 2.4 GHz, 4 dBi @ 5 GHz)
WPA2-PSK authentication
Regulatory: FCC (US), IC (Canada), CE (Europe), C-Tick (Australia/New Zealand), RoHS
Monitoring and Reporting
Throughput, connectivity monitoring and email alerts
Detailed historical per-port and per-client usage statistics
Application usage statistics
Org-level change logs for compliance and change management
VPN tunnel and latency monitoring
Network asset discovery and user identification
Periodic emails with key utilization metrics
Syslog integration
LTE trac and performance (Z3C only)
Remote Diagnostics
Live remote packet capture
Real-time diagnostic and troubleshooting tools
Aggregated event logs with instant search
Management
Managed via the web using the Meraki Cloud Controller
Single pane of glass management of wired and wireless networks
Zero-touch remote deployment (no staging needed)
Automatic firmware upgrades and security patches
Centralized policy management
Org-level two-factor authentication and single sign-on
Role based administration with change logging and alerts
Integrated Cellular (Z3C only)
LTE bands: 2, 4, 5, 13, and 17 (North America). 1, 3, 7, 8, and 20 (Worldwide*)
100 Mbps CAT 3 LTE
Additional regulatory information: PTCRB (US), RCM (ANZ, APAC), GCF (EU)
Z3 & Z3C Environmental Specifications
Power: 50W (54 V / 0.92 A), external power supply included
Operating temperature: 32°F to 104°F (0°C to 40°C)
Humidity: 5 to 95% non-condensing
Desktop or wall mount (all standard mounting hardware included)
Kensington lock hard point
Regulatory
FCC (US)
CB (IEC)
CISPR (Australia/New Zealand)
PTCRB (US)
RCM (Australia/New Zealand, Asia Pacific)
GCF (EU)
Warranty
Full lifetime hardware warranty with next-day advanced replacement included.
* Z3C not available in Japan
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
4
MODEL POWER LICENSE DESCRIPTION
Z3-HW Includes universal
power supply, power
cord sold seraptely
2
LIC-Z3-ENT-1YR
LIC-Z3-ENT-3YR
LIC-Z3-ENT-5YR
LIC-Z3-ENT-7YR
LIC-Z3-ENT-10YR
Cisco Meraki Z3 Cloud Managed Teleworker Gateway, 1 year Enterprise License and Support
Cisco Meraki Z3 Cloud Managed Teleworker Gateway, 3 year Enterprise License and Support
Cisco Meraki Z3 Cloud Managed Teleworker Gateway, 5 year Enterprise License and Support
Cisco Meraki Z3 Cloud Managed Teleworker Gateway, 7 year Enterprise License and Support
Cisco Meraki Z3 Cloud Managed Teleworker Gateway, 10 year Enterprise License and Support
Z3C-HW-NA
(Z3C with LTE
North America)
Z3C-HW-WW
(Z3C with LTE
Worldwide
1
)
LIC-Z3C-ENT-1YR
LIC-Z3C-ENT-3YR
LIC-Z3C-ENT-5YR
LIC-Z3C-ENT-7YR
LIC-Z3C-ENT-10YR
Cisco Meraki Z3C Enterprise License and Support, 1 year Enterprise License and Support
Cisco Meraki Z3C Enterprise License and Support, 3 year Enterprise License and Support
Cisco Meraki Z3C Enterprise License and Support, 5 year Enterprise License and Support
Cisco Meraki Z3C Enterprise License and Support, 7 year Enterprise License and Support
Cisco Meraki Z3C Enterprise License and Support, 10 year Enterprise License and Support
MA-PWR-CORD-US
2
MA-PWR-CORD-EU
MA-PWR-CORD-UK
MA-PWR-CORD-AU
MA-PWR-CORD-JP
- Cisco Meraki Power Cord for Z3 and Z3C (US Plug)
2
Cisco Meraki Power Cord for Z3 and Z3C (EU Plug)
Cisco Meraki Power Cord for Z3 and Z3C (UK Plug)
Cisco Meraki Power Cord for Z3 and Z3C (AU Plug)
Cisco Meraki Power Cord for Z3 and Z3C (JP Plug)
MA-STND-1
- Z3 and Z3C Teleworker Gateway desk stand
MODEL PACKAGE CONTENTS
Z3
1 x Z3-HW
1 x Power Adapter (power cord sold seperately)
1 x Cat5 ethernet cable
1 x Mounting Kit
Z3C
(North America)
1 x Z3C-HW-NA
1 x Power Adapter (power cord sold seperately)
1 x Cat5 ethernet cable
1 x Mounting Kit
1 x SIM card ejector tool
Z3C
(Worldwide
1
)
1 x Z3C-HW-WW
1 x Power Adapter (power cord sold seperately)
1 x Cat5 ethernet cable
1 x Mounting Kit
1 x SIM card ejector tool
1
Z3C not available in Japan
2
1 x US power cord will be automatically included with all US orders
Included in the Box
Ordering Guide
To place an order for an Z-Series teleworker gateway, pair a specific hardware model with a single license (which includes cloud services,
software upgrades and support). For example, to order a Z3 with a 3-year license, order an Z3-HW with LIC-Z3-ENT-3YR. Lifetime warranty
with advanced replacement is included on all licensed hardware at no additional cost.
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
5