Meraki China

Posted by Vincent Panico on

Are you looking to deploy Meraki devices in China? Moo Moo Networks has offices in China to assist with customs, the Great Firewall, and timezone difficulties. Our US-based sales team will work with you to make the Meraki purchase just as easy as you'd expect. There are some considerations, though:

In June 2017, the Chinese government instituted a cybersecurity law which introduced new regulations and requirements concerning network security protocols. Under these new regulations, an MX with an Advanced Security License would qualify as a "network security protocol." As such, Meraki has halted the sale of Advanced Security Licenses to MX devices deployed in China.

The main concern with Meraki devices in China is the quality of service guarantee. With dashboard resources hosted in other countries, Meraki may not be able to resolve issues or service interruptions "due to China's network condition, Chinese law, and actions of Chinese regulators." Instead, Meraki is focused on launching a dashboard hosted at datacenters in mainland China - "China Service."

In early 2018, the China Service dashboard at will be launched at http://www.meraki.cn. By contacting support, you can migrate devices from the traditional dashboard to the new dashboard. By late 2018, Meraki anticipates all dashboards will be moved to the China service.

If you have devices in China (whether on the traditional dashboard or the China Service dashboard), they will need an Enterprise license. Advanced Security licenses are no longer allowed to be applied to China devices. By contacting sales or support, they can downgrade your license and equitably extend it.

You can read more about the changes to Meraki China here, at the 'Information for Users in China' knowledgebase article.

While Moo Moo Networks has been preparing customers for this change, Meraki has provided us with the following document to outline the two methods of connecting China Service and traditional dashboard networks. MX devices can be set up in a site-to-site VPN fashion using the "non-Meraki peer" configuration, or using an MPLS.


Share this post