Cisco Catalyst 9164 AP Wi-Fi 6E 6-GHz Band and Three 4×4 Radios

The Cisco Catalyst 9164 Series is a Wi-Fi 6E access point with three integrated 4×4-class radio bands, a 2.5-Gigabit Ethernet uplink, internal omnidirectional antennas, and a choice of on-premises Catalyst 9800 management or cloud management through the Meraki dashboard. It is designed for enterprise wireless environments requiring 2.4-GHz, 5-GHz, and 6-GHz service, high client density, WPA3 security, application hosting, and operational flexibility between management platforms.

Product positioning and deployment model

The Catalyst 9164 supports both conventional controller-based WLAN architecture and Meraki cloud management. The CW9164I-x platform is associated with Cisco Catalyst operation and regulatory-domain variants. The CW9164I-MR is the cloud-managed version using the Meraki dashboard.

The management choice is architectural rather than a separate hardware dependency. An access point initially deployed with on-premises management can be moved to cloud-based management without purchasing and redistributing different access point hardware. Presales designs should still validate software, licensing, feature-matrix, regulatory, and migration requirements before committing to a management transition.

For on-premises deployments, the supported wireless LAN controllers are Cisco Catalyst 9800 Series physical or virtual controllers. The listed software baseline for the Catalyst 9164 Series is Cisco IOS XE Software Release 17.9.1 or later.

The access point is suitable for:

• Enterprise office and all-wireless office deployments
• High-density collaboration areas
• Wi-Fi 6E client environments
• Internet of Things deployments
• Location, asset-tracking, and wayfinding applications using Bluetooth Low Energy
• Sites requiring centralized WLAN control through Catalyst 9800 controllers
• Multi-site environments using Meraki cloud operations
• Edge IoT applications using containers and application hosting
• Networks requiring 2.5-Gigabit access-layer connectivity

The data sheet does not define a recommended client count, coverage radius, minimum signal level, channel plan, or validated area per access point. Those values must therefore be established through a radio-frequency survey, traffic model, client-density analysis, and local regulatory review.

Radio architecture and wireless capabilities

The Catalyst 9164 uses three radio bands:

The specified aggregate PHY data rate is up to 7.49 Gbps. This figure is based on 4×4 operation with 160-MHz channels on 6 GHz, 4×4 operation with 80-MHz channels on 5 GHz, and 2×2 operation with 20-MHz channels on 2.4 GHz. It is a PHY-layer figure and should not be used as an application throughput commitment.

The access point supports uplink and downlink OFDMA. OFDMA divides a channel into resource units that can be allocated to individual clients. This reduces transmission overhead and can improve efficiency where multiple clients generate smaller packets or intermittent traffic.

Uplink and downlink MU-MIMO allow spatial streams to be distributed among multiple clients. The feature table identifies support for up to 10 spatial streams in the MU-MIMO technology description, while the 802.11ax radio specification identifies four spatial streams on the 5-GHz and 6-GHz radios and two on the 2.4-GHz radio.

Additional 802.11ax capabilities include:

• Target Wake Time for scheduled client wake-up and reduced battery consumption
• BSS coloring for spatial reuse
• 802.11ax beamforming
• Maximal Ratio Combining
• A-MPDU and A-MSDU aggregation for transmit and receive
• Dynamic Frequency Selection
• Cyclic Shift Diversity
• WPA3 support

The access point also supports 802.11n and 802.11ac operation for backward compatibility. Under 802.11n, the listed PHY rate is up to 1.5 Gbps using 40 MHz on 5 GHz and 20 MHz on 2.4 GHz. Under 802.11ac, the listed PHY rate is up to 1.73 Gbps using 4×4 operation and an 80-MHz channel on 5 GHz.

6-GHz planning considerations

The 6-GHz radio extends Wi-Fi 6 operation into the additional 6-GHz band. It provides access to 160-MHz channels and is intended to improve capacity and reduce contention where compatible clients are available.

Band steering can direct 6-GHz-capable clients away from the 5-GHz radio and onto 6 GHz. This reserves more 2.4-GHz and 5-GHz capacity for legacy clients. A deployment should not assume that all client devices can use 6 GHz. Client capability, operating-system support, security configuration, country approval, and local channel availability must be verified.

The access point supports transmit power settings of 23 dBm, equivalent to 200 mW, and -4 dBm, equivalent to 0.39 mW, for each of the 2.4-GHz, 5-GHz, and 6-GHz radios. Actual permitted operation depends on the applicable regulatory domain. Where 6-GHz operation is not permitted or software support is not available, the 6-GHz radio is disabled.

CleanAir Pro extends radio-frequency interference detection and classification into the 6-GHz band. This is relevant to sites where interference monitoring is part of the operational design, but it does not remove the need for a professional RF survey or channel-planning process.

Interfaces, antennas, and physical construction

The access point provides one multigigabit Ethernet interface with the following supported speeds:

• 100 Mbps
• 1000 Mbps
• 2.5 Gbps

The Ethernet interface uses an RJ-45 connector. A separate RJ-45 management console port is provided. The platform also includes a USB 2.0 interface rated at 4.5 W for supported application-hosting and hardware-module use cases.

Physical dimensions without mounting brackets are:

The internal antennas are omnidirectional in azimuth. Mounting orientation, ceiling construction, obstructions, wall materials, furniture, elevator shafts, and adjacent access points will affect the actual coverage pattern. A design should use the published antenna characteristics as an input to RF planning, not as a substitute for a site survey.

A status LED provides boot-loader, association, operating-status, warning, and error indications.

Power design and PoE sizing

The access point supports 802.3bt Cisco Universal PoE, 802.3at PoE+, selected Cisco power injectors, 802.3af PoE for configuration staging, and DC input through the listed 54 V power option.

The 802.3af mode is limited to configuration staging. It does not provide normal radio service. A switch port intended for production operation should support at least PoE+ if the design requires all three radios at the listed radio configuration. UPOE or DC power is required where the USB interface must operate.

Supported Cisco power injectors are:

• AIR-PWRINJ7=
• AIR-PWRINJ6=
• MA-INJ-6

Actual consumption varies with access point use. LLDP or CDP should be enabled so that the switch and access point can perform appropriate power negotiation. Presales bills of material should account for the maximum listed power rather than relying on average consumption. Switch power budgets should be calculated for simultaneous access point startup, full radio operation, USB use where applicable, and any other powered devices on the same switch.

Management, automation, and application hosting

On-premises operation uses Catalyst 9800 Series Wireless LAN Controllers. Cisco DNA integration provides analytics, assurance, automation, and Software-Defined Access support. Intelligent Capture can analyze wireless behavior, track more than 240 anomalies, and provide packet review capabilities for troubleshooting workflows.

Meraki cloud management provides centralized monitoring, policy deployment, segmentation configuration, network optimization, and multi-site administration through the Meraki dashboard. Cisco Spaces, Cisco Identity Services Engine, Meraki Health, Meraki Vision, smart cameras, and sensors are identified as associated platform capabilities.

The access point supports application hosting through its USB interface and container support for edge computing. This can be used for IoT-related functions without installing a separate overlay network, subject to application, hardware-module, licensing, and management-platform compatibility. The data sheet does not specify container CPU, memory allocation, storage capacity, or a list of supported applications.

Security and identity

Cisco Trust Anchor Technologies provide the platform security foundation. The listed capabilities are:

• Image signing
• Secure Boot
• Cisco Trust Anchor module

Supported wireless security includes:

• WPA2-Personal
• WPA2-Enterprise with 802.1X
• WPA3-Personal
• WPA3-Enterprise
• WPA3 Enhanced Open using OWE
• AES encryption

The listed EAP methods include EAP-TLS, EAP-TTLS with MSCHAP version 2, PEAP with MSCHAP version 2, EAP-FAST, PEAP with GTC, and EAP-SIM.

The access point carries Wi-Fi Alliance certifications for Wi-Fi 6, Wi-Fi 6E, WPA3-R3, WPA3-Suite B, and Enhanced Open Security. Bluetooth SIG certification is listed for Bluetooth Low Energy.

SKU and ordering matrix

The regulatory-domain suffix must be selected for the intended country or region. Customers are responsible for verifying approval and availability of the required regulatory domain before ordering and deployment.

Environmental and physical operating limits

The operating humidity limit is noncondensing. Installations outside the stated temperature, humidity, or altitude test conditions require separate engineering validation. The specification does not identify an outdoor enclosure rating, water-resistance rating, hazardous-location rating, or operating acoustic profile. The access point should therefore be treated as an indoor enterprise WLAN device unless project documentation establishes otherwise.

Licensing and commercial planning

Two licensing approaches are identified.

Cisco Networking Subscription licensing provides unified wireless licensing through Cisco Networking Subscription and Cisco Enterprise Agreement structures. The two wireless tiers are:

• Cisco Wireless Essentials
• Cisco Wireless Advantage

The applicable capabilities depend on the license tier, access point or controller platform, software release, deployment model, and management platform. A new Cisco Networking Subscription has a standard minimum term of 12 months for wireless licenses.

Cisco DNA wireless licensing provides:

• Cisco DNA Essentials
• Cisco DNA Advantage

Cisco DNA licenses are offered with 3-year, 5-year, or 7-year terms. DNA Essentials covers foundational wireless automation, management, visibility, monitoring, and assurance. DNA Advantage adds advanced assurance, analytics, policy-based automation, segmentation, security, location, and application-experience capabilities.

The corresponding perpetual network entitlements are Network Essentials and Network Advantage. The selected entitlement must align with the deployed product, controller, management mode, and required feature set. Licensing should be treated as a design workstream, especially where an organization may migrate between Catalyst on-premises management and Meraki cloud management.

Warranty and service coverage

The Catalyst 9164 Series includes a limited lifetime hardware warranty identified by SKU WARR-CW-LIFE-LTD. Coverage applies to the hardware for as long as the original end user continues to own or use the product.

The warranty includes:

• Hardware coverage for the applicable ownership period
• Five-day advance hardware replacement
• Software media coverage for defects for 90 days

Cisco Services offerings described for the platform include WLAN readiness assessment, implementation, solution support, training, planning, deployment, management, and support. These services are relevant where the project requires RF readiness validation, controller or cloud migration, operational handover, or lifecycle support.

Smart Account administration through Cisco Smart Software Manager is used to order devices and licensing packages and manage software licenses centrally.

Presales engineering checklist

Before finalizing a Catalyst 9164 design, validate the following:

1. Select CW9164I-x or CW9164I-MR according to the required management platform.
2. Confirm the regulatory-domain suffix for every deployment country.
3. Verify that the access-layer switch provides 2.5-Gigabit connectivity where the uplink design requires it.
4. Allocate PoE for 25 W per access point on PoE+ designs and 30 W where UPOE, DC power, or USB operation is required.
5. Enable LLDP or CDP for power negotiation.
6. Do not use 802.3af as a production power design; it is limited to configuration staging with radios disabled.
7. Confirm 6-GHz approval, client support, security policy, and channel availability.
8. Use RF survey results to determine access point quantity, mounting locations, channel widths, transmit power, and overlap.
9. Validate Catalyst 9800 controller sizing and software compatibility for on-premises deployments.
10. Validate Meraki licensing and cloud-management requirements for CW9164I-MR deployments.
11. Confirm whether Bluetooth, USB application hosting, container support, Cisco Spaces, Cisco ISE, or Cisco DNA capabilities are in scope.
12. Document the absence of published MTBF and acoustic-noise values if those metrics are required by the project.
13. Check the 50-degree C operating limit and the noncondensing humidity requirement at the intended installation location.
14. Include warranty entitlement, Smart Account administration, support services, and replacement logistics in the commercial design.