24 x 1Gb RJ45, 4 x 25Gb SFP28, PoE++(@370W/740W), Campus Accesss Switch

Enterprise SONiC, full L2/L3 and open management

The switch ships preloaded with AsterNOS, Enterprise SONiC distribution, with a single software image across the CX-M family. On top of it sits a complete Layer 2/Layer 3 feature set — 4K VLANs, static routing, OSPFv2/v3, BGP, MP-BGP, VXLAN, BGP-EVPN, and storm control — for access-layer segmentation and routing. Automation interfaces include ZTP, industry-standard CLI, SNMP v1/v2/v3 and containerized custom tools, so the switch plugs into existing operations workflows without a separate management path.

High availability with MC-LAG

MC-LAG support gives the CX204Y-24GT-M-S active-active redundancy across dual-homed links, maintaining connectivity through a link or device failure without added protocol complexity. Combined with BFD-based link fault detection, the switch re-routes traffic across OSPF, BGP and IS-IS in under 50ms, keeping downtime minimal during unplanned outages at the access layer.

PoE+/PoE++ power delivery

All 24 ports support PoE+ (802.3at, 30W/port), with ports 1–8 additionally supporting PoE++ (802.3bt, 60W/port). The switch auto-detects connected devices and supplies the appropriate power without manual configuration. It is available in non-PoE, 370W, or 740W total power budget configurations, sized to the mix of IP phones, Wi-Fi 6/Wi-Fi 7 access points, and surveillance cameras on the network.

Optional precision timing

The CX204Y-24GT-M-S supports IEEE 1588v2 PTP and SMPTE 2059-2 through hardware and software, with the hardware port operating as a Boundary Clock (BC) or Transparent Clock (TC). An optional PTP module adds Class C accuracy (≤10ns maximum time error) for access deployments where downstream devices also need a synchronized time reference.

Operations and traffic visibility

The switch integrates sFlow, port mirroring and Syslog for traffic visibility and troubleshooting, with ZTP cutting deployment time and manual intervention. An optional Network Packet Broker container, built on SONiC's containerized architecture, adds traffic mirroring, filtering, aggregation, preprocessing, load balancing and output replication without a separate appliance.

Centralized management with Asteria Network Controller

The Asteria Network Controller can manage the CX204Y-24GT-M-S alongside other CX-M switches, APs, routers and PON sticks in the same deployment. Zero-Touch Provisioning brings new switches online without manual CLI configuration. The controller provides topology discovery, device status monitoring and scripted configuration or firmware updates across multiple switches from a single interface. On-premises deployment is available with no licensing fee.

Enterprise-grade reliability

The CX204Y-24GT-M-S uses 1 fixed power supplies and 3 fixed fans. Right-to-left airflow and 100–240V AC / 240V DC input suit rack-mount campus and enterprise access deployments — making the CX204Y-24GT-M-S a dependable foundation for access-layer networks.

Architecture & performance

• Multi-rate 10M/100M/1G/2.5G/5G/10G downlink port support via USGMII/USXGMII Switch-PHY interface, carrying multiple Ethernet speeds over a single SerDes lane

• 10/25/40/50GbE uplink and stacking ports

• Integrated Arm® Cortex CPU cluster with high-capacity DDR3/DDR4 support for services offload and direct access to the switch pipeline

• Flow-aware programmable ingress/egress data processing pipelines

Timing & synchronization

• High-accuracy one-step and two-step PTP

• SyncE frequency synchronization

Security — SecureIQ & MACsec

• Line-rate IEEE 802.1AE MACsec GCM-AES-128/256 and GCM-AES-XPN-128/256 on MACsec-enabled part numbers

• SecureIQ: secure boot, secured storage, programmable security sensors, and micro-segmentation to security groups

• SCT / NST control and management plane protection; DDoS mitigation

Telemetry, intelligence & programmability

• TrackIQ: line-rate application-aware telemetry, per-packet latency measurement, elephant/mice flow detection, anomaly and exception detection

• NetIQ: programmable processing engines and embedded compute for in-network intelligence, AI-feature engineering, and auto-healing

• Overlay support: VXLAN, VXLAN-GPE, Geneve, IP-GRE, EVPN, SRv6, MPLS-SR

Ordering information