48 x 2.5Gb RJ45, 4 x 25Gb SFP28, 4 x 100Gb QSFP28, PoE++(@740W/1440W) Enterprise Access Switch

SKU:

CX204P-4Y48MT-M-H — 1RU enterprise access switch with 48× 2.5G RJ45 + 4× 100G QSFP28, powered by the Marvell AlleyCat5P 800Gbps (98DX4570) ASIC and open SONiC-based AsterNOS.

  • 48× 2.5G RJ45 + 4× 25G SFP28 + 4× 100G QSFP28,  800 Gbps in a compact 1RU

  • 48× PoE+ (ports 1–8: PoE++) · Non-PoE / 740W / 1440W power budget options

  • Open SONiC (AsterNOS) — no per-feature licensing, no vendor lock-in

  • 256K IPv4 / 128K IPv6 routes, 128K MAC entries, 8MB packet buffer

  • MC-LAG for cross-device link aggregation and active-active forwarding

  • Optional IEEE 1588v2 PTP Class C (SMPTE 2059-2 / AES67)

  • Hot-swappable 1+1 PSU / 2+1 fans

Request Discount

800Gbps

Switching Capacity

256K

IPv4 Routes

128K

MAC Table Size

The CX204P-4Y48MT-M-H is a 1U enterprise access switch

that delivers 48× 2.5GbE RJ45 ports plus 4× 100G QSFP28 (40G compatible) and 4× 25G SFP28 (10G compatible) uplinks for 800 Gbps of switching capacity. Built on the Marvell Prestera 98DX4570 (AlleyCat 5P) ASIC and running Enterprise SONiC (AsterNOS), it is designed as an access-layer switch for enterprise and campus networks, aggregating end-devices, IP phones, access points, and IoT endpoints onto a 100G/25G distribution tier.

With 256K IPv4 routes, 128K IPv6 routes, and 128K MAC entries, the CX204P-4Y48MT-M-H matches the routing and endpoint scale of a small-to-mid-size access deployment. Its 48 × 2.5GbE ports give each access point, IP phone, camera, and IoT endpoint 2.5 times the bandwidth of a standard gigabit port over existing Cat5e/Cat6 cabling. The uplink ports connect directly to a leaf/spine or aggregation layer without an intermediate speed-conversion step, and can be run at 40G and 10G respectively where the upstream infrastructure requires it. With EVPN overlay support, access-layer segments can be extended across the campus network.

Enterprise SONiC, full L2/L3 and open management

The switch ships preloaded with AsterNOS, Enterprise SONiC distribution, on the same single software image used across the CX-M family. On top of it sits a complete Layer 2/Layer 3 feature set — VLANs, static routing, OSPF, BGP, MLAG, and IPv6 — for access-layer segmentation and routing. Industry-standard CLI and SNMP v1/v2/v3 keep the switch consistent with existing operations workflows, without a separate management path for a small-port-count device.

High availability with MC-LAG

MC-LAG support gives the CX204P-4Y48MT-M-H active-active redundancy across dual-homed links, maintaining connectivity through a link or device failure. Combined with BFD-based link fault detection, the switch re-routes traffic across OSPF and BGP in under 50ms.

PoE+/PoE++ power delivery

Ports 1–8 support PoE++ (802.3bt) and ports 9–48 support PoE+ (802.3at, 30W/port). The switch auto-detects connected devices and supplies the appropriate power without manual configuration. It is available in 740W, or 1440W total power budget variants, sized to the mix of IP phones, Wi-Fi 6/Wi-Fi 7 access points, and surveillance cameras on the network.

Optional precision timing

The CX204P-4Y48MT-M-H is available in PTP and non-PTP variants. The PTP variant supports IEEE 1588v2 PTP, with the hardware port operating as a Boundary Clock (BC) or Transparent Clock (TC), for access deployments where downstream devices also need a synchronized time reference.

Operations and traffic visibility

The switch integrates sFlow, port mirroring and Syslog for traffic visibility and troubleshooting, with ZTP reducing deployment time and manual intervention.

Centralized management with Asteria Network Controller

The Asteria Network Controller can manage the CX204P-4Y48MT-M-H alongside other CX-M switches, APs, routers and PON sticks in the same deployment. Zero-Touch Provisioning brings new switches online without manual CLI configuration. The controller provides topology discovery, device status monitoring and scripted configuration or firmware updates across multiple switches from a single interface. On-premises deployment is available with no licensing fee.

Enterprise-grade reliability

The CX204P-4Y48MT-M-H uses hot-swappable 1+1 redundant power supplies and 2+1 redundant, hot-swappable fans for power and cooling redundancy. Front-to-rear airflow suits rack-mount campus and enterprise access deployments.

Data Plane Ports (100G)4x100GbE QSFP28
Data Plane Ports (25G)4x25GbE SFP28
Data Plane Ports (1G)48x1GbE RJ45
Switching Capacity800Gbps
PoE Ports (Optional)48-port PoE+(30Watt), 1~8 port PoE++ (60Watt), total 740W/1440Watt budget
PoE StandardIEEE 802.3af/at/bt
Switch ASICMarvell AlleyCat5P (98DX4570)
Packet Buffer8MB
Control CPUOCTEON CN9130
Memory4GB DDR4
Flash32GB EMMC
Mac Addr. Entries32K
IPv4 Prefix Routes256K
IPv6 Prefix Routes128K
Power Module1+1 Hot-swappable
FAN Modules2+1 Hot-swappable
Max Power Consumption246W (Without PoE)
Input Range100- 240V AC / 36-72V DC (w/o PoE)
Rack Space1RU
AirflowFront to Rear
Dimension (HxWxD)44x440x470mm
Weight9KG (Without PoE)
Op.Temperature0 - 45℃ (32 to 113°F)
Op. Humidity5% - 90% (non-condensing)

Optimized Software for Advanced Workloads-AsterNOS

AsterNOS is the pre-installed network operating system on Asteraix’s CX-M Series campus switches. Built on SONiC and enhanced beyond the open-source version, AsterNOS offers advanced Layer 2 and Layer 3 features, as well as sophisticated routing capabilities. Support VXLAN EVPN virtualization, it supports scalable campus networks. AsterNOS is smart, secure, and easy to manage, providing a reliable operating platform for always-on enterprise networks.

Layer 2 Features
4K VLANs
Voice VLAN
Multiple Spanning Tree Protocol
QinQ
Link Aggregation Control Protocol
Multi-Chassis Link Aggregation
VLAN Trunking
Link Layer Discovery Protocol (LLDP)
LLDP Enhancements for PoE
Port Isolation
Jumbo Frames (9216 Bytes)
IGMP Snooping
Storm Control
Monitor Link
BPDU Guard, BPDU Filter
Loopback Detection
Layer 3 Features
IPv4/v6 Dual Stack
Policy Based Routing
Resilient ECMP
ARP-to-Host
VRF
Bi-Directional Forwarding Detection (BFD)
IGMP v2/v3
Route Map
VRRP
GRE
Routing Protocols: OSPF v2/v3, BGP, MP-BGP
Virtualization Features
Type 2: MAC/IP Advertisement
Type 3: Inclusive Multicast Route
Type 5: IP Prefix Route
Centralized Gateway
Distributed Gateway
Mgmt & Monitoring
Asteria Campus Controller
Industry Standard CLI
Zero Touch Provisioning (ZTP)
SNMP v1/v2/v3
sFlow
Port Mirroring
Syslog
Log Management
PTP IEEE 1588v2 (TC and BC)
Containerized Custom Tools
BGP/BFD Operational Status
Quality of Service
8 Queues per Port
802.1p Based Classification
DSCP Based Classification
Strict priority queueing
DWRR Scheduling
Policing/Shaping
Rate Limiting
Security Features
Service ACLs
ACL Logging and Counters
Control Plane Policing (CoPP)
Dynamic ARP Inspection (DAI)
IP Source Guard v4/v6
DHCPv4/v6 Relay
DHCPv4/v6 Snooping
ND Snooping
802.1x Authentication
Portal Authentication
MAC Authentication Bypass (MAB)
Dynamic VLAN Assignment
TACACS+
RADIUS
IPSG/DAI/SAVI

Marvell® Prestera® 98DX45xx

The 98DX45xx is a family of multilayer Ethernet switches with 24 and 48 downlink ports, supporting speeds from 10M to 100G. Designed for enterprise access and edge, the devices integrate multi-rate 10M–10G downlinks, 10/25/50/100G uplinks, SyncE/PTP timing, and an embedded Arm® Cortex CPU cluster, for Wi-Fi 6 (802.11ax) and 802.11ac Wave 2 access-point aggregation, IoT connectivity, and edge processing in fixed and modular chassis platforms.

Architecture & performance

  • Multi-rate 10M/100M/1G/2.5G/5G/10G downlink port support via USGMII/USXGMII Switch-PHY interface, carrying multiple Ethernet speeds over a single SerDes lane

  • 10/25/50/100GbE uplink ports

  • Integrated Arm® Cortex CPU cluster with advanced management interfaces for services offload

  • Flow-aware programmable ingress/egress data processing pipelines

  • Large policy control lists (ACLs) and flow and forwarding databases with dynamic resource allocation

Timing & synchronization

  • High-accuracy one-step and two-step PTP

  • SyncE frequency synchronization

Security — SecureIQ

  • SecureIQ: programmable security sensors and micro-segmentation to security groups

  • SCT / NST control and management plane protection; DDoS mitigation

Telemetry, intelligence & programmability

  • TrackIQ: line-rate application-aware telemetry, per-packet latency measurement, elephant/mice flow detection, anomaly and exception detection, predictive health reporting

  • NetIQ: programmable processing engines and embedded compute for in-network intelligence, AI-feature engineering, auto-healing, and auto-adaptation

  • Overlay support: VXLAN, VXLAN-GPE, Geneve, IP-GRE, EVPN, SRv6, MPLS-SR

Enterprise access switch family datasheet Enterprise Access Switches Datasheet (PDF)
Quick start guide for AsterNOS CLI AsterNOS Documentation

The dual 1+1 hot-swappable power supplies ensure continuous operation by allowing replacement without system shutdown.

Equipped with 2+1 hot-swappable fan modules, the system delivers reliable cooling performance to maintain stability and efficiency under demanding workloads.

CERTIFICATE

ISO 9001ISO 9001

ISO 14001ISO 14001

ISO 45001ISO 45001

ISO 27001ISO 27001

FCCFCC

CECE

SCOPE

Quality management system

Environmental management

Occupational health and safety

Information security management

US radio frequency compliance

EU health, safety and environmental compliance