24 x 25Gb SFP28, 2 x 100Gb QSFP28, Ethernet Aggregation Switch
Price range: $2,999.00 through $3,499.00 VAT excl.
CX202P-24Y-M-H — 1RU enterprise core switch with 24× 25G SFP28 + 2× 100G QSFP28, powered by the Marvell Aldrin3 800Gbps (98DX7332) ASIC and open SONiC-based AsterNOS.
- 48× 25G SFP28 + 2× 100G QSFP28, 800 Gbps wire-speed L2/L3 in a compact 1RU
- Open SONiC (AsterNOS) — no per-feature licensing, no vendor lock-in
- 266K IPv4 / 133K IPv6 routes, 32K MAC entries, 8MB packet buffer
- MACsec for line-rate Layer 2 encryption at the aggregation edge
- Optional MPLS module and IEEE 1588v2 PTP Class C (SMPTE 2059-2 / AES67)
- Hot-swappable 1+1 PSU / 2+1 fans, optional Network Packet Broker container
800 Gbps
Switching Capacity
8 MB
Packet Buffer
266K
IPv4 Routes
133K
IPv6 Routes
The CX202P-24Y-M-H is a 1U enterprise aggregation switch
that delivers 24× 25G SFP28 ports plus 2× 100G QSFP28 (40G QSFP+ compatible) uplinks for 800 Gbps of switching capacity, with a forwarding rate of 810 Mpps and 8MB of packet buffer. Built on the Marvell Aldrin3 ASIC and running Enterprise SONiC (AsterNOS), it is purpose-built as a distribution/aggregation switch for enterprise and campus networks, and doubles as a cost-effective Top-of-Rack/Leaf switch in smaller private cloud or data center deployments.
With 266K IPv4 routes, 133K IPv6 routes and 32K MAC entries, the CX202P-24Y-M-H handles the routing and virtualization load of mid-sized networks. Its 100G uplink ports support interface splitting via breakout cables, so a single switch can fan out to a large number of downlink connections with flexible topology choices.
Enterprise SONiC, full L2/L3 and open management
The switch ships preloaded with AsterNOS, Asteraix's Enterprise SONiC distribution, with a single software image across the CX-M family. On top of it sits a complete Layer 2/Layer 3 feature set — VXLAN Centralized/Distributed Gateway, BGP-EVPN Type 2/3/5, GRE, static routing, VRF, OSPFv2/v3, BGP, MP-BGP, policy-based routing and MC-LAG — for multi-tenant overlays and dynamic route management at the aggregation layer. Automation interfaces include ZTP, industry-standard CLI, SNMP v1/v2/v3 and containerized custom tools, so the switch plugs into existing operations workflows without a separate management path.
High availability with MC-LAG
MC-LAG support gives the CX202P-24Y-M-H active-active redundancy across dual-homed links, maintaining connectivity through a link or device failure without added protocol complexity. Combined with BFD-based link fault detection, the switch re-routes traffic across OSPF, BGP and IS-IS in under 50ms, keeping downtime minimal during unplanned outages. An optional MPLS module adds label-switched path management for topologies requiring MPLS-based redundancy.
MACsec for secure connectivity
The CX202P-24Y-M-H supports MACsec (Media Access Control Security), providing line-rate Layer 2 encryption across aggregation links. This protects traffic between switches from eavesdropping and tampering, with minimal impact on throughput — relevant for campus and enterprise networks where aggregation links traverse shared or less-controlled physical infrastructure.
Optional precision timing
The CX202P-24Y-M-H supports IEEE 1588v2 PTP and SMPTE 2059-2 through hardware and software, with the hardware port operating as a Boundary Clock (BC) or Transparent Clock (TC). An optional PTP module adds Class C accuracy (≤10ns maximum time error) for deployments where the aggregation layer also needs to carry a synchronized time reference.
Operations and traffic visibility
The switch integrates sFlow, port mirroring and Syslog for traffic visibility and troubleshooting, with ZTP cutting deployment time and manual intervention. An optional Network Packet Broker container, built on SONiC's containerized architecture, adds traffic mirroring, filtering, aggregation, preprocessing, load balancing and output replication without a separate appliance.
Centralized management with Asteria Network Controller
The Asteria Network Controller can manage the CX202P-24Y-M-H alongside other CX-M switches, APs, routers and PON sticks in the same deployment. Zero-Touch Provisioning brings new switches online without manual CLI configuration. The controller provides topology discovery, device status monitoring and scripted configuration or firmware updates across multiple switches from a single interface. On-premises deployment is available with no licensing fee.
Enterprise-grade reliability
The CX202P-24Y-M-H uses hot-swappable 1+1 redundant power supplies and 2+1 redundant, hot-swappable fans to eliminate single points of failure. Front-to-rear airflow and 100–240V AC / 36-72V DC input suit rack-mount campus and enterprise deployments — making the CX202P-24Y-M-H a dependable foundation for distribution and aggregation-layer networks.
| Data Plane Ports (100G) | 2x100GbE QSFP28 | Data Plane Ports (25G) | 24x25GbE SFP28 |
|---|---|---|---|
| Switch ASIC | Marvell Aldrin3 | Switching Capacity | 800Gbps |
| Forwarding Rate | 810Mpps | Packet Buffer | 8MB |
| Control CPU | Marvell CN9130 | Flash | 32GB eMMC |
| Next-hop Entries | 16K | Mac Addr. Entries | 32K |
| IPv4 Prefix Routes | 266K | IPv6 Prefix Routes | 133K |
| Power Modules | 1+1 Hot-swappable | FAN Modules | 2+1 Hot-swappable |
| Max Power Consumption | 168Watt | Input Range | 100- 240V AC | 36-72V DC |
| Rack Space | 1RU | Airflow | Front-to-rear |
| Dimension (HxWxD) | 44x440x470mm | Management Ports | 1xUSB2.0, 1xConsole RJ45, 1xMGMT RJ45 |
| Op.Temperature | 0 - 45℃ (32 to 113°F) | Op. Humidity | 5% - 90% (non-condensing) |
Loading…
Loading…
Loading…
Loading…
Loading…
| PTP Extension Card | Class C, None |
|---|---|
| Interface | SFP28, QSFP28 |
| PoE Power | Non-PoE |
| Role | Leaf-Spine, Core |
| Speed | 25G, 40G, 100G |
800 Gbps
810 Mpps
8 MB
2x100GbE
SONiC
Advanced Hardware Features
Engineered for scalability, efficiency, and always-on reliability.
25/100G High-Speed Ports Enable Flexible Network Scaling
Boasting 24×25GbE and 2×100GbE ports, the device supports interface splitting via breakout cables, which helps enhance the efficiency of network resource usage and accommodate diverse application scenarios.
The dual 1+1 hot-pluggable power supplies ensure continuous operation by allowing replacement without system shutdown. Equipped with 2+1 hot-pluggable fan modules, the system delivers reliable cooling performance to maintain stability and efficiency under demanding workloads.
Optional MPLS Module
Enhance Your Network with Advanced MPLS Capabilities
This switch model supports robust MPLS functionality, enabling efficient label-switched path management and seamless traffic forwarding across complex networks. It delivers active-active-like reliability through MPLS-based redundancy mechanisms, ensuring uninterrupted connectivity for mission-critical applications.
Advanced Routing Capabilities
Equipped with powerful routing capabilities, including static routing, VRF, OSPFv2/v3, BGP, and MP-BGP, this model ensures flexible network segmentation and dynamic route management for demanding enterprise and campus environments.
Feature Set
This model supports full network virtualization features:
GRE/static GRE tunnels for point-to-point overlays, plus VXLAN with BGP-EVPN for scalable L2/L3 virtualization across distributed environments.Perfect for flexible, multi-tenant campus/enterprise networks.
Features
This model delivers robust L2/L3 security at the network edge and core, featuring storm control, DHCPv4/v6 Snooping, ND Snooping, RA Guard, and SAVI. With DAI, IP Source Guard (IPv4/IPv6), and CoPP, it protects against spoofing, man-in-the-middle attacks, and control plane overload—ensuring a secure, resilient network.
BFD-based link fault detection and sub-50ms re-routing capabilities ensure rapid, reliable failover across critical routing protocols including OSPF, BGP, and IS-IS, minimizing network downtime and maintaining uninterrupted traffic flow even during unexpected link failures.
MC-LAG support enables networks to maintain uninterrupted connectivity through seamless redundancy and active-active reliability,
ensuring zero downtime and optimal performance during link or device failures.
Enterprise SONiC Switches with PTP Support
Our switch fully supports IEEE1588 PTPv2 and SMPTE 2059-2 standards both through hardware and software. The hardware port supports PTP as a Boundary Clock (BC) or Transparent Clock (TC), with customizable modules to fit customer needs. On the software side, Asteraix leads the way in implementing and optimizing PTP in SONiC, delivering top performance on our AsterNOS Enterprise Distribution. Currently, it supports PTP Class C with a maximum time error of ≤10 ns.
Network Packet Broker Functionality
The SONiC-based campus switches CX-M series take full advantage of SONiC’s open and containerized architecture, and fully leverage its capabilities by installing the new APP-PB container and deploying packet broker docker functionality on SONiC.
This integration unlocks a range of advanced features, including traffic mirroring, raw data tagging, filtering, aggregation, preprocessing, load balancing, and output replication.