16 x 1Gb RJ45, 2x10Gb SFP+, POE+(@150W) L2 and L3 Access Switch

SKU:

CX102S-16GT-M-S — 1RU entry level access switch with 16× 1G RJ45 + 2× 10G SFP+, powered by the Marvell AlleyCat5Y 70Gbps (98DX2556) ASIC and open SONiC-based AsterNOS.

  • 16× 1G RJ45 + 2× 10G SFP+,  70 Gbps wire-speed L2/L3 in a compact 1RU

  • 16× PoE+ (1-8 port support PoE++) · Non-PoE / 150W power budget options

  • Open SONiC (AsterNOS) — no per-feature licensing, no vendor lock-in

  • 13K IPv4 / 6.5K IPv6 routes, 32K MAC entries, 3MB packet buffer

  • MC-LAG for cross-device link aggregation and active-active forwarding

  • Optional IEEE 1588v2 PTP Class A (SMPTE 2059-2)

  • Build-in 1 PSU / 2 fans, optional Network Packet Broker container

Request Discount

70 Gbps

Switching Capacity

13K

IPv4 Routes

32K

MAC Table Size

The CX102S-16GT-M-S is a 1U access switch

that delivers 16× 1GbE RJ45 ports plus 2× 10G SFP+ uplinks (downgradable to 1GbE) for 70 Gbps of switching capacity, with 3MB of packet buffer. Built on the Marvell® Prestera® 98DX2556 (98DX25xx family) ASIC and running Enterprise SONiC (AsterNOS), it is purpose-built as an access-layer switch for enterprise and campus networks, aggregating IP phones, Wi-Fi access points, and endpoint devices onto a 10G-capable uplink.

With 13K IPv4 routes, 6.5K IPv6 routes, and 32K MAC entries, the CX102S-16GT-M-S handles the routing and endpoint scale typical of a mid-size access deployment. Its dual 10G uplinks connect directly into a distribution or leaf switch without an intermediate speed-conversion step.

Enterprise SONiC, full L2/L3 and open management

The switch ships preloaded with AsterNOS, Enterprise SONiC distribution, on the same single software image used across the CX-M family. On top of it sits a full Layer 2/Layer 3 feature set spanning stability, scalability, and traffic control, with industry-standard CLI and SNMP v1/v2/v3 keeping the switch consistent with existing operations workflows.

Advanced routing with active-active redundancy

Static routing, VRF, OSPFv2/v3, BGP, and MP-BGP give the CX102S-16GT-M flexible segmentation and dynamic route management for enterprise and campus environments. MC-LAG support adds active-active redundancy across dual-homed links, and BFD-based link fault detection re-routes traffic across OSPF, BGP and IS-IS in under 50ms, keeping downtime minimal during unplanned outages at the access layer.

PoE+/PoE++ power delivery

All 16 ports support PoE+ (802.3at, 30W/port), with 8 of the 16 ports additionally configurable for PoE++ (802.3bt, 60W/port). The switch auto-detects connected devices and supplies the appropriate power without manual configuration. It is available in a 150W total PoE power budget or non-PoE configuration, sized for IP phones, Wi-Fi 6/Wi-Fi 7 access points, and surveillance cameras on the network.

Optional precision timing

The CX102S-16GT-M-S supports IEEE 1588v2 PTP and SMPTE 2059-2 through hardware and software, with the hardware port operating as a Boundary Clock (BC) or Transparent Clock (TC). An optional PTP module adds Class A accuracy (≤50ns maximum time error) for access deployments where downstream devices also need a synchronized time reference.

Optional network packet broker

An optional APP-PB container, built on SONiC's containerized architecture, adds traffic mirroring, raw data tagging, filtering, aggregation, preprocessing, load balancing and output replication — without a separate packet broker appliance.

Compact footprint for access deployments

The CX102S-16GT-M-S fits standard access closets and wall-mount enclosures. A single built-in power supply and two built-in fans keep the design simple, with a 100–240V AC input and 0–45°C operating range for standard entry access locations.

Data Plane Ports (10G)2x10GbE SFP+
Data Plane Ports (1G)16x1GbE RJ45
PoE Ports16x PoE+(30Watt), 1-8 port support PoE++ (60Watt), total 150Watt budget
PoE StandardIEEE 802.3af/at/bt
Switch ASICMarvell Allleycat 5Y
Switching Capacity70Gbps
Packet Buffer3MB
Control CPUCortex-A55
Control Plane Memory4GB DDR4/32GB eMMC
Management Ports1xRJ45 serial console, 1xUSB2.0
Nexthop1.5K
Mac Addr. Entries32K
IPv4 Prefix Routes13K
IPv6 Prefix Routes6.5K
Power Module1 Built-in
FAN Modules2 Built-in
Max Power Consumption21Watt(w/o PoE)
Input Range100- 240V AC
Rack Space1RU
AirflowFront to Rear
Dimension (HxWxD)44x215x310mm
Weight2.2KG
Op.Temperature0 - 45℃ (32 to 113°F)
Op. Humidity5% - 90% (non-condensing)

Optimized Software for Advanced Workloads-AsterNOS

AsterNOS is the pre-installed network operating system on Asteraix’s CX-M Series campus switches. Built on SONiC and enhanced beyond the open-source version, AsterNOS offers advanced Layer 2 and Layer 3 features, as well as sophisticated routing capabilities. Support VXLAN EVPN virtualization, it supports scalable campus networks. AsterNOS is smart, secure, and easy to manage, providing a reliable operating platform for always-on enterprise networks.

Layer 2 Features
4K VLANs
Voice VLAN
Multiple Spanning Tree Protocol
QinQ
Link Aggregation Control Protocol
Multi-Chassis Link Aggregation
VLAN Trunking
Link Layer Discovery Protocol (LLDP)
LLDP Enhancements for PoE
Port Isolation
Jumbo Frames (9216 Bytes)
IGMP Snooping
Storm Control
Monitor Link
BPDU Guard, BPDU Filter
Loopback Detection
Layer 3 Features
IPv4/v6 Dual Stack
Policy Based Routing
Resilient ECMP
ARP-to-Host
VRF
Bi-Directional Forwarding Detection (BFD)
IGMP v2/v3
Route Map
VRRP
GRE
Routing Protocols: OSPF v2/v3, BGP, MP-BGP
Virtualization Features
Type 2: MAC/IP Advertisement
Type 3: Inclusive Multicast Route
Type 5: IP Prefix Route
Centralized Gateway
Distributed Gateway
Mgmt & Monitoring
Asteria Campus Controller
Industry Standard CLI
Zero Touch Provisioning (ZTP)
SNMP v1/v2/v3
sFlow
Port Mirroring
Syslog
Log Management
PTP IEEE 1588v2 (TC and BC)
Containerized Custom Tools
BGP/BFD Operational Status
Quality of Service
8 Queues per Port
802.1p Based Classification
DSCP Based Classification
Strict priority queueing
DWRR Scheduling
Policing/Shaping
Rate Limiting
Security Features
Service ACLs
ACL Logging and Counters
Control Plane Policing (CoPP)
Dynamic ARP Inspection (DAI)
IP Source Guard v4/v6
DHCPv4/v6 Relay
DHCPv4/v6 Snooping
ND Snooping
802.1x Authentication
Portal Authentication
MAC Authentication Bypass (MAB)
Dynamic VLAN Assignment
TACACS+
RADIUS
IPSG/DAI/SAVI

Marvell® Prestera® 98DX25xx (98DX2556 and family)

The 98DX25xx is a family of low-power Ethernet switches for cost-sensitive enterprise/SMB access and cloud edge, supporting 1/2.5GbE network access ports with 10GbE uplink and stacking. Built as an upgrade to the Prestera 98DX33xx/32xx/22xx/23xx family, the devices offer enlarged table scales, an enhanced multilayer feature set, improved security, and higher CPU subsystem performance, with an optimized RBOM design suited for unmanaged, cloud-managed, and full L2/L3-managed access platforms.

Architecture & performance

  • Multi-rate 1G/2.5G/5G/10G/22G port support via QSGMII Switch-PHY interface, carrying multiple 10M/100M/1G Ethernet ports over a single SerDes lane

  • 10G uplink and stacking ports

  • Integrated Arm® Cortex dual-core CPU with additional Arm co-processors offloading real-time applications from the host CPU, and high-capacity DDR3/DDR4 support

  • Single clock input and unified power rails for optimized RBOM; advanced process node delivering more than 20% power savings over the prior generation

Timing & synchronization

  • SyncE frequency synchronization

Security — SecureIQ

  • SecureIQ: secure boot and secured storage

  • SCT / NST control and management plane protection; reactive DDoS mitigation

Telemetry & intelligence

  • Entry-level cloud edge telemetry for network visibility, actionable analytics, and troubleshooting

CERTIFICATE

ISO 9001ISO 9001

ISO 14001ISO 14001

ISO 45001ISO 45001

ISO 27001ISO 27001

FCCFCC

CECE

SCOPE

Quality management system

Environmental management

Occupational health and safety

Information security management

US radio frequency compliance

EU health, safety and environmental compliance