Skip to main content

CX204P-16Y-M-E

16x25Gb SFP28 L3 Aggregation Switch, 4x100Gb QSFP28 Uplinks, Enterprise SONiC NOS, Marvell Aldrin 3 

  • 16-Port 25Gb/10G+ 4x100Gb/40G
  • Powered by Enterprise SONiC Distribution & Marvell Aldrin3
  • Supports MC-LAG, VXLAN, BGP-EVPN, BFD, IPSG, IPV6, etc.
  • Designed to excel as a Distribution/Aggregation switch
  • Top-of-Rack/Leaf switches for private clouds or small data centers
Please login to request a quote

16x25Gb SFP28, 4x100Gb QSFP28 L3 Aggregation/Leaf Switch,  Enterprise SONiC Ready, MLAG VXLAN

The Asterfusion CX204P-16Y-M-E is a 16×25G aggregation switch with 4×100G QSFP28 uplinks, built for campus aggregation, spine applications, enterprise networks, and cloud service provider deployments. Powered by the Marvell Aldrin 3 chipset in a compact 1RU form factor, it delivers high throughput, port density, and efficiency in a sleek design.
Running on AsterNOS, the commercial SONiC-based NOS, this Layer 3 switch offers a comprehensive feature set—from industry-standard routing protocols like OSPF and BGP to advanced capabilities including VXLAN, BGP-EVPN, MLAG, and IPv6. Optional PTP and MPLS support further enable low-latency, time-sensitive, and high-performance workloads.
In modern network architectures, the CX204P-16Y-M-E typically serves as a distribution/aggregation switch, but in small to mid-sized networks, it can also function as a cost-effective Top-of-Rack (ToR)/Leaf switch, providing a versatile solution for private clouds or compact data centers.

Specifications

Ports16x 25G SFP28
4x 100G QSFP28
Switch ChipMarvell Aldrin 3
Switching Capacity1.09 TbpsMAC Address Entries32K
Forwarding Rate600 Mpps IPv4 Prefix Routes16K
RAM4 GB IPv6 Prefix Routes8K
Flash Memory32GB eMMCARP Entries16K
Packet Buffer6 MBMax. Power Consumption<125W
Hot-swappable AC Power Supplies2 (1+1 Redundancy)Rack Units1 RU
Fixed Fans3Thermal AirflowFront-to-Rear
Dimensions (HxWxD)44x 440x 470mmWeight9KG
Operating Temperature0 - 45℃Relative
Humidity
5%-90% (non-condensing)

Optimized Software for Advanced Workloads-AsterNOS

AsterNOS is the pre-installed network operating system on Asterfusion’s CX-M Series campus switches. Built on SONiC, but enhanced far beyond the open-source version, AsterNOS delivers a rich set of enterprise-grade features tailored for modern campus and enterprise office environments. It supports comprehensive Layer 2 and Layer 3 protocols, advanced routing, and virtualization capabilities such as VXLAN and BGP-EVPN—along with powerful extensions like MPLS and MacSec for more specialized use cases. Smart, secure, and simple to manage, AsterNOS is purpose-built to power high-performance, always-on campus networks with ease and confidence.

Optimized Software for Advanced Workloads – AsterNOS

AsterNOS is the pre-installed network operating system on Asterfusion’s CX-M Series campus switches. Built on SONiC, but enhanced far beyond the open-source version, AsterNOS delivers a rich set of enterprise-grade features tailored for modern campus and enterprise office environments. It supports comprehensive Layer 2 and Layer 3 protocols, advanced routing, and virtualization capabilities such as VXLAN and BGP-EVPN—along with powerful extensions like MPLS and MacSec for more specialized use cases. Smart, secure, and simple to manage, AsterNOS is purpose-built to power high-performance, always-on campus networks with ease and confidence.

Software Features

layer-3-features-icon

Layer 3 Features

  • IPv4/v6 Dual Stack
  • Policy Based Routing
  • Resilient ECMP
  • ARP-to-Host
  • VRF
  • Bi-Directional Forwarding Detection (BFD)
  • IGMP v2/v3
  • Route Map
  • VRRP
  • GRE
  • Routing Protocols: OSPF v2/v3, BGP, MP-BGP

layer-2-features-icon

Virtualization Features

  • VXLAN Centralized/Distributed Gateway
  • EVPN Type 2/3/5

    Quality of Service (QoS)

  • 8 Queues per Port
  • 802.1p Based Classification
  • DSCP Based Classification
  • Strict priority queueing
  • DWRR Scheduling
  • Policing/Shaping
  • Rate Limiting

security-features-icon

Management and Monitoring

  • Asteria Campus Controller
  • Industry Standard CLI
  • Zero Touch Provisioning (ZTP)
  • SNMP v1/v2/v3
  • sFlow
  • Port Mirroring
  • Syslog
  • Log Management
  • PTP IEEE 1588v2 (TC and BC)
  • Containerized Custom Tools
  • BGP/BFD Operational Status

Quality Certifications

ISO-9001-SGS
ISO-14001-SGS
ISO-45001-SGS
ISO-IEC-27001-SGS
fcc-icon
ce-icon

Features

25/100G High-Speed Ports Enable Flexible Network Scaling

Boasting 16×25GbE and 4×100GbE ports, the device supports interface splitting via breakout cables, which helps enhance the efficiency of network resource usage and accommodate diverse application scenarios.

1.09 Tbps

Switching Capacity

600 Mpps

Forwarding Rate

6MB

Packet Buffer

ai-ml-hpc

1+1 Hot Pluggable PSU Modules

PSUs can be removed/replaced without shutting down the system.
The device supports hot-swappable power supplies,
ensuring uninterrupted system operation.

Advanced Routing Capabilities

Equipped with powerful routing capabilities, including static routing, VRF, OSPFv2/v3, BGP, and MP-BGP, this model ensures flexible network segmentation and dynamic route management for demanding enterprise and campus environments.
ai-ml-hpc

Comprehensive Virtualization Feature Set

This model supports full network virtualization features:
GRE/static GRE tunnels for point-to-point overlays, plus VXLAN with BGP-EVPN for scalable L2/L3 virtualization across distributed environments.
Perfect for flexible, multi-tenant campus/enterprise networks.
ai-ml-hpc

Harness MPLS Capabilities for Seamless Redundancy and Resilient Path Engineering(Optional)

This switch model supports robust MPLS functionality, enabling efficient label-switched path management and seamless traffic forwarding across complex networks. It delivers active-active-like reliability through MPLS-based redundancy mechanisms, ensuring uninterrupted connectivity for mission-critical applications.

ai-ml-hpc

Advanced Network Protection Features

This model provides strong L2/L3 security for network edge and core, including storm control, DHCPv4/v6 Snooping, ND Snooping, RA Guard, and SAVI (source IP validation). It adds DAI, IP Source Guard (IPv4/IPv6), and CoPP to block spoofing, man-in-the-middle attacks, and control plane overload—ensuring a secure, resilient network.attacks, and control plane overload—ensuring a secure and resilient network environment.
ai-ml-hpc
BFD-Based Link Fault Detection & Re-routing in Sub-50ms

BFD-based link fault detection and sub-50ms re-routing capabilities ensure rapid, reliable failover across critical routing protocols including OSPF, BGP, and IS-IS, minimizing network downtime and maintaining uninterrupted traffic flow even during unexpected link failures.

Achieve seamless redundancy and active-active reliability with MC-LAG support.

MC-LAG support enables networks to maintain uninterrupted connectivity through seamless redundancy and active-active reliability,
ensuring zero downtime and optimal performance during link or device failures.

ai-ml-hpc

Unified Visualization, Management & O&M with OpenWiFi Network Controller

Our campus switches, powered by enterprise SONiC, integrate with a TIP OpenWiFi – based controller. This integration enables unified monitoring, automated deployment, and streamlined operations.
Key features include intelligent topology planning, ZTP, real – time network visualization, and script – based automation. With centralized remote management and flexible deployment options (cloud or on – premise), this solution offers full control over the entire campus network, from APs to switches. It helps IT teams optimize performance, speed up troubleshooting, and scale easily. For more←
the-software-architecture-of-the-sonic-based-packet-broker
the-software-architecture-of-the-sonic-based-packet-broker
Our campus switches, powered by enterprise SONiC, integrate with a TIP OpenWiFi – based controller. This integration enables unified monitoring, automated deployment, and streamlined operations.
Key features include intelligent topology planning, ZTP, real – time network visualization, and script – based automation. With centralized remote management and flexible deployment options (cloud or on – premise), this solution offers full control over the entire campus network, from APs to switches. It helps IT teams optimize performance, speed up troubleshooting, and scale easily. For more←

Network Packet Broker Functionality (Optional)

The SONiC-based campus switches CX-M series take full advantage of SONiC’s open and containerized architecture, and fully leverage its capabilities by installing the new APP-PB container and deploying packet broker docker functionality on SONiC.

This integration unlocks a range of advanced features, including traffic mirroring, raw data tagging, filtering, aggregation, preprocessing, load balancing, and output replication. For more←

the-software-architecture-of-the-sonic-based-packet-broker
the-software-architecture-of-the-sonic-based-packet-broker

The SONiC-based campus switches CX-M series take full advantage of SONiC’s open and containerized architecture, and fully leverage its capabilities by installing the new APP-PB container and deploying packet broker docker functionality on SONiC.

This integration unlocks a range of advanced features, including traffic mirroring, raw data tagging, filtering, aggregation, preprocessing, load balancing, and output replication. For more←

Panel

Warranty

2-year hardware warranty.
1-year free software upgrades and technical support.
Enterprise SONiC software lifetime license included.

Warranty

2-year hardware warranty.
1-year free software upgrades and technical support.
Enterprise SONiC software lifetime license included.

Related Products

Uplink Ports
4x 100G QSFP28
2x 100G QSFP28
6x 100G QSFP28
8x 100G QSFP28
SFP28 Ports
16x 25G SFP28
24x 25G SFP28
48x 25G SFP28
48x 25G SFP28
Management Layer
L3+
L3+
L3+
L3+
Power Supply
1+1 Hot-pluggable
1+1 Hot-pluggable
1+1 Hot-pluggable
1+1 Hot-pluggable
Fan
3 Built-in
2+1 Hot-pluggable
4+1 Hot-pluggable
3+1 Hot-pluggable
Optional DPU Support
No
No
Yes(optional)
No
OSPF, BGP, VXLAN, BGP-EVPN, MLAG, IPV6, PTP, QoS, MPLS
Yes
Yes
Yes
Yes