CX102S-16GT-DPU-M-SWP
Enterprise SONiC 16-Port Gigabit Switch with Two Marvell OCTEON TX2 CN9130 DPUs as Gateway and Server
- Enterprise SONiC 16-Port Gigabit POE++ layer 3 switch.
- Run OpenWRT/Ubuntu/Debian on the smallest L3 switch.
- 10Gps wirespeed with DPDK/VPP.
- Extensive support for open-source software run on DPUs.
- One unit integrating multiple functions: Switch, Router, Gateway, Server, etc.
Ultimate All-in-One Device: 16 Ports Gigabit Switch, Gateway, and Server Powered by SONiC, OpenWRT, and Ubuntu, Dual Marvell OCTEON TX2 CN9130 DPUs
The Asterfusion CX102S-16GT-DPU-M-SWP is an advanced all-in-one solution combining switch, intelligent gateway, and server, tailored for small enterprises and SOHOs. Featuring the Marvell Prestera MV-DX2556 switch chip with a 72Gbps capacity and running the enterprise SONiC version, it supports comprehensive Layer 2 and Layer 3 functions, including OSPF, BGP, VXLAN, BGP-EVPN, MLAG, and IPv6. Additionally, it integrates 1 or 2 Marvell OCTEON CN9130 DPU chips with 4-core ARMv8 Cortex-A72 processors and encryption engines, connected via 10G Ethernet on the backplane. This combination enables it to serve as both a networking and computing infrastructure, addressing diverse application needs and providing seamless, one-stop IT services.
Specifications
|
Operating System
- The CX102S-16GT-DPU-M-SWP is pre-installed with enterprise SONiC Distribution, which provides a comprehensive range of Layer 2/3 functions, as outlined below.
- The device features two Marvell OCTEON TX2 CN9130 DPUs, one pre-installed with OpenWrt and the other pre-installed with Ubuntu/Debian.
- Additionally, the device supports CentOS, OpenSUSE, Arch Linux, AlmaLinux, Rocky Linux, Linux Mint, and Elementary OS. The OS can be installed and upgraded using a USB disk with Trusted Firmware and UEFI.
Layer 2 Features
- 4K VLANs
- Voice VLAN
- Multiple Spanning Tree Protocol (MSTP)
- QinQ
- Link Aggregation Control Protocol (LACP)
- Multi-Chassis Link Aggregation (MC-LAG)
- VLAN Trunking
- Link Layer Discovery Protocol (LLDP)
- LLDP Enhancements for PoE
- Port Isolation
- Jumbo Frames (9216 Bytes)
- IGMP Snooping
- Storm Control
- Monitor Link
Layer 3 Features
- IPv4/v6 Dual Stack
- Policy Based Routing
- Resilient ECMP
- ARP-to-Host
- VRF
- Bi-Directional Forwarding Detection (BFD)
- Route Map
- VRRP
- Routing Protocols: OSPF v2/v3, BGP, MP-BGP
Support PTP and PoE++
- Optional PTP Module
- PTP/SyncE accuracy is 20ns
- Port 1-Port 8 offers POE++ (IEEE 802.3bt) standard
- Overall PoE power budget is 150W
Security Features
- Service ACLs
- ACL Logging and Counters
- Control Plane Policing (CoPP)
- Dynamic ARP Inspection (DAI)
- IP Source Guard v4/v6
- DHCPv4/v6 Relay
- DHCPv4/v6 Snooping
- ND Snooping
- 802.1x Authentication
- Portal Authentication
- MAC Authentication Bypass (MAB)
- Dynamic VLAN Assignment
- TACACS+
- RADIUS
Management and Monitoring
- Asteria Campus Controller
- Industry Standard CLI
- Zero Touch Provisioning (ZTP)
- SNMP v1/v2/v3
- Port Mirroring
- Syslog
- Log Management
- PTP IEEE 1588v2 (TC and BC)
- Containerized Custom Tools
Quality of Service (QoS)
- 8 Queues per Port
- 802.1p Based Classification
- DSCP Based Classification
- Strict priority queueing
- DWRR Scheduling
- Policing/Shaping
- Rate Limiting
Application Scenarios
In addition to the standard switching functions, the CX102S-16GT-DPU incorporates two extra Marvell OCTEON TX2 CN9130 DPUs, thereby making the device the most multifaceted and versatile. It is therefore pertinent to explore the potential applications of these two DPUs .The following section outlines a number of typical scenarios in which the CX102S two DPUs are particularly effective, and which can be utilised not only individually but also in combination.
Router
OpenWRT
- Up to 10Gbps routing performance
- Multi-WAN load balancing
- Easy-to-use GUI
Firewall
OpenWRT + GUFW
- Flexible and efficient iptables configuration suitable for a wide range of scenarios
- GUFW provides a simple and user-friendly GUI
VPN Gateway
OpenWRT + OpenVPN/WireGuard
- Hardware-accelerated OpenVPN with encryption/decryption engine supports up to 5Gbps throughput
- WireGuard benefits from a 4-core CPU for accelerated performance
- Installation of the latest VPN software on demand to adapt to changing network environments
IDS/IPS
OpenWRT + Snort
- Leading open-source IDS/IPS with continuously updated rule sets from its active open community
- Open-source SNORT GUI provides an easy-to-use user interface
- The active community provides regularly updated rule sets to protect against the latest cyber-attacks
Server
Ubuntu Server + Nginx + Mysql
- Run on the second DPU
- Hosting corporate websites
- Install CiviCRM, ERPNext and other open source software on demand to achieve free CRM, ERP and other services
Asterfusion OpenWiFi Controller
Ubuntu + Astria Campus Controller
- Run on the second DPU
- Centralized management of APs
- ZTP for automatic deployment and operation
Hardware Panel
What’s in the box
Resources
Warranty
This model is backed by a 2 year limited hardware warranty. Multiple extended support options, including advanced replacement and 24×7 support services, are available. Contact us for complete details.