Campus Access Switch Buying Guide

Why the access switch is the foundation of your campus network

The access switch is the equipment that every user connects to directly: it supplies PoE power to your Wi-Fi access points, IP phones, and surveillance cameras, while connecting every workstation. A poor access switch choice carries consequences for 7 to 10 years—the typical hardware lifecycle. The consequences of undersizing include insufficient PoE capacity for Wi-Fi 6E/7 APs, which require 25-50W each; saturated uplinks during peak hours; an inability to deploy 802.1X/NAC for security; and premature replacement costs that negate the initial savings.

This guide compares the three leading campus product lines in 2026: Cisco Catalyst 9200/9300, Juniper EX4400, and HPE Aruba CX 6300. We provide exact part numbers, indicative prices, and practical sizing guidelines.

Campus switch selection criteria

PoE: the No. 1 criterion in 2026

With the growing adoption of Wi-Fi 6E/7, with APs requiring 25-50W, 4K PTZ cameras requiring 60-90W, and PoE digital signage requiring 30-60W, the switch's PoE budget has become the decisive criterion. Do not focus solely on the number of ports—consider the total PoE budget in watts.

• PoE+ (802.3at): 30W per port. Sufficient for Wi-Fi 5/6 APs, IP phones, and fixed cameras.
• PoE++ (802.3bt Type 3): 60W per port. Designed for high-density Wi-Fi 6E APs and PTZ cameras.
• PoE++ (802.3bt Type 4): 90W per port. Designed for heated 4K PTZ cameras and 32-inch displays.
• UPOE (Cisco proprietary): 60W. The predecessor to PoE++, still widely deployed.
• Total budget: a Catalyst 9300-48P delivers 822W with a single PSU or 1100W with dual PSUs. Sizing example: 30 APs × 25W + 10 cameras × 15W + 20 phones × 5W = 1000W. Dual PSUs are required.

Stacking: manage N switches as a single unit

• Cisco StackWise-480 (Catalyst 9300): 480 Gbps backplane, with up to 8 switches per stack. Dedicated STACK-T1-3M cable (~€400).
• Cisco StackWise-1T (Catalyst 9300X): 1 Tbps backplane. Designed for multi-gig versions.
• Cisco StackWise-160 (Catalyst 9200): 160 Gbps, 8 switches. Cost-effective option with a lower-capacity backplane.
• Juniper Virtual Chassis (EX4400): up to 10 switches using SFP+ ports or dedicated VCPs. 80 Gbps per VC link.
• HPE Aruba VSX (CX 6300): a pair of 2 switches in an active-active MLAG configuration, with no stack beyond 2 switches. A modern architecture that is more flexible than conventional stacking.

MACsec: mandatory L2 encryption for NIS2

MACsec (802.1AE) encrypts Ethernet traffic hop by hop between two switches. It is a NIS2 requirement for essential entities handling sensitive data in sectors such as healthcare, finance, and defense. All modern campus switches support it, but with different capabilities:

• Catalyst 9300: full MACsec-256 (AES-GCM-256) on all ports. The gold standard.
• Catalyst 9200: limited MACsec-128. No MACsec-256. Acceptable for non-critical sites.
• Juniper EX4400: MACsec 128/256 on all downlink and uplink ports.
• Aruba CX 6300: MACsec 256 on CX 6300M models. Not available on the CX 6100.

Cisco Catalyst 9200/9300: the dominant ecosystem

Catalyst 9200: entry-level campus switching

• C9200-24P: 24 1G PoE+ ports, 4× SFP+ uplinks, and StackWise-160. Designed for SMBs and branch offices. OPTINOC price: ~€2,200 excluding VAT.
• C9200-48P: 48 1G PoE+ ports and 4× SFP+ uplinks. Price: ~€3,400 excluding VAT.
• C9200L-24P-4G: L version with 4× fixed 1G uplinks and no modules. Cost-effective option. Price: ~€1,800 excluding VAT.
• A 1-year DNA Essentials license is included. No DNA Advantage, SD-Access, or TrustSec.
• Verdict: suitable for sites with fewer than 200 users and no advanced segmentation requirements.

Catalyst 9300: the enterprise leader

• C9300-24P-A: 24 1G PoE+ ports and modular uplinks (4× 10G, 2× 25G, or 2× 40G). DNA Advantage. OPTINOC price: ~€5,500 excluding VAT.
• C9300-48P-A: 48 1G PoE+ ports. The world's best-selling campus switch. Price: ~€7,500 excluding VAT.
• C9300-48U-A: 48 1G UPOE ports (60W/port). Designed for PoE-intensive environments. Price: ~€9,000 excluding VAT.
• C9300X-48HX-A: 48 multi-gig ports (1/2.5/5/10G) with PoE++. Designed for Wi-Fi 6E/7. Price: ~€12,000 excluding VAT.
• Key features: StackWise-480, MACsec-256, TrustSec/SGT, SD-Access readiness, and ISSU for non-disruptive upgrades.
• DNA Advantage license (~€25/port/year): SD-Access, TrustSec, MACsec, Assurance, and ISE integration.

Juniper EX4400: the automation-first alternative

• EX4400-24P: 24 1G PoE+ ports and 4× 25G SFP28 uplinks. Junos OS. OPTINOC price: ~€4,200 excluding VAT.
• EX4400-48P: 48 1G PoE++ 90W ports and 4× 25G SFP28 uplinks. Price: ~€5,800 excluding VAT.
• EX4400-48MP: 48 multi-gig ports (1/2.5/5/10G) with PoE++. Designed for Wi-Fi 6E/7. Price: ~€8,500 excluding VAT.
• Virtual Chassis with up to 10 units. VC bandwidth: 80 Gbps.
• Junos OS: atomic commits, 49 rollback levels, native NETCONF, and REST API.
• Mist AI integration: cloud-managed administration and Marvis AI troubleshooting.

The Juniper advantage: the EX4400-48P costs 20-25% less than the Catalyst 9300-48P-A while offering comparable features. The savings across 20 switches amount to €30K-€40K. Junos + Mist AI also provide a more modern operational experience than DNA Center, which requires a €50K-€150K appliance.

HPE Aruba CX 6300: the European challenger

• CX 6300M-24P: 24 1G PoE+ ports and 4× SFP56 (50G) uplinks. AOS-CX. OPTINOC price: ~€3,800 excluding VAT.
• CX 6300M-48P: 48 1G PoE++ 90W ports and 4× SFP56 uplinks. 1440W PoE budget. Price: ~€5,200 excluding VAT.
• CX 6300F-48Y: 48 25G SFP28 ports + 4× SFP56. Multi-gig version for distribution. Price: ~€9,000 excluding VAT.
• VSX: active-active MLAG between 2 switches, with no stack beyond 2 switches but greater resilience.
• AOS-CX: Linux-based OS with a native NoSQL database. REST API coverage for 100% of functions. Automation-first.
• Aruba Central: SaaS cloud management, AI Insights, and Dynamic Segmentation.

The Aruba CX advantage: AOS-CX is the most modern switch OS on the market. It features a queryable time-series database—for example, to determine what happened on port 12 two hours ago—a native REST API for all functions, and active-active VSX, compared with active-standby stacking from Cisco/Juniper. HPE's acquisition of Juniper in 2025 strengthens its European position.

Sizing: how many switches per site

SMB with 50-200 users (1 site)

• Architecture: 2-4 stacked access switches + 1 firewall
• Budget recommendation: 2× Catalyst 9200-48P or 2× EX4400-48P
• Enterprise recommendation: 2× Catalyst 9300-48P-A in a StackWise-480 stack
• Switch budget: €7,000-€15,000 excluding VAT

Mid-market company with 200-1000 users (multiple sites)

• Architecture per site: 4-8 access switches + 1-2 distribution switches
• Access: Catalyst 9300-48P-A or EX4400-48P (stack of 4-8)
• Distribution: Catalyst 9500-24Y4C or EX4650-48Y
• Budget per site: €30,000-€60,000 excluding VAT for switches

Large enterprise with 1000+ users

• Architecture: three-tier design (access + distribution + core) or a campus spine-leaf architecture
• Access: 20-50 Catalyst 9300-48P-A switches in stacks of 4-8
• Distribution: 4-8 Catalyst 9500-48Y4C switches
• Core: 2 Catalyst 9600 switches or Aruba CX 8400 switches in a VSX configuration
• Campus budget: €200K-€500K excluding VAT for switches + licenses

Our recommendation

For 70% of enterprise campus deployments in France: Cisco Catalyst 9300-48P-A. The DNA ecosystem, the availability of CCNA/CCNP-certified professionals, and TAC support justify the premium. For new cloud-managed deployments without a requirement for Cisco expertise, Juniper EX4400 + Mist AI offers the best balance of TCO and innovation. For organizations with an existing HPE/Aruba strategy, the CX 6300M is the natural choice.

OPTINOC distributes all three product lines with manufacturer warranties. Request a free sizing assessment based on your floor plans and number of users.