Ethernet Access Switch MES2300-24
- Level:
- L3
- Bandwidth:
- 128 Gbps
- Interfaces:
- 24x1G, 4x10G SFP+
- Power supply:
- AC/DC
New
Description
The new generation of MES access switches connects end users to the network of large enterprises, small and medium-sized businesses and service provider networks using 1G/10G interfaces.
The device ports support both 1 Gbps and 10 Gbps speeds, providing flexibility in use and the ability to gradually upgrade to higher data rates. The non-blocking architecture allows correct processing of packets under maximum loads, while maintaining minimal and predictable delays on all types of traffic.
The switch functionality provides physical stacking, support for VLANs, multicast groups, and advanced security features.
Advanced warranty and support packages
Extend basic package with additional paid services
Learn more
Specifications
- Level:
- L3
- Bandwidth:
- 128 Gbps
- Interfaces:
- 24x1G, 4x10G SFP+
- QoS:
- 8 egress queues per port
- Stacking:
- up to 8 devices
- MAC table:
- 16384
- VLAN table:
- 4094
- ARP:
- 2039
- Power supply:
- AC/DC
ECCM
Eltex Cloud Configuration Manager is a centralized system for network equipment management
Features and capabilities
For full specifications and manuals see Documents and files section below
Interfaces:
10/100/1000BASE-T (RJ-45)
24
10GBASE-R (SFP+)/1000BASE-X (SFP)
4
Console port RS-232 (RJ-45)
1
Performance:
Bandwidth
128 Gbps
Buffer memory
1,5 MB
RAM (DDR4)
2 GB
ROM (RAW NAND)
512 MB
MAC table
16384
VLAN table
4094
VRRP routers
255
Link Aggregation Groups (LAG)
32, up to 8 ports per LAG
Quality of Sevice (QoS)
8 egress queues per port
Jumbo frames
10240 bytes
Stacking
8 devices
Physical parameters:
Power supply
100–240 V AC, 50–60 Hz
36–72 V DC
Dying Gasp support
Yes
Operating temperature
From -20 to +50 °С
Storage temperature
From -50 to +70 °С
Cooling
Passive
Operating humidity
No more than 80 %
Form factor
19", 1U
Dimensions
430x44x204 mm
Related products
Components, modules, and software options that are purchased additionally
.png)
.png)
.png)
.png)
Free
Basic warranty
Up to 5 years
Extended warranty
Hit
Free
First in, first out
Monday to Friday (GMT +7)
Priority support
Monday to Friday (GMT +7)
Priority support
Monday to Friday (GMT +5)
Support
Hit
Documents and files
Firmware version upgrade guide (Issue date: 18-04-2025)
PDF, 969 Kb
Firmware version 6.6.8.2 R3 (Issue date: 29-07-2025)
ZIP, 49.9 Mb
MIB files (Issue date: 29-07-2025)
ZIP, 1.42 Mb
The firmware is compatible with other device models:
MES3300-08F, MES3300-16F, MES3500I-10P, MES2300D-24P, MES2300-48P, MES5324A rev.C/C1, MES2300B-24, MES3300-24F, MES2300B-24F, MES3300-48F, MES3300-24, MES2300B-48, MES2300-24P, MES2300DI-28, MES3300-48, MES5332A rev.C, MES2300-24F, MES5316A rev.C/C1, MES3500I-08P
Firmware updates
Firmware version 6.6.8.2
Fixed:
- Fixed device reboot when connected to it by the dropbear ssh client;
- Fixed an error in transmitting traffic to a host connected via EVPN-multihoming;
- Fixed an error in the optical interface display on the MES3300-48F.
Previous versions
Firmware version 6.6.8.1
Added:
- Increased the number of characters in the route-map name to 64;
- Increased the number of characters in the prefix-list name to 64;
- The SFTP client is implemented;
- Implemented the functionality of 802.1x authentication with inaccessible authentication bypass;
- Implemented the Change of Authorization (CoA) functionality;
- User disconnection when receiving a Disconnect Request from Radius (CoA) is supported;
- Radius attribute No. 8 Framed-IP-Address is supported;
- Added the ability to configure the OOB source interface for sFlow;
- Added the ability to configure source-vrf for TFTP;
- Added the ability to configure UDP src port for SNTP;
- Implemented automatic addition of the phone's mac address to the oui-table for Voice VLAN functionality;
- Added a mechanism to avoid learning the mac address from incoming LLDP from the phone;
- Implemented the sending of an SNMP trap when adding a unit to the stack;
- Added the ability to copy the license for the specified unit in the stack;
- DNS operation in VRF is supported;
- sFlow operation in VRF is supported;
- SSH client operation in VRF is supported;
- Added the ability to change the administrative distance for the OSPF protocol in VRF;
- Added support for the NTP protocol;
- Added the ability to set a Port-Channel in RSPAN as the output interface.
- Implemented the ability to configure the RADIUS NAS-Port-Id attribute(87);
- Implemented the ability to authorize MAC and 802.1x clients on different radius servers.
Fixed:
- Fixed an error in the output of the show radius-servers status command with multiple configured RADIUS-servers;
- Fixed an error in the operation of the ip ssh port command. It now applies to all VRFs.;
- Fixed an error in the operation of the ACL with the log-input setting;
- Fixed an error in sFlow flow-sampling;
- Fixed the output of a false message when sFlow is running;
- Eliminated the output of information about non-existent interfaces in the stack using the SNMP protocol;
- Fixed an error when using the ip route 0.0.0.0 /0 x.x.x.x track command;
- Fixed the desynchronization of mac address tables on different VTEPs within the same ESI;
- Fixed MAC-Flapping in the scheme with VPC;
- Fixed an error when deleting the ACL and Port-Channel from the interface;
- Fixed reboot when executing the show qos tail-drop unit 1 command;
- Fixed device freezes during multiple reboots;
- Improved stability of the VPC protocol;
- Fixed the error of long Port-Channel transition to the Forwarding state when the portfast spanning-tree is configured on it;
- Improved VPC stability;
- Fixed incorrect operation of the BFD via the Port-Channel interface;
- Fixed a critical error on MES3300-XX when processing Gratuitous ARP from VRRP addresses on the OOB port.
Firmware version 6.6.7.5
Added:
- Added information about the hardware version of the device to the output of the show system id command;
- The possibility of adding VLANs on LAG interfaces via the WEB has been implemented;
- Added support for LACP Force operation mode;
- Added the display of static multicast records in the ip igmp snooping table;
- Added support for collaboration between DHCP relay and DHCP server;
- Added the ability to disable the USB port;
- Added the ability to statically configure OSPF neighbors;
- Added OSPF network type non-broadcast, point-to-multipoint non-broadcast;
- Added VRF support in DHCP Relay;
- Added support for TCP adjust-mss;
- Added the possibility of extended IS-IS database output;
- The collaboration of DHCP Relay with EVPN/VXLAN is supported;
- Added Multi-VRF support for hardware BFD sessions;
- Added the ability for VPC peer detection to work in VRF;
- Added synchronization of ARP records between switches of the same EVPN multihoming ESI group.
Fixed:
- Fixed reboot when copying configuration via scp/tftp/flash;
- Optimized work with flash memory;
- Fixed a reboot when entering the show logging command in the stack;
- Fixed a bug that causes stack units to reboot when there is a high CPU load;
- Fixed a bug that caused the stack of MES3300-48 and MES3300-48F devices to fail;
- The do show ip interface vrf all command has been restored;
- Fixed the issue of LAG LACP recovery in timeout short mode;
- Fixed an erroneous change of the OSPF zone in the settings when executing the passive-interface command;
- Fixed mac address authorization in multi-sessions mode;
- Fixed an error when copying a configuration containing the switchport trunk allowed vlan all command;
- Fixed an error in displaying the role of neighbors in the output of the show ip ospf neighbor command;
- Fixed the problem of interrupting traffic processing on the master's CPU when there is a high load on the stack;
- Fixed a problem with VXLAN traffic transmission when using trunk ports between spine/leaf;
- Fixed a problem with traffic routing via L3VNI VXLAN when there is a default route;
- Fixed the error of removing standard ipv4/ipv6 ACLs from the configuration;
- Fixed the possibility of restarting the device at the time of removing the ACL from the VLAN interface with qos advanced-mode trust dscp configured;
- Fixed a problem with blocking traffic on slave units when configuring BPDU Guard in RPVST mode;
- Fixed an issue with an i2c bus failure in the stack;
- Fixed an issue with resetting the exp label in the mpls header in transit traffic;
- Fixed a bug with MAC Flapping in the VPC scheme when using the Po interface, number above 48;
- Fixed critical errors that occur when editing device configurations in a VPC pair;
- Fixed an error with rebooting the switch during SNMP requests for DDM information;
- Fixed an error with switching to local command authorization when there is no response from the tacacs server;
- Fixed an error with authorization of commands on the backup tacacs+ server when the main server is unavailable;
- Fixed an error with rebooting the switch when authenticating on the tacacs+ server in single-connection mode;
- Fixed an error indicating an incorrect port in the logs when receiving TC BPDU;
- Improved stability of the SSH server;
- Fixed the error of long Port-Channel transition to the Forwarding state when the portfast spanning-tree is configured on it;
- Improved VPC stability;
- Fixed incorrect operation of the BFD via the Port-Channel interface.
Firmware Version 6.6.5.4
Added:
- Ability to configure OOB interface as a source-interface for SNMPv2;
- Ability to configure OOB interface as a source-interface for SNMPv3;
- SNMPv2 support in VRF;
- SNMPv3 support in VRF;
- GRE tunnel support;
- Support for multihomed connections for EVPN/VxLAN scenario with Ingress Replication.
Fixed:
- Improved stability of peer-detection functionality in VPC;
- Erroneous removal of voice vlan from interface by timeout in the presence of port security settings;
- SSH session hangs due to an error in calculating Message authentication code in SSH packet.
Firmware Version 6.6.5
Added:
- Added support for BGP Route Map, Community List and AS-Path List in VRF;
- Added BFD support for BGP in VRF;
- Added BFD support for OSPF in VRF;
- Added support for encryption of the user's password using the SHA512/md5 algorithm;
- Added BFD support for IS-IS;
- Added the ability to change the ipv4 gateway address in EVPN type 5 routes;
- Added support for the RADIUS client in VRF;
- Added the ability to configure the source-interface OOB for SYSLOG;
- Added the ability to configure the OOB source-interface for TACACS+;
- Added BFD support for OSPF;
- Added support for VCT cable diagnostics for SFP-T;
- Added support for an extended number of UDBs in the ACL;
- Increased the number of ACEs in ACL to 512;
- Added support for filtering routes by the value of the as-path attribute in BGP;
- Added community support in BGP;
- Added the ability to configure the source-interface OOB for SNTP;
- Added support for SNTP operation in VRF;
- Added support for SYSLOG operation in VRF;
- Added support for the TACACS+ client in VRF;
- Added support for SSH server operation in VRF;
- Added ARP suppression support for EVPN/VXLAN.
Fixed:
- Fixed the process of removing the VRF setting from the OOB interface;
- Fixed the behavior in which STP root BPDU packets did not pass through the VPC peer-link;
- Fixed a reboot that occurred when the number of ACL rules with port-range was exceeded;
- Fixed L3VNI collaboration with VXLAN in multicast replication mode;
- Fixed incorrect operation of PBR with VRRP;
- Fixed device freeze when configuring SNMPv3;
- Fixed a behavior where a MAC-flapping storm started in a VPC;
- Fixed incorrect isolation of VPC groups from peer-link;
- Fixed a issue with OSPF neighbours breaking when CPU utilisation is high;
- Fixed issue with sending BGP update EVPN Type-2 when MAC address re-learning in a different ethernet-segment;
- Fixed issue with traffic switching via VRRP backup;
- Fixed problem with parasitic ICMP Redirect from VRRP backup when pinging a VRRP IP;
- Fixed a critical error occurring when CPU utilisation is high;
- Fixed critical error occurring when adding OUI for VOICE VLAN;
- Fixed critical error occurring when configuring sflow in stack;
- Fixed a critical error occurring when stack links are broken;
- Fixed critical errors occurring when building STP tree or VPC neighborhoods;
- Fixed L3VNI collaboration with VXLAN in multicast replication mode;
- Fixed PBR collaboration with VRRP;
- Fixed device freeze when removing ACL;
- Fixed device reboot related to the operation of the BGP protocol;
- Fixed device reboot when adding ACLs with UDP and TCP port ranges to the interface;
- Fixed device reboot when deleting VLAN bound to VXLAN;
- Fixed mac flapping between LAG when using VPC;
- Fixed incorrect addition of outgoing VRRPv2 protocol packets;
- Fixed a behavior in which STP root BPDU packets did not pass through the VPC peer-link.
Firmware Version 6.6.4
Added:
- The bit depth of the uptime counter has been increased;
- Added support for macro operation based on track status;
- Added support for cable diagnostics for MES2300-xx/MES3300-xx series devices;
- Added support for displaying information about QSFP28 in the output of the show inventory command;
- Added support for J9285D DAC cables;
- Added VRRP support to VRF;
- Added support for tftp in VRF;
- Added VRF support for the OOB interface;
- Added the ability to disable sending an empty packet to check the availability of the TFTP server;
- Added route-map support for OSPF;
- Added support for policy base routing next-hop;
- Added the ability to summarize routes in BGP;
- The value of the upper limit for the rate-limit has been increased;
- Added the ability to redistribute routes from eBGP to L3VPN;
- Added support for password encryption when logging commands;
- Added the possibility of simultaneous operation of MAC and IP access lists on interfaces;
- Added the ability to check the source mac address in the IP source-guard;
- Added the ability to limit the number of DHCP clients per port;
- Added the ability to send an snmp trap to the login/logout event.
Fixed:
- Software flow control is disabled for the console port;
- Fixed vulnerability of the Web interface;
- The position of the AAA command block in the configuration has been changed;
- Fixed the operation of the DHCP server when sending DHCP NAK packets;
- The operation of optical and copper switches in the same stack has been restored;
- Fixed an error that causes a cyclical reboot of a Slave unit in the stack when upgrading to version 6.6.3.8;
- Fixed rebooting of switches in the scheme with VxVLAN/EVPN when restarting the ospf process;
- Fixed single-hop BFD for eBGP neighborhoods;
- Fixed the problem of routing traffic between stack units for 2300/3300 devices;
- Fixed an error that caused the device to reboot when adding a non-existent VPC domain to the VPC group;
- Fixed an error that causes the role to be retransmitted after the Primary device is rebooted in the VPC;
- Fixed the problem of device freezing when flapping MLAG links in VPC;
- Fixed the problem of incorrect VPC assembly after restarting one of the paired devices;
- Fixed a cyclic reboot of the device when there is an ethertype switchport dot1q setting on the interface;
- Fixed an error in restoring the switchport default-vlan tagged command when updating software;
- Fixed an error where the L3 interface of the physical port did not switch to the Up state when rapid-pvst was enabled;
- Fixed the problem of blocking MLAG, after restarting it, in RPVST;
- Changed the default value of the spanning-tree cost parameter for 25G/40G/100G ports;
- Fixed spanning-tree cost calculation for port-channel interfaces;
- Fixed device reboot when polling the dot1dTpFdbEntry SNMP table;
- Fixed an error that occurs when deleting the SNMPv3 server settings from the configuration;
- Fixed an error when binding the ACL to the interface vlan.
Firmware Version 6.6.3.5
Added:
- FEC operation support for 25G ports.
Fixed:
- Fixed switching part of the links to the UP status when using the FH-DP4T26QS05 40G QSFP/4 SFP+ Fang Zhang Copper Twinax Cable 5M cable.