Campus Access Switch Buying Guide

April 15, 2026·6 min read·1,158 words

Why the access switch is the foundation of your campus network

The access switch is the equipment that every user connects to directly: it supplies PoE power to your Wi-Fi access points, IP phones, and surveillance cameras, while connecting every workstation. A poor access switch choice carries consequences for 7 to 10 years—the typical hardware lifecycle. The consequences of undersizing include insufficient PoE capacity for Wi-Fi 6E/7 APs, which require 25-50W each; saturated uplinks during peak hours; an inability to deploy 802.1X/NAC for security; and premature replacement costs that negate the initial savings.

This guide compares the three leading campus product lines in 2026: Cisco Catalyst 9200/9300, Juniper EX4400, and HPE Aruba CX 6300. We provide exact part numbers, indicative prices, and practical sizing guidelines.

Campus switch selection criteria

PoE: the No. 1 criterion in 2026

With the growing adoption of Wi-Fi 6E/7, with APs requiring 25-50W, 4K PTZ cameras requiring 60-90W, and PoE digital signage requiring 30-60W, the switch's PoE budget has become the decisive criterion. Do not focus solely on the number of ports—consider the total PoE budget in watts.

PoE+ (802.3at): 30W per port. Sufficient for Wi-Fi 5/6 APs, IP phones, and fixed cameras.
PoE++ (802.3bt Type 3): 60W per port. Designed for high-density Wi-Fi 6E APs and PTZ cameras.
PoE++ (802.3bt Type 4): 90W per port. Designed for heated 4K PTZ cameras and 32-inch displays.
UPOE (Cisco proprietary): 60W. The predecessor to PoE++, still widely deployed.
Total budget: a Catalyst 9300-48P delivers 822W with a single PSU or 1100W with dual PSUs. Sizing example: 30 APs × 25W + 10 cameras × 15W + 20 phones × 5W = 1000W. Dual PSUs are required.

Stacking: manage N switches as a single unit

Cisco StackWise-480 (Catalyst 9300): 480 Gbps backplane, with up to 8 switches per stack. Dedicated STACK-T1-3M cable (~€400).
Cisco StackWise-1T (Catalyst 9300X): 1 Tbps backplane. Designed for multi-gig versions.
Cisco StackWise-160 (Catalyst 9200): 160 Gbps, 8 switches. Cost-effective option with a lower-capacity backplane.
Juniper Virtual Chassis (EX4400): up to 10 switches using SFP+ ports or dedicated VCPs. 80 Gbps per VC link.
HPE Aruba VSX (CX 6300): a pair of 2 switches in an active-active MLAG configuration, with no stack beyond 2 switches. A modern architecture that is more flexible than conventional stacking.

MACsec: mandatory L2 encryption for NIS2

MACsec (802.1AE) encrypts Ethernet traffic hop by hop between two switches. It is a NIS2 requirement for essential entities handling sensitive data in sectors such as healthcare, finance, and defense. All modern campus switches support it, but with different capabilities:

Catalyst 9300: full MACsec-256 (AES-GCM-256) on all ports. The gold standard.
Catalyst 9200: limited MACsec-128. No MACsec-256. Acceptable for non-critical sites.
Juniper EX4400: MACsec 128/256 on all downlink and uplink ports.
Aruba CX 6300: MACsec 256 on CX 6300M models. Not available on the CX 6100.

Cisco Catalyst 9200/9300: the dominant ecosystem

Catalyst 9200: entry-level campus switching

C9200-24P: 24 1G PoE+ ports, 4× SFP+ uplinks, and StackWise-160. Designed for SMBs and branch offices. OPTINOC price: ~€2,200 excluding VAT.
C9200-48P: 48 1G PoE+ ports and 4× SFP+ uplinks. Price: ~€3,400 excluding VAT.
C9200L-24P-4G: L version with 4× fixed 1G uplinks and no modules. Cost-effective option. Price: ~€1,800 excluding VAT.
A 1-year DNA Essentials license is included. No DNA Advantage, SD-Access, or TrustSec.
Verdict: suitable for sites with fewer than 200 users and no advanced segmentation requirements.

Catalyst 9300: the enterprise leader

C9300-24P-A: 24 1G PoE+ ports and modular uplinks (4× 10G, 2× 25G, or 2× 40G). DNA Advantage. OPTINOC price: ~€5,500 excluding VAT.
C9300-48P-A: 48 1G PoE+ ports. The world's best-selling campus switch. Price: ~€7,500 excluding VAT.
C9300-48U-A: 48 1G UPOE ports (60W/port). Designed for PoE-intensive environments. Price: ~€9,000 excluding VAT.
C9300X-48HX-A: 48 multi-gig ports (1/2.5/5/10G) with PoE++. Designed for Wi-Fi 6E/7. Price: ~€12,000 excluding VAT.
Key features: StackWise-480, MACsec-256, TrustSec/SGT, SD-Access readiness, and ISSU for non-disruptive upgrades.
DNA Advantage license (~€25/port/year): SD-Access, TrustSec, MACsec, Assurance, and ISE integration.

Juniper EX4400: the automation-first alternative

EX4400-24P: 24 1G PoE+ ports and 4× 25G SFP28 uplinks. Junos OS. OPTINOC price: ~€4,200 excluding VAT.
EX4400-48P: 48 1G PoE++ 90W ports and 4× 25G SFP28 uplinks. Price: ~€5,800 excluding VAT.
EX4400-48MP: 48 multi-gig ports (1/2.5/5/10G) with PoE++. Designed for Wi-Fi 6E/7. Price: ~€8,500 excluding VAT.
Virtual Chassis with up to 10 units. VC bandwidth: 80 Gbps.
Junos OS: atomic commits, 49 rollback levels, native NETCONF, and REST API.
Mist AI integration: cloud-managed administration and Marvis AI troubleshooting.

The Juniper advantage: the EX4400-48P costs 20-25% less than the Catalyst 9300-48P-A while offering comparable features. The savings across 20 switches amount to €30K-€40K. Junos + Mist AI also provide a more modern operational experience than DNA Center, which requires a €50K-€150K appliance.

HPE Aruba CX 6300: the European challenger

CX 6300M-24P: 24 1G PoE+ ports and 4× SFP56 (50G) uplinks. AOS-CX. OPTINOC price: ~€3,800 excluding VAT.
CX 6300M-48P: 48 1G PoE++ 90W ports and 4× SFP56 uplinks. 1440W PoE budget. Price: ~€5,200 excluding VAT.
CX 6300F-48Y: 48 25G SFP28 ports + 4× SFP56. Multi-gig version for distribution. Price: ~€9,000 excluding VAT.
VSX: active-active MLAG between 2 switches, with no stack beyond 2 switches but greater resilience.
AOS-CX: Linux-based OS with a native NoSQL database. REST API coverage for 100% of functions. Automation-first.
Aruba Central: SaaS cloud management, AI Insights, and Dynamic Segmentation.

The Aruba CX advantage: AOS-CX is the most modern switch OS on the market. It features a queryable time-series database—for example, to determine what happened on port 12 two hours ago—a native REST API for all functions, and active-active VSX, compared with active-standby stacking from Cisco/Juniper. HPE's acquisition of Juniper in 2025 strengthens its European position.

Sizing: how many switches per site

SMB with 50-200 users (1 site)

Architecture: 2-4 stacked access switches + 1 firewall
Budget recommendation: 2× Catalyst 9200-48P or 2× EX4400-48P
Enterprise recommendation: 2× Catalyst 9300-48P-A in a StackWise-480 stack
Switch budget: €7,000-€15,000 excluding VAT

Mid-market company with 200-1000 users (multiple sites)

Architecture per site: 4-8 access switches + 1-2 distribution switches
Access: Catalyst 9300-48P-A or EX4400-48P (stack of 4-8)
Distribution: Catalyst 9500-24Y4C or EX4650-48Y
Budget per site: €30,000-€60,000 excluding VAT for switches

Large enterprise with 1000+ users

Architecture: three-tier design (access + distribution + core) or a campus spine-leaf architecture
Access: 20-50 Catalyst 9300-48P-A switches in stacks of 4-8
Distribution: 4-8 Catalyst 9500-48Y4C switches
Core: 2 Catalyst 9600 switches or Aruba CX 8400 switches in a VSX configuration
Campus budget: €200K-€500K excluding VAT for switches + licenses

Our recommendation

For 70% of enterprise campus deployments in France: Cisco Catalyst 9300-48P-A. The DNA ecosystem, the availability of CCNA/CCNP-certified professionals, and TAC support justify the premium. For new cloud-managed deployments without a requirement for Cisco expertise, Juniper EX4400 + Mist AI offers the best balance of TCO and innovation. For organizations with an existing HPE/Aruba strategy, the CX 6300M is the natural choice.

OPTINOC distributes all three product lines with manufacturer warranties. Request a free sizing assessment based on your floor plans and number of users.