Allied Telesis AT-X950-28XSQ – 24-Port 100G QSFP28 Advanced Layer 3 Switch

Product Overview

The Allied Telesis x950-28XSQ is a high-capacity 100G QSFP28 Advanced Layer 3 switch designed for enterprise data center cores, campus distribution layers, and high-density aggregation deployments. As the base hardware SKU in the x950-28XSQ series, it delivers 24 x 1/10G SFP/SFP+ access ports, four 40G/100G QSFP+/QSFP28 uplinks, and a 1.92 Tbps non-blocking switching fabric in a 1U chassis. Network engineers evaluating an Allied Telesis x950 100G QSFP28 Advanced Layer 3 switch for enterprise backbone or data center aggregation will find full BGP4 and OSPF routing (with Premium license), VCStack virtual chassis stacking, and a field-expandable XEM module bay. Dual hot-swappable PSU bays support AC or DC power with reverse-airflow variants available for hot-aisle/cold-aisle data center installations.

Product Description

The AT-X950-28XSQ runs AlliedWare Plus, providing enterprise-grade Layer 3 routing and advanced network automation in a single 1U platform. The 1.92 Tbps switching fabric with 1,190 Mpps forwarding eliminates bottlenecks across high-traffic data center and campus backbone links. The four fixed 40G/100G QSFP+/QSFP28 ports support breakout to 4 x 10G via breakout cables, offering flexibility when connecting to mixed-speed infrastructure. The single XEM expansion bay enables field-upgradeable port density: network architects can add Multi-Gigabit copper (XEM2-12XTm), additional 10G SFP+ ports (XEM2-12XS v2), 40G QSFP+ (XEM2-4QS), or 100G QSFP28 (XEM2-1CQ) without chassis replacement. VCStack groups up to eight x950 units into a single managed virtual chassis with active-active link aggregation and no single point of failure. VCStack over Long Distance (VCStack-LD) extends this capability across campus buildings via fiber. The integrated Device GUI provides graphical monitoring of switch health, port utilization, and VLAN configuration. Vista Manager mini, embedded in the Device GUI, delivers AMF wired and Autonomous Wave Control (AWC) wireless visibility for small-to-medium network environments without requiring an external NMS appliance. Larger deployments integrate with Vista Manager EX and the full AMF Plus stack for intent-based orchestration across hundreds of wired and wireless nodes. AMF-Security mini, also integrated into the Device GUI, automates detection and containment of internal LAN malware threats. The x950-28XSQ holds JITC certification for DoDIN APL inclusion and is TAA compliant, making it eligible for US federal procurement.

Key Features

• 1.92 Tbps Non-Blocking Switching Fabric — 1,190 Mpps forwarding rate handles full line-rate traffic across all 28 ports simultaneously, eliminating core bottlenecks.
• 24 x 1/10G SFP/SFP+ Ports — High-density optical access ports connect servers, storage arrays, and access-layer switches at 1G or 10G speeds.
• 4 x 40G/100G QSFP+/QSFP28 Uplinks — Fixed high-speed uplinks support 40G, 100G, or 4 x 10G breakout to spine, core, or aggregation switches.
• 1 x XEM Expansion Bay — Field-installable modules add Multi-Gigabit copper, 10G fiber, 40G, or 100G capacity to match evolving network requirements.
• Dual Hot-Swap PSU Bays (AC or DC) — Load-sharing power supplies with reverse-airflow options ensure continuous operation and support data center airflow standards.
• VCStack Virtual Chassis (up to 8 units) — Multiple x950 switches operate as a single logical device; VCStack-LD enables distributed stacks over long-distance fiber.
• AlliedWare Plus Operating System — Enterprise-class NOS with full CLI, SNMP, NETCONF, and REST API management interfaces.
• AMF Plus Network Automation — Zero-touch provisioning, auto-backup, auto-recovery, and auto-upgrade across all AMF member devices.
• Integrated Vista Manager Mini — Graphical AMF wired and AWC wireless management embedded in the Device GUI, suitable for networks up to medium scale.
• JITC Certified and TAA Compliant — Approved for US Government and DoD network deployments; meets Trade Agreements Act procurement requirements.
• FIPS 140-2 Validated — Cryptographic modules meet US government security standards for classified and sensitive network environments.
• EPSRing / G.8032 ERPS — Fast-failover resilient ring protection for distributed network segments requiring sub-50ms recovery.

Typical Applications

• Data center core and aggregation providing 100G uplinks to spine switches and 10G server connections
• Enterprise campus distribution layer with full Layer 3 routing between access VLANs and WAN edge
• Government and defense networks requiring JITC-certified hardware on the DoDIN APL
• High-density server aggregation in colocation or private cloud environments
• Multi-site campus backbone using VCStack-LD for distributed virtual chassis topology
• AMF Plus managed enterprise networks requiring centralized automation and zero-touch provisioning

Technical Specifications

Frequently Asked Questions

Q: What is the difference between the AT-X950-28XSQ and the AT-X950-28XSQ-B05?

The AT-X950-28XSQ is the base hardware SKU with a standard 1-year Net Cover support contract (suffix -B01). The AT-X950-28XSQ-B05 is the same switch bundled with a 5-year Net Cover Premium support contract, offering a lower total cost over the support lifecycle for organizations that require multi-year coverage.

Q: Do power supplies ship with the AT-X950-28XSQ?

No. Per Allied Telesis ordering notes, the base chassis ships without power supplies. PSUs must be ordered separately: AT-PWR600 (AC) or AT-PWR600-80 (DC), with regional power cord variants available. At least one PSU is required for operation; two are recommended for redundancy.

Q: What 100G QSFP28 transceivers are compatible?

The four uplink ports support Allied Telesis QSFP+ (40G) and QSFP28 (100G) transceivers including SR4, LR4, and ER4 form factors. Each port can also be used with a 4 x 10G QSFP+ breakout cable for legacy 10G connectivity. Verify third-party optics against the Allied Telesis transceiver compatibility list.

Q: How many units can be stacked with VCStack?

Up to eight x950 units can form a single VCStack virtual chassis at any port speed. VCStack-LD enables stacks over long-distance fiber links, supporting distributed campus or multi-building deployments with a single management point.

Q: Is a Premium license required for BGP and OSPF routing?

The base AlliedWare Plus license includes 64 OSPF and BGP routes, sufficient for small deployments. The optional AT-FL-x950-01 Premium license is required for full BGP4 (5,000 routes), OSPF (16,000 routes), PIMv4/v6 multicast, VRF-Lite (64 domains), and VXLAN support.

Q: Is the x950-28XSQ on the DoD Information Network Approved Products List?

Yes. The x950 series holds JITC certification and is listed on the DoDIN APL, qualifying it for procurement on US Government and Department of Defense networks. It is also TAA compliant for federal purchase requirements.

Q: Where can I order the AT-X950-28XSQ?

The AT-X950-28XSQ is available from Creation Networks at creationnetworks.net, an authorized Allied Telesis reseller serving enterprise and government customers. Contact Creation Networks for configuration assistance, volume pricing, or federal procurement support.