Skip to content
Contact technical expert


Advanced Network Packet Broker

The EXA32400 is a high-performance advanced network packet broker designed to optimize the flow of network traffic to security, monitoring, and management tools. This cutting-edge unit, part of the renowned Cubro G5+ series, brings unparalleled connectivity and flexibility to your network infrastructure.

Featuring 32 x 100G/400G QSFP28/QSFP-DD interfaces, the EXA32400 empowers your network with an extensive range of connectivity options. With breakout cable support on the 400G QSFP-DD ports, you can easily connect individual 4 x 100G interfaces, providing remarkable flexibility for your network requirements. The unit is built on an advanced multi-core, industry-leading programmable switch chip architecture, ensuring exceptional throughput and performance.

Deep Protocol Identification and Processing:

The EXA32400 goes beyond standard packet brokering capabilities by enabling high-performance deep protocol identification and processing. With advanced data message pre-processing at the chip forwarding logic level, this unit ensures efficient handling of network traffic. Its ability to remove tunnel encapsulations from packets, along with inner tunnel filtering options, makes it an ideal solution for modern overlay networks. 

Enhanced Network Visibility and Performance:

Equipped with powerful multi-layer filtering capabilities, the EXA32400 elevates your network visibility and performance. With the ability to implement all filtering features at the hardware level, this advanced network packet broker achieves unmatched throughput and efficiency. The unit can effectively aggregate, filter, duplicate, and load balance network traffic, ensuring that your security, monitoring, and management tools receive the precise data they need.

Main Features of EXA32400

  • Filters and load-balances traffic from 100 and 400 Gbps links to multiple monitoring tools
  • 32 x 100/400 Gbps (QSFP28/QSFP-DD)
  • Breakout to 128 x 100G supported
  • Supports data burst buffering
  • Packet slicing support (any configurable packet size)
  • IPv6 support
  • Tunnel header stripping
  • No additional port licensing fees or software feature licensing. All features and applications included in the unit price.
  • 2-year base warranty period

Functions & Benefits of EXA32400

  • Easy to configure: secure Web GUI / ReST API and CLI
  • Load balancing: hash-based, session aware load balancing on either outer or inner tunnel headers
  • Ultra high port density: supports up to 32 x 400 Gbps or 128 x 100 Gbps ports
  • Tunnel termination and filtering on multiple parameters including inner tunnel (VXLAN, GTP, ERSPAN, CFP, MPLS, etc)
  • More than 100000 simultaneously filtering rules without performance restrictions to see the traffic that is really needed
  • ASCII string filtering inside the payload
  • SNMPv2c and SNMPv3 support
  • Straight and easy development of filtering strings using MS Excel with download function.
Link/Port AggregationAggregation many to any, and any to many at all link speeds
100G distribution/load balancingTraffic can be easily distributed across 100 Gbps ports to
monitor 400 Gbps links.
Jumbo Frame SupportThe EXA32400 supports jumbo Ethernet frames with a size of up to 9192 bytes.
Support of IPv4 and IPv6Yes
Ports32 x 100G/400G  via QSFP28/QSFP-DD
Break-out to 128 x 100 Gbps
1 x 10/100/1000 Base-T (Management)
1 x RS232 Console
Configuration / CommunicationWeb GUI, REST API, CLI
Performance25,6 Tbps backplane
100% throughput without any packet loss
6,0 Billion PPS
Aggregation latencyAverage < 700 ns for 64-byte frames
MTBF200.742 hours
Packet Buffer30 MB
Different Power VersionsDual 100-240V AC or 36-72V DC available


  • 32 x 100 Gbps / 400 Gbps full duplex Ports for any kind of QSFP28/QSFP-DD
  • * Each port can be input and / or output depending on the application and configuration
  • *All QSFP-DD ports support break-out cables to 4x100G interfaces


  • 32 x 100 Gbps / 400 Gbps full duplex Ports for any kind of QSFP28/QSFP-DD
  • *Each port can be input and / or output depending on the application and configuration
  • *All QSFP-DD ports support breakout cables to 4x100G interfaces


  • Performance up to 25,6 Tbps
  • 6,0 Billion PPS
  • Non-blocking design
  • Boot time from power on to working 180 sec


  • Management Port: (1) RJ45 10/100/1000 Mbit Configuration
  • Easy to use Web UI, REST API, CLI

Operating specifications

  • Operating Temperature: 0ºC to 40ºC
  • Storage Temperature: -10ºC to 70ºC
  • Relative Humidity: 10% min, 95% max (non-condensing)

Mechanical specifications

  • Dimension (WxDxH): 442 x 580 x 44 mm
  • Weight: 11,8 kg
  • Airflow: Front-back

Electrical specifications

  • Input Power: 100-240V AC or 36-72V DC
  • Maximum Power Consumption: 850W


  • Fully RoHS compliant
  • CE compliant
  • Safety – UL 60950-1 / CSA C22.2 60950-1-07 / IEC 62368-1: 2014 EN 62368-1: 2014

Deduplication by filtering in VXLAN overlay networks (VXLAN VNI and IP filtering)

Usually, the duplicate traffic is caused by picking up the same traffic more than once due multiple tapping and/or aggregation devices.

Traffic between IP X and IP Y passes the tapping two times and thus the same packets are visible twice at the tapping output. From user perspective every packet is received twice.

The EXA32400 offers an easy and straight-forward way to eliminate the duplicates by allowing filtering VXLAN VNI and inner IP simultaneously.

State-of-the-art tunnel removal and inside tunnel filtering

The EXA32400 supports the termination of various tunnels such as:

  • GRE
  • MPLS over UDP and MPLS over GRE
  • GTP
  • IPinIP
  • CFP

Every port of the EXA32400 supports an independent MAC and IP setup. Thus, the EXA32400 can be used as an active tunnel endpoint. Beside tunnel termination it also allows filtering inside tunnels.

This superior functionality makes the EXA32400 ideally suited for any modern overlay network.

GRE encapsulation function

To transport filtered packets from site A to site B over a routed Layer 3 network, the EXA32400 supports a GRE encapsulation function.

GTP user-plane load-balancing

The Cubro EXA32400 distributes the packets based on a hash-key. The best choice for mobile user-data is that this hash-key is based on the inner IP address (=user IP) of the arriving packets. The EXA32400 handles inner IP load-balancing in hardware and supports Tbit/s of processing power.

User-data interfaces in mobile networks such as S1-U are usually heavily loaded, carrying up to Tbps of data. To make analysis possible, these user data needs to be spread across many analyzers, and thus load-balancing is a crucial criteria. To keep the efforts for the analyzing/probing part as low as possible, user sessions must stay together so that every packet of a user session arrives at the same analyzer interface.

Web User Interface

The EXA32400 features a highly easy-to-use graphical way of operation.
The innovative and logical WebUI allows the user to create a backup, set up new users, check port link status/statistics or define a powerful filtering scenario which will help to do the job quickly.

Product Components

  • Cubro EXA32400
  • AC/DC power supply
  • European power cord
  • Transceivers not included
Part NumberDescription
CUB.SM-EXA32400EXA32400 Advanced Network Packet Broker, 32×40/100G, AC power supply
CUB.SM-EXA32400-DCEXA32400 Advanced Network Packet Broker, 32×40/100G, DC power supply

Spare parts

Part NumberDescription
CUB.PM-AC-EAC Power supply module for CUBRO EX32400
CUB.PM-DC-EDC Power supply module for CUBRO EXA32400

Looking for product support?

Get in touch with our technical team now

Please enable JavaScript in your browser to complete this form.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Our newsletter provides thought leadership content about the industry. It is concise and has interesting content to keep you updated with what’s new at Cubro and in the industry. You can unsubscribe anytime with a single click.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.