TP-LINK (SG3428XMP) JetStream 24-Port Gigabit & 4-Port 10GE SFP+ L2+ Managed Switch with 24-Port PoE+, Rackmountable

4x 10 Gbps SFP+ slots provide non-blocking switching performance and ultra-low latency, so reliable and lightning-fast connections to servers and other switches are easily built.

  Features 24x 802.3af/at compliant PoE+ ports, the switch supports up to 384 W total PoE power budget.* Designed to use a single Ethernet cable for both data and power transmission, it offers flexible deployment for PoE-supported devices such as wireless access points, IP cameras, and IP phones, lowering infrastructure costs for small businesses.

An abundance of L2+ and L3 features are supported to help build a highly scalable and robust network, providing a reliable and efficient solution for enterprises, campuses and ISPs.***

Security features include IP-MAC-Port-VID Binding, Port Security, Storm Control, and DHCP Snooping to defend against a range of network threats. An integrated list of common DoS attacks is available, making it easier than ever to prevent them. In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports, or VLAN ID. Users’ network access can be controlled via 802.1X authentication, which works with a RADIUS/Tacacs+ server to grant access only when valid user credentials are provided.

 

A complete lineup of L2+ features is supported, including 802.1Q VLAN, Port Mirroring, STP/RSTP/MSTP, Link Aggregation Control Protocol, and 802.3x Flow Control. Advanced IGMP Snooping ensures the switch intelligently forwards multicast streams to only the appropriate subscribers, cutting out unnecessary traffic, while IGMP throttling & filtering restrict each subscriber on a port level to prevent unauthorized multicast access. Static Routing is a simple way of segmenting the network and internally routs traffic through the switch for improved efficiency.

 

Voice and video traffic can be prioritized based on IP address, MAC address, TCP port number, UDP port number, and more. With QoS (Quality of Service), voice and video services remain smooth, even when bandwidth is in short supply.

 

sFlow, QinQ, L2PT PPPoE ID Insertion, and IGMP authentication features are provided, developed with service providers in mind. 802.3ah OAM and Device Link Detection Protocol (DLDP) offer easy monitoring and troubleshooting of Ethernet links.

 

IPv6 functions such as Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery, and IPv6 Neighbor Discover guarantee your network is ready for the Next Generation Network (NGN) without upgrading your hardware.

 

*PoE budget calculations are based on laboratory testing. Actual PoE power budget is not guaranteed and will vary as a result of client limitations and environmental factors.

 

**Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller.

 

**L3 and ISP features can only be configured in standalone mode. 

Security

Support Omada Hardware Controller, Software Controller, Cloud-Based Controller

Automatic Device Discovery

Batch Configuration

Batch Firmware Upgrading

Intelligent Network Monitoring

Abnormal Event Warnings

Unified Configuration

Reboot Schedule

ZTP (Zero-Touch Provisioning)

Quality of Service

8 priority queues

802.1p CoS/DSCP priority

Queue scheduling

Bandwidth Control

Smoother Performance

Action for Flows

Layer Features

L2 and L2+ Features

Link Aggregation

Spanning Tree Protocol

Loopback Detection

Flow Control

Mirroring

L2 Multicast

IGMP Snooping

IGMP Authentication

MLD Snooping

MVR

Multicast Filtering_ 256 profiles and 16 entries per profile

L3 Features

16 IPv4/IPv6 Interfaces

Static Routing

Static ARP

Proxy ARP

Gratuitous ARP

DHCP Server

DHCP Relay

DHCP L2 Relay

VLAN

VLAN Group

802.1Q Tagged VLAN

MAC VLAN_ 7 Entries

Private VLAN

GVRP

VLAN VPN (QinQ)

Voice VLAN

Protocol VLAN_ Protocol Template 16, Protocol VLAN 16

Access Control

Time-based ACL

MAC ACL

IP ACL

Combined ACL

Packet Content ACL

IPv6 ACL

Policy

ACL apply to Port/VLAN

IP-MAC-Port Binding

IPv6-MAC-Port Binding

DoS Defend

Static/Dynamic Port Security

Broadcast/Multicast/Unicast Storm Control

802.1X

AAA (including TACACS+)

Port Isolation

Secure web management - HTTPS with SSLv3/TLS 1.2

Secure CLI management with SSHv1/SSHv2

IP/Port/MAC based access control

9 KB

Management

Web-based GUI

CLI through the console port, telnet

SNMP v1/v2c/v3

SDM Template

DHCP/BOOTP Client

802.1ab LLDP/LLDP-MED

DHCP AutoInstall

Dual Image, Dual Configuration

CPU Monitoring

Cable Diagnostics

EEE

Password Recovery

SNTP

System Log

Environment

Operating Temperature_ 0C~45C (32F~113F);

Storage Temperature_ -40C~70C (-40F~158F)

Operating Humidity_ 10%~90% non-condensing

Storage Humidity_ 5%~90% non-condensing

Package Contents

TL-SG3428XMP Switch

Power Cord

Quick Installation Guide

Rackmount Kit

Rubber Feet

Package Type

Retail

Package Weight

Additional Features

Jumbo Frame

Rackmountable

24 x 10/100/1000 Mbps RJ45 Ports

4 x 10G SFP+ Slots

1 x RJ45 Console Port

1 x Micro-USB Console Port

Managed

Yes

Number of Ports

24

Max RJ45 Transfer Rate

10/100/1000 Mbps

#Hide#Max SFP Transfer Rate

10G SFP

Interface(s)

PoE Ports (RJ45)

95.23 Mpps

24 x 802.3at/af-compliant PoE+ ports with a total power supply of 384 W

Switching Capacity

128 Gbps

Power Supply

100-240 V AC~50/60 Hz

Consumption_

34.4 W (110V/60Hz) ( no PD device connected)

465.8 W (110V/60Hz) ( with 384 W PD device connected)

Dimensions

440 x 330 x 44 mm

Mac Address Table

16 K

Packet Forwarding Rate

6.2000 kg