













TP-LINK JETSTREAM TL-SG3428XPP-M2 | 24-PORT 2.5GBASE-T AND 4-PORT 10GE SFP+ L2+ MANAGED SWITCH WITH 16-PORT POE+ AND 8-PORT POE++ (500W POE BUDGET)
FEATURES:
- 2.5G PoE++/PoE+ Ports for Wi-Fi 7/6E/6 – 24× 2.5Gbps ports smash the 2.5G barrier and unlock the full potential of Wi-Fi 7/6E/6 Access Points
- 10G Lightning-Fast Uplink – 4× 10Gbps SFP+ slots enable high-bandwidth connectivity and non-blocking switching capacity
- 500W PoE Budget – 8× 802.3bt/at/af/ Compliant PoE++ and 16× 802.3at/af compliant PoE+ ports with a total power supply of 500W
- Integrated into Omada SDN – Zero-Touch Provisioning (ZTP), Centralized Cloud Management and Intelligent Monitoring
- Centralized Management – Cloud access and Omada App for ultra convenience and easy management
- Static Routing – Helps route internal traffic for more efficient use of network resources
- Robust Security Strategies – IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication and more
- Optimize Voice and Video Applications – L2/L3/L4 QoS and IGMP snooping
TP-Link JetStream TL-SG3428XPP-M2 | 24-Port 2.5GBASE-T and 4-Port 10GE SFP+ L2+ Managed Switch with 16-Port PoE+ and 8-Port PoE++ (500W PoE Budget)
Unlock the Full Potential of Wi-Fi 7/6E/6 with Multi-Gigabit PoE++/PoE+ Ports
FEATURES:
- 2.5G PoE++/PoE+ Ports for Wi-Fi 7/6E/6 - 24× 2.5Gbps ports smash the 2.5G barrier and unlock the full potential of Wi-Fi 7/6E/6 Access Points
- 10G Lightning-Fast Uplink - 4× 10Gbps SFP+ slots enable high-bandwidth connectivity and non-blocking switching capacity
- 500W PoE Budget - 8× 802.3bt/at/af/ Compliant PoE++ and 16× 802.3at/af compliant PoE+ ports with a total power supply of 500W
- Integrated into Omada SDN - Zero-Touch Provisioning (ZTP), Centralized Cloud Management and Intelligent Monitoring
- Centralized Management - Cloud access and Omada App for ultra convenience and easy management
- Static Routing - Helps route internal traffic for more efficient use of network resources
- Robust Security Strategies - IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication and more
- Optimize Voice and Video Applications - L2/L3/L4 QoS and IGMP snooping
SPECIFICATIONS:
| HARDWARE FEATURES | |
| Interface | 24× 2.5Gbps RJ45 Ports |
| 4× 10G SFP+ Slots | |
| 1× RJ45 Console Port | |
| 1× Micro-USB Console Port | |
| Fan Quantity | 3× |
| Power Supply | 100~240VAC 50/60Hz |
| PoE Ports (RJ45) | Standard: 802.3bt/at/af Compliant |
| PoE++ Ports (802.3bt PoE): 8-Ports, up to 60W per port | |
| PoE+ Ports (802.3at PoE): 16-Ports, up to 30W per port | |
| Power Budget: 500W | |
| Dimensions (W × D × H) | 440 × 330 × 44mm |
| Mounting | Rack Mountable |
| Max. Power Consumption | 629.1W (110V 60Hz) |
| Max. Heat Dissipation | 2153.45 BTU/h (110V 60Hz) |
| PERFORMANCE | |
| Switching Capacity | 200Gbps |
| Packet Forwarding Rate | 148.80Mpps |
| MAC Address Table | 32K |
| Packet Buffer Memory | 16Mbit |
| Jumbo Frame | 9KB |
| SOFTWARE FEATURES | |
| Quality of Service | 8× priority queues |
| 802.1p CoS/DSCP priority | |
| Queue scheduling | |
| - SP (Strict Priority) | |
| - WRR (Weighted Round Robin) | |
| - SP+WRR | |
| Bandwidth Control | |
| - Port/Flow based Rating Limiting | |
| Smoother Performance | |
| Action for Flows | |
| - Mirror (to supported interface) | |
| - Redirect (to supported interface) | |
| - Rate Limit | |
| - QoS Remark | |
| L3 Features | 32× IPv4/IPv6 Interfaces |
| Static Routing | |
| - 48× Static routes | |
| Static ARP | |
| - 128× Static Entries | |
| Proxy ARP | |
| Gratuitous ARP | |
| DHCP Server | |
| DHCP Relay | |
| - DHCP Interface Relay | |
| - DHCP VLAN Relay | |
| DHCP L2 Relay | |
| L2 and L2+ Features | Link Aggregation |
| - Static link aggregation | |
| - 802.3ad LACP | |
| - Up to 8 aggregation groups, containing 8-ports per group | |
| Spanning Tree Protocol | |
| - 802.1d STP | |
| - 802.1w RSTP | |
| - 802.1s MSTP | |
| - STP Security: TC Protect, BPDU Filter, Root Protect | |
| Loopback Detection | |
| - Port based | |
| - VLAN based | |
| Flow Control | |
| - 802.3x Flow Control | |
| - HOL Blocking Prevention | |
| Mirroring | |
| - Port Mirroring | |
| - CPU Mirroring | |
| - One-to-One | |
| - Many-to-One | |
| - TX/RX/Both | |
| L2 Multicast | IGMP Snooping |
| - IGMP v1/v2/v3 Snooping | |
| - Fast Leave | |
| - IGMP Snooping Querier | |
| - IGMP Authentication | |
| IGMP Authentication | |
| MLD Snooping | |
| - MLD v1/v2 Snooping | |
| - Fast Leave | |
| - MLD Snooping Querier | |
| - Static Group Config | |
| - Limited IP Multicast | |
| MVR | |
| Multicast Filtering: 256× profiles and 16× entries per profile | |
| Advanced Features | Automatic Device Discovery |
| Batch Configuration | |
| Batch Firmware Upgrading | |
| Intelligent Network Monitoring | |
| Abnormal Event Warnings | |
| Unified Configuration | |
| Reboot Schedule | |
| VLAN | VLAN Group |
| - Max 4K VLAN Groups | |
| 802.1Q Tagged VLAN | |
| MAC VLAN: 256× Entries | |
| Protocol VLAN: Protocol Template 16, Protocol VLAN 16 | |
| GVRP | |
| VLAN VPN (QinQ) | |
| - Port-Based QinQ | |
| - Selective QinQ | |
| Voice VLAN | |
| Access Control List | Time-based ACL |
| MAC ACL | |
| - Source MAC | |
| - Destination MAC | |
| - VLAN ID | |
| - User Priority | |
| - Ether Type | |
| IP ACL | |
| -Source IP | |
| - Destination IP | |
| - Fragment | |
| - IP Protocol | |
| - TCP Flag | |
| - TCP/UDP Port | |
| - DSCP/IP TOS | |
| - User Priority | |
| Combined ACL | |
| Packet Content ACL | |
| IPv6 ACL | |
| Policy | |
| - Mirroring | |
| - Redirect | |
| - Rate Limit | |
| - QoS Remark | |
| ACL apply to Port/VLAN | |
| Security | IP-MAC-Port Binding |
| - 512× Entries | |
| - DHCP Snooping | |
| - ARP Inspection | |
| - IPv4 Source Guard: 100× Entries | |
| IPv6-MAC-Port Binding | |
| - 512× Entries | |
| - DHCPv6 Snooping | |
| - ND Detection | |
| - IPv6 Source Guard: 100× Entries | |
| DoS Defend | |
| Static/Dynamic Port Security | |
| - Up to 64× MAC addresses per port | |
| Broadcast/Multicast/Unicast Storm Control | |
| - kbps/ratio control mode | |
| 802.1X | |
| - Port base authentication | |
| - Mac base authentication | |
| - VLAN Assignment | |
| - MAB | |
| - Guest VLAN | |
| - Support Radius authentication and accountability | |
| AAA (including TACACS+) | |
| Port Isolation | |
| Secure web management through HTTPS with SSLv3/TLS 1.2 | |
| Secure Command Line Interface (CLI) management with SSHv1/SSHv2 | |
| IP/Port/MAC based access control | |
| IPv6 | IPv6 Dual IPv4/IPv6 |
| Multicast Listener Discovery (MLD) Snooping | |
| IPv6 ACL | |
| IPv6 Interface | |
| Static IPv6 Routing | |
| IPv6 neighbor discovery (ND) | |
| Path maximum transmission unit (MTU) discovery | |
| Internet Control Message Protocol (ICMP) version 6 | |
| TCPv6/UDPv6 | |
| IPv6 applications | |
| - DHCPv6 Client | |
| - Ping6 | |
| - Tracert6 | |
| - Telnet (v6) | |
| - IPv6 SNMP | |
| - IPv6 SSH | |
| - IPv6 SSL | |
| - Http/Https | |
| - IPv6 TFTP | |
| MIBs | MIB II (RFC1213) |
| Interface MIB (RFC2233) | |
| Ethernet Interface MIB (RFC1643) | |
| Bridge MIB (RFC1493) | |
| P/Q-Bridge MIB (RFC2674) | |
| RMON MIB (RFC2819) | |
| RMON2 MIB (RFC2021) | |
| Radius Accounting Client MIB (RFC2620) | |
| Radius Authentication Client MIB (RFC2618) | |
| Remote Ping, Traceroute MIB (RFC2925) | |
| Support TP-Link private MIB | |
| MANAGEMENT | |
| Omada App | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller or Omada Software Controller. |
| Centralized Management | Omada Cloud-Based Controller |
| Omada Hardware Controller (OC300) | |
| Omada Hardware Controller (OC200) | |
| Omada Software Controller | |
| Cloud Access | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller or Omada Software Controller. |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | Web-based GUI |
| Command Line Interface (CLI) through the console port, telnet | |
| SNMP v1/v2c/v3 | |
| - Trap/Inform | |
| - RMON (1,2,3,9 groups) | |
| SDM Template | |
| DHCP/BOOTP Client | |
| 802.1ab LLDP/LLDP-MED | |
| DHCP Auto Install | |
| Dual Image, Dual Configuration | |
| CPU Monitoring | |
| Cable Diagnostics | |
| EEE | |
| Password Recovery | |
| SNTP | |
| System Log | |
| OTHERS | |
| Certification | CE, FCC, RoHS |
| Package Contents | TL-SG3428XPP-M2 Switch |
| Power Cord | |
| Quick Installation Guide | |
| Rackmount Kit | |
| Rubber Feet | |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/10/11, MAC OS, NetWare, UNIX or Linux |
| Environment | Operating Temperature: 0°C~40°C |
| Storage Temperature: -40°C~70°C | |
| Operating Humidity: 10–90% RH non-condensing | |
| Storage Humidity: 5–90% RH non-condensing | |
Additional information
| Weight | 6.17 kg |
|---|---|
| Dimensions | 52.8 × 44 × 10 cm |




