





TP-LINK TL-SG3428MP JETSTREAM 28-PORT GIGABIT L2+ MANAGED SWITCH WITH 24-PORT POE+
FEATURES:
- 384W PoE Budget: 24× 802.3at/af-compliant PoE+ ports with a total power supply of 384W
- Full Gigabit Ports: 24x gigabit PoE+ ports and 4x gigabit SFP Slots provide high-speed connections
- Integrated into Omada SDN: Zero-Touch Provisioning (ZTP), Centralized Cloud Management and Intelligent Monitoring
- Centralized Management: Cloud access and Omada app for ultra convenience and easy management
- Static Routing: Helps route internal traffic for more efficient use of network resources
- Robust Security Strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication and more
- Optimize Voice and Video Applications: L2/L3/L4 QoS and IGMP snooping
- Standalone Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities
TP-Link TL-SG3428MP JetStream 28-Port Gigabit L2+ Managed Switch with 24-Port PoE+
Convenient Gigabit Switch with 24-Port PoE+ for a Complete Omada Network
- 384W PoE Budget: 24× 802.3at/af-compliant PoE+ ports with a total power supply of 384W
- Full Gigabit Ports: 24x gigabit PoE+ ports and 4x gigabit SFP Slots provide high-speed connections
- Integrated into Omada SDN: Zero-Touch Provisioning (ZTP), Centralized Cloud Management and Intelligent Monitoring
- Centralized Management: Cloud access and Omada app for ultra convenience and easy management
- Static Routing: Helps route internal traffic for more efficient use of network resources
- Robust Security Strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication and more
- Optimize Voice and Video Applications: L2/L3/L4 QoS and IGMP snooping
- Standalone Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities
| HARDWARE FEATURES | |
| Interface | • 24× 10/100/1000Mbps RJ45 Ports |
| • 4× Gigabit SFP Slots | |
| • 1× RJ45 Console Port | |
| • 1× Micro-USB Console Port | |
| Fan Quantity | 2 |
| Power Supply | 100-240 V AC~50/60 Hz |
| PoE+ Ports(RJ45) | • Standard: 802.3at/af compliant |
| • PoE+ Ports: 24 Ports, up to 30 W per port | |
| • Power Budget: 384 W | |
| Dimensions ( W x D x H ) | 440 x 330 x 44mm |
| Mounting | Rack Mountable |
| Max Power Consumption | • 31.0 W (110 V/60 Hz) (no PD connected) |
| • 463.8 W (110 V/60 Hz) (with 384 W PD connected) | |
| Max Heat Dissipation | • 105.78 BTU/h (110 V/60 Hz) (no PD connected) |
| • 1582.49 BTU/h (110 V/60 Hz) (with 384 W PD connected) | |
| PERFORMANCE | |
| Switching Capacity | 56 Gbps |
| Packet Forwarding Rate | 41.66 Mpps |
| MAC Address Table | 8K |
| Jumbo Frame | 9 KB |
| SOFTWARE FEATURES | |
| Quality of Service | • 8 priority queues |
| • 802.1p CoS/DSCP priority | |
| • Queue scheduling | |
| - SP (Strict Priority) | |
| - WRR (Weighted Round Robin) | |
| - SP+WRR | |
| • Bandwidth Control | |
| - Port/Flow based Rating Limiting | |
| • Smoother Performance | |
| • Action for Flows | |
| - Mirror (to supported interface) | |
| - Redirect (to supported interface) | |
| - Rate Limit | |
| - QoS Remark | |
| L2 and L2+ Features | • Link Aggregation |
| - Static link aggregation | |
| - 802.3ad LACP | |
| - Up to 8 aggregation groups and up to 8 ports per group | |
| • Spanning Tree Protocol | |
| - 802.1d STP | |
| - 802.1w RSTP | |
| - 802.1s MSTP | |
| - STP Security: TC Protect, BPDU Filter, BPDU Protect, Root Protect, Loop Protect | |
| • Loopback Detection | |
| - Port-based | |
| - VLAN based | |
| • Flow Control | |
| - 802.3x Flow Control | |
| - HOL Blocking Prevention | |
| • Mirroring | |
| - Port Mirroring | |
| - CPU Mirroring | |
| - One-to-One | |
| - Many-to-One | |
| - Tx/Rx/Both | |
| L2 Multicast | • Supports 511 (IPv4, IPv6) IGMP groups |
| • IGMP Snooping | |
| - IGMP v1/v2/v3 Snooping | |
| - Fast Leave | |
| - IGMP Snooping Querier | |
| - IGMP Authentication | |
| • IGMP Authentication | |
| • MVR | |
| • MLD Snooping | |
| - MLD v1/v2 Snooping | |
| - Fast Leave | |
| - MLD Snooping Querier | |
| - Static Group Config | |
| - Limited IP Multicast | |
| • Multicast Filtering: 256 profiles and 16 entries per profile | |
| VLAN | • VLAN Group |
| - Max 4K VLAN Groups | |
| • 802.1Q Tagged VLAN | |
| • MAC VLAN: 12 Entries (30 Entries for TL-SG3428 V2.0 & TL-SG3428MP V2.0) | |
| • Protocol VLAN: Protocol Template 16, Protocol | |
| VLAN 16 | |
| • Private VLAN | |
| • GVRP | |
| • VLAN VPN (QinQ) | |
| - Port-Based QinQ | |
| - Selective QinQ | |
| • Voice VLAN | |
| Access Control List | • Time-based ACL |
| • MAC ACL | |
| - Source MAC | |
| - Destination MAC | |
| - VLAN ID | |
| - User Priority | |
| - Ether Type | |
| • IP ACL | |
| -Source IP | |
| - Destination IP | |
| - Fragment | |
| - IP Protocol | |
| - TCP Flag | |
| - TCP/UDP Port | |
| - DSCP/IP TOS | |
| - User Priority | |
| • Combined ACL | |
| • Packet Content ACL | |
| • IPv6 ACL | |
| • Policy | |
| - Mirroring | |
| - Redirect | |
| - Rate Limit | |
| - QoS Remark | |
| • ACL apply to Port/VLAN | |
| Security | • IP-MAC-Port Binding |
| - DHCP Snooping | |
| - ARP Inspection | |
| - IPv4 Source Guard | |
| • IPv6-MAC-Port Binding | |
| - DHCPv6 Snooping | |
| - ND Detection | |
| - IPv6 Source Guard | |
| • DoS Defend | |
| • Static/Dynamic Port Security | |
| - Up to 64 MAC addresses per port | |
| • Broadcast/Multicast/Unicast Storm Control | |
| - kbps/ratio/pps control mode | |
| • IP/Port/MAC based access control | |
| • 802.1X | |
| - Port based authentication | |
| - Mac based authentication | |
| - VLAN Assignment | |
| - MAB | |
| - Guest VLAN | |
| - Support Radius authentication and accountability | |
| • AAA (including TACACS+) | |
| • Port Isolation | |
| • Secure web management through HTTPS with SSLv3/TLS 1.2 | |
| • Secure Command Line Interface (CLI) management with SSHv1/SSHv2 | |
| IPv6 | • IPv6 Dual IPv4/IPv6 |
| • Multicast Listener Discovery (MLD) Snooping | |
| • IPv6 ACL | |
| • IPv6 Interface | |
| • Static IPv6 Routing | |
| • IPv6 neighbor discovery (ND) | |
| • Path maximum transmission unit (MTU) discovery | |
| • Internet Control Message Protocol (ICMP) version 6 | |
| • TCPv6/UDPv6 | |
| • IPv6 applications | |
| - DHCPv6 Client | |
| - Ping6 | |
| - Tracert6 | |
| - Telnet (v6) | |
| - IPv6 SNMP | |
| - IPv6 SSH | |
| - IPv6 SSL | |
| - Http/Https | |
| - IPv6 TFTP | |
| L3 Features | • 16 IPv4/IPv6 Interfaces |
| • Static Routing | |
| - 48 static routes | |
| • Static ARP | |
| - 128 static entries | |
| • 316 ARP Entries (512 ARP Entries for TL-SG3428 V2.0 & TL-SG3428MP V2.0) | |
| • Proxy ARP | |
| • Gratuitous ARP | |
| • DHCP Server | |
| • DHCP Relay | |
| - DHCP interface relay | |
| - DHCP VLAN relay | |
| • DHCP L2 Relay | |
| Management | • Web-based GUI |
| • Command Line Interface (CLI) through console port, telnet | |
| • SNMPv1/v2c/v3 | |
| - Trap/Inform | |
| - RMON (1, 2, 3, 9 groups) | |
| • SDM Template | |
| • DHCP/BOOTP Client | |
| • 802.1ab LLDP/LLDP-MED | |
| • DHCP AutoInstall | |
| • Dual Image, Dual Configuration | |
| • CPU Monitoring | |
| • Cable Diagnostics | |
| • EEE | |
| • Password Recovery | |
| • SNTP | |
| • System Log | |
| Advanced Features | • Support Omada Hardware Controller (OC200/OC300), Software Controller, Cloud-Based Controller |
| • Automatic Device Discovery | |
| • Batch Configuration | |
| • Batch Firmware Upgrading | |
| • Intelligent Network Monitoring | |
| • Abnormal Event Warnings | |
| • Unified Configuration | |
| • Reboot Schedule | |
| • ZTP (Zero-Touch Provisioning)* | |
| OTHERS | |
| Certification | CE, FCC, RoHS |
| Package Contents | • TL-SG3428MP Switch |
| • Power Cord | |
| • Quick Installation Guide | |
| • Rackmount Kit | |
| • Rubber Feet | |
| Environment | • Operating Temperature: 0–45 ℃ (32–113 ℉); |
| • Storage Temperature: -40–70 ℃ (-40–158 ℉) | |
| • Operating Humidity: 10–90% RH non-condensing | |
| • Storage Humidity: 5–90% RH non-condensing | |
Additional information
| Weight | 6.08 kg |
|---|---|
| Dimensions | 52.8 × 44 × 10 cm |




