TP-LINK (SG3428XMP) JetStream 24-Port Gigabit & 4-Port 10GE SFP+ L2+ Managed Switch with 24-Port PoE+ Rackmountable

JetStream 24-Port Gigabit and 4-Port 10GE SFP+ L2+ Managed Switch with 24-Port PoE+

• 10G Lightning-Fast Uplink:4x 10 Gbps SFP+ slots enable high-bandwidth connectivity and non-blocking switching capacity.
• 384 W PoE Budget:24x 802.3at/af-compliant PoE+ ports with a total power supply of 384 W*.
• Integrated into Omada SDN:Zero-Touch Provisioning (ZTP)**, Centralized Cloud Management, and Intelligent Monitoring.
• Centralized Management:Cloud access and Omada app for ultra convenience and easy management.
• Static Routing:Helps route internal traffic for more efficient use of network resources.
• Robust Security Strategies:IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication, and more.
• Optimize Voice and Video Applications:L2/L3/L4 QoS and IGMP snooping.
• Standalone Management:Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities.

Enterprise Switch with 10G Uplink

4x 10 Gbps SFP+ slots provide non-blocking switching performance and ultra-low latency, so reliable and lightning-fast connections to servers and other switches are easily built.

Dedicated 24 PoE+ Ports (384 W Budget) for Numerous Applications

Features 24x 802.3af/at compliant PoE+ ports, the switch supports up to 384 W total PoE power budget.* Designed to use a single Ethernet cable for both data and power transmission, it offers flexible deployment for PoE-supported devices such as wireless access points, IP cameras, and IP phones, lowering infrastructure costs for small businesses.

Advanced L3 Features

An abundance of L2+ and L3 features are supported to help build a highly scalable and robust network, providing a reliable and efficient solution for enterprises, campuses and ISPs.***

Secure Networking

Security features include IP-MAC-Port-VID Binding, Port Security, Storm Control, and DHCP Snooping to defend against a range of network threats. An integrated list of common DoS attacks is available, making it easier than ever to prevent them. In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports, or VLAN ID. Users network access can be controlled via 802.1X authentication, which works with a RADIUS/Tacacs+ server to grant access only when valid user credentials are provided.

Enterprise Level Features

A complete lineup of L2+ features is supported, including 802.1Q VLAN, Port Mirroring, STP/RSTP/MSTP, Link Aggregation Control Protocol, and 802.3x Flow Control. Advanced IGMP Snooping ensures the switch intelligently forwards multicast streams to only the appropriate subscribers, cutting out unnecessary traffic, while IGMP throttling & filtering restrict each subscriber on a port level to prevent unauthorized multicast access. Static Routing is a simple way of segmenting the network and internally routs traffic through the switch for improved efficiency.

Advanced QoS

Voice and video traffic can be prioritized based on IP address, MAC address, TCP port number, UDP port number, and more. With QoS (Quality of Service), voice and video services remain smooth, even when bandwidth is in short supply.

ISP Features***

sFlow, QinQ, L2PT PPPoE ID Insertion, and IGMP authentication features are provided, developed with service providers in mind. 802.3ah OAM and Device Link Detection Protocol (DLDP) offer easy monitoring and troubleshooting of Ethernet links.

IPv6 Support

IPv6 functions such as Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery, and IPv6 Neighbor Discover guarantee your network is ready for the Next Generation Network (NGN) without upgrading your hardware.

Specifications:

• Rackmountable: Yes

• Managed: Yes

• Number of Ports: 24

• Max RJ45 Transfer Rate: 10/100/1000 Mbps

• Interface(s):

  • 24 x 10/100/1000 Mbps RJ45 Ports
  • 4 x 10G SFP+ Slots
  • 1 x RJ45 Console Port
  • 1 x Micro-USB Console Port

• PoE Ports (RJ45):

  • 24 x 802.3at/af-compliant PoE+ ports
  • Total Power Supply: 384 W

• Switching Capacity: 128 Gbps

• Power Supply:

  • 100-240 V AC~50/60 Hz
  • Consumption:
    • 34.4 W (no PD device connected)
    • 465.8 W (with 384 W PD device connected)

• Dimensions (WxDxH): 440 x 330 x 44 mm

• Mac Address Table: 16 K

• Packet Forwarding Rate: 95.23 Mpps

• Jumbo Frame: 9 KB

• Additional Features:

  • Supports Omada Hardware, Software, and Cloud-Based Controller
  • Automatic Device Discovery
  • Batch Configuration
  • Batch Firmware Upgrading
  • Intelligent Network Monitoring
  • Abnormal Event Warnings
  • Unified Configuration
  • Reboot Schedule
  • ZTP (Zero-Touch Provisioning)

• Quality of Service (QoS):

  • 8 priority queues
  • 802.1p CoS/DSCP priority
  • Queue scheduling
  • Bandwidth Control
  • Smoother Performance
  • Action for Flows

• Layer Features:

  • L2 and L2+ Features:

    • Link Aggregation
    • Spanning Tree Protocol
    • Loopback Detection
    • Flow Control
    • Mirroring

  • L2 Multicast:

    • IGMP Snooping
    • IGMP Authentication
    • MLD Snooping
    • MVR
    • Multicast Filtering (256 profiles, 16 entries per profile)

  • L3 Features:

    • 16 IPv4/IPv6 Interfaces
    • Static Routing
    • Static ARP
    • Proxy ARP
    • Gratuitous ARP
    • DHCP Server
    • DHCP Relay
    • DHCP L2 Relay

• VLAN:

  • VLAN Group (Max 4K)
  • 802.1Q Tagged VLAN
  • MAC VLAN: 7 Entries
  • Private VLAN
  • GVRP
  • VLAN VPN (QinQ)
  • Voice VLAN
  • Protocol VLAN: Template 16, VLAN 16

• Access Control:

  • Time-based ACL
  • MAC ACL
  • IP ACL
  • Combined ACL
  • Packet Content ACL
  • IPv6 ACL
  • Policy
  • ACL Apply to Port/VLANS

• Security:

  • IP-MAC-Port Binding
  • IPv6-MAC-Port Binding
  • DoS Defend
  • Static/Dynamic Port Security
  • Broadcast/Multicast/Unicast Storm Control
  • 802.1X
  • AAA (including TACACS+)
  • Port Isolation
  • Secure Web Management – HTTPS with SSLv3/TLS 1.2
  • Secure CLI Management with SSHv1/SSHv2

• Management:

  • Web-based GUI
  • CLI through console port, telnet
  • SNMP v1/v2c/v3
  • SDM Template
  • DHCP/BOOTP Client
  • 802.1ab LLDP/LLDP-MED
  • DHCP AutoInstall
  • Dual Image, Dual Configuration
  • CPU Monitoring
  • Cable Diagnostics
  • EEE
  • Password Recovery
  • SNTP
  • System Log

• Environment:

  • Operating Temperature: 0C ~ 45C (32F ~ 113F)
  • Storage Temperature: -40C ~ 70C (-40F ~ 158F)
  • Operating Humidity: 10% ~ 90% RH non-condensing
  • Storage Humidity: 5% ~ 90% RH non-condensing

• Package Contents:

  • TL-SG3428XMP Switch
  • Power Cord
  • Quick Installation Guide
  • Rackmount Kit
  • Rubber Feet

• Warranty: Limited Lifetime