TP-Link Switch TL-SG3428MP Omada JetStream 28-Port Gigabit L2 Managed Switch

Description

JetStream 28-Port Gigabit L2 Managed Switch with 24-Port PoE+

• 384 W PoE Budget: 24× 802.3at/af-compliant PoE+ ports with a total power supply of 384 W*.

• Full Gigabit Ports: 24× gigabit PoE+ ports and 4× gigabit SFP Slots provide high-speed connections.

• Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)**, Centralized Cloud Management, and Intelligent Monitoring.

• Centralized Management: Cloud access and Omada app for ultra convenience and easy management.

• Static Routing: Helps route internal traffic for more efficient use of network resources.

• Robust Security Strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication, and more.

• Optimize Voice and Video Applications: L2/L3/L4 QoS and IGMP snooping.

• Standalone Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities.

PoE+ Output

24× Gigabit PoE+ Ports with Total 384 W Power Budget*

Centralized Cloud Management

SDN Solutions Integration for a Highly Efficient Network

Robust Security Strategies

LAN Area Investment Protection

Advanced L2+ Features

Static Routing, IGMP Snooping

802.1 Q VLAN and More
HARDWARE FEATURES
Interface
24x 10/100/1000Mbps RJ45 Ports
4x Gigabit SFP Slots
1x RJ45 Console Port
1x Micro-USB Console Port
Fan Quantity
2
Power Supply
100-240 V AC 50/60 Hz
PoE+ Ports(RJ45)
Standard: 802.3at/af compliant
PoE+ Ports: 24 Ports, up to 30 W per port
Power Budget: 384 W
Mounting
Rack Mountable
Max Power Consumption
31.0 W (110 V/60 Hz) (no PD connected)
463.8 W (110 V/60 Hz) (with 384 W PD connected)
Max Heat Dissipation
105.78 BTU/h (110 V/60 Hz) (no PD connected)
1582.49 BTU/h (110 V/60 Hz) (with 384 W PD connected)
PERFORMANCE
Switching Capacity
56 Gbps
Packet Forwarding Rate
41.66 Mpps
Packet Forwarding Rate
41.66 Mpps
Jumbo Frame
9 KB
SOFTWARE FEATURES
Quality of Service
8 priority queues
802.1p CoS/DSCP priority
Queue scheduling
– SP (Strict Priority)
– WRR (Weighted Round Robin)
– SP+WRR
Bandwidth Control
– Port/Flow based Rating Limiting
Smoother Performance
Action for Flows
– Mirror (to supported interface)
– Redirect (to supported interface)
– Rate Limit
– QoS Remark
L2 and L2+ Features
Link Aggregation
– Static link aggregation
– 802.3ad LACP
– Up to 8 aggregation groups and up to 8 ports per group
Spanning Tree Protocol
– 802.1d STP
– 802.1w RSTP
– 802.1s MSTP
– STP Security: TC Protect, BPDU Filter, BPDU Protect, Root Protect, Loop Protect
Loopback Detection
– Port-based
– VLAN based
Flow Control
– 802.3x Flow Control
– HOL Blocking Prevention
Mirroring
– Port Mirroring
– CPU Mirroring
– One-to-One
– Many-to-One
– Tx/Rx/Both
L2 Multicast
Supports 511 (IPv4, IPv6) IGMP groups
IGMP Snooping
– IGMP v1/v2/v3 Snooping
– Fast Leave
– IGMP Snooping Querier
– IGMP Authentication
IGMP Authentication
MVR
MLD Snooping
– MLD v1/v2 Snooping
– Fast Leave
– MLD Snooping Querier
– Static Group Config
– Limited IP Multicast
Multicast Filtering: 256 profiles and 16 entries per profile
VLAN
VLANGroup
– Max 4K VLAN Groups
802.1q Tagged VLAN
MAC VLAN: 12 Entries
Protocol VLAN: Protocol Template 16, Protocol VLAN 16
GVRP
VLAN VPN (QinQ)
– Port-Based QinQ
– Selective QinQ
Voice VLAN
Access Control List
Time-based ACL
MAC ACL
– Source MAC
– Destination MAC
– VLAN ID
– User Priority
– Ether Type
IP ACL
-Source IP
– Destination IP
– Fragment
– IP Protocol
– TCP Flag
– TCP/UDP Port
– DSCP/IP TOS
– User Priority
Combined ACL
Packet Content ACL
IPv6 ACL
Policy
– Mirroring
– Redirect
– Rate Limit
– QoS Remark
ACL apply to Port/VLAN
Security
IP-MAC-Port Binding
– DHCP Snooping
– ARP Inspection
– IPv4 Source Guard
IPv6-MAC-Port Binding
– DHCPv6 Snooping
– ND Detection
– IPv6 Source Guard
DoS Defend
Static/Dynamic Port Security
– Up to 64 MAC addresses per port
Broadcast/Multicast/Unicast Storm Control
– kbps/ratio/pps control mode
IP/Port/MAC based access control
802.1X
– Port based authentication
– Mac based authentication
– VLAN Assignment
– MAB
– Guest VLAN
– Support Radius authentication and accountability
AAA (including TACACS+)
Port Isolation
Secure web management through HTTPS with SSLv3/TLS 1.2
Secure Command Line Interface (CLI) management with SSHv1/SSHv2
IPv6
IPv6 Dual IPv4/IPv6
Multicast Listener Discovery (MLD) Snooping
IPv6 ACL
IPv6 Interface
Static IPv6 Routing
IPv6 neighbor discovery (ND)
Path maximum transmission unit (MTU) discovery
Internet Control Message Protocol (ICMP) version 6
TCPv6/UDPv6
IPv6 applications
– DHCPv6 Client
– Ping6
– Tracert6
– Telnet (v6)
– IPv6 SNMP
– IPv6 SSH
– IPv6 SSL
– Http/Https
– IPv6 TFTP
L3 Features
16 IPv4/IPv6 Interfaces
Static Routing
– 48 static routes
Static ARP
316 ARP Entries
Proxy ARP
Gratuitous ARP
DHCP Server
DHCP Relay
DHCP L2 Relay
Management
Web-based GUI
Command Line Interface (CLI) through console port, telnet
SNMPv1/v2c/v3
– Trap/Inform
– RMON (1, 2, 3, 9 groups)
SDM Template
DHCP/BOOTP Client
802.1ab LLDP/LLDP-MED
DHCP AutoInstall
Dual Image, Dual Configuration
CPU Monitoring
Cable Diagnostics
EEE
Password Recovery
SNTP
System Log