TP-Link TL-SG3428X JetStream 24-Port Gigabit L2+ Managed Switch with 4 10GE SFP+ Slots
- 10G Lightning-Fast Uplink Connection
- 4× 10 Gbps SFP+ Slots
- 24× Gigabit Ethernet Ports
- Centralized Cloud Management
Overview
TP-Link’s JetStream L2+ managed switches provide high performance, powerful L2 and L2+ features like static routing, enterprise-level QoS, advanced security strategies and a bundle of ISP features. The 10-gigabit ports ensure high-speed data transfer, and their backward compatility with gigabit products reserves room for network upgrades, therefore guarantees stable and long-term usability. The IP-MAC-Port Binding (IMPB) and Access Control List (ACL) functions protect against broadcast storm, ARP and Denial-of-Service (DoS) attacks, etc. Quality of Service (QoS, L2 to L4) provides enhanced traffic management capabilities to move your data smoother and faster. The OAM function helps facilitate network management. Moreover, the easy-to-use web management interfaces, along with CLI, SNMP and Dual Image mean faster setup and configuration with less downtime. TP-Link JetStream L2+ 10-gigabit managed switches provide a reliable, secure solution for enterprise, campus and ISP networks.
Features
Features
- 10G Lightning-Fast Uplink: 4× 10 Gbps SFP+ slots enable high-bandwidth connectivity and non-blocking switching capacity.
- Gigabit Speeds: 24× gigabit RJ45 ports offer high-speed and reliable connections to other switches and devices.
- Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)*, Centralized Cloud Management, and Intelligent Monitoring.
Centralized Management: Cloud access and Omada app for ultra convenience and easy management. - Static Routing: Helps route internal traffic for more efficient use of network resources.
- Robust Security Strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication, and more.
- Optimize Voice and Video Applications: L2/L3/L4 QoS and IGMP snooping.
- Standalone Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities
Specifications
| Model | TL-SG3210XHP-M2 | TL-SG3428X | TL-SG3428XMP |
| Interface | 8× 100/1000Mbps/2.5Gbps RJ45 Ports 2× 10GE SFP+ Slots |
24× 10/100/1000Mbps RJ45 Ports 4× 10GE SFP+ Slots |
24× 10/100/1000Mbps RJ45 Ports 4× 10GE SFP+ Slots |
| Console | 1× RJ45 Console Port 1× Micro-USB Console Port |
||
| PoE | |||
|---|---|---|---|
| PoE Standard | 802.3af/at | - | 802.3af/at |
| PoE Ports | 8, up to 30 W | - | 24, up to 30 W |
| PoE Power Budget | 240 W | - | 384 W |
| Performance | |||
| Switching Capacity | 80 Gbps | 128 Gbps | 128 Gbps |
| Packet Forwarding Rate | 59.52 Mpps | 95.23 Mpps | 95.23 Mpps |
| MAC Address Table | 16K | ||
| Packet Buffer | 12 Mbit | ||
| Number of IP Interfaces | 16 | ||
| Number of Static Routes | 48 (IPv4, IPv6) | ||
| Jumbo Frame | 9 KB | ||
| Physical & Environment | |||
| Power Supply | 100–240 V AC, 50/60 Hz | ||
| Max Power Consumption | 17.24 W (110 V/60 Hz) (no PD connected) 291.49 W (110 V/60 Hz) (with 240 W PD connected) |
23.6 W (110 V/60 Hz) | 34.4 W (110 V/60 Hz) (no PD connected) 465.8 W (110 V/60 Hz) (with 384 W PD connected) |
| Max Heat Dissipation | 58.82 BTU/h (110 V/60 Hz) (no PD connected) 994.56 BTU/h (110 V/60 Hz) (with 240 W PD connected) |
80.52 BTU/h (110 V/60 Hz) | 117.38 BTU/h (110 V/60 Hz) (no PD connected) 1589.31 BTU/h (110 V/60 Hz) (with 384 W PD connected) |
| Dimensions (W × D × H) | 17.3" × 7.1" × 1.7" (440 × 180 × 44 mm) | 17.3" × 7.1" × 1.7" (440 × 180 × 44 mm) | 17.3" × 13.0" × 1.7" (440 × 330 × 44 mm) |
| Fan Quantity | 2 | Fanless | 2 |
| Installation | Rack Mountable | ||
| Operating Temperature | 0°C to 50°C (32°F to 122°F) | 0°C to 45°C (32°F to 113°F) | 0°C to 45°C (32°F to 113°F) |
| Storage Temperature | -40°C to 70°C (-40°F to 158°F) | ||
| Operating Humidity | 10% to 90% RH, non-condensing | ||
| Storage Humidity | 5% to 90% RH, non-condensing | ||
| Certification | CE, FCC, RoHS | ||
| SDN Support | |||
| Omada SDN | Omada Hardware Controller (OC200/OC300), Software Controller, Cloud-Based Controller Automatic Device Discovery Batch Configuration Batch Firmware Upgrading Intelligent Network Monitoring Abnormal Event Warnings Unified Configuration Reboot Schedule ZTP (Zero-Touch Provisioning)* |
||
| L3 Features | |||
| IPv4/IPv6 Interfaces | 16 | ||
| Static Routing | 48 static routes | ||
| Static ARP | 128 static entries | ||
| ARP Entries | 512 | ||
| ARP Features | Proxy ARP Gratuitous ARP |
||
| DHCP | DHCP Server DHCP Relay DHCP Interface Relay DHCP VLAN Relay DHCP L2 Relay |
||
| L2 Features | |||
| Link Aggregation | Static Link Aggregation 802.3ad LACP Up to 8 aggregation groups and up to 8 ports per group |
||
| Spanning Tree Protocol | 802.1d STP 802.1w RSTP 802.1s MSTP STP Security: TC Protect, BPDU Filter, BPDU Protect, Root Protect, Loop Protect |
||
| Loopback Detection | Port based VLAN based |
||
| Flow Control | 802.3x Flow Control HOL Blocking Prevention |
||
| Mirroring | Port Mirroring CPU Mirroring One-to-One Many-to-One Tx/Rx/Both |
||
| L2 Multicast | |||
| Multicast Groups | Supports 1000 IPv4/IPv6 IGMP groups | ||
| IGMP Snooping | IGMP v1/v2/v3 Snooping Fast Leave IGMP Snooping Querier IGMP Authentication |
||
| MVR | Supported | ||
| MLD Snooping | MLD v1/v2 Snooping Fast Leave MLD Snooping Querier Static Group Config Limited IP Multicast |
||
| Multicast Filtering | 256 profiles and 16 entries per profile | ||
| VLAN | |||
| VLAN Groups | Max 4K VLAN Groups | ||
| 802.1Q Tagged VLAN | Supported | ||
| MAC VLAN | 30 entries | ||
| Protocol VLAN | Protocol Template: 16 Protocol VLAN: 16 |
||
| Private VLAN | Supported | ||
| GVRP | Supported | ||
| VLAN VPN (QinQ) | Port-Based QinQ Selective QinQ |
||
| Voice VLAN | Supported | ||
| QoS | |||
| Priority Queues | 8 | ||
| Priority | 802.1p CoS/DSCP Priority | ||
| Queue Scheduling | SP (Strict Priority) WRR (Weighted Round Robin) SP+WRR |
||
| Bandwidth Control | Port/Flow based Rate Limiting | ||
| Smoother Performance | Supported | ||
| Action for Flows | Mirror Redirect Rate Limit QoS Remark |
||
| ACL | |||
| MAC ACL | Source MAC Destination MAC VLAN ID User Priority Ether Type |
||
| IP ACL | Source IP Destination IP Fragment IP Protocol TCP Flag TCP/UDP Port DSCP/IP TOS User Priority |
||
| Combined ACL | Supported | ||
| IPv6 ACL | Supported | ||
| ACL Policy | Mirroring Redirect Rate Limit QoS Remark |
||
| ACL Application | Port/VLAN | ||
| Time-Based ACL | Supported | ||
| Security | |||
| IP-MAC-Port Binding | 512 Entries DHCP Snooping ARP Inspection IPv4 Source Guard: 100 Entries |
||
| IPv6-MAC-Port Binding | 512 Entries DHCPv6 Snooping ND Detection IPv6 Source Guard: 100 Entries |
||
| DoS Defend | Supported | ||
| Port Security | Static/Dynamic Port Security Up to 64 MAC addresses per port |
||
| Storm Control | Broadcast/Multicast/Unicast Storm Control kbps/ratio/pps control mode |
||
| 802.1X | Port based authentication MAC based authentication VLAN Assignment MAB Guest VLAN RADIUS authentication and accountability |
||
| AAA | Supported, including TACACS+ | ||
| Port Isolation | Supported | ||
| Secure Web Management | HTTPS with SSLv3/TLS 1.2 | ||
| Secure CLI Management | SSHv1/SSHv2 | ||
| Access Control | IP/Port/MAC based access control | ||
| ISP Features | |||
| Supported Features | 802.3ah Ethernet Link OAM L2PT (Layer 2 Protocol Tunneling) PPPoE ID Insertion Device Link Detect Protocol (DLDP) sFlow DDM |
||
| Management | |||
| Web Management | Web-based GUI | ||
| Command Line Interface | CLI through console port and Telnet | ||
| SNMP | SNMPv1/v2c/v3 Trap/Inform RMON (1, 2, 3, 9 groups) |
||
| Additional Management Features | SDM Template DHCP/BOOTP Client 802.1ab LLDP/LLDP-MED DHCP Auto Install Dual Image Dual Configuration CPU Monitoring Cable Diagnostics EEE Password Recovery SNTP System Log |
||
| IPv6 Support | |||
| IPv6 Features | Dual IPv4/IPv6 Multicast Listener Discovery (MLD) Snooping IPv6 ACL IPv6 Interface Static IPv6 Routing IPv6 Neighbor Discovery (ND) Path Maximum Transmission Unit (MTU) Discovery Internet Control Message Protocol (ICMP) Version 6 TCPv6/UDPv6 |
||
| IPv6 Applications | DHCPv6 Client Ping6 Tracert6 Telnet (v6) IPv6 SNMP IPv6 SSH IPv6 SSL HTTP/HTTPS IPv6 TFTP |
||
| MIBs | |||
| Supported MIBs | MIB II (RFC1213) Interface MIB (RFC2233) Ethernet Interface MIB (RFC1643) Bridge MIB (RFC1493) P/Q-Bridge MIB (RFC2674) RMON MIB (RFC2819) RMON2 MIB (RFC2021) RADIUS Accounting Client MIB (RFC2620) RADIUS Authentication Client MIB (RFC2618) Remote Ping, Traceroute MIB (RFC2925) TP-Link Private MIB |
||
| Ordering Information | |||
| TL-SG3210XHP-M2 | JetStream 8-Port 2.5GBASE-T and 2-Port 10GE SFP+ L2+ Managed Switch with 8-Port PoE+ | ||
| TL-SG3428X | JetStream 24-Port Gigabit L2+ Managed Switch with 4 10GE SFP+ Slots | ||
| TL-SG3428XMP | JetStream 24-Port Gigabit and 4-Port 10GE SFP+ L2+ Managed Switch with 24-Port PoE+ | ||
| Zero-Touch Provisioning Note | * Zero-Touch Provisioning is supported when using Omada Cloud-Based Controller. | ||
| PoE Budget Note | PoE budget calculations are based on laboratory testing. Actual PoE power budget is not guaranteed and will vary as a result of client limitations and environmental factors. | ||
