TL-SG3428X

TP-Link 24 Port Gigabit L2+ managed Switch with 4x 10GE SFP+ Ports

TP-Link TL-SG3428X 24 Port Gigabit L2+ managed Switch with 4x 10GE SFP+ Ports, 24x 10/100/1000 Mbps RJ45 Ports, 4x 10G SFP+ slots, Fanless, Rack mountable, 128 Gbps switching capacity

Overview:

TP-Link TL-SG3428X 24-Port Gigabit L2+ Managed Switch with 4x 10GE SFP+ Ports
The TP-Link TL-SG3428X is a high-performance, managed network switch designed for enterprise environments. With 24 Gigabit Ethernet ports and 4 10GE SFP+ uplink ports, it offers outstanding connectivity and non-blocking switching performance, making it ideal for demanding applications. Whether you're looking to improve your network's efficiency, increase security, or optimize bandwidth for voice and video, this switch delivers the capabilities you need for modern networking.

Description:

The TL-SG3428X is an advanced Layer 2+ managed switch that combines powerful performance, robust security features, and seamless cloud management. With 24 gigabit RJ45 ports and 4 10GE SFP+ slots, it ensures reliable and high-speed connectivity for a variety of devices. This switch is integrated with Omada SDN for centralized cloud management, enabling easy monitoring and control of your network through a single interface. Whether you are managing a small office, enterprise, or ISP, the TL-SG3428X's advanced features, including static routing, enhanced QoS, and strong security protocols, make it a reliable choice for high-performance networking.

Features:

Key Benefits of the TL-SG3428X:

• Ultra-Fast 10G Uplink : 4x 10Gbps SFP+ ports ensure lightning-fast, high-bandwidth uplinks that provide fast, non-blocking data transfers across your network.
• Gigabit Connectivity : With 24x gigabit Ethernet ports, this switch offers stable and reliable connections for multiple devices, from desktops to network servers.
• Centralized Cloud Management : Integrated into the Omada SDN platform, the TL-SG3428X allows for zero-touch provisioning and centralized cloud control, providing complete visibility and management through the Omada app.
• Advanced Security : Features like IP-MAC-Port Binding, Access Control Lists (ACL), DoS protection, and 802.1X authentication safeguard your network from external threats.
• Optimized for Voice and Video : Quality of Service (QoS) and IGMP snooping ensure smooth performance for real-time applications like voice and video conferencing, even in high-traffic environments.

• Enterprise-Level Features:

  : The TL-SG3428X supports a wide array of advanced networking features, including VLAN support, Link Aggregation, IGMP throttling, and static routing, making it ideal for businesses of any size.

10G Uplink for High-Speed Connectivity
With 4x 10Gbps SFP+ ports, the TP-Link TL-SG3428X provides ultra-fast and high-bandwidth connectivity for your server and network switch connections. These 10GE uplink ports deliver reliable, non-blocking performance, ensuring minimal latency and smooth data transfer across large networks.

Seamless Cloud Management with Omada SDN
The TL-SG3428X integrates seamlessly with TP-Link's Omada SDN, enabling centralized cloud management of your entire network. This solution supports zero-touch provisioning (ZTP), intelligent monitoring, and remote configuration, making network management hassle-free from anywhere, at any time. Whether for education, retail, or office environments, Omada's scalable platform is perfect for growing businesses.

Advanced Layer 2+ and Layer 3 Capabilities
The TL-SG3428X supports both Layer 2+ and Layer 3 features, allowing for enhanced routing, network segmentation, and advanced traffic management. Static routing capabilities help direct internal traffic efficiently, while advanced QoS ensures prioritization for voice and video applications, so they run smoothly even in high-demand situations.

Comprehensive Network Security
Your network's security is prioritized with built-in features like IP-MAC-Port-VID binding, storm control, and DoS attack prevention. Additionally, advanced ACLs offer traffic filtering based on MAC address, IP address, and VLAN IDs, allowing you to protect sensitive resources. 802.1X authentication ensures that only authorized users can access your network, further enhancing security.

Optimized for Service Providers and Enterprises
This switch also includes ISP-oriented features such as sFlow, QinQ, and PPPoE ID Insertion, along with easy monitoring tools like Device Link Detection Protocol (DLDP) and OAM for Ethernet troubleshooting. These features are designed to meet the needs of service providers and large enterprise networks, ensuring seamless operation and performance.

Ready for IPv6 Networks
The TP-Link TL-SG3428X supports IPv6 features, including dual-stack IPv4/IPv6, MLD snooping, and IPv6 ACLs, ensuring your network is prepared for future technology without needing additional hardware upgrades. This future-proof capability helps businesses stay ahead in the evolving networking landscape.

Why Choose the TL-SG3428X

• High performance with 10GE uplinks and 24 Gigabit ports.
• Centralized management through Omada SDN for easy network control.
• Enhanced security features to protect your network from external threats.
• Optimized for real-time applications with QoS and IGMP snooping.
• Flexible deployment for enterprises, campuses, and ISPs.

Conclusion
The TP-Link TL-SG3428X 24-Port Gigabit L2+ Managed Switch is the ideal solution for businesses seeking reliable, high-speed connectivity and robust security features. With seamless integration into Omada's SDN platform, advanced L2+ and L3 capabilities, and enterprise-level security, it's an excellent choice for network professionals looking to optimize performance and ensure the safety of their infrastructure. Whether you're upgrading your existing network or building a new one from the ground up, the TL-SG3428X provides the power and flexibility you need to stay ahead in today's fast-paced digital environment.

Specifications:

© 2025 Respective owners and brand holders. This table has been carefully researched and generated by Laptop Direct CC (https://www.laptopdirect.co.za), however, errors and omissions may occur. Only references to South Africa apply. All products are sourced in South Africa from the official suppliers and the warranty is that of the local supplier. E&OE. This table and our site's content may be used on condition that this notice and link remains intact and unaltered.
Specifications
Product Code	TL-SG3428X
HARDWARE FEATURES
Interface	24x 10/100/1000 Mbps RJ45 Ports
	4x 10G SFP+ Slots
	1x RJ45 Console Port
	1x Micro-USB Console Port
Fan Quantity	Fanless
Power Supply	100-240 V AC~50/60 Hz
Dimensions ( W x D x H )	17.3 x 7.1 x 1.7 in (440 x 180 x 44 mm)
Mounting	Rack Mountable
Max Power Consumption	23.6 W (110V/60Hz)
Max Heat Dissipation	80.353 BTU/h (110 V/60 Hz)
PERFORMANCE
Switching Capacity	128 Gbps
Packet Forwarding Rate	95.23 Mpps
MAC Address Table	16 K
Packet Buffer Memory	12 Mbit
Jumbo Frame	9 KB
SOFTWARE FEATURES
Quality of Service	8 priority queues
	802.1p CoS/DSCP priority
	Queue scheduling
	- SP (Strict Priority)
	- WRR (Weighted Round Robin)
	- SP+WRR
	Bandwidth Control
	- Port/Flow based Rating Limiting
	Smoother Performance
	Action for Flows
	- Mirror (to supported interface)
	- Redirect (to supported interface)
	- Rate Limit
	- QoS Remark
L2 and L2+ Features	Link Aggregation
	- static link aggregation
	- 802.3ad LACP
	- Up to 8 aggregation groups, containing 8 ports per group
	Spanning Tree Protocol
	- 802.1d STP
	- 802.1w RSTP
	- 802.1s MSTP
	- STP Security: TC Protect, BPDU Filter, Root Protect
	Loopback Detection
	- Port based
	- VLAN based
	Flow Control
	- 802.3x Flow Control
	- HOL Blocking Prevention
	Mirroring
	- Port Mirroring
	- CPU Mirroring
	- One-to-One
	- Many-to-One
	- Tx/Rx/Both
L2 Multicast	IGMP Snooping
	- IGMP v1/v2/v3 Snooping
	- Fast Leave
	- IGMP Snooping Querier
	- IGMP Authentication
	IGMP Authentication
	MLD Snooping
	- MLD v1/v2 Snooping
	- Fast Leave
	- MLD Snooping Querier
	- Static Group Config
	- Limited IP Multicast
	MVR
	Multicast Filtering: 256 profiles and 16 entries per profile
VLAN	VLAN Group
	- Max 4K VLAN Groups
	802.1Q Tagged VLAN
	MAC VLAN: 7 Entries
	Protocol VLAN: Protocol Template 16, Protocol VLAN 16
	Private VLAN
	GVRP
	VLAN VPN (QinQ)
	- Port-Based QinQ
	- Selective QinQ
	Voice VLAN
Access Control List	Time-based ACL
	MAC ACL
	- Source MAC
	- Destination MAC
	- VLAN ID
	- User Priority
	- Ether Type
	IP ACL
	-Source IP
	- Destination IP
	- Fragment
	- IP Protocol
	- TCP Flag
	- TCP/UDP Port
	- DSCP/IP TOS
	- User Priority
	Combined ACL
	Packet Content ACL
	IPv6 ACL
	Policy
	- Mirroring
	- Redirect
	- Rate Limit
	- QoS Remark
	ACL apply to Port/VLAN
Security	IP-MAC-Port Binding
	- 512 Entries
	- DHCP Snooping
	- ARP Inspection
	- IPv4 Source Guard: 100 Entries
	IPv6-MAC-Port Binding
	- 512 Entries
	- DHCPv6 Snooping
	- ND Detection
	- IPv6 Source Guard: 100 Entries
	DoS Defend
	Static/Dynamic Port Security
	- Up to 64 MAC addresses per port
	Broadcast/Multicast/Unicast Storm Control
	- kbps/ratio control mode
	802.1X
	- Port base authentication
	- Mac base authentication
	- VLAN Assignment
	- MAB
	- Guest VLAN
	- Support Radius authentication andaccountability
	AAA (including TACACS+)
	Port Isolation
	Secure web management through HTTPS with SSLv3/TLS 1.2
	Secure Command Line Interface (CLI) management with SSHv1/SSHv2
	IP/Port/MAC based access control
IPv6	IPv6 Dual IPv4/IPv6
	Multicast Listener Discovery (MLD) Snooping
	IPv6 ACL
	IPv6 Interface
	Static IPv6 Routing
	IPv6 neighbor discovery (ND)
	Path maximum transmission unit (MTU) discovery
	Internet Control Message Protocol (ICMP) version 6
	TCPv6/UDPv6
	IPv6 applications
	- DHCPv6 Client
	- Ping6
	- Tracert6
	- Telnet (v6)
	- IPv6 SNMP
	- IPv6 SSH
	- IPv6 SSL
	- Http/Https
	- IPv6 TFTP
L3 Features	16 IPv4/IPv6 Interfaces
	Static Routing
	- 48 static routes
	Static ARP
	- 128 Static Entries
	Proxy ARP
	Gratuitous ARP
	DHCP Server
	DHCP Relay
	- DHCP Interface Relay
	- DHCP VLAN Relay
	DHCP L2 Relay
Management	Web-based GUI
	Command Line Interface (CLI) through the console port, telnet
	SNMP v1/v2c/v3
	- Trap/Inform
	- RMON (1,2,3,9 groups)
	SDM Template
	DHCP/BOOTP Client
	802.1ab LLDP/LLDP-MED
	DHCP AutoInstall
	Dual Image, Dual Configuration
	CPU Monitoring
	Cable Diagnostics
	EEE
	Password Recovery
	SNTP
	System Log
Advanced Features	Support Omada Hardware Controller (OC200/OC300), Software Controller, Cloud-Based Controller
	Automatic Device Discovery
	Batch Configuration
	Batch Firmware Upgrading
	Intelligent Network Monitoring
	Abnormal Event Warnings
	Unified Configuration
	Reboot Schedule
	ZTP (Zero-Touch Provisioning)
MIBs	MIB II (RFC1213)
	Interface MIB (RFC2233)
	Ethernet Interface MIB (RFC1643)
	Bridge MIB (RFC1493)
	P/Q-Bridge MIB (RFC2674)
	RMON MIB (RFC2819)
	RMON2 MIB (RFC2021)
	Radius Accounting Client MIB (RFC2620)
	Radius Authentication Client MIB (RFC2618)
	Remote Ping, Traceroute MIB (RFC2925)
	Support TP-Link private MIB
MANAGEMENT
Omada App	Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management	Omada Cloud-Based Controller
	Omada Hardware Controller (OC300)
	Omada Hardware Controller (OC200)
	Omada Software Controller