TL-SG3428XMP

TP-Link JetStream 24 Port Gigabit PoE+ & 4 port 10GE SPF+ L2+ managed Switch

TP-Link SG3428XMP JetStream 24 Port Gigabit PoE+ & 4 port 10GE SPF+ L2+ managed Switch, 24x 10/100/1000 Mbps RJ45 Ports, 4x 10G SFP+ slots, PoE+ 24 Ports up to 30 W per Port, 384 W Power budget, Rack mountable, 128 Gbps switching capacity

Overview:

TL-SG3428XMP JetStream 24-Port Gigabit and 4-Port 10GE SFP+ Managed Switch with PoE+
The TL-SG3428XMP JetStream is a high-performance L2+ managed switch designed for growing businesses and enterprise networks. With 24 gigabit PoE+ ports and 4 high-speed 10G SFP+ uplinks, this switch delivers reliable, low-latency connectivity while supporting a wide range of network devices. Its robust security options, advanced traffic management, and integration with TP-Link's Omada SDN platform make network setup, monitoring, and scaling simpler than ever.

Description:

This switch supports 24 PoE+ ports delivering up to 30 W per port with a total 384 W budget, ideal for IP cameras, wireless access points, and VoIP phones. Four 10G SFP+ uplinks provide high-bandwidth, non-blocking connections for servers and backbone switches. Integrated with Omada SDN, it offers centralized cloud management, zero-touch provisioning, and intelligent monitoring. Advanced L2+ and L3 capabilities, strong security controls, and QoS optimization ensure smooth voice, video, and data traffic across enterprise networks.

Features:

High-Speed Connectivity for Enterprise Networks
Equipped with 4x 10 Gbps SFP+ uplinks, the TL-SG3428XMP delivers non-blocking switching performance, ultra-low latency, and high-bandwidth connections for servers, storage, and core network links. This ensures fast, reliable communication across your infrastructure and seamless integration with other switches.

PoE+ Ports for Flexible Device Deployment
With 24 PoE+ ports supporting up to 30 W per port and a total power budget of 384 W, this switch simplifies deployment of powered devices using a single Ethernet cable. It's perfect for connecting IP cameras, wireless access points, and VoIP phones, reducing wiring costs and improving network efficiency.

Centralized Cloud Management via Omada SDN
The TL-SG3428XMP integrates seamlessly with the Omada SDN platform, allowing network administrators to manage switches, access points, and gateways from a single cloud interface. Features like zero-touch provisioning, centralized monitoring, and remote configuration provide a scalable, easy-to-manage network solution for offices, retail spaces, schools, and hotels.

Advanced Traffic and Routing Management
This switch supports an extensive suite of L2+ and L3 functions, including static routing, VLANs, and IGMP snooping. These capabilities improve traffic segmentation, reduce congestion, and ensure efficient data flow across your network.

Robust Security Controls
Protecting your network is simple with features such as IP-MAC-Port binding, port security, ACLs, DHCP snooping, storm control, and 802.1X authentication. DoS attack prevention and RADIUS authentication help secure sensitive resources and restrict network access to authorized users only.

Enterprise-Grade Networking Tools
The TL-SG3428XMP includes L2+ functions such as 802.1Q VLANs, port mirroring, STP/RSTP/MSTP, link aggregation, and flow control. Advanced IGMP snooping forwards multicast traffic only to intended recipients, preventing unnecessary data flooding. These features ensure smooth network operation and improved efficiency for large-scale deployments.

Optimized QoS for Voice and Video
Quality of Service (QoS) capabilities prioritize voice, video, and critical data traffic based on IP, MAC, TCP/UDP ports, or VLANs. This ensures uninterrupted performance even during peak bandwidth usage, making it ideal for VoIP and video conferencing.

Service Provider Ready
Designed with service providers in mind, the switch supports sFlow, QinQ, L2PT PPPoE ID insertion, IGMP authentication, 802.3ah OAM, and Device Link Detection Protocol (DLDP). These features simplify link monitoring, troubleshooting, and network management.

Future-Proof IPv6 Support
The TL-SG3428XMP is ready for next-generation networks with full IPv6 support, including dual IPv4/IPv6 stack, DHCPv6 snooping, MLD snooping, IPv6 ACL, PMTU discovery, and IPv6 neighbor discovery.

Specifications:

© 2025 Respective owners and brand holders. This table has been carefully researched and generated by Laptop Direct CC (https://www.laptopdirect.co.za), however, errors and omissions may occur. Only references to South Africa apply. All products are sourced in South Africa from the official suppliers and the warranty is that of the local supplier. E&OE. This table and our site's content may be used on condition that this notice and link remains intact and unaltered.
Specifications
Product Code	TL-SG3428XMP
HARDWARE FEATURES
Interface	24x 10/100/1000 Mbps RJ45 Ports
	4x 10G SFP+ Slots
	1x RJ45 Console Port
	1x Micro-USB Console Port
Fan Quantity	2
Power Supply	100-240 V AC~50/60 Hz
PoE+ Ports(RJ45)	Standard: 802.3at/af compliant
	PoE+ Ports: 24 Ports, up to 30 W per port
	Power Budget: 384 W
Dimensions ( W x D x H )	17.3 x 13.0 x 1.7 in (440 x 330 x 44 mm)
Mounting	Rack Mountable
Max Power Consumption	34.4 W (110V/60Hz) ( no PD device connected)
	465.8 W (110V/60Hz) ( with 384 W PD device connected)
Max Heat Dissipation	117.38 BTU/h (110 V/60 Hz) (no PD device connected)
	1589.31 BTU/h (110 V/60 Hz) (with 384 W PD device connected)
PERFORMANCE
Switching Capacity	128 Gbps
Packet Forwarding Rate	95.23 Mpps
MAC Address Table	16 K
Packet Buffer Memory	12 Mbit
Jumbo Frame	9 KB
SOFTWARE FEATURES
Quality of Service	8 priority queues
	802.1p CoS/DSCP priority
	Queue scheduling
	- SP (Strict Priority)
	- WRR (Weighted Round Robin)
	- SP+WRR
	Bandwidth Control
	- Port/Flow based Rating Limiting
	Smoother Performance
	Action for Flows
	- Mirror (to supported interface)
	- Redirect (to supported interface)
	- Rate Limit
	- QoS Remark
L2 and L2+ Features	Link Aggregation
	- static link aggregation
	- 802.3ad LACP
	- Up to 8 aggregation groups, containing 8 ports per group
	Spanning Tree Protocol
	- 802.1d STP
	- 802.1w RSTP
	- 802.1s MSTP
	- STP Security: TC Protect, BPDU Filter, Root Protect
	Loopback Detection
	- Port based
	- VLAN based
	Flow Control
	- 802.3x Flow Control
	- HOL Blocking Prevention
	Mirroring
	- Port Mirroring
	- CPU Mirroring
	- One-to-One
	- Many-to-One
	- Tx/Rx/Both
L2 Multicast	IGMP Snooping
	- IGMP v1/v2/v3 Snooping
	- Fast Leave
	- IGMP Snooping Querier
	- IGMP Authentication
	IGMP Authentication
	MLD Snooping
	- MLD v1/v2 Snooping
	- Fast Leave
	- MLD Snooping Querier
	- Static Group Config
	- Limited IP Multicast
	MVR
	Multicast Filtering: 256 profiles and 16 entries per profile
VLAN	VLAN Group
	- Max 4K VLAN Groups
	802.1Q Tagged VLAN
	MAC VLAN: 7 Entries
	Protocol VLAN: Protocol Template 16, Protocol VLAN 16
	Private VLAN
	GVRP
	VLAN VPN (QinQ)
	- Port-Based QinQ
	- Selective QinQ
	Voice VLAN
Access Control List	Time-based ACL
	MAC ACL
	- Source MAC
	- Destination MAC
	- VLAN ID
	- User Priority
	- Ether Type
	IP ACL
	-Source IP
	- Destination IP
	- Fragment
	- IP Protocol
	- TCP Flag
	- TCP/UDP Port
	- DSCP/IP TOS
	- User Priority
	Combined ACL
	Packet Content ACL
	IPv6 ACL
	Policy
	- Mirroring
	- Redirect
	- Rate Limit
	- QoS Remark
	ACL apply to Port/VLAN
Security	IP-MAC-Port Binding
	- 512 Entries
	- DHCP Snooping
	- ARP Inspection
	- IPv4 Source Guard: 100 Entries
	IPv6-MAC-Port Binding
	- 512 Entries
	- DHCPv6 Snooping
	- ND Detection
	- IPv6 Source Guard: 100 Entries
	DoS Defend
	Static/Dynamic Port Security
	- Up to 64 MAC addresses per port
	Broadcast/Multicast/Unicast Storm Control
	- kbps/ratio control mode
	802.1X
	- Port base authentication
	- Mac base authentication
	- VLAN Assignment
	- MAB
	- Guest VLAN
	- Support Radius authentication andaccountability
	AAA (including TACACS+)
	Port Isolation
	Secure web management through HTTPS with SSLv3/TLS 1.2
	Secure Command Line Interface (CLI) management with SSHv1/SSHv2
	IP/Port/MAC based access control
IPv6	IPv6 Dual IPv4/IPv6
	Multicast Listener Discovery (MLD) Snooping
	IPv6 ACL
	IPv6 Interface
	Static IPv6 Routing
	IPv6 neighbor discovery (ND)
	Path maximum transmission unit (MTU) discovery
	Internet Control Message Protocol (ICMP) version 6
	TCPv6/UDPv6
	IPv6 applications
	- DHCPv6 Client
	- Ping6
	- Tracert6
	- Telnet (v6)
	- IPv6 SNMP
	- IPv6 SSH
	- IPv6 SSL
	- Http/Https
	- IPv6 TFTP
L3 Features	16 IPv4/IPv6 Interfaces
	Static Routing
	- 48 static routes
	Static ARP
	- 128 Static Entries
	Proxy ARP
	Gratuitous ARP
	DHCP Server
	DHCP Relay
	- DHCP Interface Relay
	- DHCP VLAN Relay
	DHCP L2 Relay
Management	Web-based GUI
	Command Line Interface (CLI) through the console port, telnet
	SNMP v1/v2c/v3
	- Trap/Inform
	- RMON (1,2,3,9 groups)
	SDM Template
	DHCP/BOOTP Client
	802.1ab LLDP/LLDP-MED
	DHCP AutoInstall
	Dual Image, Dual Configuration
	CPU Monitoring
	Cable Diagnostics
	EEE
	Password Recovery
	SNTP
	System Log
Advanced Features	Support Omada Hardware Controller (OC200/OC300), Software Controller, Cloud-Based Controller
	Automatic Device Discovery
	Batch Configuration
	Batch Firmware Upgrading
	Intelligent Network Monitoring
	Abnormal Event Warnings
	Unified Configuration
	Reboot Schedule
	ZTP (Zero-Touch Provisioning)
MIBs	MIB II (RFC1213)
	Interface MIB (RFC2233)
	Ethernet Interface MIB (RFC1643)
	Bridge MIB (RFC1493)
	P/Q-Bridge MIB (RFC2674)
	RMON MIB (RFC2819)
	RMON2 MIB (RFC2021)
	Radius Accounting Client MIB (RFC2620)
	Radius Authentication Client MIB (RFC2618)
	Remote Ping, Traceroute MIB (RFC2925)
	Support TP-Link private MIB