TP-Link Omada SG3428XPP-M2 24-Port 2.5GBASE-T and 4-Port 10GE SFP+ L2+ Managed Switch with 16-Port PoE+ & 8-Port PoE

Features

• 8x 2.5G PoE++ ports (up to 60 W PoE out per port)**
• 16x 2.5G PoE+ ports (up to 30 W PoE out per port)
• 4x 10G SFP+ slots
• 500 W total PoE budget*
• Centralized cloud management via the web or the Omada app
• Standalone management via web, CLI, SNMP, and RMON
• Static Routing helps route internal traffic for higher efficiency
• VLAN, ACL, QoS, IGMP Snooping, OAM, and DDM
• ERPS supports rapid protection and recovery in a ring topology

Hardware Features

Interface

• 24x 2.5 Gbps RJ45 Ports (8x PoE++, 16x PoE+)
• 4x 10G SFP+ Slots
• 1x RJ45 Console Port
• 1x Micro-USB Console Port

Fan Quantity

3

Physical Security Lock

Yes

Power Supply

100-240 V AC~50/60 Hz

PoE Ports (RJ45)

• Standard: 802.3bt/at/af compliant
• PoE++ Ports (802.3bt/at/af PoE): 8 Ports, up to 60 W per port
• PoE+ Ports (802.3at/af PoE): 16 Ports, up to 30 W per port

Power Budget

500 W

Dimensions ( W x D x H )

17.3x13.0x1.7 in (440x330x44 mm)

Mounting

Rack Mountable

Max. Power Consumption

629.1 W (110V/60Hz)

Max. Heat Dissipation

2153.45 BTU/h (110 V/60 Hz)

Performance

• Switching Capacity - 200 Gbps
• Packet Forwarding Rate - 148.80 Mpps
• MAC Address Table - 32 K
• Packet Buffer Memory - 16 Mbit
• Jumbo Frame - 9 KB

Software Features

• Quality of Service
• 8 priority queues
• 802.1p CoS/DSCP priority
• Queue scheduling: SP (Strict Priority), WRR (Weighted Round Robin), SP+WRR
• Bandwidth Control: Port/Flow-based Rating Limiting
• Smoother Performance
• Action for Flows: QoS remark (802.1P Remark, DSCP Remark)

L2 and L2+ Features

• 32 IP Interfaces: Support IPv4/IPv6 Interface
• Static Routing: 48 IPv4/IPv6 Static Routes
• Static ARP: 128 static entries
• 512 ARP Entries
• Proxy ARP
• Gratuitous ARP
• DHCP Server
• DHCP Relay: DHCP Interface Relay, DHCP VLAN Relay
• DHCP L2 Relay
• Link Aggregation
• Spanning Tree Protocol
• Loopback Detection
• 802.3x Flow Control
• Mirroring

L2 Multicast

• Supports 511 (IPv4, IPv6) IGMP groups
• IGMP Snooping
• IGMP Authentication
• Multicast VLAN Registration (MVR)
• MLD Snooping
• Multicast Filtering: 256 profiles and 16 entries per profile
• Advanced Features
• Automatic Device Discovery
• Batch Configuration
• Batch Firmware Upgrading
• Intelligent Network Monitoring
• Abnormal Event Warnings
• Unified Configuration
• Reboot Schedule

ISP Features

• L2PT (Layer 2 Protocol Tunneling)
• Device Link Detect Protocol (DLDP)
• PPPoE ID Insertion

ERPS

802.3ah Ethernet Link OAM

DDM

VLAN

• VLAN Group: Max 4K VLAN Groups
• 802.1q Tagged VLAN
• MAC VLAN: 256 Entries
• Protocol VLAN: Protocol Template 16, Protocol VLAN 16
• Private VLAN

GVRP

• VLAN VPN: VLAN Mapping, VLAN Replace
• Voice VLAN
• Access Control List
• Time-based ACL
• MAC ACL: Source MAC, Destination MAC, VLAN ID, User Priority, Ether Type
• IP ACL: Source IP, Destination IP, Fragment, IP Protocol, TCP Flag, TCP/UDP Port, DSCP/IP TOS
• Combined ACL
• Packet Content ACL
• IPv6 ACL
• Policy: Mirroring, Redirect, Rate Limit, QoS Remark
• ACL applies to Port/VLAN

Security

IP-MAC-Port Binding

512 Entries

DHCP Snooping

ARP Inspection

IPv4 Source Guard: 100 Entries

IPv6-MAC-Port Binding
512 Entries

DHCPv6 Snooping

ND Detection

ND Snooping

IPv6 Source Guard: 100 Entries

DoS Defend

DHCP Filter

Static/Dynamic Port Security: Up to 64 MAC addresses per port
Broadcast/Multicast/Unicast Storm Control: kbps/ratio/pps control mode
802.1X

Port-based authentication

Mac-base authentication

VLAN Assignment

MAB

Guest VLAN

Radius authentication and accountability support

AAA (including TACACS+)

Port Isolation

Secure web management through HTTPS with SSLv3/TLS 1.2
Secure Command Line Interface (CLI) management with SSHv1/SSHv2

IP/Port/MAC-based access control

IPv6

IPv6 Dual IPv4/IPv6

Multicast Listener Discovery (MLD) Snooping

IPv6 ACL

IPv6 Interface

Static IPv6 Routing

IPv6 neighbor discovery (ND)
Path maximum transmission unit (MTU) discovery
Internet Control Message Protocol (ICMP) version 6

TCPv6/UDPv6

IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet (v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, Http/Https, IPv6 TFTP

MIBs

MIB II (RFC1213)

Interface MIB (RFC2233)

Ethernet Interface MIB (RFC1643)

Bridge MIB (RFC1493)

P/Q-Bridge MIB (RFC2674)

RMON MIB (RFC2819)

RMON2 MIB (RFC2021)
Radius Accounting Client MIB (RFC2620)
Radius Authentication Client MIB (RFC2618)
Remote Ping, Traceroute MIB (RFC2925)
Support TP-Link private MIB

Management Features

Omada App

Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Centralized Management

• Omada Cloud-Based Controller
• Omada Hardware Controller
• Omada Software Controller

Cloud Access

Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Zero-Touch Provisioning

Yes. Requiring the use of Omada Cloud-Based Controller.

Web-based GUI

• Command Line Interface (CLI) through the console port, telnet
• SNMP v1/v2c/v3: Trap/Inform, RMON (1,2,3,9 groups)
• SDM Template
• DHCP/BOOTP Client
• 802.1ab LLDP/LLDP-MED
• DHCP AutoInstall
• Dual Image, Dual Configuration
• CPU Monitoring
• Cable Diagnostics

EEE

• Password Recovery

SNTP

System Log

Others

Certification

CE, FCC, RoHS

Package Content

• SG3428XPP-M2 Switch
• Power Cord
• Quick Installation Guide
• Rackmount Kit
• Rubber Feet

System Requirements

• Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/10/11, MAC OS, NetWare, UNIX or Linux.

Environment

• Operating Temperature: 0–40C (32–104 F);
• Storage Temperature: -40–70 C(-40–158 F)
• Operating Humidity: 10–90% RH non-condensing
• Storage Humidity: 5–90% RH non-condensing