Omada Pro 4-Port PoE++ 10GE L2+ Managed Switch with 2 SFP+ Slots 1

Omada Pro 4-Port PoE++ 10GE L2+ Managed Switch with 2 SFP+ Slots 2

Omada Pro 4-Port PoE++ 10GE L2+ Managed Switch with 2 SFP+ Slots 3

Omada Pro 4-Port PoE++ 10GE L2+ Managed Switch with 2 SFP+ Slots 4

Omada Pro 4-Port PoE++ 10GE L2+ Managed Switch with 2 SFP+ Slots 5

S5500-4XHPP2XF

Omada Pro 4-Port PoE++ 10GE L2+ Managed Switch with 2 SFP+ Slots

4× 10G PoE++ ports with up to 60 W PoE output per port**
2× 10G SFP+ slots
200 W total PoE budget*
Ideal for the access layer in enterprise networking
Centralized cloud management via the web or the Omada app^†
Standalone management via web, CLI, SNMP, and RMON
Static Routing and Ethernet Ring Protection Switching (ERPS)
VLAN, ACL, QoS, IGMP Snooping, OAM, and DDM

Learn more about PoE technology >

Learn more about Omada Pro >

What This Product Does

Build and expand your lightning-fast network with Omada Pro S5500-4XHPP2XF—a full enterprise-level managed switch with 4× 10 Gbps PoE++ and 2× 10G SFP+ ports. Users can supply up to 200 W total power to connected devices and flexibly deploy equipment such as wireless access points or IP cameras without worrying about power outlets. PoE support, together with high-performance static routing, enterprise-level QoS, advanced security features, a selection of Layer 2 management options, and integration into Omada Pro SDN (Software-Defined Networking), make S5500-4XHPP2XF a great choice for enterprises, MDUs, hotels, and ISPs.

IEEE 802.3bt/at/af-compliant Power over Ethernet

4× IEEE 802.3bt/at/af-compliant ports supply up to 200 W total power to 802.3bt, 802.3at, and 802.3af devices.* Set up wireless access points, surveillance cameras, IP phones, and other PoE devices quickly and easily without the hassle and cost of installing power cabling.

Enterprise Switch with 10G Ports

The four 10 Gbps PoE ports and two 10 Gbps SFP+ slots provide up to 120 Gbps switching capacity. It delivers non-blocking performance and minimal latency, ensuring rapid, dependable connections to servers and other switches.

Secure Networking

Security features include IP-MAC-Port Binding and VLAN Binding, Port Security, Storm Control, and DHCP Snooping to defend against a range of network threats. An integrated list of common DoS attacks is available, making it easier than ever to prevent them.

In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports, or VLAN ID. Users' network access can be controlled via 802.1X authentication, which works with a RADIUS/Tacacs+ server to grant access only when valid user credentials are provided.

Advanced QoS

Leveraging IP, MAC, TCP, and UDP identifiers, our QoS feature ensures seamless voice and video transmission—even when bandwidth is in short supply.

Abundant L2 and L3 features

S5500-4XHPP2XF supports a complete lineup of L2 and L3 features, including Proxy ARP, Static Routing, OAM, DDM, L2PT, DLDP, 802.1Q VLAN, Port Mirroring, STP/RSTP/MSTP, Link Aggregation Control Protocol, and 802.3x Flow Control. Advanced IGMP Snooping ensures the switch intelligently forwards multicast streams to only the appropriate subscribers, cutting out unnecessary traffic, while IGMP throttling & filtering restrict each subscriber on a port level to prevent unauthorized multicast access.

Static Routing, an L2+ feature, is a simple way of segmenting the network and internally routing traffic through the switch for improved efficiency. Ethernet Ring Protection Switching (ERPS) blocks traffic on a single ring link to prevent looping and effectively adds redundancy and up-time protection to any network.

ISP Features***

DDM, ERPS, L2PT, QinQ, L2PT PPPoE ID Insertion, sFlow, and IGMP authentication features are provided, developed with service providers in mind. 802.3ah OAM and Device Link Detection Protocol (DLDP) offer easy monitoring and troubleshooting of Ethernet links.

IPv6 Support

IPv6 functions such as Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery, and IPv6 Neighbor Discovery guarantee your network is ready for the Next Generation Network (NGN) without upgrading your hardware.

Omada Pro Integration

Integration into the Omada Pro system brings centralized cloud management and a series of management features such as Zero-Touch Provisioning (ZTP) and Intelligent Anomaly Detection.^† Omada Pro’s Software Defined Networking (SDN) platform integrates network devices, including access points, switches, and routers, providing 100% centralized cloud management. Omada Pro creates a highly scalable network—all controlled from a single interface.

Apart from the ability to be centrally managed via Omada Pro controllers, S5500-4XHPP2XF simplifies management via an intuitive web-based Graphical User Interface (GUI) or an industry-standard Command Line Interface (CLI). For both management methods, traffic is protected through SSL or SSH encryption. SNMP (v1/v2c/v3) and RMON support enable the switch to be polled for valuable status information and to send traps for abnormal events.

HARDWARE FEATURES
Interface	• 4× 100/1000/2500/5000/10000 Mbps PoE++ RJ45 Ports • 2× 10G SFP+ Slots • 1× RJ45 Console Port • 1× Micro-USB Console Port
Fan Quantity	2
Physical Security Lock	√
Power Supply	100-240 V AC~50/60 Hz
PoE Ports (RJ45)	• Standard: 802.3af/at/bt (type 3) compliant** • PoE+ Ports: 4 Ports, up to 60 W per port • Power Budget: 200 W*
Dimensions ( W x D x H )	11.6×7.1×1.7 in (294×180×44 mm)
Mounting	• Rack Mountable • Desktop
Max Power Consumption	244.90 W (110V/60Hz) (with 200 W PD connected)
Max Heat Dissipation	835.67 BTU/h (110 V/60 Hz) (with 200 W PD connected)

PERFORMANCE
Switching Capacity	120 Gbps
Packet Forwarding Rate	89.28 Mpps
MAC Address Table	32 K
Packet Buffer Memory	16 Mbit
Jumbo Frame	9 KB

SOFTWARE FEATURES
Quality of Service	• 8 priority queues • 802.1p CoS/DSCP priority • Queue scheduling: SP (Strict Priority), WRR (Weighted Round Robin), SP+WRR • Bandwidth Control: Port/Flow-based Rating Limiting • Smoother Performance • Action for Flows: QoS remark (802.1P Remark, DSCP Remark)
L3 Features	• 128 IPv4/IPv6 Interfaces • Static Routing: 48 static routes • Static ARP: 128 static entries • 512 ARP Entries • Proxy ARP • Gratuitous ARP • DHCP Server • DHCP Relay: DHCP interface relay, DHCP VLAN relay • DHCP L2 Relay
L2 and L2+ Features	• Link Aggregation - Static link aggregation - 802.3ad LACP - Up to 8 aggregation groups and up to 8 ports per group • Spanning Tree Protocol - 802.1d STP - 802.1w RSTP - 802.1s MSTP - STP Security: TC Protect, BPDU Filter, BPDU Protect, Root Protect, Loop Protect • Loopback Detection - Port-based - VLAN based • Flow Control - 802.3x Flow Control - HOL Blocking Prevention • Mirroring - Port Mirroring - CPU Mirroring - One-to-One - Many-to-One - Tx/Rx/Both
L2 Multicast	• Supports 1000 (IPv4, IPv6) IGMP groups • IGMP Snooping • IGMP Authentication • Multicast VLAN Registration (MVR) • MLD Snooping • Multicast Filtering: 256 profiles and 16 entries per profile
Advanced Features	• Intelligent Anomaly Detection^† • Automatic Device Discovery^† • Batch Configuration^† • Batch Firmware Upgrading^† • Intelligent Network Monitoring^† • Abnormal Event Warnings^† • Unified Configuration^† • Reboot Schedule^† ISP Features***: • L2PT (Layer 2 Protocol Tunneling) • Device Link Detect Protocol (DLDP) • PPPoE ID Insertion • ERPS • 802.3ah Ethernet Link OAM • sFlow • DDM
VLAN	• VLAN Group: Max 4K VLAN Groups • 802.1q Tagged VLAN • MAC VLAN: 30 Entries • Protocol VLAN: Protocol Template 16, Protocol VLAN 16 • Private VLAN • GVRP • VLAN VPN: VLAN Mapping, VLAN Replace • Voice VLAN
Access Control List	• Time-based ACL • MAC ACL: Source MAC, Destination MAC, VLAN ID, User Priority, Ether Type • IP ACL: Source IP, Destination IP, Fragment, IP Protocol, TCP Flag, TCP/UDP Port, DSCP/IP TOS • Combined ACL • Packet Content ACL • IPv6 ACL • Policy: Mirroring, Redirect, Rate Limit, QoS Remark • ACL applies to Port/VLAN
Security	• IP-MAC-Port Binding - 512 Entries - DHCP Snooping - ARP Inspection - IPv4 Source Guard: 100 Entries • IPv6-MAC-Port Binding - 512 Entries - DHCPv6 Snooping - ND Detection - ND Snooping - IPv6 Source Guard: 100 Entries • DoS Defend • DHCP Filter • Static/Dynamic Port Security: Up to 64 MAC addresses per port • Broadcast/Multicast/Unicast Storm Control: kbps/ratio/pps control mode • 802.1X - Port-based authentication - Mac-base authentication - VLAN Assignment - MAB - Guest VLAN - Radius authentication and accountability support • AAA (including TACACS+) • Port Isolation • Secure web management through HTTPS with SSLv3/TLS 1.2 • Secure Command Line Interface (CLI) management with SSHv1/SSHv2 • IP/Port/MAC-based access control
IPv6	• IPv6 Dual IPv4/IPv6 • Multicast Listener Discovery (MLD) Snooping • IPv6 ACL • IPv6 Interface • Static IPv6 Routing • IPv6 neighbor discovery (ND) • Path maximum transmission unit (MTU) discovery • Internet Control Message Protocol (ICMP) version 6 • TCPv6/UDPv6 • IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet (v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, Http/Https, IPv6 TFTP
MIBs	• MIB II (RFC1213) • Interface MIB (RFC2233) • Ethernet Interface MIB (RFC1643) • Bridge MIB (RFC1493) • P/Q-Bridge MIB (RFC2674) • RMON MIB (RFC2819) • RMON2 MIB (RFC2021) • Radius Accounting Client MIB (RFC2620) • Radius Authentication Client MIB (RFC2618) • Remote Ping, Traceroute MIB (RFC2925) • Support TP-Link private MIB

MANAGEMENT
Omada App	Yes, through Omada Pro Controller
Centralized Management	• Omada Pro Cloud-Based Controller • Omada Pro Software Controller
Cloud Access	Yes, through Omada Pro Controller
Zero-Touch Provisioning	Yes. Requiring the use of Omada Pro Cloud-Based Controller.
Management Features	• Web-based GUI • Command Line Interface (CLI) through the console port, telnet • SNMP v1/v2c/v3: Trap/Inform, RMON (1,2,3,9 groups) • SDM Template • DHCP/BOOTP Client • 802.1ab LLDP/LLDP-MED • DHCP AutoInstall • Dual Image, Dual Configuration • CPU Monitoring • Cable Diagnostics • EEE • Password Recovery • SNTP • System Log • Remote Packet Capture

OTHERS
Certification	CE, FCC, RoHS
Package Contents	• S5500-4XHPP2XF Switch • Power Cord • Quick Installation Guide • Rackmount Kit • Rubber Feet
System Requirements	Microsoft® Windows® 98SE, NT, 2000, XP, Vista™ or Windows 7/8/10/11, MAC® OS, NetWare®, UNIX® or Linux.
Environment	• Operating Temperature: 0–50 ℃ (32–122 ℉); • Storage Temperature: -40–70 ℃ (-40–158 ℉) • Operating Humidity: 10–90% RH non-condensing • Storage Humidity: 5–90% RH non-condensing

For additional version information, please go to the support page.

^†These functions require the use of the Omada Pro SDN Controller. Zero-Touch Provisioning requires the use of the Omada Pro Cloud-Based Controller.

*PoE budget calculations are based on laboratory testing. The actual PoE power budget is not guaranteed and will vary due to client limitations and environmental factors. The maximum power output of every single PoE++ port is 60 W.

**S5500-4XHPP2XF is incompatible with Passive PoE and other non-standard PoE devices. The standards refer to IEEE 802.3af/at/bt.

***ISP features can only be configured in standalone mode.

Attention: It is recommended to use only one SM5310-T (TL-SM5310-T) module for the S5500-4XHPP2XF.