TL-SG3428XMP

Discontinuado

JetStream 24-Port Gigabit and 4-Port 10GE SFP+ L2+ Managed Switch with 24-Port PoE+

  • 10G Lightning-Fast Uplink: 4× 10 Gbps SFP+ slots enable high-bandwidth connectivity and non-blocking switching capacity. 
  • 384 W PoE Budget: 24× 802.3at/af-compliant PoE+ ports with a total power supply of 384 W*.
  • Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)**, Centralized Cloud Management, and Intelligent Monitoring.
  • Centralized Management: Cloud access and Omada app for ultra convenience and easy management.
  • Static Routing: Helps route internal traffic for more efficient use of network resources.
  • Robust Security Strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication, and more.
  • Optimize Voice and Video Applications: L2/L3/L4 QoS and IGMP snooping.
  • Standalone Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities.

Learn more about TP-Link PoE technology >

Learn more about Omada Cloud SDN>​

Learn more about TP-Link 10G Multi-Gig technology >

  • Introducing TP-Link PoE Switches

  • What is Omada Cloud SDN?

TP-Link | Omada Centralized Management

10G Uplink Managed Switch with
24 PoE+ Ports for a Complete Omada Network

TL-SG3428XMP

  •  

    10G Lightning-Fast Uplink Connection

    4× 10 Gbps SFP+ Slots for High-Bandwidth Connectivity

  •  

    PoE+ Output

    24× Gigabit PoE+ Ports with Total 384 W Power Budget*

  •  

    Centralized Cloud Management

    SDN Solutions Integration for a Highly Efficient Network

  •  

    Advanced L2+ Features

    Static Routing, IGMP Snooping, 802.1Q VLAN and More

Enterprise Switch with 10G Uplink

4× 10 Gbps SFP+ slots provide non-blocking switching performance and ultra-low latency, so reliable and lightning-fast connections to servers and other switches are easily built.

Dedicated 24 PoE+ Ports (384 W Budget)
for Numerous Applications

Features 24× 802.3af/at compliant PoE+ ports, the switch supports up to 384 W total PoE power budget.* Designed to use a single Ethernet cable for both data and power transmission, it offers flexible deployment for PoE-supported devices such as wireless access points, IP cameras, and IP phones, lowering infrastructure costs for small businesses.

IP Camera
IP Phone
Access Point
TL-SG3428XMP
Router
Internet
24× Gigabit PoE+ Ports Up to 30 W on Each Port Total 384 W Power Budget

Software-Defined Networking (SDN) with Cloud Access

Omada’s Software-Defined Networking (SDN) platform integrates network devices, including access points, switches, and gateways, providing 100% centralized cloud management. Omada creates a highly scalable network—all controlled from a single interface. Seamless wireless and wired connections are provided, ideal for use in hospitality, education, retail, offices, and more.

Wi-Fi 6
Celling Mount
Wall Plate
Outdoor
Unified Management Interface
Cloud
  •  
    Hassle-Free Cloud or
    On-Premises Controllers
  •  
    Multi-Site Cloud
    Management
  •  
    Zero-Touch
    Provisioning (ZTP)**
  •  
    Intelligent
    Monitoring

Advanced L3 Features

An abundance of L2+ and L3 features are supported to help build a highly scalable and robust network, providing a reliable and efficient solution for enterprises, campuses and ISPs.

Secure Networking

Security features include IP-MAC-Port-VID Binding, Port Security, Storm Control, and DHCP Snooping to defend against a range of network threats. An integrated list of common DoS attacks is available, making it easier than ever to prevent them. In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports, or VLAN ID. Users’ network access can be controlled via 802.1X authentication, which works with a RADIUS/Tacacs+ server to grant access only when valid user credentials are provided.

Enterprise Level Features

A complete lineup of L2+ features is supported, including 802.1Q VLAN, Port Mirroring, STP/RSTP/MSTP, Link Aggregation Control Protocol, and 802.3x Flow Control. Advanced IGMP Snooping ensures the switch intelligently forwards multicast streams to only the appropriate subscribers, cutting out unnecessary traffic, while IGMP throttling & filtering restrict each subscriber on a port level to prevent unauthorized multicast access. Static Routing is a simple way of segmenting the network and internally routs traffic through the switch for improved efficiency.

Advanced QoS

Voice and video traffic can be prioritized based on IP address, MAC address, TCP port number, UDP port number, and more. With QoS (Quality of Service), voice and video services remain smooth, even when bandwidth is in short supply.

ISP Features***

sFlow, QinQ, L2PT PPPoE ID Insertion, and IGMP authentication features are provided, developed with service providers in mind. 802.3ah OAM and Device Link Detection Protocol (DLDP) offer easy monitoring and troubleshooting of Ethernet links.

IPv6 Support

IPv6 functions such as Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery, and IPv6 Neighbor Discover guarantee your network is ready for the Next Generation Network (NGN) without upgrading your hardware.

Más >

Casos relacionados

  • Sim Lim Square

    Singapore’s largest IT and electronics shopping mall, Sim Lim Square, deploys TP-Link Auranet Indoor Wi-Fi solution

    Sim Lim Square

    Singapore’s largest IT and electronics shopping mall, Sim Lim Square, deploys TP-Link Auranet Indoor Wi-Fi solution

    “Our customer satisfaction levels have been greatly improved since we started offering free public Wi-Fi throughout the entire mall. For that alone, the solution TP-Link provided was the best choice.” —Sean Chia, Head of Advertising & Promotions, Sim Lim Square.
  • Hermann Commerce GmbH

    From site survey to after-sale support, TP-Link provided a solution updating the network and surveillance systems eased their work with high-speed wired and wireless connections and 24-hour reliable security.

    Hermann Commerce GmbH

    From site survey to after-sale support, TP-Link provided a solution updating the network and surveillance systems eased their work with high-speed wired and wireless connections and 24-hour reliable security.

CARACTERÍSTICAS DE HARDWARE
Interface • Puertos RJ45 de 24 × 10/100/1000 Mbps
• 4 ranuras 10G SFP +
• 1 puerto de consola RJ45
• 1 puerto de consola micro-USB
Cantidad de ventiladores 2
Fuente de alimentación 100-240 V AC~50/60 Hz
PoE+ Ports(RJ45) • Standard: 802.3at/af compliant
• PoE+ Ports: 24 Ports, up to 30 W per port
• Power Budget: 384 W
Dimensiones (An x Pr x Al) 17.3 × 13.0 × 1.7 in (440 × 330 × 44 mm)
Montaje Montaje en Rack
Consumo máximo de energía 34,4 W (110 V / 60 Hz) (no hay ningún dispositivo PD conectado)
465,8 W (110 V / 60 Hz) (con dispositivo PD de 384 W conectado)
Disipación de calor máxima 117,38 BTU / h (110 V / 60 Hz) (no hay ningún dispositivo PD conectado)
1589,31 BTU / h (110 V / 60 Hz) (con dispositivo PD de 384 W conectado)
DESEMPEÑO
Capacidad de conmutación 128 Gbps
Tasa de reenvío de paquetes 95.23 Mpps
Tabla de direcciones MAC 16 K
Memoria de búfer de paquetes 12 Mbit
Marco Jumbo 9 KB
FUNCIONES DE SOFTWARE
Calidad de servicio
• 8 colas de prioridad
• Prioridad 802.1p CoS / DSCP
• Programación de colas
- SP (prioridad estricta)
- WRR (Round Robin ponderado)
- SP + WRR
• Control de Ancho de Banda
- Limitación de clasificación basada en puerto / flujo
• Rendimiento más fluido
• Acción por los flujos
- Espejo (a la interfaz compatible)
- Redirigir (a la interfaz compatible)
- Límite de tarifa
- Observación de QoS
Funciones L3
• 16 interfaces IPv4 / IPv6
• Enrutamiento estatico
- 48 rutas estáticas
• ARP estático
- 128 entradas estáticas
• ARP proxy
• ARP gratuito
• Servidor DHCP
• Relé DHCP
- Relé de interfaz DHCP
- Relé DHCP VLAN
• Relé DHCP L2
Funciones L2 y L2 + • Agregar un link
- agregación de enlaces estáticos
- LACP 802.3ad
- Hasta 8 grupos de agregación, que contienen 8 puertos por grupo
• Protocolo de árbol de expansión
- 802.1d STP
- 802.1w RSTP
- MSTP 802.1s
- Seguridad STP: TC Protect, BPDU Filter, Root Protect
• Detección de bucle invertido
- Basado en puerto
- Basado en VLAN
• Control de flujo
- Control de flujo 802.3x
- Prevención de bloqueo HOL
• Reflejo
- Duplicación de puertos
- Duplicación de CPU
- Doce y cincuenta y nueve de la noche
- Muchos a uno
- Tx / Rx / Ambos
Multidifusión L2 • Inspección IGMP
- IGMP v1 / v2 / v3 Snooping
- Salida rápida
- Consulta IGMP Snooping
- Autenticación IGMP
• Autenticación IGMP
• Indagación MLD
- Indagación MLD v1 / v2
- Salida rápida
- Consulta de indagación MLD
- Configuración de grupo estático
- Multidifusión IP limitada
• MVR
• Filtrado de multidifusión: 256 perfiles y 16 entradas por perfil
Características avanzadas • Admite controlador de hardware Omada (OC200 / OC300), controlador de software, controlador basado en la nube
• Descubrimiento automático de dispositivos
• Configuración por lotes
• Actualización de firmware por lotes
• Monitoreo de red inteligente
• Advertencias de eventos anormales
• Configuración unificada
• Programa de reinicio
• ZTP (aprovisionamiento sin intervención) **
VLAN • Grupo de VLAN
- Grupos máximos de VLAN 4K
• VLAN etiquetada 802.1Q
• MAC VLAN: 7 entradas
• Protocolo VLAN: plantilla de protocolo 16, protocolo VLAN 16
• VLAN privada
• GVRP
• VLAN VPN (QinQ)
- QinQ basado en puertos
- QinQ selectivo
• VLAN de voz
Lista de control de acceso • ACL basada en el tiempo
• MAC ACL
- MAC de origen
- MAC de destino
- ID de VLAN
- Prioridad de usuario
- Tipo de éter
• IP ACL
-IP de origen
- IP de destino
- Fragmento
- Protocolo IP
- Bandera de TCP
- Puerto TCP / UDP
- TOS DSCP / IP
- Prioridad de usuario
• ACL combinado
• Contenido de paquete ACL
• ACL de IPv6
• Política
- Reflejo
- Redirigir
- Límite de tarifa
- Observación de QoS
• ACL se aplica al puerto / VLAN
Seguridad • Enlace de puerto IP-MAC
- 512 entradas
- Indagación DHCP
- Inspección ARP
- Protección de fuente IPv4: 100 entradas
• Enlace IPv6-MAC-Port
- 512 entradas
- Indagación DHCPv6
- Detección de ND
- Protección de fuente IPv6: 100 entradas
• Defensa DoS
• Seguridad de puerto estática / dinámica
- Hasta 64 direcciones MAC por puerto
• Control de tormentas de difusión / multidifusión / unidifusión
- modo de control de kbps / relación
• 802.1X
- Autenticación de base de puerto
- Autenticación base Mac
- Asignación de VLAN
- MAB
- VLAN de invitado
- Soporte de autenticación y responsabilidad Radius
• AAA (incluido TACACS +)
• Aislamiento de puertos
• Gestión web segura a través de HTTPS con SSLv3 / TLS 1.2
• Gestión segura de la interfaz de línea de comandos (CLI) con SSHv1 / SSHv2
• Control de acceso basado en IP / Puerto / MAC
IPv6 • IPv6 doble IPv4 / IPv6
• Detección de detección de escucha de multidifusión (MLD)
• ACL de IPv6
• Interfaz IPv6
• Enrutamiento IPv6 estático
• Descubrimiento de vecinos IPv6 (ND)
• Descubrimiento de la unidad de transmisión máxima de ruta (MTU)
• Protocolo de mensajes de control de Internet (ICMP) versión 6
• TCPv6 / UDPv6
• Aplicaciones IPv6
- Cliente DHCPv6
- Ping6
- Tracert6
- Telnet (v6)
- IPv6 SNMP
- IPv6 SSH
- SSL IPv6
- Http / Https
- TFTP IPv6
Gestión • GUI basada en web
• Interfaz de línea de comandos (CLI) a través del puerto de la consola, telnet
• SNMP v1 / v2c / v3
- Trampa / Informar
- RMON (1,2,3,9 grupos)
• Plantilla SDM
• Cliente DHCP / BOOTP
• 802.1ab LLDP / LLDP-MED
• Instalación automática de DHCP
• Imagen dual, configuración dual
• Supervisión de CPU
• Diagnóstico de cables
• EEE
• Recuperación de contraseña
• SNTP
• Registro del sistema
MIBs • MIB II (RFC1213)
• Interfaz MIB (RFC2233)
• Interfaz Ethernet MIB (RFC1643)
• Puente MIB (RFC1493)
• P / Q-Bridge MIB (RFC2674)
• RMON MIB (RFC2819)
• RMON2 MIB (RFC2021)
• Radius Accounting Client MIB (RFC2620)
• Radius Authentication Client MIB (RFC2618)
• Ping remoto, Traceroute MIB (RFC2925)
• Soporta TP-Link private MIB
ADMINISTRACIÓN
Aplicación Omada Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Gestión centralizada • Omada Cloud-Based Controller
• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller
Acceso a la nube Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Aprovisionamiento sin intervención Yes. Requiring the use of Omada Cloud-Based Controller.
Funciones de gestión • Web-based GUI
• Command Line Interface (CLI) through the console port, telnet
• SNMP v1/v2c/v3
- Trap/Inform
- RMON (1,2,3,9 groups)
• SDM Template
• DHCP/BOOTP Client
• 802.1ab LLDP/LLDP-MED
• DHCP AutoInstall
• Dual Image, Dual Configuration
• CPU Monitoring
• Cable Diagnostics
• EEE
• Password Recovery
• SNTP
• System Log
OTROS
Certificación CE, FCC, RoHS
contenidos del paquete • Switch TL-SG3428XMP
• Cable de alimentación
• Guía de Instalación Rápida
• Kit de montaje en bastidor
• Patas de goma
Requisitos del sistema Microsoft® Windows® 98SE, NT, 2000, XP, Vista™ or Windows 7/8/10/11, MAC® OS, NetWare®, UNIX® or Linux.
Ambiente • Temperatura de funcionamiento: 0–45 ℃ (32–113 ℉);
• Temperatura de almacenamiento: -40–70 ℃ (-40–158 ℉)
• Humedad de funcionamiento: 10 a 90% de humedad relativa sin condensación
• Humedad de almacenamiento: 5–90% de humedad relativa sin condensación

*PoE budget calculations are based on laboratory testing. Actual PoE power budget is not guaranteed and will vary as a result of client limitations and environmental factors.

**Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Please go to Omada Cloud-Based Controller Product List to find all the models supported by Omada Cloud-Based Controller.

***ISP features can only be configured in standalone mode. 

Attention: It is recommended to use only one TL-SM5310-T module for TL-SG3428XMP.