TP-Link Switch TL-SG3428X Omada JetStream 24Port Gigabit L2+ Managed Switch with 4x10GE SFP+

JetStream 24-Port Gigabit L2+ Managed Switch with 4 10GE SFP+ Slots

• 10G Lightning-Fast Uplink: 4× 10 Gbps SFP+ slots enable high-bandwidth connectivity and non-blocking switching capacity.

• Gigabit Speeds: 24× gigabit RJ45 ports offer high-speed and reliable connections to other switches and devices.

• Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)*, Centralized Cloud Management, and Intelligent Monitoring.

• Centralized Management: Cloud access and Omada app for ultra convenience and easy management.

• Static Routing: Helps route internal traffic for more efficient use of network resources.

• Robust Security Strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication, and more.

• Optimize Voice and Video Applications: L2/L3/L4 QoS and IGMP snooping.

• Standalone Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities
HARDWARE FEATURES
Interface
24x 10/100/1000 Mbps RJ45 Ports
4x 10G SFP+ Slots
1x RJ45 Console Port
1x Micro – USB Console Port
Fan Quantity
Fanless
Power Supply
100 – 240 V AC, 50/60 Hz
Mounting
Rack Mountable
Max Power Consumption
23.6 W (110V/60Hz)
Max Heat Dissipation
80.353 BTU/h (110 V/60 Hz)
PERFORMANCE
Switching Capacity
128 Gbps
Packet Forwarding Rate
95.23 Mpps
MAC Address Table
16 K
Jumbo Frame
9 KB
SOFTWARE FEATURES
Quality of Service
8 priority queues
802.1p CoS/DSCP priority
Queue scheduling
– SP (Strict Priority)
– WRR (Weighted Round Robin)
– SP+WRR
Bandwidth Control
– Port/Flow based Rating Limiting
Smoother Performance
Action for Flows
– Mirror (to supported interface)
– Redirect (to supported interface)
– Rate Limit
– QoS Remark
L2 and L2+ Features
Link Aggregation
– static link aggregation
– 802.3ad LACP
– Up to 8 aggregation groups, containing 8 ports per group
Spanning Tree Protocol
– 802.1d STP
– 802.1w RSTP
– 802.1s MSTP
– STP Security: TC Protect, BPDU Filter, Root Protect
Loopback Detection
– Port based
– VLAN based
Flow Control
– 802.3x Flow Control
– HOL Blocking Prevention
Mirroring
– Port Mirroring
– CPU Mirroring
– One – to – One
– Many – to – One
– Tx/Rx/Both
L2 Multicast
IGMP Snooping
– IGMP v1/v2/v3 Snooping
– Fast Leave
– IGMP Snooping Querier
– IGMP Authentication
IGMP Authentication
MLD Snooping
– MLD v1/v2 Snooping
– Fast Leave
– MLD Snooping Querier
– Static Group Config
– Limited IP Multicast
MVR
Multicast Filtering: 256 profiles and 16 entries per profile
VLAN
VLAN Group
– Max 4K VLAN Groups
802.1Q Tagged VLAN
MAC VLAN: 7 Entries
Protocol VLAN: Protocol Template 16, Protocol VLAN 16
Private VLAN
GVRP
VLAN VPN (QinQ)
– Port – Based QinQ
– Selective QinQ
Voice VLAN
Access Control List
Time – based ACL
MAC ACL
– Source MAC
– Destination MAC
– VLAN ID
– User Priority
– Ether Type
IP ACL
– Source IP
– Destination IP
– Fragment
– IP Protocol
– TCP Flag
– TCP/UDP Port
– DSCP/IP TOS
– User Priority
Combined ACL
Packet Content ACL
IPv6 ACL
Policy
– Mirroring
– Redirect
– Rate Limit
– QoS Remark
ACL apply to Port/VLAN
Security
IP – MAC – Port Binding
– 512 Entries
– DHCP Snooping
– ARP Inspection
– IPv4 Source Guard: 100 Entries
IPv6 – MAC – Port Binding
– 512 Entries
– DHCPv6 Snooping
– ND Detection
– IPv6 Source Guard: 100 Entries
DoS Defend
Static/Dynamic Port Security
– Up to 64 MAC addresses per port
Broadcast/Multicast/Unicast Storm Control
– kbps/ratio control mode
802.1X
– Port base authentication
– Mac base authentication
– VLAN Assignment
– MAB
– Guest VLAN
– Support Radius authentication andaccountability
AAA (including TACACS+)
Port Isolation
Secure web management through HTTPS with SSLv3/TLS 1.2
Secure Command Line Interface (CLI) management with SSHv1/SSHv2
IP/Port/MAC based access control
IPv6
IPv6 Dual IPv4/IPv6
Multicast Listener Discovery (MLD) Snooping
IPv6 ACL
IPv6 Interface
Static IPv6 Routing
IPv6 neighbor discovery (ND)
Path maximum transmission unit (MTU) discovery
Internet Control Message Protocol (ICMP) version 6
TCPv6/UDPv6
IPv6 applications
– DHCPv6 Client
– Ping6
– Tracert6
– Telnet (v6)
– IPv6 SNMP
– IPv6 SSH
– IPv6 SSL
– Http/Https
– IPv6 TFTP
L3 Features
16 IPv4/IPv6 Interfaces
Static Routing
– 48 static routes
Static ARP
– 128 Static Entries
Proxy ARP
Gratuitous ARP
DHCP Server
DHCP Relay
– DHCP Interface Relay
– DHCP VLAN Relay
DHCP L2 Relay
Management
Web – based GUI
Command Line Interface (CLI) through the console port, telnet
SNMP v1/v2c/v3
– Trap/Inform
– RMON (1,2,3,9 groups)
SDM Template
DHCP/BOOTP Client
802.1ab LLDP/LLDP – MED
DHCP AutoInstall
Dual Image, Dual Configuration
CPU Monitoring
Cable Diagnostics
EEE
Password Recovery
SNTP
System Log
Advanced Features
Support Omada Hardware Controller (OC200/OC300), Software Controller, Cloud – Based Controller
Automatic Device Discovery
Batch Configuration
Batch Firmware Upgrading
Intelligent Network Monitoring
Abnormal Event Warnings
Unified Configuration
Reboot Schedule
ZTP (Zero – Touch Provisioning)