TP-Link Omada SG3428XPP-M2 24-Port 2.5GBASE-T and 4-Port 10GE SFP+ L2+ Managed Switch with 16-Port PoE+ & 8-Port PoE

Omada 24-Port 2.5GBASE-T and 4-Port 10GE SFP+ L2+ Managed Switch with 16-Port PoE+ & 8-Port PoE++

Features
8x 2.5G PoE++ ports (up to 60 W PoE out per port)**
16x 2.5G PoE+ ports (up to 30 W PoE out per port)
4x 10G SFP+ slots
500 W total PoE budget*
Centralized cloud management via the web or the Omada app
Standalone management via web, CLI, SNMP, and RMON
Static Routing helps route internal traffic for higher efficiency
VLAN, ACL, QoS, IGMP Snooping, OAM, and DDM
ERPS supports rapid protection and recovery in a ring topology

Hardware Features

Interface
24x 2.5 Gbps RJ45 Ports (8x PoE++, 16x PoE+)
4x 10G SFP+ Slots
1x RJ45 Console Port
1x Micro-USB Console Port

Fan Quantity
3

Physical Security Lock
Yes

Power Supply
100-240 V AC~50/60 Hz

PoE Ports (RJ45)
Standard: 802.3bt/at/af compliant
PoE++ Ports (802.3bt/at/af PoE): 8 Ports, up to 60 W per port
PoE+ Ports (802.3at/af PoE): 16 Ports, up to 30 W per port

Power Budget
500 W

Dimensions ( W x D x H )
17.3x13.0x1.7 in (440x330x44 mm)

Mounting
Rack Mountable

Max. Power Consumption
629.1 W (110V/60Hz)

Max. Heat Dissipation
2153.45 BTU/h (110 V/60 Hz)

Performance
Switching Capacity - 200 Gbps
Packet Forwarding Rate - 148.80 Mpps
MAC Address Table - 32 K
Packet Buffer Memory - 16 Mbit
Jumbo Frame - 9 KB

Software Features
Quality of Service
8 priority queues
802.1p CoS/DSCP priority
Queue scheduling: SP (Strict Priority), WRR (Weighted Round Robin), SP+WRR
Bandwidth Control: Port/Flow-based Rating Limiting
Smoother Performance
Action for Flows: QoS remark (802.1P Remark, DSCP Remark)

L2 and L2+ Features
32 IP Interfaces: Support IPv4/IPv6 Interface
Static Routing: 48 IPv4/IPv6 Static Routes
Static ARP: 128 static entries
512 ARP Entries
Proxy ARP
Gratuitous ARP
DHCP Server
DHCP Relay: DHCP Interface Relay, DHCP VLAN Relay
DHCP L2 Relay
Link Aggregation
Spanning Tree Protocol
Loopback Detection
802.3x Flow Control
Mirroring

L2 Multicast
Supports 511 (IPv4, IPv6) IGMP groups
IGMP Snooping
IGMP Authentication
Multicast VLAN Registration (MVR)
MLD Snooping
Multicast Filtering: 256 profiles and 16 entries per profile
Advanced Features
Automatic Device Discovery
Batch Configuration
Batch Firmware Upgrading
Intelligent Network Monitoring
Abnormal Event Warnings
Unified Configuration
Reboot Schedule

ISP Features
L2PT (Layer 2 Protocol Tunneling)
Device Link Detect Protocol (DLDP)
PPPoE ID Insertion
ERPS
802.3ah Ethernet Link OAM
DDM

VLAN
VLAN Group: Max 4K VLAN Groups
802.1q Tagged VLAN
MAC VLAN: 256 Entries
Protocol VLAN: Protocol Template 16, Protocol VLAN 16
Private VLAN
GVRP
VLAN VPN: VLAN Mapping, VLAN Replace
Voice VLAN
Access Control List
Time-based ACL
MAC ACL: Source MAC, Destination MAC, VLAN ID, User Priority, Ether Type
IP ACL: Source IP, Destination IP, Fragment, IP Protocol, TCP Flag, TCP/UDP Port, DSCP/IP TOS
Combined ACL
Packet Content ACL
IPv6 ACL
Policy: Mirroring, Redirect, Rate Limit, QoS Remark
ACL applies to Port/VLAN

Security
IP-MAC-Port Binding
512 Entries
DHCP Snooping
ARP Inspection
IPv4 Source Guard: 100 Entries
IPv6-MAC-Port Binding
512 Entries
DHCPv6 Snooping
ND Detection
ND Snooping
IPv6 Source Guard: 100 Entries
DoS Defend
DHCP Filter
Static/Dynamic Port Security: Up to 64 MAC addresses per port
Broadcast/Multicast/Unicast Storm Control: kbps/ratio/pps control mode
802.1X
Port-based authentication
Mac-base authentication
VLAN Assignment
MAB
Guest VLAN
Radius authentication and accountability support
AAA (including TACACS+)
Port Isolation
Secure web management through HTTPS with SSLv3/TLS 1.2
Secure Command Line Interface (CLI) management with SSHv1/SSHv2
IP/Port/MAC-based access control
IPv6
IPv6 Dual IPv4/IPv6
Multicast Listener Discovery (MLD) Snooping
IPv6 ACL
IPv6 Interface
Static IPv6 Routing
IPv6 neighbor discovery (ND)
Path maximum transmission unit (MTU) discovery
Internet Control Message Protocol (ICMP) version 6
TCPv6/UDPv6
IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet (v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, Http/Https, IPv6 TFTP

MIBs
MIB II (RFC1213)
Interface MIB (RFC2233)
Ethernet Interface MIB (RFC1643)
Bridge MIB (RFC1493)
P/Q-Bridge MIB (RFC2674)
RMON MIB (RFC2819)
RMON2 MIB (RFC2021)
Radius Accounting Client MIB (RFC2620)
Radius Authentication Client MIB (RFC2618)
Remote Ping, Traceroute MIB (RFC2925)
Support TP-Link private MIB

Management Features

Omada App
Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Centralized Management
Omada Cloud-Based Controller
Omada Hardware Controller
Omada Software Controller

Cloud Access
Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Zero-Touch Provisioning
Yes. Requiring the use of Omada Cloud-Based Controller.

Web-based GUI
Command Line Interface (CLI) through the console port, telnet
SNMP v1/v2c/v3: Trap/Inform, RMON (1,2,3,9 groups)
SDM Template
DHCP/BOOTP Client
802.1ab LLDP/LLDP-MED
DHCP AutoInstall
Dual Image, Dual Configuration
CPU Monitoring
Cable Diagnostics
EEE
Password Recovery
SNTP
System Log

Others

Certification
CE, FCC, RoHS

Package Content
SG3428XPP-M2 Switch
Power Cord
Quick Installation Guide
Rackmount Kit
Rubber Feet

System Requirements
Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/10/11, MAC OS, NetWare, UNIX or Linux.

Environment
Operating Temperature: 0–40C (32–104 F);
Storage Temperature: -40–70 C(-40–158 F)
Operating Humidity: 10–90% RH non-condensing
Storage Humidity: 5–90% RH non-condensing