384 W PoE Budget: 24× 802.3at/af-compliant PoE+ ports with a total power supply of 384 W^*.
Full Gigabit Ports: 24× gigabit PoE+ ports and 4× gigabit SFP Slots provide high-speed connections.
Integrated into Omada SDN: Centralized Cloud Management, and Intelligent Monitoring.
Centralized Management: Cloud access and Omada app for ultra convenience and easy management.
Static Routing: Helps route internal traffic for more efficient use of network resources.
Robust Security Strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication, and more.
Optimize Voice and Video Applications: L2/L3/L4 QoS and IGMP snooping.
Standalone Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image bring powerful management capabilities.

Specifications

Hardware Features

Interface:
- 24× 10/100/1000Mbps RJ45 Ports
- 4× Gigabit SFP Slots
- 1× RJ45 Console Port
- 1× Micro-USB Console Port
Fan Quantity: 2
Power Supply: 100-240 V AC~50/60 Hz
PoE+ Ports(RJ45):
- Standard: 802.3at/af compliant
- PoE+ Ports: 24 Ports, up to 30 W per port
- Power Budget: 384 W
Dimensions ( W x D x H ): 17.3 × 13.0 × 1.7 in (440 × 330 × 44 mm)
Mounting: Rack Mountable
Max Power Consumption: 442.1 W (220 V/50 Hz) (with 384 W PD connected)
Max Heat Dissipation: 1508.67 BTU/hr (220 V/50 Hz) (with 384 W PD connected)

Performance

Switching Capacity: 56 Gbps
Packet Forwarding Rate: 41.66 Mpps
MAC Address Table: 16K
Jumbo Frame: 9 KB

Software Features

Quality of Service:
- 8 priority queues
- 802.1p CoS/DSCP priority
- Queue scheduling
  - SP (Strict Priority)
  - WRR (Weighted Round Robin)
  - SP+WRR
- Bandwidth Control
  - Port/Flow based Rating Limiting
- Smoother Performance
- Action for Flows
  - Mirror (to supported interface)
  - Redirect (to supported interface)
  - Rate Limit
  - QoS Remark
L2 and L2+ Features:
- Link Aggregation
  - Static link aggregation
  - 802.3ad LACP
  - Up to 8 aggregation groups and up to 8 ports per group
- Spanning Tree Protocol
  - 802.1d STP
  - 802.1w RSTP
  - 802.1s MSTP
  - STP Security: TC Protect, BPDU Filter, BPDU Protect, Root Protect, Loop Protect
- Loopback Detection
  - Port-based
  - VLAN based
- Flow Control
  - 802.3x Flow Control
  - HOL Blocking Prevention
- Mirroring
  - Port Mirroring
  - CPU Mirroring
  - One-to-One
  - Many-to-One
  - Tx/Rx/Both
L2 Multicast:
- Supports 511 (IPv4, IPv6) IGMP groups
- IGMP Snooping
  - IGMP v1/v2/v3 Snooping
  - Fast Leave
  - IGMP Snooping Querier
  - IGMP Authentication
- IGMP Authentication
- MVR
- MLD Snooping
  - MLD v1/v2 Snooping
  - Fast Leave
  - MLD Snooping Querier
  - Static Group Config
  - Limited IP Multicast
- Multicast Filtering: 256 profiles and 16 entries per profile
VLAN:
- VLAN Group
  - Max 4K VLAN Groups
- 802.1Q Tagged VLAN
- MAC VLAN: 30 Entries (12 Entries for TL-SG3428MP V1.0)
- Protocol VLAN: Protocol Template 16, Protocol
- VLAN 16
- Private VLAN
- GVRP
- VLAN VPN (QinQ)
  - Port-Based QinQ
  - Selective QinQ
- Voice VLAN
Access Control List:
- Time-based ACL
- MAC ACL
  - Source MAC
  - Destination MAC
  - VLAN ID
  - User Priority
  - Ether Type
- IP ACL
  - Source IP
  - Destination IP
  - Fragment
  - IP Protocol
  - TCP Flag
  - TCP/UDP Port
  - DSCP/IP TOS
  - User Priority
- Combined ACL
- Packet Content ACL
- IPv6 ACL
- Policy
  - Mirroring
  - Redirect
  - Rate Limit
  - QoS Remark
- ACL apply to Port/VLAN
Security:
- IP-MAC-Port Binding
  - DHCP Snooping
  - ARP Inspection
  - IPv4 Source Guard
- IPv6-MAC-Port Binding
  - DHCPv6 Snooping
  - ND Detection
  - IPv6 Source Guard
- DoS Defend
- Static/Dynamic Port Security
  - Up to 64 MAC addresses per port
- Broadcast/Multicast/Unicast Storm Control
  - kbps/ratio/pps control mode
- IP/Port/MAC based access control
- 802.1X
  - Port based authentication
  - Mac based authentication
  - VLAN Assignment
  - MAB
  - Guest VLAN
  - Support Radius authentication and accountability
- AAA (including TACACS+)
- Port Isolation
- Secure web management through HTTPS with SSLv3/TLS 1.2
- Secure Command Line Interface (CLI) management with SSHv1/SSHv2
IPv6:
- IPv6 Dual IPv4/IPv6
- Multicast Listener Discovery (MLD) Snooping
- IPv6 ACL
- IPv6 Interface
- Static IPv6 Routing
- IPv6 neighbor discovery (ND)
- Path maximum transmission unit (MTU) discovery
- Internet Control Message Protocol (ICMP) version 6
- TCPv6/UDPv6
- IPv6 applications
  - DHCPv6 Client
  - Ping6
  - Tracert6
  - Telnet (v6)
  - IPv6 SNMP
  - IPv6 SSH
  - IPv6 SSL
  - Http/Https
  - IPv6 TFTP
L3 Features:
- 16 IPv4/IPv6 Interfaces
- Static Routing
  - 48 static routes
- Static ARP
  - 128 static entries
- 316 ARP Entries (512 ARP Entries for TL-SG3428 V2.0 & TL-SG3428MP V2.0)
- Proxy ARP
- Gratuitous ARP
- DHCP Server
- DHCP Relay
  - DHCP interface relay
  - DHCP VLAN relay
- DHCP L2 Relay
Management:
- Web-based GUI
- Command Line Interface (CLI) through console port, telnet
- SNMPv1/v2c/v3
  - Trap/Inform
  - RMON (1, 2, 3, 9 groups)
- SDM Template
- DHCP/BOOTP Client
- 802.1ab LLDP/LLDP-MED
- DHCP AutoInstall
- Dual Image, Dual Configuration
- CPU Monitoring
- Cable Diagnostics
- EEE
- Password Recovery
- SNTP
- System Log
Advanced Features:
- Support Omada Hardware Controller (OC200/OC300), Software Controller
- Automatic Device Discovery
- Batch Configuration
- Batch Firmware Upgrading
- Intelligent Network Monitoring
- Abnormal Event Warnings
- Unified Configuration
- Reboot Schedule

Others

Certification: CE, FCC, RoHS
Package Contents:
- TL-SG3428MP Switch
- Power Cord
- Quick Installation Guide
- Rackmount Kit
- Rubber Feet
Environment:
- Operating Temperature: 0–45 ? (32–113 ?);
- Storage Temperature: -40–70 ? (-40–158 ?)
- Operating Humidity: 10–90% RH non-condensing
- Storage Humidity: 5–90% RH non-condensing

For additional version information, please go to the support page.

^*PoE budget calculations are based on laboratory testing. Actual PoE power budget is not guaranteed and will vary as a result of client limitations and environmental factors.

^**Some features are only supported by Standalone Management or Centralized Management, or may require further software upgrades, please visit the product page on www.tp-link.com for detailed information.

Order before 5 pm = delivered at home the day after tomorrow or pick up the day after tomorrow in the shop*

*: the delivery times are indications & depend on suppliers and transport companies