Switch SG3428XF 24xSFP 4xSFP+

TL-SG3428XF

L2+ JetStream Managed Switch with 24 SFP Ports and 4 SFP+ 10GE Slots

• Lightning-fast 10G connectivity: 4× 10 Gigabit SFP+ slots provide high bandwidth and switching capabilities.
• Fiber speeds: 20 Gigabit SFP ports and 4 Gigabit SFP/RJ45 combo ports provide fast and reliable connections to other switches and devices.
• Operation integrated with the Omada SDN platform: Unattended ZTP configuration, central cloud management and intelligent monitoring.
• Centralized management: Access from the cloud and Omada app is the convenience of management.
• Static routing: Controlling internal traffic enables more efficient use of network resources.
• Strong security strategies: IP-MAC-Port Binding, ACL, Port Security, DoS Defend, Storm control, DHCP Snooping, 802.1X, Radius Authentication and many more.
• Optimization of Voice and Video applications: L2/L3/L4 QoS and IGMP Snooping.
• Management: Web, CLI (Console Port, Telnet, SSH), SNMP, RMON and Dual Image provide great management capabilities.

Fast 10G uplink ports

4 SFP+ slots with a speed of 10 Gb/s ensure high bandwidth

Gigabit fiber connections

20 gigabit SFP ports and 4 combo SFP/RJ45 ports provide stable connections

Centralized management in the cloud

SDN solutions are fully integrated with each other to create a high-performance network

Advanced layer 2+ features

Static routing, IGMP Snooping, 802.1Q VLAN and much more

10G full fiber switch

Build and expand your high-speed network with TP-Link TL-SG3428XF, a fully managed switch with 20 Gigabit SFP ports, 4 Gigabit SFP/RJ45 combo ports and 4 10G SFP+ ports. This switch is ideal for small, medium and large enterprise networks. It meets and even exceeds the needs of fast, stable and secure industrial networks.

Seamless integration with the Omada Cloud SDN platform

Omada's software-defined network infrastructure control (SDN) platform integrates the operation of network devices, including access points, switches and gateways, providing end-to-end central management from the cloud. Omada allows you to create a highly scalable network fully controlled with a single interface. This translates to seamless wired and wireless connections that are essential in hospitality, education, retail, offices and many other industries and facilities.

Redundant power

Two power supplies supporting each other are an ideal choice for a stable network architecture.

Layer 3 advanced features

Extensive L2+ and L3 capabilities help build a highly scalable and secure network that is both reliable and efficient – ideal for offices, campuses and service providers.

Effective security

IP-MAC-Port Binding, Port Guard, Storm Control and DHCP Snooping are the features of the TL-SG3428XF switch that protect your network from threats. The device also gives you the ability to define the most common DoS attacks, so they can be detected and prevented early. On the other hand, the ACL function (from L2 to L4) is applicable when blocking access to specific network resources. Packet denial can be set for specific source or destination MAC addresses, IP addresses, TCP/UDP ports or VLAN IDs. In addition, the switch uses 802.1X encryption to authenticate users seeking access to the network.

L2+ layer functions

With extensive L2+ features including VLAN 802.1Q tag, port mirroring, STP/RSTP/MSTP, port aggregation and 802.3x flow control, the TL-SG3428XF is versatile in operation. IGMP Snooping intelligently directs multicast streams to specific subscribers only, while IGMP Throttling and IGMP Filtering effectively restrict unauthorized users from accessing multicast streams. The switch also supports the static routing function, which allows you to segment the network and increase its efficiency.

Advanced QoS features

To ensure better transmission of audio and video in one network traffic, network administrators can prioritize e.g. for individual IP addresses, MAC addresses, TCP or UDP ports, etc. Thanks to this, audio and video transmission is smooth and without delays.

Facilities for service providers

The TL-SG3428XF is a great solution for ISPs due to the availability of the following features: sFlow, QinQ, L2PT, PPPoE ID Insertion and IGMP authentication. 802.3ah OAM and Device Connection Discovery Protocol (DLDP) enable easier network supervision and management.

IPv6 support

The switch supports many IPv6 features, such as IPv4/IPv6 dual stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 interface, PMTU Discovery and IPv6 Neighbor Disc

• VLAN Groups – Up to 4K VLAN Groups
• 802.1Q VLAN tagging
• MAC VLAN address: 30 entries
• VLAN Protocol: Protocol Template 16, VLAN Protocol 16
• Private VLAN
• GVRP
• VLAN VPN (QinQ): Port-based QinQ, Selective QinQ
• Voice VLAN

• IEEE 802.3i:10BASE-T Ethernet
• IEEE 802.3u:100BASE-X Fast Ethernet
• IEEE 802.3ab:1000BASE-T Gigabit Ethernet
• IEEE 802.3z:1000BASE-X Gigabit Ethernet (Optical fiber)
• IEEE 802.3ae: 10 Gigabit Ethernet over fiber

• 8 priority queues
• Support 802.1p CoS/DSCP prioritization
• Priority scheduler mode:
• SP (Strict Priority)
• WRR (Weighted Round Robin)
• SP+WRR
• Bandwidth control
• Transfer rate limiting based on port/data flow
• Smoother operation
• Actions for flows
• Mirror (to a supported interface)
• Redirect (to a supported interface)
• speed limit
• QoS Remark

Transmission security:

• IP, MAC and Port Binding: 512 entries, DHCP Snooping, ARP Inspection, IPv4 Source Address Protection: 100 entries
• IPv6, MAC and Port Address Binding: 512 entries, DHCPv6 Snooping, ND Detection, IPv6 Source Address Protection: 100 entries
• Protection against DoS attacks
• Static/dynamic/fixed port protection: Up to 64 MAC addresses per port
• Storm Control Broadcast/Multicast/Unicast – control mode (kbps/rate)
• 802.1X authentication: Port-based authentication, MAC-based authentication, VLAN assignment, MAB, Guest VLAN, Radius authentication and authorization
• AAA (incl. TACACS+)
• Port isolation
• Secure web management via HTTPS with SSLv3/TLS encryption 1.2
• Secure CLI management with SSHv1/SSHv2 encryption
• Access control based on IP/port/MAC

Access Control Lists:

• Time-based access control list (ACL).
• ACL's MAC address
• Source MAC address
• Destination MAC address
• VLAN ID
• User Priority
• Ethertype
• ACL IP Address
• Source IP address
• Destination IP address
• Fragment
• IP protocol
• TCP flag
• TCP/UDP port
• TOS DSCP/IP
• User Priority
• IPv6 ACLs
• The package content ACL
• Combined ACL
• Access Control Policy
• Mirroring
• speed limit
• Redirect
• QoS Remark
• ACL to port/VLAN

• Omada app
• Omada Cloud based controller
• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada software controller
• Cloud access
• GUI graphical interface
• CLI command line interface
• SNMP v1/v2c/v3: Trap/Inform, RMON (Groups 1, 2, 3, 9)
• SDM template
• DHCP/BOOTP client
• 802.1ab LLDP/LLDP-MED
• DHCP auto-installation
• Dual Image, Dual Configuration
• CPU usage monitoring
• Cable diagnostics
• EEE
• Password recovery
• SNTP
• System logs

• Link aggregation
• Static link aggregation
• LACP 802.3ad
• Up to 8 aggregation groups and up to 8 ports per group
• Spanning Tree Protocol (STP)
• STP 802.1D
• RSTP 802.1w
• MSTP 802.1s
• STP security: TC protection, BPDU packet filtering, Root protection
• Loopback detection
• Port-based
• VLAN based
• Flow control
• 802.3x flow control
• HOL blocking prevention
• Mirroring
• Port Mirroring
• CPU mirroring
• One-to-One Transfer
• Many-to-One Transfer
• Input/output port / both ports

L2 Multicast:

• IGMP Snooping
• IGMP v1/v2/v3 Snooping
• Fast Leave
• IGMP Snooping Querier
• IGMP authentication
• IGMP authentication
• MVR
• MLD Snooping
• MLD v1/v2 Snooping
• Fast Leave
• MLD Snooping Querier
• Static group configuration
• Limited IP multicast forwarding
• Multicast filtering: 256 profiles and 16 entries per profile

• 16 IPv4/IPv6 interfaces
• Static routing: 48 static routes
• ARP static entries: 128 static entries
• ARP proxy
• Gratuitous ARP
• DHCP server
• DHCP Relay: DHCP Interface Relay, DHCP VLAN Relay
• DHCP L2 Relay

• Automatic device detection
• Group configurations
• Group software updates
• Intelligent network health monitoring
• Warnings about unusual events
• Unified setup process
• Reboot schedule

• TL-SG3428XF switch
• Power cord
• Quick Installation Guide
• Mounting kit
• Rubber feet

• Redundant power
• 100-240VAC~50/60Hz

440 x 220 x 44 mm

• Allowable operating temperature: 0~45 C
• Permissible storage temperature: -40~70 C
• Permissible air humidity: 10%~90%, non-condensing
• Permissible storage humidity: 5%~90%, non-condensing

• CE
• FCC
• RoHS

• Amount of heat generated: 121.81 BTU/hour
• RJ45 console port
• Micro-USB console port
• Flash: 32 MB
• DRAM: 256 MB