TP-LINK

TP-Link Omada SG3428XPP-M2 network switch 24 × 2.5G PoE 500 W, 4 × 10G SFP+

The TP-Link Omada SG3428XPP-M2 is a managed L2+ network switch with 24 multi-gigabit 2.5G RJ45 ports and four 10G SFP+ slots. All 24 ports supply PoE – 16 PoE+ and 8 PoE++ – from a 500 W total budget, so a single 1U unit can power even demanding access points and cameras.

  • Ports: 24 × 2.5G RJ45 (100/1000/2500 Mbit/s) + 4 × 10G SFP+
  • PoE: 16 × PoE+ (up to 30 W) + 8 × PoE++ (up to 60 W), 500 W total
  • Management: managed L2+, Omada cloud, web UI, CLI, SNMP, RMON, RJ-45 and micro-USB console
  • Network features: static routing (48 routes), VLAN, ACL, QoS, IGMP and MLD snooping, ERPS
  • Security: 802.1X, RADIUS, TACACS+, IP-MAC-Port binding, DHCP snooping
  • Mounting and power: 1U rack, 440 × 330 × 44 mm, 100–240 V AC, 3 fans

Description

2.5 gigabits on every port

All 24 RJ45 ports run at up to 2.5 Gbit/s and remain compatible with 100 Mbit/s and 1 Gbit/s devices. A multi-gigabit port makes sense for newer Wi-Fi access points whose wireless speed exceeds one gigabit, and for workstations and NAS units fitted with a 2.5G network card. You can upgrade the network step by step, because older gigabit devices keep working on the same ports.

PoE++ for more demanding devices

Eight ports support the PoE++ standard (IEEE 802.3bt) and deliver up to 60 W, while the other sixteen are PoE+ ports with up to 30 W. The total PoE budget is 500 W. PoE++ is meant for devices that need more than 30 W, such as higher-draw access points or pan-tilt cameras. One switch can therefore power the access points and cameras of an entire floor without extra power supplies, as long as the total stays within budget.

Four 10G SFP+ uplinks

When 24 ports move 2.5-gigabit traffic at the same time, the link to the rest of the network has to be fast too. The four 10G SFP+ slots are suited to connecting a server, NAS or core switch, and links can be aggregated for even more bandwidth. Switching capacity is 200 Gbit/s, the forwarding rate is 148.8 million packets per second and the MAC address table holds 32,000 entries.

L2+ features and enterprise-grade security

Static routing with up to 48 routes and 32 IP interfaces moves traffic between VLANs directly on the switch. Stacked VLAN, voice VLAN and MAC-based or protocol-based VLANs are supported. User access is controlled by 802.1X together with RADIUS and TACACS+ servers, IP-MAC-Port binding, DHCP snooping and ARP inspection block spoofing attacks, and ACLs filter traffic at both IPv4 and IPv6 level.

Resilience and several ways to manage it

ERPS quickly restores connectivity in a ring topology if one of the links fails. The three fans are redundant and the switch supports a redundant power supply (RPS). It can be managed from the Omada cloud via web or app, or standalone through the web interface, command line, SNMP v1/v2c/v3 and RMON, and for initial setup there is a console port with both RJ-45 and micro-USB connectors. Maximum power consumption is 629.1 W and the operating range is 0 to 40 °C.

Who this network switch is for

Businesses moving their office Wi-Fi to newer multi-gigabit access points; schools, hotels or warehouses where dozens of access points and cameras are powered from one cabinet; IT administrators who need VLANs, 802.1X authentication and static routing; and networks whose backbone already runs at 10 Gbit/s.

Specifications

General

BrandTP-LINK
Form factor1U
Model nameOmada 24-Port 2.5GBASE-T and 4-Port 10GE SFP+ L2+ Managed Switch with 16-Port PoE+ & 8-Port PoE++
Product colourBlack
SeriesOmada
Full duplexYes
Half duplexYes
IPv4 routes48
IPv6 routes48
Jumbo frames9000
Static routeYes
Cloud-managedYes
IGMP snoopingYes
Rack mountingYes
Rate limitingYes
ARP inspectionYes
AuthenticationGuest VLAN, MAC-based authentication, Port-based authentication
Number of fans3
Rack mount kitYes
Forwarding rate148.8
Link aggregationYes
Number of queues8
System event logYes
MAC address table32000
Quick start guideYes
Store-and-forwardYes
Authentication typeAAA, IEEE 802.1x, RADIUS, TACACS+
Management protocolsSNMP v1/v2c/v3
Packet buffer memory16
Web-based managementYes
Spanning tree protocolYes
Broadcast storm controlYes
Number of IP interfaces32
Number of static routes48
Access Control List (ACL)Yes
Sustainability complianceYes
SFP+ module slots quantity4
Head-of-line (HOL) blockingYes
Queue scheduling algorithmsSP/Weighted Round Robin (WRR)/WRR+SP
Operating relative humidity (H-H)10 - 90
GARP VLAN Registration Protocol (GVRP)Yes
Multicast Listener Discovery (MLD) snoopingMLD v1/v2
EAN4897098689738

Memory

Internal memory256 GB
Memory typeDRAM

Storage

Switching capacity200
Storage temperature (T-T)-40 - 70
Storage relative humidity (H-H)5 - 90

Camera

Flash memory32 MB

Ports

Ethernet LAN data rates10,100,1000,2500,10000
Power over Ethernet (PoE)Yes
Console portRJ-45/Micro-USB
Port mirroringYes
IP-MAC-Port bindingYes
Static port securityYes
Virtual LAN featuresMAC address-based VLAN/Port-based VLAN/Protocol-based VLAN/Stacked VLAN/Tagged VLAN/Voice VLAN
2.5G Ethernet (copper) ports quantity24
Total Power over Ethernet (PoE) budget500
Basic switching RJ-45 Ethernet ports type2.5G Ethernet (100/1000/2500)
Basic switching RJ-45 Ethernet ports quantity24
Power over Ethernet plus (PoE+) ports quantity16
Power over Ethernet 4PPoE (PoE++) ports quantity8

Connectivity

Networking standardsIEEE 802.1ab/IEEE 802.1D/IEEE 802.1p/IEEE 802.1Q/IEEE 802.1s/IEEE 802.1w/IEEE 802.1x/IEEE 802.3/IEEE 802.3ab/IEEE 802.3ad/IEEE 802.3ae/IEEE 802.3af/IEEE 802.3at/IEEE 802.3bt/IEEE 802.3bz/IEEE 802.3u/IEEE 802.3x/IEEE 802.3z
Security algorithmsHTTPS/SSH/SSH-2/SSL/TLS

Keyboard & controls

Switch typeManaged
Switch layerL2+

Battery & power

Power consumption (max)629.1 W
AC input voltage100 – 240 V
AC input frequency50/60
Power sourceAC/PoE
Power supply includedYes
Redundant power supply (RPS) supportYes

Performance & capacities

Operating temperature (T-T)0 – 40 °C
Heat dissipation2153.45
BPDU filtering/protectionYes
Configuring Location Settings (CLI)Yes

Features

Cables includedAC
LED indicatorsYes
10G supportYes
MIB supportRFC1213, RFC2233, RFC1643, RFC1493, RFC2674, RFC2819, RFC2021, RFC2620, RFC2618, RFC2925
VLAN supportYes
DHCP featuresDHCP client/DHCP relay/DHCP server/DHCP snooping/DHCPv6 client/DHCPv6 snooping
Loop protectionYes
SSH/SSL supportYes
Multicast supportYes
Password protectionYes
Flow control supportYes
IPv4 & IPv6 featuresIPv4/IPv6 access-control list (ACL)/IPv6 ping/IPv6 portal/IPv6 tracert
Jumbo frames supportYes
Redundant fans supportYes
Quality of Service (QoS) supportYes

Dimensions & weight

Width440 mm
Depth330 mm
Height44 mm

Questions & answers

How many devices can it power over PoE?

All 24 ports supply PoE: 16 PoE+ ports with up to 30 W and 8 PoE++ ports with up to 60 W. The total budget is 500 W, so it can run, for example, 24 devices averaging up to about 20 W each at the same time. Connect the most demanding devices to the PoE++ ports.

Do the 2.5G ports work with gigabit devices?

Yes. The ports support 100 Mbit/s, 1 Gbit/s and 2.5 Gbit/s, so older devices keep working at their own speed.

Can the switch route traffic?

It is an L2+ switch with static routing for up to 48 routes on both IPv4 and IPv6. The manufacturer does not list dynamic routing protocols.

Can it be mounted in a rack?

Yes. The case is 1U high and measures 440 × 330 × 44 mm, and rack mounting brackets and an AC power cable are included.