The TP-Link Omada SG3428XPP-M2 is a managed network switch for businesses upgrading wired networks for Wi-Fi 7 and other multi-gigabit devices. Its 24 copper ports provide 2.5 Gbps connectivity, with a mix of PoE+ and PoE++ to power compatible access points, cameras and phones over Ethernet.

Features

  • 8x 2.5G PoE++ ports (up to 60 W PoE out per port)**
  • 16x 2.5G PoE+ ports (up to 30 W PoE out per port)
  • 4x 10G SFP+ slots
  • 500 W total PoE budget*
  • Centralized cloud management via the web or the Omada app
  • Standalone management via web, CLI, SNMP, and RMON
  • Static Routing helps route internal traffic for higher efficiency
  • VLAN, ACL, QoS, IGMP Snooping, OAM, and DDM
  • ERPS supports rapid protection and recovery in a ring topology

Software Features

  • Quality of Service
  • 8 priority queues
  • 802.1p CoS/DSCP priority
  • Queue scheduling: SP (Strict Priority), WRR (Weighted Round Robin), SP+WRR
  • Bandwidth Control: Port/Flow-based Rating Limiting
  • Smoother Performance
  • Action for Flows: QoS remark (802.1P Remark, DSCP Remark)

L2 and L2+ Features

  • 32 IP Interfaces: Support IPv4/IPv6 Interface
  • Static Routing: 48 IPv4/IPv6 Static Routes
  • Static ARP: 128 static entries
  • 512 ARP Entries
  • Proxy ARP
  • Gratuitous ARP
  • DHCP Server
  • DHCP Relay: DHCP Interface Relay, DHCP VLAN Relay
  • DHCP L2 Relay
  • Link Aggregation
  • Spanning Tree Protocol
  • Loopback Detection
  • 802.3x Flow Control
  • Mirroring

ISP Features

  • L2PT (Layer 2 Protocol Tunneling)
  • Device Link Detect Protocol (DLDP)
  • PPPoE ID Insertion
  • ERPS
  • 802.3ah Ethernet Link OAM
  • DDM

Specification

Specification Detail
Interface 24x 2.5 Gbps RJ45 Ports (8x PoE++, 16x PoE+)
4x 10G SFP+ Slots
1x RJ45 Console Port
1x Micro-USB Console Port
Fan Quantity 3
Physical Security Lock Yes
Power Supply 100-240 V AC~50/60 Hz
PoE Ports (RJ45) Standard: 802.3bt/at/af compliant
PoE++ Ports (802.3bt/at/af PoE): 8 Ports, up to 60 W per port
PoE+ Ports (802.3at/af PoE): 16 Ports, up to 30 W per port
Power Budget 500 W
Dimensions ( W x D x H ) 17.3x13.0x1.7 in (440x330x44 mm)
Mounting Rack Mountable
Max. Power Consumption 629.1 W (110V/60Hz)
Max. Heat Dissipation 2153.45 BTU/h (110 V/60 Hz)
Performance Switching Capacity - 200 Gbps
Packet Forwarding Rate - 148.80 Mpps
MAC Address Table - 32 K
Packet Buffer Memory - 16 Mbit
Jumbo Frame - 9 KB
L2 Multicast Supports 511 (IPv4, IPv6) IGMP groups
IGMP Snooping
IGMP Authentication
Multicast VLAN Registration (MVR)
MLD Snooping
Multicast Filtering: 256 profiles and 16 entries per profile
Advanced Features
Automatic Device Discovery
Batch Configuration
Batch Firmware Upgrading
Intelligent Network Monitoring
Abnormal Event Warnings
Unified Configuration
Reboot Schedule
VLAN VLAN Group: Max 4K VLAN Groups
802.1q Tagged VLAN
MAC VLAN: 256 Entries
Protocol VLAN: Protocol Template 16, Protocol VLAN 16
Private VLAN
GVRP
VLAN VPN: VLAN Mapping, VLAN Replace
Voice VLAN
Access Control List
Time-based ACL
MAC ACL: Source MAC, Destination MAC, VLAN ID, User Priority, Ether Type
IP ACL: Source IP, Destination IP, Fragment, IP Protocol, TCP Flag, TCP/UDP Port, DSCP/IP TOS
Combined ACL
Packet Content ACL
IPv6 ACL
Policy: Mirroring, Redirect, Rate Limit, QoS Remark
ACL applies to Port/VLAN
Security IP-MAC-Port Binding
512 Entries
DHCP Snooping
ARP Inspection
IPv4 Source Guard: 100 Entries
IPv6-MAC-Port Binding
512 Entries
DHCPv6 Snooping
ND Detection
ND Snooping
IPv6 Source Guard: 100 Entries
DoS Defend
DHCP Filter
Static/Dynamic Port Security: Up to 64 MAC addresses per port
Broadcast/Multicast/Unicast Storm Control: kbps/ratio/pps control mode
802.1X
Port-based authentication
Mac-base authentication
VLAN Assignment
MAB
Guest VLAN
Radius authentication and accountability support
AAA (including TACACS+)
Port Isolation
Secure web management through HTTPS with SSLv3/TLS 1.2
Secure Command Line Interface (CLI) management with SSHv1/SSHv2
IP/Port/MAC-based access control
IPv6
IPv6 Dual IPv4/IPv6
Multicast Listener Discovery (MLD) Snooping
IPv6 ACL
IPv6 Interface
Static IPv6 Routing
IPv6 neighbor discovery (ND)
Path maximum transmission unit (MTU) discovery
Internet Control Message Protocol (ICMP) version 6
TCPv6/UDPv6
IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet (v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, Http/Https, IPv6 TFTP
MIBs MIB II (RFC1213)
Interface MIB (RFC2233)
Ethernet Interface MIB (RFC1643)
Bridge MIB (RFC1493)
P/Q-Bridge MIB (RFC2674)
RMON MIB (RFC2819)
RMON2 MIB (RFC2021)
Radius Accounting Client MIB (RFC2620)
Radius Authentication Client MIB (RFC2618)
Remote Ping, Traceroute MIB (RFC2925)
Support TP-Link private MIB
Omada App Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management Omada Cloud-Based Controller
Omada Hardware Controller
Omada Software Controller
Cloud Access Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Zero-Touch Provisioning Yes. Requiring the use of Omada Cloud-Based Controller.
Web-based GUI Command Line Interface (CLI) through the console port, telnet
SNMP v1/v2c/v3: Trap/Inform, RMON (1,2,3,9 groups)
SDM Template
DHCP/BOOTP Client
802.1ab LLDP/LLDP-MED
DHCP AutoInstall
Dual Image, Dual Configuration
CPU Monitoring
Cable Diagnostics
EEE
Password Recovery
SNTP
System Log
Certification CE, FCC, RoHS
Package Content SG3428XPP-M2 Switch
Power Cord
Quick Installation Guide
Rackmount Kit
Rubber Feet
System Requirements Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/10/11, MAC OS, NetWare, UNIX or Linux.
Environment Operating Temperature: 0–40C (32–104 F);
Storage Temperature: -40–70 C(-40–158 F)
Operating Humidity: 10–90% RH non-condensing
Storage Humidity: 5–90% RH non-condensing
  • FAST SHIPPING

    NEXT DAY DPD

  • ORDER CUT OFF TIME 5PM

    FOR NEXT DAY SHIPPING

  • EASY RETURNS

    WE KNOW THINGS CAN GO WRONG

  • SECURE PAYMENTS

    POWERED BY STRIPE