TP-Link JetStream L2+ 10G PoE+ Managed Switch (TL-SG3428XMP)
TP-Link’s JetStream L2+ managed switch delivers high performance, advanced Layer 2 and Layer 2+ functionality, and powerful centralized management for demanding enterprise, campus, and ISP networks.
With 10-gigabit uplinks, robust security, enterprise-level QoS, and full integration with TP-Link Omada SDN, this switch is designed for stable, long-term network deployments.
Key Features
- High-Performance Switching
- 24 × 10/100/1000 Mbps RJ45 ports
- 4 × 10G SFP+ slots for high-speed uplinks
- 128 Gbps switching capacity
- 95.23 Mpps packet forwarding rate
-
Jumbo frames up to 9 KB
-
Power over Ethernet (PoE+)
- 24 PoE+ ports, 802.3at/af compliant
- Up to 30 W per port
-
384 W total PoE power budget
-
Advanced L2 and L2+ Features
- Static routing
- Link aggregation with static aggregation and 802.3ad LACP
- STP/RSTP/MSTP support with TC Protect, BPDU Filter, Root Protect
- VLAN features including 802.1Q, MAC VLAN, Protocol VLAN, Private VLAN, GVRP, VLAN VPN (QinQ), Port-Based QinQ, Selective QinQ, Voice VLAN
-
IGMP and MLD snooping with fast leave, querier, authentication, and multicast filtering
-
Enterprise-Level Security
- IP-MAC-Port Binding (IMPB)
- DHCP Snooping, ARP Inspection, IPv4 Source Guard
- IPv6-MAC-Port Binding, DHCPv6 Snooping, ND Detection, IPv6 Source Guard
- DoS defense
- Static/Dynamic Port Security (up to 64 MAC addresses per port)
- Storm control (broadcast/multicast/unicast)
- 802.1X (port-based and MAC-based) with VLAN assignment, MAB, guest VLAN
- RADIUS and AAA (including TACACS+)
-
HTTPS/SSLv3/TLS 1.2, SSHv1/v2, IP/Port/MAC-based access control
-
Powerful QoS and Traffic Management
- L2–L4 Quality of Service
- 8 priority queues
- 802.1p CoS / DSCP priority
- Queue scheduling: SP, WRR, SP+WRR
- Port/flow-based rate limiting
-
Flow actions: mirror, redirect, rate limit, QoS remark
-
Omada SDN and Cloud Management
- Full integration with Omada Software Defined Networking (SDN)
- Centralized cloud management of access points, switches, and gateways
- Scalable network management from a single interface
-
Ideal for hospitality, education, retail, offices, and more
-
Easy Management & High Availability
- Web-based GUI and CLI (console, Telnet)
- SNMP v1/v2c/v3, RMON (1, 2, 3, 9)
- Dual Image and Dual Configuration for reduced downtime
- OAM functionality for easier network management
- CPU monitoring, cable diagnostics, EEE, SNTP, system log
- ZTP (Zero-Touch Provisioning) with Omada Cloud-Based Controller
Hardware Specifications
| Feature | Details |
|---|---|
| Interfaces | 24 × 10/100/1000 Mbps RJ45 ports |
| 4 × 10G SFP+ slots | |
| 1 × RJ45 console port | |
| 1 × Micro-USB console port | |
| Fan Quantity | 2 |
| Power Supply | 100–240 V AC, 50/60 Hz |
| PoE Standard | 802.3at/af compliant |
| PoE+ Ports | 24 ports, up to 30 W per port |
| PoE Power Budget | 384 W |
| Dimensions (W × D × H) | 17.3 × 13.0 × 1.7 in (440 × 330 × 44 mm) |
| Mounting | Rack mountable |
| Max Power Consumption | 34.4 W (110 V/60 Hz, no PD connected) |
| 465.8 W (110 V/60 Hz, with 384 W PD connected) | |
| Max Heat Dissipation | 117.38 BTU/h (110 V/60 Hz, no PD connected) |
| 1589.31 BTU/h (110 V/60 Hz, with 384 W PD connected) |
Performance
| Parameter | Details |
|---|---|
| Switching Capacity | 128 Gbps |
| Packet Forwarding Rate | 95.23 Mpps |
| MAC Address Table | 16 K |
| Packet Buffer Memory | 12 Mbit |
| Jumbo Frame | 9 KB |
L2 / L2+ Features
- Link Aggregation
- Static link aggregation
- 802.3ad LACP
-
Up to 8 aggregation groups, up to 8 ports per group
-
Spanning Tree Protocol
- 802.1d STP
- 802.1w RSTP
- 802.1s MSTP
-
STP Security: TC Protect, BPDU Filter, Root Protect
-
Loopback Detection
- Port-based
-
VLAN-based
-
Flow Control
- 802.3x flow control
-
HOL blocking prevention
-
Mirroring
- Port mirroring, CPU mirroring
- One-to-one, many-to-one
-
Tx/Rx/Both
-
L2 Multicast
- IGMP Snooping v1/v2/v3 with fast leave and querier
- IGMP authentication
- MLD Snooping v1/v2 with fast leave and querier
- Static group configuration
- Limited IP multicast
- MVR
-
Multicast filtering: 256 profiles, 16 entries per profile
-
VLAN
- Up to 4K VLAN groups
- 802.1Q tagged VLAN
- MAC VLAN (7 entries)
- Protocol VLAN (protocol template 16, protocol VLAN 16)
- Private VLAN
- GVRP
- VLAN VPN (QinQ), Port-Based QinQ, Selective QinQ
- Voice VLAN
Access Control & Security
- Access Control Lists (ACL)
- Time-based ACL
- MAC ACL: source MAC, destination MAC, VLAN ID, user priority, EtherType
- IP ACL: source IP, destination IP, fragment, IP protocol, TCP flag, TCP/UDP port, DSCP/IP TOS, user priority
- IPv6 ACL
- Packet content ACL
- Policy actions: mirroring, redirect, rate limit, QoS remark
-
ACL applies to port/VLAN
-
Security Features
- IP-MAC-Port Binding: 512 entries
- DHCP Snooping
- ARP Inspection
- IPv4 Source Guard: 100 entries
- IPv6-MAC-Port Binding: 512 entries
- DHCPv6 Snooping
- ND Detection
- IPv6 Source Guard: 100 entries
- DoS defend
- Static/Dynamic Port Security (up to 64 MAC addresses per port)
- Broadcast/Multicast/Unicast storm control (kbps/ratio control)
- 802.1X port-based and MAC-based authentication
- VLAN assignment, MAB, guest VLAN
- RADIUS authentication and accountability
- AAA (including TACACS+)
- Port isolation
- Secure HTTPS management with SSLv3/TLS 1.2
- Secure CLI management with SSHv1/SSHv2
- IP/Port/MAC-based access control
IPv6 Support
- Dual stack IPv4/IPv6
- MLD Snooping
- IPv6 ACL
- IPv6 interface
- Static IPv6 routing
- IPv6 neighbor discovery (ND)
- Path MTU discovery
- ICMPv6
- TCPv6/UDPv6
- IPv6 applications: DHCPv6 client, Ping6, Tracert6, Telnet (v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, HTTP/HTTPS, IPv6 TFTP
L3 Features
- Up to 16 IPv4/IPv6 interfaces
- Static routing: up to 48 static routes
- Static ARP: 128 static entries
- Proxy ARP
- Gratuitous ARP
- DHCP Server
- DHCP Relay
- DHCP Interface Relay
- DHCP VLAN Relay
- DHCP L2 Relay
Management & Omada SDN
- Management Interfaces
- Web-based GUI
- CLI via console port and Telnet
- SNMP v1/v2c/v3
- Trap/Inform
- RMON (1, 2, 3, 9)
- SDM template
- DHCP/BOOTP client
- 802.1ab LLDP/LLDP-MED
- DHCP AutoInstall
- Dual Image, Dual Configuration
- CPU monitoring
- Cable diagnostics
- EEE
- Password recovery
- SNTP
-
System log
-
Omada SDN Integration
- Supports Omada Hardware Controller (OC200/OC300)
- Supports Omada Software Controller
- Supports Omada Cloud-Based Controller
- Cloud access (with OC200/OC300, Omada Cloud-Based or Software Controller)
- Zero-Touch Provisioning (with Omada Cloud-Based Controller)
-
Omada App support (with OC200/OC300, Omada Cloud-Based or Software Controller)
-
Advanced Omada Features
- Automatic device discovery
- Batch configuration
- Batch firmware upgrading
- Intelligent network monitoring
- Abnormal event warnings
- Unified configuration
- Reboot schedule
- ZTP (Zero-Touch Provisioning)
MIB Support
- MIB II (RFC1213)
- Interface MIB (RFC2233)
- Ethernet Interface MIB (RFC1643)
- Bridge MIB (RFC1493)
- P/Q-Bridge MIB (RFC2674)
- RMON MIB (RFC2819)
- RMON2 MIB (RFC2021)
- Radius Accounting Client MIB (RFC2620)
- Radius Authentication Client MIB (RFC2618)
- Remote Ping, Traceroute MIB (RFC2925)
- TP-Link private MIB support
Certifications
- CE
- FCC
- RoHS
Package Contents
- TL-SG3428XMP Switch
- Power cord
- Quick Installation Guide
- Rackmount kit
- Rubber feet
System Requirements
- Microsoft Windows 98SE, NT, 2000, XP, Vista, Windows 7/8/10/11
- MAC OS
- NetWare
- UNIX
- Linux
Environmental Specifications
- Operating Temperature: 0–45 °C (32–113 °F)
- Storage Temperature: -40–70 °C (-40–158 °F)
- Operating Humidity: 10–90% RH, non-condensing
- Storage Humidity: 5–90% RH, non-condensing
