TP-Link JetStream 48-Port Gigabit PoE+ L2+ Managed Switch with 4× 10GE SFP+ Uplinks (TL-SG3452XP)
Enterprise-grade 48-port Gigabit PoE+ switch with high-performance 10G uplinks, advanced L2/L2+/L3 features, and centralized cloud management through Omada SDN.
Key Features
- 4× 10G SFP+ Uplinks
- Four 10 Gbps SFP+ slots
-
Non-blocking switching performance and ultra-low latency
-
48× PoE+ Ports with 500 W Power Budget*
- 48× 10/100/1000 Mbps RJ45 PoE+ ports
- 802.3af/at compliant, up to 30 W per port
- 500 W total PoE power budget*
-
Data and power over a single Ethernet cable
-
Centralized Cloud Management (Omada SDN)
- Integrates with Omada SDN platform
- 100% centralized cloud management for access points, switches, and gateways
- Single interface for wired and wireless networks
-
Supports Omada Cloud-Based Controller, OC300, OC200, and Omada Software Controller
-
Advanced L2/L2+/L3 Features
- Static Routing
- DHCP Server, DHCP Relay (Interface/VLAN/L2 Relay)
- 802.1Q VLAN, Private VLAN, QinQ (Port-Based & Selective)
- STP/RSTP/MSTP, Link Aggregation (static & 802.3ad LACP)
- IGMP/MLD Snooping, MVR, multicast filtering
-
Advanced QoS with multiple queue scheduling options
-
Robust Security & Access Control
- IP-MAC-Port Binding (IPv4 & IPv6)
- DHCP Snooping, ARP Inspection, ND Detection
- DoS Defense, Storm Control, Port Security
- 802.1X authentication (port-based, MAC-based), MAB, Guest VLAN
- ACLs (L2–L4, IPv4/IPv6, time-based, packet content)
-
AAA including TACACS+
-
Flexible Management Options
- Omada App (with supported controllers)
- Web-based GUI
- CLI via console port or Telnet/SSH
- SNMP v1/v2c/v3, RMON, SDM templates
- Dual Image & Dual Configuration
-
Batch configuration and firmware upgrade
-
Ready for IPv6 and ISPs
- Dual IPv4/IPv6 stack, IPv6 ACL, MLD Snooping
- sFlow, QinQ, L2PT, PPPoE ID Insertion, IGMP Authentication
- 802.3ah OAM and DLDP for monitoring and troubleshooting
*PoE budget: 500 W total when fully powered as specified.
Hardware Specifications
| Category | Details |
|---|---|
| Model | TL-SG3452XP |
| Interfaces | 48× 10/100/1000 Mbps RJ45 PoE+ ports |
| 4× 10G SFP+ slots | |
| 1× RJ45 console port | |
| 1× Micro-USB console port | |
| PoE Standard | 802.3af/at compliant |
| PoE Ports | 48 PoE+ ports, up to 30 W per port |
| PoE Power Budget | 500 W* |
| Fan Quantity | 3 |
| Power Supply | 100–240 V AC, 50/60 Hz |
| Dimensions (W×D×H) | 17.3 × 13.0 × 1.7 in (440 × 330 × 44 mm) |
| Mounting | Rack-mountable |
| Max Power Consumption | 49.19 W (110 V/60 Hz, no PD connected) |
| 635.7 W (110 V/60 Hz, with 500 W PD connected) | |
| Max Heat Dissipation | 167.85 BTU/hr (110 V/60 Hz, no PD connected) |
| 2169.2 BTU/hr (110 V/60 Hz, with 500 W PD connected) |
Performance
| Parameter | Value |
|---|---|
| Switching Capacity | 176 Gbps |
| Packet Forwarding Rate | 130.9 Mpps |
| MAC Address Table | 16 K |
| Packet Buffer Memory | 12 Mbit |
| Jumbo Frame | 9 KB |
Software Features
Quality of Service (QoS)
- 8 priority queues
- 802.1p CoS/DSCP priority
- Queue scheduling: SP, WRR, SP+WRR
- Bandwidth control: port/flow-based rate limiting
- Flow actions: mirror, redirect, rate limit, QoS remark
L3 Features
- Up to 16 IPv4/IPv6 interfaces
- Static Routing: up to 48 static routes
- Static ARP: up to 128 static entries
- Proxy ARP, Gratuitous ARP
- DHCP Server
- DHCP Relay: Interface, VLAN, and L2 Relay
L2 & L2+ Features
- Link Aggregation
- Static aggregation
- 802.3ad LACP
-
Up to 8 aggregation groups, up to 8 ports per group
-
Spanning Tree Protocol
- 802.1d STP, 802.1w RSTP, 802.1s MSTP
-
STP Security: TC Protect, BPDU Filter, Root Protect
-
Loopback Detection
-
Port-based and VLAN-based
-
Flow Control
- 802.3x Flow Control
-
HOL blocking prevention
-
Mirroring
- Port mirroring, CPU mirroring
- One-to-One, Many-to-One
- Tx/Rx/Both
L2 Multicast
- IGMP Snooping (v1/v2/v3), Fast Leave, Snooping Querier
- IGMP Authentication
- MLD Snooping (v1/v2), Fast Leave, Snooping Querier
- Static group configuration, Limited IP multicast
- MVR
- Multicast filtering: 256 profiles, 16 entries per profile
Advanced Features
- Automatic device discovery
- Batch configuration and firmware upgrading
- Intelligent network monitoring and abnormal event warnings
- Unified configuration
- Reboot schedule
VLAN
- Up to 4K VLAN groups
- 802.1Q Tagged VLAN
- MAC VLAN: 30 entries
- Protocol VLAN: 16 templates, 16 VLANs
- Private VLAN
- GVRP
- VLAN VPN (QinQ): Port-Based QinQ, Selective QinQ
- Voice VLAN
Access Control Lists (ACL)
- Time-based ACL
- MAC ACL: source/destination MAC, VLAN ID, user priority, EtherType
- IP ACL: source/destination IP, fragments, IP protocol, TCP flags, TCP/UDP port, DSCP/IP TOS, user priority
- Combined ACL and packet content ACL
- Policies: mirroring, redirect, rate limit, QoS remark
- ACLs can be applied to ports/VLANs
Security
- IPv4 IP-MAC-Port Binding
- 512 entries
- DHCP Snooping, ARP Inspection
-
IPv4 Source Guard: 100 entries
-
IPv6-MAC-Port Binding
- 512 entries
- DHCPv6 Snooping, ND Detection
-
IPv6 Source Guard: 100 entries
-
DoS Defense
- Static/Dynamic Port Security (up to 64 MAC addresses per port)
- Broadcast/Multicast/Unicast Storm Control (kbps/ratio modes)
- 802.1X (port-based, MAC-based), VLAN assignment, MAB, Guest VLAN
- RADIUS authentication and accounting
- AAA (including TACACS+)
- Port isolation
- Secure HTTPS (SSLv3/TLS 1.2) management
- Secure CLI via SSHv1/SSHv2
- IP/Port/MAC-based access control
IPv6 Support
- Dual IPv4/IPv6
- MLD Snooping
- IPv6 ACL, IPv6 Interface
- Static IPv6 Routing
- IPv6 Neighbor Discovery (ND)
- Path MTU discovery
- ICMPv6, TCPv6/UDPv6
- IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet(v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, HTTP/HTTPS, IPv6 TFTP
ISP-Oriented Features
- sFlow
- QinQ
- L2PT
- PPPoE ID Insertion
- IGMP Authentication
- 802.3ah OAM
- DLDP
MIBs
- MIB II (RFC1213)
- Interface MIB (RFC2233)
- Ethernet Interface MIB (RFC1643)
- Bridge MIB (RFC1493)
- P/Q-Bridge MIB (RFC2674)
- RMON MIB (RFC2819), RMON2 MIB (RFC2021)
- RADIUS Accounting Client MIB (RFC2620)
- RADIUS Authentication Client MIB (RFC2618)
- Remote Ping, Traceroute MIB (RFC2925)
- TP-Link private MIB support
Management
- Omada App
-
Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller
-
Centralized Management
- Omada Cloud-Based Controller
- Omada Hardware Controller (OC300, OC200)
-
Omada Software Controller
-
Cloud Access
-
Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller
-
Zero-Touch Provisioning
-
Requires Omada Cloud-Based Controller
-
Management Features
- Web-based GUI
- CLI via console port, Telnet
- SNMP v1/v2c/v3 (Trap/Inform)
- RMON (1, 2, 3, 9 groups)
- SDM Template
- DHCP/BOOTP Client
- 802.1ab LLDP/LLDP-MED
- DHCP AutoInstall
- Dual Image, Dual Configuration
- CPU Monitoring
- Cable Diagnostics
- EEE
- Password Recovery
- SNTP
- System Log
Certifications
- CE
- FCC
- RoHS
Package Contents
- TL-SG3452XP Switch
- Power Cord
- Quick Installation Guide
- Rackmount Kit
- Rubber Feet
System Requirements
- Microsoft Windows 98SE, NT, 2000, XP, Vista, 7, 8, 10, 11
- MAC OS
- NetWare
- UNIX
- Linux
Environmental
- Operating Temperature: 0–40 °C (32–104 °F)
- Storage Temperature: -40–70 °C (-40–158 °F)
- Operating Humidity: 10–90% RH, non-condensing
- Storage Humidity: 5–90% RH, non-condensing
