10G lightning-fast uplink: 4 × 10 Gbps SFP+ slots enable high-bandwidth connectivity and non-blocking switching performance.
384 W PoE budget: 24 × 802.3at/af-compliant PoE+ ports with a total power of 384 W*.
Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)**, centralized cloud management, and intelligent monitoring.
Centralized Management: Cloud access and Omada app for ultimate convenience and easy management.
Static routing: Helps route internal traffic for more efficient use of network resources.
Robust security strategies: IP-MAC-port binding, ACL, port security, DoS protection, storm control, DHCP snooping, 802.1X, radio authentication, and more.
Optimize voice and video applications: L2/L3/L4 QoS and IGMP snooping.
Independent management: Web, CLI (console port, Telnet, SSH), SNMP, RMON, and dual image provide powerful management capabilities.

HARDWARE FEATURES
Interface • 24 × 10/100/1000 Mbps RJ45 ports
• 4× 10G SFP+ slots
• 1× RJ45 console port
• 1 × Micro-USB console port
Number of fans 2
Power supply 100-240 V AC~50/60 Hz
PoE+ ports (RJ45) • Standard: compliant with 802.3at/af
• PoE+ ports: 24 ports, up to 30 W per port
• Power budget: 384 W
Dimensions (W x D x H) 17.3 × 13.0 × 1.7 in (440 × 330 × 44 mm)
Rack mountable
Maximum power consumption • V1: 465.8 W (110 V/60 Hz) (with 384 W PD device connected); 34.4 W (110 V/60 Hz) (no PD device connected)
• V2: 455.5 W (110 V/60 Hz) (with 384 W PD device connected)
Maximum heat dissipation • V1: 1589.31 BTU/h (110 V/60 Hz) (with 384 W PD device connected); 117.38 BTU/h (110 V/60 Hz) (no PD device connected)
• V2: 1554.39 BTU/hour (110 V/60 Hz) (with 384 W PD connected)
PERFORMANCE
Switching capacity 128 Gbps
Packet forwarding rate 95.23 Mpps
MAC address table 16 K
Packet buffer 12 Mbit
Jumbo frame 9 KB
SOFTWARE FEATURES
Quality of service • 8 priority queues
• 802.1p CoS/DSCP priority
• Queue scheduling
– SP (strict priority)
– WRR (weighted round robin)
– SP+WRR
• Bandwidth control
– Rate limiting based on port/flow
• Smoother operation
• Action for flows
– Mirror (on supported interface)
– Redirect (on supported interface)
– Rate limiting
– QoS note
L2 and L2+ features • Link aggregation
– Static link aggregation
– 802.3ad LACP
– Up to 8 aggregation groups, each containing 8 ports
• Spanning Tree Protocol
– 802.1d STP
– 802.1w RSTP
– 802.1s MSTP
– STP security: TC Protect, BPDU Filter, Root Protect
• Loop detection
– Port-based
– Based on VLAN
• Flow control
– 802.3x flow control
– HOL blocking prevention
• Mirroring
– Port mirroring
– Processor mirroring
– One-to-one
– Many-to-one
– Tx/Rx/both
L2 Multicast • IGMP Snooping
– IGMP snooping v1/v2/v3
– Fast Leave
– IGMP Snooping Querier
– IGMP Authentication
• IGMP Authentication
• MLD snooping
– MLD v1/v2 snooping
– Fast Leave
– MLD Snooping Querier
– Static group configuration
– Limited IP Multicast
• MVR
• Multicast Filtering: 256 profiles and 16 entries per profile
VLAN • VLAN group
– Maximum 4K VLAN groups
• 802.1Q tagged VLAN
• MAC VLAN: 30 entries
• VLAN Protocol: Protocol Template 16, Protocol VLAN 16
• Private VLAN
• GVRP
• VLAN VPN (QinQ)
– Port-based QinQ
– Selective QinQ
• Voice VLAN
Access control list • Time-based ACL
• MAC ACL
– MAC source
– Destination MAC
– VLAN ID
– User priority
– Ether Type
• IP ACL
– Source IP
– Destination IP
– Fragment
– IP protocol
– TCP flag
– TCP/UDP port
– TOS DSCP/IP
– User priority
• Combined ACL
• ACL packet content
• IPv6 ACL
• Policy
– Mirroring
– Redirect
– Rate limiting
– QoS note
• ACL applies to port/VLAN
Security • IP-MAC-Port Binding
– 512 entries
– DHCP snooping
– ARP inspection
– IPv4 Source Guard: 100 entries
• IPv6-MAC-Port Binding
– 512 entries
– DHCPv6 Snooping
– ND Detection
– IPv6 Source Guard: 100 entries
• DoS Protection
• Static/dynamic port security
– Up to 64 MAC addresses per port
• Broadcast/Multicast/Unicast Storm Control
– kbps/ratio control mode
• 802.1X
– Basic port authentication
– Basic Mac authentication
– VLAN assignment
– MAB
– Guest VLAN
– Supports Radius authentication and accountability
• AAA (including TACACS+)
• Port isolation
• Secure web management via HTTPS with SSLv3/TLS 1.2
• Secure command line interface (CLI) management via SSHv1/SSHv2
• IP/port/MAC-based access control
IPv6 • IPv6 Dual IPv4/IPv6
• Snooping on multicast listener discovery (MLD).
• IPv6 ACL
• IPv6 interface
• Static IPv6 routing
• IPv6 Neighbor Discovery (ND)
• Maximum Transmission Unit (MTU) discovery.
• Internet Control Message Protocol (ICMP), version 6
• TCPv6/UDPv6
• IPv6 applications
– DHCPv6 client
– Ping6
– Tracert6
– Telnet (v6)
– IPv6 SNMP
– IPv6 SSH
– IPv6 SSL
– Http/Https
– IPv6 TFTP
L3 features • 16 IPv4/IPv6 interfaces
• Static routing
– 48 static routes
• Static ARP
– 128 static entries
• Proxy ARP
• Free ARP
• DHCP server
• DHCP Relay
– DHCP interface relay
– DHCP VLAN Relay
• DHCP L2 Relay
Advanced features • Automatic device discovery
• Batch configuration
• Firmware upgrade
• Intelligent network monitoring
• Abnormal event alerts
• Unified configuration
• Reboot schedule
MIB • MIB II (RFC1213)
• MIB interface (RFC2233)
• Ethernet interface MIB (RFC1643)
• Bridge MIB (RFC1493)
• P/Q-Bridge MIB (RFC2674)
• RMON MIB (RFC2819)
• RMON2 MIB (RFC2021)
• Radius Accounting Client MIB (RFC2620)
• Radius Authentication Client MIB (RFC2618)
• Remote Ping, Traceroute MIB (RFC2925)
• Supports TP-Link private MIB
MANAGEMENT
Omada App Yes. Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management • Omada Cloud Controller
• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller
Cloud access Yes. Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Touchless Enablement Yes. Requires the use of Omada Cloud-Based Controller.
Management Functions • Web

GUI
• Command line interface (CLI) via console port, telnet
• SNMP v1/v2c/v3
– Trap/Inform
– RMON (groups 1,2,3,9)
• SDM template
• DHCP/BOOTP client
• 802.1ab LLDP/LLDP-MED
• DHCP auto-configuration
• Dual image, dual configuration
• Processor monitoring
• Cable diagnostics
• EEE
• Password reset
• SNTP
• System log
OTHER
Certification CE, FCC, RoHS
Package contents • TL-SG3428XMP switch
• Power cable
• Quick Installation Guide
• Rack mount kit
• Rubber feet
System requirements Microsoft® Windows® 98SE, NT, 2000, XP, Vista™, or Windows 7/8/10/11, MAC® OS, NetWare®, UNIX®, or Linux.
Environment • Operating temperature: 0–45 ℃ (32–113 ℉);
• Storage temperature: -40–70 ℃ (-40–158 ℉)
• Operating humidity: 10–90% RH without condensation
• Storage humidity: 5–90% RH without condensation