Enterprise-Grade 24-Port PoE+ L2+ Managed Switch with 10G SFP+ Uplinks and Omada SDN
The TP-Link TL-SG3428XMP is a JetStream L2+ fully managed switch that combines 24 Gigabit PoE+ ports, a 384W power budget, and four 10G SFP+ uplink slots in a rack-mountable 1U chassis. With 128Gbps non-blocking switching capacity, Omada SDN cloud management, Zero-Touch Provisioning, and a comprehensive security and QoS feature set, it is purpose-built for large-scale CCTV deployments, enterprise Wi-Fi networks, and multi-site business infrastructure across Australia where performance, control, and scalability are non-negotiable.
Key Features
24× Gigabit PoE+ Ports (802.3at/af): Power and connect IP cameras, wireless access points, VoIP phones, and other PoE/PoE+ devices at up to 30W per port across all 24 ports simultaneously.
384W Total PoE Budget: One of the highest PoE budgets in its class — supports large mixed deployments of PoE and PoE+ devices with significant headroom.
4× 10G SFP+ Uplink Slots: 10 Gigabit fibre or DAC uplinks to core switches, providing high-bandwidth, low-latency backbone connectivity for video-heavy networks.
128 Gbps Switching Capacity: Fully non-blocking switching fabric handles simultaneous 10G uplinks and 24-port Gigabit PoE+ traffic without bottlenecks.
Omada SDN Integration: Centrally manage alongside Omada access points and routers via cloud or local controller — with Zero-Touch Provisioning (ZTP) for rapid remote deployment across multiple sites.
L2+ Managed with Static Routing: Routes inter-VLAN traffic without a dedicated router, improving efficiency in segmented networks. Full L2 feature set including STP, RSTP, MSTP, Link Aggregation, and port mirroring.
L2/L3/L4 QoS with 8 Priority Queues: Advanced traffic prioritisation with SP, WRR, and SP+WRR scheduling — ensures smooth, uninterrupted IP camera feeds, VoIP calls, and IPTV streams under heavy load.
IGMP Snooping: Optimises multicast traffic for IP camera streams and IPTV, reducing unnecessary bandwidth consumption across the network.
Robust Security Suite: IP-MAC-Port Binding, ACL, Port Security, DoS Defence, Storm Control, DHCP Snooping, 802.1X, and RADIUS Authentication protect against unauthorised access and network attacks.
802.1Q VLAN: Segment camera traffic, staff devices, guest networks, and IoT devices onto separate logical networks for improved security and performance.
Standalone Management: Web UI, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image support for enterprise-grade standalone management without Omada.
Rack Mountable (1U): Standard 19-inch rack form factor (440 × 330 × 44mm) for professional installations in comms cabinets and server rooms.
Common Use Cases
Large-scale IP CCTV systems with 24 cameras and 10G NVR uplinks
Enterprise Wi-Fi deployments with multiple Omada access points managed centrally
Multi-site business networks managed via Omada cloud with ZTP for remote deployment
High-density VoIP phone networks for medium to large businesses
Distribution or aggregation switch in multi-floor or multi-building network architectures
Networks requiring inter-VLAN routing without a dedicated Layer 3 router
Technical Specifications
Model
TL-SG3428XMP
RJ45 Ports
24× 10/100/1000Mbps (all PoE+)
SFP+ Uplink Slots
4× 10G SFP+
Console Ports
1× RJ45, 1× Micro-USB
PoE Standard
IEEE 802.3at (PoE+) / 802.3af (PoE)
Total PoE Budget
384W
Switching Capacity
128 Gbps
Packet Forwarding Rate
95.23 Mpps
MAC Address Table
16K
Jumbo Frame
9KB
QoS
L2/L3/L4, 8 priority queues, SP/WRR/SP+WRR, 802.1p CoS/DSCP
IGMP Snooping
Yes
VLAN
802.1Q VLAN, Voice VLAN, Private VLAN, Protocol VLAN
Static Routing
Yes (L2+ inter-VLAN routing)
Security
IP-MAC-Port Binding, ACL, DoS Defence, DHCP Snooping, 802.1X, RADIUS
SDN Management
Omada SDN (cloud & local controller)
Zero-Touch Provisioning
Yes (ZTP via Omada)
Standalone Management
Web UI, CLI (Telnet/SSH/Console), SNMP, RMON, Dual Image
Spanning Tree
STP, RSTP, MSTP
Link Aggregation
Yes (802.3ad LACP)
Fans
2× (active cooling)
Mounting
Rack mountable (19″, 1U)
Dimensions (W × D × H)
440 × 330 × 44mm
Power Supply
100–240V AC, 50/60Hz (internal)
Max Power Consumption
34.4W (no PD) / 465.8W (full PoE load)
Frequently Asked Questions
What is the difference between the TL-SG3428XMP and the TL-SG2428P?
The TL-SG3428XMP is a full L2+ managed switch with 10G SFP+ uplinks, a 384W PoE budget, 128Gbps switching capacity, CLI management (SSH/Telnet/Console), SNMP, RMON, Link Aggregation, and advanced QoS with 8 priority queues. The TL-SG2428P is a smart managed switch with Gigabit SFP uplinks, a 250W budget, and a simpler web-only management interface. Choose the TL-SG3428XMP for enterprise deployments requiring 10G uplinks, CLI access, and advanced L2+ features.
What is Omada SDN and do I need a controller?
Omada SDN is TP-Link's centralised network management platform. The TL-SG3428XMP can be managed via the Omada cloud (no hardware controller required), a hardware Omada controller (OC300/OC200), or a software controller on a local server. For standalone deployments, it can also be managed independently via web UI, CLI, or SNMP without any Omada controller.
What are the 10G SFP+ slots used for?
The four 10G SFP+ slots accept 10G SFP+ transceivers (e.g. TL-SM5110-LR for fibre) or 10G DAC cables (e.g. TL-SM5220-1M) for high-bandwidth uplink connections to a core switch, NVR, or server. 10G uplinks are essential in large CCTV deployments where multiple 4K or 8MP camera streams are aggregated to a single NVR.
How many PoE cameras can I connect?
Up to 24 IP cameras can be connected via the PoE+ ports. With a 384W budget, the switch comfortably supports 24 cameras drawing up to 16W each (384W total). For higher-power PTZ or PoE+ cameras, calculate your total load to stay within the 384W budget.
Does it support inter-VLAN routing without a separate router?
Yes. The TL-SG3428XMP supports static routing (L2+), allowing it to route traffic between VLANs internally — eliminating the need for a dedicated Layer 3 router in many deployments. This is useful for separating camera traffic, staff devices, and guest networks while still allowing controlled inter-VLAN communication.
Can I manage it via command line (CLI)?
Yes. The TL-SG3428XMP supports CLI management via the RJ45 console port, Micro-USB console port, Telnet, and SSH — providing enterprise-grade command-line access for advanced configuration, scripting, and troubleshooting. It also supports SNMP v1/v2c/v3 and RMON for integration with network management systems.
Read
more
less