Description
TP-Link TL-SG3428X-M2 JetStream 24-Port 2.5G L2+ Managed Switch with 4-Port 10GE SFP+
The TP-Link TL-SG3428X-M2 is a professional 24-port 2.5GBASE-T L2+ managed switch designed for enterprise, campus, and high-density Wi-Fi 6/6E deployments across Australia. With 24 × 2.5G multi-gigabit RJ45 ports, four 10GE SFP+ uplink slots, full Omada SDN integration, and a comprehensive L2+ feature set, it provides the multi-gigabit access layer switching required to eliminate the 1Gbps bottleneck between Wi-Fi 6 access points and the core network — without the cost of a full 10GE access switch.
Key Features
-
24 × 2.5GBASE-T RJ45 Ports — Multi-gigabit 2.5G access ports with backward compatibility for 10/100/1000Mbps devices — ideal for connecting Wi-Fi 6 APs that aggregate more than 1Gbps of wireless throughput per radio.
-
4 × 10GE SFP+ Uplink Slots — Non-blocking 10G fibre or DAC uplinks to core switches and servers for maximum throughput under full load.
-
L2+ Feature Set — Comprehensive L2 and L2+ features including Static Routing, 802.1Q VLAN, RSTP/MSTP, LACP Link Aggregation, Port Mirroring, IGMP Snooping, and Loopback Detection.
-
Enterprise QoS — Prioritise voice, video, and critical traffic by IP address, MAC address, TCP/UDP port, and VLAN ID for consistent performance across all 24 ports under load.
-
Robust Security — IP-MAC-Port-VID Binding, 802.1X authentication (RADIUS/TACACS+), ACL (L2–L4), DHCP Snooping, Port Security, Storm Control, and DoS prevention.
-
Omada SDN Integration — Centrally manage the switch alongside Omada APs and routers from the Omada Controller, cloud portal, or Omada app for 100% centralised network management.
-
Standalone Management — Web UI (GUI), CLI (Console, Telnet, SSH), SNMP (v1/v2c/v3), RMON, and Dual Image/Dual Configuration for full enterprise-grade standalone management.
-
ISP Features — 802.3ah OAM, DDM, sFlow, QinQ, L2PT, PPPoE ID Insertion, IGMP authentication, and DLDP for service provider and carrier-grade deployments.
-
Cable Diagnostics — Built-in cable diagnostic tool for troubleshooting Ethernet cable faults without additional test equipment.
-
IPv6 Ready — Full IPv6 support including Dual Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, and IPv6 Neighbour Discovery.
Use Cases
- Enterprise and campus networks requiring 2.5G access layer switching to eliminate the 1Gbps bottleneck for Wi-Fi 6 and Wi-Fi 6E access points
- High-density Wi-Fi 6 deployments in hotels, conference centres, and education facilities where each AP aggregates more than 1Gbps of wireless client throughput
- Omada SDN deployments requiring a multi-gigabit managed access switch integrated into centralised cloud management
- Server room and data centre edge switching requiring 2.5G access ports and 10GE SFP+ uplinks for NAS, servers, and workstations
- ISP and service provider aggregation networks requiring QinQ, sFlow, OAM, and DDM features at the access layer
- Network upgrades from Gigabit to multi-gigabit infrastructure using existing Cat5e/Cat6 cabling — 2.5GBASE-T runs at full speed on Cat5e up to 100 metres
Technical Specifications
| Specification |
Detail |
| Model |
TL-SG3428X-M2 |
| RJ45 Ports |
24 × 2.5GBASE-T (10/100/1000/2500Mbps) |
| SFP+ Uplinks |
4 × 10GE SFP+ |
| Switch Type |
L2+ Managed (JetStream) |
| L2+ Features |
Static Routing, 802.1Q VLAN, RSTP/MSTP, LACP, Port Mirroring, IGMP Snooping, Loopback Detection, Cable Diagnostics |
| Security |
802.1X (RADIUS/TACACS+), ACL (L2–L4), DHCP Snooping, IP-MAC-Port-VID Binding, Storm Control, DoS Prevention |
| Management |
Web UI, CLI (Console/Telnet/SSH), SNMP v1/v2c/v3, RMON, Dual Image, Dual Config; Omada SDN (cloud & on-premises) |
| ISP Features |
802.3ah OAM, DDM, sFlow, QinQ, L2PT, PPPoE ID Insertion, IGMP Auth, DLDP |
| IPv6 |
Dual Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 ND |
| Form Factor |
1U Rackmount (19-inch) |
| Weight |
3.0 kg |
| Warranty |
2 Years |
Recommended Accessories
-
TP-Link EAP655-Wall AX3000 Wi-Fi 6 Wall Plate AP — Connect to the TL-SG3428X-M2’s 2.5G ports for full multi-gigabit backhaul to Wi-Fi 6 wall plate APs in hotel and office per-room deployments.
-
TP-Link Deco X50-PoE AX3000 Wi-Fi 6 Mesh Node — Pair with the TL-SG3428X-M2 for 2.5G wired backhaul to ceiling-mounted Deco mesh nodes across a floor or building.
-
TP-Link Omada ER7212PC 3-in-1 VPN Router — Pair as the core router and Omada controller in a complete Omada SDN deployment, with the TL-SG3428X-M2 as the 2.5G access layer switch.
-
10GE SFP+ DAC Cable or Fibre Module — For connecting the TL-SG3428X-M2 to a core switch or server via the SFP+ uplink slots at full 10G speed.
-
Cat6 Ethernet Cable — Supports 2.5GBASE-T at full speed on Cat6 up to 100 metres; Cat5e also supports 2.5G up to 100 metres.
Downloads
Frequently Asked Questions
Why do I need 2.5G switching for Wi-Fi 6 access points?
Wi-Fi 6 access points can aggregate wireless throughput from multiple clients exceeding 1Gbps on a single AP. A standard 1G uplink port creates a bottleneck that limits the AP’s real-world performance. The TL-SG3428X-M2’s 2.5G ports eliminate this bottleneck at a lower cost than full 10GE access switching — making it the ideal mid-tier upgrade for high-density Wi-Fi 6 deployments.
Does 2.5GBASE-T work on existing Cat5e and Cat6 cabling?
Yes. 2.5GBASE-T is specifically designed to run at 2.5Gbps on existing Cat5e and Cat6 cabling up to 100 metres — the same distance as standard Gigabit Ethernet. This makes the TL-SG3428X-M2 an ideal upgrade path for buildings already cabled with Cat5e or Cat6, without requiring a full recabling project.
Does the TL-SG3428X-M2 require an Omada Controller?
No. The TL-SG3428X-M2 supports full standalone management via web UI, CLI (Console, Telnet, SSH), SNMP, and RMON without any controller. Omada SDN integration is optional and adds centralised multi-device management, cloud access, and the Omada app interface — recommended for large deployments with multiple switches and APs.
What is the difference between the TL-SG3428X-M2 and the TL-SG3452XP?
The TL-SG3428X-M2 provides 24 × 2.5G multi-gigabit access ports without PoE, making it suited for environments where PoE is not required or where PoE is handled by a separate switch. The TL-SG3452XP provides 48 × Gigabit PoE+ ports with a 500W budget, suited for large-scale PoE device deployments. Choose the TL-SG3428X-M2 when multi-gigabit speed per port is the priority; choose the TL-SG3452XP when PoE port count and budget are the priority.
What SFP+ modules or cables are compatible with the uplink slots?
The four SFP+ slots support standard 10GE SFP+ modules including TP-Link’s own SFP+ transceivers (single-mode and multi-mode fibre) and DAC (Direct Attach Copper) cables. Check TP-Link’s compatibility list for third-party SFP+ module support.
