Description
Enterprise-Grade 24-Port PoE+ L2+ Managed Switch with 10G SFP+ Uplinks and Omada SDN
The TP-Link TL-SG3428XMP is a JetStream L2+ fully managed switch that combines 24 Gigabit PoE+ ports, a 384W power budget, and four 10G SFP+ uplink slots in a rack-mountable 1U chassis. With 128Gbps non-blocking switching capacity, Omada SDN cloud management, Zero-Touch Provisioning, and a comprehensive security and QoS feature set, it is purpose-built for large-scale CCTV deployments, enterprise Wi-Fi networks, and multi-site business infrastructure across Australia where performance, control, and scalability are non-negotiable.
Key Features
-
24× Gigabit PoE+ Ports (802.3at/af): Power and connect IP cameras, wireless access points, VoIP phones, and other PoE/PoE+ devices at up to 30W per port across all 24 ports simultaneously.
-
384W Total PoE Budget: One of the highest PoE budgets in its class — supports large mixed deployments of PoE and PoE+ devices with significant headroom.
-
4× 10G SFP+ Uplink Slots: 10 Gigabit fibre or DAC uplinks to core switches, providing high-bandwidth, low-latency backbone connectivity for video-heavy networks.
-
128 Gbps Switching Capacity: Fully non-blocking switching fabric handles simultaneous 10G uplinks and 24-port Gigabit PoE+ traffic without bottlenecks.
-
Omada SDN Integration: Centrally manage alongside Omada access points and routers via cloud or local controller — with Zero-Touch Provisioning (ZTP) for rapid remote deployment across multiple sites.
-
L2+ Managed with Static Routing: Routes inter-VLAN traffic without a dedicated router, improving efficiency in segmented networks. Full L2 feature set including STP, RSTP, MSTP, Link Aggregation, and port mirroring.
-
L2/L3/L4 QoS with 8 Priority Queues: Advanced traffic prioritisation with SP, WRR, and SP+WRR scheduling — ensures smooth, uninterrupted IP camera feeds, VoIP calls, and IPTV streams under heavy load.
-
IGMP Snooping: Optimises multicast traffic for IP camera streams and IPTV, reducing unnecessary bandwidth consumption across the network.
-
Robust Security Suite: IP-MAC-Port Binding, ACL, Port Security, DoS Defence, Storm Control, DHCP Snooping, 802.1X, and RADIUS Authentication protect against unauthorised access and network attacks.
-
802.1Q VLAN: Segment camera traffic, staff devices, guest networks, and IoT devices onto separate logical networks for improved security and performance.
-
Standalone Management: Web UI, CLI (Console Port, Telnet, SSH), SNMP, RMON, and Dual Image support for enterprise-grade standalone management without Omada.
-
Rack Mountable (1U): Standard 19-inch rack form factor (440 × 330 × 44mm) for professional installations in comms cabinets and server rooms.
Common Use Cases
- Large-scale IP CCTV systems with 24 cameras and 10G NVR uplinks
- Enterprise Wi-Fi deployments with multiple Omada access points managed centrally
- Multi-site business networks managed via Omada cloud with ZTP for remote deployment
- High-density VoIP phone networks for medium to large businesses
- Distribution or aggregation switch in multi-floor or multi-building network architectures
- Networks requiring inter-VLAN routing without a dedicated Layer 3 router
Technical Specifications
| Model |
TL-SG3428XMP |
| RJ45 Ports |
24× 10/100/1000Mbps (all PoE+) |
| SFP+ Uplink Slots |
4× 10G SFP+ |
| Console Ports |
1× RJ45, 1× Micro-USB |
| PoE Standard |
IEEE 802.3at (PoE+) / 802.3af (PoE) |
| Total PoE Budget |
384W |
| Switching Capacity |
128 Gbps |
| Packet Forwarding Rate |
95.23 Mpps |
| MAC Address Table |
16K |
| Jumbo Frame |
9KB |
| QoS |
L2/L3/L4, 8 priority queues, SP/WRR/SP+WRR, 802.1p CoS/DSCP |
| IGMP Snooping |
Yes |
| VLAN |
802.1Q VLAN, Voice VLAN, Private VLAN, Protocol VLAN |
| Static Routing |
Yes (L2+ inter-VLAN routing) |
| Security |
IP-MAC-Port Binding, ACL, DoS Defence, DHCP Snooping, 802.1X, RADIUS |
| SDN Management |
Omada SDN (cloud & local controller) |
| Zero-Touch Provisioning |
Yes (ZTP via Omada) |
| Standalone Management |
Web UI, CLI (Telnet/SSH/Console), SNMP, RMON, Dual Image |
| Spanning Tree |
STP, RSTP, MSTP |
| Link Aggregation |
Yes (802.3ad LACP) |
| Fans |
2× (active cooling) |
| Mounting |
Rack mountable (19″, 1U) |
| Dimensions (W × D × H) |
440 × 330 × 44mm |
| Power Supply |
100–240V AC, 50/60Hz (internal) |
| Max Power Consumption |
34.4W (no PD) / 465.8W (full PoE load) |
Frequently Asked Questions
What is the difference between the TL-SG3428XMP and the TL-SG2428P?
The TL-SG3428XMP is a full L2+ managed switch with 10G SFP+ uplinks, a 384W PoE budget, 128Gbps switching capacity, CLI management (SSH/Telnet/Console), SNMP, RMON, Link Aggregation, and advanced QoS with 8 priority queues. The TL-SG2428P is a smart managed switch with Gigabit SFP uplinks, a 250W budget, and a simpler web-only management interface. Choose the TL-SG3428XMP for enterprise deployments requiring 10G uplinks, CLI access, and advanced L2+ features.
What is Omada SDN and do I need a controller?
Omada SDN is TP-Link's centralised network management platform. The TL-SG3428XMP can be managed via the Omada cloud (no hardware controller required), a hardware Omada controller (OC300/OC200), or a software controller on a local server. For standalone deployments, it can also be managed independently via web UI, CLI, or SNMP without any Omada controller.
What are the 10G SFP+ slots used for?
The four 10G SFP+ slots accept 10G SFP+ transceivers (e.g. TL-SM5110-LR for fibre) or 10G DAC cables (e.g. TL-SM5220-1M) for high-bandwidth uplink connections to a core switch, NVR, or server. 10G uplinks are essential in large CCTV deployments where multiple 4K or 8MP camera streams are aggregated to a single NVR.
How many PoE cameras can I connect?
Up to 24 IP cameras can be connected via the PoE+ ports. With a 384W budget, the switch comfortably supports 24 cameras drawing up to 16W each (384W total). For higher-power PTZ or PoE+ cameras, calculate your total load to stay within the 384W budget.
Does it support inter-VLAN routing without a separate router?
Yes. The TL-SG3428XMP supports static routing (L2+), allowing it to route traffic between VLANs internally — eliminating the need for a dedicated Layer 3 router in many deployments. This is useful for separating camera traffic, staff devices, and guest networks while still allowing controlled inter-VLAN communication.
Can I manage it via command line (CLI)?
Yes. The TL-SG3428XMP supports CLI management via the RJ45 console port, Micro-USB console port, Telnet, and SSH — providing enterprise-grade command-line access for advanced configuration, scripting, and troubleshooting. It also supports SNMP v1/v2c/v3 and RMON for integration with network management systems.
