Description
Enterprise 24-Port 2.5G PoE++ L2+ Managed Switch with 4×10G SFP+ Uplinks and Omada SDN
The TP-Link TL-SG3428XPP-M2 is a JetStream L2+ fully managed switch that combines 24 multi-gigabit 2.5GBASE-T ports — including 16 PoE+ and 8 PoE++ ports — with four 10G SFP+ uplink slots in a rack-mountable chassis. Designed for high-density Wi-Fi 6/6E access point deployments, advanced IP surveillance networks, and enterprise campus infrastructure, it delivers the 2.5G per-port throughput needed to fully utilise Wi-Fi 6 APs, the high PoE++ budget for power-hungry devices, and the full Omada SDN feature set for centralised cloud management across Australia.
Key Features
-
24× 2.5GBASE-T Ports: All 24 ports operate at up to 2.5Gbps — providing the multi-gigabit throughput required to fully utilise Wi-Fi 6 and Wi-Fi 6E access points that exceed 1Gbps aggregate throughput.
-
16× PoE+ Ports (802.3at) + 8× PoE++ Ports (802.3bt): Powers a full range of PoE devices — PoE++ (up to 90W per port) supports high-power devices such as Wi-Fi 6E APs, PTZ cameras, digital signage, and thin clients.
-
4× 10G SFP+ Uplink Slots: 10 Gigabit fibre or DAC uplinks to core switches for high-bandwidth, low-latency backbone connectivity.
-
Omada SDN Integration: Centrally manage alongside Omada routers and access points via cloud or local controller — with Zero-Touch Provisioning (ZTP) for rapid remote deployment across multiple sites.
-
L2+ Static Routing: Routes inter-VLAN traffic without a dedicated router, improving efficiency in segmented networks with multiple VLANs.
-
L2/L3/L4 QoS with 8 Priority Queues: Advanced traffic prioritisation with SP, WRR, and SP+WRR scheduling — ensures smooth Wi-Fi 6 AP traffic, IP camera feeds, and VoIP calls under heavy load.
-
IGMP Snooping: Optimises multicast traffic for IP camera streams and IPTV, reducing unnecessary bandwidth consumption across the network.
-
Enterprise Security Suite: IP-MAC-Port Binding, ACL (L2–L4), Port Security, DoS Defence, Storm Control, DHCP Snooping, 802.1X, RADIUS/TACACS+ Authentication.
-
IPv6 Ready: Full IPv6 support including Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, and IPv6 Neighbour Discovery — future-proofing your network infrastructure.
-
ISP-Grade Features: 802.3ah OAM, DDM (Digital Diagnostic Monitoring), sFlow, QinQ, L2PT, PPPoE ID Insertion, and IGMP Authentication for carrier and ISP deployments.
-
Enterprise Management: Web GUI, CLI (Console, Telnet, SSH), SNMP v1/v2c/v3, RMON, Dual Image, and Dual Configuration for maximum uptime and flexibility.
-
Link Aggregation (LACP): 802.3ad LACP for bonding multiple ports into high-bandwidth uplinks with redundancy.
-
Rack Mountable: Standard 19-inch rack form factor for professional installation in comms cabinets and server rooms.
Common Use Cases
- High-density Wi-Fi 6/6E deployments where APs require 2.5G uplinks to avoid bottlenecks
- Enterprise campus networks with mixed PoE+, PoE++, and non-PoE device requirements
- Large-scale IP CCTV systems with high-power PTZ cameras requiring PoE++ (up to 90W)
- Digital signage and thin client deployments requiring PoE++ power delivery
- Multi-site business networks managed centrally via Omada cloud with ZTP
- ISP and carrier edge deployments requiring OAM, QinQ, and sFlow
Technical Specifications
| Model |
TL-SG3428XPP-M2 |
| RJ45 Ports |
24× 2.5GBASE-T (100M/1G/2.5G) |
| PoE+ Ports (802.3at) |
16× (Ports 1–16, up to 30W per port) |
| PoE++ Ports (802.3bt) |
8× (Ports 17–24, up to 90W per port) |
| SFP+ Uplink Slots |
4× 10G SFP+ |
| QoS |
L2/L3/L4, 8 priority queues, SP/WRR/SP+WRR, 802.1p CoS/DSCP |
| IGMP Snooping |
Yes |
| VLAN |
802.1Q, Voice VLAN, Private VLAN, QinQ |
| Static Routing |
Yes (L2+ inter-VLAN routing) |
| Security |
IP-MAC-Port Binding, ACL L2–L4, DoS Defence, DHCP Snooping, 802.1X, RADIUS/TACACS+ |
| SDN Management |
Omada SDN (cloud & local controller) |
| Zero-Touch Provisioning |
Yes (ZTP via Omada) |
| Standalone Management |
Web GUI, CLI (Console/Telnet/SSH), SNMP v1/v2c/v3, RMON, Dual Image |
| Spanning Tree |
STP, RSTP, MSTP |
| Link Aggregation |
Yes (802.3ad LACP) |
| ISP Features |
802.3ah OAM, DDM, sFlow, QinQ, L2PT, PPPoE ID Insertion |
| IPv6 |
Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping |
| Mounting |
Rack mountable (19″) |
| Weight |
6.1kg |
Downloads
Frequently Asked Questions
Why does this switch have 2.5G ports instead of standard Gigabit?
Wi-Fi 6 and Wi-Fi 6E access points can aggregate more than 1Gbps of wireless throughput from connected clients. A standard Gigabit uplink port creates a bottleneck that limits the AP's performance. The TL-SG3428XPP-M2's 2.5GBASE-T ports provide up to 2.5Gbps per port — eliminating this bottleneck and allowing Wi-Fi 6 APs to operate at full capacity. This is the primary reason to choose this switch over a standard Gigabit PoE switch for Wi-Fi 6 deployments.
What is the difference between PoE+ (802.3at) and PoE++ (802.3bt)?
PoE+ (802.3at) delivers up to 30W per port — sufficient for most IP cameras, standard Wi-Fi 6 APs, and VoIP phones. PoE++ (802.3bt) delivers up to 90W per port — required for high-power devices such as Wi-Fi 6E tri-band APs, PTZ cameras, digital signage displays, and thin clients. The TL-SG3428XPP-M2 provides 16 PoE+ ports and 8 PoE++ ports to support mixed deployments.
What is the difference between the TL-SG3428XPP-M2 and the TL-SG3428XMP?
The TL-SG3428XPP-M2 has 24× 2.5G ports (vs 24× 1G on the TL-SG3428XMP), includes 8× PoE++ ports at up to 90W (vs PoE+ only at 30W max), and supports ISP-grade features (OAM, sFlow, QinQ). The TL-SG3428XMP has a 384W PoE budget and is the better choice for standard Gigabit PoE+ deployments at a lower price point. Choose the TL-SG3428XPP-M2 for Wi-Fi 6/6E deployments requiring 2.5G uplinks and high-power PoE++ devices.
What is Omada SDN and do I need a controller?
Omada SDN is TP-Link's centralised network management platform. The TL-SG3428XPP-M2 can be managed via the Omada cloud (no hardware controller required), a hardware Omada controller (OC300/OC200), or a software controller on a local server. Zero-Touch Provisioning (ZTP) allows the switch to be pre-configured in the cloud and automatically download its configuration when connected on site.
What TP-Link access points are recommended to pair with this switch?
The TL-SG3428XPP-M2 is ideal for pairing with TP-Link Omada Wi-Fi 6 and Wi-Fi 6E access points that support 2.5G uplinks, such as the EAP670, EAP680, and EAP683. These APs can take full advantage of the 2.5G port speed and PoE++ power delivery. All are managed centrally via the same Omada SDN platform.
