{"product_id":"tp-link-tl-sg3428xpp-m2-24-port-2-5g-l2-plus-managed-poe-plus-plus-switch","title":"TP-Link TL-SG3428XPP-M2 JetStream 24-Port 2.5G L2+ Managed PoE++ Switch with 4×10G SFP+","description":"\u003ch2\u003eEnterprise 24-Port 2.5G PoE++ L2+ Managed Switch with 4×10G SFP+ Uplinks and Omada SDN\u003c\/h2\u003e\n\n\u003cp\u003eThe TP-Link TL-SG3428XPP-M2 is a JetStream L2+ fully managed switch that combines 24 multi-gigabit 2.5GBASE-T ports — including 16 PoE+ and 8 PoE++ ports — with four 10G SFP+ uplink slots in a rack-mountable chassis. Designed for high-density Wi-Fi 6\/6E access point deployments, advanced IP surveillance networks, and enterprise campus infrastructure, it delivers the 2.5G per-port throughput needed to fully utilise Wi-Fi 6 APs, the high PoE++ budget for power-hungry devices, and the full Omada SDN feature set for centralised cloud management across Australia.\u003c\/p\u003e\n\n\u003ch2\u003eKey Features\u003c\/h2\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003e24× 2.5GBASE-T Ports:\u003c\/strong\u003e All 24 ports operate at up to 2.5Gbps — providing the multi-gigabit throughput required to fully utilise Wi-Fi 6 and Wi-Fi 6E access points that exceed 1Gbps aggregate throughput.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003e16× PoE+ Ports (802.3at) + 8× PoE++ Ports (802.3bt):\u003c\/strong\u003e Powers a full range of PoE devices — PoE++ (up to 90W per port) supports high-power devices such as Wi-Fi 6E APs, PTZ cameras, digital signage, and thin clients.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003e4× 10G SFP+ Uplink Slots:\u003c\/strong\u003e 10 Gigabit fibre or DAC uplinks to core switches for high-bandwidth, low-latency backbone connectivity.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eOmada SDN Integration:\u003c\/strong\u003e Centrally manage alongside Omada routers and access points via cloud or local controller — with Zero-Touch Provisioning (ZTP) for rapid remote deployment across multiple sites.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eL2+ Static Routing:\u003c\/strong\u003e Routes inter-VLAN traffic without a dedicated router, improving efficiency in segmented networks with multiple VLANs.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eL2\/L3\/L4 QoS with 8 Priority Queues:\u003c\/strong\u003e Advanced traffic prioritisation with SP, WRR, and SP+WRR scheduling — ensures smooth Wi-Fi 6 AP traffic, IP camera feeds, and VoIP calls under heavy load.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eIGMP Snooping:\u003c\/strong\u003e Optimises multicast traffic for IP camera streams and IPTV, reducing unnecessary bandwidth consumption across the network.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eEnterprise Security Suite:\u003c\/strong\u003e IP-MAC-Port Binding, ACL (L2–L4), Port Security, DoS Defence, Storm Control, DHCP Snooping, 802.1X, RADIUS\/TACACS+ Authentication.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eIPv6 Ready:\u003c\/strong\u003e Full IPv6 support including Dual IPv4\/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, and IPv6 Neighbour Discovery — future-proofing your network infrastructure.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eISP-Grade Features:\u003c\/strong\u003e 802.3ah OAM, DDM (Digital Diagnostic Monitoring), sFlow, QinQ, L2PT, PPPoE ID Insertion, and IGMP Authentication for carrier and ISP deployments.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eEnterprise Management:\u003c\/strong\u003e Web GUI, CLI (Console, Telnet, SSH), SNMP v1\/v2c\/v3, RMON, Dual Image, and Dual Configuration for maximum uptime and flexibility.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eLink Aggregation (LACP):\u003c\/strong\u003e 802.3ad LACP for bonding multiple ports into high-bandwidth uplinks with redundancy.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRack Mountable:\u003c\/strong\u003e Standard 19-inch rack form factor for professional installation in comms cabinets and server rooms.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch2\u003eCommon Use Cases\u003c\/h2\u003e\n\u003cul\u003e\n  \u003cli\u003eHigh-density Wi-Fi 6\/6E deployments where APs require 2.5G uplinks to avoid bottlenecks\u003c\/li\u003e\n  \u003cli\u003eEnterprise campus networks with mixed PoE+, PoE++, and non-PoE device requirements\u003c\/li\u003e\n  \u003cli\u003eLarge-scale IP CCTV systems with high-power PTZ cameras requiring PoE++ (up to 90W)\u003c\/li\u003e\n  \u003cli\u003eDigital signage and thin client deployments requiring PoE++ power delivery\u003c\/li\u003e\n  \u003cli\u003eMulti-site business networks managed centrally via Omada cloud with ZTP\u003c\/li\u003e\n  \u003cli\u003eISP and carrier edge deployments requiring OAM, QinQ, and sFlow\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch2\u003eTechnical Specifications\u003c\/h2\u003e\n\u003cdiv style=\"overflow-x:auto;\"\u003e\n  \u003ctable style=\"width:100%;border-collapse:collapse;font-size:0.95em;\"\u003e\n    \u003ctbody\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;width:40%;\"\u003eModel\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eTL-SG3428XPP-M2\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eRJ45 Ports\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003e24× 2.5GBASE-T (100M\/1G\/2.5G)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003ePoE+ Ports (802.3at)\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003e16× (Ports 1–16, up to 30W per port)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003ePoE++ Ports (802.3bt)\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003e8× (Ports 17–24, up to 90W per port)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eSFP+ Uplink Slots\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003e4× 10G SFP+\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eQoS\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eL2\/L3\/L4, 8 priority queues, SP\/WRR\/SP+WRR, 802.1p CoS\/DSCP\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eIGMP Snooping\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eYes\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eVLAN\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003e802.1Q, Voice VLAN, Private VLAN, QinQ\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eStatic Routing\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eYes (L2+ inter-VLAN routing)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eSecurity\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eIP-MAC-Port Binding, ACL L2–L4, DoS Defence, DHCP Snooping, 802.1X, RADIUS\/TACACS+\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eSDN Management\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eOmada SDN (cloud \u0026amp; local controller)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eZero-Touch Provisioning\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eYes (ZTP via Omada)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eStandalone Management\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eWeb GUI, CLI (Console\/Telnet\/SSH), SNMP v1\/v2c\/v3, RMON, Dual Image\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eSpanning Tree\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eSTP, RSTP, MSTP\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eLink Aggregation\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eYes (802.3ad LACP)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eISP Features\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003e802.3ah OAM, DDM, sFlow, QinQ, L2PT, PPPoE ID Insertion\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eIPv6\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eDual IPv4\/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eMounting\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003eRack mountable (19″)\u003c\/td\u003e\n\u003c\/tr\u003e\n      \u003ctr style=\"background:#f5f5f5;\"\u003e\n\u003ctd style=\"padding:8px 12px;font-weight:600;\"\u003eWeight\u003c\/td\u003e\n\u003ctd style=\"padding:8px 12px;\"\u003e6.1kg\u003c\/td\u003e\n\u003c\/tr\u003e\n    \u003c\/tbody\u003e\n  \u003c\/table\u003e\n\u003c\/div\u003e\n\n\u003ch2\u003eDownloads\u003c\/h2\u003e\n\u003cul\u003e\n  \u003cli\u003e\u003ca href=\"https:\/\/cdn.shopify.com\/s\/files\/1\/0637\/1554\/1221\/files\/SDN_10-Gigabit_L2_Managed_Switch_3.pdf?v=1699425351\"\u003eTL-SG3428XPP-M2 Datasheet (PDF)\u003c\/a\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch2\u003eFrequently Asked Questions\u003c\/h2\u003e\n\n\u003ch3\u003eWhy does this switch have 2.5G ports instead of standard Gigabit?\u003c\/h3\u003e\n\u003cp\u003eWi-Fi 6 and Wi-Fi 6E access points can aggregate more than 1Gbps of wireless throughput from connected clients. A standard Gigabit uplink port creates a bottleneck that limits the AP's performance. The TL-SG3428XPP-M2's 2.5GBASE-T ports provide up to 2.5Gbps per port — eliminating this bottleneck and allowing Wi-Fi 6 APs to operate at full capacity. This is the primary reason to choose this switch over a standard Gigabit PoE switch for Wi-Fi 6 deployments.\u003c\/p\u003e\n\n\u003ch3\u003eWhat is the difference between PoE+ (802.3at) and PoE++ (802.3bt)?\u003c\/h3\u003e\n\u003cp\u003ePoE+ (802.3at) delivers up to 30W per port — sufficient for most IP cameras, standard Wi-Fi 6 APs, and VoIP phones. PoE++ (802.3bt) delivers up to 90W per port — required for high-power devices such as Wi-Fi 6E tri-band APs, PTZ cameras, digital signage displays, and thin clients. The TL-SG3428XPP-M2 provides 16 PoE+ ports and 8 PoE++ ports to support mixed deployments.\u003c\/p\u003e\n\n\u003ch3\u003eWhat is the difference between the TL-SG3428XPP-M2 and the TL-SG3428XMP?\u003c\/h3\u003e\n\u003cp\u003eThe TL-SG3428XPP-M2 has 24× 2.5G ports (vs 24× 1G on the TL-SG3428XMP), includes 8× PoE++ ports at up to 90W (vs PoE+ only at 30W max), and supports ISP-grade features (OAM, sFlow, QinQ). The TL-SG3428XMP has a 384W PoE budget and is the better choice for standard Gigabit PoE+ deployments at a lower price point. Choose the TL-SG3428XPP-M2 for Wi-Fi 6\/6E deployments requiring 2.5G uplinks and high-power PoE++ devices.\u003c\/p\u003e\n\n\u003ch3\u003eWhat is Omada SDN and do I need a controller?\u003c\/h3\u003e\n\u003cp\u003eOmada SDN is TP-Link's centralised network management platform. The TL-SG3428XPP-M2 can be managed via the Omada cloud (no hardware controller required), a hardware Omada controller (OC300\/OC200), or a software controller on a local server. Zero-Touch Provisioning (ZTP) allows the switch to be pre-configured in the cloud and automatically download its configuration when connected on site.\u003c\/p\u003e\n\n\u003ch3\u003eWhat TP-Link access points are recommended to pair with this switch?\u003c\/h3\u003e\n\u003cp\u003eThe TL-SG3428XPP-M2 is ideal for pairing with TP-Link Omada Wi-Fi 6 and Wi-Fi 6E access points that support 2.5G uplinks, such as the EAP670, EAP680, and EAP683. These APs can take full advantage of the 2.5G port speed and PoE++ power delivery. All are managed centrally via the same Omada SDN platform.\u003c\/p\u003e","brand":"TP-Link","offers":[{"title":"Default Title","offer_id":44387157573861,"sku":"TL-SG3428XPP-M2","price":1183.0,"currency_code":"AUD","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0637\/1554\/1221\/files\/tp-link-omada-sg3428xpp-m2-24-port-2-5g-poe-managed-switch.webp?v=1779694852","url":"https:\/\/cctvguru.com.au\/products\/tp-link-tl-sg3428xpp-m2-24-port-2-5g-l2-plus-managed-poe-plus-plus-switch","provider":"CCTV Guru","version":"1.0","type":"link"}