TP-Link TL-SG3428 24-Port Gigabit L2+ Managed Switch 4 SFP
TP-Link
TP-Link TL-SG3428 24-Port Gigabit L2+ Managed Switch 4 SFP
The TP-Link TL-SG3428 is a 24-port managed switch with 4 SFP slots designed for small to mid-sized enterprise networks that need centralized management and advanced security. It integrates into TP-Link's Omada SDN platform for cloud-based administration across multiple locations, and includes VLAN support, QoS for voice and video, and comprehensive threat defense.
Why this product
24 Gigabit ports plus 4 SFP slots
All 24 RJ45 ports run at full gigabit speed (10/100/1000 Mbps), with 4 additional SFP slots for fiber uplinks or long-distance connections without adding external modules.
Omada SDN cloud management
Integrates with TP-Link's Omada platform for centralized monitoring and configuration across all your network devices from a single interface, with Zero-Touch Provisioning support.
Enterprise-grade security features
Includes IP-MAC-Port binding, 802.1X authentication, DHCP snooping, built-in DoS attack defenses, ACLs, and port security to protect against common network threats.
Standalone or cloud-managed operation
Works independently with web UI, CLI, SNMP, and RMON, or connects to Omada cloud for remote access and enterprise monitoring.
QoS and IGMP for multimedia
Prioritizes voice and video traffic across L2, L3, and L4 layers; IGMP snooping prevents unnecessary multicast flooding.
- Gigabit RJ45 ports24
- SFP slots4
- Switching capacity56 Gbps
- Form factor1U Rack-Mountable
- Power consumption (max)19.22 W
- Operating temperature range0–45 °C
- SKUTPL-1127
- EAN6935364010737
- Works with standard RJ45 Gigabit Ethernet cables and TP-Link's Omada controller or other standard network management platforms via web, SSH, or SNMP.
- Fits standard 19-inch server racks as a 1U unit; can also sit on a desk or shelf.
- Accepts 100–240 V AC power at 50–60 Hz (universal mains voltage), with low power draw of 19.22 W maximum.
- Supports all standard Ethernet protocols including 802.1Q VLANs, 802.1X port-based authentication, and 802.3ad link aggregation.
- Zero-Touch Provisioning requires the Omada Cloud-Based Controller; L3 routing and ISP-level features are only available in standalone mode, not in Omada-managed deployments.
Best for
- Multi-site deployments needing unified management
- Schools, hospitality, and retail networks
- Networks requiring strong threat defense
- Organizations running fiber uplinks
- Medium-sized networks with limited IT staff
Trade-offs
- Small offices without managed switch experience
- Networks that need Layer 3 routing in Omada mode
- Deployments without cloud connectivity
As a switch that seamlessly integrates into the Omada Software Defined Networking (SDN) platform, TL-SG3428 allows for remote and centralized management, anywhere, anytime.
Omada's Software Defined Networking (SDN) platform integrates network devices, including access points, switches, and routers, providing 100% centralized cloud management. Omada creates a highly scalable network—all controlled from a single interface. Seamless wireless and wired connections are provided, ideal for use in hospitality, education, retail, offices, and more.
Security features include IP-MAC-Port-VID Binding, Port Security, Storm Control, and DHCP Snooping to defend against a range of network threats. An integrated list of common DoS attacks is available, making it easier than ever to prevent them. In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports, or VLAN ID. Users' network access can be controlled via 802.1X authentication, which works with a RADIUS/Tacacs+ server to grant access only when valid user credentials are provided. Voice and video traffic can be prioritized based on IP address, MAC address, TCP port number, UDP port number, and more.
*Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. **L3 and ISP features can only be configured in standalone mode.
Networking
| Brand | TP-Link |
|---|---|
| Standards supported | IEEE 802.1D, 802.1Q, 802.1ad, 802.1p, 802.1s, 802.1w, 802.1x, 802.3x, 802.3ab, 802.3i, 802.3u, 802.3z |
| Management modes | Web UI, CLI (Console, Telnet, SSH), SNMP, RMON, Omada App, Cloud Access |
| VLAN groups | Up to 4,096 |
| MAC address table | 8,000 entries |
| Spanning Tree | 802.1D STP, 802.1W RSTP, 802.1S MSTP |
| Link aggregation | Static and 802.3ad LACP; up to 8 groups, 8 ports per group |
| IGMP snooping | v1/v2/v3; up to 511 IPv4 and IPv6 groups |
Performance
| Forwarding rate | 41.66 Mpps |
|---|---|
| Switching capacity | 56 Gbps |
Ports & power
| Gigabit RJ45 ports | 24 (10/100/1000 Mbps) |
|---|---|
| Gigabit SFP slots | 4 |
| Console port | RJ-45 / Micro-USB |
| AC input voltage | 100–240 V, 50–60 Hz |
| Power consumption (max) | 19.22 W |
| Heat dissipation | 65.58 BTU/h |
Physical
| Form factor | 1U Rack-Mountable |
|---|---|
| Height | 44 mm |
| Operating temperature | 0–45 °C |
| Operating humidity | 10–90% RH (non-condensing) |
| Storage temperature | -40–70 °C |
| Storage humidity | 5–90% RH (non-condensing) |
Shipping
All our products are shipped from the United Kingdom within 24 to 48 hours of purchase. See our Shipping and Returns page for full details.
Returns
- Tech Syndicate offers a full money-back guarantee on all purchases made in our store. If you are not satisfied with your purchase, we will provide a full refund, no questions asked.
- Refunds are available within 45 days of delivery.
- After the 45-day period you are no longer eligible for a refund, so we encourage you to try the product within the first few weeks to make sure it fits your needs.