TP-Link TL-SG3428MP JetStream 28-Port Gigabit L2+ Managed PoE+ Switch - 24x PoE+, 384W, 4x SFP, Black
TP-Link
TP-Link TL-SG3428MP JetStream 28-Port Gigabit L2+ Managed PoE+ Switch - 24x PoE+, 384W, 4x SFP, Black
The TP-Link TL-SG3428MP is a 28-port rack-mount managed switch with Power over Ethernet on every one of its 24 Gigabit copper ports, backed by a 384 W PoE budget. It is built for sites powering access points, IP cameras and VoIP phones over the same cable that carries their data, and it runs either standalone through its own web interface or as part of an Omada SDN network.
Why this product
PoE+ on all 24 Gigabit ports
Every copper port supplies up to 30 W under 802.3af and 802.3at, so access points, cameras and phones take their power from the switch rather than from a socket at the far end of the cable.
384 W total PoE budget
TP-Link rate the switch at 384 W shared across the 24 ports. TP-Link measure that budget in the lab and state that the usable figure is not guaranteed, as it varies with the devices attached and the environment.
PoE Auto Recovery keeps devices up
The switch watches each powered device and power-cycles its port when the device stops responding, so a frozen camera or access point comes back without anyone walking to the cabinet.
Four Gigabit SFP slots for fibre uplinks
Four Gigabit SFP slots take fibre or copper transceivers for uplinks and inter-building runs. Modules are sold separately.
A full managed-switch feature set
Up to 4K VLAN groups with 802.1Q tagging, QinQ and voice VLAN, STP/RSTP/MSTP, LACP link aggregation, 802.1X authentication, IGMP snooping, ACLs and eight QoS queues.
Omada SDN capable
Runs standalone through its own web UI and CLI, or joins an Omada network managed from a hardware, software or cloud controller alongside TP-Link access points and routers.
- BrandTP-Link
- ModelTL-SG3428MP
- Gigabit RJ45 Ports24, all PoE+
- SFP Slots4 x Gigabit
- PoE Standards802.3af / 802.3at
- PoE Power Per PortUp to 30 W
- Total PoE Budget384 W
- Form Factor19-inch rack mount, 1U (44 mm)
- ColourBlack
- SKUTPL-1127
- EAN6935364010737
- Powers 802.3af and 802.3at devices - Wi-Fi access points, IP cameras, VoIP phones and door controllers - at up to 30 W per port.
- Managed from a browser over HTTPS, or by CLI over the RJ45 console port, the Micro-USB console port, Telnet or SSH. SNMP v1/v2c/v3 and RMON are supported.
- Joins an Omada SDN network under an OC200 or OC300 hardware controller, the Omada Software Controller, or the Omada Cloud-Based Controller.
- Fits a standard 19-inch rack and is one rack unit high. The rackmount kit, power cord, rubber feet and quick installation guide are in the box.
- SFP modules are not included and are sold separately.
- No console cable is supplied. TP-Link's package contents are the switch, power cord, quick installation guide, rackmount kit and rubber feet - so CLI access over either console port needs a cable you provide.
- Omada Cloud-Based Controller, the Omada app, cloud access and Zero-Touch Provisioning are supported on hardware versions v1, v2 and v4 and above, but TP-Link state they are not supported on v3. Zero-Touch Provisioning needs the Cloud-Based Controller specifically.
- TP-Link note that some features work only under standalone management or only under centralized management, and that some need a firmware update first.
- TP-Link publish no noise rating for this product. It carries two fans and is built for a comms cabinet rather than a desk.
Best for
- Offices, schools and retail sites powering access points and IP cameras over their existing data cabling.
- Networks already running Omada access points or routers, which can bring the switch under the same controller.
- Installations needing fibre uplinks between floors or buildings, through the four SFP slots.
- Sites that want VLAN segmentation, 802.1X authentication and QoS without moving to a full Layer 3 switch.
Trade-offs
- High-power PoE devices - the ports are rated to 30 W each under 802.3af and 802.3at. PTZ cameras with heaters and large PoE displays expect the higher 802.3bt power classes, which this switch does not provide.
- Desks and quiet rooms - two fans, and 1508.67 BTU/hr of heat at a full 384 W load. TP-Link publish no noise rating for this model, but it belongs in a comms cabinet.
- Anyone wanting plug-and-play - this is a managed switch. It needs configuring, and the features that justify buying it all assume someone will.
- Buyers who need everything in the box - SFP transceivers are a separate purchase, and no console cable is supplied.
The TL-SG3428MP is TP-Link's 28-port managed PoE+ switch: 24 Gigabit copper ports that all carry power, four Gigabit SFP slots for fibre uplinks, and a 384 W budget to share between them.
Every one of the 24 copper ports supplies up to 30 W under 802.3af and 802.3at, which covers the great majority of Wi-Fi access points, IP cameras, VoIP handsets and door controllers. PoE Auto Recovery watches each powered device and power-cycles its port when the device stops responding, so a frozen camera comes back on its own rather than waiting for someone to visit the cabinet.
On the management side it is a proper managed switch rather than a smart one: up to 4K VLAN groups, 802.1Q tagging, QinQ and voice VLAN, the full STP/RSTP/MSTP set with loop and BPDU protection, LACP aggregation across up to eight groups, 802.1X with RADIUS and guest VLAN, time-based ACLs, eight QoS queues and IGMP snooping. Forty-eight IPv4/IPv6 static routes, sixteen L3 interfaces and a DHCP server handle light inter-VLAN routing without a separate Layer 3 device.
It runs standalone from its own web interface or CLI, or joins an Omada SDN network managed centrally alongside TP-Link access points and gateways from a hardware, software or cloud controller. TP-Link note that some features are available only under standalone management or only under centralized management, and that the cloud-based controller is not supported on hardware version v3.
At a full 384 W PoE load TP-Link rate the switch at 442.1 W drawn and 1508.67 BTU/hr dissipated, through two fans, so it belongs in a comms cabinet. SFP modules and a console cable are not supplied.
General
| Brand | TP-Link |
|---|---|
| Model | TL-SG3428MP |
| EAN | 6935364010737 |
| Colour | Black |
| Mounting | 19-inch rack, 1U |
| Certification | CE, FCC |
Ports & PoE
| Gigabit Copper Ports | 24 x 10/100/1000 Mbps RJ45, all PoE+ |
|---|---|
| SFP Slots | 4 x Gigabit SFP (modules sold separately) |
| Console Ports | 1 x RJ45, 1 x Micro-USB |
| PoE Standards | 802.3af, 802.3at |
| Maximum Per Port | 30 W |
| Total PoE Budget | 384 W (TP-Link: lab-measured, not guaranteed) |
| PoE Management | PoE Auto Recovery |
Performance
| Switching Capacity | 56 Gbps |
|---|---|
| Forwarding Rate | 41.66 Mpps |
| Packet Buffer | 4.1 Mbit |
| MAC Address Table | 16K |
| Jumbo Frame | 9 KB |
Layer 2 & Security
| VLANs | Up to 4K groups; 802.1Q, MAC, protocol and private VLAN, GVRP, QinQ, voice VLAN |
|---|---|
| Spanning Tree | 802.1d STP, 802.1w RSTP, 802.1s MSTP, with TC/BPDU/root/loop protection |
| Link Aggregation | Static and 802.3ad LACP, up to 8 groups of 8 ports |
| Access Control | MAC, IP, IPv6, combined, packet-content and time-based ACLs |
| Authentication | 802.1X port- and MAC-based, guest VLAN, MAB, RADIUS, AAA including TACACS+ |
| QoS | 8 priority queues, 802.1p/DSCP, SP / WRR / SP+WRR, rate limiting |
| Multicast | 511 IGMP groups; IGMP v1/v2/v3 snooping, MLD snooping, MVR, multicast filtering |
| Threat Defence | IP-MAC-Port binding, DHCP snooping, ARP inspection, IPv6 source guard, DoS defend, storm control, port isolation, loopback detection |
| Port Security | Up to 64 MAC addresses per port |
Routing & Management
| L3 Interfaces | 16 IPv4/IPv6 interfaces |
|---|---|
| Static Routing | 48 IPv4/IPv6 static routes |
| ARP Table | 316 entries (512 on hardware version V2.0) |
| DHCP | DHCP server, relay and L2 relay |
| Management | Web GUI, CLI (console / Telnet / SSH), SNMP v1/v2c/v3, RMON (groups 1, 2, 3, 9) |
| Secure Management | HTTPS over SSLv3/TLS 1.2; CLI over SSHv1/SSHv2 |
| Other Management | 802.1ab LLDP/LLDP-MED, dual image and dual configuration, cable diagnostics, EEE, SNTP, system log, password recovery |
| Omada SDN | Yes - OC200/OC300 hardware, software or cloud-based controller (cloud not supported on hardware v3) |
Physical & Power
| Dimensions | 440 x 330 x 44 mm (17.3 x 13.0 x 1.7 in) |
|---|---|
| Fans | 2 |
| Power Input | 100-240 V AC, 50/60 Hz |
| Max Power Consumption | 442.1 W at 220 V/50 Hz with 384 W of powered devices connected |
| Max Heat Dissipation | 1508.67 BTU/hr at 220 V/50 Hz with 384 W connected |
| Operating Temperature | 0 to 45 C |
| Operating Humidity | 10-90% RH, non-condensing |
| Noise | TP-Link publish no noise rating for this product. It carries two fans and is built for a comms cabinet rather than a desk. |
| In The Box | Switch, power cord, quick installation guide, rackmount kit, rubber feet (no console cable) |
Shipping
All our products are shipped from the United Kingdom within 24 to 48 hours of purchase. See our Shipping and Returns page for full details.
Returns
- Tech Syndicate offers a full money-back guarantee on all purchases made in our store. If you are not satisfied with your purchase, we will provide a full refund, no questions asked.
- Refunds are available within 45 days of delivery.
- After the 45-day period you are no longer eligible for a refund, so we encourage you to try the product within the first few weeks to make sure it fits your needs.