The TP-Link TL-SG3428 JetStream 24-Port Gigabit L2 Managed Switch offers robust networking capabilities with 24 Gigabit RJ45 ports and 4 SFP slots for flexible connectivity options. Designed to deliver high performance and reliability, this switch is ideal for expanding and managing network infrastructure in various environments such as hospitality, education, and corporate offices. The device provides centralized control with Omada’s Software Defined Networking (SDN) platform, ensuring seamless integration and management of network devices through a single interface.

Advanced security features of the TL-SG3428 include IP-MAC-Port-VID Binding, Port Security, Storm Control, and DHCP Snooping, which guard against common network threats and enhance protection. Quality of Service (QoS) capabilities ensure that voice and video traffic receive priority, maintaining clear and smooth performance. The switch supports a comprehensive range of Layer 2 and Layer 2+ features, including VLAN, Link Aggregation, and IGMP Snooping, making it a powerful tool for efficient network management and operation.

Key Features:

• Advanced Security: The switch includes IP-MAC-Port-VID Binding, Port Security, Storm Control, and DHCP Snooping to defend against various network attacks, including DoS. Access Control Lists (ACL) restrict access based on MAC addresses, IP addresses, and VLAN IDs, enhancing network security.
• High Performance QoS: Quality of Service (QoS) settings prioritize traffic to ensure that voice and video services operate smoothly. With up to 8 priority queues and multiple scheduling options, the switch optimizes performance for critical applications.
• Extensive L2 and L2+ Features: The switch supports essential Layer 2 features such as VLAN, Port Mirroring, and Spanning Tree Protocol (STP). Advanced features like IGMP Snooping and Multicast Filtering optimize multicast traffic and network efficiency.
• Flexible Connectivity: With 24 Gigabit RJ45 ports and 4 SFP slots, the switch offers versatile connectivity options and is suitable for various network setups. It also supports static routing and has a capacity of 56 Gbps switching for high-speed data transfer.
• Enterprise-Level Management: The TL-SG3428 can be managed through an intuitive web-based GUI or CLI. It supports SNMP and RMON for monitoring and managing network performance, and its configuration can be secured with SSL or SSH encryption.

Specifications:

Hardware Features:

• Interface:
  • 24× 10/100/1000 Mbps RJ45 Ports
  • 4× Gigabit SFP Slots
  • 1× RJ45 Console Port
  • 1× Micro-USB Console Port
• Fan Quantity: Fanless
• Power Supply: 100-240 V AC~50/60 Hz
• Dimensions (W x D x H): 17.3 × 7.1 × 1.7 in (440 × 180 × 44 mm)
• Mounting: Rack Mountable
• Max Power Consumption: 19.22 W (110 V/60 Hz)
• Max Heat Dissipation: 65.58 BTU/h (110 V/60 Hz)

Performance:

• Switching Capacity: 56 Gbps
• Packet Forwarding Rate: 41.66 Mpps
• MAC Address Table: 8K
• Jumbo Frame: 9 KB

Software Features:

• Quality of Service:
  • 8 priority queues
  • 802.1p CoS/DSCP priority
  • Queue scheduling: SP (Strict Priority), WRR (Weighted Round Robin), SP+WRR
  • Bandwidth Control: Port/Flow-based Rate Limiting
  • Smoother Performance
  • Actions for Flows: Mirror, Redirect, Rate Limit, QoS Remark
• L3 Features:
  • 16 IPv4/IPv6 Interfaces
  • Static Routing: 48 static routes
  • Static ARP
  • 316 ARP Entries
  • Proxy ARP
  • Gratuitous ARP
  • DHCP Server
  • DHCP Relay
  • DHCP L2 Relay
• L2 and L2+ Features:
  • Link Aggregation: Static link aggregation, 802.3ad LACP, Up to 8 aggregation groups and up to 8 ports per group
  • Spanning Tree Protocol: 802.1d STP, 802.1w RSTP, 802.1s MSTP, STP Security: TC Protect, BPDU Filter, BPDU Protect, Root Protect, Loop Protect
  • Loopback Detection: Port-based, VLAN based
  • Flow Control: 802.3x Flow Control, HOL Blocking Prevention
  • Mirroring: Port Mirroring, CPU Mirroring, One-to-One, Many-to-One, Tx/Rx/Both
• L2 Multicast:
  • Supports 511 (IPv4, IPv6) IGMP groups
  • IGMP Snooping: IGMP v1/v2/v3 Snooping, Fast Leave, IGMP Snooping Querier, IGMP Authentication
  • MVR
  • MLD Snooping: MLD v1/v2 Snooping, Fast Leave, MLD Snooping Querier, Static Group Config, Limited IP Multicast
  • Multicast Filtering: 256 profiles and 16 entries per profile
• Advanced Features:
  • Support Omada Hardware Controller (OC200/OC300), Software Controller, Cloud-Based Controller
  • Automatic Device Discovery
  • Batch Configuration
  • Batch Firmware Upgrading
  • Intelligent Network Monitoring
  • Abnormal Event Warnings
  • Unified Configuration
  • Reboot Schedule
  • ZTP (Zero-Touch Provisioning)
• VLAN:
  • VLAN Group: Max 4K VLAN Groups
  • 802.1q Tagged VLAN
  • MAC VLAN: 12 Entries
  • Protocol VLAN: Protocol Template 16, Protocol VLAN 16
  • GVRP
  • VLAN VPN (QinQ): Port-Based QinQ, Selective QinQ
  • Voice VLAN
• Access Control List:
  • Time-based ACL
  • MAC ACL: Source MAC, Destination MAC, VLAN ID, User Priority, Ether Type
  • IP ACL: Source IP, Destination IP, Fragment, IP Protocol, TCP Flag, TCP/UDP Port, DSCP/IP TOS, User Priority
  • Combined ACL
  • Packet Content ACL
  • IPv6 ACL
  • Policy: Mirroring, Redirect, Rate Limit, QoS Remark
  • ACL apply to Port/VLAN
• Security:
  • IP-MAC-Port Binding: DHCP Snooping, ARP Inspection, IPv4 Source Guard
  • IPv6-MAC-Port Binding: DHCPv6 Snooping, ND Detection, IPv6 Source Guard
  • DoS Defend
  • Static/Dynamic Port Security: Up to 64 MAC addresses per port
  • Broadcast/Multicast/Unicast Storm Control: kbps/ratio/pps control mode
  • IP/Port/MAC based access control
  • 802.1X: Port based authentication, Mac based authentication, VLAN Assignment, MAB, Guest VLAN, Support Radius authentication and accountability
  • AAA (including TACACS+)
  • Port Isolation
  • Secure web management through HTTPS with SSLv3/TLS 1.2
  • Secure Command Line Interface (CLI) management with SSHv1/SSHv2
• IPv6:
  • IPv6 Dual IPv4/IPv6
  • Multicast Listener Discovery (MLD) Snooping
  • IPv6 ACL
  • IPv6 Interface
  • Static IPv6 Routing
  • IPv6 neighbor discovery (ND)
  • Path maximum transmission unit (MTU) discovery
  • Internet Control Message Protocol (ICMP) version 6
  • TCPv6/UDPv6
  • IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet (v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, Http/Https, IPv6 TFTP
• Management:
  • Web-based GUI
  • Command Line Interface (CLI) through console port, telnet
  • SNMPv1/v2c/v3: Trap/Inform, RMON (1, 2, 3, 9 groups)
  • SDM Template
  • DHCP/BOOTP Client
  • 802.1ab LLDP/LLDP-MED
  • DHCP AutoInstall
  • Dual Image, Dual Configuration
  • CPU Monitoring
  • Cable Diagnostics
  • EEE
  • Password Recovery
  • SNTP
  • System Log
• MIBs:
  • MIB II (RFC1213)
  • Bridge MIB (RFC1493)
  • P/Q-Bridge MIB (RFC2674)
  • Radius Accounting Client MIB (RFC2620)
  • Radius Authentication Client MIB (RFC2618)
  • Remote Ping, Traceroute MIB (RFC2925)
  • Support TP-Link private MIBs
  • RMON MIB (RFC1757, rmon 1,2,3,9)

Conclusion: The TP-Link TL-SG3428 JetStream 24-Port Gigabit L2 Managed Switch is engineered to provide a high-performing, secure, and scalable networking solution. Its extensive feature set and advanced management capabilities make it an excellent choice for demanding network environments. Whether used in hospitality, educational institutions, or office settings, this switch ensures reliable connectivity and robust security while supporting future network expansion needs.