TP-Link SG3428XMP 24G PoE+ L2+ Managed Switch with 4 x 10G SFP+ Uplinks and Advanced Features

TP‑Link SG3428XMP is a powerful L2+ managed switch for SMBs and branch networks requiring high-density PoE and 10G uplinks. It features 24 Gigabit PoE+ RJ45 ports and 4× 10G SFP+ uplinks, supporting up to 30 W per port with a 384 W total PoE budget. Seamless integration with the Omada SDN platform enables centralised cloud management, zero-touch provisioning, real-time monitoring, and efficient automation.

This model is equipped with 2 internal fans (not fanless) to ensure stable operation under full PoE load. Even though it runs moderately loud, its robust build, static Layer 3 routing, multilayer QoS, and multicast optimisation make it a reliable choice for demanding environments.

KEY FEATURES:

• 24 × PoE+ RJ45 ports, auto-negotiation and MDI/MDIX
• 4 × 10G SFP+ uplinks for high-speed backbone connectivity
• 128 Gbps switching capacity, ~95.23 Mpps forwarding rate
• Static L3 routing support (up to 48 IPv4/IPv6 routes)
• Omada SDN cloud management, real-time monitoring, zero-touch provisioning
• Advanced security: 802.1X, ACLs, DHCP Snooping, IP-MAC-Port Binding, DoS protection
• VLAN support up to 4,000 IDs, including Voice & Surveillance VLANs
• L2–L4 QoS with 8 hardware queues per port
• IEEE 802.3ad LACP (up to 8 groups)
• Rack-mountable chassis
• Dual console ports (RJ45 + Micro-USB)
• Intelligent active cooling with 2 internal fans
• IEEE 802.3az Energy-Efficient Ethernet support
  
  

TECHNICAL SPECIFICATIONS:

HARDWARE:

PERFORMANCE:

SECURITY:

MANAGEMENT:

PHYSICAL AND ENVIRONMENTAL:

ADVANCED FEATURES:

VLAN & QoS:

Up to 4,000 VLANs supported using port-based, 802.1Q, or MAC-based tagging. QoS prioritises traffic via DSCP and 802.1p marking and supports Voice/Surveillance VLAN, bandwidth control, and traffic shaping. 

Security:

Enterprise-level protection with 802.1X authentication, DHCP snooping, ARP inspection, IP-MAC-Port binding, ACL filtering, storm control, DoS prevention, and port security.

Link Aggregation & Multicast:

Supports 802.3ad LACP (up to 8 groups), ERPS for ring resilience, and IGMP snooping/throttling for multicast efficiency. 

Management:

Centralised control via Omada SDN, cloud or on-premise. CLI, SNMP, RMON, LLDP, loopback detection and dual-image firmware for secure and flexible administration.

Cooling & Power Efficiency:

Dual active fans provide reliable cooling under full PoE loads. Idle mode power usage remains low at ~34 W, with IEEE 802.3az for improved energy efficiency. Fans are continuous under load and may produce noticeable noise. Community feedback confirms fans operate at full speed constantly. 

ORDERING INFORMATION:

WARRANTY & SUPPORT

Manufacturers are responsible for warranties, which are based on the purchase date and validity. We make sure the products we sell are delivered on time and in their original condition at Grabnpay. Whether it's physical damage or operational issues, our team will help you find a solution. We help you install, configure, and manage your devices. We'll help you file a warranty claim and guide you every step of the way.

All listed prices reflect standard market rates. Final commercial terms, including volume-based discounts, will be provided based on purchase volume, MOQ, and other applicable criteria. For more information about switches & other accessories, contact our technical support team.