10-Gigabit L2+ Managed Switch Datasheet

MODELS: TL-SX3008F / TL-SX3016F / TL-SX3206HPP / TL-SG3210XHP-M2 V2 / TL-SG3428X-M2 /

TL-SG3428XPP-M2 / TL-SG3428X V1.20 / TL-SG3428X-UPS / TL-SG3428XMP V3 / TL-
SG3428XF / TL-SG3452X / TL-SG3452XP

The TP-Link Solution

One-Step Solution
Professional. Reliable. Secure.

Overview
TP-Link’s JetStream L2+ managed switches provide high performance, powerful L2 and L2+ features like
static routing, enterprise-level QoS, advanced security strategies and a bundle of ISP features. The 10-gigabit
ports ensure high-speed data transfer, and their backward compatility with gigabit products reserves room
for network upgrades, therefore guarantees stable and long-term usability. The IP-MAC-Port Binding (IMPB)
and Access Control List (ACL) functions protect against broadcast storm, ARP and Denial-of-Service (DoS)
attacks, etc. Quality of Service (QoS, L2 to L4) provides enhanced traffic management capabilities to move your
data smoother and faster. The OAM function helps facilitate network management. Moreover, the easy-to-use
web management interfaces, along with CLI, SNMP and Dual Image mean faster setup and configuration with
less downtime. TP-Link JetStream L2+ 10-gigabit managed switches provide a reliable, secure solution for
enterprise, campus and ISP networks.
 Omada Solution

Software Defined Networking (SDN) with Cloud Access

Omada Software Defined Networking (SDN) platform integrates network devices, including access points,
switches and gateways, providing 100% centralized cloud management. Omada creates a highly scalable
network——all controlled from a single interface. Seamless wireless and wired connections are provided, ideal
for use in hospitality, education, retail, offices, and more.
Hassle-Free Centralized Cloud Management

100% centralized cloud management of the whole network from different sites——all controlled from a single
interface anywhere, anytime.

Assign Different Management Roles

Multi-user privilege assignment is available to increase management efficiency and security. Multi-person
management, multi-level permissions, and the ability to add admins as needed, enable flexible network
operation and maintenance.
Easy and Intelligent Network Monitoring
The easy-to-use dashboard makes it easy to see your real-time network status; check network usage and
traffic distribution; receive network condition logs, abnormal event warnings, and notifications; or even track key
data for better business results. Network topology helps IP admins quickly see and troubleshoot connection at
a glance.

Comprehensive Protection for the Whole Network

 Switch Product Features

Networking Security
The L2+ managed switches provide IP-MAC-Port Binding, Port Security, Storm control and DHCP Snooping which protect
against broadcast storms, ARP attacks, etc. It integrates some typical DoS attacks to select. You can protect these attacks
more easily ever than before. In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive
network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports and
even VLAN ID. Moreover, the switch supports 802.1X authentication, which is used in conjunction with a RADIUS/TACACS+
server to require some authentication information before access to the network is allowed.

Advanced QoS features

To integrate voice, data and video service on one traffic based on a variety of means including IP or MAC address, TCP or
UDP port number, etc. to ensure that voice and video are always clear, smooth and jitter free. In conjunction with the Voice
VLAN the switch supporting, the voice applications will operate with much smoother performance.

Abundant L2+ features

The L2+ managed switches support a complete lineup of L2 features, including 802.1Q VLAN, Port Mirroring, STP/RSTP/
MSTP, Link Aggregation Control Protocol and 802.3x Flow Control function. Any more, the switch provides advanced
features for network maintenance. Such as Loopback Detection, Cable Diagnostics and IGMP Snooping. IGMP snooping
ensures the switch intelligently forward the multicast stream only to the appropriate subscribers while IGMP throttling
& filtering restrict each subscriber on a port level to prevent unauthorized multicast access. Moreover, L2+ managed
switches support L2+ feature-static routing, which is a simple way to provide segmentation of the network with internal
routing through the switch and helps network traffic for more efficient use.

ISP Features
The L2+ managed switches support a bundle of ISP features such as 802.3ah OAM, DDM, sFlow, QinQ, L2PT PPPoE ID
Insertion, IGMP authentication etc. 802.3ah OAM and Device Link Detection Protocol (DLDP) functions improve monitor
and troubleshoot Ethernet networks, help facilitate network management. DDM(Digital Diagnostic Monitoring) function
helps view the status of SFP modules inserting to the Switch and to configure alarm settings, warning settings, temperature
threshold settings, voltage threshold settings, bias current threshold settings, TX power threshold settings, and Rx power
threshold settings.

Enterprise Level Management Features

TP-Link’s new L2+ managed switches are easy to use and manage. It supports various user-friendly standard management
features, such as intuitive web-based Graphical User Interface (GUI), industry-standard Command Line Interface (CLI),
SNMP (v1/v2c/v3), and RMON. This allows the switch to provide valuable status information and send reports on abnormal
events. It also supports Dual Image and Dual Configuration to provide improved reliability and network uptime.

IPv6 Support
The L2+ managed switches support various IPv6 functions such as Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL,
DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery and IPv6 Neighbor Discovery, which
guarantees your network is ready for the Next Generation Network (NGN) without upgrading your network equipment.
Hardware Features & Performance

Product Picture

Model TL-SG3428XMP V3 TL-SG3428XF

20 Gigabit SFP Slots
24 10/100/1000Mbps RJ45 Ports
Interface 4 Gigabit RJ45/SFP Combo Ports
4 10GE SFP+ Slots
4 10GE SFP+ Slots
Console 1 RJ45 Console Port, 1 Micro-USB Console Port

Flash 32 MB
General
DRAM 256 MB

IEEE 802.3i:10BASE-T Ethernet;

IEEE 802.3u:100BASE-X Fast Ethernet;
Port Standard IEEE 802.3ab:1000BASE-T Gigabit Ethernet;
IEEE 802.3z:1000BASE-X Gigabit Ethernet (Optical fiber)
IEEE 802.3ae: 10 Gigabit Ethernet over fiber

PoE Standard 802.3af/at -

PoE PoE Ports 24, up to 30W -

PoE Power Budget 384 W -

Switching Capacity 128 Gbps

Packet Forwarding Rate 95.23 Mpps

MAC Address Table 16K

Transmission Method Store and Forward

Performance Packet Buffer 12 Mbit

Number of IP Interfaces 16

Number of Static
48 (IPv4, IPv6)
Routers

Jumbo Frame 9 KB

Power Supply 100-240 V AC~50/60 Hz

Max Power 486.2 W (110V/60Hz) ( with 384 W PD

35.7 W (110V/60Hz)
Consumption connected)

1658.78 BTU/hr (110 V/60 Hz) (with

Max Heat Dissipation 121.81 BTU/hr (110 V/60 Hz)
384 W PD connected)
Standby Power
17.6 W (110V/60 Hz)
Consumption
17.3 × 13.0 × 1.7 in (440 × 330 × 44
Dimensions (W x D x H) 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)
Physical & mm)
Environmet
Fan Quantity 2 1

Installation Rack Mountable

Operating Temperature 0 °C to 45 °C (32 °F to 113 °F)

Storage Temperature -40 °C to 70 °C (-40 °F to 158 °F)

Operation Humidity 10% to 90% RH, non-condensing

Storage Humidity 5% to 90% RH, non-condensing

Certification CE, FCC, RoHS

Software Features
TL-SX3008F / TL-SX3016F / TL-SX3206HPP / TL-SG3210XHP-M2 V2 / TL-SG3428X-M2 /
Model TL-SG3428XPP-M2 / TL-SG3428X V1.20 / TL-SG3428X-UPS / TL-SG3428XMP V3 / TL-SG3428XF /
TL-SG3452X / TL-SG3452XP
• Support Omada Hardware Controller (OC200/ • Intelligent Network Monitoring
OC300), Software Controller • Abnormal Event Warnings
SDN Support • Automatic Device Discovery • Unified Configuration
• Batch Configuration • Reboot Schedule
• Batch Firmware Upgrading

• 16 IPv4/IPv6 Interfaces • Proxy ARP

(32 IPv4/IPv6 Interfaces for TL-SG3428X-M2 • Gratuitous ARP
&TL-SG3428XPP-M2) • DHCP Server
• Static Routing • DHCP Relay
L3 Features
- 48 static routes - DHCP interface relay
• Static ARP - DHCP VLAN relay
- 128 static entries • DHCP L2 Relay
• 512 ARP Entries

• Link Aggregation • Loopback Detection

- Static link aggregation - Port based
- 802.3ad LACP - VLAN based
- Up to 8 aggregation groups and up to 8 ports • Flow Control
per group - 802.3x Flow Control
• Spanning Tree Protocol - HOL Blocking Prevention
L2 Features
- 802.1d STP • Mirroring
- 802.1w RSTP - Port Mirroring
- 802.1s MSTP - CPU Mirroring
- STP Security: TC Protect, BPDU Filter, BPDU - One-to-One
Protect, Root Protect, Loop Protect - Many-to-One
- Tx/Rx/Both

• Supports 1000 (IPv4, IPv6) IGMP groups • MLD Snooping

(511 groups for TL-SG3428X-M2 & TL- - MLD v1/v2 Snooping
SG3428XPP-M2) - Fast Leave
• IGMP Snooping - MLD Snooping Querier
- IGMP v1/v2/v3 Snooping - Static Group Config
L2 Multicast
- Fast Leave - Limited IP Multicast
- IGMP Snooping Querier • Multicast Filtering: 256 profiles and 16 entries
- IGMP Authentication per profile
• IGMP Authentication
• MVR

• VLAN Group (802.1q VLAN) • Private VLAN (except for TL-SG3428X-M2 & TL-
- Max 4K VLAN Groups SG3428XPP-M2)
• 802.1Q Tagged VLAN • GVRP
• MAC VLAN entries: 30 • VLAN VPN
(10 for TL-SG3210XHP-M2 and 256 for TL- - VLAN Mapping
VLAN
SG3428X-M2 & TL-SG3428XPP-M2) - VLAN Replace
• Protocol VLAN: Protocol Template 16, Protocol • Voice VLAN
VLAN 16
(Protocol Template 16 and Protocol VLAN 12 for
TL-SX3008F and TL-SX3016F)

• 8 priority queues • Bandwidth Control

• 802.1p CoS/DSCP priority - Port/Flow based Rating Limiting
• Queue scheduling • Smoother Performance
QoS
- SP (Strict Priority) • Action for Flows
- WRR (Weighted Round Robin) - QoS remark (802.1P Remark, DSCP Remark)
- SP+WRR
 Software Features
TL-SX3008F / TL-SX3016F / TL-SX3206HPP / TL-SG3210XHP-M2 V2 / TL-SG3428X-M2 /
Model TL-SG3428XPP-M2 / TL-SG3428X V1.20 / TL-SG3428X-UPS / TL-SG3428XMP V3 / TL-SG3428XF /
TL-SG3452X / TL-SG3452XP
• MAC ACL - TCP/UDP Port
- Source MAC - DSCP/IP TOS
- Destination MAC • Combined ACL
- VLAN ID • IPv6 ACL
- User Priority • Policy
- Ether Type - Mirroring
ACL
• IP ACL - Redirect
-Source IP - Rate Limit
- Destination IP - QoS Remark
- Fragment • ACL apply to Port/VLAN
- IP Protocol • Time-based ACL
- TCP Flag

• IP-MAC-Port Binding • 802.1X

-512 Entries - Port base authentication
- DHCP Snooping - Mac base authentication
- ARP Inspection - VLAN Assignment
- IPv4 Source Guard - MAB
• IPv6-MAC - Guest VLAN
-Port Binding - Support RADIUS authentication and
-512 Entries accountability
- DHCPv6 Snooping • AAA (including TACACS+)
Security - ND Detection • Port Isolation
- ND Snooping • Secure web management through HTTPS with
- IPv6 Source Guard SSLv3/TLS 1.2
• DoS Defend • Secure Command Line Interface (CLI)
• DHCP Filter management with SSHv1/SSHv2
• Static/Dynamic Port Security • IP/Port/MAC based access control
- Up to 64 MAC addresses per port
• Broadcast/Multicast/Unknown-unicast Storm
Control
- kbps/ratio/pps control mode

• 802.3ah Ethernet Link OAM • Device Link Detect Protocol (DLDP)

• L2PT (Layer 2 Protocol Tunneling) • sFlow (except for TL-SG3428X-M2 & TL-
ISP Features
• PPPoE ID Insertion SG3428XPP-M2)
• ERPS • DDM

• Web-based GUI • DHCP Auto Install

• Command Line Interface (CLI) through • Dual Image, Dual Configuration
consoleport, telnet • CPU Monitoring
• SNMPv1/v2c/v3 • Cable Diagnostics
Management - Trap/Inform • EEE*
- RMON (1, 2, 3, 9 groups) • Password Recovery
• SDM Template • SNTP
• DHCP/BOOTP Client • System Log
• 802.1ab LLDP/LLDP-MED

*TL-SX3008F and TL-SX3016F do not support this feature.

Software Features
TL-SX3008F / TL-SX3016F / TL-SX3206HPP / TL-SG3210XHP-M2 V2 / TL-SG3428X-M2 /
Model TL-SG3428XPP-M2 / TL-SG3428X V1.20 / TL-SG3428X-UPS / TL-SG3428XMP V3 / TL-SG3428XF /
TL-SG3452X / TL-SG3452XP
• IPv6 Dual IPv4/IPv6 • IPv6 applications
• Multicast Listener Discovery (MLD) Snooping - DHCPv6 Client
• IPv6 ACL - Ping6
• IPv6 Interface - Tracert6
• Static IPv6 Routing - Telnet (v6)
IPv6 Support
• IPv6 neighbor discovery (ND) - IPv6 SNMP
• Path maximum transmission unit (MTU) discovery - IPv6 SSH
• Internet Control Message Protocol (ICMP) - IPv6 SSL
version 6 - Http/Https
• TCPv6/UDPv6 - IPv6 TFTP

• MIB II (RFC1213) • RMON2 MIB (RFC2021)

• Interface MIB (RFC2233) • RADIUS Accounting Client MIB (RFC2620)
• Ethernet Interface MIB (RFC1643) • RADIUS Authentication Client MIB (RFC2618)
MIBs
• Bridge MIB (RFC1493) • Remote Ping, Traceroute MIB (RFC2925)
• P/Q-Bridge MIB (RFC2674) • Support TP-Link Private MIB
• RMON MIB (RFC2819)