| Product Code: | |
| Options: | |
| Qty: | |
| Unit Price: | £ |
![]() |
The TP-Link SG3428XMP JetStream 24-Port Gigabit and 4-Port 10GE SFP+ L2+ Managed Switch combines high-density Gigabit connectivity with fast 10 Gbps uplinks, making it ideal for networks that need both power over Ethernet and backbone speed. Its Layer 2+ features give precise control over traffic flow, while integration with Omada SDN allows for centralised cloud or local management. Standalone management options ensure flexibility, and dual power supplies provide reliable operation in demanding setups.
The L2+ managed switches provide IP-MAC-Port Binding, Port Security, Storm control and DHCP Snooping which protect against broadcast storms, ARP attacks, etc. It integrates some typical DoS attacks to select. You can protect these attacks more easily ever than before. In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports and even VLAN ID. Moreover, the switch supports 802.1X authentication, which is used in conjunction with a RADIUS/TACACS+ server to require some authentication information before access to the network is allowed.
To integrate voice, data and video service on one traffic based on a variety of means including IP or MAC address, TCP or UDP port number, etc. to ensure that voice and video are always clear, smooth and jitter free. In conjunction with the Voice VLAN the switch supporting, the voice applications will operate with much smoother performance.
The L2+ managed switches support a complete lineup of L2 features, including 802.1Q VLAN, Port Mirroring, STP/RSTP/ MSTP, Link Aggregation Control Protocol and 802.3x Flow Control function. Any more, the switch provides advanced features for network maintenance. Such as Loopback Detection, Cable Diagnostics and IGMP Snooping. IGMP snooping ensures the switch intelligently forward the multicast stream only to the appropriate subscribers while IGMP throttling & filtering restrict each subscriber on a port level to prevent unauthorized multicast access. Moreover, L2+ managed switches support L2+ feature-static routing, which is a simple way to provide segmentation of the network with internal routing through the switch and helps network traffic for more efficient use.
The L2+ managed switches support a bundle of ISP features such as 802.3ah OAM, DDM, sFlow, QinQ, L2PT PPPoE ID Insertion, IGMP authentication etc. 802.3ah OAM and Device Link Detection Protocol (DLDP) functions improve monitor and troubleshoot Ethernet networks, help facilitate network management. DDM(Digital Diagnostic Monitoring) function helps view the status of SFP modules inserting to the Switch and to configure alarm settings, warning settings, temperature threshold settings, voltage threshold settings, bias current threshold settings, TX power threshold settings, and Rx power threshold settings.
TP-Link's new Omada L2+ managed switches are easy to use and manage. It supports various user-friendly standard management features, such as intuitive web-based Graphical User Interface (GUI), industry-standard Command Line Interface (CLI), SNMP (v1/v2c/v3), and RMON. This allows the switch to provide valuable status information and send reports on abnormal events. It also supports Dual Image and Dual Configuration to provide improved reliability and network uptime.
The L2+ managed switches support various IPv6 functions such as Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery and IPv6 Neighbor Discovery, which guarantees your network is ready for the Next Generation Network (NGN) without upgrading your network equipment.
Enterprise Switch with 10G Uplink
4× 10 Gbps SFP+ slots provide non-blocking switching performance and ultra-low latency, so reliable and lightning-fast connections to servers and other switches are easily built.

Dedicated 24 PoE+ Ports (384 W Budget) for Numerous Applications
Features 24× 802.3af/at compliant PoE+ ports, the switch supports up to 384 W total PoE power budget. Designed to use a single Ethernet cable for both data and power transmission, it offers flexible deployment for PoE-supported devices such as wireless access points, IP cameras, and IP phones, lowering infrastructure costs for small businesses.

Advanced L3 Features
An abundance of L2+ and L3 features are supported to help build a highly scalable and robust network, providing a reliable and efficient solution for enterprises, campuses and ISPs.
Secure Networking
Security features include IP-MAC-Port-VID Binding, Port Security, Storm Control and DHCP Snooping to defend against a range of network threats. An integrated list of common DoS attacks is available, making it easier than ever to prevent them.
In addition, the Access Control Lists (ACL, L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address, IP address, TCP/UDP ports or VLAN ID. Users’ network access can be controlled via 802.1X authentication, which works with a RADIUS/Tacacs+ server to grant access only when valid user credentials are provided.
Enterprise Level Features
A complete lineup of L2+ features are supported, including 802.1Q VLAN, Port Mirroring, STP/RSTP/MSTP, Link Aggregation Control Protocol, and 802.3x Flow Control.
Advanced IGMP Snooping ensures the switch intelligently forwards multicast streams to only the appropriate subscribers, cutting out unnecessary traffic, while IGMP throttling & filtering restrict each subscriber on a port level to prevent unauthorized multicast access.
Static Routing is a simple way of segmenting the network and internally routs traffic through the switch for improved efficiency.
Advanced QoS
Voice and video traffic can be prioritized based on IP address, MAC address, TCP port number, UDP port number, and more. With QoS (Quality of Service), voice and video services remain smooth, even when bandwidth is in short supply.
ISP Features
sFlow, QinQ, L2PT PPPoE ID Insertion and IGMP authentication features are provided, developed with service providers in mind. 802.3ah OAM and Device Link Detection Protocol (DLDP) offer easy monitoring and troubleshooting of Ethernet links.
IPv6 Support
IPv6 functions such as Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery and IPv6 Neighbor Discover guarantee your network is ready for the Next Generation Network (NGN) without upgrading your hardware.
Product data is provided by Icecat, we do not warrant the accuracy of the material above.