TP-Link TL-SG3428 24-Port Gigabit L2+ Managed Switch – 4× SFP, Omada SDN & Fanless

The TP-Link TL-SG3428 / SG3428 is a professional 24-port Gigabit L2+ managed network switch designed for business networks, offices, schools, retail, hospitality, server rooms and other environments requiring reliable wired connectivity with advanced traffic management and fibre uplink support.

It provides 24 × 10/100/1000Mbps Gigabit RJ45 Ethernet ports together with 4 × 100/1000Mbps Gigabit SFP slots. The SFP interfaces provide flexible fibre connectivity for switch-to-switch uplinks, longer network links and compatible fibre infrastructure, while the 24 copper ports can connect PCs, servers, NAS systems, printers, access points and other Ethernet devices.

The TL-SG3428 integrates with TP-Link Omada Software Defined Networking (SDN) for centralised management and also supports standalone administration through web GUI, CLI, SNMP and RMON. Advanced networking functions include 802.1Q VLANs, static IPv4/IPv6 routing, Link Aggregation, STP/RSTP/MSTP, Access Control Lists, 802.1X authentication, QoS, IGMP/MLD Snooping, DHCP Snooping, ARP Inspection, ERPS and IPv6.

Quick answer: The TP-Link TL-SG3428 is a fanless 24-port Gigabit L2+ managed switch with four additional Gigabit SFP fibre slots, 56Gbps switching capacity and Omada SDN support. It is designed for professional networks that need VLAN segmentation, static routing, LACP, QoS, multicast control, access security and centralised management without the noise of an internal cooling fan.

Key Features of the TP-Link TL-SG3428

• 24 × 10/100/1000Mbps Gigabit RJ45 ports
• 4 × 100/1000Mbps Gigabit SFP slots
• Up to 28 simultaneous Gigabit network interfaces
• 56Gbps switching capacity
• 41.66Mpps packet forwarding rate
• 16K MAC address table on current SG3428 V2.30 specification
• 12Mbit packet buffer on current SG3428 hardware specification
• 9KB Jumbo Frame support
• Fanless design for silent operation
• Durable metal enclosure
• Standard 19-inch rackmountable format
• Approximately 1U height
• TP-Link Omada SDN support
• Omada Hardware Controller support
• Omada Software Controller support
• Omada Cloud-Based Controller support
• Omada App management with compatible controller
• Zero-Touch Provisioning with Omada Cloud-Based Controller
• Static IPv4 and IPv6 routing
• Up to 48 static IPv4/IPv6 routes
• DHCP Server and DHCP Relay functionality
• 802.1Q VLAN
• Up to 4K VLAN groups
• Private VLAN
• Voice VLAN
• MAC VLAN and Protocol VLAN
• QinQ / VLAN VPN support
• Link Aggregation
• IEEE 802.3ad LACP
• STP / RSTP / MSTP
• Loopback Detection
• IGMP Snooping
• MLD Snooping
• Multicast VLAN Registration
• L2/L3/L4 Quality of Service
• 8 priority queues
• Port and flow-based bandwidth control
• Access Control Lists
• 802.1X authentication
• RADIUS and TACACS+ support
• DHCP Snooping
• ARP Inspection
• IP-MAC-Port Binding
• Port Security
• Storm Control
• DoS Defence
• Port Mirroring
• ERPS Ethernet Ring Protection Switching on current SG3428 platform
• Ethernet OAM
• DDM – Digital Diagnostic Monitoring
• sFlow support on current hardware/firmware
• Web, CLI, SNMP and RMON standalone management
• Dual Image and Dual Configuration support
• Cable diagnostics
• IPv4 and IPv6 support
• 100–240V AC internal power supply
• Dimensions: 440 × 180 × 44mm

24 Gigabit Ethernet Ports for Business Networks

The TL-SG3428 provides 24 auto-negotiating 10/100/1000Mbps RJ45 ports, giving businesses enough wired connectivity for a substantial number of network devices from a single 1U switch.

Compatible devices can include:

• Desktop PCs
• Business workstations
• Servers
• NAS storage systems
• Printers
• Wireless access points with separate power
• IP cameras with separate power
• VoIP phones with separate power
• Network controllers
• Routers and gateways
• Additional managed or unmanaged switches

Auto-Negotiation and Auto MDI/MDIX

The copper Ethernet ports support Auto-Negotiation and Auto MDI/MDIX, allowing the switch to automatically determine compatible connection speeds and cable orientation with supported Ethernet devices.

Four Gigabit SFP Fibre Uplink Slots

In addition to its 24 copper ports, the TL-SG3428 provides four SFP slots supporting 100Mbps or 1000Mbps compatible fibre modules.

These slots allow network administrators to use fibre or other compatible SFP media for:

• Switch-to-switch uplinks
• Connections between network cabinets
• Long-distance fibre links
• Connections between different floors
• Building-to-building links
• Fibre network infrastructure
• Network redundancy

Why Use SFP Fibre Instead of Copper Ethernet?

Fibre can provide several practical advantages in suitable network installations, particularly when links need to extend beyond conventional copper Ethernet distances.

Depending on the chosen SFP transceiver and fibre type, fibre connectivity can offer:

• Longer cable runs
• Electrical isolation between network equipment
• Resistance to electromagnetic interference
• Reliable connections between network cabinets
• Single-mode or multimode deployment options

Important: These Are Gigabit SFP Slots, Not 10G SFP+

The four optical uplink interfaces on the TL-SG3428 are Gigabit SFP slots. They do not provide 10Gbps SFP+ connectivity.

The current SG3428 specification lists these interfaces as:

• 4 × 100/1000Mbps SFP slots

If your network requires 10Gbps fibre or DAC uplinks, the TP-Link TL-SG3428X / SG3428X is the faster model with four 10Gbps SFP+ interfaces.

TL-SG3428 vs TL-SG3428X

The TL-SG3428 and TL-SG3428X have very similar names but substantially different uplink capabilities.

• TL-SG3428: 24 × Gigabit RJ45 + 4 × Gigabit SFP
• TL-SG3428X: 24 × Gigabit RJ45 + 4 × 10Gbps SFP+

The standard TL-SG3428 is therefore suitable where Gigabit fibre uplinks are sufficient, while the X version is more appropriate where 10Gbps backbone connectivity is required.

56Gbps Switching Capacity

The TL-SG3428 provides a manufacturer-rated 56Gbps switching capacity.

This corresponds to the bandwidth required to handle the switch's 28 Gigabit interfaces at full duplex, helping the switch process simultaneous network traffic efficiently.

41.66Mpps Packet Forwarding Rate

TP-Link specifies a forwarding rate of approximately 41.66 million packets per second.

This level of packet-processing capability makes the switch suitable for multi-device professional networks where many endpoints may generate traffic simultaneously.

16K MAC Address Table

TP-Link's current SG3428 V2.30 specification provides a 16,000-entry MAC address table.

A larger MAC table gives the switch capacity to learn and track a substantial number of network-device addresses, which can be useful in large or segmented business environments.

12Mbit Packet Buffer

The current SG3428 hardware specification lists a 12Mbit packet buffer.

Packet buffering helps temporarily hold data when network traffic arrives faster than a destination interface can immediately forward it, helping the switch manage short traffic bursts more effectively.

9KB Jumbo Frames

The TL-SG3428 supports Jumbo Frames up to 9KB.

Jumbo Frames can reduce protocol overhead for certain high-volume network transfers, including suitable server, backup and NAS workloads.

All relevant devices in the communication path must use compatible MTU settings for Jumbo Frames to operate correctly.

TP-Link Omada SDN Centralised Management

The TL-SG3428 integrates with TP-Link Omada Software Defined Networking, allowing compatible switches, wireless access points and gateways to be administered through a centralised management platform.

This can reduce administrative workload when an organisation manages multiple network devices or multiple sites.

Compatible Omada Management Options

TP-Link lists centralised management support through compatible:

• Omada Hardware Controllers
• Omada OC200
• Omada OC300
• Omada Software Controller
• Omada Cloud-Based Controller

Unified Wired and Wireless Network Management

An Omada deployment can bring compatible:

• Managed switches
• Wireless access points
• Routers
• Gateways

into one management environment, making it easier to monitor and administer a complete wired and wireless network.

Omada App Support

The switch supports management through the TP-Link Omada mobile app when connected to a compatible Omada Controller deployment.

This allows authorised administrators to monitor compatible networks remotely without needing to connect directly to the switch's local web interface.

Important Controller Requirement

An Omada Controller is not required for standalone operation.

However, Omada App access and centralised cloud management require a compatible:

• Omada Hardware Controller
• Omada Software Controller
• Omada Cloud-Based Controller

Zero-Touch Provisioning

The SG3428 supports Zero-Touch Provisioning when deployed with TP-Link's compatible Omada Cloud-Based Controller.

This can be valuable for businesses deploying network equipment to remote sites because switches can be prepared and administered centrally rather than requiring every configuration task to be performed locally.

Standalone Managed Switch Operation

The TL-SG3428 does not have to be used with Omada.

It also provides comprehensive standalone administration through:

• Web-based graphical interface
• Command Line Interface
• RJ45 console connection
• Micro-USB console connection on applicable revisions
• Telnet
• SSH
• SNMP v1/v2c/v3
• RMON

This makes it suitable for conventional managed networks as well as complete Omada SDN deployments.

L2+ Managed Switching

The TL-SG3428 is an L2+ managed switch, meaning it combines extensive Layer 2 switching features with selected Layer 3 capabilities.

This provides substantially more control than an unmanaged Ethernet switch while allowing features such as static routing to be performed directly by the switch.

Static IPv4 and IPv6 Routing

The SG3428 supports static IPv4 and IPv6 routing, allowing administrators to create predefined routes between compatible network interfaces and subnets.

TP-Link's current SG3428 specification supports up to 48 IPv4/IPv6 static routes.

Reduce Unnecessary Router Traffic

In a correctly configured business network, static routing can allow certain internal traffic to move between local networks without sending every packet to an upstream router.

This can be useful when a network is separated into different VLANs for:

• Employees
• Servers
• Voice systems
• Management devices
• Guests
• Surveillance equipment

Current SG3428 IP Interface Support

TP-Link's current SG3428 V2.30 specification lists up to 128 IPv4/IPv6 interfaces. Earlier TL-SG3428 hardware revisions may provide a lower interface limit, so organisations where this particular capacity is critical should check the hardware revision printed on the physical switch.

DHCP Server and DHCP Relay

The SG3428 supports advanced DHCP functionality including:

• DHCP Server
• DHCP Interface Relay
• DHCP VLAN Relay
• DHCP Layer 2 Relay

These functions can help administrators manage IP-address assignment across segmented network environments.

802.1Q VLAN Network Segmentation

The switch supports IEEE 802.1Q VLANs with up to 4K VLAN groups.

VLANs allow multiple logically separate networks to operate over the same physical switching infrastructure.

Typical VLAN Uses

A business may create separate VLANs for:

• Staff computers
• Guest Wi-Fi
• Servers
• VoIP equipment
• CCTV cameras
• Management interfaces
• IoT devices

This can improve network organisation, security and traffic control when correctly configured.

Advanced VLAN Features

The SG3428 supports a broad range of VLAN technologies including:

• 802.1Q Tagged VLAN
• MAC VLAN
• Protocol VLAN
• Private VLAN
• Voice VLAN
• GVRP
• Port-Based QinQ
• Selective QinQ

Link Aggregation and LACP

The TL-SG3428 supports both static Link Aggregation and IEEE 802.3ad LACP.

Multiple compatible network interfaces can be grouped into a logical link where the connected equipment supports matching aggregation.

Why Use LACP?

Potential benefits include:

• Higher aggregate bandwidth between compatible devices
• Redundant network links
• More resilient server connections
• Aggregated switch-to-switch uplinks
• NAS link aggregation

Link Aggregation generally increases total bandwidth across multiple network flows rather than making one individual network transfer exceed the speed of a single member link.

Spanning Tree Protocol Support

The switch supports:

• IEEE 802.1D STP
• IEEE 802.1W RSTP
• IEEE 802.1S MSTP

Spanning Tree protocols help prevent Ethernet loops when redundant paths exist between network switches.

Additional STP Protection

TP-Link also provides STP security functions including:

• TC Protect
• BPDU Filter
• Root Protect

Loopback Detection

The SG3428 supports both port-based and VLAN-based loopback detection.

This can help administrators identify network loops that could otherwise generate broadcast storms and disrupt Ethernet connectivity.

ERPS Ethernet Ring Protection

Current SG3428 hardware and firmware support ERPS – Ethernet Ring Protection Switching.

ERPS is designed for networks built using ring topologies, providing rapid recovery if an Ethernet link in the ring fails.

This feature can be particularly useful in enterprise, campus and ISP-style network designs where connection resilience is important.

IGMP Snooping for Multicast Networks

The switch supports IGMP Snooping to intelligently manage IPv4 multicast traffic.

Instead of unnecessarily forwarding every multicast stream to every switch port, IGMP Snooping allows the switch to identify which interfaces actually need particular multicast traffic.

Useful for IPTV and Multicast Video

Multicast management can be valuable for:

• IPTV
• Enterprise video distribution
• Multicast streaming
• Network video applications

MLD Snooping for IPv6

For IPv6 networks, the SG3428 also supports MLD Snooping, providing similar multicast-management functionality for IPv6 traffic.

Multicast VLAN Registration

MVR – Multicast VLAN Registration allows multicast traffic to be distributed across appropriate VLAN configurations without unnecessarily duplicating multicast streams.

Advanced Quality of Service

The TL-SG3428 provides L2/L3/L4 Quality of Service functionality with eight priority queues.

Supported traffic prioritisation includes:

• 802.1p CoS
• DSCP priority
• Strict Priority scheduling
• Weighted Round Robin
• Combined SP + WRR scheduling

Prioritise Voice and Video

QoS can help prioritise delay-sensitive network applications such as:

• VoIP calls
• Video conferencing
• Real-time communications
• Business-critical applications

This is useful when important real-time traffic shares network bandwidth with downloads, backups or other high-volume transfers.

Bandwidth Control

The switch supports port-based and flow-based rate limiting.

Administrators can use bandwidth controls to limit how much network capacity particular devices or traffic classes can consume.

Access Control Lists

Comprehensive Access Control Lists allow network administrators to permit, restrict or redirect traffic according to defined rules.

ACL rules can use information including:

• Source MAC address
• Destination MAC address
• VLAN ID
• Source IP address
• Destination IP address
• IP protocol
• TCP/UDP ports
• DSCP
• IPv6 information

802.1X Network Authentication

The TL-SG3428 supports IEEE 802.1X authentication, allowing compatible network infrastructure to require authentication before access is granted.

Supported authentication functionality includes:

• Port-based authentication
• MAC-based authentication
• MAB – MAC Authentication Bypass
• Guest VLAN
• VLAN assignment
• RADIUS authentication
• RADIUS accounting
• TACACS+

IP-MAC-Port Binding

IP-MAC-Port Binding allows administrators to associate IP addresses, MAC addresses and switch ports as part of a controlled network-access strategy.

TP-Link's current specification supports up to 512 IPv4 binding entries and additional IPv6-MAC-Port binding functionality.

DHCP Snooping

DHCP Snooping can help protect a managed network from unauthorised or rogue DHCP servers by controlling which switch interfaces are trusted to provide DHCP information.

ARP Inspection

ARP Inspection can help protect networks against certain ARP spoofing techniques by validating ARP traffic against trusted network information.

IPv4 and IPv6 Source Guard

The current SG3428 platform supports both IPv4 and IPv6 Source Guard, providing additional control over which source addresses are permitted on selected interfaces.

Port Security

The switch provides static and dynamic Port Security and can restrict the number of MAC addresses allowed through particular interfaces.

Current SG3428 specifications support up to 64 secure MAC addresses per port.

Storm Control

Broadcast, multicast and unknown-unicast Storm Control can help prevent abnormal traffic from consuming excessive switching capacity.

TP-Link provides kbps, ratio and packets-per-second control methods on supported configurations.

DoS Defence

The TL-SG3428 includes protection against a range of common Denial-of-Service attack patterns, helping administrators protect network availability against certain malformed or malicious traffic.

Port Isolation

Port Isolation allows selected Ethernet ports to be prevented from communicating directly with one another while retaining access to designated upstream interfaces.

This can be useful in:

• Hotels
• Student accommodation
• Guest networks
• Shared business networks

Port Mirroring for Diagnostics

The switch supports Port Mirroring, allowing network traffic from selected interfaces to be copied to a monitoring port.

This is useful for:

• Packet capture
• Network diagnostics
• Security monitoring
• Performance troubleshooting

sFlow Network Traffic Monitoring

Current SG3428 hardware and firmware provide sFlow functionality for compatible network-monitoring environments.

sFlow can provide traffic visibility and statistics to suitable monitoring platforms without requiring full packet capture of every network flow.

Ethernet OAM

The SG3428 includes IEEE 802.3ah Ethernet Operations, Administration and Maintenance functionality on current hardware/firmware.

OAM features can help service providers and network administrators monitor and troubleshoot Ethernet links.

DDM – Digital Diagnostic Monitoring

Digital Diagnostic Monitoring can provide diagnostic information from compatible SFP optical transceivers.

Available information depends on the installed module but may include operational parameters useful for monitoring optical links.

IPv4 and IPv6 Dual-Stack Networking

The TL-SG3428 supports both IPv4 and IPv6, allowing it to operate in modern dual-stack networks.

IPv6 functions include:

• IPv4/IPv6 dual stack
• IPv6 interfaces
• Static IPv6 routing
• IPv6 ACL
• MLD Snooping
• IPv6 Neighbor Discovery
• PMTU Discovery
• ICMPv6
• TCPv6 / UDPv6
• DHCPv6 Client
• IPv6 SNMP
• IPv6 SSH
• IPv6 HTTPS

SNMP and RMON Management

The switch supports:

• SNMP v1
• SNMP v2c
• SNMP v3
• SNMP Trap / Inform
• RMON groups 1, 2, 3 and 9

This enables integration with compatible third-party network-management and monitoring platforms.

Dual Image and Dual Configuration

The SG3428 supports Dual Image and Dual Configuration.

Maintaining alternate firmware and configuration information can provide additional resilience during administrative changes or firmware maintenance.

Built-In Cable Diagnostics

Integrated cable diagnostics can help network administrators identify certain physical Ethernet cable faults directly from the switch's management interface.

This can simplify troubleshooting where a wired network connection unexpectedly stops working.

Fanless Design for Silent Operation

The TL-SG3428 uses passive fanless cooling.

Because there is no internal cooling fan, the switch produces no fan noise and eliminates a mechanical component that could otherwise require maintenance over time.

Suitable for Noise-Sensitive Installations

Fanless operation is particularly useful in:

• Offices
• Meeting rooms
• Classrooms
• Retail shops
• Home offices
• Reception areas
• Quiet network cupboards

Low-Power Non-PoE Design

The SG3428 does not include PoE power circuitry, helping keep its electrical consumption and heat output relatively modest for a professional 28-interface managed switch.

TP-Link's current SG3428 V2.30 specification lists a maximum consumption of approximately 20.6W at 220V / 50Hz.

Power consumption can vary between hardware revisions, operating voltage and network configuration.

Important: The TL-SG3428 Is Not a PoE Switch

The 24 RJ45 Ethernet ports do not provide Power over Ethernet.

The switch can carry network data to devices such as:

• Wireless access points
• IP cameras
• VoIP phones

but those devices require their own compatible power supply, PoE injector or separate PoE switch.

When Should You Choose a PoE Version?

If you want the switch itself to power multiple access points, IP cameras or phones through Ethernet cables, consider an appropriate TP-Link PoE/PoE+ model such as a compatible SG3428MP-series switch instead.

Rackmountable Metal Chassis

The TL-SG3428 uses a durable metal enclosure measuring approximately:

• Width: 440mm
• Depth: 180mm
• Height: 44mm

The approximately 44mm height corresponds to a conventional 1U rackmount form factor.

19-Inch Rack Installation

TP-Link supplies a rackmount kit for installation into a compatible 19-inch network cabinet or rack.

Rubber feet are also included for suitable desktop or shelf placement.

Internal 100–240V AC Power Supply

The SG3428 uses an integrated 100–240V AC, 50/60Hz power supply.

A separate external power brick is therefore not required for normal operation.

Suitable for Office Networks

The combination of 24 copper Gigabit Ethernet ports, four fibre SFP slots and advanced management functionality makes the TL-SG3428 particularly suitable for small and medium business networks.

A typical office installation could connect:

• Employee computers
• Printers
• Servers
• NAS storage
• Network controllers
• Separately powered wireless access points

while using fibre SFP interfaces to connect other network cabinets or switches.

Suitable for Schools and Education Networks

Schools, colleges and training environments can use VLANs to separate:

• Staff networks
• Student networks
• Guest connectivity
• Administration systems
• Server infrastructure

Omada centralised management can also simplify administration where compatible TP-Link switches and wireless access points are deployed across multiple classrooms or buildings.

Suitable for Hospitality

Hotels, restaurants and other hospitality businesses can use the SG3428 as part of a managed network incorporating separate staff, guest, VoIP and infrastructure VLANs.

Functions such as QoS, authentication, Port Isolation and centralised Omada management are particularly useful in shared-network environments.

Suitable for CCTV Networks

The switch can also form part of an IP surveillance network where cameras receive power separately.

VLAN segmentation, Port Security, bandwidth control and high port density can help administrators organise CCTV traffic separately from business computers and guest networks.

Remember that this model does not supply PoE power to cameras.

Suitable for Fibre-Linked Network Cabinets

The four Gigabit SFP slots make the TL-SG3428 particularly useful where different network cabinets need to be connected using fibre.

Fibre may be preferred between floors or buildings where copper cable distance, electrical isolation or electromagnetic interference is a concern.

Who Is the TP-Link TL-SG3428 Best For?

• Small and medium businesses
• Offices requiring 24 Gigabit Ethernet ports
• Omada SDN networks
• Schools and colleges
• Hospitality networks
• Retail environments
• IT administrators
• Network cabinets requiring silent operation
• Networks using Gigabit fibre uplinks
• VLAN-segmented networks
• Networks requiring static routing
• Networks requiring LACP
• Networks requiring 802.1X authentication
• Businesses requiring advanced ACL and security functions

Who Should Consider a Different Network Switch?

A different switch may be more suitable if you specifically require:

• 10Gbps SFP+ uplinks
• 2.5Gbps RJ45 Multi-Gig Ethernet
• PoE / PoE+ power for access points, cameras or phones
• More than 24 copper Ethernet ports
• A simple unmanaged plug-and-play switch
• A full Layer 3 core switch with advanced dynamic-routing requirements

TP-Link TL-SG3428 Technical Overview

• Brand: TP-Link
• Series: JetStream / Omada
• Model: TL-SG3428 / SG3428
• Product Type: L2+ Managed Ethernet Switch
• RJ45 Ports: 24
• RJ45 Speed: 10 / 100 / 1000Mbps
• SFP Slots: 4
• SFP Speed: 100 / 1000Mbps on current SG3428 specification
• 10G SFP+: No
• PoE: No
• Switching Capacity: 56Gbps
• Packet Forwarding Rate: 41.66Mpps
• MAC Address Table: 16K on current SG3428 V2.30
• Packet Buffer: 12Mbit on current SG3428 V2.30
• Jumbo Frame: 9KB
• Fan: Fanless
• Static Routing: Yes
• Maximum Static Routes: 48 IPv4 / IPv6
• Current IP Interfaces: Up to 128 on current SG3428 V2.30
• VLAN Groups: Up to 4K
• 802.1Q VLAN: Yes
• Private VLAN: Yes
• Voice VLAN: Yes
• QinQ: Yes
• Link Aggregation: Yes
• LACP: Yes
• STP / RSTP / MSTP: Yes
• ERPS: Supported on current hardware / firmware
• IGMP Snooping: Yes
• MLD Snooping: Yes
• QoS: L2 / L3 / L4
• Priority Queues: 8
• ACL: Yes
• 802.1X: Yes
• RADIUS: Yes
• TACACS+: Yes
• DHCP Snooping: Yes
• ARP Inspection: Yes
• Port Security: Yes
• Storm Control: Yes
• DoS Defence: Yes
• Port Isolation: Yes
• Port Mirroring: Yes
• Ethernet OAM: Supported on current hardware / firmware
• DDM: Supported on current hardware / firmware
• sFlow: Supported on current hardware / firmware
• IPv6: Yes
• Omada SDN: Supported
• Omada App: Supported with compatible controller
• Zero-Touch Provisioning: Supported with Omada Cloud-Based Controller
• Standalone Web Management: Yes
• CLI: Yes
• SNMP: v1 / v2c / v3
• RMON: Yes
• Dual Image / Configuration: Yes
• Cable Diagnostics: Yes
• Power Supply: Internal 100–240V AC, 50/60Hz
• Current V2.30 Maximum Power Consumption: 20.6W at 220V / 50Hz
• Mounting: Rackmountable / Desktop
• Rack Height: Approximately 1U
• Dimensions: 440 × 180 × 44mm
• Chassis: Metal
• EAN / GTIN-13: 6935364010720

What Is Included?

• 1 × TP-Link TL-SG3428 / SG3428 Managed Switch
• 1 × AC Power Cord
• 1 × Quick Installation Guide
• 1 × Rackmount Kit
• Rubber Feet

SFP transceivers, fibre cables, Ethernet cables and Omada controllers are not listed as included with the standard switch package and should be purchased separately where required.

Important SFP Compatibility Note

The TL-SG3428 uses Gigabit SFP interfaces rather than 10Gbps SFP+. Select compatible SFP modules according to the required network speed, fibre type, wavelength, connector type and link distance.

TP-Link's current SG3428 specification lists the SFP interfaces as 100/1000Mbps.

Important PoE Note

The TL-SG3428 is a non-PoE managed switch. It does not supply electrical power through its RJ45 Ethernet ports.

PoE-powered wireless access points, cameras and phones require another suitable power source.

Important Omada Management Note

The switch can operate independently without an Omada Controller. However, Omada App and centralised cloud management require a compatible Omada Controller, while Zero-Touch Provisioning requires the Omada Cloud-Based Controller.

Important Hardware Revision Note

TP-Link has released multiple hardware revisions under the TL-SG3428 / SG3428 name. Core functions such as 24 Gigabit RJ45 ports, four Gigabit SFP slots, 56Gbps switching capacity and fanless operation remain consistent, but some capacity limits and advanced functions vary between revisions.

For example, older TL-SG3428 V1 specifications list an 8K MAC address table and 16 IPv4/IPv6 interfaces, while TP-Link's current SG3428 V2.30 specification lists a 16K MAC table, 12Mbit packet buffer and 128 IP interfaces.

Check the hardware revision printed on the physical switch where a revision-specific feature or maximum capacity is critical.

Important Routing Note

The TL-SG3428 is an L2+ managed switch with static routing. It should not automatically be treated as a replacement for an Internet router, firewall or Omada security gateway.

WAN connectivity, NAT, VPN gateway functionality and advanced firewall services normally require an appropriate separate router or gateway.

Why Choose the TP-Link TL-SG3428?

The TP-Link TL-SG3428 / SG3428 is a strong choice for businesses that need many reliable Gigabit Ethernet connections together with professional network management and flexible fibre connectivity.

Its 24 Gigabit RJ45 ports and four Gigabit SFP slots provide a practical combination for desktop devices and fibre-linked network infrastructure, while the 56Gbps switching capacity and 41.66Mpps forwarding rate provide the performance required for a busy wired LAN.

Advanced capabilities including VLANs, static routing, LACP, STP/RSTP/MSTP, ACLs, QoS, IGMP/MLD Snooping, 802.1X, DHCP Snooping, ARP Inspection, ERPS and IPv6 provide far greater network control than an unmanaged or basic smart switch.

Integration with TP-Link Omada SDN makes the SG3428 particularly useful for organisations already using Omada gateways and access points, while standalone Web, CLI, SNMP and RMON management ensures it can also be deployed in conventional managed networks.

The fanless 1U metal chassis provides silent operation, making the switch suitable for offices and other environments where an audible cooling fan would be undesirable.

Choose the TP-Link TL-SG3428 if you need a professional 24-port Gigabit L2+ managed switch with four Gigabit SFP fibre uplinks, Omada SDN support, advanced VLAN and security functions, static routing and silent fanless operation.