-
$
SG2428LP is an L2 Smart Managed switch fully integrated with the Omada SDN ecosystem, equipped with 24 Gigabit RJ45 ports and 4 Gigabit SFP slots designed for creating fiber optic uplinks. The hardware design includes 16 ports supporting the PoE+ standard, allowing for direct powering of end devices such as WiFi access points, surveillance cameras, or IP phones while maintaining stable data transmission. The switch supports key Layer 2 functions, including VLAN support, Spanning Tree protocols, and advanced QoS mechanisms for network traffic prioritization. The device offers a range of security features such as Access Control Lists (ACL) and IP-MAC-Port binding, ensuring effective protection against unauthorized resource access. The 1U 19-inch rack-standard unit allows for easy installation in server cabinets, and its administration is carried out centrally via the Omada SDN platform or locally through a graphical user interface (GUI) and SNMP protocol.

SDN (Software Defined Networking) Platform and Cloud Access
Remotely manage your Access Points, Switches, and Gateways across multiple locations from a single interface.

Multiple Application Scenarios

Specification
| TP-Link SG2428LP | |
| Hardware Features | |
|---|---|
| Ports | 16× 10/100/1000 Mbps RJ45 PoE+ Ports (Auto-Negotiation/Auto MDI/MDIX) 8× 10/100/1000 Mbps RJ45 Non-PoE Ports (Auto-Negotiation/Auto MDI/MDIX) 4× Gigabit SFP Slots |
| Fan Quantity | Fanless |
| Physical Security Lock | Yes |
| Power Supply | 100-240 V AC~50/60 Hz |
| PoE Ports (RJ45) | Standard: 802.3at/af compliant 16 PoE+ Ports, up to 30 W per port PoE Power Budget: 150 W* |
| Dimensions (W x D x H) | 440 × 220 × 44 mm (17.3 × 8.7 × 1.73 in) |
| Mounting | Rack Mountable |
| Max Power Consumption | 184.7 W (110V/60Hz) (with 150 W PoE devices connected) |
| Max Heat Dissipation | 628.0 BTU/h (110V/60 Hz) (with 150 W PoE devices connected) |
| Performance | |
| Switching Capacity | 56 Gbps |
| Packet Forwarding Rate | 41.66 Mpps |
| MAC Address Table | 8K |
| Packet Buffer | 4.1 Mb |
| Jumbo Frame | 9 KB |
| Software Features | |
| Quality of Service | 802.1p CoS/DSCP priority support 8 priority queues Queue scheduling mode: SP (Strict Priority), WRR (Weighted Round Robin) Queue Weight Config Bandwidth Control: Port/Flow based Rating Limiting Smoother Performance Storm Control: Multiple Control Modes (kbps/ratio), Broadcast/Multicast/Unknown-Unicast |
| L2 and L2+ Features | • 16 IP Interfaces: Support IPv4/IPv6 interfaces • Static Routing: 32 IPv4/IPv6 Static Routes • DHCP Server • DHCP Relay - DHCP Interface Relay - DHCP VLAN Relay • DHCP L2 Relay • Static ARP • Proxy ARP • Gratuitous ARP • Link Aggregation • Spanning Tree Protocol (STP) • Loopback Detection • 802.3x Flow Control • Mirroring • Device Link Detect Protocol (DLDP) • 802.1ab LLDP/ LLDP-MED |
| L2 Multicast | Support 511 shared multicast groups (IPv4, IPv6) IGMP Snooping Multicast VLAN Registration (MVR) Multicast Filtering Limited IP Multicast: 256 profiles and 16 entries per profile |
| Advanced Features | Automatic Device Discovery† Batch Configuration† Batch Firmware Upgrading† Intelligent Network Monitoring† Abnormal Event Warnings† Unified Configuration† Reboot Schedule† |
| VLANs | • VLAN Groups: Max 4K VLAN Groups • 802.1Q Tagged VLAN • MAC VLAN: 12 entries • Protocol VLAN • GVRP • Voice VLAN |
| Access Control Lists | • Support up to 230 entries • Time-based ACL • MAC ACL • IP ACL • IPv6 ACL • Combined ACL • Rule Operation: Permit/Deny • Policy Action - Mirroring - Redirect - Rate Limit - QoS Remark • ACL Rules Binding - Port Binding - VLAN Binding |
| Security | • IP-MAC-Port Binding • AAA • 802.1X Authentication - Port-based authentication - MAC-based (Host) authentication - Authentication Method includes PAP/EAP-MD5 - MAB - Guest VLAN - Support RADIUS authentication and accountability • IP/IPv6-MAC Binding - 512 Binding Entries - DHCP Snooping - DHCPv6 Snooping - ARP Inspection - ND Detection • IP Source Guard - 253 Entries - Source IP + Source MAC • IPv6 Source Guard - 183 Entries - Source IPv6 + Source MAC • DoS Defend • Port Security Static/Dynamic/Permanent: Up to 64 MAC addresses per port • Broadcast/Multicast/Unknown-Unicast Storm Control: kbps/ratio control mode • Port Isolation • Secure Web Management via HTTPS with SSLv3/TLS 1.2 • Secure CLI Management with SSHv1/SSHv2 • IP/Port/MAC based Access Control |
| IPv6 | • IPv6 Static Routing and ACL • IPv6 Dual IPv4/IPv6 • IPv6 Interface • Multicast Listener Discovery (MLD) Snooping • IPv6 Neighbor Discovery (ND) • Path Maximum Transmission Unit (MTU) Discovery • ICMP v6 • TCPv6/UDPv6 • IPv6 Applications: - DHCPv6 Client - Ping6 - Tracert6 - Telnet (v6) - SNMP IPv6 - SSH IPv6 - SSL IPv6 - HTTP/HTTPS - TFTP IPv6 |
| MIBs | MIB II (RFC1213) Bridge MIB (RFC1493) P/Q-Bridge MIB (RFC2674) Radius Accounting Client MIB (RFC2620) Radius Authentication Client MIB (RFC2618) Remote Ping, Traceroute MIB (RFC2925) Support TP-Link private MIB RMON MIB(RFC1757, rmon 1,2,3,9) |
| Management | |
| Omada App | Yes. Requires use of Omada Hardware Controller, Cloud-Based Controller, or Software Controller. |
| Centralized Management | Omada Cloud-Based Controller Omada Hardware Controller Omada Software Controller |
| Cloud Access | Yes. Requires use of Omada Hardware Controller, Cloud-Based Controller, or Software Controller. |
| Zero-Touch Provisioning (ZTP) | Yes. Requires use of Omada Cloud-Based Controller. |
| Management Features | Web-based GUI Command Line Interface (CLI) through Telnet SNMP v1/v2c/v3 SNMP Trap/Inform RMON (1, 2, 3, 9 groups) SDM Template DHCP/BOOTP Client Dual Image, Dual Configuration CPU Monitoring Cable Diagnostics EEE SNTP System Log |
| Others | |
| Package Contents | SG2428LP Unit Power Cord Quick Installation Guide Rackmount Kit Rubber Feet |
| System Requirements | Microsoft® Windows® XP, Vista™, 7, 8, 10, 11 MAC® OS NetWare® UNIX® Linux |
| Environment | Operating Temperature: 0?~40? (32?~104?) Storage Temperature: -40?~70? (-40?~158?) Operating Humidity: 10%~90% non-condensing Storage Humidity: 5%~90% non-condensing |





