TP-Link Omada 28-Port Gigabit L2+ Managed Switch with 24-Port PoE+ 384W
Email sales@sourceit.com.sg or use Request for Quotation below and our team will confirm the latest price, availability and lead time.
PRODUCT DESCRIPTION
TP-Link Omada 28-Port Gigabit L2+ Managed Switch with 24-Port PoE+ (SG3428MP) - 5 Years Local Warranty
The SG3428MP is Omada's mainstream 24-port PoE+ access switch: 24 powered Gigabit ports on a 384 W budget, four Gigabit SFP uplinks, full L2+ static routing and an unusually complete security and ACL feature set for its class. It is the default choice for a floor, a wing or a small building running on Omada.
Twenty-Four PoE+ Ports With a 384 W Budget
All 24 RJ45 ports are 802.3at/af compliant and can deliver up to 30 W each, drawn from a shared 384 W system budget. That is generous for this port count — an average of 16 W per port with every port occupied — so a full complement of access points, IP phones and fixed cameras fits without careful rationing. Per-port consumption is reported in the Omada Controller once the switch is adopted, so headroom stays visible as the deployment grows.
Four Gigabit SFP Slots for Fibre Uplinks
Four Gigabit SFP slots provide the backhaul. Beyond throughput, fibre buys distance and electrical isolation, letting the switch sit in a riser, an annexe or a separate building and still terminate cleanly at the core; the slots can also be aggregated or split across two upstream switches for a redundant path. Where a floor needs more than Gigabit of uplink, the SG3428XMP and SG3428XMPP offer the same port count with 10G SFP+ slots.
56 Gbps Fabric, 16 K MAC Table and a 12 Mbit Buffer
The 56 Gbps switching capacity covers all 28 ports running full duplex simultaneously, and a 41.66 Mpps forwarding rate sustains line rate at minimum frame sizes. A 12 Mbit packet buffer absorbs bursts from camera recording and scheduled backups, 9 KB jumbo frames suit storage traffic, and the 16 K MAC address table is sized well beyond what a 28-port switch normally sees, so a heavily segmented network behind it is no strain. Two fans handle the PoE stage.
Static Routing, QinQ VLANs and Voice VLAN
The switch routes on its own: 128 IPv4/IPv6 interfaces, 48 static routes, 128 static ARP entries, 512 ARP entries, Proxy and Gratuitous ARP, plus DHCP Server, DHCP Relay and DHCP L2 Relay. Up to 4K 802.1Q VLAN groups are available with MAC VLAN, Protocol VLAN, Private VLAN, GVRP, Voice VLAN and both Port-Based and Selective QinQ. QoS classifies by 802.1p CoS or DSCP into eight priority queues, scheduled with SP, WRR or SP+WRR, with port- and flow-based rate limiting.
Thorough Access Control and 802.1X With Guest VLAN
ACLs cover time-based, MAC, IP, combined, packet-content and IPv6 rules applied per port or VLAN, with mirroring, redirect, rate-limit and QoS-remark policies. Authentication includes 802.1X port-based and MAC-based modes with RADIUS authentication and accounting, MAB, dynamic VLAN Assignment and a Guest VLAN. IP-MAC-Port Binding, IPv4 and IPv6 Source Guard, DHCP and DHCPv6 Snooping, ARP Inspection, ND Detection and Snooping, Port Security to 64 MACs per port and Storm Control complete the picture.
Managed Centrally Through Omada SDN
Adopted into an Omada Cloud-Based, Hardware or Software Controller, the SG3428MP is managed alongside your gateways and access points, with automatic device discovery, batch configuration, batch firmware upgrading, intelligent network monitoring, abnormal event warnings, unified configuration and reboot schedules. Zero-Touch Provisioning brings a remote unit online without a technician on site. SNMP v1/v2c/v3, RMON, LLDP/LLDP-MED, CPU monitoring and system logging cover integration with existing NMS tooling.
Ideal For
Singapore offices, schools, hotels, clinics and managed-service providers building a PoE+ access layer on Omada, and IT teams that want one controller for the whole network. Supplied by SourceIT with local Singapore warranty, GST invoice and project pricing on request.
SG3428MP Datasheet — Technical Specifications
General
| Model | SG3428MP |
| Official Product Name | Omada 28-Port Gigabit L2+ Managed Switch with 24-Port PoE+ |
| Brand | TP-Link Omada |
| Warranty | 5 Years Local Warranty (Singapore) |
Hardware
| Interface | 24× 10/100/1000 Mbps RJ45 PoE+ Ports, 4× Gigabit SFP Slots, 1× RJ45 Console Port, 1× Micro-USB Console Port |
| PoE Standard | 802.3at/af compliant — 24 PoE+ Ports (up to 30 W per port) |
| PoE Power Budget | 384 W |
| Switching Capacity | 56 Gbps |
| Packet Forwarding Rate | 41.66 Mpps |
| MAC Address Table | 16 K |
| Packet Buffer Memory | 12 Mbit |
| Jumbo Frame | 9 KB |
| Dimensions (W x D x H) | 17.3 × 13.0 × 1.7 in (440 × 330 × 44 mm) |
| Fan Quantity | 2 |
| Mounting | Rack Mountable |
| Physical Security Lock | Yes |
| Power Supply | 100-240 V AC ~ 50/60 Hz |
| Max Power Consumption | 480.1 W (110V/60Hz, with 384 W PD connected) |
| Max Heat Dissipation | 1637.14 BTU/hr (110V/60Hz, with 384 W PD connected) |
| Operating Temperature | 0 °C to 45 °C (32 °F to 113 °F) |
| Storage Temperature | -40 °C to 70 °C (-40 °F to 158 °F) |
| Operating Humidity | 10% to 90% RH, non-condensing |
| Storage Humidity | 5% to 90% RH, non-condensing |
| Certification | CE, FCC, RoHS |
Software
| L2 and L2+ Features | 128 IP Interfaces (IPv4/IPv6); Static Routing — 48 IPv4/IPv6 Static Routes; Static ARP (128 entries); 512 ARP Entries; Proxy ARP; Gratuitous ARP; DHCP Server; DHCP Relay; DHCP L2 Relay; Link Aggregation; Spanning Tree Protocol; Loopback Detection; 802.3x Flow Control; Mirroring; Device Link Detect Protocol (DLDP) |
| VLAN | Max 4K VLAN Groups; 802.1Q Tagged VLAN; MAC VLAN (30 entries); Protocol VLAN (Protocol Template 16, Protocol VLAN 16); Private VLAN; GVRP; VLAN VPN (QinQ) — Port-Based and Selective QinQ; Voice VLAN |
| L2 Multicast | 511 (IPv4, IPv6) IGMP groups; IGMP Snooping; IGMP Authentication; Multicast VLAN Registration (MVR); MLD Snooping; Multicast Filtering (256 profiles, 16 entries per profile) |
| QoS | 8 priority queues; 802.1p CoS/DSCP priority; Queue scheduling SP, WRR, SP+WRR; Bandwidth Control — port/flow-based rate limiting |
| Access Control List | Time-based ACL; MAC ACL (Source MAC, Destination MAC, VLAN ID, User Priority, Ether Type); IP ACL (Source IP, Destination IP, Fragment, IP Protocol, TCP Flag, TCP/UDP Port, DSCP/IP TOS, User Priority); Combined ACL; Packet Content ACL; IPv6 ACL; Policies — Mirroring, Redirect, Rate Limit, QoS Remark; applied per Port or VLAN |
| Security | IP-MAC-Port Binding (512 entries); DHCP Snooping; ARP Inspection; IPv4 Source Guard (100 entries); IPv6-MAC-Port Binding (512 entries); DHCPv6 Snooping; ND Detection; ND Snooping; IPv6 Source Guard (100 entries); DoS Defend; DHCP Filter; Port Security (64 MAC per port); Storm Control; 802.1X port-based and MAC-based authentication with VLAN Assignment, MAB, Guest VLAN and RADIUS authentication/accounting; AAA (TACACS+); Port Isolation; HTTPS/SSL/TLS 1.2; SSH v1/v2; IP/Port/MAC-based access control |
| IPv6 | Dual IPv4/IPv6; MLD Snooping; IPv6 ACL; IPv6 Interface; Static IPv6 Routing; ND; Path MTU Discovery; ICMPv6; TCPv6/UDPv6; DHCPv6 Client; Ping6; Tracert6; Telnet (v6); IPv6 SNMP/SSH/SSL/HTTP/HTTPS/TFTP |
| Advanced Features | Automatic Device Discovery; Batch Configuration; Batch Firmware Upgrading; Intelligent Network Monitoring; Abnormal Event Warnings; Unified Configuration; Reboot Schedule; L2PT; DLDP; PPPoE ID Insertion; ERPS; 802.3ah Ethernet Link OAM; DDM; sFlow |
| Management | Omada App; Centralized Management via Omada Cloud-Based, Hardware or Software Controller; Cloud Access; Zero-Touch Provisioning; Web-based GUI; CLI via console/telnet; SNMP v1/v2c/v3 with Trap/Inform; RMON (1,2,3,9 groups); SDM Template; DHCP/BOOTP Client; 802.1ab LLDP/LLDP-MED; DHCP AutoInstall; Dual Image/Configuration; CPU Monitoring; Cable Diagnostics; EEE; Password Recovery; SNTP; System Log |
| MIBs | MIB II (RFC1213); Bridge MIB (RFC1493); P/Q-Bridge MIB (RFC2674); RADIUS Accounting Client MIB (RFC2620); RADIUS Authentication Client MIB (RFC2618); Remote Ping / Traceroute MIB (RFC2925); RMON MIB (RFC1757, rmon 1,2,3,9); TP-Link private MIBs |
Compatibility & Software Support
The SG3428MP is part of the Omada ecosystem: gateways, switches and access points are managed together from one controller, under one set of policies, with one view of the network. Cloud and app features listed below require the device to be adopted into an Omada Controller.
| Omada SDN Controller | Supported — adopt and manage centrally from the Omada Software Controller, Hardware Controller or Cloud-Based Controller |
| Omada App | Supported — remote management from iOS and Android |
| Omada Cloud Access | Supported |
| Zero-Touch Provisioning | Supported |
| PoE Devices | Any 802.3af or 802.3at powered device up to 30 W per port, within the 384 W system budget |
| Standalone Mode | Supported — web GUI, or CLI via the console port |
Package Contents & Ordering Information
Package Contents
| In the Box | SG3428MP Switch, Power Cord, Quick Installation Guide, Rackmount Kit, Rubber Feet |
Ordering Information
| Model | SG3428MP |
| Optics | Gigabit SFP modules are ordered separately — ask SourceIT to quote them with the switch |
Datasheet & Downloads
Frequently Asked Questions — SG3428MP
How many access points will 384 W power?
PoE+ allows up to 30 W per port, but 384 W is the shared total across all 24 ports — an average of 16 W per port with every port in use. Size the deployment against the actual draw of your devices; the Omada controller reports per-port consumption once the switch is adopted.
What is the difference between the SG3428MP and the SG3428XMP?
Both provide 24 PoE+ ports. The SG3428MP has four Gigabit SFP uplinks; the SG3428XMP has four 10G SFP+ uplinks. Choose the latter when the floor's backhaul needs more than Gigabit.
Does it need an Omada Controller?
No. The switch runs standalone through its own web GUI or CLI. Adopting it into an Omada Software, Hardware or Cloud-Based Controller is what unlocks central configuration, monitoring, firmware management and cloud/app access across every Omada device on site — at no licence cost.
Can it route between VLANs on its own?
Yes. It supports 128 IPv4/IPv6 IP interfaces and 48 static routes, plus DHCP Server and DHCP Relay, so inter-VLAN traffic is routed locally rather than sent up to the gateway.
What warranty does SourceIT provide?
Five years local Singapore warranty. Every SG3428MP sold by SourceIT comes with a GST invoice.






