TP-LINK Omada SG6428XHP 24-Port Gigabit Stackable L3 Managed PoE+ Switch

The TP-LINK SG6428XHP is a high-performance L3 managed PoE+ switch engineered for enterprise, SMB, and ISP network convergence layer applications. This stackable switch delivers 24 Gigabit PoE+ ports, 4x 10 Gbps SFP+ slots, and a robust 720W PoE power budget to support demanding network infrastructures.

High-Power PoE+ for Complete Network Deployment

With 24 IEEE 802.3at/af-compliant PoE+ ports delivering up to 30W per port and 720W total power budget, the SG6428XHP eliminates the need for separate power cabling when deploying wireless access points, IP surveillance cameras, and VoIP phones. Perpetual PoE maintains uninterrupted power to connected devices during switch reboots, while fast PoE functionality preserves power settings across restarts.

Enterprise-Grade Performance and Stacking

The switch provides 128 Gbps switching capacity per unit with 95.2 Mpps packet forwarding rate. Physical stacking supports up to 4 units with 512 Gbps total switching capacity and 80 Gbps stack bandwidth, delivering built-in redundancy and scalable performance for growing networks.

Comprehensive Layer 3 Routing

Advanced L3 capabilities include Static Routing, RIP v1/v2, OSPF v2/v3, ECMP with 256 entries, VRRP for gateway redundancy, and DHCP Server/Relay functionality. PIM-DM multicast routing protocol ensures efficient handling of multicast traffic across the network.

Network Reliability and Redundancy

Dual field-replaceable, hot-swappable power supply modules ensure continuous operation. VRRP provides gateway redundancy, while ERPS enables rapid protection and recovery in ring topologies. This redundant architecture makes the SG6428XHP ideal for mission-critical network deployments.

Advanced Security Features

Protect your network with IPv4 and IPv6 ACL support, Dynamic ARP Inspection, IEEE 802.1X authentication, MAB, Port Security, DoS defense, and Secure Shell encryption. Additional security includes IP-MAC-Port Binding, DHCP filtering, and broadcast/multicast storm control.

Centralized Omada SDN Management

Integration with the Omada Software Defined Networking platform enables centralized cloud management of access points, switches, and routers from a single interface. Zero-Touch Provisioning simplifies deployment, while the Omada app provides mobile management capabilities. Standalone management is available via web GUI, CLI, SNMP v1/v2c/v3, and RMON.

Professional Network Features

Supports 4K VLAN groups, Link Aggregation, Spanning Tree Protocol, IGMP with 2,048 groups, port mirroring, RSPAN, and 32K MAC address table. ISP features include 802.3ah Ethernet OAM, L2PT, DLDP, DDM, and sFlow for comprehensive network monitoring.

Specifications

• 24x Gigabit RJ45 PoE+ ports
• 4x 10 Gbps SFP+ slots
• Up to 720W total PoE budget
• Physical stacking for built-in redundancy and performance
• L3 features: RIP, OSPF, ECMP, VRRP, PIM-DM, DHCP Server/Relay
• Security Strategies: ACL, Port Security, DoS Defend, 802.1X
• Highly Available with two field-replaceable power supplies, VRRP, and ERPS
• Centralized cloud management via Omada SDN controllers
• Standalone management via web, CLI, SNMP, and RMON

IEEE 802.3at/af-compliant Power over Ethernet

24x IEEE 802.3at/af-compliant PoE ports supply up to 720W total power to 802.3at and 802.3af devices, with each port supplying up to 30W power. Set up wireless access points, surveillance cameras, IP phones, and other PoE devices quickly and easily, without the hassle and cost of installing power cabling. Perpetual PoE ensures an uninterrupted power supply to connected devices even during switch reboots. Additionally, the switch retains PoE power settings across reboots, thanks to fast PoE functionality.

High-speed Connectivity and Powerful Stacking

24x Gigabit RJ45 ports and 4x 10 Gbps SFP+ slots provide up to 128 Gbps switching capacity per unit. Up to 4 units of physical stacking with up to 512 Gbps switching capacity empower the networking structure with built-in redundancy and performance.

Abundant Layer 3 Capabilities

Comes with abundant Layer 3 routing protocols that support a scalable network. Static Routing, RIP, OSPF, ECMP, VRRP, DHCP Server, and DHCP Relay are supported. PIM-DM multicast routing protocol guarantees efficient routing for multicast groups.

Highly Available

Optional field-replaceable and hot-swappable redundant power supplies and VRRP make it an ideal choice for reliable networking architecture. ERPS supports rapid protection and recovery in a ring topology.

Enhanced Security Functions

Defend against a range of network threats with ACL support (IPv4 & IPv6), Dynamic ARP Inspection, IEEE 802.1X, MAB, Port Security, and Secure Shell.

Omada SDN

Integration into the Omada system brings centralized cloud management and a series of management features such as Zero-Touch Provisioning (ZTP). The Omada Software Defined Networking (SDN) platform integrates network devices, including access points, switches, and routers, providing 100% centralized cloud management—all controlled from a single interface.

Apart from the ability to be centrally managed via the web or the Omada app, SG6428XHP is also easy to manage via an intuitive web-based Graphical User Interface (GUI) or an industry-standard Command Line Interface (CLI). For both management methods, traffic is protected through SSL or SSH encryption. SNMP (v1/v2c/v3) and RMON support enable the switch to be polled for valuable status information and to send traps for abnormal events.

Description

Specification

• Rackmountable: Yes
• Managed: Yes
• Number of Ports: 24
• Max RJ45 Transfer Rate: 10/100/1000 Mbps
• #Hide#Max SFP Transfer Rate: 10G SFP
• Interface(s): 24 x 10/100/1000 Mbps PoE+ RJ45 Ports
  4 x 10G SFP+ Slots
  2 x USB 2.0 Ports
  1 x RJ45 Console Port
  1 x USB Type-C Console Port
  1 x RJ45 Management Port
• PoE Ports (RJ45): "Standard: 802.3at/af compliant
  PoE+ Ports: 24 Ports, up to 30 W per port
  PoE Power Budget: up to 720 W*
  
  *The total PoE budget varies with the power supply modules.
  "
• Bandwidth: Stack Bandwidth: Up to 80 Gbps (4 stack ports)
• Switching Capacity: 128 Gbps per Unit
• Power Supply: "Two Field-replaceable and Hot-swappable Power Supply Modules** (100–240 VAC, 50/60 Hz)
  
  **Shipping with one PSM500-AC module by default, and another field-replaceable redundant power supply requires purchasing separately.
  "
• Dimensions: 440 x 420 x 44 mm
• Mac Address Table: 32 K
• Packet Forwarding Rate: 95.2 Mpps
• Jumbo Frame: 9KB
• Additional Features: Automatic Device Discovery
  Batch Configuration
  Batch Firmware Upgrading
  Intelligent Network Monitoring
  Abnormal Event Warnings
  Unified Configuration
  Reboot Schedule
  
  ISP Features:
  802.3ah Ethernet Link OAM
  L2PT (Layer 2 Protocol Tunneling)
  Device Link Detect Protocol (DLDP)
  DDM
  sFlow
• Quality of Service: Class of Service
  Bandwidth Control
  Voice VLAN
  User-Defined OUI
  Smoother Performance
  Action for Flows
• Layer Features: "L3:
  IP Interfaces
  Static Routing
  Host Route Table: Max 6,100 entries
  RIP: Version v1/v2, Max 8,190
  OSPF: Version v2/v3; v2: Max 8,190, v3: Max 4,097
  VRRP: Version v2/v3, Max 64 groups
  ECMP: 256 entries, max 32 ECMP Nexthops per Destination
  Static ARP: 512 static entries
  Dynamic ARP: 7,680 dynamic entries
  Proxy ARP
  DHCP Server
  DHCP Relay
  
  "
• .: "L2 and L2+:
  Link Aggregation
  Spanning Tree Protocol
  Port-based and VLAN-based Loopback Detection
  802.3x Flow Control
  Supports 2,048 IGMP groups
  ERPS
  Mirroring
  RSPAN
  MAC Address Table
  PIM-DM (IPv4)
  Multicast"
• VLAN: "Max 4K VLAN Group (802.1q VLAN)
  802.1Q Tagged VLAN
  MAC VLAN Entries: 200
  Multicast VLAN
  Management VLAN
  VLAN VPN (QinQ): Max 256 entries
  GVRP
  Protocol VLAN: Protocol Template 16, Protocol VLAN 12 entries
  VLAN VPN
  Voice VLAN
  Private VLAN"
• Security: Port Isolation
  CPU-Defend
  ARP Inspection (Dynamic ARP Inspection)
  DoS Defend
  IP-MAC-Port Binding
  IPv6-MAC
  DHCP Filter
  Static/Dynamic Port Security
  Broadcast/Multicast/Unknown-unicast Storm Control
  802.1X
  AAA (including TACACS+)
  Secure web management through HTTPS with SSLv3/TLS 1.2
  Secure Command Line Interface (CLI) management with SSHv2
  IP/Port/MAC-based access control
• Management: " Omada App, Centralized Management & Cloud Access :
  Requires Omada Hardware, Cloud-Based or Software Controller
  
  Zero-Touch Provisioning :
  Requires Omada Cloud-Based Controller
  
  "
• .: " Management Features :
  Web-based GUI
  Command Line Interface (CLI) through console port, telnet
  SNMPv1/v2c/v3
  SDM Template
  DHCP/BOOTP Client
  802.1ab LLDP/LLDP-MED
  DHCP Auto Install
  Dual Image, Dual Configuration
  CPU Monitoring
  Cable Diagnostics
  Password Recovery
  SNTP
  System Log
  EEE
  "
• Environment: "Operating Temperature:
  -5 °C to 45 °C (23 °F to 113 °F) @ 2,000 meters
  -5 °C to 40 °C (23 °F to 104 °F) @ 3,000 meters
  
  Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)
  Operating Humidity: 10–90% RH non-condensing
  Storage Humidity: 5–90% RH non-condensing"
• Package Contents: SG6428XHP Switch
  Power Cord
  RJ45 Console Cable
  Quick Installation Guide
  Rackmount Kit
  Rubber Feet
• Package Type: Retail
• Package Weight: 11.3200 kg
• Warranty: Limited Lifetime
• #Hide#POE: Yes