TP-Link SG3428MP
Omada 28-Port Gigabit L2+ Managed Switch with 24-Port PoE+
Original price was: 933 ₼.845 ₼Current price is: 845 ₼.

Installment payment calculator with Birbank
Installment payment terms apply to the non-discounted price
Installment payment terms apply to the non-discounted price
Monthly payment
466.5 ₼
- 24× Gigabit 802.3af/at PoE+ ports and 4× Gigabit SFP slots
- 384 W total PoE budget with up to 30 W PoE output per port*
- Centralized cloud management via the web or the Omada app†
- Standalone management via web, CLI, SNMP, and RMON
- Static Routing helps route internal traffic for higher efficiency
- VLAN, ACL, QoS, IGMP Snooping, OAM, and DDM
- ERPS supports rapid protection and recovery in a ring topology
- Durable metal casing and rack-mountable design
| HARDWARE FEATURES | |
|---|---|
| Interface | • 24× 10/100/1000 Mbps RJ45 PoE+ Ports • 4× Gigabit SFP Slots • 1× RJ45 Console Port • 1× Micro-USB Console Port |
| Fan Quantity | 2 |
| Physical Security Lock | √ |
| Power Supply | 100-240 V AC~50/60 Hz |
| PoE Ports (RJ45) | • Standard: 802.3at/af compliant • PoE+ Ports: 24 Ports (up to 30 W PoE Output per Port) • Power Budget: 384 W* |
| Dimensions ( W x D x H ) | 17.3×13.0×1.7 in (440×330×44 mm) |
| Mounting | Rack Mountable |
| Max Power Consumption | 480.1 W (110 V/60 Hz) (with 384 W PD connected) |
| Max Heat Dissipation | 1637.14 BTU/hr (110 V/60 Hz) (with 384 W PD connected) |
| PERFORMANCE | |
|---|---|
| Switching Capacity | 56 Gbps |
| Packet Forwarding Rate | 41.66 Mpps |
| MAC Address Table | 16K |
| Packet Buffer Memory | 12 Mbit |
| Jumbo Frame | 9 KB |
| SOFTWARE FEATURES | |
|---|---|
| Quality of Service | • 8 priority queues • 802.1p CoS/DSCP priority • Queue scheduling: SP (Strict Priority), WRR (Weighted Round Robin), SP+WRR • Bandwidth Control: Port/Flow based Rating Limiting • Smoother Performance • Action for Flows: QoS remark (802.1P Remark, DSCP Remark) |
| L2 and L2+ Features | • 128 IP Interfaces: Support IPv4/IPv6 Interface • Static Routing: 48 IPv4/IPv6 Static Routes • Static ARP: 128 static entries • 512 ARP Entries • Proxy ARP • Gratuitous ARP • DHCP Server • DHCP Relay: DHCP Interface Relay, DHCP VLAN Relay • DHCP L2 Relay • Link Aggregation • Spanning Tree Protocol • Loopback Detection • 802.3x Flow Control • Mirroring • Device Link Detect Protocol (DLDP) |
| L2 Multicast | • Supports 511 (IPv4, IPv6) IGMP groups • IGMP Snooping • IGMP Authentication • Multicast VLAN Registration (MVR) • MLD Snooping • Multicast Filtering: 256 profiles and 16 entries per profile |
| Advanced Features | • Automatic Device Discovery† • Batch Configuration† • Batch Firmware Upgrading† • Intelligent Network Monitoring† • Abnormal Event Warnings† • Unified Configuration† • Reboot Schedule† ISP Features**: |
| VLAN | • VLAN Group: Max 4K VLAN Groups • 802.1q Tagged VLAN • MAC VLAN: 30 Entries • Protocol VLAN: Protocol Template 16, Protocol VLAN 16 • Private VLAN • GVRP • VLAN VPN (QinQ): Port-Based QinQ; Selective QinQ • Voice VLAN |
| Access Control List | • Time-based ACL • MAC ACL: Source MAC, Destination MAC, VLAN ID, User Priority, Ether Type • IP ACL: Source IP, Destination IP, Fragment, IP Protocol, TCP Flag, TCP/UDP Port, DSCP/IP TOS, User Priority • Combined ACL • Packet Content ACL • IPv6 ACL • Policy: Mirroring, Redirect, Rate Limit, QoS Remark • ACL applies to Port/VLAN |
| Security | • IP-MAC-Port Binding – 512 Entries – DHCP Snooping – ARP Inspection – IPv4 Source Guard: 100 Entries • IPv6-MAC-Port Binding – 512 Entries – DHCPv6 Snooping – ND Detection – ND Snooping – IPv6 Source Guard: 100 Entries • DoS Defend • DHCP Filter • Static/Dynamic Port Security: Up to 64 MAC addresses per port • Broadcast/Multicast/Unicast Storm Control: kbps/ratio/pps control mode • 802.1X – Port-based authentication – Mac-base authentication – VLAN Assignment – MAB – Guest VLAN – Radius authentication and accountability support • AAA (including TACACS+) • Port Isolation • Secure web management through HTTPS with SSLv3/TLS 1.2 • Secure Command Line Interface (CLI) management with SSHv1/SSHv2 • IP/Port/MAC-based access control |
| IPv6 | • IPv6 Dual IPv4/IPv6 • Multicast Listener Discovery (MLD) Snooping • IPv6 ACL • IPv6 Interface • Static IPv6 Routing • IPv6 neighbor discovery (ND) • Path maximum transmission unit (MTU) discovery • Internet Control Message Protocol (ICMP) version 6 • TCPv6/UDPv6 • IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet (v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, Http/Https, IPv6 TFTP |
| MIBs | • MIB II (RFC1213) • Bridge MIB (RFC1493) • P/Q-Bridge MIB (RFC2674) • Radius Accounting Client MIB (RFC2620) • Radius Authentication Client MIB (RFC2618) • Remote Ping, Traceroute MIB (RFC2925) • Support TP-Link private MIBs • RMON MIB(RFC1757, rmon 1,2,3,9) |
| MANAGEMENT | |
|---|---|
| Omada App | Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management | • Omada Cloud-Based Controller • Omada Hardware Controller • Omada Software Controller |
| Cloud Access | Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller. |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | • Web-based GUI • Command Line Interface (CLI) through console port, telnet • SNMPv1/v2c/v3 – Trap/Inform – RMON (1, 2, 3, 9 groups) • SDM Template • DHCP/BOOTP Client • 802.1ab LLDP/LLDP-MED • DHCP AutoInstall • Dual Image, Dual Configuration • CPU Monitoring • Cable Diagnostics • EEE • Password Recovery • SNTP • System Log |
| OTHERS | |
|---|---|
| Certification | CE, FCC, RoHS |
| Package Contents | • SG3428MP Switch • Power Cord • Quick Installation Guide • Rackmount Kit • Rubber Feet |
| System Requirements | Microsoft® Windows® 98SE, NT, 2000, XP, Vista™ or Windows 7/8/10/11, MAC® OS, NetWare®, UNIX® or Linux. |
| Environment | • Operating Temperature: 0–45 ℃ (32–113 ℉); • Storage Temperature: -40–70 ℃ (-40–158 ℉) • Operating Humidity: 10–90% RH non-condensing • Storage Humidity: 5–90% RH non-condensing |
Related Products
TP-Link T1500-28PCT JetStream 24-Port 10/100Mbps + 4-Port Gigabit Smart PoE+ Switch
24-Port 10/100Mbps +…
524 ₼
TP-Link EAP320 AC1200 Wireless Dual Band Gigabit Ceiling Mount Access Point
AC1200 Wireless Dual…
176 ₼
What TP-Link SG3428MP is for
TP-Link SG3428MP is a switch for extending a wired network. People buy one when the router has run out of ports and cameras, computers, a printer, an NVR and access points all need to join the same network. A wired connection is always more stable and lower-latency than Wi-Fi.
Buying advice: take 30–50% more ports than you need today, so you do not have to replace the switch when another camera or computer arrives. If cameras will be connected, choose a model with PoE ports and make sure the power budget (W) exceeds the total draw of those cameras.
Key specifications
| 24× Gigabit 802.3af/at PoE+ ports and 4× Gigabit SFP slots | |
| 384 W total PoE budget with up to 30 W PoE output per port* | |
| Centralized cloud management via the web or the Omada app† | |
| Standalone management via web, CLI, SNMP, and RMON | |
| Static Routing helps route internal traffic for higher efficiency | |
| VLAN, ACL, QoS, IGMP Snooping, OAM, and DDM | |
| ERPS supports rapid protection and recovery in a ring topology | |
| Durable metal casing and rack-mountable design |
Price in Baku, delivery and installation
The current price on the site is 845 ₼. It includes the official TP-Link warranty, delivery in Baku and shipping to the regions on request.
If you also need installation, our Office network setup service starts from 200 ₼; the site visit and quote in Baku are free and we give a 6-month warranty.
Before you choose
For a comparison with the closest models, a price table and buying advice, see the guide for this category.
A detailed article on this topicHow to Choose a PoE Switch for IP Cameras and Access Points Read →
Frequently asked questions about TP-Link SG3428MP
What is the difference between managed and unmanaged?
An unmanaged switch works the moment you plug it in and needs no configuration — enough for a home or a small office. Managed (and Easy Managed) models add VLANs, QoS, port isolation and monitoring, which you need when the camera network must be separated from the office network or traffic has to be controlled.
Does TP-Link SG3428MP power the cameras?
Only on models with PoE ports. With PoE, a single network cable to the camera is enough — no separate socket. The total power budget of the switch must be higher than the combined draw of the cameras.
Do you build office networks?
Yes. Our office network service covers cabling, placing switches and access points, and configuring VLANs and Wi-Fi. The site visit and quote in Baku are free.
What about warranty and delivery?
The device is sold by the official TP-Link partner in Azerbaijan with official warranty. Delivery in Baku is available and shipping to the regions is possible. If you need installation, see our services page.

















Reviews
There are no reviews yet.