TP-LINK TL-SG5428 Industrial Grade Ring Network Layer 3 Network Managed Industrial Switch

Brand: TP-LINK
Model: TL-SG5428-Industrial-Grade
Dimensions: 440mm x 330mm x 44mm

24 10/100/1000Base-T RJ45 ports 4 independent Gigabit SFP ports Support RIP dynamic routing, static routing, ARP proxy Support DHCP server, DHCP relay, DHCP Snooping Support quaternary binding, ARP/IP/DoS protection, 802.1X authentication Support VLAN, QoS, ACL, spanning tree, multicast, IPv6 Support Web network management, CLI command line, SNMP TP-LINK newly developed 5 series all-gigabit three-layer network management switch, using a new generation of high-performance hardware and software platform, providing flexible, cost-effective full gigabit access and upstream ports, supporting three-layer routing protocol, complete Security protection mechanism, perfect ACL/QoS strategy and rich VLAN function, easy to manage and maintain, meet users' requirements for easy management of network

Product Features


  • 24 10/100/1000Base-T RJ45 ports
  • 4 independent Gigabit SFP ports
  • Support RIP dynamic routing, static routing, ARP proxy
  • Support DHCP server, DHCP relay, DHCP Snooping
  • Support quaternary binding, ARP/IP/DoS protection, 802.1X authentication
  • Support VLAN, QoS, ACL, spanning tree, multicast, IPv6
  • Support Web network management, CLI command line, SNMP

TP-LINK newly developed 5 series all-gigabit three-layer network management switch, using a new generation of high-performance hardware and software platform, providing flexible, cost-effective full gigabit access and upstream ports, supporting three-layer routing protocol, complete Security protection mechanism, perfect ACL/QoS strategy and rich VLAN function, easy to manage and maintain, meet users' requirements for easy management of network equipment, high security and low cost networking, suitable for campus, hotel and enterprise campus network access, Convergence, core multiple application scenarios.

Full Gigabit port

The whole series supports the combination of "Ethernet port + optical port", which is convenient for users to flexibly network and meet the networking needs of various scenarios;

Provide 8/12 (optical port)/16/24/48 multi-standard port products, all ports have Gigabit wire-speed forwarding capabilities to meet the needs of different users.

Strong business processing capabilities

Supports RIP dynamic routing protocol, dynamically generates and updates routing tables, and solves the routing problem of small and medium-sized networks after subnetting.

Support static routing, administrators manually configure routing entries to achieve communication between different network segments, simple, efficient and reliable.

Support DHCP server to assign IP addresses to hosts in the network.

Supports DHCP relay, switches on different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.

Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.

Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.

Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correct configuration.

Support VLAN VPN function, encapsulate the outer VLAN Tag for the user's private network packet at the public network access end, so that the packet carries two layers of VLAN Tag across the public network.

Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms: Equ, SP, WRR, SP+WRR.

Support ACL, filter packets by configuring matching rules, processing operations, and time permissions, and provide flexible security access control strategies.

Support IGMP V1/V2 multicast protocol, MLD Snooping, IGMP Snooping to meet the needs of multi-terminal HD video surveillance and video conference access.

Support IPv6 to meet the needs of the network transition from IPv4 to IPv6.

Complete security protection mechanism

Support IP address, MAC address, VLAN and port quaternary binding to filter data packets.

Supports ARP protection to protect against gateway spoofing and man-in-the-middle attacks such as ARP spoofing and ARP flood attacks common in LANs.

Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.

Support DoS protection, support Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.

Support 802.1X authentication, provide authentication functions for LAN computers, and control the authorization status of controlled ports according to the authentication results.

Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number, prevent MAC address attacks and control port network traffic.

Support DHCP Snooping, effectively prevent privately set DHCP server, and ensure the legality of the DHCP server.

Diverse reliability protection

Supports STP/RSTP/MSTP spanning tree protocol to eliminate layer 2 loops and realize link backup.

Supports spanning tree security features to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.

Support static aggregation and dynamic aggregation, effectively increase link bandwidth, achieve load balancing, link backup, and improve link reliability.

PoE power supply function (only supported by PoE models)

PoE models support IEEE 802.3af/at PoE power supply standards to meet the needs of PoE power supply in security monitoring, teleconferencing systems, wireless coverage and other scenarios.

Supports setting the Web network management interface to control the power supply of the PoE port based on a user-defined time period.

Support to configure the priority of PoE ports on the Web network management interface. When the remaining power is insufficient, the power supply of high priority ports is guaranteed first.

The PoE output power of each port of the PoE model can reach up to 30W, and the user can set the maximum power that the port can provide on the Web network management interface.

Easy operation and maintenance

Support Web network management, CLI command line (Console, Telnet), SNMP (V1/V2/V3) and other diverse management and maintenance methods.

Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, management is more secure.

Support RMON, system log, port traffic statistics, easy network optimization and transformation.

Support cable detection, Ping detection and Tracert detection operations, easy analysis of faulty network nodes.

Support LLDP, convenient for network management system to query and judge the communication status of the link.

Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.


Technical Specifications

Property DescriptionProperty Value
Gigabit RJ45 port24
Gigabit SFP port4
RJ45 Console port1
MAC address capacity8K
routingSupport RIP V1/V2 dynamic routing Support static routing Support ARP proxy
DHCPSupport DHCP server Support DHCP relay Support DHCP Snooping Support Option138, Option82, Option60
VLANSupport 4K VLANs Support 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN Support Guest VLAN, Voice VLAN Support VLAN VPN (QinQ) Support GVRP protocol Support 1:1 and N:1 VLAN Mapping function
MAC address tableComply with IEEE 802.1d standard Support MAC address automatic learning and aging Support static, dynamic and filtered address table
Safety featuresBased on user hierarchical management and password protection Support based on port number, IP address, MAC address to restrict user access Support HTTPS, SSL V3, TLS V1, SSH V1/V2 Support IP-MAC-PORT-VLAN four yuan binding Support ARP protection, IP Source protection, DoS protection support DHCP Snooping, DHCP attack protection support 802.1X authentication, AAA support port security, port isolation support CPU protection function
Access Control (ACL)Support L2 (Layer 2) ~ L4 (Layer 4) packet filtering function Support port mirroring, port reDirection, flow rate limiting, QoS re-marking
Quality of Service (QoS)Support 8 port queues Support port priority, 802.1P priority, DSCP priority Support SP, WRR, SP+WRR, Equ priority scheduling algorithm
Spanning treeSupport STP (IEEE 802.1d), RSTP (IEEE 802.1w) and MSTP (IEEE 802.1s) protocols Support loop protection, root bridge protection, TC protection, BPDU protection, BPDU filtering
MulticastSupport IGMP v1/v2/v3 Snooping Support fast leave mechanism Support multicast VLAN Support multicast filtering, packet statistics, unknown multicast drop
IPv6Support MLD Snooping Support IPv6 Ping, IPv6 Tracert, IPv6 Telnet Support IPv6 SNMP, IPv6 SSH, IPv6 SSL
Management and maintenanceSupport WEB network management (HTTP, HTTPS, SSL V3, TLS V1) Support CLI (Telnet, SSH V1/V2, local serial port) Support SNMP V1/V2/V3, compatible with public MIBS and TP-LINK private MIBs Support LLDP, RMON Support ARP Protection, IP source protection, DoS protection support CPU monitoring, memory monitoring support system logs, graded warning support Ping, Tracert detection, cable detection
Shell size (mm)440x180x44
Input power100~240VAC,50/60Hz
Use environmentOperating temperature: 0°C~40°C Storage temperature: -40°C~70°C Operating humidity: 10%~90% RH non-condensing Storage humidity: 5%~90% RH non-condensing