TP-LINK TL-SG6428Q Stackable layer 3 managed switch 24GE 4SFP 2SFP+

TL-SG6428Q is a 10 Gigabit uplink stacked three-layer network management switch developed by TP-LINK. It adopts a new generation of high-performance hardware and software platform, provides flexible full Gigabit access and a cost-effective 10 Gigabit uplink port, and supports three layers Routing protocol, complete security protection mechanism, perfect ACL/QoS strategy and rich VLAN function, easy to manage and maintain, suitable for the core layer or aggregation layer of large and medium-sized networks such as enterprises and campuses.

Gigabit access, 10 Gigabit uplink

• Support the combination of "Gigabit Ethernet port/optical port + 10 Gigabit optical port", which is convenient for users to flexibly network and meet various networking needs;
• All ports have wire-speed forwarding capabilities to meet the needs of different users.

Strong business processing capabilities

• Support OSPF and VRRP dynamic routing protocols to solve the routing problem of large complex networks after dividing subnets and simplify network configuration.
• Support static routing, administrators manually configure routing entries to achieve communication between different network segments, simple, efficient and reliable.
• Support DHCP server to assign IP addresses to hosts in the network.
• Supports DHCP relay, switches on different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
• Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.
• Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.
• Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correct configuration.
• Support VLAN VPN function, encapsulate the outer VLAN Tag for the user's private network packet at the public network access end, so that the packet carries two layers of VLAN Tag across the public network.
• Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms: Equ, SP, WRR, SP+WRR.
• Support ACL, filter packets by configuring matching rules, processing operations, and time permissions, and provide flexible security access control strategies.
• Support IGMP V1/V2 multicast protocol, MLD Snooping, IGMP Snooping to meet the needs of multi-terminal HD video surveillance and video conference access.

Complete security protection mechanism

• Support IP address, MAC address, VLAN and port quaternary binding to filter data packets.
• Supports ARP protection to protect against gateway spoofing and man-in-the-middle attacks such as ARP spoofing and ARP flood attacks common in LANs.
• Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.
• Support DoS protection, support Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.
• Support 802.1X authentication, provide authentication functions for LAN computers, and control the authorization status of controlled ports according to the authentication results.
• Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number, prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping, effectively prevent privately set DHCP server, and ensure the legality of the DHCP server.

Diverse reliability protection

• Support stacking, stacking system virtualization becomes a "distributed device", which can simplify management and improve system reliability.
• Support STP/RSTP/MSTP production tree protocol, eliminate layer 2 loops, and realize link backup.
• Supports spanning tree security features to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.
• Support static aggregation and dynamic aggregation, effectively increase link bandwidth, achieve load balancing, link backup, and improve link reliability.
• Support pluggable power modules and redundant power supplies to ensure that the equipment does not stop working.

Easy operation and maintenance

• Support Web network management, CLI command line (Console, Telnet), SNMP (V1/V2/V3) and other diverse management and maintenance methods.
• Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, management is more secure.
• Support RMON, system log, port traffic statistics, easy network optimization and transformation.
• Support cable detection, Ping detection and Tracert detection operations, easy analysis of faulty network nodes.
• Support LLDP, convenient for network management system to query and judge the communication status of the link.
• Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.