TP-LINK TL-SL5428-Combo gigabit upper managed switch 24FE 4GE 4SFP multiplexing

Brand: TP-LINK
Model: TL-SL5428-COMBO
Dimensions: 440mm x 220mm x 44mm

24 10/100Base-T RJ45 ports 4 10/100/1000Base-T RJ45 ports 4 multiplexed Gigabit SFP ports Support RIP dynamic routing, static routing, ARP proxy Support DHCP server, DHCP relay, DHCP Snooping Support quaternary binding, ARP/IP/DoS protection, 802.1X authentication Support VLAN, QoS, ACL, spanning tree, multicast, IPv6 Support Web network management, CLI command line, SNMP TP-LINK newly developed and launched the 5 series Gigabit uplink L3 network management switch, using a new generation of high-performance hardware and software platforms, providing flexible 100M access and cost-effective Gigabit uplink ports, supporting L3 routing protocols, Complete security protection mechanism, perfect ACL/QoS strategy and rich VLAN function, easy to manage and maintain, widely used in SMEs, hotels

Technical Specifications

Product Features


  • 24 10/100Base-T RJ45 ports
  • 4 10/100/1000Base-T RJ45 ports
  • 4 multiplexed Gigabit SFP ports
  • Support RIP dynamic routing, static routing, ARP proxy
  • Support DHCP server, DHCP relay, DHCP Snooping
  • Support quaternary binding, ARP/IP/DoS protection, 802.1X authentication
  • Support VLAN, QoS, ACL, spanning tree, multicast, IPv6
  • Support Web network management, CLI command line, SNMP

TP-LINK newly developed and launched the 5 series Gigabit uplink L3 network management switch, using a new generation of high-performance hardware and software platforms, providing flexible 100M access and cost-effective Gigabit uplink ports, supporting L3 routing protocols, Complete security protection mechanism, perfect ACL/QoS strategy and rich VLAN function, easy to manage and maintain, widely used in SMEs, hotels and campus network access, aggregation application scenarios.

100M access, Gigabit uplink

  • The whole series supports the combination of "100M Ethernet port + Gigabit Ethernet port/optical port", which is convenient for users to flexibly network and meet the networking needs of various scenarios;
  • Provide 8/16/24/48 multi-standard port products, all ports have wire-speed forwarding capabilities to meet the needs of different users.

Strong business processing capabilities

  • Supports RIP dynamic routing protocol, dynamically generates and updates routing tables, and solves the routing problem of small and medium-sized networks after subnetting.
  • Support static routing, administrators manually configure routing entries to achieve communication between different network segments, simple, efficient and reliable.
  • Support DHCP server to assign IP addresses to hosts in the network.
  • Supports DHCP relay, switches on different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
  • Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.
  • Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.
  • Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correct configuration.
  • Support VLAN VPN function, encapsulate the outer VLAN Tag for the user's private network packet at the public network access end, so that the packet carries two layers of VLAN Tag across the public network.
  • Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms: Equ, SP, WRR, SP+WRR.
  • Support ACL, filter packets by configuring matching rules, processing operations, and time permissions, and provide flexible security access control strategies.
  • Support IGMP V1/V2 multicast protocol, MLD Snooping, IGMP Snooping to meet the needs of multi-terminal HD video surveillance and video conference access.
  • Support IPv6 to meet the needs of the network transition from IPv4 to IPv6.

Complete security protection mechanism

  • Support IP address, MAC address, VLAN and port quaternary binding to filter data packets.
  • Supports ARP protection to protect against gateway spoofing and man-in-the-middle attacks such as ARP spoofing and ARP flood attacks common in LANs.
  • Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.
  • Support DoS protection, support Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.
  • Support 802.1X authentication, provide authentication functions for LAN computers, and control the authorization status of controlled ports according to the authentication results.
  • Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number, prevent MAC address attacks and control port network traffic.
  • Support DHCP Snooping, effectively prevent privately set DHCP server, and ensure the legality of the DHCP server.

Diverse reliability protection

  • Supports STP/RSTP/MSTP spanning tree protocol to eliminate layer 2 loops and realize link backup.
  • Supports spanning tree security features to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.
  • Support static aggregation and dynamic aggregation, effectively increase link bandwidth, achieve load balancing, link backup, and improve link reliability.

Easy operation and maintenance

  • Support Web network management, CLI command line (Console, Telnet), SNMP (V1/V2/V3) and other diverse management and maintenance methods.
  • Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, management is more secure.
  • Support RMON, system log, port traffic statistics, easy network optimization and transformation.
  • Support cable detection, Ping detection and Tracert detection operations, easy analysis of faulty network nodes.
  • Support LLDP, convenient for network management system to query and judge the communication status of the link.
  • Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.
Property DescriptionProperty Value
100M RJ45 port24
Gigabit RJ45 port4
Gigabit SFP port4 (multiplexed)
RJ45 Console port1
MAC address capacity8K
routingSupport RIP V1/V2 dynamic routing Support static routing Support ARP proxy
DHCPSupport DHCP server Support DHCP relay Support DHCP Snooping Support Option138, Option82, Option60
VLANSupport 4K VLANs Support 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN Support Guest VLAN, Voice VLAN Support VLAN VPN (QinQ) Support GVRP protocol Support 1:1 and N:1 VLAN Mapping function
MAC address tableComply with IEEE 802.1d standard Support MAC address automatic learning and aging Support static, dynamic and filtered address table
Safety featuresBased on user hierarchical management and password protection Support based on port number, IP address, MAC address to restrict user access Support HTTPS, SSL V3, TLS V1, SSH V1/V2 Support IP-MAC-PORT-VLAN four yuan binding Support ARP protection, IP Source protection, DoS protection support DHCP Snooping, DHCP attack protection support 802.1X authentication, AAA support port security, port isolation support CPU protection function
Access Control (ACL)Support L2 (Layer 2) ~ L4 (Layer 4) packet filtering function Support port mirroring, port reDirection, flow rate limiting, QoS re-marking
Quality of Service (QoS)Support 8 port queues Support port priority, 802.1P priority, DSCP priority Support SP, WRR, SP+WRR, Equ priority scheduling algorithm
Spanning treeSupport STP (IEEE 802.1d), RSTP (IEEE 802.1w) and MSTP (IEEE 802.1s) protocols Support loop protection, root bridge protection, TC protection, BPDU protection, BPDU filtering
MulticastSupport IGMP v1/v2/v3 Snooping Support fast leave mechanism Support multicast VLAN Support multicast filtering, packet statistics, unknown multicast drop
IPv6Support MLD Snooping Support IPv6 Ping, IPv6 Tracert, IPv6 Telnet Support IPv6 SNMP, IPv6 SSH, IPv6 SSL
Management and maintenanceSupport WEB network management (HTTP, HTTPS, SSL V3, TLS V1) Support CLI (Telnet, SSH V1/V2, local serial port) Support SNMP V1/V2/V3, compatible with public MIBS and TP-LINK private MIBs Support LLDP, RMON Support ARP Protection, IP source protection, DoS protection support CPU monitoring, memory monitoring support system logs, graded warning support Ping, Tracert detection, cable detection
Shell size (mm)440x180x44
Input power100~240VAC,50/60Hz
Use environmentOperating temperature: 0°C~40°C Storage temperature: -40°C~70°C Operating humidity: 10%~90% RH non-condensing Storage humidity: 5%~90% RH non-condensing