Ring network three-layer network management 28 port industrial switch

Hardware specifications

Network standards	IEEE 802.3i, IEEE 802.3u, IEEE 802.3ab, IEEE802.3z, IEEE 802.3ad, IEEE 802.3x, IEEE 802.1d, IEEE 802.1s, IEEE 802.1w, IEEE 802.1q, IEEE 802.1x, IEEE 802.1p Compatible with Modbus TCP, Ethernet/IP, Profinet and other protocols, it can realize transparent data transmission
Port	24 x 10/100/1000Mbps RJ45 ports 4 Gigabit SFP ports 1 console port 1 digital input port
Light	Port status indicator PWR1, PWR2, SYS/FAULT, RPL LED
Performance	Store-and-forward Supports 8K MAC address table depth
Enter the power supply	100－240V～ 50/60Hz
Use environment	Operating temperature: -40°C~75°C Storage temperature: -40°C~85°C Operating humidity: 10%~90% RH non-condensing Storage humidity: 5%~90% RH non-condensing
Dimensions(L×W×H)	440mm×330mm×44mm

Software Specifications

Routing	Static routes are supported Proxy ARP is supported
Safety features	IP-MAC-Port-VID quaternary binding IP source protection, DoS protection, and port security 802.1X authentication, guest VLAN
ACL	Support L2~L4 packet filtering ACL control based on time period is supported Policies can be delivered based on ports and VLANs
VLAN	802.1Q VLAN, MAC VLAN, Private VLAN, and protocol VLAN are supported VLAN VPN is supported Voice VLANs are supported GARP/GVRP is supported
MAC address table	8K MAC addresses are supported You can set the maximum number of MAC addresses that can be learned Address table display, static address table, dynamic address table, and filtered address table
Port management	Port aggregation, port monitoring, and port rate limiting Storm suppression
Spanning trees	STP (802.1d)、RSTP (802.1w)、MSTP (802.1s) Spanning tree security
Multicast	IGMP V1/V2/V3 is supported Multicast VLANs, multicast address tables, and multicast filtering
QoS	Each port supports 8 output queues Port-based, 802.1P, DSCP/ToS priority is supported It supports four priority scheduling modes: Equ, SP, WRR, and SP+WRR Voice VLANs are supported
DHCP	DHCP Client、DHCP Server DHCP Relay DHCP Snooping
Convergence management	Static aggregation is supported Dynamic aggregation is supported
Safety features	MAC-IP-VLAN ID-Port quadruple binding is supported 802.1X authentication and RADIUS configuration are supported ARP protection, IP source protection, and DoS protection are supported Port isolation and port security are supported SSL and SSH are supported
System administration	Web management based on HTTP, SSL (v2/v3/TLSv1), and CLI management based on Telnet, Console, and SSH (v1/v2) are supported SNMP V1/V2/V3（TP-LINK MIBs）
System maintenance	LLDP is supported Supports configuring import and export and system time settings Loopback detection, cable detection, ping, and tracert detection Display/filter system logs, log servers
Ring Network Protocol	Support ERPS ring network protocol RPL configuration is supported

TL-SG5428 Industrial Grade is TP-LINK's 5 series full gigabit industrial Ethernet switch designed for industrial environments. 24 Gigabit Adaptive Ethernet ports and 4 Gigabit SFP ports are available.
It adopts a new generation of high-performance hardware and software platform, provides flexible full gigabit ports, supports Layer 3 routing protocol, complete security protection mechanism, perfect ACL/QoS policy and rich VLAN functions, is easy to manage and maintain, and is suitable for industrial environments, hotels, campuses and other small and medium-sized network core layer or aggregation layer.

Provides 24 Gigabit adaptive RJ45 ports and 4 Gigabit SFP ports
Industrial working temperature: -40°C~75°C
Wide voltage input: 100-240 VAC
Installation: 19 inch rack mount
Support ERPS ring network protocol and RPL configuration
Dual pluggable power input, redundant backup, greatly improve the reliability of product power supply
EMS has a high level of protection, and is not afraid of all kinds of harsh environments
Two industrial power modules are supplied as standard at the factory

-40°C~75°C working temperature design, no fear of extreme temperatures
TL-SG5428 industrial grade is designed in strict accordance with the working temperature of -40°C~75°C, selected industrial-grade devices, and adopts natural heat dissipation mode to ensure that the equipment works stably for a long time in this temperature range and meets all kinds of harsh environments.
Industrial-grade protection design
High-standard electromagnetic anti-interference protection design, suitable for various harsh electromagnetic environments such as electric power and industrial plants.
Electroless nickel gold PCB board greatly improves the corrosion resistance of the equipment.

Steel shell body, sturdy and durable, efficient heat dissipation
TL-SG5428 industrial grade adopts steel shell structure, which is sturdy and durable, and has high strength. The steel shell design naturally dissipates heat, which can ensure the stable operation of the product without fan, and is noiseless and quiet, and adapts to various harsh industrial environments.

Strong business processing capabilities

Static routes are supported, and the administrator manually configures route entries to achieve simple, efficient, and reliable communication between different network segments.
DHCP servers are supported, which assign IP addresses to hosts in the network.
DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.
IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.
GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.
The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.
It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.
ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.
It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

Complete security protection mechanism

Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.
Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.
IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.
DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.
It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.
Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.
Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Versatile reliability protection

Supports STP/RSTP/MSTP production tree protocols to eliminate Layer 2 loops and implement link backup.
Spanning tree security functions are supported to prevent devices in a spanning tree network from various forms of malicious attacks.
Static aggregation and dynamic aggregation are supported, effectively increasing link bandwidth, implementing load balancing, link backup, and improving link reliability.

Easy operation and maintenance

Supports multiple management and maintenance methods, such as web management, CLI command line (console, Telnet), and SNMP (V1/V2/V3).
Supports HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods for safer management.
RMON, system logs, and port traffic statistics are supported, which is convenient for network optimization and transformation.
Supports cable detection, ping detection, and Tracert detection operations to easily analyze faulty network nodes.
It supports LLDP, which is convenient for the network management system to query and judge the communication status of the link.
CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection are supported.