TP-LINK's newly developed 5 series full gigabit Layer 3 managed PoE switches adopt a new generation of high-performance hardware and software platform, provide flexible and cost-effective full Gigabit access and uplink ports, support Layer 3 routing protocol, complete security protection mechanism, perfect ACL/QoS policy and rich VLAN functions, easy to manage and maintain, meet users' requirements for easy management, high security and low cost networking of network equipment, suitable for campus, hotel and enterprise campus network access, aggregation, Core a variety of application scenarios.
- 24 x 10/100/1000Base-T RJ45 ports, PoE+ power supply
- 2 independent Gigabit SFP ports
- It supports remote management of TP-LINK commercial cloud platform and mobile APP management
- It supports intelligent deployment, automatic configuration networking, and graphical topology display
- The maximum PoE power supply power of the whole machine is 370W, and the maximum PoE power supply power of a single port is 30W
- Supports dynamic RIP routing, static routing, and ARP proxy
- DHCP server, DHCP relay, and DHCP snooping are supported
- Supports quaternary binding, ARP/IP/DoS protection, and 802.1X authentication
- VLANs, QoS, ACLs, spanning trees, multicast, and IPv6 are supported
Full Gigabit ports
- The whole series supports the combination of "Ethernet port + optical port", which is convenient for users to flexibly network and meet the networking needs of various scenarios.
- Provide 8/16/24 multi-specification port products, and all ports have gigabit wire-speed forwarding capabilities to meet the needs of different users.
Strong business processing capabilities
- It supports the RIP dynamic routing protocol, dynamically generates and updates routing tables, and solves the routing problem of small and medium-sized networks after subnets are divided.
- Static routes are supported, and the administrator manually configures route entries to achieve simple, efficient, and reliable communication between different network segments.
- DHCP servers are supported, which assign IP addresses to hosts in the network.
- DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
- Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.
- IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.
- GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.
- The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.
- It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.
- ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.
- It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.
- IPv6 is supported to meet the requirements of network transition from IPv4 to IPv6.
Complete security protection mechanism
- Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.
- Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.
- IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.
- DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.
- It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.
- Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.
- Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.
Versatile reliability protection
- Supports STP/RSTP/MSTP SPANNING TREE protocol to eliminate Layer 2 loops and implement link backup.
- Spanning tree security functions are supported to prevent devices in a spanning tree network from various forms of malicious attacks.
- Static aggregation and dynamic aggregation are supported, effectively increasing link bandwidth, implementing load balancing, link backup, and improving link reliability.
PoE power supply function
- The PoE model supports PoE+ power supply and follows the IEEE 802.3af/at standard to meet the requirements of PoE power supply in scenarios such as visual security, teleconferencing systems, and wireless coverage.
- You can set the power supply control of PoE ports based on user-defined time periods on the web management interface.
- You can configure the PoE port priority on the web management interface, and when the remaining power is insufficient, the power supply of the high-priority port is guaranteed.
- In PoE models, the maximum PoE output power per port can reach 30W, and users can set the maximum power that can be provided by the port on the web management interface.
Easy operation and maintenance
- Supports multiple management and maintenance methods, such as web management, CLI command line (console, Telnet), and SNMP (V1/V2/V3).
- Supports HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods for safer management.
- RMON, system logs, and port traffic statistics are supported, which is convenient for network optimization and transformation.
- Supports cable detection, ping detection, and Tracert detection operations to easily analyze faulty network nodes.
- It supports LLDP, which is convenient for the network management system to query and judge the communication status of the link.
- CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection are supported.
| Product model | TL-SG5452P | TL-SG5428PE | TL-SG5226PE | TL-SG5226P | TL-SG5218PE | TL-SG5210PE |
| Gigabit RJ45 port | 48 | 24 | 24 | 24 | 16 | 8 |
| Gigabit SFP port | 4 | 4 | 2 | 2 | 2 | 2 |
| RJ45 Console port | 1 |
| PoE port | 48GE | 24GE | 24GE | 24GE | 16GE | 8GE |
| PoE output power of the whole machine | 396W | 370W | 370W | 225W | 225W | 116W |
| Power consumption of the whole machine | 465W | 425W | 433W | 269W | 263W | 136W |
| PoE standard | IEEE 802.3at(PoE+)、IEEE 802.3af |
| MAC address capacity | 16K | 8K | 8K | 8K | 8K | 8K |
| Routing | - Dynamic routing of RIP V1 and V2 is supported
- Static routes are supported
- ARP proxies are supported
|
| DHCP | - DHCP servers are supported
- DHCP relay is supported
- DHCP Snooping is supported
- Option 138, Option 82, and Option 60 are supported
|
| VLAN | - 4K VLANs are supported
- 802.1q VLAN, MAC VLAN, Protocol VLAN, and Private VLAN are supported
- Guest VLANs and Voice VLANs are supported
- VLAN VPN (QinQ)
- GVRP protocol is supported
- Supports 1:1 and N:1 VLAN mapping
|
| PoE | - PoE port priority can be set
- You can set the PoE power supply time period
- You can set the Power Limit port
|
| MAC address table | - Complies with the IEEE 802.1d standard
- Automatic MAC address learning and aging are supported
- Static and dynamic address tables are supported
|
| Safety features | - Hierarchical management and password protection based on users
- You can restrict user access based on port number, IP address, and MAC address
- Supports HTTPS, SSL V3, TLS V1, and SSH V1/V2
- IP-MAC-PORT-VLAN quadernary binding is supported
- ARP protection, IP source protection, and DoS protection are supported
- DHCP snooping and DHCP attack protection are supported
- 802.1X authentication and AAA are supported
- Port security and port isolation are supported
- CPU protection is supported
|
| Access Control (ACL) | - L2 (Layer 2) ~ L4 (Layer 4) packet filtering is supported
- Port mirroring, port redirection, flow rate limiting, and QoS remarking are supported
|
| Quality of Service (QoS) | - Supports 8 port queues
- Port priority, 802.1P priority, and DSCP priority are supported
- SP, WRR, SP+WRR, and Equ priority scheduling algorithms are supported
|
| Spanning trees | - Supports STP (IEEE 802.1d), RSTP (IEEE 802.1w) and MSTP (IEEE 802.1s) protocols
- Loop protection, root bridge protection, TC protection, BPDU protection, and BPDU filtering are supported
|
| Multicast | - IGMP v1/v2/v3 Snooping is supported
- Support for a quick leave mechanism
- Multicast VLANs are supported
- Multicast filtering, packet statistics, and unknown multicast dropping are supported
|
| IPv6 | - MLD Snooping is supported
- IPv6 Ping, IPv6 Tracert, and IPv6 Telnet are supported
- IPv6 SNMP, IPv6 SSH, and IPv6 SSL are supported
|
| Manage maintenance | - WEB MANAGEMENT (HTTP, HTTPS, SSL V3, TLS V1)
- CLI (Telnet, SSH V1/V2, local serial port)
- SNMP V1/V2/V3 is supported, and it is compatible with public MIBS and TP-LINK private MIBs
- Support LLDP and RMON
- ARP protection, IP source protection, and DoS protection are supported
- CPU monitoring and memory monitoring are supported
- Supports system logs and hierarchical warnings
- Ping, Tracert, and cable detection are supported
|
| Housing size(mm) | 440×330×44 | 440×330×44 | 440×330×44 | 440×180×44 | 440×180×44 | 294×180×44 |
| Enter the power supply | 220VAC , 50Hz |
| Use environment | - Operating temperature: 0°C~40°C
- Storage temperature: -40°C~70°C
- Operating humidity: 10%~90% RH non-condensing
- Storage humidity: 5%~90% RH non-condensing
|
TP-LINK's newly developed 5 series full gigabit Layer 3 managed PoE switches adopt a new generation of high-performance hardware and software platform, provide flexible and cost-effective full Gigabit access and uplink ports, support Layer 3 routing protocol, complete security protection mechanism, perfect ACL/QoS policy and rich VLAN functions, easy to manage and maintain, meet users' requirements for easy management, high security and low cost networking of network equipment, suitable for campus, hotel and enterprise campus network access, aggregation, Core a variety of application scenarios.
24 x 10/100/1000Base-T RJ45 ports, PoE+ power supply
2 independent Gigabit SFP ports
It supports remote management of TP-LINK commercial cloud platform and mobile APP management
It supports intelligent deployment, automatic configuration networking, and graphical topology display
The maximum PoE power supply power of the whole machine is 370W, and the maximum PoE power supply power of a single port is 30W
Supports dynamic RIP routing, static routing, and ARP proxy
DHCP server, DHCP relay, and DHCP snooping are supported
Supports quaternary binding, ARP/IP/DoS protection, and 802.1X authentication
VLANs, QoS, ACLs, spanning trees, multicast, and IPv6 are supported
Full Gigabit ports
The whole series supports the combination of "Ethernet port + optical port", which is convenient for users to flexibly network and meet the networking needs of various scenarios.
Provide 8/16/24 multi-specification port products, and all ports have gigabit wire-speed forwarding capabilities to meet the needs of different users.
Strong business processing capabilities
It supports the RIP dynamic routing protocol, dynamically generates and updates routing tables, and solves the routing problem of small and medium-sized networks after subnets are divided.
Static routes are supported, and the administrator manually configures route entries to achieve simple, efficient, and reliable communication between different network segments.
DHCP servers are supported, which assign IP addresses to hosts in the network.
DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.
IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.
GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.
The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.
It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.
ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.
It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.
IPv6 is supported to meet the requirements of network transition from IPv4 to IPv6.
Complete security protection mechanism
Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.
Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.
IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.
DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.
It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.
Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.
Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.
Versatile reliability protection
Supports STP/RSTP/MSTP SPANNING TREE protocol to eliminate Layer 2 loops and implement link backup.
Spanning tree security functions are supported to prevent devices in a spanning tree network from various forms of malicious attacks.
Static aggregation and dynamic aggregation are supported, effectively increasing link bandwidth, implementing load balancing, link backup, and improving link reliability.
PoE power supply function
The PoE model supports PoE+ power supply and follows the IEEE 802.3af/at standard to meet the requirements of PoE power supply in scenarios such as visual security, teleconferencing systems, and wireless coverage.
You can set the power supply control of PoE ports based on user-defined time periods on the web management interface.
You can configure the PoE port priority on the web management interface, and when the remaining power is insufficient, the power supply of the high-priority port is guaranteed.
In PoE models, the maximum PoE output power per port can reach 30W, and users can set the maximum power that can be provided by the port on the web management interface.
Easy operation and maintenance
Supports multiple management and maintenance methods, such as web management, CLI command line (console, Telnet), and SNMP (V1/V2/V3).
Supports HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods for safer management.
RMON, system logs, and port traffic statistics are supported, which is convenient for network optimization and transformation.
Supports cable detection, ping detection, and Tracert detection operations to easily analyze faulty network nodes.
It supports LLDP, which is convenient for the network management system to query and judge the communication status of the link.
CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection are supported.
admin - September 12, 2018
roadthemes