2.5G Layer 3 managed PoE switches

TL-SE5630PB is a newly developed and launched 5 series 2.5 Layer 3 managed PoE switch by TP-LINK, which adopts a new generation of high-performance hardware and software platform, provides flexible 2.5G access and cost-effective 10 Gigabit uplink ports, supports IEEE 802.3af/at/bt PoE standards, and has a single-port PoE power of up to 90W and a maximum PoE output power of 760W. The device also supports Layer 3 routing protocol, complete security protection mechanism, perfect ACL/QoS policy and rich VLAN functions, which is easy to manage and maintain, and can meet the PoE networking requirements of hotels, campuses, and enterprise campuses to upgrade WiFi 6 wireless networks.

• 24 x 2.5G/1G/100M/10M adaptive RJ45 ports, 6 x 10G/2.5G/1G SFP+ ports
• All 24 RJ45 ports support IEEE 802.3bt standard PoE power supply and are compatible with IEEE 802.3at/af standard
• The maximum PoE output power of the whole machine is up to 760W, and the maximum PoE output power of a single port is up to 90W
• It supports remote management of TP-LINK commercial cloud platform and mobile APP management
• It supports intelligent deployment, automatic configuration networking, and graphical topology display
• Supports dynamic RIP routing, static routing, ARP proxy, and DHCP server
• Supports quaternary binding, ARP/IP/DoS protection, and 802.1X authentication
• VLANs, QoS, ACLs, spanning trees, multicast, and IPv6 are supported

2.5G access, 10 Gigabit uplink

• It provides 24 2.5G RJ45 electrical ports, which are backward compatible with 1000/100/10M to meet the high-speed access requirements of terminal devices (such as APs).
• Six 10G/2.5G/1G SFP+ optical ports are provided.
• All ports are capable of wire-speed forwarding, giving full play to performance.

90W for a single port, 760W for the whole machine, and high-power PoE++ power supply

• All 24 RJ45 ports support IEEE 802.3bt PoE power supply and are backward compatible with IEEE 802.3af/at standard.
• The maximum PoE output power of the whole machine is 760W, and the maximum PoE output power of the port is 90W, which meets the high-power PoE power supply requirements of visual security, teleconferencing system, wireless coverage and other scenarios.
• You can set the power supply control of PoE ports based on user-defined time periods on the web management interface.
• You can configure the PoE port priority on the web management interface, and when the remaining power is insufficient, the power supply of the high-priority port is guaranteed.

Strong business processing capabilities

• It supports the RIP dynamic routing protocol to solve the routing problem of small and medium-sized networks after subnets are divided, simplifying network configuration.
• Static routes are supported, and the administrator manually configures route entries to achieve simple, efficient, and reliable communication between different network segments.
• DHCP servers are supported, which assign IP addresses to hosts in the network.
• DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
• Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.
• IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.
• GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.
• The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.
• It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.
• ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.
• It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

Complete security protection mechanism

• Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.
• Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.
• IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.
• DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.
• It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.
• Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Versatile reliability protection

• Supports STP/RSTP/MSTP production tree protocols to eliminate Layer 2 loops and implement link backup.
• Spanning tree security functions are supported to prevent devices in a spanning tree network from various forms of malicious attacks.
• Static aggregation and dynamic aggregation are supported, effectively increasing link bandwidth, implementing load balancing, link backup, and improving link reliability.

Easy operation and maintenance

• It supports TP-LINK commercial flat tilts, making it easy to remotely manage and maintain equipment and reduce on-site O&M costs.
• Supports multiple management and maintenance methods, such as web management, CLI command line (console, Telnet), and SNMP (V1/V2/V3).
• Supports HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods for safer management.
• RMON, system logs, and port traffic statistics are supported, which is convenient for network optimization and transformation.
• Supports cable detection, ping detection, and Tracert detection operations to easily analyze faulty network nodes.
• It supports LLDP, which is convenient for the network management system to query and judge the communication status of the link.
• CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection are supported.

Hardware specifications

Network standards	IEEE 802.3、IEEE 802.3u、IEEE 802.3ab、IEEE 802.3z、IEEE 802.1d、IEEE 802.1w、IEEE 802.1s 、IEEE 802.1Q、IEEE 802.1p、IEEE 802.3x、IEEE802.3af、IEEE802.3at、IEEE802.3bt
Port	24 x 2.5Gbps RJ45 ports (1000/100/10Mbps compatible) 6 x 10/2.5/1Gbps SFP+ optical ports
PoE power supply	The 24 RJ45 ports support IEEE 802.3af/at/bt standard PoE power supply The maximum power supply of the whole machine is 760W The maximum power supply per port is 90W
Light	1 Link/Ack and PoE indicator per RJ45 port (mode switch switching) Each 10 Gigabit SFP+ port has 1 Link/Ack indicator Each device has 1 PWR, SYS, PoE Max, Master, Stack, PoE indicator
Performance	Store-and-forward
MAC address depth	16K
Enter the power supply	220V～ 50Hz
Use environment	Operating temperature: 0°C~40°C Storage temperature: -40°C~70°C Operating humidity: 10%~90% RH non-condensing Storage humidity: 5%~90% RH non-condensing
Dimensions(L×W×H)	440mm×280mm×44mm

Software Specifications

Routing	Dynamic routing of RIP is supported Static routes are supported ARP proxies are supported
VLAN	802.1Q VLAN、MAC VLAN、Private VLAN、Protocol Based VLAN、Voice VLAN VLAN VPN GARP/GVRP
Address table	MAC address display/query, MAC address filtering Static MAC address setting and dynamic MAC address management Support for IVL
Spanning trees	STP (802.1d)、RSTP (802.1w)、MSTP (802.1s) Spanning tree security
Multicast management	IGMP V1/V2/V3 Multicast address management, multicast VLANs, multicast routing ports, and static multicast addresses Unknown Multicast Drop, Multicast Filtering, Fast Leave
QoS	8 port queues Supports port-based, 802.1P, and DSCP/ToS prioritization It supports four priority scheduling modes: Equ, SP, WRR, and SP+WRR
System maintenance	Supports configuring import and export and system time settings Cable detection, ping, and tracert detection Display/filter system logs, log servers
System administration	Web management based on HTTP, SSL (v2/v3/TLSv1), and CLI management based on Telnet, Console, and SSH (v1/v2) are supported SNMP V1/V2/V3（TP-LINK MIBs） Free software upgrades
Security management	Supports security management based on ports, MAC addresses, and IP addresses
PoE power management	Port PoE is enabled/disabled Port PoE priority Based on time period The maximum power consumption value of the system is set Port maximum power consumption value setting
Access control	Supports L2~L4 packet filtering based on time period Flow-based rate limiting, destination port redirection, and QoS remarking are supported Policies can be delivered based on ports and VLANs
Safety features	IP-MAC-Port-VID quaternary binding ARP protection, DoS protection, and port security

TL-SE5630PB is a newly developed and launched 5 series 2.5 Layer 3 managed PoE switch by TP-LINK, which adopts a new generation of high-performance hardware and software platform, provides flexible 2.5G access and cost-effective 10 Gigabit uplink ports, supports IEEE 802.3af/at/bt PoE standards, and has a single-port PoE power of up to 90W and a maximum PoE output power of 760W. The device also supports Layer 3 routing protocol, complete security protection mechanism, perfect ACL/QoS policy and rich VLAN functions, which is easy to manage and maintain, and can meet the PoE networking requirements of hotels, campuses, and enterprise campuses to upgrade WiFi 6 wireless networks.

24 x 2.5G/1G/100M/10M adaptive RJ45 ports, 6 x 10G/2.5G/1G SFP+ ports
All 24 RJ45 ports support IEEE 802.3bt standard PoE power supply and are compatible with IEEE 802.3at/af standard
The maximum PoE output power of the whole machine is up to 760W, and the maximum PoE output power of a single port is up to 90W
It supports remote management of TP-LINK commercial cloud platform and mobile APP management
It supports intelligent deployment, automatic configuration networking, and graphical topology display
Supports dynamic RIP routing, static routing, ARP proxy, and DHCP server
Supports quaternary binding, ARP/IP/DoS protection, and 802.1X authentication
VLANs, QoS, ACLs, spanning trees, multicast, and IPv6 are supported

2.5G access, 10 Gigabit uplink

It provides 24 2.5G RJ45 electrical ports, which are backward compatible with 1000/100/10M to meet the high-speed access requirements of terminal devices (such as APs).
Six 10G/2.5G/1G SFP+ optical ports are provided.
All ports are capable of wire-speed forwarding, giving full play to performance.

90W for a single port, 760W for the whole machine, and high-power PoE++ power supply

All 24 RJ45 ports support IEEE 802.3bt PoE power supply and are backward compatible with IEEE 802.3af/at standard.
The maximum PoE output power of the whole machine is 760W, and the maximum PoE output power of the port is 90W, which meets the high-power PoE power supply requirements of visual security, teleconferencing system, wireless coverage and other scenarios.
You can set the power supply control of PoE ports based on user-defined time periods on the web management interface.
You can configure the PoE port priority on the web management interface, and when the remaining power is insufficient, the power supply of the high-priority port is guaranteed.

Strong business processing capabilities

It supports the RIP dynamic routing protocol to solve the routing problem of small and medium-sized networks after subnets are divided, simplifying network configuration.
Static routes are supported, and the administrator manually configures route entries to achieve simple, efficient, and reliable communication between different network segments.
DHCP servers are supported, which assign IP addresses to hosts in the network.
DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.
IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.
GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.
The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.
It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.
ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.
It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

Complete security protection mechanism

Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.
Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.
IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.
DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.
It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.
Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.
Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Versatile reliability protection

Supports STP/RSTP/MSTP production tree protocols to eliminate Layer 2 loops and implement link backup.
Spanning tree security functions are supported to prevent devices in a spanning tree network from various forms of malicious attacks.
Static aggregation and dynamic aggregation are supported, effectively increasing link bandwidth, implementing load balancing, link backup, and improving link reliability.

Easy operation and maintenance

It supports TP-LINK commercial flat tilts, making it easy to remotely manage and maintain equipment and reduce on-site O&M costs.
Supports multiple management and maintenance methods, such as web management, CLI command line (console, Telnet), and SNMP (V1/V2/V3).
Supports HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods for safer management.
RMON, system logs, and port traffic statistics are supported, which is convenient for network optimization and transformation.
Supports cable detection, ping detection, and Tracert detection operations to easily analyze faulty network nodes.
It supports LLDP, which is convenient for the network management system to query and judge the communication status of the link.
CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection are supported.