TP-Link JetStream TL-SG2008P 8-Port Metal Gigabit Smart Switch with 4-Port PoE+ (62W)

JetStream 8‑Port Gigabit Smart Switch with 4‑Port PoE+ (TL‑SG2008P)

Smarter switching for smarter results. The JetStream TL‑SG2008P 8‑Port Gigabit Smart Switch with 4‑Port PoE+ delivers flexible deployment, centralized cloud management, and robust security for modern business networks.

Key Features

• 62 W PoE+ Power Budget
• 4 × 802.3af/at‑compliant PoE+ ports

• Total PoE power supply of up to 62 W*

• Full Gigabit Performance

• 4 × Gigabit PoE+ ports
• 4 × Gigabit non‑PoE ports

• High‑speed connections for both PoE and non‑PoE devices

• Omada SDN Integration

• Zero‑Touch Provisioning (ZTP)**
• Centralized cloud management

• Intelligent network monitoring

• Easy Centralized Management

• Cloud access via Omada Cloud-Based Controller, hardware controllers (OC300/OC200), or Omada Software Controller

• Omada app support for convenient remote management

• Robust Security Strategies

• IP‑MAC‑Port Binding
• ACL (Access Control List)
• Port Security
• DoS Defend
• Storm Control
• DHCP Snooping
• 802.1X and Radius Authentication

• And more advanced protection features

• Optimized for Voice and Video

• L2/L3/L4 QoS
• IGMP Snooping
• Prioritize latency‑sensitive traffic for clear, lag‑free voice and video

Multiple Application Scenarios

The TL‑SG2008P is designed for a range of business networking environments:

• PoE Devices
  Fully compatible with PoE‑enabled devices, including:
• IP cameras
• Wireless access points

• IP phones

• Non‑PoE Devices
  Works seamlessly with non‑PoE wired devices, providing high‑speed Gigabit connections for:

• PCs
• Printers
• IPTV

Power over Ethernet for Simplified Deployment

• 4 × 802.3af/at‑compliant PoE+ ports
• Up to 62 W total PoE power budget*
• Single Ethernet cable for both data and power
• Flexible deployment of PoE devices such as wireless access points, IP cameras, and IP phones
• Helps reduce infrastructure costs for small businesses

Advanced Network Control

Access Control List (ACL)

• Acts as a virtual administrator
• Enforces user‑defined network rules
• Controls how connected devices access data
• Helps you shape your own network regulations

QoS for Lag‑Free Experience

• Traffic prioritization based on QoS
• Ensures latency‑sensitive applications such as voice and video stay clear and responsive

VLAN for Enhanced Security

• Logical grouping of devices across different physical LANs
• Improved information security
• Reduced data congestion

Omada SDN — Smarter Cloud Networking

The Omada Software Defined Networking (SDN) platform integrates:

• Access points
• Switches
• Gateways

Together, these deliver a business network designed for:

• Higher efficiency
• Higher security
• Higher reliability

Hassle‑Free Centralized Cloud Management

• 100% centralized cloud management
• Manage networks across multiple sites
• Single interface access from anywhere, anytime

Hardware Specifications

Max Power Consumption

Max Heat Dissipation

Performance

Software Features

Quality of Service (QoS)

• 802.1p CoS / DSCP priority
• 8 priority queues
• Priority schedule modes: SP (Strict Priority), WRR (Weighted Round Robin)
• Queue weight configuration
• Bandwidth control
• Port/flow‑based rate limit

Storm Control

• Multiple control modes (kbps/ratio)
• Broadcast / Multicast / Unknown‑Unicast control

L2 and L2+ Features

• DHCP: DHCP Relay, DHCP VLAN Relay, DHCP L2 Relay
• Link Aggregation: Static link aggregation, 802.3ad LACP, up to 8 aggregation groups, up to 8 ports per group

Spanning Tree Protocol

• 802.1D STP
• 802.1w RSTP
• 802.1s MSTP
• STP Security: TC Protect, BPDU Filter/Protect, Root Protect

Other L2 Functions

• Loopback Detection
• 802.3x Flow Control
• Port Mirroring, CPU Mirroring, One‑to‑One, Many‑to‑One, Flow‑Based, Ingress/Egress/Both
• DLDP (Device Link Detect Protocol)
• 802.1ab LLDP / LLDP‑MED

L2 Multicast

• 511 IPv4/IPv6 shared multicast groups
• IGMP Snooping (v1/v2/v3), Fast Leave, IGMP Snooping Querier, Static Group Config, MVR, Multicast Filtering
• MLD Snooping (v1/v2), Fast Leave, MLD Snooping Querier, Static Group Config
• Limited IP Multicast (256 profiles, 16 entries per profile)

Advanced Features

• Automatic Device Discovery
• Batch Configuration
• Batch Firmware Upgrading
• Intelligent Network Monitoring
• Abnormal Event Warnings
• Unified Configuration
• Reboot Schedule

IPv6 Support

• IPv6 Dual IPv4/IPv6
• MLD Snooping
• IPv6 Neighbor Discovery (ND)
• Path MTU Discovery
• ICMPv6
• TCPv6/UDPv6

IPv6 Applications

• DHCPv6 Client
• Ping6
• Tracert6
• Telnet (v6)
• IPv6 SNMP
• IPv6 SSH
• IPv6 SSL
• HTTP/HTTPS
• IPv6 TFTP

VLAN

• Max. 4K VLAN groups
• 802.1Q Tag VLAN
• MAC VLAN
• Protocol VLAN
• GVRP
• Voice VLAN

Access Control List (ACL)

• Up to 230 entries

Time‑Range

• Time Slice
• Week Time‑Range
• Absolute Time‑Range
• Holiday

MAC ACL

• Source MAC
• Destination MAC
• VLAN ID
• User Priority
• Ether Type

IP ACL

• Source IP
• Destination IP
• IP Protocol
• TCP Flag
• TCP/UDP Source Port
• TCP/UDP Destination Port
• DSCP/IP TOS

IPv6 ACL

• Supported

Combined ACL & Rule Operation

• Permit / Deny
• Policy actions: Mirror, Rate Limit, Redirect, QoS Remark

ACL Rules Binding

• Port Binding
• VLAN Binding

Flow Actions

• Mirror (to supported interface)
• Redirect (to supported interface)
• Rate Limit
• QoS Remark

Security

AAA & Authentication

• 802.1X (Port‑based)
• MAC (Host)‑based authentication
• Authentication methods: PAP, EAP‑MD5, MAB
• Guest VLAN
• Radius authentication and accounting

Binding & Protection

• IP/IPv6‑MAC Binding: 512 entries
• DHCP Snooping, DHCPv6 Snooping
• ARP Inspection
• ND Detection

IP Source Guard

• 253 entries
• Source IP + Source MAC

IPv6 Source Guard

• 183 entries
• Source IPv6 Address + Source MAC

Additional Security

• DoS Defend
• Static/Dynamic/Permanent Port Security (up to 64 MAC addresses per port)
• Broadcast/Multicast/Unicast Storm Control (kbps/ratio control mode)
• Port Isolation
• Secure web management via HTTPS with SSLv3/TLS 1.2
• Secure CLI management via SSHv1/SSHv2
• IP/Port/MAC‑based access control

MIBs & Monitoring

• MIB II (RFC1213)
• Bridge MIB (RFC1493)
• P/Q‑Bridge MIB (RFC2674)
• Radius Accounting Client MIB (RFC2620)
• Radius Authentication Client MIB (RFC2618)
• Remote Ping, Traceroute MIB (RFC2925)
• TP‑Link private MIBs
• RMON MIB (RFC1757, groups 1,2,3,9)

Management

• Omada App: Yes

Centralized Management Options

• Omada Cloud‑Based Controller
• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller

Cloud Access

• Yes, through OC300, OC200, Omada Cloud‑Based Controller, or Omada Software Controller

Zero‑Touch Provisioning

• Yes. Requires Omada Cloud‑Based Controller
• Supported by TL‑SG2008P V1, V3 and above
• Not supported by TL‑SG2008P V2

Management Features

• Web‑based GUI
• CLI via Telnet
• SNMP v1/v2c/v3, SNMP Trap/Inform
• RMON (groups 1,2,3,9)
• SDM Template
• DHCP/BOOTP Client
• Dual Image, Dual Configuration
• CPU Monitoring
• Cable Diagnostics
• EEE
• SNTP
• System Log

Other Information

Certification

• CE
• FCC
• RoHS

Package Contents

• TL‑SG2008P
• Power Adapter
• Installation Guide
• Rubber Feet

System Requirements

• Microsoft Windows 98SE, NT, 2000, XP, Vista, Windows 7/8/10
• MAC OS
• NetWare
• UNIX
• Linux

Environment

• Operating Temperature: 0–40 °C (32–104 °F)
• Storage Temperature: −40–70 °C (−40–158 °F)
• Operating Humidity: 10–90% RH, non‑condensing
• Storage Humidity: 5–90% RH, non‑condensing

* PoE budget is calculated based on laboratory testing. Actual PoE power budget may vary due to client limitations and environmental factors.
** Zero‑Touch Provisioning requires use of Omada Cloud‑Based Controller and is supported by TL‑SG2008P V1, V3 and above (not supported by V2).