TP-Link TL-SG3452XP 48-Port L2+ Managed GbE PoE+ Access Switch w/ 4 x 10G SFP+ Ports & 3-Year Omada Hosted Cloud Controller

TP-Link JetStream 48-Port Gigabit PoE+ L2+ Managed Switch with 4× 10GE SFP+ Uplinks (TL-SG3452XP)

Enterprise-grade 48-port Gigabit PoE+ switch with high-performance 10G uplinks, advanced L2/L2+/L3 features, and centralized cloud management through Omada SDN.

Key Features

• 4× 10G SFP+ Uplinks
• Four 10 Gbps SFP+ slots

• Non-blocking switching performance and ultra-low latency

• 48× PoE+ Ports with 500 W Power Budget*

• 48× 10/100/1000 Mbps RJ45 PoE+ ports
• 802.3af/at compliant, up to 30 W per port
• 500 W total PoE power budget*

• Data and power over a single Ethernet cable

• Centralized Cloud Management (Omada SDN)

• Integrates with Omada SDN platform
• 100% centralized cloud management for access points, switches, and gateways
• Single interface for wired and wireless networks

• Supports Omada Cloud-Based Controller, OC300, OC200, and Omada Software Controller

• Advanced L2/L2+/L3 Features

• Static Routing
• DHCP Server, DHCP Relay (Interface/VLAN/L2 Relay)
• 802.1Q VLAN, Private VLAN, QinQ (Port-Based & Selective)
• STP/RSTP/MSTP, Link Aggregation (static & 802.3ad LACP)
• IGMP/MLD Snooping, MVR, multicast filtering

• Advanced QoS with multiple queue scheduling options

• Robust Security & Access Control

• IP-MAC-Port Binding (IPv4 & IPv6)
• DHCP Snooping, ARP Inspection, ND Detection
• DoS Defense, Storm Control, Port Security
• 802.1X authentication (port-based, MAC-based), MAB, Guest VLAN
• ACLs (L2–L4, IPv4/IPv6, time-based, packet content)

• AAA including TACACS+

• Flexible Management Options

• Omada App (with supported controllers)
• Web-based GUI
• CLI via console port or Telnet/SSH
• SNMP v1/v2c/v3, RMON, SDM templates
• Dual Image & Dual Configuration

• Batch configuration and firmware upgrade

• Ready for IPv6 and ISPs

• Dual IPv4/IPv6 stack, IPv6 ACL, MLD Snooping
• sFlow, QinQ, L2PT, PPPoE ID Insertion, IGMP Authentication
• 802.3ah OAM and DLDP for monitoring and troubleshooting

*PoE budget: 500 W total when fully powered as specified.

Hardware Specifications

Performance

Software Features

Quality of Service (QoS)

• 8 priority queues
• 802.1p CoS/DSCP priority
• Queue scheduling: SP, WRR, SP+WRR
• Bandwidth control: port/flow-based rate limiting
• Flow actions: mirror, redirect, rate limit, QoS remark

L3 Features

• Up to 16 IPv4/IPv6 interfaces
• Static Routing: up to 48 static routes
• Static ARP: up to 128 static entries
• Proxy ARP, Gratuitous ARP
• DHCP Server
• DHCP Relay: Interface, VLAN, and L2 Relay

L2 & L2+ Features

• Link Aggregation
• Static aggregation
• 802.3ad LACP

• Up to 8 aggregation groups, up to 8 ports per group

• Spanning Tree Protocol

• 802.1d STP, 802.1w RSTP, 802.1s MSTP

• STP Security: TC Protect, BPDU Filter, Root Protect

• Loopback Detection

• Port-based and VLAN-based

• Flow Control

• 802.3x Flow Control

• HOL blocking prevention

• Mirroring

• Port mirroring, CPU mirroring
• One-to-One, Many-to-One
• Tx/Rx/Both

L2 Multicast

• IGMP Snooping (v1/v2/v3), Fast Leave, Snooping Querier
• IGMP Authentication
• MLD Snooping (v1/v2), Fast Leave, Snooping Querier
• Static group configuration, Limited IP multicast
• MVR
• Multicast filtering: 256 profiles, 16 entries per profile

Advanced Features

• Automatic device discovery
• Batch configuration and firmware upgrading
• Intelligent network monitoring and abnormal event warnings
• Unified configuration
• Reboot schedule

VLAN

• Up to 4K VLAN groups
• 802.1Q Tagged VLAN
• MAC VLAN: 30 entries
• Protocol VLAN: 16 templates, 16 VLANs
• Private VLAN
• GVRP
• VLAN VPN (QinQ): Port-Based QinQ, Selective QinQ
• Voice VLAN

Access Control Lists (ACL)

• Time-based ACL
• MAC ACL: source/destination MAC, VLAN ID, user priority, EtherType
• IP ACL: source/destination IP, fragments, IP protocol, TCP flags, TCP/UDP port, DSCP/IP TOS, user priority
• Combined ACL and packet content ACL
• Policies: mirroring, redirect, rate limit, QoS remark
• ACLs can be applied to ports/VLANs

Security

• IPv4 IP-MAC-Port Binding
• 512 entries
• DHCP Snooping, ARP Inspection

• IPv4 Source Guard: 100 entries

• IPv6-MAC-Port Binding

• 512 entries
• DHCPv6 Snooping, ND Detection

• IPv6 Source Guard: 100 entries

• DoS Defense

• Static/Dynamic Port Security (up to 64 MAC addresses per port)
• Broadcast/Multicast/Unicast Storm Control (kbps/ratio modes)
• 802.1X (port-based, MAC-based), VLAN assignment, MAB, Guest VLAN
• RADIUS authentication and accounting
• AAA (including TACACS+)
• Port isolation
• Secure HTTPS (SSLv3/TLS 1.2) management
• Secure CLI via SSHv1/SSHv2
• IP/Port/MAC-based access control

IPv6 Support

• Dual IPv4/IPv6
• MLD Snooping
• IPv6 ACL, IPv6 Interface
• Static IPv6 Routing
• IPv6 Neighbor Discovery (ND)
• Path MTU discovery
• ICMPv6, TCPv6/UDPv6
• IPv6 applications: DHCPv6 Client, Ping6, Tracert6, Telnet(v6), IPv6 SNMP, IPv6 SSH, IPv6 SSL, HTTP/HTTPS, IPv6 TFTP

ISP-Oriented Features

• sFlow
• QinQ
• L2PT
• PPPoE ID Insertion
• IGMP Authentication
• 802.3ah OAM
• DLDP

MIBs

• MIB II (RFC1213)
• Interface MIB (RFC2233)
• Ethernet Interface MIB (RFC1643)
• Bridge MIB (RFC1493)
• P/Q-Bridge MIB (RFC2674)
• RMON MIB (RFC2819), RMON2 MIB (RFC2021)
• RADIUS Accounting Client MIB (RFC2620)
• RADIUS Authentication Client MIB (RFC2618)
• Remote Ping, Traceroute MIB (RFC2925)
• TP-Link private MIB support

Management

• Omada App

• Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller

• Centralized Management

• Omada Cloud-Based Controller
• Omada Hardware Controller (OC300, OC200)

• Omada Software Controller

• Cloud Access

• Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller

• Zero-Touch Provisioning

• Requires Omada Cloud-Based Controller

• Management Features

• Web-based GUI
• CLI via console port, Telnet
• SNMP v1/v2c/v3 (Trap/Inform)
• RMON (1, 2, 3, 9 groups)
• SDM Template
• DHCP/BOOTP Client
• 802.1ab LLDP/LLDP-MED
• DHCP AutoInstall
• Dual Image, Dual Configuration
• CPU Monitoring
• Cable Diagnostics
• EEE
• Password Recovery
• SNTP
• System Log

Certifications

• CE
• FCC
• RoHS

Package Contents

• TL-SG3452XP Switch
• Power Cord
• Quick Installation Guide
• Rackmount Kit
• Rubber Feet

System Requirements

• Microsoft Windows 98SE, NT, 2000, XP, Vista, 7, 8, 10, 11
• MAC OS
• NetWare
• UNIX
• Linux

Environmental

• Operating Temperature: 0–40 °C (32–104 °F)
• Storage Temperature: -40–70 °C (-40–158 °F)
• Operating Humidity: 10–90% RH, non-condensing
• Storage Humidity: 5–90% RH, non-condensing