Full Gigabit Layer 3 Network Management Switch

48GE+4SFP

TL-SG5452

48 10/100/1000M adaptive RJ45 ports, 4 independent Gigabit SFP（mini GBIC）Optical fiber module expansion slot, flexible access 

Support RIP dynamic routing, static routing 

Support DHCP server, DHCP relay, ARP proxy 

Supports rich network security protection such as four-element binding, DHCP Snooping, ARP/IP/DoS protection, etc. 

Rich VLAN function, perfect QoS strategy, powerful ACL access control function 

Support port aggregation and multiple spanning tree protocols to improve link redundancy backup capabilities 

TL-SG5452 is an all-gigabit three-layer network management switch independently developed and designed by TP-LINK for building high-security and high-performance network requirements. It supports RIP, static routing, DHCP server, DHCP relay, and ARP proxy functions. Complete security strategy, perfect QoS strategy and rich VLAN functions, easy to manage and maintain, can be used as the core switch of small and medium-sized enterprises, communities, hotels and campus networks, meeting the needs of high-performance, stable, reliable, and economical and applicable networking. 

Support dynamic routing, static routing function 

Support RIP dynamic routing, solve the routing problem after the subnet division of small and medium-sized networks, and simplify network configuration. 

Support static routing, through simple configuration, you can realize the communication between different network segments. Reasonable setting and use of static routes can effectively improve network performance. 

Support DHCP server, DHCP relay, ARP proxy function. 

Flexible expansion capabilities 

TL-SG5428 provides 48 10/100/1000M adaptive RJ45 ports and 4 independent SFP fiber module expansion slots. The rich port types provide great flexibility for user networking and fully protect user investment. 

Complete network security access strategy 

Support Port/MAC/IP/VLAN ID four-element automatic and intelligent binding, which can quickly locate user information; support IP source protection, ARP protection, DoS protection, support port security functions, and ensure network security. 

Rich VLAN features 

Supports IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN and VLAN VPN, and can divide different virtual networks according to different needs.

IEEE 802.1Q VLAN integrates Port VLAN, which is compatible with mainstream equipment, and the user-friendly operation mode makes networking more convenient, accurate and efficient; MAC VLAN divides VLAN by MAC address, and binds MAC address to VLAN; Protocol VLAN divides VLANs through protocols, and can customize protocols for special applications to achieve secure communication; Private VLAN can isolate broadcast packets and save the VLAN ID of the upper device when docking with the upper device; VLAN VPN can effectively expand VLAN resources and realize users VLAN transparent transmission technology; GVRP is based on the GARP working mechanism to maintain the VLAN dynamic registration information in the device, making the VLAN configuration in the LAN faster and more convenient. 

Multi-level and diversified access control strategy 

Powerful hardware ACL capability, in-depth identification of packets, support for L2~L4 data stream classification, provide definition of ACL based on source MAC address, destination MAC, source IP address, destination IP address, IP protocol type, TCP/UDP port, etc., and support Issue ACL based on port and VLAN; support ACL control based on time period, which can be flexibly set to meet the access control requirements of each time period; support 802.1X authentication based on port and MAC, complete the necessary identity authentication when users access the network, Ensure the legitimacy of the access users; in addition, it supports Guest VLAN, which can easily set the access rights of guest users. 

Perfect multi-service integration capabilities 

Support port-based, IEEE 802.1p and DSCP priority; support SP（Strict Priority）, WRR（Weighted Round Robin）, SP+WRR queue scheduling algorithm, each port supports 4 output queues, can put messages into the output queue of the port with different priorities, to meet the needs of different services on the basic network, and support port two-way speed limit; support IGMP V1/V2, through IGMP Snooping technology, can well solve multicast application problems, such as IPTV, video conferencing, and so on. 

High reliability design 

Support the traditional STP/RSTP/MSTP two-layer link protection technology, improve the fault tolerance and redundancy backup capabilities of the link, and ensure the stable operation of the network; support the spanning tree security function to prevent the devices in the spanning tree network from suffering various forms Malicious attacks; support two convergence modes, manual convergence and dynamic convergence, which can effectively increase link bandwidth and improve link reliability, while achieving load balancing and link backup. 

Support LLDP 

The LLDP protocol allows network devices from different vendors to work together, and devices running the LLDP protocol can automatically detect and learn information about neighboring devices. The information obtained by LLDP can be used to troubleshoot the network, improve network stability, and maintain the correct topology. 

Flexible and secure network management 

Support CLI command line（Console, Telnet, SSHV1/V2）, Web Network Management（HTTP, SSL V2/V3/TLSV1）, SNMP（V1/V2c/V3）Various management methods to make device management more convenient; support NDP (neighbor discovery), NTDP（Neighbor Topology Discovery）And Web cluster management, easily create a unified management method, support the relevant standards of the Ministry of Information Industry, and be compatible with cluster management of other mainstream manufacturers. Support VCT cable detection, port loopback detection, Ping detection and Tracert detection operations, easily analyze failed network nodes; support identity filtering detection technology, provide multi-level user management and management limit functions, and enhance configuration security.

Hardware specifications

Network standard 

:IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z, IEEE 802.3x, IEEE 802.1X, IEEE 802.1q, IEEE 802.1p, IEEE 802.1s, IEEE 802.1d, IEEE 802.1w, IEEE 802.3ad, IEEE 802.1 v

port 

: 48 10/100/1000Mbps RJ45 ports

: 4 independent Gigabit SFP fiber ports

:1 Console port

Indicator light 

: Each port has 1 Link/Ack indicator

: Each device has 1 Power and System indicator

performance 

: Store and forward

: Supports 16K MAC address table depth

Shell size: 440*220*44

Power supply: 100-240V～ 50/60Hz 

Software specifications

routing 

: Support RIP

: Support static routing

: Support ARP proxy

Safety features 

:IP-MAC-Port-VID four-element binding

: IP source protection, Dos protection, port security

: 802.1X authentication, Guest VLAN

Access control 

: Support L2~L4 packet filtering based on time period

: Support flow-based rate limiting, destination port redirection, QoS re-marking

: Support for issuing policies based on ports and VLANs

VLAN 

: 802.1Q VLAN, MAC VLAN, Private VLAN, Protocol Based VLAN, Voice VLAN

:VLAN VPN

:GARP/GVRP

Address table 

: MAC address display/query, MAC address filtering

: Static MAC address setting, dynamic MAC address management

: Support IVL

Port management 

: Port aggregation, port monitoring, port speed limit

: Storm suppression

Spanning tree 

: STP (802.1d), RSTP (802.1w), MSTP (802.1s)

: Spanning Tree Security

Multicast management 

:IGMP V1/V2/V3

: Multicast address management, multicast VLAN, multicast routing port, static multicast address

: Unknown multicast drop, multicast filtering, Fast Leave

QoS 

: 8 port queues

: Support priority based on port, 802.1P and DSCP/ToS

: Support four priority scheduling modes: Equ, SP, WRR, SP+WRR

DHCP 

: DHCP Server, DHCP relay

:DHCP Snooping, DHCP attack protection, Option82

system maintenance 

: Support configuration import and export and system time setting

: Loopback detection, cable detection, Ping, Tracert detection

: Display/filter system logs, log server

System Management 

: Support Web management based on HTTP, SSL (v2/v3/TLSv1), CLI management based on Telnet, Console, SSH (v1/v2)

:SNMP V1/V2/V3（TP-LINK MIBs）, National standard cluster management

: Free software upgrade

Safety management 

: Support security management based on port, MAC, IP address 

＊ The data quoted in the above introduction are theoretical data throughput and the performance of specific models in specific experimental environments. There may be differences based on the actual environment of the site. The technical comparisons mentioned are explained by scientific principles and do not involve other purposes. .