TP-Link SG2218, Omada

Key features of the TP-Link SG2218, Omada smart switch

• 16 gigabit RJ-45 ports and 2 SFP ports provide high-speed connectivity
• Integrated into the Omada platform with Zero-Touch Provisioning (ZTP), centralised cloud management, and intelligent monitoring
• Static routing helps route local network traffic, ensuring efficient use of network resources
• Robust security strategy including IP-MAC binding, ACL, port security, DoS attack protection, Storm Control, DHCP Snooping, 802.1X and Radius authentication, and more
• The TP-Link SG2218, Omada smart switch provides optimised voice and video transmission in L2/L3/L4 QoS applications and IGMP Snooping
• Standalone management via web interface, CLI (console port, Telnet, SSH), SNMP, RMON, and Dual Image features bring advanced management options
• IPv6 support includes features like Dual IPv4/IPv6 Stack, MLD Snooping, IPv6 ACL, DHCPv6 Snooping, IPv6 Interface, Path Maximum Transmission Unit (PMTU) Discovery, and IPv6 Neighbor Discovery

Secure network

The security features include IP-MAC-Port-VID Binding, Port Security, Storm Control and DHCP Snooping, which protect against a wide range of network threats. The device has an integrated list of common DoS attacks, allowing it to defend against them effectively. The Access Control List (ACL, L2 to L4) function also restricts access to sensitive parts of the network by denying packets based on source and destination MAC address, IP address, TCP/UDP ports, or VLAN ID. User access to the network can be monitored using 802.1X authentication, which works with a RADIUS/Tacacs+ server to grant access only to users with valid credentials.

It supports a full range of L2+ features, including 802.1Q VLAN, Port Mirroring, STP/RSTP/MSTP, Link Aggregation Control Protocol, and 802.3x Flow Control. Advanced IGMP Snooping ensures that the switch intelligently forwards multicast streams only to the appropriate subscribers, reducing unnecessary network traffic. IGMP Throttling & Filtering restricts each subscriber at the port level to prevent unauthorised access to the multicast stream. Static routing is a simple way to segment the network and allows traffic to be routed within the local network via the switch for improved traffic efficiency.