AP-SG24MGX-4S2Q
Multi-gigabit PoE Access Switching Platform
- 24*1G/2.5G/5/10GBase-T+ 4*10G/25G (SFP28) + 2*40G/100G(QSFP28)
- 1 console, 1 USB, 1 RJ45 MGMT
- 2* modular PSU slots
- Forwarding rate: 654.76Mpps
- Switching capacity: 1.08Tbps
Product Overview
The AIRPRO AP-SG24MG Series is a next-generation, high-performance multi-gigabit PoE access switching platform designed for modern enterprise networks and high-density Wi-Fi 6/6E/7 deployments.
Featuring 1G/2.5G/5G/10G multi-rate Ethernet access interfaces, the AP-SG24MG Series provides the bandwidth and flexibility required to connect high-performance wireless access points, IP cameras, IoT devices, AV Systems and other bandwidth-intensive network endpoints.
Advanced PoE/PoE+/PoE++ power delivery, with support for up to 30W, 60W, and 90W per port on supported models, enables both data connectivity and power delivery over a single Ethernet cable, simplifying deployment of next-generation wireless and edge devices.
High-speed 10G/25G/40G/100G uplink options provide scalable connectivity to aggregation and core networks, helping eliminate uplink bottlenecks and supporting future network expansion.
Combining high switching performance, intelligent Layer 2/Layer 3 capabilities, advanced security, simplified management, and energy-efficient operation, the AP-SG24MG Series delivers a reliable and cost-effective access switching solution for enterprise campuses, hospitality, education, healthcare, retail, and high-density wireless environments.
Key Features
- Multi-Gigabit 1G/2.5G/5G/10G Ethernet access
- Designed for Wi-Fi 6, Wi-Fi 6E, and Wi-Fi 7 access point deployments
- Suitable for AV Systems
- High-power PoE/PoE+/PoE++, supporting up to 30W/60W/90W per port
- Flexible 10G/25G/40G/100G high-speed uplinks
- High-performance switching for bandwidth-intensive applications
- Advanced security and intelligent network management
- Energy-efficient design for reduced operational power consumption
- Scalable architecture for enterprise and campus network expansion
Wi-Fi 6 and Wi-Fi 7 Ready
The AIRPRO AP-SG24MG Series is purpose-built to support next-generation Wi-Fi 6 (802.11ax) and Wi-Fi 7 (802.11be) deployments. Multi-Gigabit Ethernet interfaces provide 1G/2.5G/5G/10G connectivity on supported models, helping eliminate the traditional 1GbE bottleneck between access points and the wired network.
Support for PoE, PoE+, and PoE++, with power delivery options of up to 30W, 60W, and 90W per port, enables high-performance wireless access points and other powered devices to receive both data and power through a single Ethernet connection.
Combined with high-speed uplinks, the AP-SG24MG Series provides the bandwidth, power, and scalability required for high-density wireless environments and next-generation enterprise applications.
Carrier-Class Resiliency
Designed for networks where availability is critical, the AP-SG24MG Series provides high-speed 25G and 100G uplink options on supported models, enabling resilient connections to aggregation and core network layers.
Multiple uplinks can be deployed for redundancy, link aggregation, and ring-based network architectures, improving overall network availability while providing additional bandwidth for future expansion.
Support for ITU-T G.8032 Ethernet Ring Protection Switching (ERPS) enables rapid recovery from network failures, with protection switching typically within 50 milliseconds, helping maintain service continuity for latency-sensitive applications.
Selected interfaces also provide enhanced surge and lightning protection of up to 6kV/8kV, helping protect network infrastructure in electrically demanding deployment environments.
Virtual Switch Framework (VSF)
Virtual Switch Framework (VSF) enables multiple compatible AIRPRO switches to operate as a single logical switching system.
By virtualizing multiple physical switches, VSF increases overall port density and system scalability while simplifying network architecture and day-to-day operations. Configuration, monitoring, and management can be centralized through a unified logical device, reducing operational complexity.
VSF also enhances network resiliency by allowing member switches and inter-switch links to provide redundancy within the virtualized switching system.
Advanced Layer 3 Routing
The AP-SG24MG Series delivers high-performance hardware-based Layer 3 switching and routing, supporting scalable enterprise campus and aggregation network architectures.
Dynamic routing capabilities include:
- Static and default routing
- RIP
- OSPF
- BGP
- Policy-Based Routing (PBR)
Policy-Based Routing (PBR) provides additional control over traffic forwarding by allowing routing decisions to be based on defined policies rather than destination address alone. This is particularly useful in networks with multiple WAN connections, Internet gateways, or traffic-engineering requirements.
Advanced Multicast Capabilities
The AP-SG24MG Series provides comprehensive Layer 2 and Layer 3 multicast functionality to support applications such as IPTV, video distribution, surveillance, collaboration, and enterprise multimedia services.
Layer 2 multicast capabilities include IGMP v1/v2/v3 Snooping, Fast Leave, multicast filtering, and Multicast VLAN Registration (MVR).
Layer 3 multicast capabilities include:
- IGMP v1/v2/v3
- PIM-DM
- PIM-SM
- PIM-SSM
- MSDP
Additional multicast controls, including multicast sender/receiver management and unauthorized multicast source detection, help administrators maintain predictable multicast performance while controlling unnecessary traffic across the network.
Comprehensive Quality of Service
The AP-SG24MG Series provides advanced Quality of Service (QoS) capabilities for converged enterprise networks carrying voice, video, business applications, wireless traffic, and standard data services.
With up to 8 hardware queues per port, network administrators can classify and prioritize different traffic types according to application and business requirements.
Traffic classification and prioritization can be based on:
- IEEE 802.1p
- DSCP
- IP precedence
- TCP/UDP port
- Access control and traffic classification policies
Flexible scheduling and traffic management help ensure that latency-sensitive applications such as voice, video conferencing, IPTV, and real-time communications receive appropriate network resources.
Bi-directional rate limiting at the port and traffic-class level provides granular bandwidth control, helping prevent individual users or applications from consuming excessive network resources.
Comprehensive IPv6 Support
The AP-SG24MG Series provides extensive IPv6 switching, management, security, and routing capabilities, enabling organizations to deploy IPv4/IPv6 dual-stack networks and transition toward next-generation IPv6 infrastructure.
Hardware-based IPv6 forwarding delivers high-performance packet processing without compromising switching performance.
Comprehensive IPv6 capabilities help organizations address the increasing number of connected devices while providing the scalability required for enterprise, campus, IoT, wireless, and cloud-connected environments.
High-Speed and Scalable Architecture
Designed for growing enterprise networks, the AP-SG24MG Series combines Multi-Gigabit access, high-power PoE, high-speed 25G/100G uplinks, Layer 3 routing, multicast, QoS, and virtualization capabilities within a scalable switching platform.
The architecture is well suited for:
- Wi-Fi 6/6E/7 access networks
- Enterprise campus networks
- Education and university campuses
- Hotels and hospitality networks
- Healthcare facilities
- Smart buildings
- High-density surveillance deployments
- IPTV and AV-over-IP networks
- Enterprise aggregation and distribution networks
Hardware Specifications
| Access Ports | 24 × 1G/2.5G/5G/10GBASE-T |
| 25G Uplink Ports | 4 × 10G/25G SFP28 |
| 40G/100G Uplink Ports | 2 × 40G/100G QSFP28 |
| Management Port | 1 × 10/100/1000BASE-T RJ45 management port |
| Console Port | 1 × RJ45 console port |
| USB | 1 × USB 2.0 |
| Switching Capacity | 1.08 Tbps |
| Forwarding Rate | 654.76 Mpps |
| RAM | 2 GB |
| Flash Memory | 16 MB SPI + 256 MB NAND |
| MAC Address Table | Standard: 48K; Routing mode: 32K;
Bridging mode: 96K |
| IPv4 Routing Table | Up to 32K |
| Layer 3 Interfaces | Up to 65 |
| Dimensions (W × H × D) | 442 × 45 × 422 mm |
| Operating Temperature | 0°C to 45°C |
| Storage Temperature | –40°C to 75°C |
| Relative Humidity | 5% to 95%, non-condensing |
| PoE Support | — |
| Maximum PoE per Port | — |
Power and PoE
Power Supply
The AP-SG24MG Series supports dual hot-swappable AC power supplies, providing enhanced power resiliency and simplified field replacement.
AP-SG24MG-P-4S2Q
Supported AC power supply options:
- 600W AC PSU
- 920W AC PSU
- Dual redundant hot-swappable power supplies
- Different PSU wattage models should not be mixed within the same switch
AP-SG24MGX-P-4S2Q
- Dual hot-swappable 600W AC power supplies
PoE Power Budget
With 600W AC Power Supply
- Single PSU: up to 400W PoE budget
- Dual PSUs: up to 800W PoE budget
With 920W AC Power Supply
- Single PSU: up to 700W PoE budget
- Dual PSUs: up to 1400W PoE budget
PoE Standards
- IEEE 802.3af — up to 15.4W
- IEEE 802.3at PoE+ — up to 30W
- IEEE 802.3bt PoE++ — up to 60W/90W
The high-power PoE architecture is designed to support next-generation devices such as Wi-Fi 6E and Wi-Fi 7 access points, PTZ cameras, AV Systems, intelligent building devices, and other high-power Ethernet endpoints.
Layer 2 Features
Ethernet and Link Management
- Port loopback detection
- LLDP
- LLDP-MED
- UDLD
- IEEE 802.3ad Link Aggregation Control Protocol (LACP)
- Up to 128 link aggregation groups
- Up to 8 member ports per LAG
- LACP-based traffic load balancing
High Availability
- ITU-T G.8032 Ethernet Ring Protection Switching (ERPS)
- Rapid ring protection and convergence
- Designed for resilient access and aggregation network architectures
Port Mirroring
- N:1 port mirroring
- Remote Switched Port Analyzer (RSPAN)
Spanning Tree
- IEEE 802.1D Spanning Tree Protocol (STP)
- IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
- IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
- Root Guard
- BPDU Guard
- BPDU Tunnel
VLAN Features
- IEEE 802.1Q VLAN
- Up to 4096 VLAN IDs
- MAC-based VLAN
- Voice VLAN
- Private VLAN (PVLAN)
- Protocol-based VLAN
- Multicast VLAN
- QinQ
- Selective QinQ
- Flexible QinQ
- GVRP
- N:1 VLAN translation
- Broadcast storm control
- Multicast storm control
- Unknown unicast storm control
Layer 2 Multicast
- IGMP v1/v2/v3 Snooping
- IGMP Layer 2 Querier
- MLD v1/v2 Snooping
- Neighbor Discovery Snooping
- Fast multicast forwarding and control
Layer 3 Routing
The AP-SG24MG Series provides advanced hardware-based Layer 3 routing capabilities suitable for enterprise campus, aggregation, and high-performance access networks.
IPv4 Routing
- Static routing
- RIPv1/v2
- OSPFv2
- Multiple OSPF processes
- BGP4
- Policy-Based Routing (PBR)
- VRRP
- Unicast Reverse Path Forwarding (uRPF)
- Equal-Cost Multi-Path (ECMP)
- Bidirectional Forwarding Detection (BFD)
ARP Features
- ARP Guard
- Local Proxy ARP
- Proxy ARP
- Static ARP binding
- Gratuitous ARP
- ARP rate limiting
- Anti-ARP spoofing
- Anti-ARP scanning
Network Services
- DNS Client
- DNS Relay
IPv6 Features
The AP-SG24MG Series provides comprehensive IPv6 switching, management, security, and routing capabilities for next-generation enterprise networks.
Supported IPv6 capabilities include:
- ICMPv6
- IPv6 Neighbor Discovery
- DNSv6
- IPv6 Policy-Based Routing
- VRRPv3
- IPv6 uRPF
- IPv6 Router Advertisement
- RIPng
- OSPFv3
- BGP4+
- IPv6 ACL
- IPv6 QoS
Multicast Routing
Comprehensive multicast capabilities support enterprise video, IPTV, surveillance, AV-over-IP, and other one-to-many applications.
IGMP and MLD
- IGMP v1/v2/v3
- IGMP Querier
- IGMP Snooping
- IGMP Proxy
- MLD v1/v2
- MLD Proxy
- MLD Snooping
PIM
- PIM-DM
- PIM-SM
- PIM-SSM
- PIM6-DM
- PIM6-SM
- PIM6-SSM
- IPv6 Anycast RP
Additional Multicast Features
- Static multicast routing
- Multicast receiver control
- Unauthorized multicast source detection
Quality of Service
The AP-SG24MG Series provides advanced QoS capabilities to prioritize business-critical and latency-sensitive traffic.
Queuing and Scheduling
- 8 hardware queues per port
- Strict Priority (SP)
- Weighted Round Robin (WRR)
- Weighted Deficit Round Robin (WDRR)
- Weighted Random Early Detection (WRED)
Traffic Classification
Traffic can be classified based on:
- IEEE 802.1p CoS
- ToS
- DiffServ DSCP
- IP precedence
- ACL
- TCP/UDP port number
- Physical interface
Traffic Management
- DSCP remarking
- IEEE 802.1p remarking
- IP precedence remarking
- Priority marking and remarking
- Traffic policing
- Queue-based priority control
Access Control Lists
Flexible ACL functionality provides granular traffic filtering and security policy enforcement.
Supported ACL types include:
- IPv4 ACL
- MAC ACL
- IP-MAC ACL
- Standard ACL
- Extended ACL
ACL rules can match:
- Source and destination IPv4 addresses
- Source and destination MAC addresses
- IP protocol
- TCP/UDP port
- DSCP
- ToS
- IP precedence
- VLAN
- Tagged/untagged traffic
- CoS
Additional ACL capabilities include:
- ACL-based traffic redirection
- Traffic statistics
- Port-based ACL application
- VLAN-based ACL application
- Time-based ACL policies
Network Access Security
Authentication and AAA
- IEEE 802.1X
- AAA
- Port-based authentication
- MAC-based authentication
- MAC Authentication Bypass (MAB)
- Guest VLAN
- Dynamic/automatic VLAN assignment
- Time-based accounting
- Traffic-based accounting
Authentication Servers
- RADIUS over IPv4 and IPv6
- TACACS+ over IPv4 and IPv6
DHCP Services and Protection
IPv4 and IPv6
- DHCP Server
- DHCP Client
- DHCP Relay
- DHCPv6 Server/Client
- DHCPv6 Relay
DHCP Security
- DHCP Snooping
- DHCP Option 82
- DHCP Relay Option 82
Traffic Visibility
- sFlow traffic monitoring
- Traffic analysis and visibility
- Flow-based network utilization monitoring
Management and Operations
The AP-SG24MG Series supports multiple secure management interfaces and protocols for flexible deployment and integration with enterprise network management platforms.
Management Interfaces
- Command-Line Interface (CLI)
- Web-based management
- Telnet
- SSH v1/v2
- HTTP/HTTPS
SNMP
- SNMPv1
- SNMPv2c
- SNMPv3
- IPv4 and IPv6 SNMP management
- SNMP MIB
- SNMP Trap
System Management
- Syslog
- External Syslog server
- FTP
- TFTP
- SNTP
- NTP
- RMON Groups 1, 2, 3, and 9
- RADIUS authentication
- TACACS+ authentication
- Dual firmware images
- Multiple configuration files
Ethernet Operations, Administration and Maintenance
- IEEE 802.3ah Ethernet OAM
- IEEE 802.1ag Connectivity Fault Management
Virtual Switch Framework
VSF (Virtual Switch Framework) enables multiple compatible AIRPRO switches to operate as a single logical switching system.
Benefits include:
- Simplified network management
- Increased switching capacity
- Higher port density
- Unified configuration and control
- Link and device redundancy
- Simplified network topology
- Improved availability
For 25G-based VSF stacking, designated 25G interfaces are used as VSF links. On applicable configurations, only specified ports such as Port 25 and Port 27 support VSF operation.
Key Platform Highlights
- Up to 24 Multi-Gigabit 1G/2.5G/5G/10G access ports
- Up to 90W IEEE 802.3bt PoE++ per port
- Up to 4kW PoE budgetwith dual high-capacity PSUs
- 4 × 10G/25G SFP28 uplinks
- 2 × 40G/100G QSFP28 uplinks
- Up to 08 Tbps switching capacity
- Advanced IPv4 and IPv6 Layer 3 routing
- BGP, OSPF, PBR, ECMP and BFD
- 8032 Ethernet Ring Protection
- Comprehensive multicast routing
- VSF virtualization
- Advanced QoS and ACL capabilities
- Dual hot-swappable redundant power supplies
- Designed for Wi-Fi 6, Wi-Fi 6E and Wi-Fi 7 enterprise access networks
Model Comparison
| Specification | AP-SG24MG-P-4S2Q | AP-SG24MGX-P-4S2Q | AP-SG24MGX-4S2Q |
| Access Ports | 24 × 1G/2.5G/5GBASE-T PoE++ | 24 × 1G/2.5G/5G/10GBASE-T PoE++ | 24 × 1G/2.5G/5G/10GBASE-T |
| 25G Uplink Ports | 4 × 10G/25G SFP28 | 4 × 10G/25G SFP28 | 4 × 10G/25G SFP28 |
| 40G/100G Uplink Ports | 2 × 40G/100G QSFP28 | 2 × 40G/100G QSFP28 | 2 × 40G/100G QSFP28 |
| Management Port | 1 × 10/100/1000BASE-T RJ45 management port | 1 × 10/100/1000BASE-T RJ45 management port | 1 × 10/100/1000BASE-T RJ45 management port |
| Console Port | 1 × RJ45 console port | 1 × RJ45 console port | 1 × RJ45 console port |
| USB | 1 × USB 2.0 | 1 × USB 2.0 | 1 × USB 2.0 |
| Switching Capacity | 840 Gbps | 1.08 Tbps | 1.08 Tbps |
| Forwarding Rate | 654.76 Mpps | 654.76 Mpps | 654.76 Mpps |
| RAM | 1 GB | 2 GB | 2 GB |
| Flash Memory | 16 MB SPI + 256 MB NAND | 16 MB SPI + 256 MB NAND | 16 MB SPI + 256 MB NAND |
| MAC Address Table | Standard: 48K; Routing mode: 32K; Bridging mode: 96K | Standard: 48K; Routing mode: 32K;
Bridging mode: 96K |
Standard: 48K; Routing mode: 32K;
Bridging mode: 96K |
| IPv4 Routing Table | Up to 32K | Up to 32K | Up to 32K |
| Layer 3 Interfaces | Up to 65 | Up to 65 | Up to 65 |
| Dimensions (W × H × D) | 442 × 45 × 422 mm | 442 × 45 × 422 mm | 442 × 45 × 422 mm |
| Operating Temperature | 0°C to 45°C | 0°C to 45°C | 0°C to 45°C |
| Storage Temperature | –40°C to 75°C | –40°C to 75°C | –40°C to 75°C |
| Relative Humidity | 5% to 95%, non-condensing | 5% to 95%, non-condensing | 5% to 95%, non-condensing |
| PoE Support | IEEE 802.3af/at/bt | IEEE 802.3af/at/bt | — |
| Maximum PoE per Port | Up to 90W | Up to 90W | — |