AP-SG4500-28GT-4XFP
AP-SG4500 Series is a family of intelligent Layer 2 access switches
- 24 x 10/100/1000Base-T + 4 x 10GE(SFP+)
- 1 Console, 1 USB port
- AC power supply
- Switching capacity: 128Gbps
- Forwarding rate: 95Mpps
Product Overview
The AirPro SG4500 Series is a family of intelligent Layer 2 access switches designed for carrier, metropolitan-area network (MAN), enterprise, and service-provider edge deployments. Equipped with full Gigabit Ethernet access connectivity and 4 or 6 high-speed SFP+ uplink ports, the series delivers scalable performance for bandwidth-intensive access and aggregation environments.
The SG4500 Series combines advanced Layer 2 switching with comprehensive Quality of Service (QoS), flexible VLAN capabilities, and carrier-grade resiliency. Features such as dynamic VLAN assignment, voice VLAN, Q-in-Q, N:1 VLAN translation, and ITU-T G.8032 Ethernet Ring Protection Switching enable efficient service delivery across complex network topologies.
Integrated security, bandwidth management, and Operations, Administration, and Maintenance (OAM) capabilities provide granular control, simplified troubleshooting, and improved service assurance. Support for differentiated traffic handling and Triple-Play applications makes the platform well suited for converged voice, video, and data services.
Designed with operational efficiency in mind, selected SG4500 models incorporate fanless or low-noise cooling architectures and energy-saving features to reduce power consumption and operating costs while maintaining reliable network performance.
With advanced management, security, resiliency, and service-delivery capabilities, the SG4500 Series provides a flexible and cost-effective platform for carrier access, MAN edge, enterprise access, and high-performance Gigabit Ethernet deployments.
Key Features
High-Speed 10GbE Uplinks
The AirPro SG4500 Series combines full Gigabit Ethernet access connectivity with 4 or 6 SFP+ 10GbE uplink ports, providing the bandwidth required for modern enterprise, carrier, and metropolitan-area network deployments.
High-speed uplinks help remove aggregation bottlenecks, support growing east-west and north-south traffic demands, and provide a scalable foundation for future network expansion.
Layer 3 Forwarding
The SG4500 Series supports Layer 3 forwarding, enabling traffic to be routed efficiently between VLANs without requiring a separate external router for basic inter-VLAN communication.
This capability simplifies network segmentation, improves traffic efficiency, and helps maintain application performance across multiple departments, services, or user groups.
Virtual Switch Framework
Virtual Switch Framework (VSF) enables multiple compatible AirPro switches to operate as a single logical system. VSF consolidates management and forwarding information across member switches while increasing aggregate port density and system capacity.
By presenting multiple physical switches as one managed entity, VSF simplifies configuration, monitoring, and maintenance while improving deployment flexibility and network resiliency.
Comprehensive Access Security
The SG4500 Series provides multilayer security capabilities designed to protect users, devices, and network resources.
IEEE 802.1X port-based authentication enables identity-based access control through standards-based RADIUS servers, helping ensure that only authorized users and devices are granted network access.
Flexible Access Control Lists (ACLs) allow administrators to enforce traffic policies based on Layer 2, Layer 3, and Layer 4 information. User-defined ACLs provide additional policy flexibility for application control and access restriction.
DHCP, ARP, and MAC Protection
Integrated DHCP Snooping helps prevent rogue DHCP servers and DHCP-based attacks by distinguishing between trusted and untrusted interfaces.
DHCP Snooping bindings and Option 82 can be combined with IEEE 802.1X, ARP protection, and other access-control mechanisms to strengthen endpoint validation.
Additional Layer 2 security features—including ARP Guard, anti-ARP scanning, and MAC security controls—help protect the access network against address spoofing, unauthorized devices, and other common Layer 2 threats.
Resilient Uplink and Ring Protection
With 4 or 6 10GbE uplinks, the SG4500 Series supports flexible redundant uplink designs and resilient ring architectures.
Support for ITU-T G.8032 Ethernet Ring Protection Switching (ERPS) enables rapid protection switching in Ethernet ring deployments. Under appropriate network conditions, G.8032 can provide recovery in less than 50 milliseconds, helping maintain service continuity following a link or node failure.
G.8032 Version 2 support enables deployment across a variety of ring topologies, including single-ring, interconnected-ring, and multi-ring designs.
Efficient Multicast Delivery
The SG4500 Series provides comprehensive multicast-control features designed to optimize bandwidth utilization and improve delivery efficiency.
IGMP Snooping restricts multicast traffic to ports with active multicast receivers, helping prevent unnecessary flooding across the network.
Support for Multicast VLAN Registration (MVR) enables multicast services to be shared across multiple subscriber VLANs while maintaining logical traffic separation. MVR trunk capabilities further simplify multicast transport across uplinks, improving resource utilization for IPTV, video distribution, and other multicast-based services.
Hardware Specifications
| 10/100/1000BASE-T ports | 24 |
| 1/10GbE SFP+ uplinks | 4 |
| Auto-MDI/MDIX | Supported |
| Console port | 1 |
| USB 2.0 interface | 1 |
| Reset button | — |
| Switching capacity | 128 Gbps |
| Forwarding performance | 95 Mpps |
| MAC address table | 16K |
| Jumbo-frame support | 10K bytes |
| Packet buffer | 12 Mbits |
| ACL table | 512 entries |
| Queues per port | 8 |
| VLAN capacity | Up to 4K |
| PoE support | Not supported |
| Dimensions (W × H × D) | 440 × 44 × 170 mm |
| AC input | 100–240 VAC, 50/60 Hz |
| Power consumption | 21 W |
| Cooling | Passive |
| Operating temperature | 0°C to 50°C |
| Storage temperature | –40°C to 70°C |
| Relative humidity | 5% to 95%, non-condensing |
| Compliance | CE, RoHS |
| MTBF | >500,000 hours |
Layer 2 Switching and VLAN Services
| Forwarding architecture | Store-and-forward |
| VLAN standards | Port-based VLAN and IEEE 802.1Q |
| Advanced VLAN services | Private VLAN, protocol-based VLAN, voice VLAN, and MAC-based VLAN |
| VLAN tunneling | Q-in-Q and flexible Q-in-Q |
| VLAN translation | VLAN translation and N:1 VLAN translation |
Layer 3 Services
| Static routing | Supported |
| Policy-Based Routing | PBR |
| Inter-VLAN routing | Layer 3 forwarding between configured VLAN interfaces |
DHCP Services
| DHCP client | IPv4 and IPv6 DHCP client |
| DHCP server | IPv4 and IPv6 DHCP server |
| DHCP relay | IPv4 and IPv6 DHCP relay |
| DHCP snooping | IPv4 and IPv6 DHCP snooping |
| DHCP Option 82 | Supported |
Network Resiliency
| Spanning Tree | IEEE 802.1D STP, IEEE 802.1w RSTP, and IEEE 802.1s MSTP |
| STP protection | Root Guard, BPDU Guard, BPDU forwarding, and TCN filtering |
| Link aggregation | IEEE 802.3ad LACP |
| LACP scalability | Up to 128 link aggregation groups, with up to 8 member ports per group |
| Ethernet ring protection | AirPro MRPP and ITU-T G.8032 ERPS |
| Loop protection | Loopback detection |
| Fast recovery | Fast Link |
Security and Access Control
| Access Control Lists | IP ACL, MAC ACL, and user-defined ACL |
| Time-based policies | Time-range ACLs |
| ACL application | ACL rules configurable on physical ports and VLANs |
| Storm protection | Packet-based storm control |
| Port security | Port security and MAC-address limiting by VLAN and port |
| ARP protection | Anti-ARP spoofing, anti-ARP scanning, and ARP binding |
| Dynamic ARP protection | Dynamic ARP Inspection |
| Network access control | IEEE 802.1X |
| AAA services | Authentication, Authorization, and Accounting |
| Centralized authentication | RADIUS and TACACS+ |
Multicast Services
| IPv4 multicast snooping | IGMPv1/v2/v3 snooping |
| IGMP proxy | Supported |
| IPv6 multicast snooping | MLDv1/v2 snooping |
| Multicast traffic optimization | Restricts multicast forwarding to ports with active receivers, helping reduce unnecessary flooding |
Quality of Service
| Hardware queues | 8 queues per port |
| Bandwidth management | Configurable bandwidth control |
| Traffic redirection | Flow redirect |
| Traffic classification | ACL, VLAN ID, IEEE 802.1p CoS, IP ToS, and DiffServ DSCP |
| Traffic policing | Port- and VLAN-based policing |
| Policing model | Single-rate, single-bucket, two-color policing |
| Advanced packet classification | IP fragmentation matching |
Management, Monitoring, and Operations
| Management interfaces | CLI, console, and Telnet |
| Web management | HTTPS/SSL over IPv4 and IPv6 |
| Secure CLI access | SSH over IPv4 and IPv6 |
| Network management protocols | SNMPv1, SNMPv2, and SNMPv3 |
| Event notification | SNMP traps |
| Management information | Public and private MIB interfaces |
| Network diagnostics | Ping and traceroute |
| Administrator authentication | RADIUS-based management authentication |
| Event logging | Syslog over IPv4 and IPv6 |
| Time synchronization | SNTP and NTP over IPv4 and IPv6 |
| File transfer | TFTP and FTP |
| Software resiliency | Dual firmware images and multiple configuration files |
| Traffic mirroring | Port mirroring and RSPAN |
| Traffic visibility | sFlow |
| Ethernet OAM | Ethernet in the First Mile OAM |
| Copper diagnostics | Virtual Cable Test |
| Optical diagnostics | Digital Diagnostic Monitoring |
| Unidirectional link detection | ULDP |
| Neighbor discovery | LLDP and LLDP-MED |
Compare Product
| Specification | AP-SG4500-12GT-4XFP | AP-SG4500-28GT-4XFP | AP-SG4500-52GT-4XFP |
| 10/100/1000BASE-T ports | 8 | 24 | 48 |
| 1/10GbE SFP+ uplinks | 4 | 4 | 4 |
| Auto-MDI/MDIX | Supported | Supported | Supported |
| Console port | 1 | 1 | 1 |
| USB 2.0 interface | 1 | 1 | 1 |
| Reset button | — | — | 1 |
| Switching capacity | 96 Gbps | 128 Gbps | 176 Gbps |
| Forwarding performance | 71.4 Mpps | 95 Mpps | 131 Mpps* |
| MAC address table | 16K | 16K | 16K |
| Jumbo-frame support | 10K bytes | 10K bytes | 10K bytes |
| Packet buffer | 12 Mbits | 12 Mbits | 24 Mbits |
| ACL table | 512 entries | 512 entries | 512 entries |
| Queues per port | 8 | 8 | 8 |
| VLAN capacity | Up to 4K | Up to 4K | Up to 4K |
| PoE support | Not supported | Not supported | Not supported |
| Dimensions (W × H × D) | 266 × 44 × 161 mm | 440 × 44 × 170 mm | 440 × 44 × 280 mm |
| AC input | 100–240 VAC, 50/60 Hz | 100–240 VAC, 50/60 Hz | 100–240 VAC, 50/60 Hz |
| Power consumption | <15 W | 21 W | <50 W |
| Cooling | Passive | Passive | Active |
| Operating temperature | 0°C to 50°C | 0°C to 50°C | 0°C to 50°C |
| Storage temperature | –40°C to 70°C | –40°C to 70°C | –40°C to 70°C |
| Relative humidity | 5% to 95%, non-condensing | 5% to 95%, non-condensing | 5% to 95%, non-condensing |
| Compliance | CE, RoHS | CE, RoHS | CE, RoHS |
| MTBF | >500,000 hours | >500,000 hours | >500,000 hours |