Call a Specialist Today! 888-785-4412

Zyxel XS3800-28
28-port 10GbE L2+ Managed Switch

Zyxel Products
Zyxel XS3800-28
XS3800-28 - 4 Port Multi-Gigabit 1G/2.5G/5G/10G-BASE-T
List Price: $5,604.99
Contact us for better pricing!
XS3800-28DC - 4 Port Multi-Gigabit 1G/2.5G/5G/10G-BASE-T
List Price: $5,300.00
Contact us for better pricing!

Click here to jump to more pricing!


Designed for SMB with 10GBASE-T connectivity and advanced L2+/L3 lite features, the new Zyxel 10-Gigabit L2+ managed switch XS3800-28 enables applications for aggregation or SMB core switching and connection; and the XS3800-28 also comes with up to 12 Multi-Gigabit ports to help your preparation for network expansions with Multi-Gigabit capable devices such as servers, workstations and NAS.

  • Unique port combination brings maximum flexibility to network diversity
  • Support Multi-Gigabit for 100M/1G/2.5G/5G/10G connections
  • Full Layer-2 feature set with Layer-3 features including static routing, policy-based routing, VRRP and ECMP support
  • High resiliency with redundant power supply units
  • “Restore to last custom default” button simplifies the troubleshooting process


Flexible port combination for all your needs

10GBASE-T and 10-Gigabit SFP+ are essential to a Layer-2 aggregation switch. The XS3800-28 offers a wide range of combo ports options to give you the greatest flexibility for any type of networks. With 16 x 10G SFP+, 8 combo ports (Multi-Gigabit RJ-45/SFP+) and 4 Multi-Gigabit RJ-45 ports, the XS3800-28 offers a maximum of 24 10G fiber ports or 12 10G copper ports that are well prepared for easy adaption to your networks.

Future-proof deployments with Multi-Gigabit capability

If you are currently connecting a Multi-Gigabit capable device to a traditional 10-Gigabit switch without Multi-Gigabit capability, the connection automatically downgrades to 1 Gbps since your Multi-Gigabit device only supports speeds up to 2.5G or 5 Gbps rather than 10 Gbps. Instead, the XS3800-28 offers up to 12 Multi-Gigabit RJ-45 ports that support 10G, 5G, 2.5G and 1G speeds that allow the connection to operate at the maximum speed as fast as the connected devices allow.

The most commonly used CAT5e Ethernet cables support both 2.5G/5 Gbps Multi-Gigabit operations without the need to purchase expensive CAT6 cables. For the existing networks that need to be upgraded to the Mutli-Gigabit specification, the XS3800-28 is the perfect solution without replacing the current cabling infrastructure.

Advanced Layer-3 switching capacity

Designed with supports to the 4K L3 forwarding table and 1K static L3 routes, the XS3800-28 is suitable for aggregation and virtualization for SMB or campus networks that require low latency and high-density 10G backbone architectures with basic routing capability.

Resiliency and availability

As a SMB core switch, high availability for uninterrupted services is essential. The XS3800-28 comes with two PSUs supporting active-standby power redundancy that triggers backup power supply if the main unit fails. The XS3800-28 also features a new one-touch “Restore” button on the front panel that saves the last workable configuration as the custom default, which allows you to fall back anytime with a press in case of network misconfigurations.


28-port 10GbE L2+ Managed Switch
Port Density
Total port count 28
100M/1G/2.5G/5G/10G Ethernet (RJ-45) 4
Multi-Gigabit combo (100M/1G/2.5G/5G/10G) RJ-45/(1G/10G) SFP+ 8
1G/10G SFP+ 16
Switching capacity (Gbps) 560
Forwarding rate (Mpps) 416
Packet buffer (byte) 4 MB
MAC address table 32 K
L3 forwarding table Max. 4 K IPv4 entries
Max. 2 K IPv6 entries
Routing table 1K
IP interface 128
Flash/RAM 64 MB/8 GB
Input Dual power
100 - 240 V AC, 50/60 Hz
Max. power consumption (watt) 86.97
Physical Specifications
Dimensions (WxDxH)(mm/in.) 441 x 360 x 44/17.36 x 14.17 x 1.73
Weight (kg/lb.) 4.81/10.6
Included accessories
  • Power cord
  • Rack mounting kit
Environmental Specifications
Operating Temperature 0°C to 50°C/32°F to 122°F
Humidity 10% to 95% (non-condensing)
Storage Temperature -40°C to 70°C/-40°F to 185°F
Humidity 10% to 95% (non-condensing)
MTBF (hr) 656,274.78
Heat dissipation (BTU/hr) 296.57
Acoustic noise @ 25°C (dBA) 58.2


Item Features
Standard Compliance
  • IEEE 802.3z 1000BASE-X
  • IEEE 802.3ab 1000BASE-T Ethernet
  • IEEE 802.3an 10G BASE-T Ethernet
  • IEEE 802.3ae 10 Gbit/s Ethernet over fiber
  • IEEE 802.3bz 2.5G/5GBase-T Ethernet
  • IEEE 802.3x flow control
  • IEEE 802.3az EEE support
  • IEEE 802.1p CoS support
  • IEEE 802.3ah EFM (Link Discovery, Loopback)
  • Store and forward
  • N-way auto-negotiation
Resilience and Availability
  • IEEE 802.1D Spanning Tree Protocol (STP)
  • IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
  • IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
  • IEEE 802.3ad LACP
  • Equal Cost Multipath Routing (ECMP)
  • Virtual Router Redundancy Protocol (VRRP)
  • Loop guard
  • CPU protection
  • ErrDisable recovery
  • MRSTP (Zyxel proprietary)
  • Redundant power supply support
  • Dual configuration files
  • Dual images
  • Physical stacking (available in Q2 2019)
Traffic Control
  • 802.1Q static VLANs/dynamic VLANs: 4 K/4 K
  • Port-based VLAN
  • Protocol-based VLAN
  • IP subnet-based VLAN
  • Private VLAN
  • VLAN trunking
  • VLAN translation
  • VLAN ingress filtering
  • 802.1ad VLAN stacking (Q-in-Q)
  • LACP algorithm of source/destination IP
  • GVRP
  • Selected Q-in-Q
  • L2PT
  • 802.1x
  • Port security
  • MAC authentication
  • Layer 2 MAC filtering
  • Layer 3 IP filtering
  • Layer 4 TCP/UDP socket filtering
  • BPDU transparency
  • Static MAC forwarding
  • Multiple RADIUS servers
  • Multiple TACACS+ servers
  • 802.1x VLAN and bandwidth assignment by RADIUS
  • Login authentication by RADIUS
  • Login authentication by TACACS+
  • TACACS+ accounting
  • RADIUS accounting
  • Authorization on TACACS+
  • Authorization on console
  • SSH v1/v2
  • SSL
  • Intrusion lock
  • MAC freeze
  • DHCP snooping
  • ARP inspection
  • ARP freeze
  • Static ARP setting
  • Static IP/MAC binding
  • Policy-based security filtering
  • Port isolation
  • IP source guard
  • Limit number of MAC per VLAN
  • MAC search
  • Guest VLAN
  • ACL packet filtering (IPv4/IPv6)
  • PPPoE relay agent
  • PPPoE option82
  • PPPoE IA
  • CPU protection
  • MAC pinning
  • Interface related trap can be enable/disable by port
Quality of Service (QoS)
  • No. of hardware queues per Port: 8
  • 802.1p queuing method: SPQ/WRR/WFQ
  • Storm control: Broadcast, Multicast, Unknown Unicast (DLF)
  • Port-based rate limiting (Ingress/Egress): */64 kbps
  • Rate limiting, per IP/TCP/UDP per port
  • Policy-based rate limiting
  • Policy-based bandwidth control granularity
  • Ingress CIR for bandwidth control
  • 802.3x flow control
  • Port-based egress traffic shaping CIR/PIR supported
  • Policy based prioritization
  • 802.1p Class of Service (SPQ, WFQ, SPQ/WFQ combination capable)
  • DiffServ (DSCP)
Layer 2 Multicast
  • L2 multicast (Group)
  • IGMP snooping (v1, v2, v3)
  • IGMP snooping fast leave
  • Configurable IGMP snooping timer and priority
  • IGMP snooping statistics
  • IGMP throttling
  • MVR support
  • IGMP filtering
  • IGMP snooping immediate leave
  • IGMP snooping and proxy
  • IPv6 MLD snooping proxy
  • Static route
  • Policy-based route
  • IP port moving
  • SNMP v1, v2c, v3
  • SNMP trap group
  • RMON (1, 2, 3, 9)
  • ICMP echo/echo reply
  • Syslog
IPv6 Management
  • IPv6 over Ethernet (RFC 2464)
  • IPv6 addressing architecture (RFC 4291)
  • Dual stack (RFC4213)
  • ICMPv6 (RFC4884)
  • Path MTU (RFC 1981)
  • Minimum path MTU size of 1280 (RFC 5905)
  • Encapsulation for minimum PMTU of 1500
  • Neighbor discovery (RFC4861)
  • DHCPv6 Relay
Device Management
  • Standalone management by Web interface
  • iStacking
  • Web interface
  • Management through console, telnet, SNMP
  • Firmware upgrade by FTP
  • Remote firmware upgrade by FTP/Web
  • Configuration saving and retrieving
  • Multiple login supported
  • Configure Clone
  • Multilevel CLI
  • CLI (Cisco like)
  • DHCP servers
  • DHCP relay per VLAN
  • DHCP option 82
  • Daylight Saving
  • NTP
  • Port mirroring
  • Policy-based port mirroring
  • RJ-45 out-of-band management port
  • RS-232 console port
  • sFlow
  • Remote port monitoring
  • Restore to last custom default
  • Zyxel new private MIB
  • RFC 1066 TCP/IP-based MIB
  • RFC 1213, 1157 SNMPv2c/v3 MIB
  • RFC 1493 bridge MIB
  • RFC 1643 Ethernet MIB
  • RFC 1757 RMON group 1, 2, 3, 9
  • RFC 2011, 2012, 2013 SNMPv2 MIB
  • RFC 2233 SMIv2 MIB
  • RFC 2358 Ethernet-like MIB
  • RFC 2674 bridge MIB extension
  • RFC 2819, 2925 remote management MIB
  • RFC 3621 Power Ethernet MIB
  • RFC 4022 management information base for transmission control protocol
  • RFC 4113 management information base for user datagram protocol
  • RFC 4292 IP forwarding table MIB
  • RFC 4293 management information base (MIB) for IP


  • LVD
  • BSMI


  • FCC Part 15 (Class A)
  • CE EMC (Class A)


  • Level A
Zyxel One Network

ZON Utility

  • Discovery of Zyxel switches, APs and gateways
  • Centralized and batch configurations:
    • IP configuration
    • IP renew
    • Device factory reset
    • Device reboot
    • Device locating
    • Web GUI access
    • Password configuration
    • One-click quick association with Zyxel AP Configurator (ZAC)
  • Automatic detection of the latest firmware
  • Displays device serial number and hardware version
  • Cloud mode on/off option for Hybrid series devices

Smart Connect

  • Discover neighboring devices
  • One-click remote management access to the neighboring Zyxel devices
  • Reset neighboring devices remotely to factory defaults
  • Power cycle neighboring powered devices (PoE switches only)
Limited life-time warranty
  • Warranty terms, service availability, and service response times may vary from country or region to country or region


Download the Zyxel XS3800-28 Datasheet (PDF).

Pricing Notes:

Zyxel Products
Zyxel XS3800-28
XS3800-28 - 4 Port Multi-Gigabit 1G/2.5G/5G/10G-BASE-T
List Price: $5,604.99
Contact us for better pricing!
XS3800-28DC - 4 Port Multi-Gigabit 1G/2.5G/5G/10G-BASE-T
List Price: $5,300.00
Contact us for better pricing!
Zyxel Routing License
XS3800-28 One Time Basic L3 Routing License for XS3800-28
List Price: $559.99
Contact us for better pricing!