xStack 24 port 1000 Layer 2 Stackable Managed PoE Gigabit Switch

Description

The xStack DGS-3420 series Layer 2+ Gigabit switches delivers greater value, performance, flexibility and security for SMBs and Enterprises.

The xStack DGS-3420 series of next generation Layer 2+ Gigabit switches delivers performance, flexibility, security, multi-layer QoS, and accessibility along with redundant power solutions for SMBs and enterprises.

With high Gigabit port densities, Gigabit SFP, 10-Gigabit SFP+ support and advanced software solutions, these switches can act as either departmental access layer switches or aggregation switches to form a multilevel network backbone with centralized high-speed servers.

Stackability

• Virtual Stacking Support
• D-Link Single IP Management
• Up to 32 devices per virtual stack
• Up to 20G stacking bandwidth
• Physical Stacking
• Supports Duplex Chain/Ring topology
• Up to 40G stacking bandwidth
• Up to 12 units per stack

L2 Features

• MAC Address Table: 16K
• Flow Control
• 802.3x Flow Control
• HOL Blocking Prevention
• Jumbo Frame up to 13K Bytes
• IGMP snooping
• IGMP v1/v2/v3 Snooping
• Supports 960 groups
• Port/Host-based
• IGMP Snooping
• Fast Leave
• MLD Snooping
• MLD v1/v2 Snooping
• Supports 480 groups
• Host-based MLD Snooping Fast Leave
• Spanning Tree
• 802.1D-2004 STP
• 802.1w RSTP
• 802.1Q-2005 MSTP
• BPDU filtering
• Root Restriction
• Loopback Detection
• 802.3ad Link Aggregation
• Max. 32 groups per device
• 8 Gigabit ports or 2 10 Gigabit ports per group
• Port Mirroring
• Support 4 Mirroring Groups
• Support One-to-One, Many-to-One, Flow-based, and RSPAN mirroring
• L2 Protocol Tunneling
• ERPS (Ethernet Ring Protection Switching)

VLAN

• VLAN Group
• Max. 4K Static VLAN Groups
• Max. 255 Dynamic VLAN Groups
• 802.1Q Tagged VLAN
• 802.1v Protocol VLAN
• GVRP
• Double VLAN (Q-in-Q)
• Port-based Q-in-Q
• Selective Q-in-Q2
• MAC-based VLAN
• VLAN Trunking
• 802.1Qbb2

L3 Features

• 256 IP interfaces
• Loopback interface
• IPv6 Tunneling
• Proxy ARP
• Gratuitous ARP

L3 Routing

• 1K routing entries shared by IPv4/v6
• Max. 1K IPv4 routes
• Max. 512 IPv6 routes
• 2K L3 forwarding entries shared by IPv4/v6
• Max. 2K IPv4 entries
• Max. 1K IPv6 entries
• 256 static routing entries for IPv4, 128 entries for IPv6
• RIP v1/v2
• RIPng (IPv6)

QoS (Quality of Service)

• 802.1p Class of Service (CoS)
• 8 queues per port
• Queue Handling
• Strict
• Weighted Round Robin (WRR)
• Strict + WRR
• CoS based on
• Switch Port
• VLAN ID
• 802.1p Priority Queues
• MAC Address
• IPv4/v6 Address
• DSCP
• Protocol Type
• IPv6 Traffic Class
• IPv6 Flow Label
• TCP/UDP Port
• User-defined Packet Content
• Supports following actions for flows:
• Remark 802.1p Priority Tag
• Remark TOS/DSCP Tag
• Bandwidth Control
• Flow Statistics
• Committed Information Rate (CIR), min. granularity 1 Kbps.
• Bandwidth Control
• Port-based (Ingress/Egress, min. granularity 64 Kbps)
• Flow-based (Ingress, min. granularity 64 Kbps)
• Time-based QoS

ACL (Access Control List)

• Ingress ACL: support up to 6 profiles and 256 rules per profile
• Egress ACL: support up to 4 profiles and 128 rules per profile
• ACL based on
• 802.1p Priority
• VLAN ID
• MAC Address
• Ether Type
• IPv4/v6 Address
• DSCP
• Protocol Type
• TCP/UDP Port Number
• IPv6 Traffic Class
• IPv6 Flow Label
• User-defined Packet Content
• ACL Statistics
• Time-based ACL
• CPU interface filtering

Security

• SSH v2
• SSL v1/v2/v3
• Port Security up to 64 MAC addresses per port
• Broadcast/Multicast/Unicast Storm Control
• Traffic Segmentation
• IP-MAC-Port Binding
• ARP Packet Inspection
• IP Packet Inspection
• DHCP Snooping
• DHCPv6 and NDP Snooping
• Supports up to 500 Address Binding Entries per device
• D-Link Safeguard Engine
• DHCP Server Screening
• CPU Interface Filtering
• ARP Spoofing Prevention
• BPDU Attack Protection

AAA

• 802.1x
• Port-based Access Control
• Host-based Access Control
• Dynamic VLAN Assignment
• Web-based Access Control (WAC)
• Port-based Access Control
• Host-based Access Control
• Dynamic VLAN Assignment
• MAC-based Access Control (MAC)
• Port-based Access Control
• Host-based Access Control
• Dynamic VLAN Assignment
• Japan Web-based Access Control (JWAC)
• Host-based Access Control
• Microsoft® NAP
• Supports 802.1x NAP
• Supports DHCP NAP
• Guest VLAN
• RADIUS and TACACS+ authentication for switch access
• 4-Level user account

Management

• Web-based GUI
• Command Line Interface (CLI)
• Telnet Server
• Telnet Client
• TFTP Client
• ZModem
• SNMP v1/v2c/v3
• SNMP Trap
• System Log
• RMON v1
• Supports 1,2,3,9 Groups
• RMON v2
• Supports ProbeConfig Group
• sFlow
• LLDP/LLDP-MED
• BootP/DHCP Client
• DHCP Auto-Configuration
• DHCP Relay
• DHCP Relay Option 60, 61
• DHCP Relay Option 82
• DHCP Server
• Flash File System
• Multiple Images
• Multiple Configurations
• CPU Monitoring
• Debug Command
• SNTP
• ICMPv6
• DHCPv6 Client
• DHCPv6 Relay
• DHCPv6 Server
• Trusted Host
• MTU Setting
• Microsoft® NLB Support
• UDP helper 4

OAM

• 802.3ah Ethernet Link OAM
• 802.3ah D-Link Extension: D-Link Unidirectional Link Detection (DULD)
• IEEE1588 Precision Time Protocol (PTP)
• Cable Diagnostics 3
• 802.1ag Connectivity Fault Management (CFM)
• ITU-T Y.1731

Green

• Power saving by Link Status
• Power saving by Cable Length
• Time-based PoE

MIB/IETF Standards

• RFC1213 MIB-II
• RFC1493 Bridge MIB
• RFC1907 SNMPv2 MIB
• RFC2571~2576 SNMP MIB
• RFC1271, 2819 RMON MIB
• RFC2021 RMON v2 MIB
• RFC2665 Ether-like MIB
• RFC2668 MAU MIB
• RFC2674 802.1p MIB
• RFC2233, 2863 IF MIB
• RFC2618 RADIUS Authentication Client MIB
• RFC1724 RIP v2 MIB
• RFC2096 IP Forwarding Table MIB (CIDR)
• RFC2620 RADIUS Accounting Client MIB
• Ping MIB
• Traceroute MIB
• D-Link Private MIB
• RFC768 UDP
• RFC783 TFTP
• RFC 791 IP
• RFC 793 TCP
• RFC 826 ARP
• RFC854 Telnet
• RFC951, 1542 BootP
• RFC2068 HTTP
• RFC3056, 5214 IPv6 Tunnel
• RFC2138 RADIUS
• RFC2139 RADIUS Accounting
• RFC1492 TACACS
• RFC3176 sFlow
• RFC2598 DiffServ Expedited Forwarding

^{2 Implemented in future firmware upgrade}