xStack 24-Port Layer 3 PoE+ Switch with 4 10Gigabit SFP+, Enhanced Image



The latest generation of D-Link® xStack® Switches supports IPv6 routing and has more advanced features than ever to address today’s security, QoS, and management concerns.

The xStack DGS-3620 Series includes five gigabit managed switches with a choice of 24 or 48 port 10/100/1000Base-T models, 24 SFP port model, and PoE + model options. The DGS-3620-28TC comes with four combo SFP slots and four 10-Gigabit SFP+ slots. The DGS-3620-28SC is the fiber version equipped with four combo 10/100/1000 Base-T ports and four10-Gigabit SFP+ slots. The DGS-3620-52T has four 10-Gigabit SFP+ slots and two optional 10-Gigabit uplinks. The DGS-3620-28PC and DGS-3620-52P also include PoE (802.3af) and PoE+ (802.3at) that provides up to 30W to power devices such as IP phones, Access Points, or security cameras.

The xStack DGS-3620 Series is equipped with robust features that fulfi ll the most demanding network’s needs for voice and video streaming. Stackable up to 12 units under a single IP, the switches are able to provide a total of up to 576Gbps aggregated bandwidth fixed-in. To help secure your network, the D-Link Safeguard Engine™ helps prevent Denial-of-Service (DoS) attacks while the Access Control List (ACL) enhances network security. The DGS-3620 Series is equipped with industry standard management features including easy-to-use CLI and web-based administrator interfaces. D-Link provides these features on a scalable platform, increasing your company’s productivity while protecting your investment.

IPv6 and IPv4 Routing

The xStack DGS-3620 Series provides current IPv4 networks with a simple migration path to IPv6 and protects your investment for future network upgrades when greater security and larger addressing are required. Basic static routing such as RIP and RIPv2 are supported for small network routing applications. Advanced routing protocols such as OSPF and equal cost routing are supported for load balancing and building a scalable network.

Stackable Up to 12 Units

Each switch in the xStack DGS-3620 Series has four optional SFP+ Ports to install compatible modules for stacking provide up to 40Gbps data stacking backplane while in full-duplex mode. This enhances your overall network performance for switches transmitting large fi les such as graphics or pictures. Under stacking mode, the switches are hot-swappable. This means that in a stack confi guration, any of the switches can be replaced or removed without affecting the network. There is no need to reconfigure a replacement switch; just give the new switch the same stack number ID as the old switch and the network will carry the same confi guration as before. This minimizes network downtime and maximizes the productivity of your business. Also, to facilitate network administration, cross stack port mirroring and port trunking are supported.

The D-Link Safeguard Engine and Security

The DGS-3620 Series incorporates advanced mechanisms to detect an attack against the central processing unit of the switch and to take corrective action on the attacking interface. When a DoS attack is waged against any of the DGS-3620 switches, the D-Link Safeguard Engine detects the threat and prevents overload of the CPU, thus ensuring network integrity and helping to maintain open network bandwidth channels.

In addition, the xStack DGS-3620 Series offers a variety of authentication methods, including those without the requirement of a RADIUS server. It supports MAC-based Access Control, which authenticates the user based on the MAC address of the client so that authentication is transparent to the client. It also supports Web-based Access Control, which prompts for username and password before allowing access to TCP traffic. Lastly, the xStack Series supports Network Access Protection (NAP). This feature works in conjunction with Microsoft® software platforms such as Windows Vista® to reinforce network health and security policies including policy validation, network restriction, remediation, and ongoing compliance.

Voice and Video Applications

For today’s businesses, having voice, data, and video on the same network is common practice. This challenge is met by the xStack DGS-3620 Series, which supports 802.1p with eight queues. The administrator can designate traffic priority based on a variety of means including IP and MAC address, so that voice data is clear and jitter-free. Video traffic can also be assigned with the same priority. In addition, the xStack DGS-3620 Series provides IGMP Snooping, which allows the forwarding of multicast packets such as streaming audio and video without increasing network broadcast congestion. By snooping IGMP registration information within a frame, a list of workstations that have joined the multicast group is created. This list then allows the switch to intelligently forward packets to only the appropriate member workstations. For IPv6 traffic, the xStack DGS-3600 Series supports MLD snooping. Multicast routing is supported under independent multicast protocol, including PIM-SM, PIM-DM, and PIM-SDM (Sparse Dense Mode). DVMRP is also supported to interconnect two multicast-enabled networks across non-multicast networks. In conjunction with support for 802.1Q VLANs, Quality of Service (QoS) and security can be achieved on a network infused with data traffic.

Ease of Management

The xStack DGS-3620 Series supports SNMP v1/2c/3 so traps can be set on abnormal events and information can be polled to maximize network productivity. Other standard management features also supported include RMON and IEEE 802.1D Spanning Tree. User interfaces include an intuitive Web-based GUI or standard CLI, either of which can be protected through SSL or SSH encryption.

1 Lifetime Warranty available only in the USA and Canada.

All references to speed are for comparison purposes only. Product specifications, size and shape are subject to change without notice, and actual product appearance may differ from that depicted herein.
Technical Specifications


10/100/1000BASE-T Ports 
  • 48 

SFP Slots
  • 4 Combo SFP/SFP+

10 Gigabit SFP+Slots
  • 4

Console Ports
  • 1

Physical Stacking

Installable SFP+ Module for Stacking
  • DEM-431XT-DD
  • DEM-432XT-DD
  • DEM-433XT-DD
  • DEM-435XT-DD
  • DEM-CB100S
  • DEM-CB300S

Max Number of Stacking Ports Installable
  • 2 SFP+

Stacking Speed (Per Port)
  • 20 Gbps (Full-Duplex)

No. of Units Per Stack
  • 12

Optional 10-Gigabit Uplink

Installable SPF+ Modules for Uplink
  • 4 SFP+ Uplink, 2 Available uplinks when stacking
  • DEM-431XT-DD
  • DEM-432XT-DD
  • DEM-433XT-DD
  • DEM-435XT-DD
  • DEM-CB100S
  • DEM-CB300S


Switching Capacity
  •  176Gbps

Packet Forwarding Rate
  • 130.95Mpps

Packet Buffer
  • 2 MB

MAC Address Table
  • 32K Entries

IP v4/v6 Routing Table
  • 12K Entries

IP v6 Routing Table
  • 6K Entries

IP v4 Host Table
  • 8K Entries

IP v6 Host Table
  • 4K Entries

Jumbo Frame Size
  • 13K Bytes


Power Supply
  • 100 to 120 V AC, 200 to 240 V AC, 50/60 Hz, Internal Power Supply

Optional Redundant Power Supply
  • DPS-700

L2 Features
  • IGMP Snooping v1, v2, v3
    • 1K IGMP Snooping Groups
  • 64 Static Multicast Address
  • SpanningTree        
    • 802.1D STP                             
    • 802.1w RSTP
    • 802.1s MSTP        
    • Loopback Detection v 4.0
    • BPDU Filtering per Port and per Device
  • Trunking Across Stack
  • MLD Snooping v1/v2+ ERPS (Ethernet Ring Protectoin Switching) (Enhanced Image)

  • 802.1Q
  • Total 4KVLAN Groups
  • Maximum 255 Dynamic VLAN Groups
  • GVRP
  • MAC - Based VLAN
  • VLANTrunking
  • DoubleVLAN (Q in Q)
    • Port-based Q in Q
    • Selective Q in Q
  • Super VLAN
  • Asymmetric VLAN
  • 802.1v
  • Voice VLAN
  • D-Link Intelligent Port Management (IPM)
  • PrivateVLAN
  • Subnet-based VLAN

L3 Features
  • L3 Routing
    • Up to 12K entries (all route entries combined)
    • Up to 256 IPv4 static route entries
    • Up to 128 IPv6 static route entries
    • Up to 12K IPv4 dynamic route entries
    • Up to 6K IPv6 dynamic route entries
  • Floating Static Route
    • IPv4 Floating Static Route
    • IPv6 Floating Static Route
  • Policy Based Route
  • RIPng (IPv6) (Enhanced Image)
  • Multiple IP Interfaces per VLAN (Up to 5)
  • Multi Path Routing Supporting Equal Cost (EC) and Weighted Cost (WC)
  • VRRP
  • IPv6 Ready Phase 1/2
  • IGMP v1, v2, v3
  • DVMRP v3 (Enhanced Image)
  • Per Port Limit IP Multicast Address Range for Control Packet
  • L3 Forwarding
    • Up to 8K IPv4 Forwarding Entries
    • Up to 4K IPv6 Forwarding Entries
    • Up to 8K Entries (all L3 Hardware Forwarding Entries Combined)
    • OSPF
    • OSPF v2
    • OSPF v3 (IPv6) (Enhanced Image)
    • OSPF Passive Interface
    • OSPF NSSA (Not So Stubby Area)     
    • OSPF Equal Cost Route
  • RIP v1, v2
  • Up to 256 IP Interfaces
  • Multicast
    • Up to 64 Static Multicast Groups
    • Up to 2K Dynamic Multicast Groups Safeguard Engine™ Multicast Groups Combined)
  • Multicast Duplication (Up to 32 VLAN per Port)
  • PIM-DM/SM/SDM for IPv4
  • IPv6 Tunneling
    • Static
    • ISATAP
    • GRE
    • G to 4
  • BGP (Enhanced Image)
  • Proxy ARP
  • Gratuitous ARP
  • PIM-SMv6
  • Time Based PoE (PoE Models Only)
  • Policy Based Route
  • BFD (Bidirectional Forwarding Detection)

QoS (Quality of Service)
  • Per Port Bandwidth Control (Granularity of 64Kbits per Second)
  • Per Flow Bandwidth Control (Granularity of 64Kbits per Second)
  • 802.1p Priority Queues (8 Queues)
    • Queue Handling Mode Support:WRR and Strict Modes
  • CoS Based On:
    • Switch Port -VLAN ID
    • 802.1p PriorityQueues- MAC Address
    • IPv4/v6 Address- DSCP
    • Protocol Type - IPv6 Traffic Class
    • IPv6 Flow Label - TCP/UDP Port
    • User-Defined Packet Content
  • Remark 802.1 Priority Tag
  • Remark TOS/DSCP Tag
  • Flow Statistics
  • Committed Information Rate (CIR) min. granularity 1Kbps
  • Time-based QoS

  • RADIUS Authentication for Management Access (RFC 2138, 2139)
  • SSH v1/v2
  • SSL v1/v2
  • Web-based Access Control
  • MAC-based Access Control
  • JapanWeb-based Access Control (JWAC)1
  • 802.1x Port-based/MAC-based Access Control
  • Traffic Segmentation
  • D-Link Safeguard Engine
  • Support Microsoft® Network Access Protection
  • TACACS+ Authentication for Management Access (RFC 492)
  • Port Security (Up to 16 MAC Addresses per Port)
  • Guest VLAN
  • Broadcast Storm Control (Minimum Granularity of 1 PPS)
  • IP-MAC-Port Binding (Up to 500 Entries per Device) Supporting ARP/ACL/DHCP Snooping1 Modes
  • DHCP Server Screening
  • CPU Interface Filtering
  • ARP Spoofing Prevention
  • BPDU Attack Protection

  • Single IP Management v1.6
  • CLI
  • Telnet Server
  • Telnet Client
  • SNMP v1, v2c, v3
  • SNMPTrap on MAC Notification
  • BootP/DHCP Client
  • System Log
  • Trap/Alarm/Log Severity Control
  • Flash File System
  • CPU Monitoring viaWeb, CLI, SNMP
  • Virtual Interface2
  • Web-based GUI
  • Web GUI Traffic Monitoring
  • TFTP Client
  • RMON v1, v2
  • sFlow
  • DHCP Auto-Configuration
  • DHCP Relay Option 82
  • DHCP Relay Option 60 & 61
  • DHCP Server
  • Dual Image
  • Dual Configuration
  • LLDP
  • DHCPv6 Client
  • DHCPv6 Relay
  • DHCPv6 Server
  • Cable Diagnotics
  • SNTP
  • ICMPv6
  • Trusted Host
  • MTV Setting
  • NLB (Network Load Balancing)
  • LLDP-Med
  • Optical Transceiver Digital Diagnostic Monitoring (DDM)
  • 802.3ah D-Link extension: D-link Unidirectional Link Detection (DULD)

MIB/ IETF Standards
  • RFC1213 MIB-II
  • RFC1493 Bridge MIB
  • RFC1907 SNMPv2 MIB
  • RFC2571~2576 SNMP MIB
  • RFC1271, 2819 RMON MIB
  • RFC2021 RMON v2 MIB
  • RFC2665 Ether-like MIB
  • RFC2668 MAU MIB
  • RFC2674 802.1p MIB
  • RFC2233, 2863 IF MIB
  • RFC2618 RADIUS Authentication Client MIB
  • RFC1724 RIP v2 MIB
  • RFC1850 OSPF v2 MIB
  • RFC2096 IP ForwardingTable MIB (CIDR)
  • RFC2787 VRRP MIB
  • RFC2932 IPv4 Multicast Routing MIB
  • RFC2934 PIM MIB for IPv4
  • RFC2620 RADIUS Accounting Client MIB
  • RFC2933 IGMP MIB
  • Ping MIB
  • Traceroute MIB
  • D-Link Private MIB
  • RFC768 UDP+ RFC783 TFTP
  • RFC 791 IP
  • RFC 792 ICMP
  • RFC 793 TCP
  • RFC 826 ARP
  • RFC854 Telnet
  • RFC951, 1542 BootP
  • RFC2068 HTTP
  • RFC2338 VRRP
  • RFC2529, 3053, 3056 IPv6 Tunnel
  • RFC2138 RADIUS
  • RFC2139 RADIUS Accounting
  • RFC1492 TACACS
  • RFC3176 sFlow
  • RFC2598 DiffServ Expedited Forwarding
  • RFC2460 IPv6
  • RFC4861 IPv6 Neighbor Discovery (ND)
  • RFC4862 IPv6 Stateless Address Autoconfiguration
  • RFC1981 IPv6 Path MTU Discovery

Enhanced Image
  • IPv6 Tunneling
  • BGP
  • RIPng(IPv6)
  • OSPFv3
  • BGP+
  • DVMRPv3
  • Cable Diagnostic
  • Connectivity Fault Managment (CFM)
    • VRF2
    • MPLS Lavel Managment2
    • LDP2
Warranty Information

  • Lifetime1

Ordering Information

  • xStack 24-Port Layer 3 PoE+ Switch with 4 10Gigabit SFP+, Enhanced Image

1 Lifetime Warranty available only in the USA and Canada.

2 Supported in Future Release

All references to speed are for comparison purposes only. Product specifications, size and shape are subject to change without notice, and actual product appearance may differ from that depicted herein
Description Type File Size
Download PDF 0.81mb
Description Type File Size
DGS-3620 CLI Manual
Show moreShow less
PDF 5.51mb
DGS-3620 HW Installation Guide
Show moreShow less
PDF 3.27mb
DGS-3620 User Manual
Show moreShow less
PDF 17.16mb
Version Description Date
Download 1.00.040

Do NOT upgrade firmware on any D-Link product over a wireless connection.

Failure of the device may result. Use only hard-wired network connections.


This firmware is engineered for North American products only.

Using this firmware on a device outside of North America will void your warranty and may render the device unusable.

Please contact the D-Link office in your region for firmware updates that are compatible with your D-Link product.

International Offices


Revision Info:
  • First release.
Show moreShow less
23/11/2011 12:00:00 AM

Business Benefits

"D-Link provided an affordable solution with more options, better performance, at a better price. That plus the D-Link people let us meet the tight deadline for the Zoo project."
Stan McNiel
President and Lead Consultant, InLine Network Integration for the Dallas Zoo

How to get the

Hardware revisions
Downloads can vary across product revisions.

Contact Details

D-Link Canada
2525 Meadowvale Blvd.
L5N 5S2

General: 800.354.6522
Fax: 905-828-5669

General: webmaster@dlink.com
Sales: sales@dlink.ca
Support: support@dlink.ca