48-Port Fast Ethernet L2 managed switch, 4 Gigabit Combo BASE-T/SFP ports

Description

The DES-3552 is part of D-Link’s xStack family of access Layer2 Ethernet switches that combine performance with robust security, Quality of Service (QoS), versatile management functions, Redundant Power Supply option and scalable flexibility. All these features make this switch an ideal access layer solution for enterprise and service provider networks.

Flexible stacking options

Several DES-3552 switches may be physically stacked, using the two 10/100/1000BASE-T ports on the back panel. Up to 8 switches can be stacked in this way, with 2 Gbps bi-directional stacking bandwidth.

With D-Link Single IP Management (SIM) support, you can easily add up to 32 switch units -regardless of the model- in a virtual stack in addition to your physical stack. Multiple switches can be configured, monitored and maintained from any workstation running a Web browser via one single IP address. The stack is managed as a single object, as all stacked units are identified by a single IP address. A simple yet powerful web-based interface allows you to perform most management and configuration tasks.

Comprehensive security

A complete set of security features is provided for connectivity and access control. These include 802.1X Guest VLAN, MAC-based Access Control (MAC) and Web-based Access Control (WAC). 802.1X Guest VLAN is a comprehensive end-point security solution for user authentication/authorisation and WAC guarantees granular network access control with user-friendly authentication mechanism.In addition, the switch provides IP-MAC-Port Binding to allow administrators to bind source IP to associated MAC and source port. The DHCP Snooping feature blocks illegal IP addresses within the network, keeping the network secure and auditable.

Enhanced network availability

When implemented in conjunction with a D-Link NetDefend firewall, the switch is able to automatically quarantine any host displaying abnormal behaviour. This mechanism, D-Link’s ZoneDefense™, provides proactive network security by preventing viruses from spreading through the network and thwarting harmful network attacks.

In addition a unique feature, D-Link Safeguard Engine™, allows administrators to configure thresholds that limit the impact of packet flooding to the switch’s CPU typically caused by virus/worm outbreaks. This increases the switch's reliability and availability.


^{Actual product appearance may differ from the image displayed on this page}

10/100BASE-TX Ports

• 48

10/100/1000BASE-T Stacking Ports

• 2

Combo SFP Slots

• 2

RS-232 Console Port

• Yes

Performance

Switch Capacity

• 17.6Gbps

64-Byte Packet Forwarding Rate

• 13.1 Mpps

MAC Address Table Size

• 16K

Packet Buffer    

• 1MB

Flash Memory

• 16MB

Jumbo Frame Support

• 9216 KBytes

Number of VLANs Per Device

• Maximum 4,096 Static VLAN Groups
• Maximum 255 Dynamic VLAN Groups

Quality of Service (QoS)

• 8 Independent Hardware Queues (802.1p/Diffserv/ToS)

Stackability

• Virtual Stacking with D-Link Single IP Management (SIM) Up to 32 Devices per Virtual Stack

MLD v1/v2

• 256 Groups Supported

Access Control Lists

• Up to 768 Access Rules, Time-based ACL, CPU Interface Filtering, VLAN-based ACL, ACL Statstics

IGMP Snooping

• Supports 256 Groups, IGMP Fast Leave, Host-based IGMP Fast Leave1

Flow Control

• 802.3x Flow Control, HOL Blocking Prevention

Port Mirroring

• Supports one-to-one or many-to-one, Flow-based mirroring

Link Aggregation

• Supports up to eight 8-port Groups

D-Link Safeguard Engine

• Protects CPU from Broadcast/Multicast/Unicast Flooding

Web-based Graphic User Interface (GUI)

• Compatible with Internet Explorer®, Netscape®, Mozilla®, Firefox®, Opera®, Safari® browsers

Interface Options

RJ-45

• 10BASE-T, 100BASE-TX & 1000BASE-T

Stackability

• Virtual Stacking with D-Link Single IP Management (SIM) Up to 32 Devices per Virtual Stack

SFP Expansion Slots

• Media Support Dependent On GBIC Tranceiver

Diagnostic LEDs

• Per Device: Power, Console, RPS
• Per Gigabit Port: Link/Activity, 10/100Mbps or 1000Mbps Speed
• Per Ethernet Port: Link/Activity, 10Mbps or 100Mbps Speed

Network Management

In & Out of Band
Web-based GUI, Single IP Management v1.6, Command Line Interface (CLI), Telnet Server, Zmodem, SNMP v1/v2c/v3, SNMP Traps, System Log, RMON v1, Support 1,2,3,9 Groups, RMON v2, Support ProbeConfigGroup, BootP/DHCP Client, DHCP server DHCP Auto-configuration, DHCP Relay, DHCP Relay Option 60, 61, 82, DHCPv6 Relay, DCHPv6 Client, Dual Images, Dual Configuration, CPU Monitoring, NTP/SNTP, sFlow, Password Recovery, Password Encryption, DNS Relay, RSPAN, Cable Diagnostics, LLDP, LLDP-MED2, Trusted Host

IEEE
802.1Q VLAN Tagging, 802.1v VLAN Protocol, GVRP, 802.1ab Double VLAN (Port-based Q-in-Q, Selective Q-in-Q), VLAN Translation, MAC-based VLAN, Asymmetric VLAN, ISM-VLAN, 802.1p Quality of Service, 802.1D Spanning Tree Protocol (IEEE802.1D-2004 Edition), 802.1w Rapid Spanning Tree Protocol (IEEE802.1D-2004 Edition), 802.1s Multiple Spanning Tree Protocol (IEEE802.1Q-2005 Edition), 802.3x Flow Control, 802.3ad Link Aggregation, 802.3AB LLDP

Standard Compliance
RFC768 UDP, RFC791 IP, RFC792 ICMPv4, RFC2463, 4443 ICMPv6, RFC4884 Extended ICMP, RFC793 TCP, RFC826 ARP, RFC 1321, 2284, 2865, 2716, 3580, 3748 Extensible Authentication Protocol (EAP), RFC2571 SNMP Framework, RFC2572 SNMP Message Processing and Dispatching, RFC2573 SNMP Applications, RFC2574 User-based Security Model for SNMPv3, RFC1981 Path MTU Discovery for IPv6, RFC2460 IPv6, RFC2461, 4861 IPv6 ND, RFC2462, 4862 IPv6 Stateless Address Auto-configuration, RFC2464 IPv6 over Ethernet and Definition, RFC3513, 4291 IPv6 Addressing Architecture, RFC2893, 4213 IPv4/IPv6 Dual Stack, RFC1112 Host extensions for IP multicasting, RFC2236 IGMPv2, RFC3376 IGMPv3, RFC4605 IGMP/MLD Proxying, RFC1027 ARP Proxy, RFC2475 Differentiated Service, RFC2597 Assured Forwarding PHB Group, RFC2598 An Expedited Forwarding PHB, RFC2697 Single Rate Three Color Marker, RFC2698 Two Rate Three Color Marker, RFC2246 SSL, RFC2138 RADIUS, RFC2139, 2866 RADIUS Accounting, RFC1492 TACACS, RFC2068, 2616 HTTP, RFC854 Telnet, RFC783, 1350 TFTP, RFC2570 SNMP, RFC3164 Syslog, RFC3176 sFlow, RFC951, 1542 BootP, RFC2131 DHCP, RFC1769 SNTP, ITU-T G.8032 Ether Ring Protection Switching

Software Features

L2 Features
Flow Control, 802.3x Flow Control, HOL Blocking Prevention, Spanning Tree: 802.1D STP, 802.1w RSTP, 802.1s MSTP, BPDU Filtering, Root Restriction, Loopback Detection, ERPS (Ethernet Ring Protection Switching)1, 802.3ad Link Aggregation, Max. 8 groups per device / 8 Gigabit ports per group, Port Mirroring: One-to-One, Many-to-One, Flowbased Mirroring, RSPAN Mirroring, L2 Protocol Tunneling, IGMP Snooping: IGMP v1/v2/v3 Snooping, Support 1024 IGMP Groups1, Port/host-based IGMP Snooping Fast Leave, Report Suppression, IGMP Proxy, Limited IP Multicast, Up to 24 IGMP filtering profiles, 128 ranges per profile, MLD Snooping: MLD v1/v2 Snooping, Support 1024 MLD Groups1, Port/host-based MLD Snooping Fast Leave, Report Suppression

L3 Features
Max. 16 IP Interfaces, ARP Proxy, IPv6 Neighbor Discovery (ND), Inter-VLAN Routing, Max 224 IPv4 routes, Max 96 IPv6 routes, Up to 16 static routing entries2, Policy-based Route

Quality of Service (QoS)

• Queue Handling
• Strict
• Weighted Round Robin (WRR)
• Strict + WRR
• CoS Based on
• Switch Port
• MAC Address
• Protocol Type
• TCP/UDP Port
• VLAN ID
• IPv4/v6 Address
• IPv6 Traffic Class
• User-Defined Packet Content
• 802.1p Priority Queues
• DSCP
• IPv6 Flow Label
• Support Flowing Actions for Flows
• Remark 802.1p Priority Tag
• Committed Information Rate (CIR), min. granularity 64Kbps
• Remark TOS-DSCP Tag
• Flow Statistics
• SRED Congestion Control
• Bandwidth Control
• Port-based (Ingress/Egress, Min. Granularity 64Kbps)
• Flow-based (Ingress, Min. Granularity 64Kbps)

Security

• SSH v2
• SSL v1/v2/v3
• Port Security up to 64 MAC Addresses per port
• Broadcast/Multicast/Unicast Storm Control
• Traffic Segmentation
• IP-MAC-Port Binding
• Supports 500 Address Binding Entries per Device
• Supports DHCPv6 and NDP Snooping (ARP mode)1
• Supports ARP/ACL/Auto (DHCP Snooping) Mode
• D-Link® Safeguard Engine™
• NetBIOS/NetBEUI Filtering
• DHCP Server Screening
• DHCP Client Filtering
• ARP Spoofing Prevention
• BPDU Attack Protection

Access Control List (ACL)

• Up to 1792 Access Ruless
• ACL based on
• 802.1 Priority
• Ether Type
• Protocol Type
• IPv6 Flow Label
• VLAN ID
• IPv4/v6 Address
• TCP/UDP Port Number
• User Defined packet content
• MAC Address
• DSCP
• IPv6 Traffic Class
• ACL Statistics
• Time-based ACL
• VLAN-based ACL
• CPU Interface Filtering

VLAN

• VLAN Group
• Max. 4K VLAN
• GVRP
• Max. 256 Dynamic VLAN
• 802.1Q Tagged VLAN
• Port-based VLAN
• 802.1v Protocol VLAN
• Double VLAN (Q-inQ)
• Max. 4K VLAN Port-based Q-inQ
• Selective Q-inQ
• VLAN Translation
• MAC-based VLAN
• ISM VLAN
• Asymmetric VLAN
• VLAN Trunking
• Voice VLAN
• Guest VLAN
• Subnet-based VLAN

AAA

• 802.1X
• Authentication Database Failover
• Port/Host-based Access Control
• Dynamic VLAN Assignment
• Web-based Access Control (WAC)
• Authentication Database Failover
• Port/Host-based Access Control
• Dynamic VLAN Assignment
• MAC-based Access Control (MAC)
• Authentication Database Failover
• Port/Host-based Access Control
• Dynamic VLAN Assignment
• RADIUS Accounting
• RADIUS and TACACS+ Authentication for Switch Access
• 3-Level User Account
• Microsoft® NAP: 802.1X NAP / DHCP NAP

Physical & Environmental

Power Consumption

• 33.1w (max.)

Power Input

• 100 to 240 VAC, 0.5A, 50 to 60HZ Internal Universal Power Supply

Redundent Power Supply

• Connector for optional external DPS-200

Dimensions (W x D x H)

• 17.4” x 12.2” x 1.7” (441mm x 310mm x 44mm)

Size

• 19-inch Standard Rack-Mount Width, 1U Height

Weight

• 9.01 lbs (4.09 kg)

Ventilation

• 2DC Fans

Acoustics

• 35.1db at max. speed

Heat Dissipation

• 112.81 BTU/hour

MTBF

• 380,412 hours

Temperature

• Operating: 32° to 122° F (0° to 50° C)5
• Storage: -40° to 158° F (-40° to 70° C)

Humidity

• 5% ~ 95% Non-condensing

EMI/EMC

• FFC Class A, CE, C-Tick, VCCI Class A

Safety

• cUL, LVD, CB

Warranty

• Lifetime Warranty 3

MIB
RFC1065, 1066, 1155, 1156, 2578 MIB Structure, RFC1212 MIB Definition, RFC1213 MIBII, RFC1215 MIB Traps Convention, RFC4188 Bridge MIB, RFC1157, 2571~2576 SNMP MIB, RFC1442, 1901~08, 2578 SNMPv2 MIB, RFC1757, 2819 RMON MIB, RFC2021 RMONv2 MIB, RFC1398, 1643, 1650, 2358, 2665 Ether-like MIB, RFC2674, 4363 Q-Bridge/PBridge MIB, RFC2233, 2863 IF MIB, RFC2618 RADIUS Authentication Client MIB, RFC2620 RADIUS Accounting Client MIB, RFC2925 Ping MIB, RFC2925 Traceroute MIB, D-Link Private MIB