xStack DGS-3200 Series
Security Switch For Enterprise &
xStack L2 Security Gigabit Switches
Remote Branch Offices

ƒ 8, 14 or 20 10/100/1000BASE-T Gigabit

ƒ 2 or 4 combo 10/100/1000BASE-T/SFP

ƒ Integrated Malicious Traffic and
Performance Degradation Prevention
up to 50o C

ƒ Silent Fanless ventilation suitable for
L2 Features


ƒ Jumbo Frames up to 10,240 bytes
The DGS-3200 xStack series is managed layer 2 enhances switch performance. The IP-MAC-Port
Security Gigabit switches with IPv6 support, designed Binding feature al ows administrators to bind a source

ƒ MLD v1/v2 Snooping
to maximize network performance in enterprise IP address with an associated MAC and also lets the

ƒ Loopback Detection
environments. This series includes the DGS-3200-10 , administrator to define the port number to enhance
the DGS-3200-16, and the DGS-3200-24. The switches user access control. The switches also support DHCP

also implement an integrated and comprehensive Screening, a feature that denies access to rogue DHCP
D-Link End-to-End Security solution to provide total servers. Enable this function to filter out all the DHCP

ƒ Private VLAN
network defense against internal and external threats. Server packets from a specific port. Other security
Furthermore, D-Link Green Technology decreases features like port security and traffic segmentation
energy costs by reducing power consumption, without provide granular control to businesses and enhance

ƒ 802.1X Authentication
compromising on performance.
network security.

ƒ Web-based Access Control (WAC)
The DGS-3200-10 comes in a compact, 11-inch rack-
D-Link’s joint security solution provides admission

ƒ MAC-based Access Control (MAC)
mount case with an innovative fanless design, and control and real-time defense through Microsoft’s NAP
emits less heat and noise than other standard switches. (Network Access Protection) and D-Link’s ZoneDefense

ƒ IP-MAC-Port Binding
The DGS-3200-16 supports a smart fan feature respectively. The ZoneDefense technology al ows

ƒ Multiple Authentication
which has heat sensors and a fan that maintains the businesses to integrate their switches with D-Link’s
temperature of the device for optimum performance. NetDefend firewal , for ful coverage and proactive

ƒ D-Link Safeguard Engine
To minimize noise reduction, the fan is off by default. security architecture.

These switches are ideal for deployment in offices or
environments that require silence. The DGS-3200-24 IPv6 Technology

ƒ Supports Microsoft NAP (IPv4/v6)
also includes a smart fan feature, including two fans The DGS-3200 series supports both IPv4 and IPv6

ƒ D-Link ZoneDefense
that are set to low speed by default.
protocols to meet the ever-increasing demand of larger
address space. IPv6 simplifies, streamlines network

ƒ DHCP Server Screening
End-to-End Security (E2ES)
configuration and also reduces costs of deployment.
D-Link extends intel igence by combining endpoint, These switches have been certified with IPv6 Ready

ƒ ARP Spoofing Prevention
joint and gateway security to provide a complete Logo Phase 2 from the IPv6 forum, a worldwide IPv6
End-to-End Security Solution. This integrated security advocacy consortium. The IPv6 Ready Logo Program
Quality of Service
solution combines switches, firewal and Wireless provides conformance and interoperability of IPv6

ƒ 802.1p Priority Queues
LAN with unified threat management for easy security products.
management for the edge, to the core enterprise

ƒ Multi-layer CoS
network. The switches provide a rich list of endpoint Furthermore, the switches embrace Microsoft
security features to add confidence and assurance Network Access Protection (NAP). NAP is a policy
Traffic Monitoring & Bandwidth
towards your network. It offers comprehensive enforcement technology built into the Windows Vista®
protection, including user authentication, VLAN or XP SP3 operating system that al ows customers to
authorization, traffic control and segmentation, node protect network assets from unhealthy computers by

ƒ Traffic Segmentation
address control, and attack mitigation.
enforcing compliance with network health policies.

ƒ Bandwidth Control
MLD snooping enhances efficiency in selective
The switches also support 802.1X Port-based/Host-
distribution by forwarding multicast data to ports that

ƒ Broadcast Storm Control
based Access Control, Guest VLAN, and RADIUS and receive data, rather than flooding al ports in a VLAN.

ƒ Port Mirroring
TACAS+ for strict access control over the network Features such as QoS, ACL (based on IPv6 flow label
along with Web-based Access Control (WAC) and traffic class), provide a faster and more efficient
and MAC-based Access Control (MAC) for easy service. For IPv6 Management, the switches support
deployment. User-defined Access Control List (ACL) Web, telnet and SNMP over IPv6.
secures your internal IT network against viruses and
* For DGS-3200-10 model only

xStack DGS-3200 Series
D-Link Green Technology
Traffic Control
D-Link is striving to take the lead in developing Network administrators can define throughput levels
innovative and power-saving technology that does for each port to al ocate its essential bandwidth.
not sacrifice operational performance or functionality. Broadcast storm control and flow-based bandwidth
The DGS-3200 series implements the D-Link Green control can reduce the level of damage from virus
Technology, which includes a power saving mode, attacks or P2P applications to the network.
reduced power consumption, reduced heat dissipation,
and cable length detection. The power saving feature Manageability
automatical y powers down ports that have no link or D-Link’s Single IP Management (SIM) simplifies and

ƒ Web-Based GUI (supports IPv4/v6)
link partner.
speeds up management tasks, al owing multiple
switches to be configured, monitored and maintained

ƒ Command Line Interface (CLI)
Resilience/Performance Enhancement
from any workstation running a web browser through

ƒ Telnet (supports IPv4/v6)
The DGS-3200 series offers superior performance one unique IP address. This virtual stack is managed
and enhanced network resilience, through the as a single object, having al units maintained by

ƒ SNMP v1/v2c/v3
latest 802.1D-2004, 802.1w, and 802.1s Spanning Tree one IP address. The DGS-3200 series also supports

ƒ RADIUS/TACACS+ Authentication for
Protocols. STP al ows you to configure the switch standard-based management protocols such as
Management Access
with a redundant backup bridge path, so transmission SNMP, RMON, Telnet, Console, web GUI and SSH/SSL
and reception of packets can be guaranteed in event security authentication.

ƒ D-Link Single IP Management (SIM)
of any fail-over switch on the network. 802.3ad Link

ƒ Dual Image/Configuration
Aggregation provides aggregated bandwidth between For out-of-band management, the DGS-3200-24
switches or servers to increase redundancy for higher comes with a combo console, a flexible choice of

ƒ Combo Console*
console type that includes an RS-232 DB-9 and an

ƒ SD Card Reader*
RJ-45 port. The switch is also equipped with an SD
The switches support 802.1p for Quality of Service Card reader, al owing the user to boot images and
(QoS). This standard is a mechanism that allows real-
upload configuration files directly from an SD Card.
time traffic classification into 8 priority levels mapped Furthermore, syslog files can also be conveniently
to 8 queues. Packet classification is based on TOS, saved to a card.
DSCP, MAC, IPv4, VLAN ID, TCP/UDP port number,
protocol type and user defined packet content, which
enables flexible configuration especial y for real-time
streaming multimedia applications such as voice over
IP. The switches also provide a Safeguard Engine for
network protection to increase switch’s reliability,
serviceability and availability.
* For DGS-3200-24 model only

xStack DGS-3200 Series
Technical Specifications
Device Interfaces
20 10/100/1000BASE-T Gigabit Ports
8 10/100/1000BASE-T Gigabit Ports
14 10/100/1000BASE-T Gigabit Ports
4 Combo 10/100/1000BASE-T/SFP Ports
2 Combo 10/100/1000BASE-T/SFP Ports
2 Combo 10/100/1000BASE-T/SFP Ports
Combo Console Port: RS-232 DB-9 and RJ-45
RS-232 DB-9 Console Port
RS-232 DB-9 Console Port
SD Card Reader
MAC Address Table Size
Switch Capacity
64Bytes Maximum Packet
Forwarding Rate
Switching Method
Store and Forward
Packet Buffer Memory
802.3x Standard in Full
Duplex Mode

Flow Control
Back Pressure in Half
Duplex Mode

Power (Per Device)

Console (Per Device)

SD Card Reader (Per

Diagnostic LEDs
RPS (Per Device)

Link/Activity/Speed (Per
10/100/1000BASE-T Port)

Link/Activity/Speed (Per
SFP Slot)

AC Input Power: 100-240 VAC, 50-60 Hz
Redundant Power Supply
Supports DPS-200 model
280 (W) x 180 (D) x 43 (H) mm
440 (W) x 210 (D) x 44 (H) mm
One Smart Fan (Default off)
Two Smart Fans (Default low speed)
Operating Temperature: 0˚ ~ 40˚C
Operating Temperature: 0˚ ~ 50˚C
Storage Temperature: -40˚~ 70˚C
Storage Temperature: -40˚ ~ 70˚C
5%-95% Non-condensing
726,077 Hours
258,724 Hours
502,576 Hours
Power Consumption
20.9Watts (Max.)
28.9Watts (Max.)
41.9Watts (Max.)
Heat Dissipation
71.3 BTU per hour
98.6 BTU per hour
142.9 BTU per hour
FCC, CE, VCCI Class A, C-Tick
UL, CB Report

xStack DGS-3200 Series
Optional Products
Optional Management Software
Optional SFP Transceivers
Optional WDM SFP Transceivers
D-View 6.0 Network Management System
1000BASE-LX, Single-mode, 10km
1000BASE-LX, Wavelength Tx:1550nm
(Standard Edition)
1000BASE-SX, Multi-mode, 500m
Rx:1310nm, Single-mode, 10km
D-View 6.0 Network Management System
1000BASE-SX, Multi-mode, 2km
1000BASE-LX, Wavelength Tx:1310nm
(Professional Edition)
1000BASE-LX, Single-mode, 50km
Rx:1550nm, Single-mode, 10km
*Also supports D-View 5.1
1000BASE-LX, Single-mode, 80km
1000BASE-LX, Wavelength Tx:1550nm
100BASE-FX, Single-mode, 15km
Rx:1310nm, Single-mode, 40km
100BASE-FX, Multi-mode, 2km
1000BASE-LX, Wavelength Tx:1310nm
Optional Redundant Power Supply
Rx:1550nm, Single-mode, 40km
60Watts Redundant Power Supply
100BASE-BX, Wavelength Tx:1550nm
Rx:1310nm, Single-mode, 20km
100BASE-BX, Wavelength Tx:1310nm
Rx:1550nm, Single-mode, 20km
Software Features

ƒ DGS-3200-24:

ƒ User-defined Packet Content

ƒ Virtual Stacking
Max. 12 groups per device/8 ports per group

ƒ Bandwidth Control

ƒ D-Link Single IP Management (SIM)

ƒ Port Mirroring

ƒ Port-based (Ingress/Egress, min. granularity

ƒ Up to 32 devices per Virtual Stack

ƒ One-to-One

ƒ Many-to-one

ƒ Flow-based (Ingress, min. granularity 64Kb/s)
L2 Features

ƒ Flow-based Mirroring

ƒ MAC Address Table
Access Control List (ACL)

ƒ DGS-3200-10: 8K

ƒ Up to 200 Access Rules

ƒ DGS-3200-16: 16K
ƒ 802.1Q Tagged VLAN

ƒ ACL based on

ƒ DGS-3200-24: 16K

ƒ VLAN Group

ƒ 802.1p Priority

ƒ Flow Control

ƒ Max. 4094 VLAN


ƒ 802.3x Flow Control


ƒ MAC Address

ƒ HOL Blocking Prevention

ƒ Max. 255 Dynamic VLAN

ƒ IPv4/IPv6 Address

ƒ Jumbo Frames up to 10,240 Bytes

ƒ 802.1v protocol VLAN


ƒ IGMP Snooping

ƒ Protocol Type

ƒ IGMP v1/v2/v3 Snooping

ƒ MAC-based VLAN

ƒ TCP/UDP Port Number

ƒ Support 256 groups

ƒ VLAN Trunking

ƒ IPv6 Traffic Class

ƒ Host-based IGMP Snooping Fast Leave
ƒ Private VLAN

ƒ IPv6 Flow Label

ƒ Data Driven Multicast

ƒ User-defined Packet Content

ƒ IGMP Authentication
QoS (Quality of Service)

ƒ Time-based ACL

ƒ MLD Snooping
ƒ 802.1p Quality of Service

ƒ CPU Interface Filtering

ƒ 8 queues per port
ƒ MLD v1/v2 Snooping

ƒ ACL Statistics

ƒ Support 256 groups

ƒ Queue Handling

ƒ Spanning Tree Protocol

ƒ Strict

ƒ SSH v2

ƒ 802.1D- 2004 Edition STP

ƒ Weighted Round Robin (WRR)

ƒ SSL v1/v2/v3

ƒ 802.1w RSTP

ƒ CoS based on

ƒ Port Security up to 64 MAC address per port

ƒ 802.1s MSTP

ƒ Switch Port

ƒ Broadcast/Multicast/Unicast Storm Control

ƒ BPDU Filtering


ƒ Traffic Segmentation

ƒ Root Restriction

ƒ 802.1p Priority Queues

ƒ Loopback Detection

ƒ MAC Address

ƒ IP-MAC-Port Binding

ƒ 802.3ad Link Aggregation

ƒ IPv4/IPv6 address

ƒ ARP Packet Inspection

ƒ IP Packet Inspection

ƒ DGS-3200-10:
Max. 5 groups per device/8 ports per group

ƒ TCP/UDP port number

ƒ DHCP Snooping

ƒ DGS-3200-16:

ƒ Protocol Type

ƒ Supports 512 address binding entries per device
Max. 8 groups per device/8 ports per group

ƒ IPv6 Traffic ClassIPv6 Flow Label

ƒ D-Link Safeguard Engine

xStack DGS-3200 Series

ƒ Microsoft® NAP

ƒ Dual Image

ƒ RFC2570, 2575 SNMPv3
ƒ Supports 802.1X NAP (IPv4/IPv6)
ƒ Dual Configuration

ƒ RFC3021 31-Bit Prefixes

ƒ Supports DHCP NAP (IPv4)

ƒ CPU Monitoring

ƒ RFC2460 IPv6

ƒ DHCP Server Screening


ƒ RFC4861 IPv6 Neighbor Discovery

ƒ DHCP Client Filtering

ƒ ICMPv6

ƒ RFC4862 IPv6 Stateless Address Autoconfiguration

ƒ ARP Spoofing Prevention

ƒ IPv6 Neighbor Discovery

ƒ RFC4443 ICMPv6

ƒ RFC1981 IPv6 Path MTU Discovery
D-Link Green

ƒ RFC5095 Deprecation of Type 0 Routing Headers in

ƒ 802.1X

ƒ Power Saving Mode
ƒ Port-based Access Control

ƒ Link Down Status
ƒ Host-based Access Control

ƒ Cable Length Detection
ƒ Dynamic VLAN Assignment

ƒ Compliant with RoHS 6

ƒ Web-based Access Control (WAC)
ƒ Port-based Access Control
ƒ Host-based Access Control

ƒ Cable Diagnostics
ƒ Dynamic VLAN Assignment

ƒ MAC-based Access Control (MAC)
MIB/IETF® Standard
ƒ RFC1213 MIB-II
ƒ Port-based Access Control
ƒ RFC4188 Bridge MIB
ƒ Host-based Access Control

ƒ RFC1907 SNMPv2 MIB
ƒ Dynamic VLAN Assignment

ƒ RFC1757, 2819 RMON MIB
ƒ Multiple Authentication

ƒ RFC2021,RMONv2 MIB
ƒ Guest VLAN

ƒ RFC1643,2358,2665 Ether-like MIB
ƒ Authentication for Management Access
ƒ RFC2674 802.1p MIB

ƒ RADIUS Accounting
ƒ RFC2233, 2863 IF MIB

ƒ RFC2618 RADIUS Authentication Client MIB

ƒ RFC2925 Ping & Traceroute MIB

ƒ Web-based GUI (Supports IPv4/IPv6)

ƒ RFC2620, RADIUS Accounting Client

ƒ Command Line Interface (CLI)
ƒ D-Link Private MIB

ƒ Telnet (Supports IPv4/IPv6)
ƒ RFC768 UDP

ƒ TFTP Client (Supports IPv4/IPv6)


ƒ XModem
ƒ RFC791 IP

ƒ ZModem


ƒ SNMP v1/v2c/v3 (Supports IPv4/IPv6)

ƒ RFC793 TCP
ƒ SNMP Trap
ƒ RFC826 ARP

ƒ System Log
ƒ RFC854 Telnet

ƒ RMON v1

ƒ RFC951, 1542 BootP
ƒ Supports 1,2,3,9 groups

ƒ RFC2068 HTTP

ƒ RMON v2

ƒ Supports ProbeConfig group
ƒ RFC2139, 2866 RADIUS Accounting

ƒ BootP/DHCP Client

ƒ DHCP Auto-Configuration

ƒ RFC1157 SNMPv1

ƒ DHCP Relay
ƒ RFC1901, 1908 SNMPv2c

ƒ DHCP Relay Option 82
ACN 052 202 838
D-Link Corporation
No. 289 Xinhu 3rd Road, Neihu, Taipei 114, Taiwan
Specifications are subject to change without notice.
D-Link is a registered trademark of D-Link Corporation and its overseas subsidiaries.
All other trademarks belong to their respective owners.
©2009 D-Link Corporation. All rights reserved.
Release 04 (July 2009)