L2+ Unified Wired/Wireless Gigabit Switch
Scalable Unified Wired / Wireless
Network Architecture
The DWS-4026 is D-Link’s next generation L2+ even if they are not in the same subnet. Because

ƒ Manages up to 64 wireless APs per
Unified Wired/Wireless Gigabit Switch with an array the DWS-4026 employs various mechanisms such as
Switch, up to 256 APs per Cluster
of advanced features and 802.11n support. With the pre-authentication and key-caching, wireless users

ƒ Adaptable Wireless technology
ability to manage up to 64 DWL-8600AP wireless can freely “roam” the entire network without needing

ƒ Complete Wireless and Wired
access points by itself and up to 256 DWL-8600APs to re-authenticate. The additional Fast Roaming
in a Switch Cluster, the DWS-4026 is a full-featured feature results in disruption-free, reliable wireless
and cost-effective mobility solution for mid-to-
connectivity crucial for mobile applications such as
Robust Wired/Wireless Security
large enterprises and service providers. Extremely Wi-Fi IP Phones and wireless PDAs. Furthermore, the
versatile and flexible, the DWS-4026 can be deployed DWS-4026 supports advanced “AP-AP Tunneling,”

ƒ Wireless Intrusion Detection System
as a Wireless Controller in the core network or as which is used to support L3 roaming for wireless
a L2+ PoE Gigabit Switch at the edge depending clients without forwarding any data traffic to the

ƒ Rogue AP Detection & Classification
on the customer’s requirement. By centralizing Unified Switch. This can help to significantly reduce

ƒ Captive Portal
WLAN configuration and management functions, network traffic and save bandwidth.

ƒ 64/128/152-Bit WEP Data Encryption
DWS-4026 enables network administrators to have

ƒ 802.11i WPA2/RSN
control, security, redundancy, and reliability needed Voice-Optimized Quality of Service (QoS)

ƒ MAC Authentication
to scale and manage their wireless networks easily The DWS-4026 is specifically designed and optimized

ƒ Dynamic ARP Inspection (DAI)
and efficiently.
for Voice over Wireless traffic with features such as

ƒ DHCP Snooping
Auto-VoIP and Voice VLAN. The Auto-VoIP feature

ƒ Access Control List (ACL)
Adaptable Wireless
explicitly matches VoIP streams and provides them
Most of the current Wireless LAN controllers’ with a better class-of-service than ordinary traffic.

ƒ 802.1X
architecture requires wireless traffic to return to These VoIP streams include the popular call-control
the controller for centralized processing, causing protocols such as SIP, H.323 and SCCP. Voice VLAN
Comprehensive QoS
unnecessary traffic delay. The DWS-4026 offers enables the switch ports to carry voice traffic with

ƒ Auto-Voice over IP
network administrators additional options: depending defined priority, ensuring that the sound quality of an

ƒ Voice VLAN
on the wireless application, wireless traffic can IP phone will be safeguarded from deteriorating when

ƒ 802.1p & DiffServ
either be tunneled back to the switch for better data traffic on the port is high. The DWS-4026’s Voice

ƒ Per-Flow Bandwidth Control
security control, or locally forwarded at the access QoS capability enables administrators to maintain

ƒ Per-Port Traffic Shaping
point for optimal performance. This device offers the integrity and priority of the most time-sensitive

ƒ Minimum Bandwidth Guarantee
administrators maximized flexibility with options traffic.

ƒ Supports WMM & SVP
to tunnel client traffic to the switch for centralized
security control, and forward VoIP traffic directly In addition, the DWS-4026 supports traffic shaping,
Seamless Mobility
from the access point for optimal performance.
which helps to smooth out temporary traffic bursts

ƒ L2/L3 Fast Roaming
over time so that the transmitted traffic rate is
Comprehensive Wired/Wireless Security
bounded. Other advanced QoS features include

ƒ AP-AP Tunnel
The DWS-4026 offers a state-of-the-art Wireless per-flow bandwidth control, minimum bandwidth

ƒ Intra-Switch & Inter-Switch Roaming
Intrusion Detection System (WIDS), which empowers guarantee and 802.1p CoS all help to keep the network
Advanced Switching & Routing
network administrators to detect Rogue Access Points traffic in a predictable manner.

ƒ RIP v1/v2
and Rogue Clients as well as anticipate wireless
threats, preventing them from causing damage to the Network Resiliency

ƒ VLAN Routing
network. With WIDS, administrators can activate The DWS-4026 offers a “self-healing” network

various threat detections and use RF scans to sweep capability to increase the resiliency of the entire

ƒ Spanning Tree Protocol (STP)
the entire wireless network for any possible security wireless network. To make up for a sudden RF

ƒ IGMP / MLD Snooping
breach in advance. Other wireless security features signal vacuum created by any “dead” AP (AP with

ƒ Subnet-based VLAN
include WPA/WPA2 Enterprise, 802.11i, Captive Portal DC power failure, for example), the DWS-4026
and MAC Authentication.
automatically increases the transmit output power
Simplified Management
of the neighboring APs to expand the RF coverage,

ƒ Switch Cluster
On the wired side, the DWS-4026 utilizes Dynamic thereby “healing” the network. Also, to ensure

ƒ Web Access Using HTTP
ARP Inspection (DAI) and DHCP Snooping to ensure continuous connection for current clients, the DWS-

ƒ Telnet Server/Client
maximum security. Together, DAI and DHCP Snooping 4026 performs load balancing across access points

ƒ SSH v2, SSL v3
will prevent even the most sophisticated attacks such when network traffic reaches a certain threshold

ƒ SNMP v1, v2c, v3
as man-in-the-middle and ARP poisoning. Along by forcing additional clients to associate with other

ƒ sFlow
with other advanced security features such as access points. Through self-healing network and AP

ƒ Dual Image support
802.1X Access Control, Denial-of-Service Protection, load lancing, the DWS-4026 can effectively manage
Broadcast Storm Control and Protected Port, the the wireless bandwidth, optimize WLAN traffic and
DWS-4026 provides robust and centralized security, ensure maximum RF coverage.
ensuring maximum network reliability.
Seamless Mobility
Wireless clients can enjoy seamless and uninterrupted
roaming from AP to AP managed by a DWS-4026

L2+ Unified Wired/Wireless Gigabit Switch
Maximized Flexibility
Simplified Management
In addition to all its wireless capabilities, the DWS-
Multiple DWS-4026s can form a Switch Cluster,
4026 also excels as an advanced L2+ PoE Switch. which enables network administrator to manage
Complete with dynamic routing using RIPv1/v2, ACL and configure all switches from one single “Cluster
security, multi-layer QoS, comprehensive VLAN Master.” In addition, the Switch Cluster also manages
support, IGMP/MLD Snooping as well as dual information of all the Access Points as well as their
10-Gigabit uplink support, the DWS-4026 truly enables associated clients. This helps to significantly simplify
network administrators to integrate their enterprise-
management and reduce maintenance efforts as the
class wireless network with their wired infrastructure. network scales up.
Businesses contemplating upgrading their current
wired or wireless network can deploy the DWS-4026
to take advantage of its dual-role flexibility.
Technical Specifications
WLAN Management Capability

ƒ Up to 64 APs per switch

ƒ Up to 256 APs per cluster

ƒ Up to 2,048 Wireless Users (1,024 Tunneled Users, 2,048 Non-Tunneled Users)

ƒ Fast Roaming*

ƒ Intra-Switch/Inter-Switch Roaming

ƒ Intra-Subnet/Inter-Subnet Roaming

ƒ AP-AP Tunnel
Access Control & Bandwidth Management

ƒ Up to 32 SSID per AP (16 SSID per RF Frequency Band)

ƒ AP Load Balancing based on the number of users or utilization per AP
Managed AP

ƒ DWL-8600AP
AP Management

ƒ AP Auto-Discovery

ƒ Remote AP Reboot

ƒ AP Monitoring: List Managed AP, Rogue AP, Authentication Failed AP

ƒ Client Monitoring: List Clients Associated with Each Managed AP

ƒ Ad-hoc Clients Monitoring

ƒ AP Authentication Supporting Local Database and External RADIUS Server

ƒ Centralized RF/Security Policy Management

ƒ Visualized AP Management Tool (Supports up to 16 jpg files)

ƒ Unified AP Support (DWL-8600AP): Managed/Standalone mode
WLAN Security

ƒ Wireless Intrusion Detection & Prevention System (WIDS)

ƒ Rogue AP Mitigation

ƒ Rogue and Valid AP Classification Based on MAC Address

ƒ WPA Personal/Enterprise

ƒ WPA2 Personal/Enterprise

ƒ 64/128/152-bit WEP Data Encryption

ƒ Wireless Station and AP Monitoring on RF Channel, MAC Address, SSID, Time

ƒ Encryption Type Support: WEP, WPA, Dynamic WEP, TKIP, AES-CCMP, EAP-FAST, EAP-TLS, EAP-TTLS, EAP-

ƒ Captive Portal

ƒ MAC Authentication

ƒ Station Isolation

L2+ Unified Wired/Wireless Gigabit Switch
L2 Features

ƒ MAC Address Table Size: 8K Entries

ƒ IGMP Snooping: 1K Multicast Groups

ƒ MLD Snooping

ƒ 8021.D Spanning Tree

ƒ 802.1w Rapid Spanning Tree

ƒ 802.1s Multiple Spanning Tree

ƒ 802.3ad Link Aggregation: Up to 32 groups, up to 8 ports per group

ƒ 802.1ab LLDP


ƒ One-to-One Port Mirroring

ƒ Many-to-One Port Mirroring

ƒ Jumbo Frame Size: Up to 9KBytes

ƒ 802.1Q VLAN Tagging

ƒ 802.1V

ƒ VLAN Groups: Up to 3965 entries

ƒ Subnet-based VLAN

ƒ MAC-based VLAN


ƒ Double VLAN

ƒ Voice VLAN
L3 Features

ƒ IPv4 Static Route

ƒ Routing Table Size: Up to 128 Static Routes

ƒ Floating Static Route


ƒ Proxy ARP

ƒ RIPv1/v2
Quality of Service

ƒ 802.1p Priority Queues (Up to 8 Queues per Port)

ƒ CoS Based on: Switch Port, VLAN, DSCP, TCP/UDP Port, TOS, Destination/Source MAC Address, Destination/
Source IP Address

ƒ Auto-VoIP

ƒ Minimum Bandwidth Guarantee per Queue

ƒ Traffic shaping per port

ƒ Per-Flow Bandwidth Control
ACL (Access Control List)
ACL Based on: Switch Port, MAC Address, 802.1p Priority Queues, VLAN, Ethertype, DSCP, IP Address,
Protocol Type, TCP/UDP Port
LAN Security

ƒ RADIUS Authentication for Management Access

ƒ TACACS+ Authentication for Management Access

ƒ SSH v1, v2

ƒ SSL v3 , TLS v1

ƒ Port Security: 20 MAC Addresses per Port, Trap Violation Notification

ƒ MAC filtering

ƒ 802.1X Port-Based Access Control and Guest VLAN

ƒ Denial of Service Protection

ƒ Dynamic ARP Inspection (DAI)

ƒ DHCP Snooping

ƒ Broadcast Storm Control in Granularity of 1% of link speed

ƒ Protected Port

ƒ DHCP filtering

L2+ Unified Wired/Wireless Gigabit Switch
Management Methods

ƒ Web-Based GUI

ƒ Switch Clustering

ƒ RADIUS Accounting


ƒ Telnet Server: Up to 5 Sessions

ƒ Telnet Client

ƒ TFTP Client

ƒ SNMP v1, v2c, v3

ƒ sFlow

ƒ Multiple Configuration Files

ƒ Dual Image Services

ƒ RMON v1: 4 Groups (Statistics, History, Alarms, Events)


ƒ DHCP Server

ƒ DHCP Relay



ƒ Dual Images

ƒ Port Description
Device Interfaces

ƒ 24 10/100/1000BASE-T Gigabit Ports With Integrated 802.3af PoE

ƒ 4 Combo SFP Slots

ƒ RS-232 Console Port

ƒ 2 Open Slots for Optional 10-Gigabit Module
Redundant Power Supply
Connector for Optional External DPS-600 RPS
Power over Ethernet

ƒ Standard: 802.3af

ƒ Per Port Voltage Output: 15.4 W

ƒ Total Voltage Output: 370 W

ƒ Auto Disable If Port Current Over 350mA

ƒ Switching Capacity: 88Gbps

ƒ Maximum Forwarding Rate: 65.47Mpps

ƒ Forwarding Mode: Store and Forward

ƒ Packet Buffer Memory Size: 750KBytes
Flow Control

ƒ 802.3x Standard in Full Duplex Mode

ƒ Back Pressure in Half Duplex Mode

ƒ Head-of-Line Blocking Prevention
Optional 10-Gigabit Uplink Modules

ƒ DEM-410X 1-Slot 10-Gigabit XFP Modul (For Fiber Backbone Attachment)

ƒ DEM-410CX 1-Port 10-Gigabit CX4 Module (For Switch Cascading)
Optional 10-Gigabit XFP Transceivers

ƒ DEM-421XT XFP Transceiver (10GBASE-SR Standard, Up to 300 m Multi-Mode Fiber Distance, 3.3/5V
Operating Voltage)

ƒ DEM-422XT XFP Transceiver (10GBASE-LR Standard, Up to 10 km Single-Mode Fiber Distance, 3.3/5V
Operating Voltage)

ƒ DEM-423XT XFP Transceiver (10GBASE-ER Standard, Up to 40 km Single-Mode Fiber. Distance, 3.3/5V
Operating Voltage)
Diagnostic LEDs

ƒ Per Device: Power, Console, RPS

ƒ Per 10/100/1000BASE-T Port: Link/Activity/Speed, PoE Mode

ƒ Per SFP Slot: Link/Activity

ƒ Per 10-Gigabit Slot: Link/Activity

L2+ Unified Wired/Wireless Gigabit Switch

ƒ AC Input Power: 100 to240 VAC, 50/60 Hz Internal Universal Power Supply

ƒ Power Consumption: 525 Watts (max. with all PoE ports in operation)
185,540 Hours

ƒ 440 (W) x 389 (D) x 44 (H) mm (17.32 x 15.31x 1.73 inches)

ƒ 19-Inch Standard Equipment Rack Mount Width, 1U Height
6kg (13.23 lbs)

ƒ Operating Temperature: 0° to 40° C (32° to 104° F)

ƒ Storage Temperature: -10° to 70° C (14° to 158° F)

ƒ Operating Humidity: 10% to 90% non-condensing

ƒ Storage Humidity: 5% to 90% non-condensing
EMI/EMC Certifications
FCC Class A, ICES-003, VCCI, CE, C-Tick, EN 60601-1-2
Safety Certifications
* To demonstrate fast roaming in a PC, a wireless NIC (Network Interface Card) needs to support the fast roaming feature.
ACN 052 202 838
D-Link Corporation
No. 289 Xinhu 3rd Road, Neihu, Taipei 114, Taiwan
Specifications are subject to change without notice.
D-Link is a registered trademark of D-Link Corporation and its overseas subsidiaries.
All other trademarks belong to their respective owners.
©2009D-Link Corporation. All rights reserved.
Release 01 (November 2009)