D-Link DES-3528 xStack Managed 24-Port 10/100 Gigabit Layer 2 Switch

D-Link DES-3528 xStack Managed 24-Port 10/100 Gigabit Layer 2 Switch

D-Link DES-3528 xStack Managed 24-Port 10/100 Gigabit Layer 2 Switch

B&H # DLDES3528 MFR # DES-3528
D-Link DES-3528 xStack Managed 24-Port 10/100 Gigabit Layer 2 Switch

D-Link DES-3528 xStack Managed 24-Port 10/100 Gigabit Layer 2 Switch Front View

Front View

Show MoreLess


Now Viewing:

No Longer Available

Product Highlights

  • 24 x 10/100BASE-TX Ports
  • 2 x Gigabit 10/100/1000BASE-T Ports
  • 2 x 1000BASE-X Combo SFP Slots
  • Single IP Management (SIM)
  • Stack up to 32 Units per Stack
  • D-Link Safeguard Engine
  • Microsoft NAP
  • DHCP Server Screening/Client Filtering
  • 802.1p Priority (8 Queues)
  • IGMP Snooping/MLD Snooping
Show moreShow less
  • 1Description

The DES-3528 xStack Managed 24-Port 10/100 Gigabit Layer 2 Switch from D-Link is a high-performance, managed, stackable Layer 2 switch that provides an ideal solution for workgroups and edge deployments of a network. It features 24 10/100BASE-TX ports, 2 Gigabit 10/100/1000BASE-T stacking ports and 2 1000BASE-X combo SFP slots. The D-Link Single IP Management (SIM) allows administrators to cluster up a virtual stack of up to 32 DES-3528 dispersed switches with fewer distance limitations through a single IP address.

The clustering environment spans buildings, making it perfect for businesses that require multiple building deployments. The DES-3528 also supports physical stacking of up to eight units in a stack, so that the entire stack can act as a single logical unit with up to 4 Gb/s of stacking backplane. The DES-3528 also provides comprehensive security for edge access such as Access Control List, DHCP server screening and DoS attack prevention.

The switch includes security features like D-Link Safeguard Engine, SSHv2, SSLv3 Microsoft NAP, TACACS+, RADIUS, MAC-based Access Control (MAC) and more. Additionally, 802.1p Priority (8 Queues), L2/L3/L4 QoS, 802.1X (Port/MAC-based), MAC-based VLAN are some of the advanced standard-based enterprise features supported by DES-3528.

Non-Blocking Switching
The DES-3528 provides a non-blocking switching solution for 10/100 Fast Ethernet connections. It supports 24 10/100 Mb/s ports, with four Gigabit 10/100/1000BASE-T ports. Two of these copper Gigabit ports are disabled when the two 1000BASE-X SFP are used which are also known as dual personality or combo ports. The DES-3528 features a non-blocking bandwidth of 12.8 Gb/s and has a redundant power option for mission-critical applications.
Advanced Network Security
For edge network security, the DES-3528 supports DHCP server screening, client filtering and IP-MAC-port binding to prevent security breaches such as rogue DHCP server, man-in-the-middle attacks and IP spoofing. For clients with Windows XP SP3, Windows Vista or servers with Windows Server 2008, the DES-3528 works in conjunction with Microsoft's Network Access Protection (NAP) as part of an ecosystem that enforces compliance with network health policies.

The DES-3528 will grant a network host access only if it complies with IT security policies such as up-to-date anti-virus signatures and operating system patches. This prevents a virus-infested client or server from gaining access and furthering contamination. The DES-3528 also supports loopback detection, which detects a loop in the network even though the end device causing the loop is without Spanning Tree. When the switch detects a loop in the connected node, the DES-3528 shuts down the port with the loop so that the entire system continues to function normally. This feature can also be VLAN based.

The DES-3528 incorporates advanced mechanisms to detect an attack against the switch's central processing unit and take corrective action on the attacking interface. When a Denial-of-Service attack is waged against the xStack switch, the D-Link Safeguard Engine detects the threat and prevents overload of the central processor, thus ensuring network integrity and helping to maintain open network bandwidth channels.

In addition, the DES-3528 supports 802.1X authentication, which securely allows you to log onto your network. When used in conjunction with a RADIUS server, 802.1X requires each user workstation attached to the xStack switches to provide a username and password before gaining access to the network. Web-based authentication option is available for those clients who may not have the 802.1X supplicant, while MAC-based authentication can make the authentication process automatically authenticated by the 802.1X server based on the client's MAC address.

Other security features include Access Control List, in which an administrator can restrict the access of a network through a variety of means including MAC address, IP, UDP/TCP and even VLAN ID.
xStack Integration
The xStack DES-3528/3552 provides D-Link Single IP Management Technology (SIM), allowing a set of switches to be managed by a single IP, regardless of geographical locations. Traffic running among units in this virtual stack goes through the full-duplex Gigabit interfaces and your usual network wires, doing away with the costly and cumbersome stacking cables. Without any stacking cable, cable distance barrier and physical stacking limitations, your stack can comprise of units that are located anywhere on the network, minimizing the impact of any single point of failure.

Furthermore, multiple xStack switches can be configured, monitored and maintained from any workstation running a web browser through one unique IP address. The stack is managed as a single object, with all units identified by a single IP address. With Tree View, you can obtain an overview of the members of the stack and a network topology showing the locations of the units and their link information. This provides simple yet powerful web-based management without expensive SNMP network management software. You can add up to 32 switches per stack and these switches are not limited to any specific D-Link SIM models.

Additionally, the two 10/100/1000BASE-T ports on the back panel of the DES-3528 are designed for flexible dual usage. They can be used either as stacking ports with 4 Gb/s bidirectional stacking bandwidth or can simply be used as copper Gigabit uplinks. Physical stacking capability allows administrators to add up to eight switch units per stack1 on a stackable expansion basis. The DES-3528 offers an attractive stackable switch alternative to the expensive chassis-based solution.
Voice and Video Applications
For businesses, having voice, data and video on the same network is common practice. This challenge is met by the DES-3528 which supports 802.1p with eight queues. The administrator can designate the priority of the traffic based on a variety of means including IP or MAC address, so that voice data is always clear and jitter-free. Video traffic can also be assigned with the same priority. In addition, the DES-3528 provides IGMP Snooping or MLD Snooping, which allows the forwarding of multi-cast packets such as streaming audio and video, without increasing network broadcast congestion.

By Snooping IGMP registration information within a frame, a list of workstations in the multi-cast group is created. This list then allows the switch to intelligently forward packets to only the appropriate member workstations. In conjunction with the 802.1Q VLANs, Quality of Service and security can be achieved on a network infused with data traffic. The DES-3528 also supports IGMP multi-cast VLAN, which eliminates duplicate multi-cast traffic being sent to clients in different VLANs, thus eliminating bottlenecks in the uplink port.

For other multimedia-on-demand applications, such as IPTV deployments, the DES-3528 provides advanced features for easy video streaming management. For example, this xStack family supports per port multi-cast stream control, which allows a service provider to assign limited multi-cast addresses per port. This means it can act as a security control that pre-configures channels for each subscriber on a port level to prevent unauthorized hosts from receiving traffic for a multi-cast group they did not join.
Ease of Management
The DES-3528 supports SNMP v1/2c/3, so traps can be set on abnormal events and information can be polled to maximize the productivity of the network. Other standard management features are also supported including RMON and IEEE 802.1D/w/s Spanning Tree. User interface includes an intuitive web-based browser graphic interface or industry-standard CLI, either of which can be protected through SSL or SSH encryptions.
In the Box
D-Link DES-3528 xStack Managed 24-Port 10/100 Gigabit Layer 2 Switch
  • Lifetime Warranty
  • Table of Contents
    • 1Description
    10/100Base-TX Ports 24
    10/100/1000BASE-T Stacking Ports 2
    Combo SFP Slots 2
    RS-232 Console Port Yes
    Switch Capacity 12.8 Gb/s
    64-Byte Packet Forwarding Rate 9.5 Mp/s
    MAC Address Table Size 16 K
    Packet Buffer 1 MB
    Flash Memory 16 MB
    Jumbo Frames Support 9216 KB
    Number of VLANs per Device Maximum 4,096 static VLAN groups
    Maximum 255 dynamic VLAN groups
    Quality of Service (QoS) 8 independent hardware queues (802.1p/Diffserv/ToS)
    Stackability Virtual stacking with D-Link Single IP Management (SIM)
    Up to 32 devices per virtual stack
    MLD v1/v2 256 groups supported
    Access Control List Up to 768 access rules
    Time-based ACL
    CPU Interface filtering
    VLAN-based ACL
    ACL statistics
    IGMP Snooping Supports 256 groups, IGMP Fast Leave, Host-based IGMP Fast Leave*

    *Feature only available with firmware 2.60

    Flow Control 802.3x flow control, HOL blocking prevention
    Port Mirroring Supports one-to-one or many-to-one, flow-based mirroring
    Link Aggregation Supports up to eight 8-port groups
    D-Link Safeguard Engine Protects CPU from Broadcast/Multicast/Unicast flooding
    Web-Based Graphic User Interface Compatible with Internet Explorer, Netscape, Mozilla, Firefox, Opera, Safari browsers
    Interface Options
    RJ-45 10BASE-T, 100BASE-TX & 1000BASE-T
    SFP Slots Media support dependent on GBIC transceiver
    Diagnostic LEDs Per Device: Power, Console and RPS
    Per Gigabit Port: Link/Activity, 10/100 Mb/s or 1000 Mb/s speed
    Per Ethernet Port: Link/Activity, 10 Mb/s or 100 Mb/s speed
    In & Out of Band Web-based GUI, single IP management v1.6, Command Line Interface (CLI), Telnet server, Zmodem, SNMP v1/v2c/ v3, SNMP traps, system Log, RMON v1, support 1, 2, 3,9 groups, RMON v2, Support ProbeConfigGroup, BootP/ DHCP client, DHCP server DHCP auto-configuration, DHCP relay, DHCP relay option 60, 61, 82, DHCPv6 relay, DCHPv6 client, dual images, dual configuration, CPU monitoring, NTP/SNTP, sFlow, password recovery, password encryption, DNS relay, RSPAN, cable diagnostics, LLDP, LLDP-MED2, trusted host
    IEEE Support 802.1Q VLAN tagging, 802.1v VLAN protocol, GVRP, 802.1ab double VLAN (Port-based Q-in-Q, Selective Q-in-Q), VLAN translation, MAC-based VLAN, asymmetric VLAN, ISM-VLAN, 802.1p Quality of Service, 802.1D spanning tree protocol (IEEE802.1D-2004 edition), 802.1w rapid spanning tree protocol (IEEE802.1D-2004 Edition), 802.1s multiple spanning tree protocol (IEEE802.1Q-2005 Edition), 802.3x flow control, 802.3ad link aggregation, 802.3AB LLDP
    Standard Compliance RFC768 UDP, RFC791 IP, RFC792 ICMPv4, RFC2463, 4443 ICMPv6, RFC4884 extended ICMP, RFC793 TCP, RFC826 ARP, RFC 1321, 2284, 2865, 2716, 3580, 3748 Extensible Authentication Protocol (EAP), RFC2571 SNMP framework, RFC2572 SNMP message processing and dispatching, RFC2573 SNMP applications, RFC2574 user-based security model for SNMPv3, RFC1981 Path MTU discovery for IPv6, RFC2460 IPv6, RFC2461, 4861 IPv6 ND, RFC2462, 4862 IPv6 stateless address auto-configuration, RFC2464 IPv6 over Ethernet and definition, RFC3513, 4291 IPv6 addressing architecture, RFC2893, 4213 IPv4/IPv6 dual stack, RFC1112 host extensions for IP multicasting, RFC2236 IGMPv2, RFC3376 IGMPv3, RFC4605 IGMP/MLD Proxying, RFC1027 ARP proxy, RFC2475 differentiated service, RFC2597 assured forwarding PHB group, RFC2598 An expedited forwarding PHB, RFC2697 single rate three color marker, RFC2698 two rate three color marker, RFC2246 SSL, RFC2138 RADIUS, RFC2139, 2866 RADIUS accounting, RFC1492 TACACS, RFC2068, 2616 HTTP, RFC854 Telnet, RFC783, 1350 TFTP, RFC2570 SNMP, RFC3164 Syslog, RFC3176 sFlow, RFC951, 1542 BootP, RFC2131 DHCP, RFC1769 SNTP, ITU-T G.8032 ether ring protection switching
    Software Features
    L2 Features Flow control
    802.3x flow control
    HOL blocking prevention
    Spanning Tree: 802.1D STP, 802.1w RSTP, 802.1s MSTP, BPDU filtering, root Restriction, loopback detection, ERPS (Ethernet Ring Protection Switching) 1, 802.3ad link aggregation, max. 8 groups per device / 8 Gigabit ports per group
    Port Mirroring: One-to-One, Many-to-One, flow-based mirroring, RSPAN mirroring, L2 protocol tunneling
    IGMP Snooping: IGMP v1/v2/v3 Snooping, support 1024 IGMP groups1, port/host-based IGMP Snooping Fast Leave, report suppression, IGMP proxy, limited IP multicast, Up to 24 IGMP filtering profiles, 128 ranges per profile
    MLD Snooping: MLD v1/v2 Snooping, support 1024 MLD groups1, port/host-based MLD Snooping Fast Leave, Report Suppression
    L3 Features Maximum 16 IP interfaces, ARP Proxy, IPv6 Neighbor Discovery (ND), Inter-VLAN routing, maximum 224 IPv4 routes, max 96 IPv6 routes, Up to 16 static routing entries2, policy-based route
    Quality of Service (QoS) Queue Handling: Strict, Weighted Round Robin (WRR), Strict + WRR
    CoS Based on: Switch port , VLAN ID , 802.1p priority queues , MAC address , IPv4/v6 address , DSCP, protocol type, IPv6 traffic class, IPv6 Flow label, TCP/UDP Port, user-defined packet content
    Support Flowing Actions for Flows: Remark 802.1p Priority Tag, Remark TOS-DSCP Tag ,Committed Information Rate (CIR), min. granularity 64Kb/s, Flow Statistics
    SRED congestion control
    Bandwidth Control: Port-based (Ingress/Egress, min. Granularity 64 Kb/s), flow-based (Ingress, min. granularity 64 Kb/s)
    SSH v2
    SSL v1/v2/v3
    Port security up to 64 MAC addresses per port
    Broadcast/Multicast/Unicast storm control
    Traffic segmentation
    IP-MAC-Port Binding:
    - Supports 500 address binding entries per Device
    - Supports DHCPv6 and NDP Snooping (ARP mode)1*
    - Supports ARP/ACL/Auto (DHCP Snooping) Mode
    D-Link Safeguard Engine
    NetBIOS/NetBEUI filtering
    DHCP server screening
    DHCP client filtering
    ARP spoofing prevention
    BPDU attack protection yvutxwbaffabxdtuzwewaerrxffvwrf

    *Feature only available with firmware 2.60

    Access Control List Up to 1792 access rules
    ACL Based on: 802.1 priority , VLAN ID, MAC address, Ether type , IPv4/v6 address , DSCP, protocol type , TCP/UDP port number , IPv6 traffic class, IPv6 flow label, user defined packet content
    ACL Statistics
    Time-based ACL
    VLAN-based ACL
    CPU interface filtering
    VLAN VLAN Group: Max. 4K VLAN
    GVRP: Max. 256 Dynamic VLAN
    802.1Q Tagged VLAN
    Port-based VLAN
    802.1v Protocol VLAN
    Double VLAN (Q-inQ) : Max. 4K VLAN port-based Q-inQ, Selective Q-inQ
    VLAN translation
    MAC-based VLAN
    Asymmetric VLAN
    VLAN trunking
    Voice VLAN
    Guest VLAN
    Subnet-based VLAN
    AAA 802.1X:
    -Authentication database failover
    - Port/Host-based access control
    - Dynamic VLAN assignment
    Web-Based Access Control (WAC):
    -Authentication Database Failover
    - Port/Host-based access control
    - Dynamic VLAN assignment
    MAC-based Access Control (MAC):
    - Authentication Database Failover
    - Port/Host-based Access Control
    - Dynamic VLAN Assignmentt
    RADIUS Accounting
    RADIUS and TACACS+ authentication for switch access
    3-Level user account
    Microsoft NAP: 802.1X NAP/DHCP NAP
    Power Consumption Maximum: 20.5 W
    Power Input 100 to 240 V AC, 0.5 A, 50 to 60 HZ
    Internal universal power supply
    Redundant Power Supply: Connector for optional external DPS-200 (Redundant power supply unit, 60 W)
    Form Factor 19" (483 mm) standard rack mount, 1U
    Ventilation Fanless
    Heat Dissipation 69.9 BTU/hours
    MTBF 203,785 hours
    Temperature 32 to 122°F (0 to 50°C)
    Storage: -40 to 158°F (-40 to 70°C)
    Humidity 5 ~ 95% (non-condensing)
    EMI/EMC FFC Class A, CE, C-Tick, VCCI Class A
    Safety cUL, LVD, CB
    MIB RFC1065, 1066, 1155, 1156, 2578 MIB structure, RFC1212 MIB definition, RFC1213 MIBII, RFC1215 MIB traps convention, RFC4188 bridge MIB, RFC1157, 2571~2576 SNMP MIB, RFC1442, 1901~08, 2578 SNMPv2 MIB, RFC1757, 2819 RMON MIB, RFC2021 RMONv2 MIB, RFC1398, 1643, 1650, 2358, 2665 Ether-like MIB, RFC2674, 4363 Q-Bridge/PBridge MIB, RFC2233, 2863 IF MIB, RFC2618 RADIUS authentication client MIB, RFC2620 RADIUS accounting client MIB, RFC2925 Ping MIB, RFC2925 Traceroute MIB, D-Link private MIB
    Packaging Info
    Package Weight 8.85 lb
    Box Dimensions (LxWxH) 22.1 x 12.3 x 3.7"
    Be the first to review this item
    See any errors on this page? Let us know.