xStack Series
DGS-3612
12-port 10/100/1000Base-T L3 Management Switch with 4 Combo SFP ports
DGS-3612G
12-port SFP L3 Management Switch with 4 Combo 10/100/1000Base-T ports
DGS-3627
24-port 10/100/1000Base-T L3 Stackable Management Switch with 4 Combo
SFP and 3 open slots for optional 10GE modules
DGS-3627G
24-port SFP L3 Stackable Management Switch with 4 Combo
10/100/1000Base-T ports and 3 open slots for optional 10GE modules
DGS-3650
48-port 10/100/1000Base-T L3 Stackable Management Switch with 4 Combo
SFP and 2 open slots for optional 10GE modules
External Specification
Version 2.40
By: Hans Chang
Switch and Security Product Dept
2009/06/11
This document contains confidential information and may not be disclosed to persons without the written consent
of D-Link Corporation. For any person not intended to be the recipient, please (i) do not disclose the contents to
any other person; and (ii) promptly return/delete all existing copies
1/21
DGS-3600 Series Specification Revision History
Version Revised Date Person Name Content Revised
1.00 2006/4/7 Arthur Chiang First Edition
1.10 2006/6/8 Arthur Chiang Add DGS-3612G to this series
1.11 2006/6/22 Aron Chen Update spec information of the supported SFP transceivers
1.20 2006/6/27 Aron Chen Update the information of EMI Certifications
1.21 2006/7/28 Aron Chen Update the information of compliant standards for
10/100/1000Base-T port
1.22 2006/8/4 Aron Chen Update the information of RPS support
1.23 2006/8/7 Aron Chen Update the information of Safety Certifications and the
description of “Trunking/Mirroring across stack”
1.24 2007/3/29 Arthur Chiang 1. Add Microsoft NAP support
2. Add the value of MTBF
3. Add JWAC support in R3
4. Add DHCP server in R2
5. Add ACL Statistic function in R2
6. Enlarge the maximum number of IP interface to 256
7. Enlarge the max number of IP interface per VLAN to 256
8. Add LLDP function in R3
2.0 2007/6/15 Arthur Chiang 1. Add new model 12GE model DGS-3612
2. Modify the storage temperature to -40~70
3. Add the acoustic information
4. Modify the maximum ACL profile from 8 to 14
5. Add following function to R3
- 802.1D 2004 edition
- 802.1Q 2003 edition
- ISM VLAN for stacking
- MAC-based VLAN
- Null Interface
- Host-based IGMP Fast Leave
6. Modify following features to R3
- Lookback Detection enhancement
- Virtual Interface
7. Add 802.1v enhancement to R2
8. Modify the Packet Content CoS/ACL to R2
2.10 2007/8/16 Arthur Chiang 1. Add DGS-3612 front/rear panel picture
2. Add Secondary default route to R2
3. Add QoS Committed Information Rate(CIR) to R2
4. Move following features to R3
- DHCP snooping
- Telnet Client
- Double VLAN: Selective Q in Q
- Safeguard Engine Enhancement
5. Add following features to R3
- 3 level user account
- RSPAN
- “Show tech support” command
- Cable Diagnostic
- IPv6 Tunneling
6. Add detail description for sFlow
2.20 2007/10/9 FuCherng Sia 1. Modify following function to R2.4
- 3 Level User Account
- LLDP
2. Add following function to R2.4
- RPS trap
2/21
- Gratuitous ARP
3. Add following function to R2.5
- ARP Proxy
- MTU feature
- PIM Sparse-Dense Mode
4. Modify DHCP Snooping to R2.5
5. Add following features to R3
- DHCP Relay Option 60, 61
- L2 Protocol Tunneling
- Root Restriction
6. Modify the 7-segment LED description for R3 F/W
7. Password Recovery
2.30 2008/12/10 FuCherng Sia 1. Modify following function to R2.4
- Option for selecting primary or secondary IP interface as
DHCP relay interface
- PIM Sparse-Dense Mode
2. Add information for Zone Defense technology support
3. Add a note to ISM VLAN for only supporting IGMP v1 & v2
4. Add following function to R2.5
- MLD v2 Snooping
- Fan status’ log & trap
- Entity MIB
- Static IP Multicast Route
- Loopback Detection (LBD)
- DHCP Server Screening
- NAP-DHCP support
- Support IGMP v3 for ISM VLAN
5. Modify following function to R2.5
- Double VLAN (Q in Q)
- L2 Protocol Tunneling
- RSPAN
- MAC-based Access Control
- MAC-based VLAN
- Telnet Client
- Guest VLAN – MAC/Web based Access Control
6. Add following features to R3
- IP Source Guard
- Private VLAN
- IGMP Proxy
- upgrading PROM code via TFTP
- Support dynamic 802.1p, rate-limiting, ACL assignment after
successful authentication (with both Port-based and
Host-based WAC)
- Support user selectable port number other than default port
22 for SSH
- OAM [IEEE 802.1ag] CFM support
- ARP Spoofing Prevention
- Password Encrpytion
- Cable Length detection
- Voice-VLAN
7. Modify 802.1Q 2003 to 802.1Q 2005 edition
8. Add/Modify the contents of the following features:
- Double VLAN (Q in Q)
- ISM VLAN
- 802.1X
- Guest VLAN
3/21
- DHCP relay
- Cable Diagnostic
2.40 2009/6/11 Hans Chang 1. Remove following method for adding SVLAN tag
- MAC Address
- 802.1p priority
- Ether type
- IPv4/v6 Address
- TCP/UDP port number
2. Modify the function description of ECMP, OSPF ECMP
3. Move IGMP v3 snooping from R1 to R2.5
4. Add following descriptions to IGMP Proxy
- Can enable/disable the transmission of IGMP Query
packets.
- Support IGMP group reporter
5. Add "Support host-based MLD fast leave" to R3
6. Add following descriptions to Spanning Tree
- Support 802.1D STP 2004 edition
- Support Root Restriction(defined in 802.1Q-2005)
7. Add following features to R3.0
- E-RPS (Ethernet Ring Protection Switching)
- Subnet-based VLAN
- BGP
- IP Directed Broadcast
- PIM SSM
- BPDU Attack Protection
- RADIUS Accounting
- Compound Authentication
- Password Recovery
- Password Encryption
- 802.3ah
- Connectivity Fault Management (CFM)
- Optical Transceiver Digital Diagnostic Monitoring (DDM)
8. Add following descriptions to ISM VLAN
- Support untagged source port.
- Support the modification of ISM VLAN's priority level for
better traffic control
- Support the forwarding of multicast stream using backup link
when the primary link goes down
- Support “source_network_check” function to be compatible
with MVR
9. Add following descriptions to ARP Proxy
- Support ARP Proxy between different subnets
- Support Local ARP Proxy in the same subnet
10. Add following descriptions to OSPF
- Support 512 OSPF Equal Cost Multi-Path routes, up to 4
paths per destination.
- Support OSPF announcement via loopback interface
- Support OSPF v3(IPv6 routing)
- Support point-to-point function that uses unicast Hello
packets instead of multicast packets
- Enlarge OSPF area to 16
- Support the advertisement of default route into OSPF
without the need to manually redistribute static route
11. Add "Enlarge port-based limited IP multicast address range
to 30 entries and support up to 512 entries per device" to R3
12. Add "Enlarge to 64 MACs per port" to R3
4/21
13. Add following descriptions to IP-MAC-Port Binding
- IMPB v3.6
- Support IMPB debug command in CLI mode
14. Add "Support port shutdown and log/trap triggering" to R2.5
15. Add following descriptions to 802.1X
- Support "force logoff” for user session
- Support "802.1X BPDU forwarding" function
- Support "RFC3580 tag1/2 format” to be compatible with
Cisco ACS server
- Support 802.1X extension: "Assign user priority/bandwidth
based on MAC”
- Support the assignment of target VLAN without enabling
guest VLAN
- Support ACL assignment after successful authentication
16. Add following descriptions to WAC and MAC
- Support dynamic 802.1p, rate-limiting, assignment after
successful authentication (with both Port-based and
Host-based WAC)
- Support ACL assignment after successful authentication
17. Add following descriptions to JWAC
- Support ACL assignment after successful authentication
18. Add "Support DHCP NAP" and “Support 802.1X NAP” to
R2.5
19. Add the descriptions "Support IPv4/IPv6" to both Telnet
Server and Telnet Client
20. Add "SNMP Trap support following events" to SNMP Trap
- Fan status
- Firmware upgrade via SNMP is finished
21. Add "Extend trusted host numbers to 10" to R2.5
22. Remove the description “Support load-balancing for
multicast traffic” from 802.3ad Link Aggregation
23. Remove “D-Link Safeguard Engine Enhancement” from R3
24. Remove “IP Source Guard” from R3
25. Remove the description “Support max user features per
port/system(128/4000) from 802.1X
26. Remove “Block broadcast packets in DHCP relay” from R3
27. Modify the operating temperature for DGS3612G and
DGS3627 to 0-45°C
28. Add DEM220T and DEM220R under “SFP Transceivers
Supported” ( only for DGS-3612 and DGS-3612G)
29. Add “Database failover” to R3
5/21
Product Descriptions:
DGS-3600 series is the Layer 3 members of D-Link xStack product line. The DGS-3627/50 provide 24/48
10/100/1000Mbps Gigabit Ethernet ports, 4 combo SFP and 10G open slots for optional 10GE modules.
10/100/1000Mbps Gigabit Ethernet ports allow you to connect to another LAN switches, or directly connect to the
power users with Gigabit access. 4 combo SFP ports provide the fiber connectivity. 10GE open slots in the
back-panel can be plugged with 10GE XFP modules for fiber uplinks or 10GE copper modules for inter-device
connection. With 12/24 SFP ports, DGS-3612G/27G provides a full fiber environment for long distance ethernet
infrastructure which is suitable for the FTTx and MAN (Metropolitan Area Network).
The DGS-3600 series can be stacked with 10G copper module providing up to 40G stacking bandwidth, or cab
stack with DGS/DXS-3300 series with D-Link SIM technology. The third 10GE slot of DGS-3627/27G is available
for more advanced network architecture like providing 10GE uplink for a Ring stack or dual 10GE uplinks for a ring
stack for uplink load sharing & fail-over.
With the latest technology, DGS-3600 series Switches provide advanced L3 features including IPv4/v6 routing,
QoS and ACL filtering. Packet routing and protocol filtering/inspection make the Switch act even as the Layer 4
switches.
Product Specifications:
1. Hardware Specifications
General Features Detailed Description
DGS-3612G/27/27G/50
- 19-inch, 1U Rack-mount size
- 441mm x 389mm x 44mm
Dimension
DGS-3612
- 19-inch, 1U Rack-mount size
- 441mm x 309mm x 44mm
A female DCE RS-232 DB-9 console port for out-of-band configuration
Console Port
of the software features.
Provide one connector in rear panel to install optional external RPS to
enhance the reliability. When internal power is failed, the optional
external RPS will take over all the power immediately and
automatically.
External RPS Support
RPS Support
- DPS-500 for DGS-3612G/27/27G/50
- DPS-200 for DGS-3612
DGS-3612: 24Gbps
DGS-3612G: 24Gbps
Switching Capacity DGS-3627: 108Gbps
DGS-3627G: 108Gbps
DGS-3650: 136Gbps
DGS-3612: 17.86Mpps
DGS-3612G: 17.86Mpps
Max. Forwarding Rate DGS-3627: 80.36Mpps
DGS-3627G: 80.36Mpps
DGS-3450: 101.19Mpps
Forwarding Mode Store and Forward
Packet Buffer memory 2MBytes
SDRAM for CPU 256MBytes
Flash Memory Prom 512KBytes*1;
6/21
Runtime 16MBytes*1
DGS-3612: 111,241hours
DGS-3612G: 109,335 hours
MTBF DGS-3627: 93,318 hours
DGS-3627G: 88,685 hours
DGS-3650: 77,558 hours
1. 802.3x when Full Duplex
Flow Control 2. Back Pressure when Half Duplex
3. Head-of-line blocking prevention
Port Functions
DGS-3612:
- 8 10/100/1000Base-T and 4 combo 10/100/1000Base-T/SFP ports
DGS-3612G:
- 8 SFP and 4 combo 10/100/1000Base-T/SFP ports
DGS-3627:
- 20 10/100/1000BaseT and 4 combo 10/100/1000Base-T/SFP ports
DGS-3627G:
- 20 SFP and 4 combo 10/100/1000Base-T/SFP ports
DGS-3650:
- 44 10/100/1000BaseT and 4 combo 10/100/1000Base-T/SFP ports
10/100/1000Base-T ports compliant to following standards:
- IEEE 802.3 compliance
- IEEE 802.3u compliance
- Support Full-Duplex operations
- IEEE 802.3x Flow Control support for Full-Duplex mode
- IEEE 802.3ab compliance
SFP ports compliant to following standards:
LAN
- IEEE 802.3z compliance
SFP Transceivers Supported:
- DEM-310GT (1000Base-LX, Single-mode, 10km)
- DEM-311GT (1000ase-SX, Mutli-mode, 500m)
- DEM-312GT2 (1000Base-SX, Multi-mode, 2km)
- DEM-314GT (1000BASE-LX, Single-mode, 50km)
- DEM-315GT (1000BASE-LX, Single-mode, 80km)
- DEM-330T/R (WDM transceiver, Single-Mode 10km)
- DEM-331T/R (WDM transceiver, Single-Mode 40km)
- DEM-210 (100Base-FX, Multi-mode, 2km, DGS-3612 and
DGS-3612G only)
- DEM-211 (100Base-FX, Single-mode, 15km, DGS-3612 and
DGS-3612G only)
- DEM-220T (100Base-BX, Wavelength Tx:1550nm, Rx:1310nm,
Single-mode, 20km, DGS-3612 and DGS-3612G only)
- DEM-220R (100Base-BX, Wavelength Tx:1310nm, Rx:1550nm,
Single-mode, 20km, DGS-3612 and DGS-3612G only)
7/21
DGS-3627 and DGS-3627G:
- 3 open slots for 10G modules
DGS-3650:
- 2 open slots for 10G modules
Module supported
10G open slot in the back panel
- DEM-410X
- DEM-410CX
Compliant to following standards:
- IEEE 802.3ae compliance
- Support Full-Duplex operation only
2. Software Features
Release
Feature Detailed Description Standard
Schedule
Stackability
1. Support D-Link Single IP Management v1.6
2. All DGS-3600 Series support software virtual stacking to single
Virtual Stacking IP manage up to 32 devices R1.00
3. Bandwidth: Up to 20G(Depends on the stacking interface you
used)
1. DGS-3627/27G/50 support physical stacking via optional
CX4(or XFP) module provide bi-directional redundant stacking
topology
2. Topology: Linear/Ring
Physical Stacking R2.00
3. Bandwidth: Up to 40G(full duplex)
4. Support up to 12 units per stack
5. Support backup master
6. Allows trunking or mirroring to span multiple units of the stack
L2 Features
1. 16K MAC Address Table
MAC Address R1.00
2. Support 256 static MAC
Jumbo Frame Up to 9,216Bytes R1.00
1. Support IGMP v1,v2
2. 1K IGMP snooping groups;
3. Support 64 static multicast address;
4. Be able to forward the multicast traffic from the
multicast-enabled router only R1.00
IGMP snooping 5. Be able to forbid multicast traffic on specific ports
6. IGMP Per VLAN
7. Can config unregistered group filtering
8. Support IGMP snooping fast leave
9. Support IGMP snooping v3 R2.50
10. Support Host-based IGMP Fast Leave R3.00
1. Can enable/disable the transmission of IGMP Query packets.
IGMP Proxy R3.00
2. Support IGMP group reporter
1. 1K MLD snooping groups;
2. Support 64 static multicast address;
3. Be able to forward the multicast traffic from the multicast-
MLD snooping enabled router only R1.00
4. Be able to forbid multicast traffic on specific ports
5. MLD Per VLAN
6. Can config unregistered group filtering
8/21
7. Support MLD v2 snooping R2.50
8. Support host-based MLD fast leave R3.00
1. Support 802.1D STP
2. Support 802.1w RSTP
R1.00
3. Support 802.1s MSTP
Spanning Tree
4. Support per port / per device BPDU filtering
5. Support 802.1D STP 2004 edition
R3.00
6. Support Root Restriction(defined in 802.1Q-2005)
STP loopback detection R1.00
Loopback - D-Link LBD v4.0
Detection (LBD) - STP independent R2.50
- Support per port/per VLAN shutdown
1. Support max 32 groups per device, max 8 Gigabit or 10G ports
per group
2. Support following load sharing mechanism
- Source MAC
802.3ad Link
- Destination MAC R1.00
Aggregation
- Source MAC + Destination MAC
- Source IP
- Destination IP
- Source IP + Destination IP
1. Support Mirroring for Tx/Rx/Both
2. Mirroring support following mode
R1.00
- One-to-one mode
Mirroring - Many-to-one mode
- Per flow mode R2.00
- RSPAN R2.50
E-RPS (Ethernet
Best case supports 50ms recovery time in a 16-node ring
Ring Protection R3.00
structure with the circumference less than 1,200 Km
Switching)
Support tunnels for the following protocols across the service
provider's networks
L2 Protocol
- GVRP R2.50
Tunneling
- STP
- Cisco CDP
VLAN
R1.00
802.1Q
Support 802.1Q 2005 edition R3.00
R1.00
1. Be able to configure the untagged port of different protocols on
same physical port
802.1v
2. Be able to configure 802.1Q and 802.1v untagged port on R2.00
same physical port
3. Support multiple VLANs for each protocol
1. Total 4K VLAN groups;
VLAN Group 2. Max. 4K static/ 255 dynamic VLAN groups; R1.00
3. Configuable vid from 1~4094
GVRP R1.00
Double VLAN (Q 1. Port-based Q in Q R2.00
9/21
in Q) 2. Add SVLAN tag to either untagged or single tagged packets
and generate double tagged packets
3. Support Selective Q-in-Q. Add SVLAN tag based on
- PVID (for untagged packets only)
- CVLAN tag R2.50
4. Support untagged / single tagged / double tagged at same
physical port
5. Per port Configurable SVLAN TPID
6. Support up to x SVLAN TPID ( Per port & per system)
MAC-based VLAN Support 1024 entries R2.50
1. Support IGMP v1 & v2 R2.00
2. Support IGMP v3 R2.50
1. Support ISM VLAN when device was stacking
2. Support untagged source port.
3. Support the modification of ISM VLAN's priority level for better
traffic control
ISM VLAN
4. Support the configuration of two ISM VLAN source ports on the
switch. When working with STP, it will allow the forwarding of R3.00
multicast stream using backup link in case the primary link
goes down.
5. Support “source_network_check” function to be compatible
with MVR
Private VLAN R3.00
Subnet-based
R3.00
VLAN
Voice-VLAN R3.00
L3 Features
Support 64 IP interfaces R1.00
IP Interface
Enlarge the maximum number of IP interface to 256 R2.00
Multiple IP 5 IP interface per VLAN R1.00
interface per
Enlarge the max number of IP interface per VLAN to 256 R2.00
VLAN
VRRP RFC 2338 R1.00
IPv6 Ready Phase
IPv6 Ready Logo Phase 1 compliant R2.00
1
IPv6 Ready Phase
IPv6 Ready Logo Phase 2 compliant R2.50
2
Support following tunnel type
- Static RFC2529,
IPv6 Tunneling - GRE RFC3053, R3.00
- 6to4 RFC3056
- ISATAP
1. Support ARP Proxy between different subnets
ARP Proxy RFC1072 R2.50
2. Support Local ARP Proxy in the same subnet
Gratuitous ARP R2.40
Loopback
R3.00
Interface
Null Interface R3.00
L3 Routing
1. Total 12K routing entries shared by IPv4/6
Routing Table Size - Max 12K entries for IPv4 dynamic route R1.00
- Max 6K entries for IPv6 dynamic route
10/21
1. Total 8K L3 H/W forwarding entries shared by IPv4/v6
L3 Forwarding
- Max 8K IPv4 entries R1.00
Table Size
- Max 4K IPv6 entries
1. Total 256 entries shared by IPv4/v6
- Max 256 IPv4 entries
Static Route - Max 128 IPv6 entries R1.00
2. Floating(secondary) static route
3. Equal Cost / Weighted Cost multi-path route
R1.00
Default Route 1. Support secondary default route
R2.00
2. Support Equal Cost / Weighted Cost multi-path route
Policy Based
Based on ACL R1.00
Route
RIP Support RIP v1/v2 R1.00
RIPng(IPv6) R3.00
1. OSPF v2
2. OSPF Passive Interface
R1.00
3. OSPF NSSA (Not So Stubby Area)
4. Support 4 OSPF areas
5. OSPF Equal Cost Multi-Path route R2.00
6. Support 512 OSPF Equal Cost Multi-Path routes, up to 4 paths
R2.50
OSPF per destination.
7. Support OSPF announcement via loopback interface
8. Support OSPF v3(IPv6 routing)
9. Support point-to-point function that uses unicast Hello packets
instead of multicast packets R3.00
10. Enlarge OSPF area to 16
11. Support the advertisement of default route into OSPF without
the need to manually redistribute static route
BGP Support Text/MD5 Authentication R3.00
IP Directed
Support enable/disable of IP directed-broadcast function R3.00
Broadcast
1. Support both Equal Cost (EC) and Weighted Cost (WC)
Multi Path Routing R2.00
2. Max 32 static multi path routes, 4 paths per destination
L3 Multicasting
2K Multicast Groups both static multicast groups and dynamic
Multicast table multicast groups share these entries.
R1.00
size - Max 64 static multicast groups
- Max 2K dynamic multicast groups
IGMP v1/v2/v3 R1.00
DVMRP v3 R1.00
PIM DM Support IPv4 R1.00
PIM SM Support IPv4 R2.00
PIM-SSM R3.00
PIM
Sparse-Dense R2.40
Mode
Multicast
Hardware packet replication up to 32 VLAN per port R1.00
Duplication
Static IP Multicast
R2.50
Route
Per port limited IP 1. Only for control packet R1.00
multicast address 2. Enlarge port-based limited IP multicast address range to 30
R3.00
range entries and support up to 512 entries per device
11/21
QoS(Quality of Service)
802.1p support R1.00
Number of
8 Queues per port R1.00
Queues
Support following mode
Queue handling - Strict R1.00
- Weighted Round Robin(WRR)
Be able to classify packets according to follow contents:
- 802.1p priority
- VLAN
- MAC address
- Ether type
- IP address R1.00
Class of Service
- DSCP
- Protocol type
- TCP/UDP port number
- IPv6 Traffic Class
- IPv6 flow label
- User defined packet content R2.00
1. Support following actions for flows
- Remark 802.1p priority tag
R1.00
- Remark TOS/DSCP tag
QoS Flow Actions
- Bandwidth Control
2. Committed Information Rate(CIR)
R2.00
- Minimum granularity 1Kbps.
1. Support Port and Flow based bandwidth control
Bandwidth Control R1.00
2. Minimum granularity 64Kbps
ACL(Access Control List)
Maximum
Max 14 profiles, 1792 rules. R1.00
Mask/Profiles
Basic ACL policy support following packet contents:
- 802.1p priority
- VLAN
- MAC address
- Ether type
- IP address R1.00
Basic ACL Policy
- DSCP
- Protocol type
- TCP/UDP port number
- IPv6 Traffic Class
- IPv6 flow label
- User defined packet content R2.00
Time Based ACL R1.00
ACL Statistic R2.00
CPU interface
R1.00
filtering
Security
1. Support SSH v1, v2
R1.00
SSH v2 2. Support IPv4/v6 access
Support user selectable port number other than default port 22 R3.00
1. Support v1/v2/v3
SSL R1.00
2. Support IPv4/v6 access
1. Support 16 MACs per port R1.00
Port Security
2. Enlarge to 64 MACs per port R3.00
12/21
1. Allow specifying the threshold in terms of pkt/s for per port
2. Allow specifying when broadcast / multicast / DLF traffic hit the
Broadcast/Multica
definable threshold, switch will disable the port. Only after the
st/Unicast Storm R1.00
broadcast/ multicast traffic fall below the definable threshold,
Control
the port will be activated again
3. Min granularity: 1pkt/s
Traffic
R1.00
Segmentation
1. System will send out trap and log when CPU utilization hit the
D-Link Safeguard definable threshold
R1.00
Engine 2. Protect CPU from Broadcast / Multicast / Unicast flooding
3. Protect CPU from protocol control packets attack
BPDU Attack
R3.00
Protection
ARP Spoofing
R3.00
Prevention
1. IMPB v3.4
2. Support ARP/ACL mode
3. ARP mode (with loose/strict option) for ARP packet inspection
R1.00
- support 500 entries
IP-MAC-Port 4. ACL mode for IP packet inspection (able to function with ARP
Binding mode)
5. IMPB v3.6
6. Support DHCP snooping to dynamically collect IP-Mac-Port R2.50
info (option to limit the number of clients per port, default is 5.)
7. Support IMPB debug command in CLI mode R3.00
DHCP Server
Support port shutdown and log/trap triggering R2.50
Screening
AAA
1. Support Port-based Access Control
2. Support MAC-based Access Control
- Maximum 16 MACs per port
3. Be able to configure 802.1X packet transparent / filtering when R1.00
802.1X is disable
4. Support EAP, OTP
5. Support MD5 authentication
6. Support Dynamic VLAN Assignment
7. Support 802.1x session timeout attribute
8. Can assign ingress/egress bandwidth control and 802.1p R2.50
default priority to the port according to the attributes dispatched
802.1X from Radius Server.
9. Support "force logoff” for user session
10.Support "802.1X BPDU forwarding" function
11.Support "RFC3580 tag1/2 format” to be compatible with Cisco
ACS server
12.Support 802.1X extension: "Assign user priority/bandwidth
based on MAC” R3.00
13.Support the assignment of target VLAN without enabling guest
VLAN
14.Support authentication failover (Radius server failover to local
user Database)
15.Support ACL assignment after successful authentication
Web-based 1. Support Dynamic VLAN assignment R2.00
13/21
Access Control 2. support dynamic 802.1p, rate-limiting, assignment after
successful authentication (with both Port-based and Host-based
WAC) R3.00
3. Support Radius server failover to local user Database
4. Support ACL assignment after successful authentication
1. Support Dynamic VLAN assignment R2.50
2. support dynamic 802.1p, rate-limiting, assignment after
MAC-based successful authentication (with both Port-based and
Access Control Host-based WAC) R3.00
3. Support Radius server failover to local user Database
4. Support ACL assignment after successful authentication
1. Support NTT and OKI authentication server
2. Support Dynamic VLAN assignment
JWAC R3.00
3. Support Radius server failover to local user Database
4. Support ACL assignment after successful authentication
1. Support Microsoft NAP function via 802.1X guest VLAN R1.00
Microsoft® NAP
2. Support 802.1X NAP
Support R2.50
3. Support DHCP NAP
Port-based guest VLAN R1.00
Support following authentication method
R2.00
Guest VLAN - 802.1X
- Web-based Access Control R2.50
- MAC-based Access Control R2.50
Support 3 level user account
User Account
- User (Read only)
Privilege for Mgm R2.40
- Operator (Read / Write, without user account modification)
Access
- Administrator (Read / Write)
RADIUS Auth. for RFC2138,
R1.00
Mgmt Access RFC2139
TACACS+ Auth.
RFC1492 R1.00
for Mgmt Access
Support Zone
Defense R2.00
technology
When RADIUS server fails, switch to local database for
Database failover authentication R3.00
- Support WAC, JWAC, 802.1X, MAC, Compound authentication
1. Support Network accounting (for 802.1x user)
RADIUS
2. Support EXEC accounting (for Mgm Access) R3.00
Accounting
3. Support System accounting (for Mgm Access)
1. Can enable IMPB, 802.1X, JWAC on the same port
2. Support following authentication criteria:
Compound
- Any: must pass one of IMPB, 802.1X or WAC(JWAC) R3.00
Authentication
- Dot1x_IMPB: must pass 802.1X & IMPB
- IMPB_JWAC: must pass IMPB & WAC(JWAC)
Management
Single IP
Support D-Link SIM v1.6 R1.00
Management
LLDP R2.40
14/21
1. Compatible with following browsers
- IE5.5 or later version
- Netscape
Web-based GUI RFC2068 R1.00
- Mozilla
- Firefox
2. Support IPv4/v6
CLI R1.00
Web GUI Traffic
R1.00
Monitoring
Web MAC
R1.00
address Browsing
ZModem R1.00
Telnet Server Support IPv4/v6 RFC854 R1.00
Telnet Client Support IPv4/v6 R2.50
TFTP client RFC783 R1.00
RFC1157,
RFC1901,
SNMP v1/v2c/v3 RFC1908, R1.00
RFC2570,
RFC2575
SNMP Trap support following events
- New MAC Notification
- Power and fan errors
- Cold / Hot start-up
- Link state change R1.00
SNMP Trap - STP state change
- SNMP authentication failure
- Mgm access violation
- Port Security violation
- Fan status R2.5
- Firmware upgrade via SNMP is finished R3.00
RFC3164,
System Log R1.00
RFC3195
RMON v1 Support 4 groups RFC2819 R1.00
RMON v2 Support Probeconfig group R1.00
1. Support Port-based flow sampler and counter poller
sFlow RFC3176 R2.00
2. Support max 256 leading bytes for flow sampling
BootP/DHCP RFC951,
R1.00
client RFC1542
Support DHCPv6 client R3.00
DHCP
R1.00
Auto-configuration
DHCP Server R2.00
1. Support DHCP relay option 82 R1.00
2. Option to select primary or secondary relay IP interface R2.40
DHCP relay 3. Support DHCP relay option 60
4. Support DHCP relay option 61 R3.00
5. DHCPv6 relay agent
RFC3164,
System Log R1.00
RFC3195
Trap/ Alarm/ Log Allow to divide the severity of logs into 3 levels, and config to
R1.00
Severity Control trigger logging only for certain level of logs specify what 3 levels
Multiple Image R1.00
15/21
Multiple
R1.00
Configuration
Flash file system R1.00
Port Description R1.00
Editable Login
R1.00
Banner
Editable System
R1.00
Prompt
CPU Monitoring Allow monitoring the utilization of CPU via Web/ CLI/ SNMP R1.00
0.0.0.0 IP Setting IP 0.0.0.0 configurable R1.00
Password
R3.00
Recovery
Password
R3.00
Encryption
SNTP Time Setting R1.00
Debug Command Support “Show tech support” like Cisco R3.00
1. Support 4 trusted hosts R1.00
Trusted Host
2. Extend trusted host numbers to 10 R2.50
MTU Allow the ability to modify MTU settings RFC1191 R2.50
OAM
Cable Diagnostics Support cable diagnostic function to check the status of
R3.00
connected RJ-45 cables.
802.3ah Support 802.3ah link layer remote loopback and discovery R3.00
16/21
1. Support 802.1ag
2. Support customer and operator/intra carrier maintenance
domain levels
3. Configurable maintenance level. The default customer level is 5
and the default operator level is 2
4. Support up to 256 MIPs and 128 MEPs at the same time
5. Support following functions for customer levels:
- Per port and per VLAN basis MIP and MEP
- LinkTrace and loopback reply for each MIP
- Loopback Message (LBM) function that can generate LBM
toward broadband access network
- Loopback reply (LBR) function towards its peer MEP(s), in
response to a unicast or multicast LBM
6. Support following functions for operator levels:
- Per port and per VLAN basis MIP and MEP
- Linktrace and loopback reply for each MIP
- Be able to receive a LBM from its peer MEPs and initiate the
Connectivity Fault associated LBR, for the MEP on the network interface
Management - Be able to receive a LinkTrace Message (LTM) from its peer R3.00
(CFM) MEP and initiate the associated LinkTrace Reply (LTR) for the
MEP on the network interface
- Be able to receive a Continuity Check Message (CCM) from
its peer MEPs and initiate the CCM, for the MEP on the network
interface
- Be able to initiate the LBM, LTM and CCM on a per-network
interface/per-VLAN basis
7. Support minimum 10ms or 100ms CCM packet transmission
8. Support user defined LBM payload with MTU up to 1,500 bytes
9. Support show function for
- MIPCCM detail information
- Packet statistics counters
- Sender ID TLV in all PDUs
- Port status TLV & interface status TLV CCM PDUs
10. Support H/W or S/W based CCM transmission
11. Be able to configure 1p priority of CFM (CCM, LTM, LBM)
independently
12. Be able to enable/disable MIP LTM reply
1. Comply with SFF-8472 real time access to optical transceiver
operating parameters
2. Support configurable warning and auto shut down threshold for
Optical following events
Transceiver Digital - Internally measured transceiver temperature
R3.00
Diagnostic - Internally measured transceiver supply voltage
Monitoring (DDM) - Measured TX bias current in uA
- Measured TX output power in mW
- Measured RX received optical power in mW
3. Support trap/log for both thresholds
Cable Length
R3.00
detection
MIB
MIBII RFC1213 R1.00
Bridge MIB RFC1493 R1.00
SNMPv2 MIB RFC1907 R1.00
RFC1757,
RMON MIB R1.00
RFC2819
17/21
RMONv2 MIB RFC2021 R1.00
RFC1643,
Ether-like MIB RFC2358, R1.00
RFC2665
802.3 MAU MIB RFC 2668 R1.00
802.1p MIB RFC2674 R1.00
RFC2233,
IF MIB R2.00
RFC2863
RADIUS
Authentication RFC2618 R1.00
Client MIB
IGMPv3 MIB R1.00
RIPv2 MIB RFC1724 R1.00
OSPFv2MIB RFC1850 R1.00
IP Forwarding
RFC2096 R1.00
Table MIB(CIDR)
VRRP MIB RFC2787 R1.00
IPv4 Multicast
RFC2932 R1.00
Routing MIB
PIM MIB for IPv4 RFC2934 R1.00
RADIUS
Accounting Client RFC2620 R1.00
MIB
Ping MIB R3.00
Trace out MIB R3.00
L2 Specific MIB R1.00
L3 Specific MIB R1.00
Private MIB R1.00
Entity MIB RFC2737 R2.50
3. Mechanism & ID Design
3.1 Name Plate Design
DGS-3612
DGS-3612G
DGS-3627
DGS-3627G
18/21
DGS-3650
3.2 Rear Panel Design
DGS-3612
DGS-3612G
DGS-3627
DGS-3627G
DGS-3650
3.3LED Indicator
Location LED Indicative Color Status Description
Solid Light Power On
Power Green
Light off Power Off
Solid Light Console on
Console Green
Per Device Light off Console off
Solid Light RPS in using
RPS Green
Light off RPS off
7-Segment LED Green Capable 1-12 To show the stacking of the switch
19/21
1-12: To indicate the stacking of the switch
E: Error was found during system self-test
H: When device was assigned as the stacking
Capable 1-12, H, master
h, E, G (R3.00) h: When device was selected to be the backup
master
G: When Safeguard Engine entering the
exhausted mode.
When there is a secure connection (or link) to
Solid Light
Ethernet device at any of the ports.
LED Per
Link/Act Green When there is reception or transmission (i.e.
SFP Port Blinking
Activity--Act) of data occurring at a port.
Light off No link
When there is a secure connection (or link) to
Solid Light
1000Mbps Ethernet device at any of the ports.
Green
When there is reception or transmission (i.e.
Blinking
LED Per Activity--Act) of data occurring at a port.
Link/Act/Speed
10/100/1000 When there is a secure connection (or link) to
Mode Orange Solid Light
Mbps Port 10/100Mbps Ethernet device at any of the ports.
When there is reception or transmission (i.e.
Orange Blinking
Activity--Act) of data occurring at a port.
Off Light off No link
When there is a secure connection (or link) to
Solid Light
LED Per Ethernet device at any of the ports.
10G Open Link/Act Green When there is reception or transmission (i.e.
Blinking
Slot Activity--Act) of data occurring at a port.
Light off No link
4 Physical & Environment
4.1 AC input
- 100-240 VAC, 50/60Hz
- Internal universal power supply
4.2 Operation Temperature
For DGS3612G and DGS3627
- 0-45°C
For DGS3612,3627G and DGS3650
- 0-40°C
4.3 Storage Temperature
- 40-70°C
4.4 Humidity
- Operation: 10%-90% RH
- Storage: 5% ~ 90% RH
4.5 Acoustic
- DGS-3612: 95% reduction, 0.5 period, 30% reduction, 25 periods
- Harmonics: EN 61000-3-2/IEC 61000-3-2
- Flicker: EN 61000-3-3/IEC 61000-3-3
21/21