All of the Ethernet ports of the DGS-3000 Series support 6kV surge/lightning protection. This feature protects the switch from power surges due to lightning or improper electrical wiring when the Ethernet cables are exposed in open spaces, such as in old buildings. The switch also provides an additional power connector for connection to D-Link’s DPS-200 Redundant Power Supply, or a stable, protected 12VDC backup power source in case of a main power failure. For Ethernet link fail-over, the DGS-3000 Series supports 802.1D Spanning Tree Protocol (STP), 802.1w Rapid Spanning Tree Protocol (RSTP), and 802.1s Multiple Spanning Tree Protocol (MSTP), to allow automatic backup of bridge paths. Using these features, the transmission and reception of frames can be guaranteed even during a network failure. For mission critical environments, the switches also support ITU-I G.8032 Ethernet Ring Protection Switching (ERPS); traffic can be rerouted around the ring within 50 milliseconds, minimizing disruption to service. D-Link Loopback Detection (LBD) is a protocol-less loop detection function that prevent loop events from causing congestion in uncontrolled network segments such as unmanaged switches or customer networks. The DGS-3000 Series also support 802.1AX and 802.3ad Link Aggregation, which allows grouping of multiple ports in parallel to increase bandwidth and redundancy for high availability and load sharing in a multi-client environment.
Deliver Triple Play Services
The DGS-3000 Series features full L2 multicast functions, including IGMP/MLD snooping, fast leave, and filtering. With L2 multicast support, the switches can handle the increasingly popular IPTV service. Host-based IGMP/MLD Snooping provide service to multiple IPTV subscribers per physical interface and ISM VLAN registers multicast streams in a multicast VLAN to save bandwidth on the network backbone. The ISM VLAN profiles allow users to bind or replace the channel profiles of subscription ports quickly and easily. The DGS-3000 Series also supports IGMP authentication, which can prevent rogue IPTV subscriptions by authenticating Set Top Boxes as well as channel switching to secure Internet Service Provider (ISP) revenues.
The DGS-3000 Series also supports advanced Quality of Service (QoS) functions to help ISPs reliably deliver high-quality triple play services. Flexible packet classification can be based on various header fields or user-defined packet content to help administrators prioritize network traffic. Two-rate and single-rate Three Color Marker (trTCM/srTCM) help classify traffic streams into conforming and nonconforming groups to guarantee the minimum bandwidth for prioritized packets. The Bandwidth Control feature allows ISPs to define the upstream/downstream throughput levels for each port with granularity down to 64 kbps.
Easy Maintenance and Troubleshooting
The DGS-3000 Series features rich Operations, Administration, and Management (OAM) features to help ISPs reduce the burden of maintenance and troubleshooting. Cable diagnostics display the status of Ethernet cables and locate the position of cable errors remotely, helping providers cut on-site support costs. 802.1ag Connectivity Fault Management (CFM) provides administrators with a convenient tool to monitor and troubleshoot end-to-end service networks. This allows service providers to check connectivity, isolate network issues, and identify the affected customers. D-Link Unidirectional Link Detection (DULD) helps detect a broken one-way fiber connection, improving the stability of the fiber infrastructure in a Metropolitan Area Network.
Solid Security with High Availability
The DGS-3000 Series offers various user/device authentication features including 802.1X, Web-based Access Control (WAC)2 and MAC-based Access Control (MAC). The clientless WAC2 and MAC functions provide convenience for IT managers implementing user/device authentication into a network. It permits administrators to control security without installing client software on each network device; this is especially important for devices on which the software cannot be installed. For a greater security level, the DGS-3000 Series also supports Compound Authentication2, letting IT managers choose between multiple authentication methods for any single device. Selectable host-based authentication and authorization provides the option to finely control access by each device in the network. For advanced applications, the switches also provide RADIUS and TACACS accounting information for integration of backend services such as a billing system or advanced user/device control. In mission critical networks, the DGS-3000 Series supports strict address and interface binding function via IP-MAC-Port Binding and ARP Spoofing Prevention to protect the networks from Man-In-The-Middle or ARP Spoofing attacks.
To maintain a high availability network, the DGS-3000 Series uses D-Link Safeguard Engine to manage the CPU and ensure that your network stays up even if it is overloaded by malicious traffic caused by worms and viruses. The switches also support DHCP Screening to filter out unauthorized DHCP offerings from rogue DHCP servers or routers. Other security features such as BPDU Attack Protection, DoS Attack Prevention, and L3 Control Packet Filtering help to block leaks caused by protocol or behavioral security intrusions.
The DGS-3000 Series is IPv6 ready and supports various IPv6 functions such as MLD Snooping, WAC2, IPv6 ACL/QoS, and IMPBv6 to ensure seamless integration of next generation networks. The DGS-3000 Series also supports a IPv4/v6 dual stack function that allows the switch to act as a bridge between IPv4 and IPv6 networks. Finally, all DGS-3000 Series are certified to be IPv6 ready, which guarantees interoperability for IPv6 environments.