D-Link DXS-3227 User Manual

DXS-3227 Layer 2+ Stackable Gigabit Wireless-Ready Switch

Advanced Switching Features:

+ Triple Optional Fiber XFP 10G Uplinking
+ Dual Optional Copper CX4 10G Uplinking
+ Up to 48Gbps Total Stacking Bandwidth
+ Physical Redundant Stacking
+ Stack Up to 16 Units Per Stack*
+ Optional Redundant Power Support
+ Up to 32 Static IP Routes
+ 802.3ad (Link Aggregation)
+ 802.1v (Protocol-based VLANs)
+ Link Aggregation (64 groups/ 8 ports)
+ 802.1p Priority (8 WRR)
+ DiffServ QoS
+ 802.1x (Port Based Authentication)
+ 4000 802.1q VLANs
+ IGMP Snooping
+ ACL L2/L3/L4
+ SNMPv1/v2/v3
+ Block against predefined DoS, Trojan,

Worm attacks

Unified Wired/Wireless:

+ 256 Wireless VLANs
+ Up to 50 APs per Switch/Stack
+ Up to 600 Simultaneous WLAN Users

per Switch/Stack
+ Supports 802.11a/b/g Standards
+ Seamless Wireless Roaming
+ Supports 10, 25, or 50 AP license
+ Industry Standard Encryption: WEP,

WPA™, WPA2™
+ Supports up to 16 SSIDs per AP
+ Centralized AP Management
+ GUI WLAN Monitoring & Logging
+ Automatic Channel Assignment
+ Dynamic WLAN Load Balancing
+ Rogue AP Detection & Containment

L2+ 24-Port Gigabit Switch with 10 Gigabit Uplinks

Overview

D-Link’s xStack 3200 Series switches are designed to
provide effortless wireless technology convergence with
traditional Layer 2 data access switching, emphasizing
on security, performance, and resiliency. Featuring
the latest stacking technology from D-Link, the
xStack DXS-3227 can stack up to 16 units*, providing
up to 400 Gigabit ports. It can stack with other D-Link
switches such as the (DXS/DWS-3250, DXS/DWS-3227P),
advocating extraordinary flexibility. It provides 24 built-in
copper Gigabit ports, including four combo SFP ports
for easy, flexible connection to fiber-based Gigabit
media. The DXS-3227 is also equipped with 2 module
slots that support 10 Gigabit Ethernet for both copper
CX-4 and fiber XFP connections, as well as one fixed
10GbE XFP port for a total switching capacity of up to
108Gbps. In addition, the DXS-3227 also supports IP
static routing, 4000 VLANs, up to 64 trunk groups, and is
‘wireless-ready’, making the DXS-3227 the most feature
rich, high capacity switching solution in its class by far.

Unified Wired/Wireless Ready

In a mixed network of wired and wireless environments,
predictable coverage and security become paramount.
The need for a switching solution capable of addressing
these needs in both the wired and wireless environment
becomes key. The DXS-3227 is capable of meeting this
demand and more. With a simple optional firmware
upgrade, the DXS-3227 transforms from a standard Layer
2 switch into an integrated wired and wireless switching
solution capable of providing powerful wireless security,
easy deployment, the ability to detect rogue access
points, and centralized management for all compatible
WLAN components. Centralized management is crucial
for wireless technologies deployed in real-time inventory,
data mining, and an array of personal electronics that
demands mobility and seamless integration such as
PDA and 3G/VOIP mobile phones. With an optional
software upgrade, the DXS-3227 provides secure,
seamless roaming between access points, ensuring
uninterrupted data and voice communication
throughout your wireless network infrastructure.

* Future release

DNA Stacking Architecture

Distributed Network Architecture (DNA) is a combination
of hardware and software that is embedded in D-Link’s
latest DXS-3200 series of xStack switches. Switches built
with DNA are easily stackable with little or no system
downtime for expansion. For example, the DXS-3200
Series switches are self-healing by quickly discovering
failures in the stack and re-routing traffic to automatically
avoid the failed device and discover the new topology.
The flexibility of DNA lets network designers choose the
right topology for connecting their devices whether it be
through a 10GbE interface or using a 1000Base-X port to
connect between wiring closets. The DXS-3200 series
switches can be used in a number of topologies such as
ring or chain stacking. When changes are made to the
stack, DNA automatically discovers the new topology
and reconfigures the system to accommodate the
changes. In the unlikely event of equipment failure, the
switches rapidly reconfigure the stack to avoid the failed
switch, resulting in extremely fast failover times and little
to no downtime. In addition, the DXS-3200 Series allows
the network administrator to maintain transparency of
system features such as Port Mirroring, VLANs, and
link aggregation across the stack. Unlike other stacking
solutions, this feature will allow an administrator to
add and remove ports from VLANs without having to
configure the VLAN on each switch and without the
added hassle of creating VLAN trunks between devices.
This also allows, through the use of port mirroring, the
ability to monitor any port throughout the stack without
having to be physically connected to the same device.
This flexibility allows for better troubleshooting, faster
configuration, and a lower risk of configuration errors.

Comprehensive Security

The DXS-3227 is equipped to handle many of today’s
emerging security vulnerabilities previously delegated to
only stand-alone firewalls. It incorporates built in ACLs
for searching out and filtering such threats as: Denial of
Service attacks, Trojan Horses, Worms, and more. Other
access rules can also be set up to prevent network,
and 802.1x authentication login. In addition, port-based
security can also be set up to protect the integrity of the

DXS-3227 Layer 2+ Stackable Gigabit Wireless-Ready Switch

L2+ 24-Port Gigabit Switch with 10 Gigabit Uplinks

network. Furthermore, the DXS-3227 protects against
attacks towards the CPU itself, and improves utilization
to meet existing network demands to maximize device
responsiveness to user configuration activities.

High Availability

The DXS-3227 supports “Shortest-Path” switching, which
improves resiliency, uptime, and network efficiency. It
also supports an optional Redundant Power Supply (DPS-

500). It includes support for 802.3ad Link Aggregation,
and 802.1w Rapid Spanning Tree for increased network
reliability and availability.

Network Management

The DXS-3227 features a variety of network management
options: console CLI, telnet, web GUI, SNMPv1/v2/v3,
and RMON. It also supports a variety of advanced traffic
management options including: Layer 3 Static Routing,
Bandwidth Control, Broadcast Storm Control, Private
VLANs, and support for IGMP Snooping. D-Link’s exclusive
DNA stacking technology is also supported, which allows
up to 16* D-Link DXS-3227 switches to be stacked together
and managed as a single unit, regardless of its physical
environment.

Advanced QoS

The DXS-3227 provides a robust and consistent set of QoS/CoS,
supporting 8 priority queues for 802.1p/ToS/DiffServ, with
classification and marking based on MAC SA/DA, IP SA/DA,
and/or TCP/UDP. It also provides extensive support for
GARP/GVRP, 802.1q, and port-based VLANs for up to 4000
groups per device.

Centralized Management

The xStack DXS-3227 is capable of centralized management
of compatible wireless access points. No longer will each
individual access point need to be configured independently.
Now your entire wireless network can be managed through
a single interface. The xStack DXS-3227 includes support
for automatic discovery of APs with real-time monitoring,
providing visibility into utilization and performance of WLAN
users and devices.

detection and containment ensure only the APs you
install are able to function on your network. AP detection
allows identification of APs into “known” and “rogue”
classifications. The switch uses the APs to continuously
scan radio channels in an attempt to identify transmissions
of unauthorized WLAN nodes facilitating notification, and
or jamming of the rogue signals.

Seamless Roaming

When a user roams between APs connected to different
broadcast domains, the users IP address is no longer
valid after the move to the new AP. This means the users
device (laptop, PDA, VoIP phone) will need to change its
IP address thus breaking the active session. With “always
connected” devices such as VoIP phones and PDA’s
this can create a huge problem. The need for a solution
to provide seamless roaming between APs on different
subnets becomes essential to maintaining active sessions
and VoIP calls.

The D-Link DXS-3227 addresses this problem by bringing
AP configurations and support directly into the switch
itself. This allows the user to move between access
points with seamless mobility. To the users PDA or VoIP
phone, the move appears as if it were between APs on a
single broadcast domain. This means the users device will
retain its VLAN membership and IP address guaranteeing
uninterrupted communication.

Inter-Switch Roaming

The xStack DXS-3227 supports roaming of wireless
stations between access points attached to different
switches. The seamless inter-switch roaming procedure
allows a station’s VLAN membership (IP subnet) and QoS
parameters to be retained upon roaming between APs
connected to multiple switches throughout the network.
Inter-Switch roaming is an extremely beneficial feature
when creating a large WLAN environment such as a
campus or multi-floor office. Inter-Switch roaming allows
the user complete freedom to roam between switches
located in different buildings or on different floors without
disconnection or need for re-authentication.

Security

The D-Link xStack DXS-3227 provides Enhanced Wireless
Security Features to ensure your data is protected from
hackers. Support for WEP, WPA and WPA2 Encryption
guarantees the privacy of your network data. Rogue AP

Technical Specifications

Product specifications

DXS-3227 L2+ Managed Wireless Ready switch with 24 10/100/1000Mbps Ports, 4 Combo SFP Ports, 1 fixed XFP interface & 2

MAC address Table

Switch Fabric

VLANs

Priority Queues 8 Queues (802.1p/TOS/DiffServ) – Strict Priority or Weighted Round Robin Queue Scheduling

Classification QoS/ACLs Based on: MAC, IP, TCP/UDP, Payload, Port, DSCP, 802.1p

Routing 32 static routes

Multicast Support

End to End Flow Control Flow Control Across Packet Processors

Link Aggregation Balancing Based on MAC SA/DA, Based on IP SA/DA

MAC Table Search Search MAC/IP to reveal source Unit/Port

IP to MAC binding Display IP to MAC bindings

Port Utilization Measure Traffic, total port capacity

Single Port Stacking Chain Topology

Trojan/DoS Attacks Prevention MAC spoofing, IP spoofing

Signature based detection Illegal TCP/ICMP packet check, protocol checker, martian address check, well known DoS virus, TCP frame with source

DXS-3227 Layer 2+ Stackable Gigabit Wireless-Ready Switch

L2+ 24-Port Gigabit Switch with 10 Gigabit Uplinks

Optional 10-Gig Copper/Fiber Uplinks

16K

108Gbps

Supports Up to 4K VLAN Groups (Port Based, 802.1Q, GARP/GVRP, 802.1v Protocol Based Q-in-Q Tagging)

IGMP snooping, Multicast TV VLAN

port 1024 syn flag ON, Server Spoof, Stacheldraht Distribution DoS Attack Client, Invasor Trojan, Back Orifice Trojan

Interface Options

RJ-45

LC With Optional Standard Small Form-Factor Pluggable (SFP) Gigabit Transceivers

CX-4

RPS

Wireless Switching

AP license

Max allowed APs

WLAN encryption

WLAN security

Rogue AP detection

Supported Roaming

802.11 support

Max Users per AP 30 WLAN simultaneous users. 600 max per switch / stack

Wireless VLANs

SSIDs

WLAN Management

10Base-T, 100Base-TX, & 1000Base-T

With optional 10Gigabit XFP transceivers

With optional 10GBASE-CX-4 Module

Redundant Power Via Optional (DPS-500)

Supports optional 10, 25 and 50 AP License

50 APs per switch or 50 APs per stack

WPA™, WPA2™, WEP (64 & 128 bit)

802.1x Authentication

Port Based & Radio Based

Intra-Switch, Inter-Band, Inter-Switch

802.11a, 802.11b, 802.11g (based on supporting AP)

256

16 concurrent SSIDs per AP

HTTP, HTTPS, Telnet, SSH, SNMP

DXS-3227 Layer 2+ Stackable Gigabit Wireless-Ready Switch

L2+ 24-Port Gigabit Switch with 10 Gigabit Uplinks

SYSLOG Events

Logging Filters

Additional Features

Connection success / failure, Station roaming / AP connection, Error rates above threshold, eEncryption errors

Errors only, all events, per station, per AP

Automatic Channel Assignment, Dynamic Load Balancing

Network Protocols and Standards

In Band & Out of Band Telnet, CLI/Console, RMON, Web-based HTTP, SNMPv1/v2/v3, Syslog, Port Mirroring, TFTP Client, BootP Client, DHCP

Client, BootP/DHCP Relay Agent, and DNS Client

IEEE 802.3 Ethernet, 802.3u Fast Ethernet, 802.3ab Gigabit Ethernet, 802.3z Gigabit Ethernet, 802.3ak 10GBASE-CX-4, 802.3ae

10GbE, 802.1d Spanning Tree, 802.1w Rapid Spanning Tree, 802.1p Priority Tags, 802.1q VLANs, 802.3ad Link Aggregation,

802.3x Flow Control, 802.1x Port-based Authentication, 802.1x MAC-based Authentication, 802.1s Multiple Spanning Tree,

802.1v protocol-based VLANs

IETF RFC 1157 SNMP, RFC 1112/2236 IGMPv1/2, RFC 1757 RMON (4 Groups), RFC 1493 Bridge MIB, RFC 1213 MIB II, RFC 793

TCP, RFC 826 ARP, RFC 854 Telnet, Diffserv

Electrical & Emissions Summary

Emissions

Power Supply 100-240VAC, 50/60 Hz Internal Universal

Power Consumption 60 Watts

CE Mark & FCC Class A

Safety Agency Certifications and Environmental

Safety

Temperature

Humidity

CE/LVD, UL Listed (UL1950)/CUL

Operating: 0° – 50° C (32° – 122° F)
Storage: -10° – 65° C (-4° – 149° F)

Operating: 10% to 85% RH, Non-Condensing
Storage: 0% to 95% RH, Non-Condensing

Physical Specifications

Dimensions (D x W x H)

Height

Weight

Warranty and Support Information

Warranty

Support

Ordering Information

Part Number

Switch

DXS-3227 Stackable Managed Layer 2+ Wireless-Ready Switch with optional 10, 25, or 50 AP license and 24 10/100/1000Mbps Ports,

DXS-3227P Stackable Managed Layer 2+ Wireless-Ready Switch with optional 10, 25, or 50 AP license and 24 10/100/1000Mbps PoE Ports,

DXS-3250 Stackable Managed Layer 2+ Wireless-Ready Switch with optional 10, 25, or 50 AP license and 48 10/100/1000Mbps Ports,

DWS-3227 Stackable Managed Layer 2+ Switch with 10 AP license bundle and 24 10/100/1000Mbps Ports, 4 Combo SFP ports, 1 fixed XFP

311.2mm x 439mm x 449mm (12.25in x 17.32in x 1.77in)

1U

4.6kg (10.14lbs)

Limited Lifetime Warranty

Free Technical Support

Description

4 Combo SFP ports, 1 fixed XFP & 2 Optional 10-Gig Copper/Fiber Uplinks

4 Combo SFP ports, 1 fixed XFP, 2 Optional 10-Gig Copper/Fiber Uplinks

4 Combo SFP ports, & 2 Optional 10-Gig Copper/Fiber Uplinks

& 2 Optional 10-Gig Copper/Fiber Uplinks

DXS-3227 Layer 2+ Stackable Gigabit Wireless-Ready Switch

L2+ 24-Port Gigabit Switch with 10 Gigabit Uplinks

DWS-3227P Stackable Managed Layer 2+ Switch with 10 AP license bundle and 24 10/100/1000Mbps PoE Ports, 4 Combo SFP ports, 1 fixed

XFP, 2 Optional 10-Gig Copper/Fiber Uplinks

DWS-3250 Stackable Managed Layer 2+ Switch with 10 AP license bundle and 48 10/100/1000Mbps Ports, 4 Combo SFP ports, & 2 Optional

10-Gig Copper/Fiber Uplinks

Access Points

DWL-2130AP

DWL-2230AP

DWL-7130AP xStack 3200 Series 802.11a/b/g Access Point

DWL-7230AP xStack 3200 Series 802.11a/b/g Access Point with 802.3af PoE

Modules

DEM-411X 1-Port 10 Gigabit Fiber Module with XFP slot

DEM-411T 1-Port 10 Gigabit 802.3ak Module with CX-4 connector

DEM-411S Stacking Kit (2 DEM-411T modules & one 0.5 Meter stacking Cable)

Transceivers

DEM-310GT Mini-GBIC/SFP 1000BASE-LX (up to 10Km)

DEM-311GT Mini-GBIC/SFP 1000BASE-SX (up to 550m)

DEM-421XT 10GBASE-SR Multi-Mode XFP (up to 300m)

DEM-422XT 10GBASE-LR Single-Mode XFP (up to 10km)

Redundant Power

DPS-500 Redundant Power Supply

DPS-800 2-Slot Redundant Power Supply unit Chassis

DPS-900 8-Slot Redundant Power Supply unit Chassis

AP License

DS-710 10 Access Point License

DS-725 25 Access Point License

DS-750 50 Access Point License

xStack 3200 Series 802.11g Access Point

xStack 3200 Series 802.11g Access Point with 802.3af PoE

* Available through future software upgrade.

D-Link Systems, Inc. 17595 Mt. Herrmann Street Fountain Valley CA 92708 www.dlink.com
©2005-2006 D-Link Corporation/D-Link Systems, Inc. All rights reserved. D-Link and the
D-Link logo are registered trademarks of D-Link Corporation or its subsidiaries in the
United States and other countries. Other trademarks or registered trademarks are the

property of their respective owners. Visit www.dlink.com for more details.