DWS-3024EOL EOS

בקר אלחוטי משולב לניהול עד 192 נקודות גישה אלחוטיות בתקן G עד 48 לכל בקר, כולל אבטחה מקיפה, פורטל ארגוני למשתמשים ואורחים וניטור הרשת האלחוטית

תאור

The D-Link® Unified Wired/Wireless Switching solution provides an innovative evolution in wireless LAN. Complex installations, intricate management utilities and limited scalability had previously made network administrators hesitant to deploy facility-wide wireless LAN. Now, D-Link Unified Wired/Wireless Switching architecture simplifies installation. In addition, access security, wireless throughput and network convergence is significantly enhanced. Benefactors of this Wi-Fi® innovation include IT integrators, network administrators, business end-users, government organizations, schools, hospitals, and hotspots such as convention halls, hotels and airports.

Scalable and Flexible Wireless Deployment
The centerpiece of D-Link Unified Wired/Wireless Switching lies in a scalable and flexible architecture. The Unified Switch DWS-3024 can be easily added to the customer’s existing network infrastructure and centrally manage the Access Points. Overlay Deployment protects the customer’s investment on the wired network, while providing wireless LAN capability to the entire organization. Furthermore, the Unified Switch DWS-3024 can be deployed at the network edge as a wireless controller and an L2 edge switch. This type of edge deployment is beneficial for customers looking to replace their current switches with a more robust and full-featured product. The D-Link Unified Switch DWS-3024 is designed for medium-sized to large wireless networks. This affordable solution provides flexibility and investment protection through scalable expansion and unified LAN/ WLAN deployment and easy upgrades for future technologies through Gigabit connectivity.

Adaptable Wireless Technology
The Unified Switch DWS-3024’s flexible architecture not only includes physical deployment, but also offers effective wireless traffic management capability. Data from the clients can be configured to tunnel back to the Unified Switch before reaching its destination. This approach allows for a coordinated network control and centralized security policy enforcement. Alternatively, Access Points can handle and forward wireless traffic ideally without having to go through the Unified Switch. This non-tunnel mode is especially practical in remote offices or applications that require high performance and optimized traffic flows. The flexibility offered by D-Link Adaptable Wireless technology empowers any organization to enjoy the benefits of a wireless network.

Centralized Policy Control
Profile configuration is applied to a wireless access point when it is deployed or when it is reset. Profiles dispatched from the switch to the AP include RADIUS server settings, radio configuration, SSID, VLAN, tunnel settings, and QoS configuration. Configuration is simplified because the administrator does not have to make individual settings for each AP. This enhances security because the configuration is not saved within the AP, hence it cannot be retrieved when an AP is dismounted or stolen.

Enhanced and Resilient Security
The D-Link Unified Switch DWS-3024 provides the highest levels of security for both voice and data, with support for MAC Authentication, Captive Portal, and industry standard personal/enterprise WPA/WPA2 security. WPA2 utilizes the Advanced Encryption Standard (AES), which is considered to be the most robust and secure encryption algorithm. The Unified Switch DWS-3024 also provides means to define and detect Rogue APs, preventing illegal intrusions into the internal network. Security can be pre-set and RF channels auto-adjusted for each AP, so when an AP is added or removed, the entire network does not have to be reconfigured. The switch will automatically configure the new AP with the same configuration as the previous units.

Uninterrupted Wireless Connectivity
The system maintains a centralized database of wireless user’s access information such as their MAC addresses and authentication keys. As wireless users roam around the office using wireless equipment, they may change their connection from AP to AP. By constantly monitoring the AP status, the switch can establish AP-to-AP roaming for these users without requiring them to re-establish authentication keys. This fast roaming process results in disruption-free, reliable wireless connectivity crucial for mobile applications such as Wi-Fi® IP phone and wireless PDA connection. In addition to updating information of APs managed by the same switch, the system also supports AP information updates across multiple peer switches. As a wireless user moves from one AP affiliated to a switch to another AP connected to another switch, inter-switch roaming is instantly performed across the peer switches to produce a smooth, fast wireless connection in a multi-departmental enterprise environment.

Captive Portal
Apart from the wireless encryption standards, the Unified Switch offers an additional level of security called “Captive Portal”. Captive Portal is a web-based authentication process in which the wireless clients request for access through the web browser. The AP or switch port captures HTTP/HTTPS traffic and then re-directs the client to an authentication portal. Once the username and password of the client has been authenticated by either the switch or the RADIUS server, access is granted. Captive Portal is SSID-based and supports fast roaming, making it an ideal security solution.

Automatic Channel and Power Adjustment
Normally, when adding APs to the network, system administrators select the unoccupied or least used RF channels to avoid interference with other AP and RF devices. They also set transmitter output power at a level, strong enough for RF signals to reach wireless clients, but weak enough to minimize interference with other devices’ RF signals. To simplify this process and optimize RF usage, the switch automatically adjusts the RF channels and transmitter output power of the entire system every time an AP is added to or removed from the network. This automatic adjustment can be programmed to take effect at a certain time or at specified intervals, minimizing the need for network administrator to manually intervene.

Self-Healing and Load Balancing
D-Link DWS-3024 switch offers Self-healing process and an AP load balancing features to increase the resiliency of a wireless network. To make up for a sudden RF signal vacuum created by any “dead” AP (AP with DC power failure), the switch automatically increases the transmitter output power of all the neighboring APs to expand their RF coverage, thereby “healing” the network “wound”. “Self-healing” can also be accomplished with a redundant switch, which can take over the management of the AP if and when the AP loses connection with the first switch. To ensure continuous connection for current clients, the switch performs load balancing across the access points when network traffic reaches a certain threshold, while rejecting new client-to-AP associations to avoid bandwidth overcrowding.

Unified Switch Architecture
In addition to being the core unit of the wireless switching system, the DWS-3024 switch can also function as an advanced wired device. Features such as IP routing, ACL, QoS, security features, and Gigabit/10-Gigabit fiber support, allow businesses to integrate their enterprise wireless networks with the wired network infrastructure. The DWS-3024 Unified Switch can be used to upgrade their current 10/100Mbps desktop connections to Gigabit capability. Seamlessly upgrade to an 802.11n AP with Gigabit connections in the future. The advantages include flexibility to act as wireless controllers or dedicated full-featured multi-layer LAN switches, or as dual-role devices.

Medium to Large Business Application
Capable of handling up to 48 access points, D-Link Unified Wired/Wireless Switching is suitable for deployment in either a medium or large network supporting VoIP and numerous mobile wireless applications. A network site can begin with one switch to manage a few APs or to use for mixed wired/wireless LAN purposes. When the number of APs is augmented, up to four switches in a peer-to-peer configuration can be added to form a large centralized management system capable of handling up to 192 access points in one roaming group.

Network Visualization and Management
By entering the IP address of a managed switch or into the Internet browser, administrators can view the topological map and identify the locations of the AP and the switch. The map displays AP icons and colors used to differentiate between the different RF channels used by the AP. Administrators can create individual user profiles and be informed of any rogue APs. Users’ authentication is based on profiles and not on any specific access point. As users move around within a network, their movement can be traced as they roam from one access point to another.

 

מאפיינים כללים

Device Interfaces
• 24 10/100/1000BASE-T ports with support for PoE 802.3af
• 4 combo SFP ports
• Console RS-232 port
• 2 open slots for optional modules with port 10 Gigabit1

Reserve power supply
• Connector for power supply DPS-600

Power over Ethernet
• Standard: 802.3af
• Output power per port: 15.4W
• Total power output: 370 W
• Auto Port at a value of current above 350mA


Performance
• Switching matrix 48 Gb / s
• Max. packet rate: 35,71 Mpps
• Transmission Method: Store and Forward
• Buffer packets: 750 KB

Flow Control
• 802.3x Flow Control in full duplex mode
• The method of "back pressure" in half-duplex mode

Additional uplink-port modules with 10GE1
• DEM-410X Module 1 slot 10GE XFP (For connection to a fiber-optic backbone)
• DEM-410CX module 1-port 10GE CX4 (for stacking switches)

Additional transceivers XFP 10GE1
• DEM-421XT transceiver XFP 10GBASE-SR, MMF, max. distance of 300 m, 3.3 / 5V
• DEM-422XT transceiver XFP 10GBASE-LR, SMF, max. distance to 10 km, 3.3 / 5V
• DEM-423XT transceiver XFP 10GBASE-ER, SMF, max. distance of 40 km, 3.3 / 5V

WLAN control functions
• Up to 48 access points (direct connection or through a switch LAN)
• Up to 2048 wireless users (1024 users when using tunneling, 2048 users, if tunneling is not used)

Roaming
• Fast Roaming 2
• Roaming between switches and access points connected to one switch
• Intra - and inter-subnet roaming

Access control and bandwidth
• Up to 16 SSID per access point (8 SSID to the radio frequency range)
• Load balancing between access points based on number of users or access point

Management of access points
• Automatic detection of access points
• Remote reboot access points
• Monitoring of access points: the list of managed access points, unauthorized and unauthenticated access points
• Monitoring clients: a list of clients associated with each managed access point
• Monitoring customers Ad-hoc
• Authentication of access points using a local database or an external RADIUS server
• Centralized management channels / security policies
• Automatic Channel Access Points
• Automatically adjusts the output power transmission access points

Functions of WLAN Security
• WPA Personal / Enterprise
• WPA2 Personal / Enterprise
• 64/128/152-bit WEP-encryption
• Classification of wireless stations and access points based on the channel, MAC address, SSID, time
• Classification of real and unauthorized access points based on MAC addresses
• Types of encryption: WEP, WPA, Dynamic WEP, TKIP, AES-CCMP, EAP-TLS, EAP-TTLS, EAP-MD5, PEAP-GTG, PEAP-MS-CHAPv2, PEAP-TLS
• Adaptive portal
• Authentication MAC-based
• Insulation Station

Options Level 2
• Size MAC-address table: 8K entries
• IGMP Snooping: 1K multicast groups
• Spanning Tree:
    - 8021.D Spanning Tree
    - 802.1w Rapid Spanning Tree
    - 802.1s Multiple Spanning Tree
• Link Aggregation 802.3ad:
    - Up to 32 groups
    - Up to 8 ports per
• 802.1ab LLDP
• Port mirroring:
    - One-to-One
    - Many to One
• Size Jumbo-frames: up to 9Kb

VLAN
• 802.1Q VLAN Tagging
• 802.1V
• VLAN based on MAC-address
• Double VLAN
• Group VLAN Groups: up to 3965
• VLAN-based subnetworks
• GVRP

Functions of Level 3
• Static routing IPv4
• Floating static routes
• Proxy ARP
• Routing table size: up to 128 static routes
• VRRP

QoS (Quality of Service)
• Priority queue 802.1p (8 queues per port)
• CoS on the basis of: a switch port, VLAN, DSCP, port number, TCP / UDP, TOS, MAC-addresses of the source / receiver, IP - addresses of the source / receiver
• The minimum guarantee bandwidth for all
• Traffic shaping per port

Access Control Lists (ACL)
• ACL on the basis of: a switch port, MAC-address, priority queues 802.1p, VLAN, Ethertype, DSCP, IP-address, protocol type, port, TCP / UDP

LAN security functions
• RADIUS authentication
• TACACS • Authentication
• SSH v1, v2
• SSL v3
• Function Port Security:
    - 20 MAC-addresses per port
    - Notification in case of a function
• MAC-address filtering
• Access control 802.1x port-based and Guest VLAN
• Protection against DoS attacks
• Broadcast Storm Control in the range from 0 to 255Kpps
• Protected Port
• DHCP-filtering

Management methods
• Web-interface
• Server Telnet: up to 5 sessions
• TFTP client
• Multiple configuration files
• Client BOOTP / DHCP
• SNTP
• Support for two copies of the Software (Dual Images)
• CLI
• Telnet Client
• SNMP v1, v2c, v3
• RMON v1: 4 Groups (Statistics, History, Alarms, Events)
• DHCP server
• SYSLOG

Indicators
• On the device: Power, Console, RPS
• For the port 10/100/1000BASE-T: Link / Activity / Speed, PoE
• For Slot SFP: Link / Activity
• For the slot 10GE: Link/Activity1

1.Only for DWS-3026
2.To fast roaming on a PC wireless LAN NIC (Network Interface Card) must support fast roaming.

תקנים

הורדות

איורים

DWS-3024/Ax
מראה מקדימה
מראה מאחורה

דף מידע

ראה גם