48 10/100/1000Base-T PoE ports + 4 10 GbE SFP+ ports L3 Stackable Managed Switch


The DGS-3620 Series xStack L3 Managed Stackable Gigabit Switches deliver great performance, flexibility, security, multi-layer QoS, and accessibility, along with redundant power solutions for SMBs and enterprises. With high Gigabit port densities, Gigabit SFP and 10-Gigabit SFP+ support, and advanced software solutions, these switches can act as either departmental access layer devices or core switches to form a multilevel network structured with backbone and centralized high-speed servers. Service providers can take advantage of the high SFP density switches to structure the cores of Fiber to the Building (FTTB) networks that are extended to the subscribers’ sites.
Enhanced Image
The DGS-3620 Series with Enhanced Image supports OAM, BGP, IPv6 dynamic routing, and tunneling which are all suitable for the service provider network.
Unparalleled Flexibility
Easily deployed and simple to manage, the DGS-3620 Series can be stacked with any switch that supports D-Link’s Single IP Management to form a multi-level network structured with backbone and centralized high-speed servers. The virtual stack can include units located anywhere on the same network domain, and uses optional 10-Gigabit uplinks to move intra-stack traffic at 20 Gbps full duplex speeds. The stack can also eliminate single point of failures, cable distance barriers, limitations of physical stacking, and the need for stack cabling.
Redundant Ring Stacking
Alternatively, depending on whether linear or fault-tolerant ring stacking is implemented, users can use a maximum of four* 10-Gigabit SFP ports to create a physical stack4. 12 units or 576 Gigabit ports can be configured for a stack using direct attach cables providing high bandwidth on the already cost-efficient DGS-3620 Series.
Security, Performance & Availability
The DGS-3620 Series provides a complete set of security features including L2/L3/L4 multi-layer Access Control Lists and 802.1X user authentication via TACACS+ and RADIUS servers. D-Link ZoneDefense technology is built-in, allowing businesses to integrate the switch stack with D-Link NetDefend firewalls to implement a complete and proactive security infrastructure.
The DGS-3620 Series offers extensive VLAN support including GVRP and 802.1Q VLAN to enhance security and performance. A robust set of L2/L3/L4 QoS/CoS solutions help ensure that critical network services such as VoIP, ERP, Intranet, and video conferencing are served with proper priority. The DGS-3620 Series provides D-Link’s Safeguard Engine to increase the switch’s reliability, serviceability, and availability to prevent malicious flooding traffic caused by worms or virus infections. Bandwidth Control can be flexibly set for each port using pre-defined thresholds to assure a committed level of service for end users. For advanced applications, flow-based bandwidth control allows easy fine-tuning of service types based on specific IP addresses or protocols.
IPv6 Technology
The DGS-3620 Series also features comprehensive IPv6 support, including IPv6 Tunnel, ICMPv6, DHCPv6, RIPng, OSPFv3, IPv4/IPv6 dual stack and more. With 10-Gigabit connectivity and IPv6 support, the DGS-3620 Series enables you to future-proof your network for cost efficiency and longevity while meeting the requirements that future IPv6-capable network devices require.
D-Link Green Technology
D-Link is striving to take the lead in developing innovative and power-saving technology that does not sacrifice operational performance or functionality. The DGS-3620 Series implements D-Link Green technology, which includes a power-saving mode, smart fan feature, reduced heat dissipation, and cable length detection. The power-saving feature automatically powers down ports that have no link or link partner, and ensures that LEDs are shut off when not needed. The Smart Fan feature allows for the built-in fans to automatically turn on only at a certain temperature, providing continuous, reliable, and eco-friendly operation of the switch.
* Available from R.2.6 firmware version.

General features

Number of Ports
• 48 x 10/100/1000Base-T PoE ports
• 4 x 10 GbE SFP+ ports
Console Port
• RJ-45 console port
Management Port
• 10/100Base-T
Alarm Port
• 1
SD Card Slot
• 1
Optional Redundant Power Supply
• DPS-700
• Switching Capacity: 176 Gbps
• Packet Forwarding Rate: 130.95 Mpps
• Packet Buffer: 2 MBytes
• MAC Address Table: 32K entries
• IPv4 Routing Table: 12K entries
• IPv6 Routing Table: 6K entries
• IPv4 Forwarding Table: 8K entries
• IPv6 Forwarding Table: 4K entries
• Jumbo Frame Size: 13 KBytes
PoE Standard
• 802.3af
• 802.3at
PoE Power Budget
• 370 W (760 W with DPS-700 RPS)
Software Features
• Physical Stacking
  - Up to 80 Gbps stacking bandwidth*
  - Up to 12 switches per stack
  - Ring/chain topology support
• Virtual Stacking
  - Up to 32 units per virtual stack
  - Supports D-Link Single IP Management
  - Up to 20 Gbps stacking bandwidth
L2 Features
• MAC address table: 32K
• Flow control
  - 802.3x Flow control
  - HOL blocking prevention
• IGMP snooping
  - IGMP v1/v2/v3 snooping
  - Supports 2K groups
  - Host-based IGMP snooping fast leave
• MLD snooping
  - MLD v1 snooping
  - Supports 2K groups
  - Host-based MLD snooping fast leave
• Spanning tree
  - 802.1D-2004 STP
  - 802.1w RSTP
  - 802.1Q-2005 MSTP
  - BPDU filtering
  - Root restriction
• Loopback detection
• 802.3ad link aggregation
• Max. 32 groups per device
  - 8 Gigabit ports or 2 10-Gigabit ports per group
• Port mirroring
  - Supports 4 mirroring groups
  - Supports one-to-one, many-to-one, flow-based, and RSPAN mirroring
• L2 protocol tunneling
• ERPS (Ethernet Ring Protection Switching)
• VLAN group
  - Max. 4K static VLAN groups
  - Max. 4K dynamic VLAN groups*
  - 802.1Q tagged VLAN
• 802.1v protocol VLAN
• Double VLAN (Q-in-Q)
  - Port-based Q-in-Q
  - Selective Q-in-Q
• MAC-based VLAN
• Surveillance VLAN*
• VLAN trunking
• Super VLAN
• Voice VLAN
• Subnet VLAN
L3 Features
• 256 IP interfaces
• Bidirectional Forwarding Detection for OSPF/VRRP*
• Loopback interface
• Proxy ARP
• Gratuitous ARP
L3 Routing
• 12K routing entries shared by IPv4/v6
  - Max. 12K IPv4 routes
  - Max. 6K IPv6 routes
• 8K L3 forwarding entries shared by IPv4/v6
  - Max. 8K IPv4 entries
  - Max. 4K IPv6 entries
• 256 static routing entries for IPv4, 128 entries for IPv6
• Supports ECMP/WCMP
• Policy-based routing
• RIP v1/v2
  - OSPF v2
  - OSPF passive interface
  - Stub/NSSA area
  - OSPF equal cost route
• 2K multicast groups
• PIM sparse-dense mode
• IGMP v1/v2/v3
QoS (Quality of Service)
• 802.1p Class of Service (CoS)
• 8 queues per port
• Queue handling
  - Strict
  - Weighted Round Robin (WRR)
  - Strict + WRR
• 802.1Qbb priority-based flow control*
• CoS based on
  - Switch port
  - 802.1p priority queue
  - MAC address
  - Ether type
  - IP address
  - DSCP
  - TCP/UDP port number
  - Protocol type
  - IPv6 traffic class
  - IPv6 flow label
  - User-defined packet content
• Supports following actions for flows:
  - Remark 802.1p priority tag
  - Remark TOS/DSCP tag
  - Bandwidth control
  - Flow statistics
  - Committed Information Rate (CIR), min. granularity 1 Kbps.
• Bandwidth control
  - Port-based (ingress/egress, min. granularity 8 Kbps)
  - Flow-based (ingress, min. granularity 8 Kbps)
• Time-based QoS
ACL (Access Control List)
• Ingress ACL: support up to 6 profiles and 256 rules per profile
• Egress ACL: support up to 4 profiles and 128 rules per profile
• ACL based on
  - 802.1p priority
  - MAC address
  - Ether type
  - IP address
  - DSCP
  - TCP/UDP port number
  - Protocol type
  - IPv6 traffic class
  - IPv6 flow label
  - User-defined packet content
• ACL statistics
• Time-based ACL
• CPU interface filtering
Green Technology
• Power saving by link status
• Power saving by cable length
• Power saving by LED shut-off
• Power saving by port shut-off
• Power saving by system hibernation
• 802.3az Energy-Efficient Ethernet* 
• SSH v2
• SSL v1/v2/v3
• Port security for up to 3328 MAC addresses for port/system/VLAN
• Broadcast/multicast/unicast storm control
• Traffic segmentation
• UDP helper
• IP-MAC-port binding
  - ARP packet inspection
  - IP packet inspection
  - DHCP snooping
  - DHCPv6 and NDP snooping
  - Supports up to 500 address binding entries per device
• D-Link safeguard engine
• DHCP server screening
• CPU interface filtering
• ARP spoofing prevention
• BPDU attack protection
• DoS attack prevention
• Unicast reverse path forwarding
• 802.1X
  - Port-based access control
  - Host-based access control
  - Dynamic VLAN assignment
• Web-based Access Control (WAC)
  - Port-based access control
  - Host-based access control
  - Dynamic VLAN assignment
• MAC-based Access Control (MAC)
  - Port-based access control
  - Host-based access control
  - Dynamic VLAN assignment
• Japan Web-based Access Control (JWAC)
  - Host-based access control
• Microsoft® NAP
  - Supports 802.1X NAP
  - Supports DHCP NAP
• Guest VLAN
• RADIUS and TACACS+ authentication for switch access
• 4-Level user account
OAM (Operations, Administration,and Maintenance)
• Cable Diagnostics
• IEEE 1588 Precision Time Protocol (PTP)
• 802.3ah Ethernet Link OAM
• 802.3ah D-Link extension: D-Link Unidirectional Link Detection (DULD)
• Web-based GUI
• Command Line Interface (CLI)
• Telnet server
• Telnet client
• TFTP client
• ZModem
• SNMP v1/v2c/v3
• SNMP traps
• System log
• RMON v1
  - Supports 1,2,3,9 groups
• RMON v2
  - Supports ProbeConfig group
• Scheduled Reboot*
• sFlow
• BootP/DHCP client
• DHCP auto-configuration
• DHCP relay
• DHCP relay option 60; 61
• DHCP relay option 82
• DHCP server
• Flash file system
• Multiple images
• Multiple configurations
• CPU monitoring
• IPv4/IPv6 DNS client
• Debug command
• ICMPv6
• DHCPv6 client
• DHCPv6 relay
• DHCPv6 server
• DHCPv6 prefix delegation
• Trusted host
• MTU setting
• Microsoft® NLB support
• Secure FTP
• FTP client*
• DHCP client option 12*
MIB Standards
• RFC1213 MIB-II
• RFC1493, 4188 bridge MIB
• RFC1907 SNMPv2 MIB
• RFC2571~2576 SNMP MIB
• RFC1271, 2819 RMON MIB
• RFC2021 RMON v2 MIB
• RFC1398, 1643, 1650, 2358, 2665 Ether-like MIB
• RFC2674, 4363 802.1p MIB
• RFC2233, 2863 IF MIB
• RFC2618 RADIUS authentication client MIB
• RFC1724 RIP v2 MIB
• RFC1850 OSPF v2 MIB
• RFC2096, 4292 IP forwarding table MIB (CIDR)
• RFC2932 IPv4 multicast routing MIB
• RFC2934 PIM MIB for IPv4
• RFC2620 RADIUS accounting client MIB
• RFC2925 ping MIB
• RFC2925 traceroute MIB
• D-Link private MIB
• RFC768 UDP
• RFC 791 IP
• RFC 792 ICMP
• RFC 793 TCP
• RFC 826 ARP
• RFC854 Telnet
• RFC951, 1542, 2131 BootP
• RFC2068, 2618 HTTP
• RFC2338 VRRP
• RFC2529, 3053, 3056 IPv6 Tunnel
• RFC2139 RADIUS Accounting
• RFC3176 sFlow
• RFC2598 DiffServ Expedited Forwarding (EF)
• RFC2460 IPv6
• RFC2461, 4861 IPv6 Neighbor Discovery (ND)
• RFC2462, 4862 IPv6 stateless address autoconfiguration
• RFC1981 IPv6 path MTU discovery
• RFC4213 IPv4/IPv6 dual stack
Enhanced Image (EI) Features
L3 Features
• IPv6 tunneling
- Static
- 6to4
L3 Routing
• RIPng (IPv6)
• OSPF v3 (IPv6)
• BGP v4
• BGP+*
• PIM-SM v6
• DVMRP v3
• 802.1ag Connectivity Fault Management (CFM)
• ITU-T Y.1731
• 6.3 kg 
• 441 x 310 x 44 mm
Power Input
• 100 to 240 V AC, 50/60 Hz
• 225,645 hours
Heat Dissipation
• 1763.3 BTU/hr
• 56.2 dB(A) maximum
Maximum Power Consumption
• 517.1 W
• Smart fan (> 40 °C (104 °F): high speed; < 35 °C (95 °F): low speed)
Operating Temperature
• 0 to 50 °C
Storage Temperature
• -40 to 70 °C
Operating Humidity
• 0% to 90% RH
Storage Humidity
• 5% to 90% RH
Surge Protection 
• 6 kV surge protection on all Ethernet access ports
Safety Certifications
• CB, cUL, LVD
• FCC Class A, CE Class A, VCCI Class A, IC, C-Tick
Third-party Certification
• IPv6 Ready Logo Phase 2
* Available from R.2.6 firmware version.


Order info

DGS-3620-52P/B1 48 10/100/1000Base-T PoE ports + 4 10 GbE SFP+ ports L3 Stackable Managed Switch


Front view
View from the right
Back view


Support Resources