Review: xStack Switches It Up

For this look at managed switches, the CRN Test Center deployed a D-Link DGS-3627 xStack Managed 24-Port Gigabit Stackable L3 Switch in the test environment. Regardless of how powerful and feature-rich the DGS-3627 is, at heart, it's a just a switch. Connect the network cable, power it up and boom!—it's up and running. The fancy stuff is just the icing on the network cupcake.

Priced at $3209.99, the xStack DGS-3627 is a fully managed Layer 3 Gigabit Ethernet switch with support for IPv4 and IPv6 static and dynamic routing. The xStack series has advanced security features, provides network load balancing and offers multilayer quality of service and access. With SFP support and the option to add 10-Gigabit Ethernet uplinks, these switches can be used either as departmental devices or as core switches.

The list of networking and security features packed inside the DGS-3627 is extensive. For solution providers working on VoIP, streaming media and multicast content delivery such as IP videoconferencing solutions, the switch is more than capable. It supports Layer 2/3/4 quality of service, Internet Group Management Protocol) Snooping, Muliticast Listener Discovery) Snooping, 802.1 Rapid Spanning Tree, 802.1s Multiple Spanning Tree group, 802.3 Link Aggregation and 802.1Q VLAN. Advanced Layer 3 routing features are supported, such as RIP, OSPF, VRRP and floating static routes. For load balancing, specific IP addresses and protocols can be fine-tuned using per-flow bandwidth controls.

For the security-conscious, the switch's offerings include Layer 2/3/4 multilayer access control lists, 802.1x port and MAC-based authentication, user authentication via TACACS+ and RADIUS servers and the ability to integrate with D-Link NetDefend firewalls. The CPU Safeguard Engine protects the switch from broadcast, multicast and unicast flooding, commonly used in denial of service attacks. IP addresses can bind to hardware MAC addresses to prevent unauthorized devices from getting on the network.

The DGS-3627 switch offers extensive VLAN support including GARP/GVRP and 802.1Q VLAN. It also allows up to five IP addresses per VLAN. Policy-based routing, or forwarding traffic based on Layer 3/Layer 4/SA/DA, is available. Multipath routing is also supported.

Next: The Bottom Line Test Center reviewers found the switch simple to administer using the Web-based graphical interface. The DGS-3627 also has a standard command-line interface. The console can be used to configure priority queuing, VLANs, port trunk groups, port monitoring and port speeds. The Test Center particularly liked SNMP support, which sets traps to look at abnormal events. Information can also be polled. All configuration and monitoring rely on SSH and SSL to secure data transmissions under both graphical and command-line administration interfaces.

Of the 28 ports on the switch, 24 of them are 10/100/1000Base-T ports and the remaining four are combo SFP ports. As combo ports, the same numbered SFP and Base-T ports cannot be used simultaneously. If they are, the SFP port gets priority and the 1000Base-T port is inactivated. Combo ports can be used with fiber-optical transceiver cabling to uplink other switches. This form of uplinking can be used to create a gigabit link that covers a long distance. The SFP ports have auto-negotiation and support up to 2000 Mbps of throughput in full-duplex mode.

All the ports and LEDs for link/ activity/speed (for each port) and for power, console, and RPS are on the switch's front panel. There's also a female DCE RS-232 DB-9 console port on the front panel.

On the switch's rear panel, there are three open slots to add optional single-port 10-Gigabit Ethernet modules. Test Center reviewers were unable to test the modules as D-Link said they are currently on back order. The modules are IEEE 802.3ae- and 802.3ak-compliant and support only full-duplex mode.

The switch can also be stacked with any switch that supports D-Link's Single IP Management technology. The technology allows all the devices in the stack to be managed with a single IP address. Units in this virtual stack can be located anywhere on the same network domain and use the optional 10-Gigabit uplinks to move intra-stack traffic at 20Gbps full duplex.

The stacked switches are hot-swappable and the replacement switch doesn't need to be reconfigured either, since by assigning the new switch the old switch's stack number, the network continues with the same configuration.

For solution providers with customers interested in moving their IPv4 networks to IPv6, the switch provides a simple migration path. Providers in the telecom vertical can encourage customers to take advantage of the SFP ports for their fiber-to-the-building networks.

To join the company's two-tiered channel partner program, solution providers must meet some technical certification requirements and specialize in networking technology or have vertical market expertise. The company works cooperatively with partners to target prospects. Any leads that it generates are turned over to partners. D-Link leaves demand generation to its channel partners.

Solution providers have access to MDF, SPIFs, a process for registering deals and price protection plans. D-Link offers loaner and demo units, discount promotions, tiered discounts and rebates. Revenue opportunities for providers include margins, services engagements and protracted contracts.

D-Link has distribution partnerships with Ingram Micro, D&H Distributing, Tech Data and Westcon Group. The switch has a one-year manufacturer's warranty.