DWS-4026EOL EOS

בקר אלחוטי משולב לניהול עד 256 נקודות גישה אלחוטיות בתקן N, עד 64 לכל בקר, כולל אבטחה מקיפה, פורטל ארגוני למשתמשים ואורחים וניטור הרשת האלחוטית

תאור

D-Link DWS-4026 is D-Link’s next generation Unified Wired/Wireless Gigabit Switch with an array of advanced features and 802.11n support. With the ability to manage up to 64 DWL-8600AP wireless Access Points by itself and up to 256 DWL-8600APs in a Switch Cluster, the D-Link DWS-4026 is a full-featured and cost-effective mobility solution for mid-to large enterprises and service providers. Extremely versatile and flexible, the DWS-4026 can be deployed as a Wireless Controller in the core network or as a L2+ PoE Gigabit Switch at the edge depending on the requirement. By centralising WLAN configuration and management functions, D-Link DWS-4026 enables network administrators to have control, security, redundancy, and reliability needed to scale and manage their wireless networks easily and efficiently.

Key Features

  • Flexible deployment, either as Wireless Controller in the core network or as a L2+ PoE Gigabit Switch at the edge
  • Unified wired/wireless network management with PoE on every port
  • 2 open slots for optional 10-Gigabit modules
  • All the features of a Layer2+ managed switch
  • Fast roaming across physical APs and logical IP subnets, ideal for VoWLAN deployments
  • Automatic voice QoS
  • Load balancing across Aps
  • Wireless Intrusion Detection System (WIDS)Rogue AP Detection & classification

Adaptable Wireless
Most of the current Wireless LAN controllers’ architecture requires wireless traffic to return to the controller for centralised processing, causing unnecessary traffic delay. The D-Link DWS-4026 offers network administrators additional options: depending on the wireless application, wireless traffic can either be tunneled back to the switch for better security control, or locally forwarded at the Access Point for optimal performance. This device offers administrators maximised flexibility with options to tunnel client traffic to the switch for centralised security control, and forward VoIP traffic directly from the access point for optimal performance.

Comprehensive Wired/Wireless Security
The D-Link DWS-4026 offers a state-of-the-art Wireless Intrusion Detection System (WIDS), which empowers network administrators to detect rogue Access Points and rogue clients as well as anticipate wireless threats, preventing them from causing damage to the network. With WIDS, administrators can activate various threat detections and use RF scans to sweep the entire wireless network for any possible security breach in advance. Other wireless security features include WPA/WPA2 Enterprise, 802.11i, Captive Portal and MAC Authentication.

On the wired side, the D-Link DWS-4026 utilises Dynamic ARP Inspection (DAI) and DHCP Snooping to ensure maximum security. Together, DAI and DHCP Snooping will prevent even the most sophisticated attacks such as man-in-the-middle and ARP poisoning. Along with other advanced security features such as 802.1X Access Control, Denial-of-Service Protection, Broadcast Storm Control and Protected Port, the D-Link DWS-4026 provides robust and centralised security, ensuring maximum network reliability.

Seamless Mobility

Wireless clients can enjoy seamless and uninterrupted roaming from AP to AP managed by a D-Link DWS-4026 even if they are not in the same subnet. Because the D-Link DWS-4026 employs various mechanisms such as pre-authentication and key-caching, wireless users can freely “roam” the entire network without needing to re-authenticate. The additional Fast Roaming feature results in disruption-free, reliable wireless connectivity crucial for mobile applications such as Wi-Fi IP Phones and wireless PDAs. Furthermore, the D-Link DWS-4026 supports advanced “AP-AP Tunneling”, which is used to support L3 roaming for wireless clients without forwarding any data traffic to the Unified Switch. This can help to significantly reduce network traffic and save bandwidth.

Voice-Optimised Quality of Service (QoS)

The D-Link DWS-4026 is specifically designed and optimised for Voice over Wireless traffic with features such as Auto-VoIP and Voice VLAN. The Auto-VoIP feature explicitly matches VoIP streams and provides them with a better class-of-service than ordinary traffic.

These VoIP streams include the popular call-control protocols such as SIP, H.323 and SCCP. Voice VLAN enables the switch ports to carry voice traffic with defined priority, ensuring that the sound quality of an IP phone will be safeguarded from deteriorating when data traffic on the port is high. The D-Link DWS-4026’s Voice QoS capability enables administrators to maintain the integrity and priority of the most time-sensitive traffic.
In addition, the D-Link DWS-4026 supports traffic shaping, which helps to smooth out temporary traffic bursts over time so that the transmitted traffic rate is bounded. Other advanced QoS features include per-flow bandwidth control, minimum bandwidth guarantee and 802.1p CoS all help to keep the network traffic in a predictable manner.

Network Resiliency
The D-Link DWS-4026 offers a “self-healing” network capability to increase the resiliency of the entire wireless network. To make up for a sudden RF signal vacuum created by any “dead” AP (AP with DC power failure, for example), the D-Link DWS-4026 automatically increases the transmit output power of the neighboring APs to expand the RF coverage, thereby “healing” the network. Also, to ensure continuous connection for current clients, the D-Link DWS-4026 performs load balancing across access points when network traffic reaches a certain threshold by forcing additional clients to associate with other access points. Through self-healing network and AP load lancing, the D-Link DWS-4026 can effectively manage the wireless bandwidth, optimise WLAN traffic and ensure maximum RF coverage.

Maximised Flexibility
In addition to all its wireless capabilities, the D-Link DWS-4026 also excels as an advanced L2+ PoE Switch. Complete with dynamic routing using RIPv1/v2, ACL security, multi-layer QoS, comprehensive VLAN support, IGMP/MLD Snooping as well as dual 10-Gigabit uplink support, the D-Link DWS-4026 truly enables network administrators to integrate their enterprise class wireless network with their wired infrastructure. Businesses contemplating upgrading their current wired or wireless network can deploy the D-Link DWS-4026 to take advantage of its dual-role flexibility.

Simplified Management
Multiple D-Link DWS-4026s can form a Switch Cluster, which enables network administrators to manage and configure all switches from one single “Cluster Master.” In addition, the Switch Cluster also manages information of all the Access Points as well as their associated clients. This helps to significantly simplify management and reduce maintenance efforts as the network scales up.

 

מאפיינים כללים

WLAN control functions
• Up to 64 access points connected to the switch
• Up to 256 access points in a cluster
• Up to 2048 wireless clients (1024 users when using tunneling, 2048 users, if tunneling is not used)

Roaming
• Fast Roaming
• Roaming between switches and access points connected to one switch
• Intra - and Inter-network roaming
• Tunneling between access points

Access control and bandwidth
• Up to 32 SSID per access point (16 SSID to the radio frequency range)
• Load balancing between access points based on number of users or access point

Controlled access points
• DWL-8600AP

Management of access points
• Automatic detection of access points
• Remote reboot access points
• Monitoring of access points: the list of managed access points, unauthorized and unauthenticated access points
• Monitoring clients: a list of clients associated with each managed access point
• Monitoring customers Ad-hoc
• Authentication of access points using a local database or an external RADIUS server
• Centralized management channels / security policies
• Visual management tools access points (Up to 16 jpg-files)
• Support for a unified access point (DWL-8600AP): Managed / Offline

Functions of WLAN Security
• Wireless Intrusion Detection & Prevention System (WIDS)
• Minimize unauthorized access points
• Classification of real and unauthorized access points based on MAC addresses
• WPA Personal / Enterprise
• WPA2 Personal / Enterprise
• 64/128/152-bit WEP-encryption
• Classification of wireless stations and access points based on the channel, MAC-addresses, SSID, time
• Support for encryption types:
  -WEP
  -WPA
  -Dynamic WEP
  -TKIP
  -AES-CCMP
  -EAP-FAST
  -EAP-TLS
  -EAP-TTLS
  -EAP-MD5
  -PEAP-GTC
  -PEAP-MS-CHAPv2
  -PEAP-TLS
• Adaptive portal
• Authentication based on MAC addresses
• Insulation Station

Layer 2 features
• Size MAC-address table: 8K entries
• IGMP Snooping: 1K multicast groups
• MLD Snooping
• 8021.D Spanning Tree
• 802.1w Rapid Spanning Tree
• 802.1s Multiple Spanning Tree
• Link Aggregation 802.3ad: up to 32 groups, up to 8 ports per
• 802.1ab LLDP
• LLDP-MED
• One-to-One Port Mirroring
• Many-to-One Port Mirroring
• Size Jumbo-frames: up to 9Kb

VLAN
• 802.1Q VLAN Tagging
• 802.1V
• Group VLAN: up to 3965 entries
• VLAN-based subnetworks
• VLAN MAC-based address
• GVRP
• Double VLAN
• Voice VLAN

Level 3 functions
• Static IPv4 marshrutizatizatsiya
• Routing table size: up to 128 static routes
• Floating static routes
• VRRP
• Proxy ARP
• RIPv1/v2

Quality of Service (QoS)
• Priority queue 802.1p (8 queues per port)
• CoS on the basis of: a switch port, VLAN, DSCP, port TCP / UDP, TOS, MAC-source address, IP-address of the source
• Auto-VoIP
• The minimum guarantee bandwidth for all
• Traffic shaping per port
• Bandwidth management based on the flow

ACL (Access Control List)
• ACL based on:
  - Switch port
  - MAC-address
  - Priority queues 802.1p
  - VLAN
  - Ethertype
  - DSCP
  - IP-address
  - Protocol type
  - Port
  - TCP / UDP

LAN security functions
• RADIUS authentication for administrative access
• TACACS+ authentication for administrative access
• SSH v1, v2
• SSL v3, TLS v1
• Function Port Security: MAC-20 addresses per port, a notice in case of a function
• MAC-address filtering
• Access control 802.1x port-based and Guest VLAN
• Protection against DoS attacks
• Dynamic ARP Inspection (DAI)
• DHCP Snooping
• Broadcast Storm Control: step 1% of the speed channel
• Protected Port
• DHCP-filtering

Management methods
• Web-interface
• Switch Clustering
• Account RADIUS
• CLI
• Server Telnet: up to 5 sessions
• Telnet Client
• TFTP client
• SNMP v1, v2c, v3
• SFlow
• Multiple configuration files
• Support for two copies of the Software (Dual Images)
• RMON v1: 4 Groups (Statistics (Stats), History (History), Alarms (Notices), Events (Event))
• Client BOOTP / DHCP
• DHCP server
• DHCP Relay
• SYSLOG
• Port Description

Device Interfaces
• 24 10/100/1000BASE-T ports with support for PoE 802.3af
• 4 combo SFP ports
• Console RS-232 port
• 2 open slots for additional modules with 10 Gigabit

Reserve power supply
• Connector for power supply DPS-600

Power over Ethernet
• Standard: 802.3af
• Output power per port: 15.4W
• Total power output: 370 W
• Auto Port at a value of current above 350mA

Performance
• Switching matrix 88 Gb / s
• Max. packet rate: 65,47 Mpps
• Transmission Method: Store and Forward
• Buffer packets: 750 KB

Flow Control
• 802.3x Flow Control in full duplex mode
• The method of "back pressure" in half-duplex mode
• HOL Blocking Prevention

Additional uplink-port 10GE modules
• DEM-410X Module 1 slot 10GE XFP (For connection to a fiber backbone)
• DEM-410CX module 1-port 10GE CX4 (for stacking switches)

Additional transceivers XFP 10GE
• DEM-421XT transceiver XFP 10GBASE-SR, MMF, max. distance of 300 m, 3.3 / 5V
• DEM-422XT transceiver XFP 10GBASE-LR, SMF, max. distance to 10 km, 3.3 / 5V
• DEM-423XT transceiver XFP 10GBASE-ER, SMF, max. distance of 40 km, 3.3 / 5V

Diagnostic Lights
• On the device: Power, Console, RPS
• For the port 10/100/1000BASE-T: Link / Activity / Speed, PoE
• For Slot SFP: Link / Activity
• For the slot 10 Gigabit: Link / Activity

תקנים

הורדות

איורים

DWS-4026/Ax
מראה מקדימה
מראה מאחורה

דף מידע

ראה גם