Managed 24-Port 10/100 L2+ Switch, 4 Gigabit Copper Ports + 2 Combo SFP


The DES-3528/3552 xStack series are enhanced L2+ access stackable switches designed to connect end-users in a secure SMB (small and medium size business) or enterprise network. These switches provide physical stacking* , static routing* , multicast and enhanced security, making it an ideal access layer solution. The DES-3528/3552 xStack Series can seamlessly integrate with L3 core switches to form a multi-level network structure consisting of a high-speed backbone and centralized servers.

Flexible & Cost-Effective Ethernet Stack. The DES-3528/3552 series provide the option of 24 or 48 10/100Mbps Ethernet ports and up to four Gigabit uplinks per switch. Users requiring connections to devices such as IP phones, network cameras and wireless APs can deploy the DES-3528P, which provide 24 10/100Mbps PoE ports. Eight of these PoE ports provide up to 30watts per port, while the remaining adhere to the 802.3af standard (15.4watt output per port), giving administrators the ability to connect to the 802.3af standard devices as well as the 802.3at pre-standard equipment such as the 802.11n AP. The two combo 10/100/100BASE-T SFP slots on the front panel provide flexible copper or fiber Gigabit connection. The two 10/100/1000BASE-T ports on the back panel are designed for fexible dual usage. They can be used either as stacking ports with 4Gbps bidirectional stacking bandwidth, or can simply be used as copper Gigabit uplinks. Physical stacking* capability allows administrators to add up to eight switch units per stack on a scalable expansion basis. This series offers an attractive stackable switch alternative to the expensive chassis-based solution.

Comprehensive Security. The DES-3528/3552 series provide users with the latest security features such as 802.1X Guest VLAN, MAC-based Access Control (MAC) and Web-based Access Control (WAC). 802.1X Guest VLAN is a comprehensive end-point security solution for user authentication/authorization and WAC guarantees granular network access control with a user-friendly authentication mechanism. The IP-MAC-Port Binding feature allows administrators to bind a source IP address with an associated MAC and also to define the port number to enhance user access control. And with DHCP Snooping feature, the switch automatically learns the IP/MAC pairs by snooping DHCP packets and saving them to the IMPB white list. This keeps the network secure and auditable. The D-Link Safeguard Engine identifes and prioritizes "CPU interested" packets to prevent malicious traffc from interrupting normal network fows and protects switch operation.

Enhanced Network Performance & Availability. The DES-3528/3552 series targets SMB/enterprise customers who require a high level of network security and maximum uptime. It offers Static Route*, 4K VLAN, advanced selective Q-in-Q, as well as delivering progressive QoS capability for mission-critical applications and multicast services. The switches offer superior performance and availability through the latest Spanning Tree protocol, optional redundant power, and Loopback Detection (D-Link's advanced technology for preventing loops without the presence of STP).

User-friendly & Ecosystem-friendly. The DES-3528/3552 series uses D-Link's Web GUI 2.0, an easy-to-use web interface, and confguration wizards to minimize administrators' learning curve and make deployments easier to plan and implement. Utilizing the latest generation of chipsets, the DES-3528/3552 series optimizes power consumption to reduce energy costs and contribute to a greener environment. In addition, its fanless design ensures quiet operation, ideal for deployment in open spaces.

* Physical Stacking and Static Route are planned for future releases

General features

+ 24 10/100BASE-TX Ports
+ 2 Dual Usage 10/100/1000BASE-T Stacking Ports**
+ 2 Combo 10/100/1000BASE-T Ports/SFP Slots
+ Auto-Negotiation of Network Speeds (RJ-45 Ports
+ Auto-MDI/MDIX (RJ-45 Ports)
+ Gigabit & 100BASE-FX Fiber Support On SFP
+ RS-232 Console Port

+ Internal Power Supply: AC to DC
+ Power Input: 100 to 240VAC, 0.5A (max.), 50 to 60Hz
+ Power Output (per device): 12VDC, 1.2A (max.)
+ Power Consumption: 20.5watts (max.)
+ Optional Redundant Power Supply

+ Switching Capacity: 12.8Gbps
+ Max. 64-Byte System Packet Forwarding Rate: 9.5Mpps
+ MAC Address Table: 16K

Software Features
Diagnostic LEDs

+ 10Mbps or 100Mbps Speed (per Ethernet port)
+ 10/100Mbps or 1000Mbps Speed (per Gigabit port)
+ Link/Activity (per port)
+ Power, Console, (per device)
+ RPS (per device)

+ Vir tual Stacking:
- Supports D-Link Single IP Management (SIM)
- Up to 32 units per Vir tual Stack

L2 Features
+ MAC Address Table: 16K
+ Flow Control:
- 802.3x Flow Control
- HOL Blocking Prevention
+ Jumbo Frames suppor t up to 9,216 bytes
+ Spanning Tree Protocol:
- 802.1D STP
- 802.1w RSTP
- 802.1s MSTP
- BPDU Filtering
+ Loopback Detection (LBD)
+ 802.3ad Link Aggregation:
- Max. 8 groups per device, 8 por ts per group
+ Por t Mirroring:
- One-to-one
- Many-to-one
- Flow-based Mirroring

L2 Multicasting
+ IGMP Snooping:
- IGMP v1/v2/v3 Snooping
- Suppor ts 256 groups
- IGMP Snooping Fast Leave
+ Limited IP Multicasting (IGMP Filtering):
- Up to 24 IGMP Filtering Profiles, 128 ranges per profile
+ MLD Snooping:
- MLD v1/v2 Snooping
- Suppor ts 256 groups
- MLD Snooping Fast Leave

+ VLAN Group:
- Max. 4K VLAN
- Max. 256 Dynamic VLAN
+ 802.1Q Tagged VLAN
+ Por t-based VLAN
+ 802.1v Protocol VLAN
+ Double VLAN (Q-in-Q):
- Por t-based Q-in-Q
- Selective Q-in-Q
+ VLAN Translation
+ MAC-based VLAN
+ Asymmetric VLAN

Quality of Service (QoS)
+ 802.1p Quality of Service
+ 8 queues per por t
+ Queue Handling:
- Strict Priority
- Weighted Round Robin (WRR)
- Strict + WRR
+ CoS based on:
- Switch Por t
- 802.1p Priority Queues
- MAC Address
- IPv4/v6 Address
- Protocol Type
- IPv6 Traffic Class
- IPv6 Flow Label
- TCP/UDP Por t
- User-defined packet content
+ Actions for flows:
- Remark 802.1p Priority Tag
- Remark TOS/DSCP Tag
- Bandwidth Control
- Flow Statistics
- Committed Information Rate (CIR), min. granularity 64Kbps
+ SRED Congestion Control
+ Bandwidth Control:
- Por t-based (Ingress/Egress, min. granularity 64Kbps)
- Flow-based (Ingress, min. granularity 64Kbps)
+ Time-based QoS

Access Control List (ACL)
+ Up to 768 Access Rules
+ ACL based on:
- 802.1p Priority
- MAC Address
- Ether Type
- IPv4/v6 Address
- Protocol Type
- TCP/UDP Por t Number
- IPv6 Traffic Class
- IPv6 Flow Label
- User Defined packet content
+ ACL Statistics
+ Time-based ACL
+ CPU Interface Filtering

+ SSH v2
+ SSL v1/v2/v3
+ Por t Security:
- Up to 64 MAC addresses per por t
+ Broadcast/Multicast/Unicast Storm Control
+ Traffic Segmentation
+ IP-MAC-Por t Binding (IMPB):
- ARP Packet Inspection
- IP Packet Inspection
- DHCP Snooping
- Supports 500 Address Binding Entries per device
+ D-Link Safeguard Engine
+ NetBIOS/NetBEUI Filtering
+ DHCP Server Screening
+ DHCP Client Filtering
+ BPDU Attack Protection

+ 802.1X:
- Por t-based Access Control
- Host-based Access Control
- Dynamic VLAN Assignment
+ Web-based Access Control (WAC):
- Por t-based Access Control
- Dynamic VLAN Assignment
+ MAC-based Access Control (MAC):
- Host-based Access Control
- Dynamic VLAN Assignment
+ Japanese Web-based Access Contro
+ Guest VLAN
+ Suppor ts Microsoft® NAP
+ RADIUS Accounting
+ RADIUS and TACACS+ Authentication for

Switch Access
+ Three Level User Accounts

+ Web-based GUI
+ Command Line Interface (CLI)
+ Telnet Server
+ TFTP Client
+ ZModem
+ SNMP v1/v2c/v3
+ SNMP Traps
+ System Log
+ RMON v1:
- Suppor ts 1, 2, 3, 9 groups
+ RMON v2
- Suppor ts ProbeConfig group
+ BootP/DHCP Client
+ DHCP Auto-Configuration
+ DHCP Relay
+ DHCP Relay Option 82
+ PPPoE Circuit-ID Tag Inser tion
+ DHCP Server
+ Dual Image
+ Dual Configuration
+ CPU Monitoring
+ Password Recovery
+ Password Encryption

+ RFC1213
+ RFC1493 Bridge MIB
+ RFC1907 SNMPv2 MIB
+ RFC1757, 2819 RMON MIB
+ RFC2021 RMONv2 MIB
+ RFC1643, 2358, 2665 Ether-like MIB
+ RFC2674 802.1p MIB
+ RFC2233,2863 IF MIB
+ RFC2618 RADIUS Authentication Client MIB
+ RFC2620 RADIUS Accounting Client MIB
+ D-Link Private MIB

IETF® Standard
+ RFC768 UDP
+ RFC791 IP
+ RFC793 TCP
+ RFC826 ARP
+ RFC854 Telnet
+ RFC951, 1542 BootP
+ RFC2068 HTTP
+ RFC2139,2866 RADIUS Accounting
+ RFC2474 DiffServ
+ RFC1157 SNMPv1
+ RFC1901,1908 SNMPv2c
+ RFC2570,2575 SNMPv3
+ RFC3164,3195 Syslog
+ RFC3046 DHCP Relay Option

Optional SFP Transceivers
DEM-310GT SFP transceiver for 1000BASE-LX, singlemode fiber, max. distance 10km, 3.3V
DEM-311GT SFP transceiver for 1000BASE-SX, multi-mode fiber, max. distance 550m, 3.3V
DEM-312GT2 SFP transceiver for 1000BASE-SX, multi-mode fiber, max. distance 2km, 3.3V
DEM-314GT SFP transceiver for 1000BASE-LHX, singlemode fiber, max. distance 50km, 3.3V
DEM-315GT SFP transceiver for 1000BASE-ZX, singlemode fiber, max. distance 80km, 3.3V
DEM-210 SFP transceiver for 100BASE-FX, singlemode fiber,max. distance 15km, 3.3V
DEM-211 SFP transceiver for 100BASE-FX, multimode fiber, max. distance 2km, 3.3V

Optional Redundant Power Supply
DPS-200 60-watt redundant power supply
DPS-600 500-watt redundant power supply (for DES-3528P only)
DPS-800 2-slot redundant power supply chassis
DPS-900 8-slot redundant power supply chassis

Optional Management Software*
DV-600S D-View 6.0 Network Management System (Standard Edition)
DV-600P D-View 6.0 Network Management System (Professional Edition)

*Also supports D-View 5.1


Order info


Front view
Back view


Support Resources