The DGS-3000-10TC is a small and compact, yet fully managed, 10-port, Layer 2 Ethernet switch. It provides wired Gigabit speed access for campus and metro networks. The 1U high DGS-3000-10TC can be installed almost anywhere, including desktops, equipment racks, and telecom cabinets. The smaller dimensions provide better air flow in limited spaces and also make cable management easier.

Reliable Networking
All Ethernet ports of the DGS-3000-10TC support 6kV surge/lightning protection. This feature protects the switch from power surges due to lightning or improper electrical wiring when the Ethernet cables are exposed in open spaces, such as in older buildings. The switch also provides an additional power connector for connection to D-Link’s DPS-200 Redundant Power Supply, or to a stable, protected 12VDC backup power source in case of a main power failure. For Ethernet link fail-over, the DGS-3000-10TC supports 802.1D Spanning Tree Protocol (STP), 802.1w Rapid Spanning Tree Protocol (RSTP), and 802.1s Multiple Spanning Tree Protocol (MSTP), to allow automatic backup of bridge paths. Using these features, the transmission and reception of frames can be guaranteed even during a network failure. For mission critical environments, the switch also supports ITU-T G.8032 Ethernet Ring Protection Switching (ERPS); traffic can be rerouted around the ring within 50 milliseconds, minimizing disruption to service. D-Link Loopback Detection (LBD) is a loop detection function that prevents loop events from causing congestion in uncontrolled network segments such as unmanaged switches or customer networks. The DGS-3000-10TC also supports 802.1AX and 802.3ad Link Aggregation, which allow grouping of multiple ports in parallel to increase bandwidth and redundancy for high availability and load sharing in a multi-client environment.

Solid Security with High Availability
The DGS-3000-10TC offers various user/device authentication features including 802.1X, Web-based Access Control (WAC)1 and MAC-based Access Control (MAC). The clientless WAC1 and MAC functions provide convenience for IT managers implementing user/device authentication into a network. They allow administrators to control security without installing client software on each network device, which is especially important for devices on which the software cannot be installed. For a greater security level, the DGS-3000-10TC also supports Compound Authentication1, letting IT managers choose between multiple authentication methods for any single device. Selectable host-based authentication and authorization provide the option to finely control access by each device in the network. For advanced applications, the switches also provide RADIUS and TACACS accounting information for integration of backend services such as a billing system or advanced user/device control. In mission critical networks, the DGS-3000-10TC supports strict address and interface binding function via IP-MAC-Port Binding (IMPB) and ARP Spoofing Prevention to protect the networks from Man-in-the-Middle or ARP Spoofing attacks.

To maintain a high availability network, the DGS-3000-10TC uses D-Link Safeguard Engine to manage the CPU and ensure that the network stays up even if it is overloaded by malicious traffic caused by worms and viruses. The switch also supports DHCP Screening to filter out unauthorized DHCP offerings from rogue DHCP servers or routers. Other security features such as BPDU Attack Protection, DoS Attack Prevention, and L3 Control Packet Filtering help to block leaks caused by protocol or behavioral security intrusions.

IPv6 Ready
The DGS-3000-10TC is IPv6 ready and supports various IPv6 functions such as MLD Snooping, WAC1, IPv6 ACL/QoS, and IMPBv6 to ensure seamless integration of next generation networks. The DGS-3000-10TC is certified IPv6 Ready Logo Phase 2, which guarantees interoperability for IPv6 environments.

Easy Maintenance and Troubleshooting
The DGS-3000-10TC features rich Operations, Administration, and Management (OAM) features to help network administrators reduce the burden of maintenance and troubleshooting. Cable diagnostics display the status of Ethernet cables and locate the position of cable errors remotely, helping cut onsite support costs. 802.1ag Connectivity Fault Management (CFM) provides administrators with convenient tools to monitor and troubleshoot end-to-end service networks. This allows service providers to check connectivity, isolate network issues, and identify the affected customers. D-Link Unidirectional Link Detection (DULD) helps detect a broken one-way fiber connection, improving the stability of the fiber infrastructure in a Metropolitan Area Network (MAN).

Deliver Triple Play Services
The DGS-3000-10TC features full L2 multicast functions, including IGMP/MLD snooping, fast leave, and filtering. With L2 multicast support, the switch is ideal for use with IPTV services. Host-based IGMP/MLD Snooping provides service to multiple IPTV subscribers per physical interface and ISM VLAN registers multicast streams in a multicast VLAN to save bandwidth on the network backbone. The ISM VLAN profiles allow users to bind or replace the channel profiles of subscription ports quickly and easily. The DGS-3000-10TC also supports IGMP authentication, which can prevent rogue IPTV subscriptions by authenticating Set Top Boxes as well as channel switching to secure Internet Service Provider (ISP) revenues.

The DGS-3000-10TC also supports advanced Quality of Service (QoS) functions to help ISPs reliably deliver high-quality triple play services. Flexible packet classification can be based on various header fields or user-defined packet content to help administrators prioritize network traffic. Two-rate and single-rate Three Color Marker (trTCM/srTCM) help classify traffic streams into conforming and nonconforming groups to guarantee the minimum bandwidth for prioritized packets. The Bandwidth Control feature allows network administrators to define the upstream/downstream throughput levels for each port with granularity down to 64 kbps.