Price: call for pricing
Model #: DES-3552
Simple Tabs with CSS & jQuery



  • 17.6Gbps Switching Capacity
  • D-Link Single IP Management
  • Create a Virtual Stack of up to 32 Units
  • Provides Comprehensive Security such as Access Control List, DHCP Server Screening and DoS Attack Prevention



The DES-3552 xStack 48-port Managed Layer 2 switch is ideal for light to medium voice, video and data applications and features advanced QoS, network management and security.


The xStack DES-3552 by D-Link is a high-performance, managed, stackable Layer 2 switch that provides an ideal solution for workgroups and edge deployments of a network. The D-Link Single IP Management (SIM) allows administrators to cluster up a virtual stack of up to 32 DES-3552 dispersed switches with fewer distance limitations through a single IP address. The clustering environment spans buildings, making it perfect for businesses that require multiple building deployments. The DES-3552 also supports physical stacking of up to 8 units in a stack, so that the entire stack can act as a single logical unit with up to 4Gbps of stacking backplane. The xStack switch also provides comprehensive security for edge access such as Access Control List, DHCP server screening and DoS attack prevention.


Non-Blocking Switching
The DES-3552 provides a non-blocking switching solution for 10/100 Fast Ethernet connections. The DES-3552 supports 48 10/100Mbps ports, with 4 gigabit 10/100/1000BASE-T ports. Two of these gigabit copper ports are disabled when the two 1000BASE-X SFP are used, also known as dual personality or combo ports. The DES-3552 has a non-blocking bandwidth of 17.6Gbps; the xStack switch has a redundant power option for mission critical applications.


Advanced Network Security
For edge network security, the DES-3552 supports DHCP server screening, client filtering, and IP-MAC-Port Binding to prevent security breaches such as rogue DHCP server, man-in-the-middle attacks and IP spoofing. For clients with XP SP3, Vista, or servers with Microsoft’s Server 2008, DES-3552 works in conjunction with Microsoft’s Network Access Protection (NAP) as part of an ecosystem that enforces compliance with network health policies. The xStack switch will grant network host access only if it complies with IT security policies such as up-to-date anti-virus signatures and operating system patches. This prevents a virus-infested client or server from gaining access and further contamination.

The xStack switch also supports loopback detection, which detects a loop in the network even though the end device causing the loop is without spanning tree. When the switch detects a loop is in the connected node, the DES-3552 shuts down the port with the loop so that the entire system will continue to function normally. This feature can also be VLAN based.


The DES-3552 incorporates advanced mechanisms to detect an attack against the switch’s central processing unit and to take corrective action on the attacking interface. When a Denial of Service attack is waged against the xStack switch, the D-Link Safeguard Engine detects the threat and prevents overload of the central processor thus insuring network integrity and helping to maintain open network bandwidth channels.

In addition, the DES-3552 supports 802.1x authentication, which securly allow users to log onto your network. When used in conjunction with a RADIUS server, 802.1x requires each user workstation attached to the xStack switches to provide a username and password before gaining access to the network. Web-based authentication option is available for those clients who may not have the 802.1x supplicant, while MAC-based authentication can make the authentication process automatically, authenticated by the 802.1x server based on the client’s MAC address. Other security features include access control list, which an administrator can restrict the access of a network through a variety of means including MAC address, IP, UDP/TCP, and even VLAN ID.


IP Clustering Stackable
The xStack DES-3552 provides D-Link Single IP Management Technology (SIM), allowing a set of switches to be managed by a single IP, regardless of geographical locations. Traffic running among units in this virtual stack is through the full-duplex Gigabit interfaces and your usual network wires, doing away with the costly and cumbersome stacking cables. Without any stacking cable, cable distance barrier and physical stacking limitations, your stack can comprise units that are located anywhere on the network, minimizing the impact of any single point of failure. Furthermore, multiple xStack switches can be configured, monitored and maintained from any workstation running a web browser through one unique IP address. The stack is managed as a single object, with all units identified by a single IP address. With Tree View, you can obtain and overview of the members of the stack and a network topology showing the locations of the units and their link information. This provides simple yet powerful web-based management without expensive SNMP network management software. You can add up to 32 switches per stack not limited to any specific D-Link models. With embedded SIM, you can expand your Ethernet stack to include L3 core Gigabit and chassis based switches to accommodate your network growth.


Voice and Video Applications
For today’s businesses, having voice, data and video on the same network is common practice. This challenge is met by the DES-3552, which supports 802.1p with 8 queues. The administrator can designate the priority of the traffic based on a variety of means including IP or MAC address, so that voice data is always clear and jitter free. Video traffic can also be assigned with the same priority. In addition, the switch provides IGMP Snooping or MLD snooping, which allows the forwarding of multicast packets such as streaming audio and video, without increasing network broadcast congestion. By snooping IGMP registration information within a frame, a list of workstations in the multicast group is created. This list then allows the switch to intelligently forward packets to only the appropriate member workstations. In conjunction with the 802.1Q VLANs, Quality of Service and security can be achieved on a network infused with data traffic.

For other multimedia-on-demand applications, such as IPTV deployments, the DES-3552 provides advanced features for easy video streaming management. For example, this xStack family supports per port multicast stream control, which allows a service provider to assign limited multicast addresses per port. This means it can act as a security control that pre-configures channels for each subscriber on a port level to prevent unauthorized multicast join. DES-3552 also supports IGMP multicast VLAN, which eliminates duplicate multicast traffic being sent to clients in different VLANs and thus removing bottlenecks in the uplink port.


Ease of Management
The DES-3552 supports SNMP v1/2/3 so traps can be set on abnormal events and information can be polled to maximize the productivity of the network. Other standard management features are also supported including RMON and IEEE 802.1d/w/s spanning tree, User interface includes intuitive web-based browser graphic interface or industry-standard CLI, either administration traffic can be protected thru SSL or SSH encryptions.


Device Interface
10/100BASE-TX Ports
10/100/1000BASE-T Stacking Ports
Combo SFP Slots
RS-232 Console Port
Switch Capacity
64-Byte Packet Forwarding Rate
13.1 Mpps
MAC Address Table Size
Packet Buffer
Flash Memory
Jumbo Frame Support
9216 KBytes
Number of VLANs Per Device
Maximum 4,096 Static VLAN Groups
Maximum 255 Dynamic VLAN Groups
Quality of Service (QoS)
8 Independent Hardware Queues (802.1p/Diffserv/ToS)
Virtual Stacking with D-Link Single IP Management (SIM) Up to 32 Devices per Virtual Stack
MLD v1/v2
256 Groups Supported
Access Control Lists
Up to 768 Access Rules, Time-based ACL, CPU Interface Filtering, VLAN-based ACL, ACL Statstics
IGMP Snooping
Supports 256 Groups, IGMP Fast Leave, Host-based IGMP Fast Leave1
Flow Control
802.3x Flow Control, HOL Blocking Prevention
Port Mirroring
Supports one-to-one or many-to-one, Flow-based mirroring
Link Aggregation
Supports up to eight 8-port Groups
D-Link Safeguard Engine
Protects CPU from Broadcast/Multicast/Unicast Flooding
Web-based Graphic User Interface (GUI)
Compatible with Internet Explorer®, Netscape®, Mozilla®, Firefox®, Opera®, Safari® browsers
Interface Options
10BASE-T, 100BASE-TX & 1000BASE-T
Virtual Stacking with D-Link Single IP Management (SIM) Up to 32 Devices per Virtual Stack
SFP Expansion Slots
Media Support Dependent On GBIC Tranceiver
Diagnostic LEDs
Per Device: Power, Console, RPS
Per Gigabit Port: Link/Activity, 10/100Mbps or 1000Mbps Speed
Per Ethernet Port: Link/Activity, 10Mbps or 100Mbps Speed
Network Management
In & Out of Band
Web-based GUI, Single IP Management v1.6, Command Line Interface (CLI), Telnet Server, Zmodem, SNMP v1/v2c/v3, SNMP Traps, System Log, RMON v1, Support 1,2,3,9 Groups, RMON v2, Support ProbeConfigGroup, BootP/DHCP Client, DHCP server DHCP Auto-configuration, DHCP Relay, DHCP Relay Option 60, 61, 82, DHCPv6 Relay, DCHPv6 Client, Dual Images, Dual Configuration, CPU Monitoring, NTP/SNTP, sFlow, Password Recovery, Password Encryption, DNS Relay, RSPAN, Cable Diagnostics, LLDP, LLDP-MED2, Trusted Host
802.1Q VLAN Tagging, 802.1v VLAN Protocol, GVRP, 802.1ab Double VLAN (Port-based Q-in-Q, Selective Q-in-Q), VLAN Translation, MAC-based VLAN, Asymmetric VLAN, ISM-VLAN, 802.1p Quality of Service, 802.1D Spanning Tree Protocol (IEEE802.1D-2004 Edition), 802.1w Rapid Spanning Tree Protocol (IEEE802.1D-2004 Edition), 802.1s Multiple Spanning Tree Protocol (IEEE802.1Q-2005 Edition), 802.3x Flow Control, 802.3ad Link Aggregation, 802.3AB LLDP
Standard Compliance
RFC768 UDP, RFC791 IP, RFC792 ICMPv4, RFC2463, 4443 ICMPv6, RFC4884 Extended ICMP, RFC793 TCP, RFC826 ARP, RFC 1321, 2284, 2865, 2716, 3580, 3748 Extensible Authentication Protocol (EAP), RFC2571 SNMP Framework, RFC2572 SNMP Message Processing and Dispatching, RFC2573 SNMP Applications, RFC2574 User-based Security Model for SNMPv3, RFC1981 Path MTU Discovery for IPv6, RFC2460 IPv6, RFC2461, 4861 IPv6 ND, RFC2462, 4862 IPv6 Stateless Address Auto-configuration, RFC2464 IPv6 over Ethernet and Definition, RFC3513, 4291 IPv6 Addressing Architecture, RFC2893, 4213 IPv4/IPv6 Dual Stack, RFC1112 Host extensions for IP multicasting, RFC2236 IGMPv2, RFC3376 IGMPv3, RFC4605 IGMP/MLD Proxying, RFC1027 ARP Proxy, RFC2475 Differentiated Service, RFC2597 Assured Forwarding PHB Group, RFC2598 An Expedited Forwarding PHB, RFC2697 Single Rate Three Color Marker, RFC2698 Two Rate Three Color Marker, RFC2246 SSL, RFC2138 RADIUS, RFC2139, 2866 RADIUS Accounting, RFC1492 TACACS, RFC2068, 2616 HTTP, RFC854 Telnet, RFC783, 1350 TFTP, RFC2570 SNMP, RFC3164 Syslog, RFC3176 sFlow, RFC951, 1542 BootP, RFC2131 DHCP, RFC1769 SNTP, ITU-T G.8032 Ether Ring Protection Switching
Software Features
L2 Features
Flow Control, 802.3x Flow Control, HOL Blocking Prevention, Spanning Tree: 802.1D STP, 802.1w RSTP, 802.1s MSTP, BPDU Filtering, Root Restriction, Loopback Detection, ERPS (Ethernet Ring Protection Switching)1, 802.3ad Link Aggregation, Max. 8 groups per device / 8 Gigabit ports per group, Port Mirroring: One-to-One, Many-to-One, Flowbased Mirroring, RSPAN Mirroring, L2 Protocol Tunneling, IGMP Snooping: IGMP v1/v2/v3 Snooping, Support 1024 IGMP Groups1, Port/host-based IGMP Snooping Fast Leave, Report Suppression, IGMP Proxy, Limited IP Multicast, Up to 24 IGMP filtering profiles, 128 ranges per profile, MLD Snooping: MLD v1/v2 Snooping, Support 1024 MLD Groups1, Port/host-based MLD Snooping Fast Leave, Report Suppression
L3 Features
Max. 16 IP Interfaces, ARP Proxy, IPv6 Neighbor Discovery (ND), Inter-VLAN Routing, Max 224 IPv4 routes, Max 96 IPv6 routes, Up to 16 static routing entries2, Policy-based Route
Quality of Service (QoS)
Queue Handling
. • Strict
. • Weighted Round Robin (WRR)
. • Strict + WRR
CoS Based on
. • Switch Port
. • MAC Address
. • Protocol Type
. • TCP/UDP Port
. • IPv4/v6 Address
. • IPv6 Traffic Class
. • User-Defined Packet Content
. • 802.1p Priority Queues
. • DSCP
. • IPv6 Flow Label
Support Flowing Actions for Flows
. • Remark 802.1p Priority Tag
. • Committed Information Rate (CIR), min. granularity 64Kbps
. • Remark TOS-DSCP Tag
. • Flow Statistics
SRED Congestion Control
Bandwidth Control
. • Port-based (Ingress/Egress, Min. Granularity 64Kbps)
. • Flow-based (Ingress, Min. Granularity 64Kbps)
SSH v2
SSL v1/v2/v3
Port Security up to 64 MAC Addresses per port
Broadcast/Multicast/Unicast Storm Control
Traffic Segmentation
IP-MAC-Port Binding
. • Supports 500 Address Binding Entries per Device
. • Supports DHCPv6 and NDP Snooping (ARP mode)1
. • Supports ARP/ACL/Auto (DHCP Snooping) Mode
D-Link® Safeguard Engine™
NetBIOS/NetBEUI Filtering
DHCP Server Screening
DHCP Client Filtering
ARP Spoofing Prevention
BPDU Attack Protection
Access Control List (ACL)
Up to 1792 Access Ruless
ACL based on
. • 802.1 Priority
. • Ether Type
. • Protocol Type
. • IPv6 Flow Label
. • IPv4/v6 Address
. • TCP/UDP Port Number
. • User Defined packet content
. • MAC Address
. • DSCP
. • IPv6 Traffic Class
ACL Statistics
Time-based ACL
VLAN-based ACL
CPU Interface Filtering
VLAN Group
. • Max. 4K VLAN
. • Max. 256 Dynamic VLAN
802.1Q Tagged VLAN
Port-based VLAN
802.1v Protocol VLAN
Double VLAN (Q-inQ)
. • Max. 4K VLAN Port-based Q-inQ
. • Selective Q-inQ
VLAN Translation
MAC-based VLAN
Asymmetric VLAN
VLAN Trunking
Voice VLAN
Guest VLAN
Subnet-based VLAN
. • Authentication Database Failover
. • Port/Host-based Access Control
. • Dynamic VLAN Assignment
Web-based Access Control (WAC)
. • Authentication Database Failover
. • Port/Host-based Access Control
. • Dynamic VLAN Assignment
MAC-based Access Control (MAC)
. • Authentication Database Failover
. • Port/Host-based Access Control
. • Dynamic VLAN Assignment
RADIUS Accounting
RADIUS and TACACS+ Authentication for Switch Access
3-Level User Account
Microsoft® NAP: 802.1X NAP / DHCP NAP
Physical & Environmental
Power Consumption
33.1w (max.)
Power Input
100 to 240 VAC, 0.5A, 50 to 60HZ Internal Universal Power Supply
Redundent Power Supply
Connector for optional external DPS-200
Dimensions (W x D x H)
17.4” x 12.2” x 1.7” (441mm x 310mm x 44mm)
19-inch Standard Rack-Mount Width, 1U Height
9.01 lbs (4.09 kg)
2DC Fans
35.1db at max. speed
Heat Dissipation
112.81 BTU/hour
380,412 hours
Operating: 32° to 122° F (0° to 50° C)5
Storage: -40° to 158° F (-40° to 70° C)
5% ~ 95% Non-condensing
FFC Class A, CE, C-Tick, VCCI Class A
Lifetime Warranty3
RFC1065, 1066, 1155, 1156, 2578 MIB Structure, RFC1212 MIB Definition, RFC1213 MIBII, RFC1215 MIB Traps Convention, RFC4188 Bridge MIB, RFC1157, 2571~2576 SNMP MIB, RFC1442, 1901~08, 2578 SNMPv2 MIB, RFC1757, 2819 RMON MIB, RFC2021 RMONv2 MIB, RFC1398, 1643, 1650, 2358, 2665 Ether-like MIB, RFC2674, 4363 Q-Bridge/PBridge MIB, RFC2233, 2863 IF MIB, RFC2618 RADIUS Authentication Client MIB, RFC2620 RADIUS Accounting Client MIB, RFC2925 Ping MIB, RFC2925 Traceroute MIB, D-Link Private MIB
Ordering Information
Part Number
xStack Managed 24-Port 10/100 Stackable L2+ Switch, 4 Gigabit Copper Ports + 2 Combo SFP
xStack Managed 48-Port 10/100 Stackable L2+ Switch, 4 Gigabit Copper Ports + 2 Combo SFP
1000BASE-LX SFP Module, Singlemode, up to 10Km
1000BASE-SX SFP Module, Multimode, up to 550m
100BASE-FX Multimode LC SFP Transceiver. up to 2Km
Redundant Power Supply Unit, 60 Watt RPSU
2-Slot RPSU Open Chassis for DPS-200/DPS-500
8-Slot RPSU Open Chassis for DPS-200/DPS-500
D-View 6.0 Network Management Software, Standard Version
D-View 6.0 Network Management Software, Professional Version

1 Feature only available with firmware 2.60. Available for download at
2 Feature only available in future firmware release.
3 Lifetime warranty available only in the USA and Canada if purchased on or after March 30, 2009. Visit for warranty details.
4 Operating temperature is 32°F to 122°F for H/W versions below A3.
5 Operating temperature is 32°F to 122°F for H/W versions below A2.

All references to speed are for comparison purposes only. Product specifications, size, and shape are subject to change without notice, and actual product appearance may differ from that depicted


* Available in future firmware upgrade.
** Lifetime warranty available only in the USA and Canada if purchased on or after March 30, 2009.