Digitalchina Networks DCS-3950 Series User manual

Digital China Networks Ltd.
Digital Technology Plaza, NO.9 Shangdi 9th Street, Haidian District, Beijing, China
Tel: [phone] Fax: [phone]
http://www.dcnetworks.com.cn/en
DCS-3950 Series
L2/L4 Intelligent Access Switches
DCS-3950 series comprises DCS-3950-26C, DCS-3950-28CT and DCS-3950-52CT.
Providing high performance in security and operation, DCS-3950 series is an excellent choice as
access layer switch for education, government and large/medium enterprise networks.
Stacking and various port combination based on fixed uplink ports help to ease the users’
network construction.
As switch for new generation network, DCS-3950 series addresses powerful security
features. ACL efficiently prevents viruses attack and DOS, DDOS intruding from damage of itself
and even core or aggregation layer equipments. Full hardware forwarding and ASIC based ACL
policy ensure no effect on normal data when viruses overrun all over the network.
Features ＆Benefits
Perfect Configuration
DCS-3950-26C has 2 fixed Combo Gigabit uplink ports allowed to be used as either
copper or fiber ports on users’ demand. DCS-3950-28CT and DCS-3950-52CT
additionally offer 2 fixed Gigabit copper ports except 2 fixed combo Gigabit ports,
accommodating not only direct access to workgroup server but also adequate port
choices for uplink, downlink and stacking.
Powerful ACL
As new L2 switch, DCS-3950 series adopts full ACL policy undertaking data
Page 1 of 6

Digital China Networks Ltd.
Digital Technology Plaza, NO.9 Shangdi 9th Street, Haidian District, Beijing, China
Tel: [phone] Fax: [phone]
http://www.dcnetworks.com.cn/en
Page 2 of 6
classification and employing specific forwarding policy on a per-packet basis by source
or destination IP address, source or destination MAC address, TCP/UDP port number, IP
precedence, time range and ToS. Implemented ACL policy, users can filter out virus
packets such as Blaster, Code Red at the access layer preventing core equipments from
being affected or attacked.
Enhanced Security
Full limited multicast policy DCSCM is able to actualize IGMP based ports inspection
technology at the edge by effective security control on source and destination ports,
roundly protect the upbuilding and stable operating of legal multicast application in the
network, and entirely assure switch and server safety through monitoring pingSweep
attack, anti-scanning and taking preventing measures.
Network Protocols Supported
DCS-3950 series supports 802.1d/w/s spanning tree protocol, 802.1Q, 802.1p, 802.3ad,
802.3x, GVRP, DHCP standards, and support SNTP to achieve auto-synchronization.
Advanced Quality of Service (QoS)
DCS-3950 series differentiates and classifies traffic flows according to ports, 802.1p,
ToS, DSCP, TCP/UDP ports, and assigns specific service hierarchy. The dispatcher
WRR/SP supported by DCS-3950 ensures voice/data/video are properly classified and
prioritized throughout the network.
Simple Management
DCS-3950 series supports SNMP, in-band and out-band management, CLI and WEB
interface, RMON, Security IP function. All help to restrict unauthorized user from access
and altering configurations. SSH protocol guarantees security of switches configuration
management to the maximum.
Comprehensive Authentication and Accounting Solution
DCS-3950 series supports Digital China Enhanced 802.1x Authentication and
Accounting Solution, an authentication method based on ports and MAC address. This
solution boosts security performance of DCS-3950 series by denying unauthorized
access and prohibiting not allowed IP configuration. Equipped with DCBI-3000, a
security access control and accounting system of Digital China, and 802.1x client

Digital China Networks Ltd.
Digital Technology Plaza, NO.9 Shangdi 9th Street, Haidian District, Beijing, China
Tel: [phone] Fax: [phone]
http://www.dcnetworks.com.cn/en
Page 3 of 6
terminal, DCS-3950 series is enabled to charge according to time and/or traffic,
implement a strict binding of account, password, IP, MAC, VLAN, port and switch,
prevent agent software, PC clone and message/advertisement to legal users, and even
actualize user-based dynamic VLAN and bandwidth authorization and dynamic IP
address assignment on group strategy basis. With all these features, DCS-3950 series is
ideal for network access operation.
Specification
Item DCS-3950-26C DCS-3950-28CT DCS-3950-52CT
Fixed Port
24*10/100Base-TX +
2*Gigabits
Combo(SFP/GT)
24*10/100Base-TX +
2* 100M/Gigabits
Combo(SFP/GT) +
2*10/100/1000Base-T
48*10/100Base-TX + 2*
100M/Gigabits
Combo(SFP/GT) +
2*10/100/1000Base-T
Console 1 1 1
Performance
Switching
Fabric
48Gbps 48Gbps 48Gbps
Switching 6.6Mpps，throughput 9.6Mpps，throughput 13.2Mpps，throughput
Maximum
Gigabit ports
2 4 4
MAC
ADDRESS
8k 8k 8k
ACL TABLE 1k 1k 1k
Queues per
port
8 for Gigabits ports, 4
for 10/100M ports
8 for Gigabits ports, 4
for 10/100M ports
8 for Gigabits ports, 4 for
10/100M ports
VLAN
TABLE
4k 4k 4k
Hardware Configuration
Outline
Dimension
440mm * 171.2mm *
43 mm
440mm * 171.2mm *
43mm
440mm * 229mm *
44mm
Relative
Humidity
5% ~ 95%, non-condensing
Operating
Temperature
0℃~ 50℃
Power Supply AC：100~240 V AC，50/60 Hz (internal AC power supply)
Power
Consumption
≤30W
MTBF >80,000 hours
Item DCS-3950-28CT-POE DCS-3950-28C DCS-3950-52C

Digital China Networks Ltd.
Digital Technology Plaza, NO.9 Shangdi 9th Street, Haidian District, Beijing, China
Tel: [phone] Fax: [phone]
http://www.dcnetworks.com.cn/en
Page 4 of 6
Fixed Port
24*10/100Base-TX + 2*
100M/Gigabits
Combo(SFP/GT) +
2*10/100/1000Base-T
24*10/100Base-TX + 4*
100M/Gigabits
Combo(SFP/GT)
48*10/100Base-TX +
4* 100M/Gigabits
Combo(SFP/GT)
Console 1 1 1
Performance
Switching
Fabric
32Gbps 48Gbps 48Gbps
Switching 6.6Mpps，throughput 9.6Mpps，throughput 13.2Mpps，throughput
Maximum
Gigabit ports
2 4 4
MAC
Address
Table
16K 16K 16K
VLAN Table 4K 4K 4K
Hardware
Configuration
DCS-3950-28CT-POE DCS-3950-28C DCS-3950-52C
Outline
Dimension
440mm * 171.2mm * 43
mm
440mm * 171.2mm * 43mm 440mm * 229mm *
44mm
Power Supply
Input: 100~240 V AC
PoE output: 43~59V
AC：100~240 V AC，50/60 Hz
(internal AC power supply)
AC：100~240 V AC，
50/60 Hz (internal AC
power supply)
Power
Consumption
≤400W ≤30W ≤30W
Relative
Humidity
5% ~ 95%, non-condensing
Operating
Temperature
0℃~ 50℃
MTBF >80,000 hours
Feature DCS-3950 Series
Stacking support
Spanning Tree 802.1d（STP）、802.1w（RSTP）、802.1s（MSTP）
Multicast Protocol IGMP Snooping&Query
QoS 4 queues per port，support 802.1p，ToS，application ports number，
DifferServ，support WRR/SP

Digital China Networks Ltd.
Digital Technology Plaza, NO.9 Shangdi 9th Street, Haidian District, Beijing, China
Tel: [phone] Fax: [phone]
http://www.dcnetworks.com.cn/en
Page 5 of 6
ACL
Support standard ACL＆extended ACL，support IP ACL、MAC ACL、
IP-MAC ACL ，support data packet filtering on the basis of
source/destination IP address, source/destination MAC address, IP type,
TCP/UDP port number, IP precedence, time range, ToS.
Enhanced Security
Feature
Monitor attacks of pingSweep，take anti-attack measures, prevent illegal
multicast source and limited multicast.
Bandwidth
Management
62Kbps
MAC Operation Support port/MAC auto-binding, support MAC filtering.
VLAN Type Port-based/802.1Q protocol，support GVRP，PVLAN
Flow Control Support HOL preventing first packet congestion ，semiduplex
backpressure，full-duplex IEEE802.3x
DHCP Support Client/Server
Port Aggregation Support 802.3ad. To the maximum, support 6 teams of trunks, 8 ports per
trunk，support destination MAC based load balancing
IEEE802.1x
Support port/MAC address based DC 802.1x integrated solution enable
to implement strict binding of user ID, password, IP, MAC, VLAN, ports
and switch ，prevent agent software, PC clone, unwanted
message/advertisement to user, dynamically actualize user based VLAN
authentication and bandwidth authentication and actualize group based
dynamic IP address distribution. Can achieve accounting on basis of
time/flow
Authentication Support RADIUS
Port Mirror Image Support
Broadcast Storm
Control
Support，broadcast pass permission rate can be set
Network Standards
Supported
IEEE802.1D IEEE 802.3 IEEE 802.3u IEEE802.3ad IEEE 802.3x IEEE
802.3z IEEE802.1Q IEEE 802.1p IEEE 802.1x IEEE802.1w IEEE
802.1s etc.
Network Management
Management
Interface
CLI、WEB
Console RJ-45
Telnet support Server/Client
SNMP v1、v2、v3
System Log support
Configuration
Management
Classification
support
SSH support
RMON 1，2，3，9
MIB access provide

Digital China Networks Ltd.
Digital Technology Plaza, NO.9 Shangdi 9th Street, Haidian District, Beijing, China
Tel: [phone] Fax: [phone]
http://www.dcnetworks.com.cn/en
Page 6 of 6
Integrated Network
Management
Software
Digital China network management software: LinkManager
Security IP support
Others
SNTP support
BOOTP support
FTP/TFTP support
（*）indicate future support
Ordering Information
Model Description
DCS-3950-26C 24 10/100M ports + 2 Gigabit Combo (SFP/GT) ports.
DCS-3950-28CT 24*10/100Base-TX + 2* 100M/Gigabits Combo(SFP/GT) +
2*10/100/1000Base-T
DCS-3950-52CT
48*10/100Base-TX + 2* 100M/Gigabits Combo(SFP/GT) +
2*10/100/1000Base-T
DCS-3950-28CT-POE 24*10/100Base-TX + 2* 100M/Gigabits Combo(SFP/GT) +
2*10/100/1000Base-T
DCS-3950-28C 24*10/100Base-TX + 4* 100M/Gigabits Combo(SFP/GT)4
DCS-3950-52C 48*10/100Base-TX + 4* 100M/Gigabits Combo(SFP/GT)