D-Link DWC-2000 Wireless Controller

Key Benefits at a Glance

• Scalable: Manages 64 access points out of the box, expandable to 256 per controller and up to 1,024 in a cluster
• Layer-3 Controller: Four Gigabit Ethernet RJ-45 ports and four SFP combo ports for flexible network connectivity
• Secure: 802.1X access control, WIDS, and rogue AP detection protect the wireless network
• Guest Access: Captive portal supporting up to 3,072 simultaneous authentications with payment gateway integration
• Automation: Auto-discovery, centralized firmware updates, and automatic channel and power adjustment

Management & Features

The controller supports automatic access point discovery and monitoring at Layer 2 and Layer 3. It also provides centralized firmware updates for managed access points. The controller automatically adjusts transmit power and radio channels and offers Layer-2 fast roaming. Intra-controller and inter-controller roaming, as well as intra-subnet and inter-subnet roaming, are supported.

Management is available via a web-based HTTP user interface or the command-line interface. SNMP is supported in versions v1, v2c, and v3. Two USB 2.0 ports are used for firmware updates and configuration export. An RJ-45 console port is available for local management, and an expansion slot for a hard drive is included.

Security & Compliance

The controller implements 802.1X-based access control for wired networks, including guest VLAN support. A Wireless Intrusion Detection System (WIDS) classifies rogue and valid access points and provides rogue AP mitigation. Detection of unauthorized access points and clients is supported.

Supported encryption standards include WEP, Dynamic WEP, WPA Personal/Enterprise, WPA2 Personal/Enterprise, TKIP, and AES. Persistent account authentication is available via local database, external RADIUS, external LDAP, external POP3, or external Windows Active Directory (wired only). RADIUS and TACACS+ are supported as external authentication services. The captive portal supports up to 3,072 simultaneous authentications, and MAC authentication is also available. Management interfaces support SSH and SSL (v1/v2/v3).

The controller is certified to FCC Class A, CE Class A, C-Tick, and IC standards. Security certifications include cUL and LVD (EN60950-1).

VLAN & Quality of Service

The controller supports 802.1Q VLAN tagging with up to 255 static VLAN groups. VLAN types include GVRP, MAC-based, port-based, and protocol-based VLANs. Advanced VLAN features include double VLAN (Q-in-Q) and voice VLAN. Subnet-based VLANs are also supported.

Quality of Service is provided with four QoS queues per port and content-based Class of Service support. Bandwidth control operates with a minimum granularity of 64 Kbps. WMM is supported. ACLs are content-based, and time-based ACLs are also available. The routing table supports up to 2,048 entries.

Guest Access & Authentication

Temporary guest accounts can be generated individually or in batches by the system, with customizable activation or expiration times. Authentication for temporary accounts is handled via the local database. For paid guest access, the payment gateways Authorize.net, PayPal, SecurePay, and World Pay are supported.

Compatible Access Points

The controller manages the unified access point models DWL-2600AP, DWL-3610AP, DWL-6600AP, DWL-6610AP, DWL-6610APE, DWL-6620APS, DWL-6700AP, DWL-7620AP, DWL-8610AP, DWL-8620AP, DWL-8620APE, DWL-8710AP, and DWL-8720AP.