Kenneth at 18:49, 16 July 2024

2024-07-16T18:49:24Z

← Older revision		Revision as of 18:49, 16 July 2024
Line 1:		Line 1:
	https://www.ruckussecurity.com/ICX-6450-48.asp		== ICX-6450 ==

			== EOL ==

			ICX-6450 end of sale Oct 2016 - end of support Dec 2021

			Reference: https://support.ruckuswireless.com/documents/3631-end-of-sale-and-end-of-life-product-datelines

			<s>https://www.ruckussecurity.com/ICX-6450-48.asp</s>

	== Connect ==		== Connect ==

Kenneth: /* Enable POE */

2021-05-25T16:54:02Z

Enable POE

New page

https://www.ruckussecurity.com/ICX-6450-48.asp

== Connect ==

tio -b 9600 /dev/ttyS0

== Clear Settings ==

<pre>
ICX6450-48 Switch#erase startup-config
Erase startup-config Done.
dhcp server lease database is also removed
</pre>

<pre>
ICX6450-48 Switch#show config
INFO: empty config data in the primary area, try to read from backup
INFO: empty config data in the backup area also
</pre>

<pre>
ICX6450-48 Switch#reload
Are you sure? (enter 'y' or 'n'): y
Could not verify if the Running Config data has been changed.
Do you want to continue the reload anyway? (enter 'y' or 'n'): y
Halt and reboot
</pre>

<pre>
ICX6450-48 Switch>
Stack unit 1 PS 1, Internal Power supply detected and up.
show config
INFO: empty config data in the primary area, try to read from backup
INFO: empty config data in the backup area also
</pre>

<pre>
ICX6450-48 Switch>enable
No password has been assigned yet...
</pre>

<pre>
ICX6450-48 Switch#show config
INFO: empty config data in the primary area, try to read from backup
INFO: empty config data in the backup area also
</pre>

<pre>
ICX6450-48 Switch#write memory
Write startup-config done.

ICX6450-48 Switch#Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.
</pre>

<pre>
ICX6450-48 Switch#show config
!
Startup-config data location is flash memory
!
Startup configuration:
!
ver 07.4.00T311
!
stack unit 1
module 1 icx6450-48-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!

!
!
!
!
!
!
end
</pre>

Once it comes back up, your switch will be as-new.

ref: https://www.alteeve.com/w/Configuring_Brocade_ICX-Series_Ethernet_Switches

== Configure IP ==

<pre>
ICX6610-24 Switch> enable

ICX6610-48 Switch#configure terminal

ICX6610-48 Switch(config)#ip address 10.20.1.1 255.255.0.0

ICX6610-48 Switch(config)#exit

# Ping external device test
ICX6610-48 Switch#ping 10.20.255.254

ICX6610-48 Switch#write memory
</pre>

== Show connected interfaces ==

<pre>
ICX6610-24 Switch(config)#show interfaces brief

Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name
1/1/1 Down None None None None No 1 0 cc4e.24b9.4b74
1/1/2 Down None None None None No 1 0 cc4e.24b9.4b75
1/1/3 Down None None None None No 1 0 cc4e.24b9.4b76
1/1/4 Down None None None None No 1 0 cc4e.24b9.4b77
</pre>

reF: https://www.alteeve.com/w/Configuring_Brocade_ICX-Series_Ethernet_Switches

== Show ARP table ==

== Show IP ==

<pre>
ICX6450-48 Switch(config)#show ip

Switch IP address: 10.10.10.220

Subnet mask: 255.255.255.0

Default router address: 10.10.10.1
TFTP server address: None
Configuration filename: None
Image filename: None
IP MTU: 1500
</pre>

== Ping External ==

Example failure:
<pre>
ICX6450-48 Switch#ping 10.10.10.1
Sending 1, 16-byte ICMP Echo to 10.10.10.1, timeout 5000 msec, TTL 64
Type Control-c to abort
Request timed out.
No reply from remote host.
</pre>

== Show VLANs ==

Example None configured:
<pre>
ICX6450-48 Switch>show vlan
Total PORT-VLAN entries: 1
Maximum PORT-VLAN entries: 64

Legend: [Stk=Stack-Id, S=Slot]
</pre>

== License ==

<pre>
ICX6450-48 Switch>show license
License record empty
</pre>

== Show Stack ==

Example not configured:
<pre>
ICX6450-48 Switch>show stack

***** Warning! stack is not enabled. *****

alone: standalone, D: dynamic config, S: static config
ID Type Role Mac Address Pri State Comment
1 S ICX6450-48 alone 748e.f8bb.15a0 0 local None:0

+---+
-2/3| 1 |2/1-
+---+

Current stack management MAC is 748e.f8bb.15a0
Note: no "stack mac" config. My MAC will change after failover.
</pre>

== Reset Lost Password ==

On the front of the switch will be a small "Reset" switch. To press this, you will need a very thin object in order to press the button, like a small paper clip, needle or so on.

During the boot process, press b when you see the Enter 'b' to stop at boot monitor: prompt.
<pre>
Enter 'b' to stop at boot monitor: 0
ICX64XX-boot>> no password
OK! Skip password check when the system is up.
ICX64XX-boot>> boot system flash primary
Usage:
boot - boot default, i.e., run 'bootcmd'

ICX64XX-boot>> boot_primary
Booting image from Primary
## Booting image at 00007fc0 ...
Created: 2013-04-27 3:19:57 UTC
Data Size: 10552120 Bytes = 10.1 MB
Load Address: 00008000
Entry Point: 00008000
Verifying Checksum ... OK
OK
</pre>

ref: https://www.alteeve.com/w/Configuring_Brocade_ICX-Series_Ethernet_Switches

== Paging ==

<pre>
Brocade#skip
Disable page display mode

Brocade#page
Enable page display mode
</pre>

reF: http://docs.ruckuswireless.com/fastiron/08.0.60/fastiron-08060-commandref/GUID-69E560B4-597A-49FB-AA0B-F19E859F5D31.html

== Show Interfaces ==

<pre>
ICX6450-48 Switch#show interfaces brief

Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name
1/1/1 Up Forward Full 1G None No 1 0 748e.f8bb.15a0
1/1/2 Down None None None None No 1 0 748e.f8bb.15a1
1/1/3 Down None None None None No 1 0 748e.f8bb.15a2
1/1/4 Down None None None None No 1 0 748e.f8bb.15a3
1/1/5 Down None None None None No 1 0 748e.f8bb.15a4
1/1/6 Down None None None None No 1 0 748e.f8bb.15a5
1/1/7 Down None None None None No 1 0 748e.f8bb.15a6
1/1/8 Down None None None None No 1 0 748e.f8bb.15a7
1/1/9 Down None None None None No 1 0 748e.f8bb.15a8
1/1/10 Down None None None None No 1 0 748e.f8bb.15a9
1/1/11 Down None None None None No 1 0 748e.f8bb.15aa
1/1/12 Down None None None None No 1 0 748e.f8bb.15ab
1/1/13 Down None None None None No 1 0 748e.f8bb.15ac
1/1/14 Down None None None None No 1 0 748e.f8bb.15ad
....
</pre>

=== Show Interface By Port ===

<pre>
ICX6450-48 Switch#show int eth 1/1/1
GigabitEthernet1/1/1 is up, line protocol is up
Hardware is GigabitEthernet, address is 748e.f8bb.15a0 (bia 748e.f8bb.15a0)
Configured speed auto, actual 1Gbit, configured duplex fdx, actual fdx
Configured mdi mode AUTO, actual MDI
Member of L2 VLAN ID 1, port is untagged, port state is FORWARDING
BPDU guard is Disabled, ROOT protect is Disabled
Link Error Dampening is Disabled
STP configured to OFF, priority is level0, mac-learning is enabled
Loop Detection is ENABLED
Flow Control is config enabled, oper enabled, negotiation disabled
Mirror disabled, Monitor disabled
Not member of any active trunks
Not member of any configured trunks
No port name
Inter-Packet Gap (IPG) is 96 bit times
MTU 1500 bytes
300 second input rate: 7600 bits/sec, 11 packets/sec, 0.00% utilization
300 second output rate: 512 bits/sec, 1 packets/sec, 0.00% utilization
4551 packets input, 373995 bytes, 0 no buffer
Received 333 broadcasts, 4178 multicasts, 40 unicasts
0 input errors, 0 CRC, 0 frame, 0 ignored
0 runts, 0 giants
390 packets output, 26172 bytes, 0 underruns
Transmitted 2 broadcasts, 385 multicasts, 3 unicasts
0 output errors, 0 collisions
Relay Agent Information option: Disabled

...
</pre>

== Show Management Network Interface MAC ==

telnet@myswitch#show interfaces brief
mgmt1 Down None None None None No None 0 c0c5.20b7.1111

c0:c5:20:b7:11:11

== Clear VLANs ==

<pre>
enable
show config
no vlan [#]
</pre>

== Disable Spanning Tree ==

<pre>
interface ethernet 1/1/1
loop-detection
no spanning-tree
!
interface ethernet 1/1/2
loop-detection
no spanning-tree
!...
interface ethernet 1/1/48
port-name uplink
no spanning-tree
!
</pre>

== Hostname ==

hostname "my switch"

== DHCP ==

ip dhcp-client enable
ip dhcp-client auto-update enable

no ip dhcp-client enable

=== Static IP ===

ip address 10.10.10.104 255.255.255.0
ip default-gateway 10.10.10.1
no ip dhcp-client auto-update enable
no ip dhcp-client enable

== super-user-password ==

enable super-user-password [PASSWORD]

no enable super-user-password

== Show Logs ==

sh logs

Clear logs:
clear logs

Show errors:
! Error disable recover
sh errdisable recovery

! Error disable summary
sh errdisable summary

== Show Software Version and Switch Model ==

<pre>
>sh version
Copyright (c) 1996-2012 Brocade Communications Systems, Inc. All rights reserved.
UNIT 1: compiled on Mar 2 2012 at 12:38:17 labeled as ICX64S07400
(10360844 bytes) from Primary ICX64S07400.bin
SW: Version 07.4.00T311
Boot-Monitor Image size = 512, Version:07.4.00T310 (kxz07400)
HW: Stackable ICX6450-48-HPOE
==========================================================================
UNIT 1: SL 1: ICX6450-48p POE 48-port Management Module
Serial #: BZTXXXXXXXX
License: BASE_SOFT_PACKAGE (LID: dbvHKIFjFox)
P-ENGINE 0: type DEF0, rev 01
P-ENGINE 1: type DEF0, rev 01
==========================================================================
UNIT 1: SL 2: ICX6450-SFP-Plus 4port 40G Module
==========================================================================
800 MHz ARM processor ARMv5TE, 400 MHz bus
65536 KB flash memory
512 MB DRAM
STACKID 1 system uptime is 1 days 21 hours 15 minutes 32 seconds
The system : started=warm start reloaded=by "reload"
</pre>

== Enable SSH ==

(Note telnet is enabled by default, and doesn't require user)

crypto key generate - http://docs.ruckuswireless.com/fastiron/08.0.50/fastiron-08050-commandref/GUID-74724EE0-E8FB-46A1-8FBA-9E2F342D5B93.html
:To enable SSH, you generate a DSA or RSA host key on the device. The SSH server on the Brocade device uses this host DSA or RSA key, along with a dynamically generated server DSA or RSA key pair, to negotiate a session key and encryption method with the client trying to connect to it. While the SSH listener exists at all times, sessions cannot be started from clients until a host key is generated. After a host key is generated, clients can start sessions. When a host key is generated, it is saved to the flash memory of all management modules. The time to initially generate SSH keys varies depending on the configuration, and can be from a under a minute to several minutes.
: To disable SSH, you delete all of the host keys from the device. When a host key is deleted, it is deleted from the flash memory of all management modules.

Enable SSH: [https://www.shanekillen.com/2014/03/brocade-switch-how-to-configure-ssh-and.html]
## Generate keys
crypto key generate dsa
# Add admin user:
username admin pri 0 password passphrase
# enable
aaa authentication login default local

then wait... takes about 5 minutes, and you will eventually see:
DSA Key pair is successfully created

..
..

root@server:~# ssh admin@10.10.10.100
Unable to negotiate with 10.10.10.100 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1

fix with: (from switch)
ip ssh key-exchange-method dh-group14-sha1

or from SSH:
ssh -v -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-dss -caes256-cbc 10.10.10.100

Generate keys:
(config)#crypto key generate rsa modulus 2048
(config)#ip ssh key-exchange-method dh-group14-sha1
Warning: This operation would close all existing SSH connection.
(config)#username admin privilege 0 password [PASSWORD]
DECIMAL <0 READ-WRITE, 4 PORT-CONFIG, 5 READ-ONLY> User privilege level
(config)#aaa authentication login default local

To require the enable login locally as well:
(config)#aaa authentication enable default local

To auto go to privileged mode after login (use in labs only, not production):
(config)#aaa authentication login privilege-mode

To change password:
(config)#username admin password [PASSWORD]

ref: https://robrobstation.com/2017/07/17/ruckus-icx7150-c12p-initial-configuration/

Sample config:
<pre>
ICX7150-48-Switch(config)#write terminal
Current configuration:
!
ver 08.0.61aT211
!
stack unit 1
module 1 icx7150-48-port-management-module
module 2 icx7150-2-copper-port-2g-module
module 3 icx7150-4-sfp-plus-port-40g-module
!
!
!
!
!
!
!
!
!
!
aaa authentication enable default local
aaa authentication login default local
ip address 10.10.10.228 255.255.255.0 dynamic
ip default-gateway 10.10.10.1 dynamic
!
username admin password .....
!
!
interface ethernet 1/3/1
speed-duplex 1000-full
!
interface ethernet 1/3/2
speed-duplex 1000-full
!
interface ethernet 1/3/3
speed-duplex 1000-full
!
interface ethernet 1/3/4
speed-duplex 1000-full
!
!
!
!
!
!
ip ssh key-exchange-method dh-group14-sha1
!
!
end
</pre>

=== Disable SSH ===

Delete the host keys

crypto key zeroize

crypto key zeroize dsa

crypto key generate - http://docs.ruckuswireless.com/fastiron/08.0.50/fastiron-08050-commandref/GUID-74724EE0-E8FB-46A1-8FBA-9E2F342D5B93.html
: To disable SSH, you delete all of the host keys from the device. When a host key is deleted, it is deleted from the flash memory of all management modules.

== Enable POE ==

On the ICX 6450-48P ('P' meaning PoE support)

Enabling and disabling Power over Ethernet
http://docs.ruckuswireless.com/fastiron/08.0.80/fastiron-08080-managementguide/GUID-B427DDA2-C8F4-40F7-A100-9A8E7DC55156.html

Enable:
device# configure terminal
device(config)# interface ethernet 1/1/1
device(config-if-e1000-1/1/1)# inline power

PoE: Power enabled on port 1/1/1.

Disable:
device# configure terminal
device(config)# interface ethernet 1/1/1 to 1/1/48
device(config-mif-1/1/1-1/1/48)# no inline power

Show interface POE details:
show inline power

<pre>
telnet@myswitch#show inline power

Power Capacity: Total is 740000 mWatts. Current Free is 451400 mWatts.

Power Allocations: Requests Honored 564 times

Port Admin Oper ---Power(mWatts)--- PD Type PD Class Pri Fault/
State State Consumed Allocated Error
--------------------------------------------------------------------------
1/1/1 On Off 0 0 n/a n/a 3 n/a
1/1/2 On Off 0 0 n/a n/a 3 n/a
...
1/1/13 On On 9500 30000 802.3at Class 4 3 n/a
1/1/14 On Non-PD 0 0 n/a n/a 3 n/a
...
1/1/48 Off Off 0 0 n/a n/a 3 n/a
--------------------------------------------------------------------------
Total 99900 288600
</pre>

Show power detail overview:
show inline power detail

<pre>
device# show inline power detail

Power Supply Data On stack 1:
++++++++++++++++++

Power Supply Data:
++++++++++++++++++

Power Supply #1:
Max Curr: 13.7 Amps
Voltage: 54.0 Volts
Capacity: 740 Watts
power supply 2 is not present
power supply 3 is not present

POE Details Info. On Stack 1 :

General PoE Data:
+++++++++++++++++

Firmware
Version
--------
02.1.0

Cumulative Port State Data:
+++++++++++++++++++++++++++

#Ports #Ports #Ports #Ports #Ports #Ports #Ports
Admin-On Admin-Off Oper-On Oper-Off Off-Denied Off-No-PD Off-Fault
-------------------------------------------------------------------------
1 47 1 47 0 0 0

Cumulative Port Power Data:
+++++++++++++++++++++++++++

#Ports #Ports #Ports Power Power
Pri: 1 Pri: 2 Pri: 3 Consumption Allocation
-----------------------------------------------
0 0 1 0.751 W 30.0 W
</pre>

=== Limit POE Power ===

Default is 30 W (30,000 mW), which on a 48 port only allows 24 ports (half) = 720 mW of 740 W Max

To limit to 25 W, which allows 29 ports:

int ent ethernet 1/1/1 to 1/1/48
inline power
inline power power-limit 25000

== Full Clear VLANs Example ==

Enable edit:
<pre>
ICX6450-48 Switch>
enable Enter Privileged mode
ping Ping IP node
show Display system information
stop-traceroute Stop current TraceRoute
traceroute TraceRoute to IP Node
ICX6450-48 Switch>
ICX6450-48 Switch>enable
No password has been assigned yet...
ICX6450-48 Switch#
ICX6450-48 Switch#show config
!
...
...
</pre>

See Config:
<pre>
ICX6450-48 Switch#show config
!
Startup-config data location is flash memory
!
Startup configuration:
!
ver 07.4.00T311
!
stack unit 1
module 1 icx6450-48-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
!
vlan 4 name Management by port
tagged ethe 1/1/1
!
vlan 192 name my_lab by port
tagged ethe 1/1/1
untagged ethe 1/1/2 to 1/1/48
!
!
!
!
!
!
!
!
!
!
!
!
ip address 10.10.10.50 255.255.255.0
no ip dhcp-client enable
ip default-gateway 10.10.10.1
username admin password .....

!
!
!
!
!
!
end
</pre>

Edit settings:
<pre>
ICX6450-48 Switch#configure terminal
ICX6450-48 Switch(config)#no vlan 4
ICX6450-48 Switch(config)#no vlan 192
ICX6450-48 Switch(config)#write terminal
...
</pre>

Write temporary config:
<pre>
ICX6450-48 Switch(config)#write terminal
Current configuration:
!
ver 07.4.00T311
!
stack unit 1
module 1 icx6450-48-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
!
!
!
!
!
!
!
!
!
!
!
!
ip address 10.10.10.50 255.255.255.0
no ip dhcp-client enable
ip default-gateway 10.10.10.1
username admin password .....

!
!
!
!
!
!
end
</pre>

Save to memory:
<pre>
ICX6450-48 Switch(config)#write memory
Write startup-config done.

ICX6450-48 Switch(config)#Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.
</pre>

If you wanted to change the IP:
<pre>
ICX6450-48 Switch(config)#ip address 10.10.10.20 255.255.255.0
ICX6450-48 Switch(config)#ip default-gateway 10.10.10.2
</pre>

== keywords ==

Ruckus/ICX-6450 - Revision history

Kenneth at 18:49, 16 July 2024

Kenneth: /* Enable POE */