Well, you have more than one VE, so you're effectively using those
SSH@sw-core-1(config-vrf-secure)#address-family ipv4
Error: has reached maximum system limit of maximum number of IPv4 routes
available IPv4 routes for non-default VRF 0SSH@sw-core-1(config-vrf-SECURE)#show default values
sys log buffers:50 mac age time:300 sec telnet sessions:5
ip arp age:10 min bootp relay max hops:4 ip ttl:64 hops
ip addr per intf:24
when multicast enabled :
igmp group memb.:260 sec igmp query:125 sec hardware drop: enabled
when ospf enabled :
ospf dead:40 sec ospf hello:10 sec ospf retrans:5 sec
ospf transit delay:1 sec
when bgp enabled :
bgp local pref.:100 bgp keep alive:60 sec bgp hold:180 sec
bgp metric:10 bgp local as:1 bgp cluster id:0
bgp ext. distance:20 bgp int. distance:200 bgp local distance:200
System Parameters Default Maximum Current Configured
ip-arp 4000 64000 4000 4000
ip-static-arp 512 6000 512 512
ip-cache 10000 32768 10000 10000
ip-filter-port 3066 3066 3066 3066
ip-filter-sys 2048 8192 2048 2048
l3-vlan 32 1024 32 32
ip-qos-session 1024 16000 1024 1024
mac 32768 32768 32768 32768
ip-route 12000 15168 12000 12000
ip-static-route 64 2048 64 64
vlan 64 4095 64 64
spanning-tree 32 254 32 32
mac-filter-port 16 256 16 16
mac-filter-sys 32 512 32 32
ip-subnet-port 24 128 24 24
session-limit 8192 16384 8192 8192
view 10 65535 10 10
virtual-interface 255 512 255 255
hw-traffic-condition 896 896 896 896
rmon-entries 1024 32768 1024 1024
igmp-snoop-mcache 512 8192 512 512
mld-snoop-mcache 512 8192 512 512
ip6-route 908 2884 908 908
ip6-static-route 178 576 181 181
ip6-cache 908 2884 908 908
msdp-sa-cache 4096 8192 4096 4096
gre-tunnels 16 64 16 16
hw-ip-route-tcam 16384 16384 16384 16384
ip-vrf 16 16 16 16
ip-route-default-vrf 12000 15168 12000 12000
ip6-route-default-vr 908 2884 908 908
ip-route-vrf 1024 15168 1024 1024
ip6-route-vrf 100 2884 100 100
pim-hw-mcache 1024 6144 1024 1024
pim6-hw-mcache 512 1024 512 512
igmp-snoop-group-add 4096 8192 4096 4096
mld-snoop-group-addr 4096 8192 4096 4096
mac-notification-buf 4000 16000 4000 4000
traffic-policies-sys 1024 1024 1024 1024
dot1x-mka-policy-gro 8 8 8 8
openflow-flow-entrie 1024 12000 1024 1024
openflow-pvlan-entri 40 256 40 40
openflow-unprotected 40 256 40 40
openflow-group-selec 0 120 0 0
openflow-nexthop-ent 0 1024 0 0
max-dhcp-snoop-entri 1024 3072 1024 1024
max-static-inspect-a 512 1024 512 512The seller said that they had no idea whether the reversed pins was an error or if that cable is not intended to work with the ICX 7250/7450. So, sounds like it's not the right option. I'm either going to make my own cable or order the double-adapter others linked to.
yep, as the very first page of the VRF configuration section of the manual states, you have to lower the amount of routes assigned to the default VRF so you have some to assign to non-defaults. I typically just run:
Hello all , I'm trying to do the same without success, using just one breakout port (an entire 4x 10G connect via QSFP DAC) for stacking across a pair of 6610 and leave the all 40G ports to connect to my servers as well as the other breakout port free.
I tried to mimic the old Cisco switch config where I used a no switchport command on the interface to turn it to L3 interface and assigned IP address to it directly. What is the downside of assigning IP directly to the interface and not to virtual interface?
SSH@ICX6610-48P#ping 8.8.8.8 source 192.168.0.11
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 8.8.8.8 : bytes=16 time=15ms TTL=56
Success rate is 100 percent (1/1), round-trip min/avg/max=15/15/15 ms.
SSH@ICX6610-48P#ping 8.8.8.8 source 192.168.3.1
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 8.8.8.8 : bytes=16 time=14ms TTL=56
Success rate is 100 percent (1/1), round-trip min/avg/max=14/14/14 ms.
SSH@ICX6610-48P#ping 8.8.8.8 source 192.168.11.1
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Request timed out.
No reply from remote host.
SSH@ICX6610-48P#ping 8.8.8.8 source 192.168.12.1
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 8.8.8.8 : bytes=16 time=16ms TTL=55
Success rate is 100 percent (1/1), round-trip min/avg/max=16/16/16 ms.
SSH@ICX6610-48P#ping 8.8.8.8 source 192.168.35.1
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 8.8.8.8 : bytes=16 time=14ms TTL=56
Success rate is 100 percent (1/1), round-trip min/avg/max=14/14/14 ms.
SSH@ICX6610-48P#ping 8.8.8.8 source 10.0.0.1
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Request timed out.
No reply from remote host.
SSH@ICX6610-48P#ping 8.8.8.8 source 192.168.254.1
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Request timed out.
No reply from remote host. protocols {
ospf {
area 0.0.0.0 {
area-type {
normal
}
network 172.16.0.0/16
network 192.168.29.0/24
}
log-adjacency-changes {
}
parameters {
abr-type cisco
router-id 91.200.xxx.xxx
}
}configure
set protocols static route 192.168.11.0/24 next-hop 192.168.29.1
set protocols static route 10.0.0.0/8 next-hop 192.168.29.1
etc
commit;saveMy problem is different. I would like ICX itself to access the internet. Vlans 11 and 100 do not need to access internet by design. I'm routing everything through OSPF. I've added vlans to osfp routing and they work just fine. The routed interface on the ICX is also added to OSPF but it cannot access the internet. That is what I'm trying to figure out...
!
interface ethernet 1/3/1
port-name Uplink to EdgeRoute6 on port eth5
ip address 192.168.29.1 255.255.255.0
ip ospf area 0
!
!
router ospf
area 0
neighbor 192.168.29.254
!
ip route 0.0.0.0/0 192.168.29.254that doesn't change the issue, the ICX's IP address in those vlans is still in those subnets, and the edgerouter has no idea how to get packets back to those subnets. If you want to just allow traffic back to the ICX IPs themselves but not the rest of the subnet, it would be
configure
set protocols static route 192.168.11.1/32 next-hop 192.168.29.1
set protocols static route 10.0.0.1/32 next-hop 192.168.29.1
etc
commit;saveI don't need internet for those two subnets - they are for storage connections inside my lan, thus I did not include them into OSPF routing. Router does not need to know about them at all.
SSH@ICX6610-48P#ping 8.8.8.8
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Request timed out.
No reply from remote host.
SSH@ICX6610-48P#ping 192.168.29.254 (EDGE ROUTER)
Sending 1, 16-byte ICMP Echo to 192.168.29.254, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 192.168.29.254 : bytes=16 time<1ms TTL=64
Success rate is 100 percent (1/1), round-trip min/avg/max=0/0/0 ms.
SSH@ICX6610-48P#ping 192.168.7.1 (REMOVE SUBNET)
Sending 1, 16-byte ICMP Echo to 192.168.7.1, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 192.168.7.1 : bytes=16 time=14ms TTL=63
Success rate is 100 percent (1/1), round-trip min/avg/max=14/14/14 ms.
SSH@ICX6610-48P#ping 192.168.23.1 (REMOTE SUBNET)
Sending 1, 16-byte ICMP Echo to 192.168.23.1, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 192.168.23.1 : bytes=16 time=3ms TTL=63
Success rate is 100 percent (1/1), round-trip min/avg/max=3/3/3 ms.Understandable, but the problem relies on what I and @fohdeesha stated before: for its comunication the switch itself will choose the first address configured, and if it resides on an unknown network on the ER side, it can't route the traffic back for the response... you can define a IP range (that belongs to the OSPF area 0) for the loopback0, so the ER will be aware of the switch address and it can correctly route the traffic back...
You aren't understanding the issue, so I'll try and explain it a third and final time before moving on and letting you try and figure it out on your own. Your ICX does have internet access, as evidenced by the fact every IP address on the ICX that also has a proper return route on the edgerouter can ping out to 8.8.8.8. Which leaves me to assume what you actually want is not "the ICX needs to have internet access (because it already does, on like 6 of it's 8 addresses, but you're not happy about it) but you actually mean "I want the ICX to have internet access from EVERY IP it owns". For this, I've provided the commands to solve this on your edgerouter twice now.