Brocade ICX Series (cheap & powerful 10gbE/40gbE switching)

[Lone Wolf]

You have an older firmware from 2012, so some of fodeesha' s instructions may not work based off recent user setup post. @Lone Wolf recently setup a switch with 07.4 series firmware. Maybe he could share the replacement commands he used to get up and running to latest available firmware.

I WISH I knew the exact commands I used, I would be happy to post them.

sdyoung, it should like you have the same problem I had! Basically what I did was that I dug through the ? menus until I saw a command that let me set an IP. It sounds like your switch already has an IP (I assume from your DHCP server) so go into the webui and scroll to the bottom and look for TFTP and click on Image. Enter the IP of your TFTP server. Under Image File Name put: ICX64xx/ICX64R08030u.bin. Make sure "Primary" is selected. Then click "Copy from Server". If your TFTP server is set up right it should update to the latest firmware. Once its done (I believe you will see the status in the console), type 'reset' in the console and the switch should reboot. Once its booted you should be able to follow the document exactly as all the commands will work. You can skip updating the primary since it's already been done, but do the uboot. And the poe and basically, everything else! It's a good guide and will get you set up.

Let me know if that helps or not!

Edit: make sure the firewall is off on your TFTP server too.

 

[sdyoung]

@Lone Wolf, do you remember what username/password you used to get into the gui? None of the default options I'm finding online have worked.

 

[Lone Wolf]

@Lone Wolf, do you remember what username/password you used to get into the gui? None of the default options I'm finding online have worked.

I don't believe there is one until you set it. I honestly can't remember the commands I used, if it was the ones from the manual or if I had to find a similar command in the menus. I would try the ones from the manual:

username root password yourpasshere
aaa authentication login default local
aaa authentication web default local

Since I've upgraded, I no longer have the old firmware to try and replicate what I did, but I'll do my best to try and remember what I can! If the commands above work you should be able to update the firmware and then you can follow the well-written manual.

 

[sdyoung]

Yeah, I tried those but it was coming back with 'username' and 'aaa' are unrecognized commands. I'll try to make my way through the menus to see if I can find anything else. Thanks for the help man!

 

[sdyoung]

Oh, looks like I just had to get into 'configure terminal' first and was able to set username/password. I'm in the GUI. Thanks again @Lone Wolf and @Vesalius!

 

[tec240]

I have 6450-24P and have updated the firmware and set it up according to the guide. I'm trying to just get inter-vlan routing working.
VLAN 2:
eth 1/1/3, 1/1/4
ve2, 192.168.129.2/24

VLAN 1: all other ports
ve1: 192.168.4.66/24

my laptop is plugged into 1/1/4 (vlan2), static ip 192.168.129.6, gateway 192.168.129.2
PC#2 is plugged into 1/1/7 (vlan1), static ip 192.168.129.39, gateway 192.168.4.66

laptop can ping both ve's, but not PC#2. PC#2 can ping both ve's but not the laptop.

What am I missing? Thanks!

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
kswitch1(config)#sho run
Current configuration:
!
ver 08.0.30uT313
!
stack unit 1
module 1 icx6450-24p-poe-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
router-interface ve 1
!
vlan 2 name z620LAN by port
untagged ethe 1/1/2 ethe 1/1/4
router-interface ve 2
!
!

aaa authentication web-server default local
aaa authentication login default local
enable telnet authentication
hostname kswitch1
ip dhcp-client disable
!
username root password .....
!
!
clock summer-time
clock timezone gmt GMT+06
web-management https
!
!
!
interface ve 1
ip address 192.168.4.66 255.255.255.0
!
interface ve 2
ip address 192.168.129.2 255.255.255.0
!
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

 

[Lone Wolf]

Oh, looks like I just had to get into 'configure terminal' first and was able to set username/password. I'm in the GUI. Thanks again @Lone Wolf and @Vesalius!

Awesome, glad to hear it! You should be able to update the Primary and then follow the guide to have a fully updated and unlocked 6450. Enjoy!

 

[Necrotyr]

I have 6450-24P and have updated the firmware and set it up according to the guide. I'm trying to just get inter-vlan routing working.
VLAN 2:
eth 1/1/3, 1/1/4
ve2, 192.168.129.2/24

VLAN 1: all other ports
ve1: 192.168.4.66/24

my laptop is plugged into 1/1/4 (vlan2), static ip 192.168.129.6, gateway 192.168.129.2
PC#2 is plugged into 1/1/7 (vlan1), static ip 192.168.129.39, gateway 192.168.4.66

laptop can ping both ve's, but not PC#2. PC#2 can ping both ve's but not the laptop.

What am I missing? Thanks!

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
kswitch1(config)#sho run
Current configuration:
!
ver 08.0.30uT313
!
stack unit 1
module 1 icx6450-24p-poe-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
router-interface ve 1
!
vlan 2 name z620LAN by port
untagged ethe 1/1/2 ethe 1/1/4
router-interface ve 2
!
!

aaa authentication web-server default local
aaa authentication login default local
enable telnet authentication
hostname kswitch1
ip dhcp-client disable
!
username root password .....
!
!
clock summer-time
clock timezone gmt GMT+06
web-management https
!
!
!
interface ve 1
ip address 192.168.4.66 255.255.255.0
!
interface ve 2
ip address 192.168.129.2 255.255.255.0
!
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Most likely windows firewall (assuming your clients are Windows).

 

[sdyoung]

Was able to update primary successfully but still having trouble with 'update_uboot'. Switch still doesn't seem to be able to see the TFTP server when in u-boot. Do you know if it's possible to update uboot through the GUI as well? Would primary flash boot sequence be the correct process (Configure>System>Boot Sequence)?

 

[charles3ct]

I can license them, just be aware the copper version (the vdx6740t) draws significant power, it's first gen 10gbase-T PHY, so like a few watts per port. I think they idle around 180w but I don't have any numbers written down from when I had one. also not quiet

I just received a VDX 6740 - Rethinking that I might have taken the wrong pill here - Either way I am going to get to learn something out of it.

I have a pair of them - pretty clean units - only has the 16 Licenses for 10Gb would like to hear about options please.

 

[Lone Wolf]

Was able to update primary successfully but still having trouble with 'update_uboot'. Switch still doesn't seem to be able to see the TFTP server when in u-boot. Do you know if it's possible to update uboot through the GUI as well? Would primary flash boot sequence be the correct process (Configure>System>Boot Sequence)?

Hmmm... are you able to run the other commands properly? 'setenv uboot ICX64xx/kxz10105.bin' works without error? After I updated the Primary in the webui and rebooted, I was able to run those commands. I didn't see a way to update uboot through the webui but since the console commands worked I didn't need to worry about it. If you updated Primary through your TFTP then I assume it's not a firewall issue. You've run 'reset' to reboot the switch after updating the Primary?

 

[tec240]

Most likely windows firewall (assuming your clients are Windows).

That was it. The Windows firewall seems to be blocking pings on 'private' networks. I'll have to dig into that.
Thanks!

 

[sdyoung]

Hmmm... are you able to run the other commands properly? 'setenv uboot ICX64xx/kxz10105.bin' works without error? After I updated the Primary in the webui and rebooted, I was able to run those commands. I didn't see a way to update uboot through the webui but since the console commands worked I didn't need to worry about it. If you updated Primary through your TFTP then I assume it's not a firewall issue. You've run 'reset' to reboot the switch after updating the Primary?

The 'setenv' commands have always worked on mine, even before flashing the new primary image. It just was never able to connect to/ping the TFTP server which I assumed was an issue with the TFTP server/Windows Firewall but that doesn't seem to be the case since no issues flashing via the GUI. So far, I've flashed new primary/secondary and ran 'reload' to reboot the switch.

ICX6450-48P Router>show flash
Stack unit 1:
  Compressed Pri Code size = 9871112, Version:08.0.30uT313 (ICX64R08030u.bin)
  Compressed Sec Code size = 8563580, Version:08.0.30uT311 (ICX64S08030u.bin)
  Compressed Boot-Monitor Image size = 512, Version:07.4.00T310
  Code Flash Free Space = 33636352

 

[sdyoung]

And no issues pinging from either device when switch is booted in the OS.

ICX6450-48P Router>ping 192.168.1.123
Sending 1, 16-byte ICMP Echo to 192.168.1.123, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 192.168.1.123   : bytes=16 time=1ms TTL=128
Success rate is 100 percent (1/1), round-trip min/avg/max=1/1/1 ms.

Pinging 192.168.1.150 with 32 bytes of data:
Reply from 192.168.1.150: bytes=32 time<1ms TTL=64
Reply from 192.168.1.150: bytes=32 time<1ms TTL=64

Ping statistics for 192.168.1.150:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

 

[Lone Wolf]

The 'setenv' commands have always worked on mine, even before flashing the new primary image. It just was never able to connect to/ping the TFTP server which I assumed was an issue with the TFTP server/Windows Firewall but that doesn't seem to be the case since no issues flashing via the GUI. So far, I've flashed new primary/secondary and ran 'reload' to reboot the switch.

Hmmm. Well that's about the limits of what I know about the switch lol. You'll have to wait until one of the more knowledgeable members chimes in. I wish I could be better help!

I've still got the old 07.4.00dT311 version as my Secondary. I wonder if I am able to reboot into the Secondary? Not that it would help you out any, but if someone else runs into the same problem I can always boot into the old version to find the proper commands.

 

[sdyoung]

Hmmm. Well that's about the limits of what I know about the switch lol. You'll have to wait until one of the more knowledgeable members chimes in. I wish I could be better help!

I've still got the old 07.4.00dT311 version as my Secondary. I wonder if I am able to reboot into the Secondary? Not that it would help you out any, but if someone else runs into the same problem I can always boot into the old version to find the proper commands.

No worries, I appreciate all the help @Lone Wolf!

 

[LodeRunner]

No worries, I appreciate all the help @Lone Wolf!

I'm going to ask a question you may have already answered and I just missed it, but is your ethernet cable plugged into the actual management port, or one of the switch ports?

The boot environment will only be able to use the management ethernet port.

 

[sdyoung]

I'm going to ask a question you may have already answered and I just missed it, but is your ethernet cable plugged into the actual management port, or one of the switch ports?

The boot environment will only be able to use the management ethernet port.

Yup, console cable plugged into console port and ethernet cable plugged into management port below.

 

[LodeRunner]

Yup, console cable plugged into console port and ethernet cable plugged into management port below.

OK. From the CLI, usually if the switch can ping the TFTP host, but TFTP isn't working (and Windows Firewall is completely off) then it's possibly a misconfiguration of the TFTP server itself. For example, mine likes to forget the root folder I have the firmware files in, so I have to remember to updated it; on occasion it's bound itself to the wrong interface (when my workstation used to have Hyper-V enabled, it would for some reason prefer the HV NIC that was not configured to an interface rather than the PHY). I've also had problems with TFTPd64 when files I want are not in the root folder, so I would move them up one level and the issue would go away.

 

[Epoxymonk]

Hello,

Thanks to this thread I've ordered an ICX7250 off of Ebay! The switch came running firmware version 08.0.90d and I'm not sure what version I should upgrade to. Fohdeesha's guide has 08.0.95f but I that there is a newer version, 09.0.10b that includes the 7250. Which should I upgrade to?

Thanks!