Drag to reposition cover

Brocade ICX Series (cheap & powerful 10gbE/40gbE switching)

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

js00

New Member
Dec 6, 2022
14
0
1
No, it depends on the firmware that is installed; the device will either boot 'S' (switch) or 'R' (router) firmware depending on what has been loaded into its flash.
Private IPs where working fine between my machines so it would be in L2?
 

kpfleming

Active Member
Dec 28, 2021
432
222
43
Pelham NY USA
Private IPs where working fine between my machines so it would be in L2?
There's really not enough information to be able to answer this question.

If your statement is "I have two machines onto which I have configured addresses from the RFC 1918 ranges and those machines are able to communicate with each other when connected through this ICX box", then it could be that the ICX is running L2 firmware... it could also be running L3 firmware in a factory-default configuration where there is only a single VLAN and no routing configured.

In either case it doesn't matter whether the addresses are 'private' (RFC 1918) or 'public'.
 

kemic

New Member
Aug 15, 2015
26
4
3
Forgive me if this has been addressed in this massive thread already…

I’m trying to configure the rear ports as an LACP lag and for some reason when I add the lag primary port to a vlan as a tagged port, one of the ports in the lag goes down and won’t come back up until I reboot the switch. I tried forcing it up as well with no luck. I get the feeling it’s an STP thing. After the switch reboots, everything seems good. Any tips?
 

Craig Curtin

Member
Jun 18, 2017
103
20
18
60
Forgive me if this has been addressed in this massive thread already…

I’m trying to configure the rear ports as an LACP lag and for some reason when I add the lag primary port to a vlan as a tagged port, one of the ports in the lag goes down and won’t come back up until I reboot the switch. I tried forcing it up as well with no luck. I get the feeling it’s an STP thing. After the switch reboots, everything seems good. Any tips?
Which Switch ? Show us the config so we can see the ports you are using ? Dynamic or static LACP - who/what is on the other end and what are they configured for ? It does sound like STP though

Do you have router firmware or switch firmware on the unit ?

Craig
 

Craig Curtin

Member
Jun 18, 2017
103
20
18
60
Private IPs where working fine between my machines so it would be in L2?
Also unless you are really into setting up ACLs on the switch and really understanding networking and what you are letting yourself in for - i would not be putting one of these as front facing to the internet without a hefty firewall in front.

Remember this switch code is out of date and is freely available on the internet for hackers to pore over and look for holes etc.

Craig
 

ramicio

Member
Nov 30, 2022
78
14
8
Could it be a counterfeit NIC? The eBay listing is for a massive quantity of cards, and they've been listed for years. Yet somehow the picture they show has the same MAC address as the card I have. Luck of the draw or what? What do I do?
 

ramicio

Member
Nov 30, 2022
78
14
8
Okay, I am going to bark up the tree of where I bought the NIC. The YottaMark info just shows that it's a NIC. It has ZERO trace information shown on YottaMark's site. No model number or ANY info, whatsoever. If I go to another auction where they show a picture of it, and enter that into YottaMark, it shows the correct info about it and even the MAC address.

I ordered another NIC. One from an auction where they're only selling one, and it's explicitly said that what is in the picture is what I will get, and the YottaMark checks out.
 

ramicio

Member
Nov 30, 2022
78
14
8
I must be a complete failure on some level. When I'm under the configuration for a port, just to be curious about setting MTU size, I go to type "ip", and my only options are "ipg" and "ipv6-neighbor". Doing "ip" and space says "unrecognized command." I'm about to just send this thing back and wait until I can afford a bunch of other switches I can stack together to give me all the ports I need.
 

Craig Curtin

Member
Jun 18, 2017
103
20
18
60
I must be a complete failure on some level. When I'm under the configuration for a port, just to be curious about setting MTU size, I go to type "ip", and my only options are "ipg" and "ipv6-neighbor". Doing "ip" and space says "unrecognized command." I'm about to just send this thing back and wait until I can afford a bunch of other switches I can stack together to give me all the ports I need.
Have you read the config doco that is linked in the first post - there is a comprehensive doc from the manufacturers on all the options in L3 mode

Craig
 
  • Like
Reactions: itronin

ramicio

Member
Nov 30, 2022
78
14
8
Have you read the config doco that is linked in the first post - there is a comprehensive doc from the manufacturers on all the options in L3 mode

Craig
I don't know what this stuff means, so I don't even know what documentation I'm looking for. I'm in over my head, and it would be best to just sell it all.
 
  • Wow
Reactions: itronin

Craig Curtin

Member
Jun 18, 2017
103
20
18
60
I don't know what this stuff means, so I don't even know what documentation I'm looking for. I'm in over my head, and it would be best to just sell it all.
Well you are dealing with enterprise level gear so there will be a steep learning curve to scale if you have not worked with this type of equipment before - or at least had exposure to similar network gear and concepts.

Craig
 
  • Like
Reactions: ramicio

kemic

New Member
Aug 15, 2015
26
4
3
Which Switch ? Show us the config so we can see the ports you are using ? Dynamic or static LACP - who/what is on the other end and what are they configured for ? It does sound like STP though

Do you have router firmware or switch firmware on the unit ?

Craig
Thanks for the reply.

Switch is an ICX 6610 with router FW. Ports I'm using are 1/2/2 and 1/2/3. Dynamic LACP. Latest stable version of TrueNAS core on the other end, went thru the prompts to create the lag on the TrueNAS and everything is all good only had to reboot the switch to make the other port come up. I suspect STP like I said or just general weirdness with using the breakout cables on the rear ports? I can't seem to make speed-duplex 10g-full stick on 1/2/2 either. Command doesn't produce any error but the config doesn't show like the other ports. No issues setting up the other LACP lag for my Cisco switch either, it's just using the 1Gbe copper ports on the front though...

Relavent Config Sections:
Code:
Current configuration:
!
ver 08.0.30uT7f3
!
stack unit 1
  module 1 icx6610-48p-poe-port-management-module
  module 2 icx6610-qsfp-10-port-160g-module
  module 3 icx6610-8-port-10g-dual-mode-module
!
global-stp
!
!
lag cisco2960 dynamic id 1
 ports ethernet 1/1/45 to 1/1/46
 primary-port 1/1/45
 lacp-timeout short
 deploy
!
lag testing dynamic id 2
 ports ethernet 1/2/2 to 1/2/3
 primary-port 1/2/2
 lacp-timeout short
 deploy
...
vlan 13 name Management by port
 tagged ethe 1/1/45 to 1/1/46 ethe 1/3/1 to 1/3/4
 untagged ethe 1/1/1 to 1/1/2 ethe 1/2/2 to 1/2/3
 router-interface ve 13
 spanning-tree
...
interface ethernet 1/1/45
 dual-mode  10
!
interface ethernet 1/3/1
 speed-duplex 10G-full
!
interface ethernet 1/3/2
 speed-duplex 10G-full
!
interface ethernet 1/3/3
 speed-duplex 10G-full
!
interface ethernet 1/3/4
 speed-duplex 10G-full
!
interface ethernet 1/3/5
 speed-duplex 10G-full
!
interface ethernet 1/3/6
 speed-duplex 10G-full
!
interface ethernet 1/3/7
 speed-duplex 10G-full
!
interface ethernet 1/3/8
 speed-duplex 10G-full
!
...
 

Craig Curtin

Member
Jun 18, 2017
103
20
18
60
Thanks for the reply.

Switch is an ICX 6610 with router FW. Ports I'm using are 1/2/2 and 1/2/3. Dynamic LACP. Latest stable version of TrueNAS core on the other end, went thru the prompts to create the lag on the TrueNAS and everything is all good only had to reboot the switch to make the other port come up. I suspect STP like I said or just general weirdness with using the breakout cables on the rear ports? I can't seem to make speed-duplex 10g-full stick on 1/2/2 either. Command doesn't produce any error but the config doesn't show like the other ports. No issues setting up the other LACP lag for my Cisco switch either, it's just using the 1Gbe copper ports on the front though...

Relavent Config Sections:
Code:
Current configuration:
!
ver 08.0.30uT7f3
!
stack unit 1
  module 1 icx6610-48p-poe-port-management-module
  module 2 icx6610-qsfp-10-port-160g-module
  module 3 icx6610-8-port-10g-dual-mode-module
!
global-stp
!
!
lag cisco2960 dynamic id 1
ports ethernet 1/1/45 to 1/1/46
primary-port 1/1/45
lacp-timeout short
deploy
!
lag testing dynamic id 2
ports ethernet 1/2/2 to 1/2/3
primary-port 1/2/2
lacp-timeout short
deploy
...
vlan 13 name Management by port
tagged ethe 1/1/45 to 1/1/46 ethe 1/3/1 to 1/3/4
untagged ethe 1/1/1 to 1/1/2 ethe 1/2/2 to 1/2/3
router-interface ve 13
spanning-tree
...
interface ethernet 1/1/45
dual-mode  10
!
interface ethernet 1/3/1
speed-duplex 10G-full
!
interface ethernet 1/3/2
speed-duplex 10G-full
!
interface ethernet 1/3/3
speed-duplex 10G-full
!
interface ethernet 1/3/4
speed-duplex 10G-full
!
interface ethernet 1/3/5
speed-duplex 10G-full
!
interface ethernet 1/3/6
speed-duplex 10G-full
!
interface ethernet 1/3/7
speed-duplex 10G-full
!
interface ethernet 1/3/8
speed-duplex 10G-full
!
...
1) The Speed/Duplex settings are meaningless on the 1/2/1 to 1/2/10 ports so they accept the commands but do nothing with them (and do not store in the config - so you are good there

2) Dynamic LACP is a bit hit and miss between vendors - maybe go for static and see how you go

3) You should have Stack Disable in your config at the end of the 3 lines on the initial config - this is mine

SSH@6610-Basement#show run
Current configuration:
!
ver 08.0.30uT7f3
!
stack unit 1
module 1 icx6610-48-port-management-module
module 2 icx6610-qsfp-10-port-160g-module
module 3 icx6610-8-port-10g-dual-mode-module
stack disable

4) Have a read back a couple of pages to some stuff i have posted about issues with my ESXI and 10GB - worth reading through as a couple of the suggestions were to do with Global STP, VRE routing and the like.

Craig
 

AndroidCat

Member
Mar 3, 2015
32
26
8
Thanks for the reply.

Switch is an ICX 6610 with router FW. Ports I'm using are 1/2/2 and 1/2/3. Dynamic LACP. Latest stable version of TrueNAS core on the other end, went thru the prompts to create the lag on the TrueNAS and everything is all good only had to reboot the switch to make the other port come up. I suspect STP like I said or just general weirdness with using the breakout cables on the rear ports? I can't seem to make speed-duplex 10g-full stick on 1/2/2 either. Command doesn't produce any error but the config doesn't show like the other ports. No issues setting up the other LACP lag for my Cisco switch either, it's just using the 1Gbe copper ports on the front though...

...
Between a switch and TrueNAS -
I'd stay away from LAG config, where both link are active at the same time. Instead one link should be active and the other standby for redundancy. Both active never worked well for me (I think they also discourage this somewhere in docs).
 

thebwack

New Member
Jul 7, 2020
13
4
3
Before I go through the manual and reset and config my 7250 I'm curious how it will play with my two 6610 I've already deployed. Mainly wanting to setup a LAG between my 6610 rear breakout and a 7250's SFP ports. The 6610 is on 8.0.30 and the 7250 can go up to 8.0.95. Will these different series and FastIron releases work well together? Getting my serial cable tomorrow. Thanks!
 

vangoose

Active Member
May 21, 2019
326
106
43
Canada
Before I go through the manual and reset and config my 7250 I'm curious how it will play with my two 6610 I've already deployed. Mainly wanting to setup a LAG between my 6610 rear breakout and a 7250's SFP ports. The 6610 is on 8.0.30 and the 7250 can go up to 8.0.95. Will these different series and FastIron releases work well together? Getting my serial cable tomorrow. Thanks!
I have lacp between ICX and Arista, and between ICX and Juniper, and between Arista and Netgear. Different version shouldn't matter at all.
 

LodeRunner

Active Member
Apr 27, 2019
553
235
43
Before I go through the manual and reset and config my 7250 I'm curious how it will play with my two 6610 I've already deployed. Mainly wanting to setup a LAG between my 6610 rear breakout and a 7250's SFP ports. The 6610 is on 8.0.30 and the 7250 can go up to 8.0.95. Will these different series and FastIron releases work well together? Getting my serial cable tomorrow. Thanks!
As long as both sides of the LAG are the same mode, you shouldn't have a problem. Like vangoose, I have an ICX connected to an Arista using LACP; no issues.