Brocade ICX Series (cheap & powerful 10gbE/40gbE switching)

[Jorge Perez]

Anyone know how to set up DHCP relay on an icx6450?

I set an IP Helper Address on the VIF "ip helper-address 1 10.100.255.1"

I can't seem to enable "DHCP Snooping Relay Information"

 

[Silly Valley Serf]

For anyone struggling setting up key-based SSH authentication, as I did, use

ssh-keygen -t ssh-rsa 2048

when generating keys. The default on my system was greater than 2048. Also, add the following to /etc/ssh/ssh_config client-side, replacing values where appropriate.

Host sens-o-matic sens-o-matic.thegalaxy 192.168.0.100
    HostKeyAlgorithms +ssh-rsa
    PubkeyAcceptedAlgorithms=+ssh-rsa
    KexAlgorithms +diffie-hellman-group1-sha1
    IdentityFile /home/seamonkey/.ssh/brocade

I ran into this today. In my case I put the authentication tweaks in ~/.ssh/config - since it's unlikely anyone else will be using my Linux box, or needing to log into the switch.

 

[Silly Valley Serf]

Forgot to mention, I picked up an ICX6450-48P for $125 + tax from an eBay seller in my area last week. It will serve as the nexus of a home network, with multiple PoE APs and IP cameras, once I get enough round tuits. I mostly wanted it for PoE, VLANs, and for the 10GbE to use with a storage server I've got. But it looks like this thing could almost replace my pfSense router. Thanks @fohdeesha for the docs & downloads!

 

[kpfleming]

But it looks like this thing could almost replace my pfSense router.

As long as you aren't using NAT of any kind, or tunneling, or DHCPv6 prefix delegation, or ... There are lots of things that the boxes we call 'routers' today can do which the ICX L3 'router' software does not do.

 

[Silly Valley Serf]

Right, that's why I said "almost".

 

[Jorge Perez]

As long as you aren't using NAT of any kind, or tunneling, or DHCPv6 prefix delegation, or ... There are lots of things that the boxes we call 'routers' today can do which the ICX L3 'router' software does not do.

They do support IPv6-PD though?

 

[kpfleming]

They do support IPv6-PD though?

That depends on how you define 'support' I suppose. In a home LAN/homelab environment, the most useful support would be for the ICX to act as a DHCPv6-PD client to get a prefix from the ISP and then allocate subnets from that prefix to the VLANs it is managing. As best I can tell the ICX software has no ability to do that.

The ICX DHCPv6 server can delegate prefixes though, and the DHCPv6 relay is able to do some sort of notifications based on PD messages passing through.

 

[Jorge Perez]

That depends on how you define 'support' I suppose. In a home LAN/homelab environment, the most useful support would be for the ICX to act as a DHCPv6-PD client to get a prefix from the ISP and then allocate subnets from that prefix to the VLANs it is managing. As best I can tell the ICX software has no ability to do that.

The ICX DHCPv6 server can delegate prefixes though, and the DHCPv6 relay is able to do some sort of notifications based on PD messages passing through.

IPv6-PD is all they can do, and they require proper IPv6 support.
So they do not work with ATTs equipment which receives a /60 and hands out /64s.

 

[epicurean]

I am having 2 particular issues with regards to my so far trusty ICX6450-48OP. Hopefully forumers here can advise me as such
1) How do you remove a LAN to SFP+ adapter from the 10GB ports without ripping the thing apart? I dont want to damage the port, but I cant seem to remove the adapter

2) In recent times, one of the ports to a dahua VTO video door seems to cease it connection with no power to the port. ( no blinking lights). When I unplug and replug the cat 6 cable back in, both ports blink simultaneously for a while. AFter a few repeated tries, its seems to be ok. But within the hour, it goes off again. Does not matter which port I use.

Any clues?

 

[LodeRunner]

I am having 2 particular issues with regards to my so far trusty ICX6450-48OP. Hopefully forumers here can advise me as such
1) How do you remove a LAN to SFP+ adapter from the 10GB ports without ripping the thing apart? I dont want to damage the port, but I cant seem to remove the adapter

After removing the RJ-45 cable, you should be able to pull the SFP out, no problem. There's a little locking bit that you need to swing out that should pop the SFP loose, then you just slide it out. The gold colored part of the SFPs I use is the latch:

 

[epicurean]

So I should flip the latch UP whilst trying to remove the adapter?

 

[LodeRunner]

Flipping the latch (up or down depends on the port orientation). But yes, once the latch releases it should allow the the SFP to slide free.

 

[epicurean]

After removing the RJ-45 cable, you should be able to pull the SFP out, no problem. There's a little locking bit that you need to swing out that should pop the SFP loose, then you just slide it out. The gold colored part of the SFPs I use is the latch:View attachment 26527

Unfortunately, the adapter is still stuck and not moving, even after I moved the latch out. My adapter is the Wiltek SFP-10G-T if it makes any difference

 

[klui]

Either your SFP cage or transceiver latch may be damaged and not allowing the latch to disengage. It should disengage very easily. See

Designs are all pretty much the same. You could probably get a small screwdriver and gently push the bottom portion that moves inward to help it disengage. But if the metal in the cage is bent too much, maybe from someone pulling on a transceiver without disengaging the latch then I can see how the retaining clip could be bent enough to prevent normal disengagement.

Also try using this technique SFP removal with Fibers Connected

 

[LodeRunner]

You could probably get a small screwdriver and gently push the bottom portion that moves inward to help it disengage. But if the metal in the cage is bent too much, maybe from someone pulling on a transceiver without disengaging the latch then I can see how the retaining clip could be bent enough to prevent normal disengagement.

Also try using this technique SFP removal with Fibers Connected

Tiny flat-tip screwdriver was going to be my next suggestion. I had a DAC that wouldn't release all the way; had to pull the tab as far as it would go, then use a screwdriver to actuate the release lever far enough to get it out without breaking anything.

 

[Harmony]

Can someone guide me through creating a VLAN ID 1002 for few different ports that I will be trunked into another router for VPN access. Not sure what commands to use on the 6450

Currently done

Current configuration:
!
ver 08.0.30uT313
!
stack unit 1
  module 1 icx6450-24p-poe-port-management-module
  module 2 icx6450-sfp-plus-4port-40g-module
  no legacy-inline-power
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
 router-interface ve 1
!
vlan 1002 name VPN by port
 tagged ethe 1/1/3

 

[audiobahn]

Unfortunately, the adapter is still stuck and not moving, even after I moved the latch out. My adapter is the Wiltek SFP-10G-T if it makes any difference

Have you managed to find a solution for this? I just bought a used 7150-C12P and I'm finding the exact same problem. There's two optical SFPs which are not budging to get out. Ideally I want to replace them with ethernet ones but really don't know how to remove them without damaging the port. Is there a way to find out what SFPs are installed and if they work as they should? Unfortunately I don't have an optical setup to test it.

 

[audiobahn]

Have you managed to find a solution for this? I just bought a used 7150-C12P and I'm finding the exact same problem. There's two optical SFPs which are not budging to get out. Ideally I want to replace them with ethernet ones but really don't know how to remove them without damaging the port. Is there a way to find out what SFPs are installed and if they work as they should? Unfortunately I don't have an optical setup to test it.

UPDATE: I've finally managed to remove them so sharing my experience in case someone needs it in the future.

I ended up using a retractable craft knife. Use the sharp end of the blade to get between the clip and the SFP module (as per the photo) and push the blade in, a little click and the SFP comes straight out.

The previous owner must have been a savage as they clearly tried all no-no methods, including levering it with a screwdriver and using pliers! The evidence is on the marks on the switch and the fact one of the clips is completely bend inside! Now I need to get some new 10G RJ45 SFPs to test the ports before declaring this a success purchase. Any recommendations?

 

[epicurean]

UPDATE: I've finally managed to remove them so sharing my experience in case someone needs it in the future.

I ended up using a retractable craft knife. Use the sharp end of the blade to get between the clip and the SFP module (as per the photo) and push the blade in, a little click and the SFP comes straight out.

The previous owner must have been a savage as they clearly tried all no-no methods, including levering it with a screwdriver and using pliers! The evidence is on the marks on the switch and the fact one of the clips is completely bend inside! Now I need to get some new 10G RJ45 SFPs to test the ports before declaring this a success purchase. Any recommendations?

Thanks!.Wow, I gotta try that craft knife trick. Almost in despair that I cannot get a simple adapter module out of the switch

 

[zrail2]

I recently decided to flip my ICX-6450-24 to the back of my rack to simplify some cable management. That part went well, but now I have a hot switch that's trying to pull air from the back of a crowded cabinet and it's hovering around 70C.

I know it's physically possible to flip the fan around where it sits, but is that going to provide adequate air flow? Or is there a way to mount it such that it blows out the side?

Update: I started reading the thread from the beginning and found the answer to my question:https://forums.servethehome.com/ind...gbe-40gbe-switching.21107/page-35#post-205200

In sum: yes just reversing the fan orientation is fine.