inline power ethernet <INTERFACE> power-by-class <0-4>As far as I recall, it won't stop you from using 3rd party optics of any sort, but the optical monitoring will be disabled by default for non Brocade optics and can be overridden with a console command. Of course, if you're ordering from FS.com just have them code the optics or DACs as Brocade. There's no secret key being used.
You could always segment SSH access onto a dedicated management vlan if you want to lock it down. Essentially, apply ACLs to the VE's for your device vlans that deny access to http/https/ssh/telnet to the VE IPs and the switch IP. Or go nuts and use a different RFC1918 range for the management vlan and just lock everthing else out of it.
I'm still wracking my brain on this one. Besides the individual delta fan p/n (which look to be different on every fan tray I can find) everything else is identical. Wiring is the same on all 3 fan trays I have and I don't see a controller chip on the fan tray itself that could possibly need a firmware update. Is there a config or command I'm missing here?
To close this out, last night I decided to try to plug the new fan tray in again and fiddle with the fan speed settings. To my shock, when I slid the fan in it immediately spun down to match the low RPM of the other fan tray! I've made no changes besides utilizing the QSFP+ uplinks, which if anything would have put a higher heat load in the switch.
Current configuration:
!
ver 08.0.10mT313
!
stack unit 1
module 1 icx6450-24p-poe-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
no legacy-inline-power
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
!
vlan 10 by port
tagged ethe 1/1/7 ethe 1/2/1
untagged ethe 1/1/1 ethe 1/1/14
!
!
no telnet server
!
!
end# oct/11/2023 15:47:08 by RouterOS 7.9
/interface bridge
add admin-mac=48:8F:5A:40:F2:C0 auto-mac=no \
ingress-filtering=no name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=1-INTERNAL vlan-id=1
add interface=bridge name=10-VW vlan-id=10
/interface list
add name=WAN
add name=LAN
/ip pool
add name=dhcp-pool-1 ranges=10.120.0.100-10.120.0.254
add name=dhcp-pool-10 ranges=10.120.10.100-10.120.10.254
/ip dhcp-server
add address-pool=dhcp-pool-1 interface=bridge lease-time=10m name=defconf
add address-pool=dhcp-pool-10 interface=10-VW lease-time=10m name=\
dhcp-server-10-vw
/interface bridge port
add bridge=bridge frame-types=\
admit-only-untagged-and-priority-tagged hw=no interface=ether8 pvid=10
add bridge=bridge frame-types=admit-only-vlan-tagged hw=no \
ingress-filtering=no interface=ether9
add bridge=bridge hw=no ingress-filtering=no interface=\
ether10 pvid=10
add bridge=bridge frame-types=admit-only-vlan-tagged hw=no \
ingress-filtering=no interface=sfp-sfpplus1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set accept-router-advertisements=yes max-neighbor-entries=8192
/interface bridge vlan
add bridge=bridge comment=vw tagged=bridge,sfp-sfpplus1,ether9 vlan-ids=10
add bridge=bridge comment=disabled vlan-ids=999
/interface list member
add interface=bridge list=LAN
add interface=ether1 list=WAN
/ip address
add address=10.120.0.1/24 interface=bridge network=10.120.0.0
add address=10.120.10.1/24 interface=10-VW network=10.120.10.0
add address=10.120.11.1/24 interface=wg1 network=10.120.11.0
/ip dhcp-client
add interface=ether1 use-peer-dns=no
/ip dhcp-server network
add address=10.120.0.0/24 dns-server=10.120.0.1 gateway=\
10.120.0.1 netmask=24
add address=10.120.10.0/24 dns-server=10.120.10.1 domain=example.com \
gateway=10.120.10.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8 use-doh-server=\
https://cloudflare-dns.com/dns-query verify-doh-cert=yes
/ip firewall filter
add action=accept chain=forward comment="Allow established & related" \
connection-state=established,related
add action=drop chain=forward comment="Drop invalid" connection-state=invalid
add action=accept chain=forward in-interface=10-VW out-interface-list=WAN
add action=drop chain=forward comment="Drop everything else (default)"
add action=masquerade chain=srcnat comment="NTP NAT Masquerade" dst-port=123 \
protocol=udp to-ports=12300-12390
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
/system resource irq rps
set sfp-sfpplus1 disabled=noICX6450-24P Router(config)#show vlan 10
Total PORT-VLAN entries: 2
Maximum PORT-VLAN entries: 64
Legend: [Stk=Stack-Id, S=Slot]
PORT-VLAN 10, Name [None], Priority level0, Spanning tree Off
Untagged Ports: (U1/M1) 1 14
Tagged Ports: (U1/M1) 7
Tagged Ports: (U1/M2) 1
Uplink Ports: None
DualMode Ports: None
Mac-Vlan Ports: None
Monitoring: Disabled
ICX6450-24P Router(config)#show int e 1/2/1
10GigabitEthernet1/2/1 is up, line protocol is up
Port up for 2 minutes 28 seconds
Hardware is 10GigabitEthernet, address is cc4e.2407.4a99 (bia cc4e.2407.4a99)
Configured speed 10Gbit, actual 10Gbit, configured duplex fdx, actual fdx
Member of 1 L2 VLANs, port is tagged, port state is FORWARDING
BPDU guard is Disabled, ROOT protect is Disabled, Designated protect is Disabled
Link Error Dampening is Disabled
STP configured to ON, priority is level0, mac-learning is enabled
Flow Control is enabled
Mirror disabled, Monitor disabled
Mac-notification is disabled
Not member of any active trunks
Not member of any configured trunks
No port name
MTU 1500 bytes, encapsulation ethernet
300 second input rate: 40696 bits/sec, 1 packets/sec, 0.00% utilization
300 second output rate: 26400 bits/sec, 11 packets/sec, 0.00% utilization
8508 packets input, 28994733 bytes, 0 no buffer
Received 687 broadcasts, 1097 multicasts, 6724 unicasts
51065 input errors, 45581 CRC, 0 frame, 0 ignored
0 runts, 0 giants
69722 packets output, 16326036 bytes, 0 underruns
Transmitted 2592 broadcasts, 9434 multicasts, 57696 unicasts
0 output errors, 0 collisions
Relay Agent Information option: Disabled
Egress queues:
Queue counters Queued packets Dropped Packets
0 0 0
1 0 0
2 0 0
3 0 0
4 0 0
5 0 0
6 0 0
7 0 0