@fohdeesha you have or know of any guilds for using manifest/tftp for updating firmware and getting a base config on a icx 6k? Looking for a way to automate the upgrade and config of icx 6450.
I knew the case matters and that was after changing it around multiple times trying to get it to work. I wasnt able to copy and paste but I know see how to do it. Thanks for all of this wealth of knowledge!No you weren't supposed to know or need to do that, the command in the guide works when copy pasted, if you had to remove the leading folder path, then something got moved around when you extracted the zip archive. Also it's ICX64xx/ICX64R08030u.bin, not icx64xx/icx64r08030u.bin - case matters - this is why I always recommend just copy pasting from the guide and not trying to manually type everything
To be fair, I got stuck here as well. I had set up the tftp server and selected the 6610 folder directly.No you weren't supposed to know or need to do that, the command in the guide works when copy pasted, if you had to remove the leading folder path, then something got moved around when you extracted the zip archive. Also it's ICX64xx/ICX64R08030u.bin, not icx64xx/icx64r08030u.bin - case matters - this is why I always recommend just copy pasting from the guide and not trying to manually type everything
The wheels are worth about $600 a pop secondhand, take seconds to remove, and would sell within hoursAnyone who'd mess with either of those has no soul.
The excitement worked in my favour actually. I read the guide repeatedly while my switch was shipping down under cause it was taking too damn longHaving never done this before its easy to mess up, I think half the battle is everyone is excited to play with their new switch and dont freaking read the guide.
Hello everyone,
right now I have a Mikrotik hAP ac2 router configured as a Router on a Stick with a Cisco WS-C3750G-24PS-S switch. I have a few VLANS (I can provide the router config) for my home lab.
1) I recently bought a Layer 3 switch ICX6610 and hope to do the VLAN routing on the Switch level (I already Unlocked and created VLANS on the switch with the same VLAN IDs thanks to @fohdeesha ). What is the best way to achieve this?
Edit: I already set up the Inter VLAN routing as described on this youtube video. but I am not sure if that's enough?
You have a great Router, its called an ICX6610.2) I might have to upgrade the router as it only supports gigabit internet, what would be the best bang for the buck router (since I already have an L3 switch), I am open to trying non-Makrotik routers as well.
Probably not. At a guess you probably cannot get enough public IP's from your provider so you'll be using private IP's on your internal network.3) Do you think I can get away with ISP ISP-provided router since the switch has ACL? so I don't need a fancy router?
I already have a transit VLAN setup between an ICX6610-48P Layer 3 Switch and a MikroTik HAP ac² router with the same VLANs.There are a few different ways to design Internet egress with what you have, depends on requirements and need I suppose.
Try searching here for transit vlan, Internet transit vlan etc.
If you have spare PC hardware you may also want to look at one of the router OS distributions: opnsense, pfsense, vyos, dd-wrt, etc. etc. etc.
you are about to fall down the rabbit hole!![]()
![]()
/ip route
add dst-address=10.0.10.0/24 gateway=10.0.10.1
add dst-address=10.0.15.0/24 gateway=10.0.15.1
add dst-address=10.0.20.0/24 gateway=10.0.20.1
add dst-address=10.0.30.0/24 gateway=10.0.30.1
add dst-address=10.0.40.0/24 gateway=10.0.40.1
add dst-address=10.0.50.0/24 gateway=10.0.50.1
add dst-address=10.0.99.0/24 gateway=10.0.99.1
(config)$ int ve 50 #VE 50 configuration
(config-vif-50)$ ip address 10.0.50.1/24 #Assign an IP address to VE 50
(config-vif-50)$ exit
/ip address add address=10.0.50.2/24 interface=ether4
so if it works then your question is?...
I was able to ping and verify the connectivity.
I don't know what else I have to do at this point, not sure how things like DHCP should be assigned (should I disable that on the router?)
add dst-address=10.0.50.0/24 gateway=10.0.50.1
previously they were on Mikrotik but I recreated them on 6610so if it works then your question is?
Now let me ask you somethings because I am curious.
Are all of the ".1" addresses ve interfaces on your 6610?
Previously that was not the case but since then I created a new VLAN that is exclusive to 6610 (please see below)and your MikroTik has its Internet connection, the transit vlan at address 10.0.50.2/24 and DOES NOT have any interfaces (VLAN or PHY) in any of the VLAN's you're adding routes for (.10,.15,.20.30.40.50.99)?
I was able to ping the switch from the router side and the router from the switchWhen you say ping and verify - was that from the MikroTik? If it was and your MiktroTik only has Internet and Transit then you may not be pinging your ICX VLAN interfaces (except for 50.1).
I'd expect all those MikroTik routes you added to have the same gateway which is the ICX's ve IP in your transit VLAN - hence my questions about whether your MikroTik has other vlan interfaces defined besides your transit (and your Internet facing connection).
For DHCP you will set a helper-address in for the vlans you want another device (MikroTik?) to manage DHCP for those VLANs.
TH has a video on this topic.
SSH@ICX6610(config)#vlan 17
SSH@ICX6610(config-vlan-17)#untagged e 1/1/17
Added untagged port(s) ethe 1/1/17 to port-vlan 17.
SSH@ICX6610(config-vlan-17)#router-interface ve 17
SSH@ICX6610(config-vlan-17)#exit
SSH@ICX6610(config)#int ve 17
SSH@ICX6610(config-vif-17)#ip address 10.0.17.1/24
SSH@ICX6610(config-vif-17)#show int ve 17
## Mikrotik
/ip pool
add name=17_POOL ranges=10.0.17.2-10.0.17.254
/ip dhcp-server network
add address=10.0.17.0/24 dns-server=8.8.8.8 gateway=10.0.17.1
/ip dhcp-server
add address-pool=17_POOL interface=Transit name=17 relay=10.0.17.1
/ip route
add disabled=no dst-address=10.0.17.0/24 gateway=Transit routing-table=main \
suppress-hw-offload=no
## On 6610
Int ve 17
Ip helper-address 1 10.0.50.2
exit
SSH@ICX6610#ping 8.8.8.8
Sending 1, 16-byte ICMP Echo to 8.8.8.8, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 8.8.8.8 : bytes=16 time=24ms TTL=60
Success rate is 100 percent (1/1), round-trip min/avg/max=24/24/24 ms.
I would say the easiest thing for a beginner to do is to run the switches as L2 devices and put all your rules, VLANs, etc in the firewall/router device you are running. This way there is very little that you need to set up in the switch other than perhaps some VLAN tagging on ports (if needed). Otherwise it will pretty much be plug and play while your firewall/router does all the heavy lifting.Ok, I got the ECS2512FP and connected it to the 6610 using two 10GbE fiber connections.
I also connected a WAP to the 2.5GbE PoE port of the ECS2512FP.
Where do I go from here? I think I need to set the two SFP+ ports to aggregate.
My networking knowledge is very basic, I don't know what the hell I'm doing...
I tried following Terry Henry's videos but he's not starting from the point of a beginner.
I don't have any VLAN's or anything set up, just simple single-layout network which I know is a mess.
I'm just trying to be a better boy...
Can someone point me to some good videos on home-network setup 101?
Thanks!
EDIT:
I have the following:
AT&T fiber connected to an EdgeRouter Lite (erlite-3).
Router connected to the 6610
The 6610 is the focal point, everything is connected to it.
IoT
HDHomerun tuners
WAP (now via the ECS2512FP to the 6610 via two SFP+ fiber connections)
VOIP
Printers
NAS
Laptops (all wireless)
Desktops
Doorbell camera
IP Cameras
show conf
!
Startup-config data location is flash memory
!
Startup configuration:
!
ver 08.0.30tT7f3
!
stack unit 1
module 1 icx6610-48p-poe-port-management-module
module 2 icx6610-qsfp-10-port-160g-module
module 3 icx6610-8-port-10g-dual-mode-module
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
router-interface ve 1
!
vlan 10 name SERVERS by port
untagged ethe 1/1/25 to 1/1/36 ethe 1/2/6 ethe 1/3/1 to 1/3/4
router-interface ve 10
!
vlan 11 name PRODUCTION by port
!
vlan 12 name STAGING by port
!
vlan 20 name SECURE by port
tagged ethe 1/1/48
untagged ethe 1/1/1
router-interface ve 20
!
vlan 99 name MGMT by port
untagged ethe 1/1/13 to 1/1/24
router-interface ve 99
!
vlan 100 name GUEST by port
tagged ethe 1/1/48
router-interface ve 100
!
vlan 101 name IOT by port
tagged ethe 1/1/48
router-interface ve 101
!
!
!
!
!
aaa authentication web-server default local
aaa authentication enable default local
aaa authentication login default local
enable telnet authentication
enable aaa console
hostname switch
ip dhcp-client disable
ip dns server-address 10.0.0.1
ip route 0.0.0.0/0 10.0.0.1
ip add-host-route-first
!
no telnet server
username username password .....
!
!
clock summer-time
clock timezone gmt GMT-05
!
!
ntp
disable serve
server 216.239.35.0
server 216.239.35.4
!
!
!
!
!
!
!
!
!
interface ethernet 1/1/48
dual-mode
inline power
!
interface ve 1
ip address 10.0.0.2 255.255.255.248
ip helper-address 1 10.0.0.1
!
interface ve 10
ip address 10.0.10.1 255.255.255.0
ip helper-address 1 10.0.0.1
!
interface ve 20
ip address 10.0.20.1 255.255.255.0
ip helper-address 1 10.0.0.1
!
interface ve 99
ip address 10.0.99.1 255.255.255.0
ip helper-address 1 10.0.0.1
!
interface ve 100
ip address 10.0.100.1 255.255.255.0
ip helper-address 1 10.0.0.1
!
interface ve 101
ip address 10.0.101.1 255.255.255.0
ip helper-address 1 10.0.0.1
!
!
!
!
!
!
!
!
!
end
I know bugger all about vlans, so take this with a grain of salt... Try not doing the dual-mode, if you don't want default/vlan1 on the port?Code:show conf ! Startup-config data location is flash memory ! Startup configuration: !
this is the wayMade some changes and got it all working. I didn't quite understand how VLANs worked and what tagged vs untagged meant. Watched a couple videos and read up now it's all working great!