I knew the case matters and that was after changing it around multiple times trying to get it to work. I wasnt able to copy and paste but I know see how to do it. Thanks for all of this wealth of knowledge!No you weren't supposed to know or need to do that, the command in the guide works when copy pasted, if you had to remove the leading folder path, then something got moved around when you extracted the zip archive. Also it's ICX64xx/ICX64R08030u.bin, not icx64xx/icx64r08030u.bin - case matters - this is why I always recommend just copy pasting from the guide and not trying to manually type everything
To be fair, I got stuck here as well. I had set up the tftp server and selected the 6610 folder directly.No you weren't supposed to know or need to do that, the command in the guide works when copy pasted, if you had to remove the leading folder path, then something got moved around when you extracted the zip archive. Also it's ICX64xx/ICX64R08030u.bin, not icx64xx/icx64r08030u.bin - case matters - this is why I always recommend just copy pasting from the guide and not trying to manually type everything
The wheels are worth about $600 a pop secondhand, take seconds to remove, and would sell within hoursAnyone who'd mess with either of those has no soul.
The excitement worked in my favour actually. I read the guide repeatedly while my switch was shipping down under cause it was taking too damn longHaving never done this before its easy to mess up, I think half the battle is everyone is excited to play with their new switch and dont freaking read the guide.
right now I have a Mikrotik hAP ac2 router configured as a Router on a Stick with a Cisco WS-C3750G-24PS-S switch. I have a few VLANS (I can provide the router config) for my home lab.
1) I recently bought a Layer 3 switch ICX6610 and hope to do the VLAN routing on the Switch level (I already Unlocked and created VLANS on the switch with the same VLAN IDs thanks to @fohdeesha ). What is the best way to achieve this?
Edit: I already set up the Inter VLAN routing as described on this youtube video. but I am not sure if that's enough?
You have a great Router, its called an ICX6610.2) I might have to upgrade the router as it only supports gigabit internet, what would be the best bang for the buck router (since I already have an L3 switch), I am open to trying non-Makrotik routers as well.
Probably not. At a guess you probably cannot get enough public IP's from your provider so you'll be using private IP's on your internal network.3) Do you think I can get away with ISP ISP-provided router since the switch has ACL? so I don't need a fancy router?
I already have a transit VLAN setup between an ICX6610-48P Layer 3 Switch and a MikroTik HAP ac² router with the same VLANs.There are a few different ways to design Internet egress with what you have, depends on requirements and need I suppose.
Try searching here for transit vlan, Internet transit vlan etc.
If you have spare PC hardware you may also want to look at one of the router OS distributions: opnsense, pfsense, vyos, dd-wrt, etc. etc. etc.
you are about to fall down the rabbit hole!
/ip route add dst-address=10.0.10.0/24 gateway=10.0.10.1 add dst-address=10.0.15.0/24 gateway=10.0.15.1 add dst-address=10.0.20.0/24 gateway=10.0.20.1 add dst-address=10.0.30.0/24 gateway=10.0.30.1 add dst-address=10.0.40.0/24 gateway=10.0.40.1 add dst-address=10.0.50.0/24 gateway=10.0.50.1 add dst-address=10.0.99.0/24 gateway=10.0.99.1
(config)$ int ve 50 #VE 50 configuration (config-vif-50)$ ip address 10.0.50.1/24 #Assign an IP address to VE 50 (config-vif-50)$ exit
/ip address add address=10.0.50.2/24 interface=ether4
so if it works then your question is?...
I was able to ping and verify the connectivity.
I don't know what else I have to do at this point, not sure how things like DHCP should be assigned (should I disable that on the router?)
add dst-address=10.0.50.0/24 gateway=10.0.50.1
previously they were on Mikrotik but I recreated them on 6610so if it works then your question is?
Now let me ask you somethings because I am curious.
Are all of the ".1" addresses ve interfaces on your 6610?
Previously that was not the case but since then I created a new VLAN that is exclusive to 6610 (please see below)and your MikroTik has its Internet connection, the transit vlan at address 10.0.50.2/24 and DOES NOT have any interfaces (VLAN or PHY) in any of the VLAN's you're adding routes for (.10,.15,.220.127.116.11.99)?
I was able to ping the switch from the router side and the router from the switchWhen you say ping and verify - was that from the MikroTik? If it was and your MiktroTik only has Internet and Transit then you may not be pinging your ICX VLAN interfaces (except for 50.1).
I'd expect all those MikroTik routes you added to have the same gateway which is the ICX's ve IP in your transit VLAN - hence my questions about whether your MikroTik has other vlan interfaces defined besides your transit (and your Internet facing connection).
For DHCP you will set a helper-address in for the vlans you want another device (MikroTik?) to manage DHCP for those VLANs.
TH has a video on this topic.
SSH@ICX6610(config)#vlan 17 SSH@ICX6610(config-vlan-17)#untagged e 1/1/17 Added untagged port(s) ethe 1/1/17 to port-vlan 17. SSH@ICX6610(config-vlan-17)#router-interface ve 17 SSH@ICX6610(config-vlan-17)#exit SSH@ICX6610(config)#int ve 17 SSH@ICX6610(config-vif-17)#ip address 10.0.17.1/24 SSH@ICX6610(config-vif-17)#show int ve 17 ## Mikrotik /ip pool add name=17_POOL ranges=10.0.17.2-10.0.17.254 /ip dhcp-server network add address=10.0.17.0/24 dns-server=18.104.22.168 gateway=10.0.17.1 /ip dhcp-server add address-pool=17_POOL interface=Transit name=17 relay=10.0.17.1 /ip route add disabled=no dst-address=10.0.17.0/24 gateway=Transit routing-table=main \ suppress-hw-offload=no ## On 6610 Int ve 17 Ip helper-address 1 10.0.50.2 exit
SSH@ICX6610#ping 22.214.171.124 Sending 1, 16-byte ICMP Echo to 126.96.36.199, timeout 5000 msec, TTL 64 Type Control-c to abort Reply from 188.8.131.52 : bytes=16 time=24ms TTL=60 Success rate is 100 percent (1/1), round-trip min/avg/max=24/24/24 ms.
I would say the easiest thing for a beginner to do is to run the switches as L2 devices and put all your rules, VLANs, etc in the firewall/router device you are running. This way there is very little that you need to set up in the switch other than perhaps some VLAN tagging on ports (if needed). Otherwise it will pretty much be plug and play while your firewall/router does all the heavy lifting.Ok, I got the ECS2512FP and connected it to the 6610 using two 10GbE fiber connections.
I also connected a WAP to the 2.5GbE PoE port of the ECS2512FP.
Where do I go from here? I think I need to set the two SFP+ ports to aggregate.
My networking knowledge is very basic, I don't know what the hell I'm doing...
I tried following Terry Henry's videos but he's not starting from the point of a beginner.
I don't have any VLAN's or anything set up, just simple single-layout network which I know is a mess.
I'm just trying to be a better boy...
Can someone point me to some good videos on home-network setup 101?
I have the following:
AT&T fiber connected to an EdgeRouter Lite (erlite-3).
Router connected to the 6610
The 6610 is the focal point, everything is connected to it.
WAP (now via the ECS2512FP to the 6610 via two SFP+ fiber connections)
Laptops (all wireless)
show conf ! Startup-config data location is flash memory ! Startup configuration: ! ver 08.0.30tT7f3 ! stack unit 1 module 1 icx6610-48p-poe-port-management-module module 2 icx6610-qsfp-10-port-160g-module module 3 icx6610-8-port-10g-dual-mode-module ! ! ! ! vlan 1 name DEFAULT-VLAN by port router-interface ve 1 ! vlan 10 name SERVERS by port untagged ethe 1/1/25 to 1/1/36 ethe 1/2/6 ethe 1/3/1 to 1/3/4 router-interface ve 10 ! vlan 11 name PRODUCTION by port ! vlan 12 name STAGING by port ! vlan 20 name SECURE by port tagged ethe 1/1/48 untagged ethe 1/1/1 router-interface ve 20 ! vlan 99 name MGMT by port untagged ethe 1/1/13 to 1/1/24 router-interface ve 99 ! vlan 100 name GUEST by port tagged ethe 1/1/48 router-interface ve 100 ! vlan 101 name IOT by port tagged ethe 1/1/48 router-interface ve 101 ! ! ! ! ! aaa authentication web-server default local aaa authentication enable default local aaa authentication login default local enable telnet authentication enable aaa console hostname switch ip dhcp-client disable ip dns server-address 10.0.0.1 ip route 0.0.0.0/0 10.0.0.1 ip add-host-route-first ! no telnet server username username password ..... ! ! clock summer-time clock timezone gmt GMT-05 ! ! ntp disable serve server 184.108.40.206 server 220.127.116.11 ! ! ! ! ! ! ! ! ! interface ethernet 1/1/48 dual-mode inline power ! interface ve 1 ip address 10.0.0.2 255.255.255.248 ip helper-address 1 10.0.0.1 ! interface ve 10 ip address 10.0.10.1 255.255.255.0 ip helper-address 1 10.0.0.1 ! interface ve 20 ip address 10.0.20.1 255.255.255.0 ip helper-address 1 10.0.0.1 ! interface ve 99 ip address 10.0.99.1 255.255.255.0 ip helper-address 1 10.0.0.1 ! interface ve 100 ip address 10.0.100.1 255.255.255.0 ip helper-address 1 10.0.0.1 ! interface ve 101 ip address 10.0.101.1 255.255.255.0 ip helper-address 1 10.0.0.1 ! ! ! ! ! ! ! ! ! end