With the PoE stuff I get confused by Ruckus. Their data sheet for the 7250 series lists a "Maximum Poe+ class 4 ports" then says 30W maximum. But class 4 poe is 100W (max). Then under IEEE standards compliance it lists 802.3at which aligns with the 30W, but that's class 2..?
Do you have to get into the more rare Z models to get 802.3bt?
I appreciate that. I was misinformed from where I got the information. There's CLASS 1-8 and then TYPE 1-4. Where I got my information a decent while ago listed type as "class", thus my confusion, and thinking there's only the 4.
I appreciate that. I was misinformed from where I got the information. There's CLASS 1-8 and then TYPE 1-4. Where I got my information a decent while ago listed type as "class", thus my confusion, and thinking there's only the 4.
And now I know too. I do very little with PoE but what lookup I had done had left me thinking “class” and “type” were interchangeable terms in PoE context too
And now I know too. I do very little with PoE but what lookup I had done had left me thinking “class” and “type” were interchangeable terms in PoE context too
And now I know too. I do very little with PoE but what lookup I had done had left me thinking “class” and “type” were interchangeable terms in PoE context too
I have ordered an icx6450-48P for my future homelab (140€, best price I could get here in Central Europe). It should arrive next week.
If I understand correctly, I will not be able to configure it without a serial cable. This should be the same cable that is used for older Cisco devices.
I know this has probably been answered a thousand times, but I did not find a definitive answer and I do not want to waste about 2 weeks waiting for the wrong cable.
//EDIT: It looks like RX and TX pin is swapped if compared to the blue cisco cable, does that mean that cisco cables(including cisco knocknoff which I posted) wont work?
I have ordered an icx6450-48P for my future homelab (140€, best price I could get here in Central Europe). It should arrive next week.
If I understand correctly, I will not be able to configure it without a serial cable. This should be the same cable that is used for older Cisco devices.
I know this has probably been answered a thousand times, but I did not find a definitive answer and I do not want to waste about 2 weeks waiting for the wrong cable.
//EDIT: It looks like RX and TX pin is swapped if compared to the blue cisco cable, does that mean that cisco cables(including cisco knocknoff which I posted) wont work?
its the same as cisco and every other rj45 serial pinout, cisco cables work. you want the rx and tx swapped compared to the pc facing cable, otherwise you'd be tx'ing signals at a tx line, and have two rx lines connected to eachother listening to nothing
Hahahaha, RS232, that takes me back to the 80's...always some brainiac in the room splurting out DCE's & DTE's
In this case it's DTE > DTE, i.e. crossed over pairs, so TX - RX in each direction, where's my prize?
I bought a 7150-c12p and it has a weird noise like a buzzing, not to loud. This model is fanless so i guess it can't be good, right? Should I send it back?
Thank you fohdeesha. It is configured now and fully working. You and your goide saved me hundreeds of € and tens of hours.
But looks like I need to replace fans. Bearings at stock foxconn pia040h12p are probably (nearly)gone. They are pretty stiff to rotate, sometimes they have this "metal-resonating" noise and they are also all marked as "failed" in console(even if they are still rotating...)
I will probably use Arctic S4028-15K and let you know
I bought an ICX7250-48P switch a few weeks ago and for the most part have been happy with it, but I have been experiencing some strange issues with ipv6 not working and I hope someone can shed some light on this and point me in the right direction of how to fix this. So there are really multiple IPv6 problems, let me explain:
First, before I go on I will explain a little bit about my network topology:
So I have a fiber WAN from my ISP, and they do not provide me with IPv6, but I have found a workaround from this a few years ago, so I rent some VPSes and on those I am given 2x IPv4 addresses and a routed /48 IPv6 subnet. So I just set up a wireguard tunnel between the VPS and a virtualized openwrt instance in my homelab and I route the /48 through the tunnel and assign it to my VMs at home, pointing the default gateway of my VMs to the link-local IPv6 of the virtual router. This has worked flawlessly for the past few years.
Before I got the ICX7250, I was using a Mikrotik CRS309-1G-8S+IN switch and that never gave me problems with IPv6. But now, ever since I got the ICX7250, I notice strange things with IPv6 communication not working. First of all, the hosts in certain VLANs (for example VLAN 100) cannot ping or reach ANY other IPv6 addresses (link local or GUA) for other devices on the same VLAN, BUT it can reach the ICX7250's ipv6 address on that interface. Meanwhile on other VLANs, such as VLAN 199, IPv6 communication works just fine, and VMs can reach other hosts on the same VLAN and can reach the virtual router to get IPv6 connectivity.
Keep in mind, in this scenario here, the IPv6 traffic should just be switched, not routed (the idea here on VLAN 100 is that the hosts point their default gateway for v4 and v6 to the virtual router's IP (on VLAN100), not the switch's IP, and have static routes to other internal subnets via the switch's IP), so I don't know why it's not working! Maybe the fact that the hosts can reach the ICX7250's IPv6 address but not other IPv6 addresses of hosts in the same VLAN gives a hint into the problem??
Could this be a problem with neighbor discovery?
Also I created another VLAN 676, to serve as a VPN VLAN (all traffic in this VLAN gets forwarded thru the wireguard tunnel not thru my ISP connection)
And I gave the switch an IPv6 address on that interface, and set the gateway to the virtual router's IPv6 on another interface, and on that interface VLAN 676, hosts can reach the IPv6 internet, but they cannot ping other hosts' on other interfaces of my switch's GUA ipv6 addresses, and strangely when I run a traceroute, either out from a host on VL676 or to a host on VL676 from the ipv6 internet, the traceroute doesnt complete because the switch sends some icmp6 unreachable message. Why are those messages being blocked and how can I let them pass?
(In this scenario the IPv6 traffic is routed not switched, the idea here on VLAN 676 is that the hosts point their v4 and v6 default gateway to the switch)
traceroute to 2001:db8:69:446::3 (2001:db8:69:446::3), 30 hops max, 80 byte packets
1 2001:db8:3:fed5::1 (2001:db8:3:fed5::1) 2.583 ms 2.540 ms 2.537 ms
2 fd90:5366:7:420:69::1002 (fd90:5366:7:420:69::1002) 154.649 ms 154.647 ms 154.644 ms
3 2001:db8:10:97a::1 (2001:db8:10:97a::1) 79.472 ms 79.470 ms 79.468 ms
4 2001:db8:69:100::1 (2001:db8:69:100::1) 86.495 ms * *
5 2001:db8:69:999::2 (2001:db8:69:999::2) 86.482 ms !N * *
The traceroute doesnt compelete but if I ping 2001:db8:69:446::3 it works (by the way 2001:db8:69:999::2 is the switch's IPv6 on VLAN99)
I tried playing with the "ipv6 enable" directive on VLAN 100 to see if I put that there would it switch IPv6 traffic but it did not make a difference.
I would greatly appreciate if someone could let me know what is going on here!
I have pasted my configuration below (IP addresses have been modified for privacy)
Current configuration:
!
ver 08.0.95mT213
!
stack unit 1
module 1 icx7250-48p-poe-port-management-module
module 2 icx7250-sfp-plus-8port-80g-module
!
!
global-stp
!
!
!
vlan 1 name DEFAULT-VLAN by port
!
vlan 50 name VL50-Users by port
tagged ethe 1/2/2
untagged ethe 1/1/1 ethe 1/1/25 to 1/1/36
router-interface ve 50
spanning-tree 802-1w
spanning-tree 802-1w priority 40000
!
vlan 77 name Transit by port
untagged ethe 1/2/1
router-interface ve 77
!
vlan 99 name Transit2 by port
tagged ethe 1/1/1 to 1/1/2 ethe 1/2/2
router-interface ve 99
!
vlan 100 name VL100 by port
tagged ethe 1/1/1 to 1/1/2 ethe 1/2/2
router-interface ve 100
!
vlan 199 name DMZ1-VL by port
tagged ethe 1/1/1 ethe 1/2/2
untagged ethe 1/1/39
router-interface ve 199
!
vlan 200 name VL200 by port
tagged ethe 1/1/1 ethe 1/2/2
untagged ethe 1/1/2 to 1/1/6
router-interface ve 200
!
vlan 399 name DMZ3 by port
tagged ethe 1/1/1 to 1/1/2 ethe 1/2/2
untagged ethe 1/1/37 to 1/1/38
router-interface ve 399
!
vlan 500 name Voice-VL by port
tagged ethe 1/1/1 to 1/1/2 ethe 1/2/2
untagged ethe 1/1/13
router-interface ve 500
!
!
vlan 676 name VPN1 by port
tagged ethe 1/1/1 to 1/1/2 ethe 1/1/25 ethe 1/2/2
router-interface ve 676
!
!
!
vlan 2223 name MGMT-VL by port
tagged ethe 1/1/1 to 1/1/2 ethe 1/2/1 to 1/2/2
router-interface ve 2223
!
!
!
!
vlan 1237 by port
tagged ethe 1/1/1 to 1/1/2 ethe 1/2/2
router-interface ve 1237
!
!
!
!
!
!
system-max ip-static-route 2048
system-max ip-route-default-vrf 9000
system-max ip6-route-default-vrf 256
system-max ip-route-vrf 500
!
vrf USER-VRF
rd 693:50
ip router-id 10.31.1.1
address-family ipv4
ip route 0.0.0.0/0 next-hop-vrf default-vrf 10.25.100.1
ip route 10.5.0.0/22 10.31.7.1
ip route 10.55.0.0/24 ve 1237 tag 50
ip route 10.64.0.0/24 10.31.3.1
ip route 10.11.0.0/23 next-hop-vrf SERVER-VRF 10.30.10.11
ip route 10.11.10.0/24 next-hop-vrf default-vrf 10.25.100.1
ip route 10.124.0.0/16 10.31.3.1
ip route 10.200.0.0/22 ve 199 tag 50
ip route 10.125.0.0/24 ve 2223 tag 50
ip route 10.220.0.0/22 10.31.0.2
ip route 10.221.0.0/22 10.31.7.1
ip route 10.223.0.0/22 next-hop-vrf SERVER-VRF 10.30.10.1
ip route 10.25.100.0/29 ve 77 tag 50
ip route 10.27.0.0/24 ve 99 tag 50
ip route 10.30.8.0/21 ve 100 tag 50
exit-address-family
exit-vrf
!
vrf SERVER-VRF
rd 693:100
ip router-id 10.30.9.1
address-family ipv4
ip route 0.0.0.0/0 next-hop-vrf default-vrf 10.25.100.1
ip route 10.5.0.0/22 10.30.10.1
ip route 10.36.8.0/22 ve 399 tag 100
ip route 10.64.0.0/24 10.30.13.100
ip route 10.11.10.0/24 next-hop-vrf default-vrf 10.25.100.1
ip route 10.124.0.0/16 10.30.13.100
ip route 10.125.0.0/24 ve 2223 tag 100
ip route 10.220.0.0/22 10.30.12.1
ip route 10.221.0.0/22 10.30.14.1
ip route 10.223.0.0/22 10.30.10.1
ip route 10.25.100.0/29 ve 77 tag 100
ip route 10.27.0.0/24 ve 99 tag 100
ip route 10.29.16.0/21 ve 200 tag 100
ip route 10.31.0.0/21 ve 50 tag 100
ip route 10.31.31.0/24 ve 676 tag 100
exit-address-family
exit-vrf
!
vrf DMZ-VRF
rd 693:999
ip router-id 10.99.0.1
address-family ipv4
ip route 0.0.0.0/0 next-hop-vrf default-vrf 10.27.0.40
ip route 10.27.0.0/24 ve 99 tag 199
ip route 10.30.0.0/21 ve 100 tag 199
ip route 10.31.0.0/21 ve 50 tag 199
exit-address-family
exit-vrf
!
vrf SECURE-VRF
rd 693:732
ip router-id 10.55.0.254
address-family ipv4
ip route 0.0.0.0/0 next-hop-vrf default-vrf 10.25.100.1
ip route 10.11.0.0/23 next-hop-vrf SERVER-VRF 10.30.10.11
ip route 10.220.0.0/22 next-hop-vrf SERVER-VRF 10.30.12.1
ip route 10.221.0.0/22 next-hop-vrf SERVER-VRF 10.30.14.1
ip route 10.223.0.0/22 next-hop-vrf SERVER-VRF 10.30.10.1
ip route 10.25.100.0/29 ve 77 tag 1237
ip route 10.27.0.0/24 ve 99 tag 1237
ip route 10.30.8.0/21 ve 100 tag 1237
ip route 10.31.6.200/29 ve 50 tag 1237
exit-address-family
exit-vrf
!
vrf SERVER2-VRF
rd 693:200
ip router-id 10.29.20.1
address-family ipv4
ip route 0.0.0.0/0 next-hop-vrf default-vrf 10.27.0.55
ip route 10.11.0.0/23 next-hop-vrf SERVER-VRF 10.30.10.11
ip route 10.11.10.0/24 next-hop-vrf default-vrf 10.25.100.1
ip route 10.220.0.0/22 next-hop-vrf SERVER-VRF 10.30.12.1
ip route 10.221.0.0/22 next-hop-vrf SERVER-VRF 10.30.14.1
ip route 10.223.0.0/22 10.29.23.1
ip route 10.30.8.0/21 ve 100 tag 200
exit-address-family
exit-vrf
!
vrf VPN-VRF
rd 693:676
ip router-id 10.31.31.1
address-family ipv4
ip route 0.0.0.0/0 next-hop-vrf default-vrf 10.27.0.4
ip route 10.27.0.0/24 ve 99 tag 676
ip route 10.30.8.0/21 ve 100 tag 676
exit-address-family
address-family ipv6
ipv6 route ::/0 ve 99 next-hop-vrf VPN-VRF fe80::be24:11ff:fefd:fdea
ipv6 route 2001:db8:69:999::/64 ve 99
exit-address-family
exit-vrf
!
!
!
optical-monitor
optical-monitor non-ruckus-optic-enable
aaa authentication web-server default local
aaa authentication login default local
aaa authentication login privilege-mode
enable telnet authentication
enable telnet password .....
enable aaa console
ip route 0.0.0.0/0 10.25.100.1
ip route 10.5.0.0/22 next-hop-vrf SERVER-VRF 10.30.10.1
ip route 10.36.8.0/22 ve 399
ip route 10.55.0.0/24 ve 1237
ip route 10.11.0.0/23 next-hop-vrf SERVER-VRF 10.30.10.11
ip route 10.11.10.0/24 10.25.100.1
ip route 10.200.0.0/22 ve 199
ip route 10.125.0.0/24 ve 2223
ip route 10.220.0.0/22 next-hop-vrf SERVER-VRF 10.30.12.1
ip route 10.221.0.0/22 next-hop-vrf SERVER-VRF 10.30.14.1
ip route 10.223.0.0/22 next-hop-vrf SERVER-VRF 10.30.10.1
ip route 10.29.16.0/21 ve 200
ip route 10.30.8.0/21 ve 100
ip route 10.31.0.0/21 ve 50
ip route 10.31.31.0/24 ve 676
!
ipv6 unicast-routing
ipv6 route ::/0 ve 99 fe80::be24:11ff:fefd:fdea
ipv6 route 2001:db8:69:440::/60 ve 676
!
username super password .....
username management password .....
!
!
!
!
clock summer-time
clock timezone gmt GMT-05
!
!
ntp
disable serve
server 162.159.200.1
server 162.159.200.123
!
!
web-management https
!
manager disable
!
!
manager port-list 987
!
!
!
!
!
!
!
!
!
interface management 1
no ip dhcp-client enable
ip address 10.69.0.1 255.255.255.0
!
interface ethernet 1/2/1
no optical-monitor
!
interface ethernet 1/2/2
no optical-monitor
!
interface ve 50
vrf forwarding USER-VRF
ip address 10.31.1.1 255.255.248.0
!
interface ve 77
ip address 10.25.100.2 255.255.255.248
!
interface ve 99
ip address 10.27.0.1 255.255.255.0
ipv6 address fe80::d0c0:7ff:fe2a:5b9f link-local
ipv6 address 2001:db8:69:999::2/64
ipv6 enable
!
interface ve 100
vrf forwarding SERVER-VRF
ip address 10.30.9.1 255.255.248.0
ipv6 address fe80::215:5dff:fe68:9a3f link-local
ipv6 enable
!
interface ve 199
vrf forwarding DMZ-VRF
ip address 10.200.1.1 255.255.252.0
!
interface ve 200
vrf forwarding SERVER2-VRF
ip address 10.29.20.1 255.255.248.0
ipv6 address fe80::21e:c9ff:fe48:6e8c link-local
!
interface ve 399
vrf forwarding DMZ-VRF
ip address 10.36.9.1 255.255.252.0
!
interface ve 500
ip address 10.80.0.1 255.255.255.0
ip helper-address 1 10.27.0.53
!
interface ve 676
vrf forwarding VPN-VRF
ip address 10.31.31.1 255.255.255.0
ipv6 address fe80::8ae3:7ff:fe94:1a2b link-local
ipv6 address 2001:db8:69:444::1/60
ipv6 enable
!
interface ve 2223
vrf forwarding SECURE-VRF
ip address 10.125.0.2 255.255.255.0
!
interface ve 1237
vrf forwarding SECURE-VRF
ip address 10.55.0.254 255.255.255.0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
end
I have a 6610 switch and I didn't see anywhere if it was a bad idea to just enable POE on all the 1GB ports? for convenience... I think power draw only goes up if you are actually using the POE on a port right? Theres no chance the POE will fry any fairly recent hardware plugged into the switch that's non POE right?
The device you connect would have to negotiate PoE for any power to be provided to it so no, both new and old hardware should be safe. It's the non-standard passive PoE that you need to be careful with.
Just got in a ICX6610 POE 48 port model from ebay. I started the update following fodeesha's doc.
I'm getting this in console endlessly:
PoE Error: Device 0 failed to start on PoE module.
PoE Error: Device 1 failed to start on PoE module.
Resetting module in slot 1 again to recover from dev fault
PoE Info: Hard Resetting in slot 1....
From what i can tell, this means the POE board is dead right? Is there any fix or is this thing toast?
I can't seem to get to the right spot to flash the POE firmware. It never really finishes booting, i can get to monitor though.
Edit: Took POE board out of unit, don't see anything wrong with it, looks perfect infact. With board out, boots totally fine.
Any fix for this? a way to update poe firmware from monitor? I do need POE and i see it's a common issue with brocade switches.
the 6450 licenses show as invalid the only thing I can see is the LID is different on this one theres an F for H4CKFH3PLN8 and the others that work show H4CKTH3PLN8. with a T is that the reason and if so how do I change it?
Will I need to go into the linux shell and delete /fast_iron/cvpersistent, /fast_iron/meta_data.bin, or /fast_iron/cvpersistent?
View attachment 36415
the 6450 licenses show as invalid the only thing I can see is the LID is different on this one theres an F for H4CKFH3PLN8 and the others that work show H4CKTH3PLN8. with a T is that the reason and if so how do I change it?
Will I need to go into the linux shell and delete /fast_iron/cvpersistent, /fast_iron/meta_data.bin, or /fast_iron/cvpersistent?
looks like your license imports or download got corrupted or something, just delete the licenses ("license delete" or something like that) and download and import the lics again
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
