Drag to reposition cover

Brocade ICX Series (cheap & powerful 10gbE/40gbE switching)

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.
S

shremi

New Member
Jun 29, 2020
8
0
1
Hi guys , i am trying to add a third device to my stack , however i am getting weird errors am i missing something here ???


Code: 
SSH@brocade1#stack interactive-setup
You can abort stack interactive-setup at any stage by <ctrl-c>
0: quit
1: change stack unit IDs
2: discover and convert new units (no startup-config flash) to members
3: discover and convert existing/new standalone units to members
2&3 can also find new links and auto-trunk or convert chain(s) to ring.
Please type your selection: 3
Probing topology to find standalone units...
T=1h52m39.0: Sending probes to ports: u2: 2/2/2,
Probing in progress ...
Probing in progress ...
Existing stack: ============================================================
    active       standby
     +---+        +---+
  2/3| 1 |2/1--2/1| 2 |
     +---+        +---+


Horizontal bars link to discovered units. Vertical bars link to stack units.


Chain #0: ==================================================================
SN: serial #, H: hostname, IP, T: up time, (diff: image mismatch)
#1: icx7250-48p-poe-port 78a6.e108.8fe0 SN=DUK3826N0JC H=ferruche3 T=3h27m

     2/2/2
       |
       |
      2/1
     +---+
     |#1 |
     +---+

Discovered 1 chain/ring
Chain #0: Do you want to select this chain? (enter 'y' or 'n'): y
#1: icx7250-48p-poe-port 78a6.e108.8fe0 SN=DUK3826N0JC H=ferruche3 T=3h27m, type an ID (No: 0, default: 3): 3

You selected 1 unit(s): #1: ID=3,

T=1h53m4.2: Error! stack interactive-setup option 3 cannot find default-set for U2 type=ICX7250-48P, ports=2/2/1 (#=1), 2/2/2 (#=1)
Please connect the first port of a default set.

The following stack-ports/trunks are allowed.
Linear-topo trunk (exact ports): allowed only in one-direction
stack-trunk ethe 2/2/1 to 2/2/4
stack-trunk ethe 2/2/5 to 2/2/8
General stack-port/trunk that can be in up to two directions: Both directions must belong to the same valid-stack-port-set (dir_0_1st_port, dir_1_1st_port, max_#_ports):
(2/2/1, 2/2/3, 2), (2/2/5, 2/2/7, 2)
E.g., (1/2/1, 1/2/3, 2): each direction can have 1-2 ports.
     dir 0: stack-port ethe 1/2/1, or stack-trunk ethe 1/2/1 to 1/2/2
     dir 1: stack-port ethe 1/2/3, or stack-trunk ethe 1/2/3 to 1/2/4


NOTE: If this run does not find all links, please try again

****** Please resolve the error ******
stack interactive-setup detects the following links:
Links U2--U3, #=1: 2/2--2/1

    active       standby        #1
     +---+        +---+        +---+
     | 1 |2/1--2/1| 2 |2/2--2/1| 3 |
     +---+        +---+        +---+

 U1: MAC=609c.9f51.b948 SN=DUK3822M0HH running stack interactive-setup
 U2: MAC=609c.9f51.b984 SN=DUK3822M0HM standby
 U3: MAC=78a6.e108.8fe0 SN=DUK3826N0JC H=ferruche3 T=3h27m
SSH@brocade1#
 
C

ChaOConnor

New Member
Mar 20, 2022
4
0
1
Quick Question: I followed the guide on page one, updated the firmware and licensed my 6450-48p.

I purchased one of these (https://www.amazon.com/gp/product/B07P39G4XJ/ref=ppx_yo_dt_b_asin_title_o04_s00?ie=UTF8&th=1) to put in the a SFP+ port. I have a 10 GBE Network Adapter in my server, but I don't get a link light and my switch shows the port down.

Am I missing something completely basic, all I've done is follow the guide on page on and I can access the switch on my network via ethernet plugged into any one of the 48 ports.

Appreciate any thoughts you may have!
 
C

creidhne

New Member
Apr 11, 2020
27
19
3
I have probably dumb question, but here goes:
If I have a VLAN 10 and all machines in it have addresses in 192.168.10.0/24 subnet
and another VLAN 20 and all machines in it have addresses in 192.168.20.0/24 subnet
and I put a brocade6610's virtual router interface in each of those with no access restrictions (permit any rule), can a machine 192.168.10.5 in VLAN 10 access machine 192.168.20.5 in VLAN 20 without issues? Like can I just ping 192.168.20.5 from it and it'll go through?
 
K

kpfleming

Active Member
Dec 28, 2021
416
214
43
Pelham NY USA
creidhne said:
I have probably dumb question, but here goes:
If I have a VLAN 10 and all machines in it have addresses in 192.168.10.0/24 subnet
and another VLAN 20 and all machines in it have addresses in 192.168.20.0/24 subnet
and I put a brocade6610's virtual router interface in each of those with no access restrictions (permit any rule), can a machine 192.168.10.5 in VLAN 10 access machine 192.168.20.5 in VLAN 20 without issues? Like can I just ping 192.168.20.5 from it and it'll go through?
Click to expand...
If those machines have a 'default route' (default gateway), or an explicit route, set to the IP address of the VE in their respective VLANs, then yes. If there are no ACLs in place, layer 3 routing is permitted across all VLANs.
 
  • Like
Reactions: creidhne
C

creidhne

New Member
Apr 11, 2020
27
19
3
kpfleming said:
If those machines have a 'default route' (default gateway), or an explicit route, set to the IP address of the VE in their respective VLANs, then yes. If there are no ACLs in place, layer 3 routing is permitted across all VLANs.
Click to expand...
So... all the packets in the VLAN 20 sent from VLAN 10 would appear as coming from the VE in VLAN 20 and the subnet is the same so it doesn't matter, correct? Same as I'm behind a NAT and despite being in a 192.168.1.1/24 subnet I can still freely ping google server at 142.250.186.206 since no ACL forbids me from doing so and it all goes through router at 192.168.1.1. Do I understand this correctly?
 
K

kpfleming

Active Member
Dec 28, 2021
416
214
43
Pelham NY USA
creidhne said:
So... all the packets in the VLAN 20 sent from VLAN 10 would appear as coming from the VE in VLAN 20 and the subnet is the same so it doesn't matter, correct? Same as I'm behind a NAT and despite being in a 192.168.1.1/24 subnet I can still freely ping google server at 142.250.186.206 since no ACL forbids me from doing so and it all goes through router at 192.168.1.1. Do I understand this correctly?
Click to expand...
No, all the packets will retain their source IP addresses as sent by the machines that sent them. There won't be any address translation in the ICX, and I don't think that's even available.
 
C

creidhne

New Member
Apr 11, 2020
27
19
3
kpfleming said:
No, all the packets will retain their source IP addresses as sent by the machines that sent them. There won't be any address translation in the ICX, and I don't think that's even available.
Click to expand...
I need me some TCP/IP book it seems... I struggle to put down what I have in mind too. What would you recommend? ;D

Anyway. Source (machine in VLAN 10) wants to send the packet to a machine in a VLAN 20, but has no route to do so - so it sends the packet with default gateway's MAC as target (and maybe the IP as well, unsure?) and final destination IP (the one from VLAN 20). Virtual Router receives the packet and knows where to forward it based on the final destination IP, verifies against its routing tables and what not, ACLs, then changes the MAC in the packet to the target machine in VLAN 20. The packet comes out of the VE in VLAN 20 with the source and final destination IP address unchanged, but with MAC now pointing to the correct target machine. Destination machine accepts the packet.
Same principle applies when I'm trying to ping google's server from my LAN 192.168.1.1/24 subnet, my PC has no route for 142.250.186.206 so it gets sent to the default gateway instead which knows what to do with it - there's just many more routers and "hops" for the packet to go through before reaching the destination.
Is that phrased better and is correct now?
 
Last edited:
K

kpfleming

Active Member
Dec 28, 2021
416
214
43
Pelham NY USA
creidhne said:
I need me some TCP/IP book it seems... I struggle to put down what I have in mind too. What would you recommend? ;D

Anyway. Source (machine in VLAN 10) wants to send the packet to a machine in a VLAN 20, but has no route to do so - so it sends the packet with default gateway's MAC as target (and maybe the IP as well, unsure?) and final destination IP (the one from VLAN 20). Virtual Router receives the packet and knows where to forward it based on the final destination IP, verifies against its routing tables and what not, ACLs, then changes the MAC in the packet to the target machine in VLAN 20. The packet comes out of the VE in VLAN 20 with the source and final destination IP address unchanged, but with MAC now pointing to the correct target machine. Destination machine accepts the packet.
Same principle applies when I'm trying to ping google's server from my LAN 192.168.1.1/24 subnet, my PC has no route for 142.250.186.206 so it gets sent to the default gateway instead which knows what to do with it - there's just many more routers and "hops" for the packet to go through before reaching the destination.
Is that phrased better and is correct now?
Click to expand...
Yep, that's spot-on. The default gateway's IP address is used to find its MAC address (using ARP for IPv4 or ND for IPv6), and then the packet it sent there without changing any of the addresses in the packet. The same happens when the router sends the packet out: the destination IP address (or next-hop router address, if another hop is needed) is used to find the MAC address and the packet is sent on, again without changing the addresses in the packet.

All of this changes when any form of Network Address Translation (NAT) is used; in that case the router performing the NAT does change source or destination addresses in the packet during the forwarding process.
 
  • Like
Reactions: creidhne
C

creidhne

New Member
Apr 11, 2020
27
19
3
kpfleming said:
Yep, that's spot-on. The default gateway's IP address is used to find its MAC address (using ARP for IPv4 or ND for IPv6), and then the packet it sent there without changing any of the addresses in the packet. The same happens when the router sends the packet out: the destination IP address (or next-hop router address, if another hop is needed) is used to find the MAC address and the packet is sent on, again without changing the addresses in the packet.

All of this changes when any form of Network Address Translation (NAT) is used; in that case the router performing the NAT does change source or destination addresses in the packet during the forwarding process.
Click to expand...
Awesome, thank you very much :D
 
M

mkaatman

New Member
Jul 10, 2023
4
0
1
Edit: I got this working using USB. Those user manuals are handy!

Hey all, Following ICX7250 / ICX7450 - Fohdeesha Docs

I get to "Load The Latest UFI Image" without issue.

I move the ethernet to a regular port.
I use the copy command with my tftp ip subbed in:
copy tftp flash 192.168.2.183 ICX7xxx/SPR08095pufi.bin primary

Every single time I get "abort called" in a random place.

ICX7250-48 Router#copy tftp flash 192.168.2.183 ICX7xxx/SPR08095pufi.bin primary
ICX7250-48 Router#Load to buffer (8192 bytes per dot)
..............................................................................................................................................................................................................................................................................................................................................................................................................abort called
TFTP session timed out

Error in downloading bundle image

Error in processing bundle image
 
Last edited:
E

EngChiSTH

Active Member
Jun 27, 2018
115
45
28
Chicago
Urgghh. decided to flash new firmware to 7250 switch and did something wrong - switch no longer has the IP address I assigned earlier, and I cannot connect to serial (new laptop), putty says COM1 not found (did installed it as 'legacy hardware' in Win 11 laptop). Any hints for me ?
I assume I have to follow the guide from the beginning, find cable to connect to management port of 7250 (I can not use normal Cat5E , correct?) and start it all over again?

thank you!

- found the USB to management port cable I had, Win 11 recognized it instantly as 'COM3' , will start debugging
- another update, I am doing something wrong , no matter how much I press 'b' I get no response from terminal screen in putty...
 
Last edited:
E

EngChiSTH

Active Member
Jun 27, 2018
115
45
28
Chicago
EngChiSTH said:
Urgghh. decided to flash new firmware to 7250 switch and did something wrong - switch no longer has the IP address I assigned earlier, and I cannot connect to serial (new laptop), putty says COM1 not found (did installed it as 'legacy hardware' in Win 11 laptop). Any hints for me ?
I assume I have to follow the guide from the beginning, find cable to connect to management port of 7250 (I can not use normal Cat5E , correct?) and start it all over again?

thank you!

- found the USB to management port cable I had, Win 11 recognized it instantly as 'COM3' , will start debugging
- another update, I am doing something wrong , no matter how much I press 'b' I get no response from terminal screen in putty...
Click to expand...
and I do not think I am able to reset it properly (at least still nothing on putty screen after hardware reset attempt) . also reading this RUCKUS Forums - How to perform a hard reset on icx 7450? - Page 3 - CommScope RUCKUS Community Forums (ruckuswireless.com) including statement below

"

Engineering has confirmed that Factory Reset (to default state) is NOT supported on: ICX7250 and ICX 7450.

There was some documentation error about the same on these platforms and is corrected now.

We had some inconsistencies in the software where F/D wasn't triggered as expected on the

Supported models : ICX 7150, ICX 7550, ICX 7650 and ICX 7850.

Engineering has fixed the same in 9.0 version and prep-ported the fix to 8095j. Now these models support Factory Reset.

I tested factory reset on ICX 7550 switch with 8095h, 8095j and is working perfectly.

While we are testing the feature in our lab we observed the below behavior.

If we immediately release the Reset button within 2 Amber blinks after the power cable is plugged in, then Factory reset is triggered.
If you press the reset button for a longer time then Factory Reset Mode button interrupt is getting cleared during bootup and hence Factory reset is Not triggered.

" how sure how true this is since I have ICX7250
 
E

EngChiSTH

Active Member
Jun 27, 2018
115
45
28
Chicago
thank you - my cable looks like usb on one end and RJ45 on the other. nothing shows up from the switch at all , i have tried two different win laptops (10 and 11). i can also try from chromebook tomorrow from within terminal to see if that sees anything. I wonder how badly I screwed this poor switch up. shouldnt hardware reset set it to default??
if you have any other sugestions, they are appreciated. thank you
 
M

mkaatman

New Member
Jul 10, 2023
4
0
1
Yeah unfortunately I don't believe that cable won't work. That's for switches that have a serial rj45 port like the old baystack stuff. The only way to get serial with the icx7250 is through serial to micro usb to my knowledge. I suspect your switch is completely fine, but it's reset and you have to use serial to star the configuration process.
 
E

EngChiSTH

Active Member
Jun 27, 2018
115
45
28
Chicago
Thanks! so cable I used is wrong (may be it worked with earlier switches 6450 that I was using...).
my laptops now do not have a serial port anymore so something like this amazon.com/gp/product/B0CL2BPDNK/ would probably not work (nothing to plug it into).

I will also look into DYI, obviously I did set this up before and I think I connected/wired RJ-45 Ethernet jack to mini-usb-b (at least I found it in my toolbox). now getting windows to recognize that it (new laptop) and putty to use it would be a different quest.

and am I right that I can NOT use 'normal' USB-A to mini-usb-b cable for this? I am worried about burning out the management port...
 
Last edited:
J

jode

Member
Jul 27, 2021
37
22
8
E

EngChiSTH

Active Member
Jun 27, 2018
115
45
28
Chicago
You must log in or register to reply here.
Top Bottom