7250 has 4 more SFP+ ports and much newer OS.
I think the entire ICX6000 series has IPv6 limitations.
Brocade ICX Series (cheap & powerful 10gbE/40gbE switching)
- Thread starter fohdeesha
- Start date
Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.
I think the entire ICX6000 series has IPv6 limitations.
I'm still getting regular Switch reboots and not sure why. I have removed the SFP+ adapter that seemed to be problematic but still get them.
I get one to two crashes per day currently (eg. today one at 6pm and one at 9am the next day). Interesting is tthey seem to keep coming roughly the same time in the morning, but not exclusively given the 6pm one.
It is starting to look like the reboots occur at round number times eg. 9.05 AM, 6.40 pm (rather than 6.42 pm or 9.03 am for example). Which maybe points to something with a pattern/scheduled event rather than just random failures? But I guess we don't have enough data to confirm that.
Another interesting clue is that there are actually two reboots in rapid succession for each event. Not sure what this tells us though.
I'm still getting regular Switch reboots and not sure why (see the attached temperature logs for reference which show dropouts on reboot). I have removed the SFP+ adapter that seemed to be problematic but still get them.
I get one to two crashes per day currently (eg. today one at 6pm and one at 9am the next day). Interesting is that they seem to keep coming roughly the same time in the morning, but not exclusively given the 6pm one.
It is starting to look like the reboots occur at round number times eg. 9.05 AM, 6.40 pm (rather than 6.42 pm or 9.03 am for example). Which maybe points to something with a pattern/scheduled event rather than just random failures? But I guess we don't have enough data to confirm that.
Another interesting clue is that there are actually two reboots in rapid succession for each event. Not sure what this tells us though.
Does anyone have any ideas for debugging/have seen this in their own switches?
I get one to two crashes per day currently (eg. today one at 6pm and one at 9am the next day). Interesting is tthey seem to keep coming roughly the same time in the morning, but not exclusively given the 6pm one.
It is starting to look like the reboots occur at round number times eg. 9.05 AM, 6.40 pm (rather than 6.42 pm or 9.03 am for example). Which maybe points to something with a pattern/scheduled event rather than just random failures? But I guess we don't have enough data to confirm that.
Another interesting clue is that there are actually two reboots in rapid succession for each event. Not sure what this tells us though.
I've been happily running with my Brocade ICX7250 48P-2X10G switch for a few months now. Recently I observed my Proxmox cluster nodes regularly rebooting my VMs and I think I have traced the problem to the Brocade switch. It seems to reboot intermittently multiple times per day and I don't see an obvious pattern to it.
I have syslog remote logging to a server so these logs persist whilst the show logging outputs don't seem to survive a reboot. I don't see anything weird in there other than regular warnings along the lines of:
May 26 19:42:24:A:System: Stack unit 1 Temperature 67.0 C degrees,
I see this steadily rise to about 80C then at some stage a reboot occurs and the temperatures can be closer to 60C again then start rising.
I wonder then if these issues are actually thermal related despite being below the shutdown temperature of 105C? I also note that recently I discovered one of my ports with an SFP+ to 10GBaseT adapter was not blinking LEDs or providing a network. On replacing the adapter the switch quickly went into a boot loop with all amber LEDs. I had the system powered off overnight then next day it powered on ok with the adapter in except for this more intermittent boot looping.
Am hoping someone can make sense of this/have seen something similar in their own switch, and suggest how I can fix this. Any advice would be very much appreciated at this stage as aside from this new issue I have been very happy with this device. Thanks for your help!
Here is some further debug output:
show version
Copyright (c) Ruckus Networks, Inc. All rights reserved.
UNIT 1: compiled on Aug 8 2023 at 23:06:54 labeled as SPR08095m
(33554432 bytes) from Primary SPR08095m.bin (UFI)
SW: Version 08.0.95mT213
Compressed Primary Boot Code size = 786944, Version:10.1.26T215 (spz10126)
Compiled on Tue Nov 29 23:13:15 2022
HW: Stackable ICX7250-48-HPOE
==========================================================================
UNIT 1: SL 1: ICX7250-48P POE 48-port Management Module
Serial #UK3845L1DZ
Software Package: ICX7250_L3_SOFT_PACKAGE (LID: fwmINJKnGfb)
Current License: l3-prem-8X10G
P-ASIC 0: type B344, rev 01 Chip BCM56344_A0
==========================================================================
UNIT 1: SL 2: ICX7250-SFP-Plus 8-port 80G Module
==========================================================================
1000 MHz ARM processor ARMv7 88 MHz bus
8 MB boot flash memory
2 GB code flash memory
2 GB DRAM
STACKID 1 system uptime is 3 hour(s) 44 minute(s) 17 second(s)
The system started at 19:38:19 CST Mon May 26 2025
The system : started=cold start
show chassis:
Fan 1 Air Flow Direction: Front to Back
Fan 2 Air Flow Direction: Front to Back
Fan 3 Air Flow Direction: Front to Back
Slot 1 Current Temperature: 72.9 deg-C (Sensor 1), 22.0 deg-C (Sensor 2)
Slot 2 Current Temperature: NA
Warning level.......: 0.0 deg-C
Shutdown level......: 105.0 deg-C
I'm still getting regular Switch reboots and not sure why (see the attached temperature logs for reference which show dropouts on reboot). I have removed the SFP+ adapter that seemed to be problematic but still get them.
I get one to two crashes per day currently (eg. today one at 6pm and one at 9am the next day). Interesting is that they seem to keep coming roughly the same time in the morning, but not exclusively given the 6pm one.
It is starting to look like the reboots occur at round number times eg. 9.05 AM, 6.40 pm (rather than 6.42 pm or 9.03 am for example). Which maybe points to something with a pattern/scheduled event rather than just random failures? But I guess we don't have enough data to confirm that.
Another interesting clue is that there are actually two reboots in rapid succession for each event. Not sure what this tells us though.
Does anyone have any ideas for debugging/have seen this in their own switches?
It is a POE switch but to my knowledge none of the devices should be using POE, each port is just connected to a server acting as a Proxmox node. Are there any other activities that obviously draw significant power eg. significant network traffic from backup events or something?
The 6450 datasheet claims it supports MACsec. The configuration statements that would work on a 6610 or 7450 seem to be absent and the "MACsec Feature Guide" for 8.0.30 mentions only those platforms, not the 6450. Is the claim of hardware support wrong, did Brocade just never get there with the software, or is there actually some way to get it going (perhaps with a license key I haven't applied)?
I'm starting to replace some 6450s with 7250s. I gave 9.0.10, the latest "CD" image, a shot - buggy, slow, definitely not recommended. So I've dropped back to 8.0.95r.
Maybe I've jacked up the configuration, but this version, too, like 9.x and 10.x, seems to have the terrible behavior that the "enable" command now prompts for a username. Hoping there's some way to bypass that and just have an enable password/secret - everyone's fingers around here are just trained to type enable<cr>password<cr> and with the "prompt for username" that leaves the password displayed at the prompt, ugh.
Can it be done?
Maybe I've jacked up the configuration, but this version, too, like 9.x and 10.x, seems to have the terrible behavior that the "enable" command now prompts for a username. Hoping there's some way to bypass that and just have an enable password/secret - everyone's fingers around here are just trained to type enable<cr>password<cr> and with the "prompt for username" that leaves the password displayed at the prompt, ugh.
Can it be done?
That causes a login as a user of the appropriate level to automatically drop into privileged mode, no?aaa authentication login privilege-mode
Commscope Technical Content Portal
docs.commscope.com
I'm looking for the traditional Cisco-like behavior where the initial login is not privileged, but the enable command prompts for only a password -- not a username -- to obtain a privileged exec. Without that, even if I can train my fingers to do it "wrong", I'm going to have half a dozen other let's call us "aged" network engineers typing the enable password at the username prompt all the time; not good.
Sold an ICX7540-32ZP to a member here and I'm trying to help troubleshoot an issue they're having with PoE. 7/8 2.5gb ports are only providing a few watts of PoE and not powering up his APs.
Working port:
Nonworking port:
Anyone have ideas? I didn't buy any 2.5gb stuff before I sold it on so didn't test the 2.5gb ports specifically.
Thanks,
Nathan
Working port:
Code:
SSH@icx7450-32zp>show interface e1/1/30
2.5GigabitEthernet1/1/30 is up, line protocol is up
Port up for 39 minute(s) 57 second(s)
Hardware is 2.5GigabitEthernet, address is 609c.9f1d.c7c0 (bia 609c.9f1d.c7dd)
Configured speed 2.5Gbit, actual 2.5Gbit, configured duplex fdx, actual fdx
Configured mdi mode AUTO, actual MDIX
Tagged member of 3 L2 VLANs, untagged in VLAN 10, port state is FORWARDING
BPDU guard is Disabled, ROOT protect is Disabled, Designated protect is Disabled
Link Error Dampening is Disabled
Cable Signal Error Scanning is Enabled, Scan_Interval: 5 sec
STP configured to ON, priority is level0, mac-learning is enabled
MACsec is Disabled
Openflow is Disabled, Openflow Hybrid mode is Disabled, Flow Control is config enabled, oper enabled, negotiation disabled
Mirror disabled, Monitor disabled
Mac-notification is disabled
VLAN-Mapping is disabled
Not member of any active trunks
Not member of any configured trunks
No port name
IPG MII 96 bits-time, IPG GMII 96 bits-time
MTU 10200 bytes, encapsulation ethernet
MMU Mode is Store-and-forward
300 second input rate: 14024 bits/sec, 6 packets/sec, 0.00% utilization
300 second output rate: 5960448 bits/sec, 1280 packets/sec, 0.24% utilization
396806 packets input, 109396514 bytes, 0 no buffer
Received 1889 broadcasts, 14423 multicasts, 380494 unicasts
0 input errors, 0 CRC, 0 frame, 0 ignored
0 runts, 0 giants
16978578 packets output, 10764907142 bytes, 0 underruns
Transmitted 157792 broadcasts, 170067 multicasts, 16650719 unicasts
0 output errors, 0 collisions
Relay Agent Information option: Disabled
Protected: No
MAC Port Security: Disabled
Code:
1/1/31 On On 6600 30000 2P-IEEE Class 4 3 n/a
SSH@icx7450-32zp>show interface e1/1/31
2.5GigabitEthernet1/1/31 is down, line protocol is down
Port down for 6 hour(s) 15 second(s)
Hardware is 2.5GigabitEthernet, address is 609c.9f1d.c7c0 (bia 609c.9f1d.c7de)
Configured speed 1Gbit, actual unknown, configured duplex fdx, actual unknown
Configured mdi mode AUTO, actual unknown
Tagged member of 4 L2 VLANs, untagged in VLAN 10, port state is BLOCKING
BPDU guard is Disabled, ROOT protect is Disabled, Designated protect is Disabled
Link Error Dampening is Disabled
Cable Signal Error Scanning is Enabled, Scan_Interval: 5 sec
STP configured to ON, priority is level0, mac-learning is enabled
MACsec is Disabled
Openflow is Disabled, Openflow Hybrid mode is Disabled, Flow Control is config enabled, oper enabled, negotiation disabled
Mirror disabled, Monitor disabled
Mac-notification is disabled
VLAN-Mapping is disabled
Not member of any active trunks
Not member of any configured trunks
No port name
IPG MII 96 bits-time, IPG GMII 96 bits-time
MTU 10200 bytes, encapsulation ethernet
MMU Mode is Store-and-forward
300 second input rate: 0 bits/sec, 0 packets/sec, 0.00% utilization
300 second output rate: 0 bits/sec, 0 packets/sec, 0.00% utilization
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 multicasts, 0 unicasts
0 input errors, 0 CRC, 0 frame, 0 ignored
0 runts, 0 giants
0 packets output, 0 bytes, 0 underruns
Transmitted 0 broadcasts, 0 multicasts, 0 unicasts
0 output errors, 0 collisions
Relay Agent Information option: Disabled
Protected: No
MAC Port Security: DisabledThanks,
Nathan
run
should show you some diagnostic info ralted to the 8 port banks if it has faults. (Commscope Technical Content Portal) should show all good, but I have had it in the past Sev1 and still work but would drop to 1 gb as it could not maintain the 2.5
Code:
show inline power detailMake sure the AP is set to the higher power level, the auto negotiation is pretty unreliable IME.
Hi, I’m the member who bought the 7450-32ZP and thanks for asking the forum for helping me out. To confirm, I’ve turned off auto negotiation and set it to either 2.5G and 1G to the relevant ports within the 8-port 2.5G group.
Here’s the output of show inline power details:
Power Supply #1:
Max Curr: 13.9 Amps
Voltage: 54.0 Volts
Capacity: 748 Watts
PoePower: 748 Watts
Power Supply #2:
Max Curr: 13.9 Amps
Voltage: 54.0 Volts
Capacity: 748 Watts
PoePower: 748 Watts
POE Details Info. On Unit 1 :
General PoE Data:
+++++++++++++++++
Firmware
Version
----------------
02.1.8 Build 004
Hardware
Version
----------------
V1R3
Device HW version : 0:V1R3 1:V1R3 2:V1R3 3:V1R3 4:V1R3
Device Temperature(deg-C) : 0:37 1:35 2:37 3:37 4:42
Device Status : 0:Good 1:VOP-Sev1 2:Good 3:Good 4:Good
Cumulative Port State Data:
+++++++++++++++++++++++++++
#Ports #Ports #Ports #Ports #Ports #Ports #Ports
Admin-On Admin-Off Oper-On Oper-Off Off-Denied Off-No-PD Off-Fault
-------------------------------------------------------------------------
32 0 10 22 0 22 0
Cumulative Port Power Data:
+++++++++++++++++++++++++++
#Ports #Ports #Ports Power Power
Pri: 1 Pri: 2 Pri: 3 Consumption Allocation
-----------------------------------------------
0 0 32 53.300 W 210.996 W
What’s strange is that only port 30 works with any of my 1G and 2.5G routers. the other 7 only partially powers it up to around 6-7W but no connection link is established.
Hi all,
Originally posted as a separate thread, but I’m taking some advice to post here in the hopes someone will see something I’m missing in my 7250 config.
If the 7250’s config is fine but you’d still like to help me troubleshoot my OpenWRT, I don’t want to dilute this thread with an off topic thing, so hit me up in the original thread
————————
Still on- and off- again introducing IPv6 to my home network. Still flailing at it, so hoping someone will be able to point me to my mistakes
I have an ISP who delegates me a /56.
I use OpenWRT at my firewall, which receives the delegation and shares it with to my core switch over a Transit VLAN.
I use a ISX7250 as my core switch, with several VLANs configured. All inter-VLAN routing happens here as I have a couple 10G hosts (and from time to time actually make use of the bandwidth and the OpenWRT host is on a 1G connection)
OpenWRT is also my DHCPv4 server, and I have all the VEs on the 7250 relaying DHCPv4 requests to it successfully.
I chose OpenWRT because at no point do I need to hardcode my ISP-provided IPv6 prefix into any of my configuration. Firewall rules can be set up with just the Interface ID section of the IPv6 address, for example.
(It’s very easy to churn to different ISPs here in Aus for a better deal, but of course that means a new PD every time)
I'm struggling to get SLAAC to work through the ICX however. According to the Layer 3 configuration guide for 08.0.95, once I enable IPv6 on an interface, the ICX should autoconfigure a Link-Local address and if there are router advertisements on that link, it should get itself a GUA, however when I enabled IPv6 on my Transit VLAN interface, it did neither.
Since I have multiple VLANs being tagged on most interfaces, I followed it's advice to manually set the Link-Local address anyway, but still receive no GUA.
When I run show
So... can anyone tell me where I'm going wrong?
Edit 1: Just realised that OpenWRT shows my LAN interface as having a /64 GUA in the web interface, but
Edit 2: The end goal is assigning 1 /64 per VLAN on the ICX, ideally without having to manually list the full prefix in the config and just have it work it out from RAs/DHCPv6, but for the moment I'm just focused on getting between the ICX and OpenWRT working.
OpenWRT info
ICX 7250 Info
Originally posted as a separate thread, but I’m taking some advice to post here in the hopes someone will see something I’m missing in my 7250 config.
If the 7250’s config is fine but you’d still like to help me troubleshoot my OpenWRT, I don’t want to dilute this thread with an off topic thing, so hit me up in the original thread
————————
Still on- and off- again introducing IPv6 to my home network. Still flailing at it, so hoping someone will be able to point me to my mistakes
I have an ISP who delegates me a /56.
I use OpenWRT at my firewall, which receives the delegation and shares it with to my core switch over a Transit VLAN.
I use a ISX7250 as my core switch, with several VLANs configured. All inter-VLAN routing happens here as I have a couple 10G hosts (and from time to time actually make use of the bandwidth and the OpenWRT host is on a 1G connection)
OpenWRT is also my DHCPv4 server, and I have all the VEs on the 7250 relaying DHCPv4 requests to it successfully.
I chose OpenWRT because at no point do I need to hardcode my ISP-provided IPv6 prefix into any of my configuration. Firewall rules can be set up with just the Interface ID section of the IPv6 address, for example.
(It’s very easy to churn to different ISPs here in Aus for a better deal, but of course that means a new PD every time)
I'm struggling to get SLAAC to work through the ICX however. According to the Layer 3 configuration guide for 08.0.95, once I enable IPv6 on an interface, the ICX should autoconfigure a Link-Local address and if there are router advertisements on that link, it should get itself a GUA, however when I enabled IPv6 on my Transit VLAN interface, it did neither.
Since I have multiple VLANs being tagged on most interfaces, I followed it's advice to manually set the Link-Local address anyway, but still receive no GUA.
When I run show
ipv6 neighbour, I do see my OpenWRT LAN interface's Link-Local address, but not it's GUA. I can ping the LL but not the GUA.So... can anyone tell me where I'm going wrong?
Edit 1: Just realised that OpenWRT shows my LAN interface as having a /64 GUA in the web interface, but
ip a shows it as a /60. Address itself is the same characters, but could that be the problem?Edit 2: The end goal is assigning 1 /64 per VLAN on the ICX, ideally without having to manually list the full prefix in the config and just have it work it out from RAs/DHCPv6, but for the moment I'm just focused on getting between the ICX and OpenWRT working.
OpenWRT info
Bash:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP qlen 1000
link/ether bc:24:11:25:f0:17 brd ff:ff:ff:ff:ff:ff
inet 100.66.9.76/21 brd 100.66.15.255 scope global eth0
valid_lft forever preferred_lft forever
inet6 2db8:0db8:0db8:0db8:be24:11ff:fe25:f017/64 scope global dynamic noprefixroute
valid_lft 2591850sec preferred_lft 604650sec
inet6 2db8:0db8:0db8:0db8::1000/128 scope global dynamic noprefixroute
valid_lft 557sec preferred_lft 557sec
inet6 fe80::be24:11ff:fe25:f017/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br-lan state UP qlen 1000
link/ether bc:24:11:e7:e1:b5 brd ff:ff:ff:ff:ff:ff
4: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether bc:24:11:e7:e1:b5 brd ff:ff:ff:ff:ff:ff
inet 10.42.255.254/30 brd 10.42.255.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 2db8:0db8:0db8:0db8::1/60 scope global dynamic noprefixroute
valid_lft 557sec preferred_lft 557sec
inet6 fd14:7480:e680::1/60 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::be24:11ff:fee7:e1b5/64 scope link
valid_lft forever preferred_lft forever
Code:
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
option ra 'server'
list ra_flags 'managed-config'
list ra_flags 'other-config'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'ICX 7250 Info
Code:
Current configuration:
!
ver 08.0.95hT213
!
stack unit 1
module 1 icx7250-24p-poe-port-management-module
module 2 icx7250-sfp-plus-8port-80g-module
!
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
router-interface ve 1
!
vlan 22 by port
tagged ethe 1/1/1 to 1/1/23 ethe 1/2/1 to 1/2/8
router-interface ve 22
!
vlan 50 by port
tagged ethe 1/1/1 to 1/1/23 ethe 1/2/1 to 1/2/8
router-interface ve 50
!
vlan 60 by port
tagged ethe 1/1/1 to 1/1/23 ethe 1/2/1 to 1/2/8
router-interface ve 60
!
vlan 70 by port
tagged ethe 1/1/1 to 1/1/23 ethe 1/2/1 to 1/2/8
router-interface ve 70
!
vlan 80 by port
tagged ethe 1/1/1 to 1/1/23 ethe 1/2/1 to 1/2/8
router-interface ve 80
!
vlan 107 by port
tagged ethe 1/1/1 to 1/1/6 ethe 1/1/8 to 1/1/23 ethe 1/2/1 to 1/2/8
untagged ethe 1/1/7
router-interface ve 107
!
vlan 255 by port
tagged ethe 1/2/8
router-interface ve 255
!
!
!
!
!
!
!
!
!
!
!
!
!
!
optical-monitor
optical-monitor non-ruckus-optic-enable
aaa authentication web-server default local
aaa authentication login default local
enable aaa console
ip dhcp-client disable
ip route 0.0.0.0/0 10.42.255.254
!
ipv6 unicast-routing
logging host 192.168.42.222 udp-port 6514
no telnet server
username super password .....
!
!
snmp-server community ..... ro
snmp-server community ..... ro
!
!
!
manager disable
!
!
manager port-list 987
!
!
!
!
!
!
!
!
!
interface ethernet 1/1/1
no inline power
!
interface ethernet 1/1/2
no inline power
!
interface ethernet 1/1/3
no inline power
!
interface ethernet 1/1/4
no inline power
!
interface ethernet 1/1/6
no inline power
!
interface ethernet 1/1/7
no inline power
!
interface ethernet 1/1/8
no inline power
!
interface ethernet 1/1/10
no inline power
!
interface ethernet 1/1/11
no inline power
!
interface ethernet 1/1/13
no inline power
!
interface ethernet 1/1/14
no inline power
!
interface ethernet 1/1/15
no inline power
!
interface ethernet 1/1/16
no inline power
!
interface ethernet 1/1/17
no inline power
!
interface ethernet 1/1/18
no inline power
!
interface ethernet 1/1/19
no inline power
!
interface ethernet 1/1/20
no inline power
!
interface ethernet 1/1/21
no inline power
!
interface ethernet 1/1/22
no inline power
!
interface ethernet 1/1/23
no inline power
!
interface ethernet 1/1/24
no inline power
!
interface ethernet 1/2/1
speed-duplex 10G-full
!
interface ethernet 1/2/2
speed-duplex 10G-full
!
interface ethernet 1/2/3
speed-duplex 10G-full
!
interface ethernet 1/2/4
speed-duplex 10G-full
!
interface ethernet 1/2/5
speed-duplex 10G-full
!
interface ethernet 1/2/6
speed-duplex 10G-full
!
interface ethernet 1/2/7
speed-duplex 10G-full
!
interface ethernet 1/2/8
no optical-monitor
speed-duplex 10G-full
!
interface ve 1
ip address 192.168.42.151 255.255.255.0
ip helper-address 1 10.42.255.254
!
interface ve 22
ip address 10.42.22.1 255.255.255.0
!
interface ve 50
ip address 10.42.50.1 255.255.255.0
ip helper-address 1 10.42.255.254
ipv6 address fe80::be24:11ff:50:1 link-local
ipv6 enable
ipv6 dhcp-relay destination fe80::be24:11ff:fee7:e1b5 outgoing-interface ve 255
ipv6 dhcp-relay include-options interface-id remote-id
!
interface ve 60
ip address 10.42.60.1 255.255.255.0
ip helper-address 1 10.42.255.254
!
interface ve 70
ip address 10.42.70.1 255.255.255.0
ip helper-address 1 10.42.255.254
!
interface ve 80
ip address 10.42.80.1 255.255.255.0
ip helper-address 1 10.42.255.254
!
interface ve 107
ip address 10.42.107.250 255.255.255.0
ip helper-address 1 10.42.255.254
!
interface ve 255
ip address 10.42.255.253 255.255.255.252
ipv6 address fe80::be24:11ff:fee7:2552 link-local
ipv6 enable
!
ipv6 neighbor inspection vlan 255
!
!
!
!
!
!
!
!
!
ip ssh idle-time 0
!
!
!
!
!
endWell... you've opened a can of Pandora's worms here
I suspect the configuration that you want to have is not really possible, and here's why:
An IPv6 router can only provide addresses to its connected subnets via RAs+SLAAC and DHCPv6, and it can only do this if it has been given IPv6 address blocks for those subnets. This can be done in the configuration, or dynamically.
For this to be done dynamically, the router must have a DHCPv6-PD client which can ask for a prefix delegation from its upstream router, *and* it must then allocate blocks out of that delegation for each of its connected subnets.This does not require that the router have GUAs on those subnets, in fact an IPv6 router generally doesn't have any GUAs except for the one used to manage it.
When the router allocates blocks for those connected subnets, it will send RAs so that clients on the subnets can use SLAAC, and if it also has a DHCPv6 server it can make addresses available to the clients that way too.
If there is *another* router (in your case, the ICX7250), then this repeats all over again: that router has to have a DHCPv6-PD client which will request a prefix delegation from its upstream (your OpenWrt router), and it then has to allocate blocks from that prefix to its subnets, send RAs, and potentially offer addresses via DHCPv6. As far as I'm aware, the ICX software is not capable of doing that: it does not have a DHCPv6-PD client. Again, the router would not have or use GUAs at all, except for management (and that's typically going to be an address which is statically assigned and not part of a prefix obtained via DHCPv6-PD).
I've looked into this a number of times for my own network, and ended up just removing layer3 functionality from the ICXs in my network and using them as pure layer2 switches. All of the IPv6 addressing is handled by my routers external to the ICX, and those routers are connected to each subnet so they can dole out addresses. This does mean that inter-VLAN traffic is not handled by the ICX, of course.
I suspect the configuration that you want to have is not really possible, and here's why:
An IPv6 router can only provide addresses to its connected subnets via RAs+SLAAC and DHCPv6, and it can only do this if it has been given IPv6 address blocks for those subnets. This can be done in the configuration, or dynamically.
For this to be done dynamically, the router must have a DHCPv6-PD client which can ask for a prefix delegation from its upstream router, *and* it must then allocate blocks out of that delegation for each of its connected subnets.This does not require that the router have GUAs on those subnets, in fact an IPv6 router generally doesn't have any GUAs except for the one used to manage it.
When the router allocates blocks for those connected subnets, it will send RAs so that clients on the subnets can use SLAAC, and if it also has a DHCPv6 server it can make addresses available to the clients that way too.
If there is *another* router (in your case, the ICX7250), then this repeats all over again: that router has to have a DHCPv6-PD client which will request a prefix delegation from its upstream (your OpenWrt router), and it then has to allocate blocks from that prefix to its subnets, send RAs, and potentially offer addresses via DHCPv6. As far as I'm aware, the ICX software is not capable of doing that: it does not have a DHCPv6-PD client. Again, the router would not have or use GUAs at all, except for management (and that's typically going to be an address which is statically assigned and not part of a prefix obtained via DHCPv6-PD).
I've looked into this a number of times for my own network, and ended up just removing layer3 functionality from the ICXs in my network and using them as pure layer2 switches. All of the IPv6 addressing is handled by my routers external to the ICX, and those routers are connected to each subnet so they can dole out addresses. This does mean that inter-VLAN traffic is not handled by the ICX, of course.
Hi, I've been spending more time trying to figure out the 2.5Gb port POE+ problem on my 7150-32ZP and still getting stuck. The APs run on the non 2.5Gb ports and one 2.5G port (#30), but #25-29,31,32 are the ones giving me trouble. Here's the output of show inline power below. Any help would be great since this has been incredibly frustrating. Many thanks!
SSH@icx7450-32zp>show inline power
Power Capacity: Total is 1496000 mWatts. Current Free is 1285472 mWatts.
Power Allocations: Requests Honored 152 times
Port Admin Oper ---Power(mWatts)--- PD Type PD Class Pri Fault/
State State Consumed Allocated Error
-----------------------------------------------------------------------------
1/1/1 On Non-PD 0 0 n/a n/a 3 n/a
1/1/2 On Non-PD 0 0 n/a n/a 3 n/a
1/1/3 On Off 0 0 n/a n/a 3 n/a
1/1/4 On Off 0 0 n/a n/a 3 n/a
1/1/5 On Non-PD 0 0 n/a n/a 3 n/a
1/1/6 On Non-PD 0 0 n/a n/a 3 n/a
1/1/7 On Off 0 0 n/a n/a 3 n/a
1/1/8 On Off 0 0 n/a n/a 3 n/a
1/1/9 On On 6900 29532 2P-IEEE Class 4 3 n/a
1/1/10 On On 7000 29532 2P-IEEE Class 4 3 n/a
1/1/11 On Off 0 0 n/a n/a 3 n/a
1/1/12 On Off 0 0 n/a n/a 3 n/a
1/1/13 On Non-PD 0 0 n/a n/a 3 n/a
1/1/14 On Off 0 0 n/a n/a 3 n/a
1/1/15 On On 6700 29532 2P-IEEE Class 4 3 n/a
1/1/16 On Non-PD 0 0 n/a n/a 3 n/a
1/1/17 On Non-PD 0 0 n/a n/a 3 n/a
1/1/18 On Off 0 0 n/a n/a 3 n/a
1/1/19 On On 4100 15400 2P-IEEE Class 3 3 n/a
1/1/20 On On 3900 15400 2P-IEEE Class 3 3 n/a
1/1/21 On On 4100 15400 2P-IEEE Class 3 3 n/a
1/1/22 On On 5700 15400 2P-IEEE Class 3 3 n/a
1/1/23 On On 4000 15400 2P-IEEE Class 3 3 n/a
1/1/24 On On 3700 15400 2P-IEEE Class 3 3 n/a
1/1/25 On Non-PD 0 0 n/a n/a 3 n/a
1/1/26 On Non-PD 0 0 n/a n/a 3 n/a
1/1/27 On Non-PD 0 0 n/a n/a 3 n/a
1/1/28 On Off 0 0 n/a n/a 3 n/a
1/1/29 On Off 0 0 n/a n/a 3 n/a
1/1/30 On On 8900 29532 2P-IEEE Class 4 3 n/a
1/1/31 On Off 0 0 n/a n/a 3 n/a
1/1/32 On Off 0 0 n/a n/a 3 n/a
-----------------------------------------------------------------------------
Total 55000 210528
SSH@icx7450-32zp>show inline power detail
Power Supply Data On unit 1:
++++++++++++++++++
Power Supply Data:
++++++++++++++++++
Power Supply #1:
Max Curr: 13.9 Amps
Voltage: 54.0 Volts
Capacity: 748 Watts
PoePower: 748 Watts
Power Supply #2:
Max Curr: 13.9 Amps
Voltage: 54.0 Volts
Capacity: 748 Watts
PoePower: 748 Watts
POE Details Info. On Unit 1 :
General PoE Data:
+++++++++++++++++
Firmware
Version
----------------
02.1.8 Build 004
Hardware
Version
----------------
V1R3
Device HW version : 0:V1R3 1:V1R3 2:V1R3 3:V1R3 4:V1R3
Device Temperature(deg-C) : 0:40 1:37 2:39 3:39 4:42
Device Status : 0:Good 1:VOP-Sev1 2:Good 3:Good 4:Good
Cumulative Port State Data:
+++++++++++++++++++++++++++
#Ports #Ports #Ports #Ports #Ports #Ports #Ports
Admin-On Admin-Off Oper-On Oper-Off Off-Denied Off-No-PD Off-Fault
-------------------------------------------------------------------------
32 0 10 22 0 22 0
Cumulative Port Power Data:
+++++++++++++++++++++++++++
#Ports #Ports #Ports Power Power
Pri: 1 Pri: 2 Pri: 3 Consumption Allocation
-----------------------------------------------
0 0 32 55.000 W 210.528 W
SSH@icx7450-32zp>show inline power
Power Capacity: Total is 1496000 mWatts. Current Free is 1285472 mWatts.
Power Allocations: Requests Honored 152 times
Port Admin Oper ---Power(mWatts)--- PD Type PD Class Pri Fault/
State State Consumed Allocated Error
-----------------------------------------------------------------------------
1/1/1 On Non-PD 0 0 n/a n/a 3 n/a
1/1/2 On Non-PD 0 0 n/a n/a 3 n/a
1/1/3 On Off 0 0 n/a n/a 3 n/a
1/1/4 On Off 0 0 n/a n/a 3 n/a
1/1/5 On Non-PD 0 0 n/a n/a 3 n/a
1/1/6 On Non-PD 0 0 n/a n/a 3 n/a
1/1/7 On Off 0 0 n/a n/a 3 n/a
1/1/8 On Off 0 0 n/a n/a 3 n/a
1/1/9 On On 6900 29532 2P-IEEE Class 4 3 n/a
1/1/10 On On 7000 29532 2P-IEEE Class 4 3 n/a
1/1/11 On Off 0 0 n/a n/a 3 n/a
1/1/12 On Off 0 0 n/a n/a 3 n/a
1/1/13 On Non-PD 0 0 n/a n/a 3 n/a
1/1/14 On Off 0 0 n/a n/a 3 n/a
1/1/15 On On 6700 29532 2P-IEEE Class 4 3 n/a
1/1/16 On Non-PD 0 0 n/a n/a 3 n/a
1/1/17 On Non-PD 0 0 n/a n/a 3 n/a
1/1/18 On Off 0 0 n/a n/a 3 n/a
1/1/19 On On 4100 15400 2P-IEEE Class 3 3 n/a
1/1/20 On On 3900 15400 2P-IEEE Class 3 3 n/a
1/1/21 On On 4100 15400 2P-IEEE Class 3 3 n/a
1/1/22 On On 5700 15400 2P-IEEE Class 3 3 n/a
1/1/23 On On 4000 15400 2P-IEEE Class 3 3 n/a
1/1/24 On On 3700 15400 2P-IEEE Class 3 3 n/a
1/1/25 On Non-PD 0 0 n/a n/a 3 n/a
1/1/26 On Non-PD 0 0 n/a n/a 3 n/a
1/1/27 On Non-PD 0 0 n/a n/a 3 n/a
1/1/28 On Off 0 0 n/a n/a 3 n/a
1/1/29 On Off 0 0 n/a n/a 3 n/a
1/1/30 On On 8900 29532 2P-IEEE Class 4 3 n/a
1/1/31 On Off 0 0 n/a n/a 3 n/a
1/1/32 On Off 0 0 n/a n/a 3 n/a
-----------------------------------------------------------------------------
Total 55000 210528
SSH@icx7450-32zp>show inline power detail
Power Supply Data On unit 1:
++++++++++++++++++
Power Supply Data:
++++++++++++++++++
Power Supply #1:
Max Curr: 13.9 Amps
Voltage: 54.0 Volts
Capacity: 748 Watts
PoePower: 748 Watts
Power Supply #2:
Max Curr: 13.9 Amps
Voltage: 54.0 Volts
Capacity: 748 Watts
PoePower: 748 Watts
POE Details Info. On Unit 1 :
General PoE Data:
+++++++++++++++++
Firmware
Version
----------------
02.1.8 Build 004
Hardware
Version
----------------
V1R3
Device HW version : 0:V1R3 1:V1R3 2:V1R3 3:V1R3 4:V1R3
Device Temperature(deg-C) : 0:40 1:37 2:39 3:39 4:42
Device Status : 0:Good 1:VOP-Sev1 2:Good 3:Good 4:Good
Cumulative Port State Data:
+++++++++++++++++++++++++++
#Ports #Ports #Ports #Ports #Ports #Ports #Ports
Admin-On Admin-Off Oper-On Oper-Off Off-Denied Off-No-PD Off-Fault
-------------------------------------------------------------------------
32 0 10 22 0 22 0
Cumulative Port Power Data:
+++++++++++++++++++++++++++
#Ports #Ports #Ports Power Power
Pri: 1 Pri: 2 Pri: 3 Consumption Allocation
-----------------------------------------------
0 0 32 55.000 W 210.528 W
Ahhh… so there’s no way to get it to redirect RS messages to openWRT like there is with IPv4 DHCP requests then?Well... you've opened a can of Pandora's worms here
I suspect the configuration that you want to have is not really possible, and here's why:
An IPv6 router can only provide addresses to its connected subnets via RAs+SLAAC and DHCPv6, and it can only do this if it has been given IPv6 address blocks for those subnets. This can be done in the configuration, or dynamically.
For this to be done dynamically, the router must have a DHCPv6-PD client which can ask for a prefix delegation from its upstream router, *and* it must then allocate blocks out of that delegation for each of its connected subnets.This does not require that the router have GUAs on those subnets, in fact an IPv6 router generally doesn't have any GUAs except for the one used to manage it.
When the router allocates blocks for those connected subnets, it will send RAs so that clients on the subnets can use SLAAC, and if it also has a DHCPv6 server it can make addresses available to the clients that way too.
If there is *another* router (in your case, the ICX7250), then this repeats all over again: that router has to have a DHCPv6-PD client which will request a prefix delegation from its upstream (your OpenWrt router), and it then has to allocate blocks from that prefix to its subnets, send RAs, and potentially offer addresses via DHCPv6. As far as I'm aware, the ICX software is not capable of doing that: it does not have a DHCPv6-PD client. Again, the router would not have or use GUAs at all, except for management (and that's typically going to be an address which is statically assigned and not part of a prefix obtained via DHCPv6-PD).
I've looked into this a number of times for my own network, and ended up just removing layer3 functionality from the ICXs in my network and using them as pure layer2 switches. All of the IPv6 addressing is handled by my routers external to the ICX, and those routers are connected to each subnet so they can dole out addresses. This does mean that inter-VLAN traffic is not handled by the ICX, of course.
Can you plug something into one of the ports that's misbehaving and do the show inline power command again?
No, RS cannot be relayed. It is possible to have both the ICX and OpenWrt on the subnets, with the RAs from the routers set for different priorities so that inter-subnet traffic flows throug the ICX, but it's definitely not trivial to do that. What makes it possible is that IPv6 routing uses link-local addresses for the routers, not ULAs or GUAs, but the ICX would still have to have the GUA subnets in its routing table and if they are dynamic you're back in the same situation.
one other request, can you do:
no inline power
inline power power-by-class 4
on the ports affected rather than just doing the second line? I know this is basically “have you tried turning it off and on again” but there’s a reason that’s a meme.
cheers
Nathan
Hi Nathan, thanks for the pointers. Just did the cycling of the inline power in the 2.5G ports and still no success. Let me bring the AP from my office home again and I’ll plug it into a misbehaving port to update soon