Drag to reposition cover

Brocade ICX Series (cheap & powerful 10gbE/40gbE switching)

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

dbvader

Member
Oct 22, 2023
34
6
8
do you regret buying high performance switch with possible unresolved bugs and security flaws over a new, less powerful hardware but with still maintained software?
Sounds like a pitch Larry Ellison could have delivered.

The only regret I may have is that I'm not (yet) playing around with even higher performance switches.

I'm sure there's exceptions but in general, outfits selling "maintained software" and providing assurances tend to be the same outfits that require 40 people to screw in a light bulb. Buyers tend to buy into "maintained software" and assurances not for better quality, but for the ability to defer liabilities in the event of a disaster.
 

DavidRa

Infrastructure Architect
Aug 3, 2015
356
176
43
Central Coast of NSW
www.pdconsec.net
Question to people who bought refubrished Brocade/Ruckus switches from ebay: do you regret buying high performance switch with possible unresolved bugs and security flaws over a new, less powerful hardware but with still maintained software?
Gee, should I have spent $200 six years ago on two 48 port PoE switches with old firmware, or $2500 on an equivalent "new" one? Tough call... especially since the new ones are STILL about a thousand dollarydoos (e.g. 48 port poe+ - Shopping and Price Comparison Australia - Buy Cheap).
 
  • Like
Reactions: RoachedCoach

sic0048

Active Member
Dec 24, 2018
235
169
43
Question to people who bought refubrished Brocade/Ruckus switches from ebay: do you regret buying high performance switch with possible unresolved bugs and security flaws over a new, less powerful hardware but with still maintained software?
Absolutely not. Like others I initially started with the 6xxx series years ago thanks to this thread and I have since switched to the 7xxx series switches. The 6xxx series switches are old enough that I wouldn't recommend them anymore, but the prices on the 7xxx series switches have dropped down to similar prices as the 6xxx series when it was started.
 

Rootless

Thank you
Aug 9, 2021
25
7
3
The power supply in my ICX645-24P died recently. These are the ones with a single internal power supply.

I'm trying to expand the possible sources for replacement power supplies and wondered if anyone knows if the power supply from an ICX6430-24P or any of the other ICX6xxx/ICX7xxx internal power supplies compatible.

Some pictures, for good measure.
 

Attachments

Jelmer

Member
Sep 29, 2024
34
14
8
Question to people who bought refubrished Brocade/Ruckus switches from ebay: do you regret buying high performance switch with possible unresolved bugs and security flaws over a new, less powerful hardware but with still maintained software?
Well, it's a switch. Unless you wan't to use obscure L3 features that were'nt very common years ago I would guess that all bugs in firmware should have been resolved by now. I would be more affraid of hardware parts dying after a 100.000 hours of use.
 

kapone

Well-Known Member
May 23, 2015
2,076
1,412
113
Well, it's a switch. Unless you wan't to use obscure L3 features that weren't very common years ago I would guess that all bugs in firmware should have been resolved by now. I would be more affraid of hardware parts dying after a 100.000 hours of use.
Exactly. I bought a few ICX 6450-24 switches, probably ~4-5 years ago for less than $50/ea shipped. Yes, these use a bit more power than newer variants (~23w vs ~15w for the newer ones), but the higher price of newer hardware negates any cost savings from an energy perspective.

And unless that old switch doesn't have a feature (like my SX6036 switches...that only support two VRFs...instead of ..well way more, in newer/other switches), it's perfectly fine. Replacement parts can usually be found cheaply, and if not, at times, it's more cost effective to just buy another of the same.
 
Last edited:

Gauntlet3469

New Member
Aug 16, 2026
5
0
1
I'm not sure why you are uppercasing FAN, the word 'fan' is just fine in lowercase :)
No clue, maybe because it always says FAN1, FAN2, .... on the PCB? :D

I would be concerned about those noctuas pulling enough air through the PSU, someone in this thread did something similar and the PSU overheated and failed.
Before:
Rule 1/2 (MGMT THERMAL PLANE): 97.9 deg-C
Rule 2/2 (AIR OUTLET NEAR PSU): 43.5 deg-C

Now - and this is stable since i did the mod.
Rule 1/2 (MGMT THERMAL PLANE): 65.6 deg-C
Rule 2/2 (AIR OUTLET NEAR PSU): 44.0 deg-C

Overall temp in the rack ... I know this is not ideal, but for now this is best I can do. I have few other things planned so hopefully the top rack heat will go down a bit as well.
1787734192162.png

Question to people who bought refubrished Brocade/Ruckus switches from ebay: do you regret buying high performance switch with possible unresolved bugs...
No regrets at all! I am thinking about buying a second one just to have replacement unit if the main one dies. As of bugs, I would assume all of the major ones are already resolved. And if there are any still open, these would be the very specific related to niche functions which I will most-likely never face.

...over a new, less powerful hardware but with still maintained software?
I am not aware about any 8x10G + 48x1G port switch with such PoE budget and price tag close to what Brocade/ICX is sold on Ebay for... Hell I can't think about anything else with 24x1G + 4x10G with 300W PoE budget, what would be the minimum for me.
I am not counting the <insert_random_name> switches from AliExpress These might have the ports on paper, but the moment you use more than few (one?) 10G ports, the performance goes to hell or they start melting. Not even mentioning the security - If you're lucky, there is none (security), if you're very lucky, there is a rootkit preinstalled for free :D
 

blunden

Well-Known Member
Nov 29, 2019
1,226
437
83
I am not counting the <insert_random_name> switches from AliExpress These might have the ports on paper, but the moment you use more than few (one?) 10G ports, the performance goes to hell or they start melting. Not even mentioning the security - If you're lucky, there is none (security), if you're very lucky, there is a rootkit preinstalled for free :D
They seem to test perfectly fine in STH's testing so you'll have to provide a source for that performance statement. Realtek switch chips are also used in lots of other name brand switches without issues.

So far nobody has found anything malicious in the firmware of any of these cheap switches. If you want, you can replace the firmware on many of them with OpenWrt.
 

Gauntlet3469

New Member
Aug 16, 2026
5
0
1
@blunden I don't know man, but checking this article (yes, it is 4 years old but still), i see only one 24port with PoE and its Ebay price is way above the Brocade, even these days. Then checking some more recent articles i se this which has only 2x10GB ports and its unmanaged. Then next ~5 pages of the networking articles are only 8-12port models. Then, on page 8, there is Dell N2224X-ON, but this is DELL, not some "Cheap AliE model". Also i found this, which is close to the Brocade, but the mentioned $400 still almost 2x price compared to ICX 7250-48P (at least for me / offers in nearby countries), add the shipping from Taobao and it goes over 2x.

The "cheap" models (even the 4/8/12 port ones) tested by STH might keep up with one or two 10G, but use more of them and they either start overheating or the speed goes down significantly. I don't know in which videoreview Patrick mentioned this but I recall that from ~2-3 years ago when I was looking for something 10G/SFP capable. After some hours/days of research I found myself ordering the Brocade from Ebay, mainly because of this thread :D. Also, the webmanagement of the small(er) models is quite limited while the console is usually nonexistent (as far i recall from the reviews).

Oh and about Mikrotik, well, I used to use their Routerboards/RouterOS some years ago. I have nothing against that brand, but i never managed to fully "operate" the Winbox management, and theyr're not not the cheap side either.

As of the malicious thing. I said that if you're lucky, there is none and it works just "fine". but I would not expect much security/feature updates. On the other hand there were Chinesse brands with proven malicious content/backdoor (Zbtlink, Tenda, Ruijie, or even TP-Link, even though this was 3rd party foul-play). But yes, point taken regarding the OpenWrt approach, very true. (I used to have DDWRT on ooooold ASUS WL-500g huh)

I am not claiming that Brocade is the only one (there are also old Arubas or Omada devces which can do heavy lifting too). I bet there are other brands people are satisfied with. My point was, that Brocade is(was) true enterprise device, with well documented capabilities and robust build quality. The free "honor-based" license is just cherry on top. If the noise/size/power consumption is not an issue and you got it for cheap, there is no reason to go back to SOHO device...
 

blunden

Well-Known Member
Nov 29, 2019
1,226
437
83
@blunden I don't know man, but checking this article (yes, it is 4 years old but still), i see only one 24port with PoE and its Ebay price is way above the Brocade, even these days. Then checking some more recent articles i se this which has only 2x10GB ports and its unmanaged. Then next ~5 pages of the networking articles are only 8-12port models. Then, on page 8, there is Dell N2224X-ON, but this is DELL, not some "Cheap AliE model". Also i found this, which is close to the Brocade, but the mentioned $400 still almost 2x price compared to ICX 7250-48P (at least for me / offers in nearby countries), add the shipping from Taobao and it goes over 2x.

The "cheap" models (even the 4/8/12 port ones) tested by STH might keep up with one or two 10G, but use more of them and they either start overheating or the speed goes down significantly. I don't know in which videoreview Patrick mentioned this but I recall that from ~2-3 years ago when I was looking for something 10G/SFP capable. After some hours/days of research I found myself ordering the Brocade from Ebay, mainly because of this thread :D. Also, the webmanagement of the small(er) models is quite limited while the console is usually nonexistent (as far i recall from the reviews).

Oh and about Mikrotik, well, I used to use their Routerboards/RouterOS some years ago. I have nothing against that brand, but i never managed to fully "operate" the Winbox management, and theyr're not not the cheap side either.

As of the malicious thing. I said that if you're lucky, there is none and it works just "fine". but I would not expect much security/feature updates. On the other hand there were Chinesse brands with proven malicious content/backdoor (Zbtlink, Tenda, Ruijie, or even TP-Link, even though this was 3rd party foul-play). But yes, point taken regarding the OpenWrt approach, very true. (I used to have DDWRT on ooooold ASUS WL-500g huh)

I am not claiming that Brocade is the only one (there are also old Arubas or Omada devces which can do heavy lifting too). I bet there are other brands people are satisfied with. My point was, that Brocade is(was) true enterprise device, with well documented capabilities and robust build quality. The free "honor-based" license is just cherry on top. If the noise/size/power consumption is not an issue and you got it for cheap, there is no reason to go back to SOHO device...
If you check anything somewhat recent that has been tested with their new test equipment, you'll see that they have no problems doing line-rate at all ports at the same time. That's true for both the more well-known brands as well as the OEM designs sold on AliExpress as well as on AliExpress under different brands.




In other words, your information is outdated. :)

Those brands you mentioned with backdoors etc. were all related to router products, not switches as far as I know. Not really the same thing. These all run very generic reference firmware with very few customizations. You're right that firmware updates (if you get them) are mostly about bug fixes, not security updates. Like I said though, you can replace the firmware on several models if you want. :)

OpenWrt sticks to open source drivers and modern kernels so there you can keep up with security updates. They're also rewriting a lot of the Realtek drivers to make them suitable for upstreaming to the mainline kernel. :)
 

tunatoksoz

New Member
Sep 24, 2024
20
13
3
I thought i'd add this here - you can force a fan mode with commands below. It's not documented, i used codex to find it out.
Also i believe there's a way to patch the firmware to enable fanless mode on 7250 at least, or somehow figure out i2c commands to mimic fanless, but i am not sure if i want to go there if set-frufan is good enough.

# enable
# dm set-frufan 1
 
Last edited:

Gauntlet3469

New Member
Aug 16, 2026
5
0
1
@blunden Thanks! Yea, my info is definitely outdated. The linked devices obviously beat the previously mentioned "small" devices, thanks for the links. Is there anything "bigger"? 24+ ports / 4+ SFP ?
And BTW the Ruijie CVEs were for their Switch models - CVE , CVE . Ofc it is hard to say if intended or not...
 

blunden

Well-Known Member
Nov 29, 2019
1,226
437
83
@blunden Thanks! Yea, my info is definitely outdated. The linked devices obviously beat the previously mentioned "small" devices, thanks for the links. Is there anything "bigger"? 24+ ports / 4+ SFP ?
And BTW the Ruijie CVEs were for their Switch models - CVE , CVE . Ofc it is hard to say if intended or not...
If you only need 24+ ports of 1 Gbit/s ports and 4+ SFP+ ports, the RTL9311 might be an option. It supposedly supports 48 ports of 1 Gbit/s and 6 SFP+ ports. I don't have any particular switch model to point you to though.

There is also the newer RTL9335 that is much higher performance, but presumably not home lab cheap yet. I haven't seen it in any widely available switches yet though.

With that said, the Brocade switches are actual enterprise switches so the added feature set should obviously be taken into account. :)
 

KingGGs

New Member
Nov 24, 2020
7
0
1
Hey, I am eying the ICX6450-48P and want to know if it will work out the box without any configs or changes to the switch just as a poe switch with a web GUI interface for poe cameras?
 

kpfleming

Well-Known Member
Dec 28, 2021
488
256
63
Pelham NY USA
Hey, I am eying the ICX6450-48P and want to know if it will work out the box without any configs or changes to the switch just as a poe switch with a web GUI interface for poe cameras?
Yes, if your goal is a simple L2 switch with PoE support, the out-of-the-box (factory default) configuration will be sufficient. I don't know if the 6xxx series has a 'web GUI', but if it does it will be very basic.
 

aeg

Member
May 6, 2019
34
46
18
Hey, I am eying the ICX6450-48P and want to know if it will work out the box without any configs or changes to the switch just as a poe switch with a web GUI interface for poe cameras?
If you buy a used one, it will have who-knows-what config on it. You will need to reset it to factory defaults. You might as well bump it to the latest firmware while you're at it.

PoE is off by default, so you will need to enable that, too.
 

tastycarbon

New Member
Sep 1, 2026
2
0
1
Found this thread and started looking at the 7250-48P on eBay and oh boy the prices have gone up. I only see them for $100 shipped approx. What's a good for these nowadays?