How do you configure an ICX-7450 with the ICX7400-SERVICE-MOD IPSec Module?

Question

I have an ICX-7450 48-Port PoE switch with the ICX7400-SERVICE-MOD IPSec hardware module installed and firmware upgraded to the 08.0.80 release.  Following the IPSec section of the Ruckus FastIron I can't get any of the commands for configuring ipsec or ikev2 to work.  They don't even appear as valid commands in the CLI help.  The module is installed and detected at boot up but none of the related commands are available.  What am I missing here is there special firmware I need for the IPSec hardware to work?

simon_pollard · Answer

Hi PeteA TAC case is a support case TAC = Technical Assistance CentreIf you don't have a support contract then TAC coverage is only provided for the first 90 days (except for hardware replacement, that is for the life of the product).I doubt the issue if fixed in 8.0.90 as it is a new defect. I expect that it will be addressed in the next maintenance release.

unknown · Answer

Thanks for the tip, I generated a trial L3 premium license and the commands appeared.  What is a TAC case?  I originally opened a support ticket about this issue and it was immediately closed saying I didn't have a support contract.  Is this issue fixed in the 08.0.90 release?

simon_pollard · Answer

The L3 premium license is NOT needed to use the IPsec module, but an issue with the 8.0.80 release means that the commands are not visible without it and this needs to be fixed. The workaround is to enable the L3 license until the fix is available. (Note that you should be using the L3 image already to allow the IPsec configuration).