topic Re: icx8200 v10.0.00 in ICX Switches

icx8200 v10.0.00

caliparcerito — Wed, 22 Mar 2023 20:12:09 GMT

trying to configure a new icx, and with the new firmware I have a couple of questions.

before I was able to use the router-interface ve in vlans, how do we do it now??

also,

How do we create the privilege exec password?

I keep getting:

router>enable

No password has been assiged yet...

Thank you for any help

Re: icx8200 v10.0.00

BenBeck — Wed, 22 Mar 2023 20:26:09 GMT

Hey @caliparcerito

There is quite a bit of CLI syntax change in 9.x and 10.x when compared to 8.x. Please review the release notes and guides to check for deprecated and newly-introduced commands.

8200 product page with recommended code and links to documents

https://support.ruckuswireless.com/products/204-ruckus-icx-8200-campus-switches#sort=relevancy&f:@source=[Documentation]&f:@commonproducts=[ICX-8200]

Regarding VEs, you no longer need the 'router-interface' command. If you have a vlan, the corresponding VE is automatically created with same number. For example, If you have vlan 10, you can simply do the following:

conf t

int ve 10

*configure as needed

Changes within aaa items generally happened in 9010. Regarding enable authentication, you will generally use this newer command:

aaa authentication enable

https://docs.commscope.com/bundle/fastiron-10000-commandref/page/GUID-12709AE8-FF8D-458C-9A7E-9F885A4787DA.html

Hope that helps!

Re: icx8200 v10.0.00

aalvarez6 — Wed, 22 Mar 2023 20:27:52 GMT

Hello Caliparcerito,

You can find more information here on how to do it:

Configure interface VE.
```
device1(config-vlan-10)# interface ve 10
device1(config-vif-10)#
```
The interface VE is directly mapped to the corresponding VLAN ID.

Configure L3 settings.

device1(config-vif-10)# ip address 100.0.0.1/24

https://docs.commscope.com/en-US/bundle/fastiron-10000-l2guide/page/GUID-23E7FE65-4DFE-49B0-AFBF-2BFF7FB9D35E.html

Also, please take a look at the command reference guide on how to do the exec password privilige:

starting from page 2916

https://support.ruckuswireless.com/documents/4301-fastiron-10-0-00-ga-command-reference-guide

You can find more documents in support.ruckuswireless.com by looking the ICX and selecting the version you are currently running.

Please let us know if you have more questions or if we can set this topic as solved.

Best Regards,

Ayleth Alvarez | Sr Technical Support Engineer | TAC Wired

Re: icx8200 v10.0.00

caliparcerito — Thu, 23 Mar 2023 14:28:09 GMT

Thank you Ben,

one more question, what about the console time-out. I keep getting logged out every 2 minutes and I haven't been able to change it. Do you know a way to change it?

Re: icx8200 v10.0.00

caliparcerito — Thu, 23 Mar 2023 14:28:33 GMT

Thank you Alvarez

Re: icx8200 v10.0.00

BenBeck — Thu, 23 Mar 2023 14:32:31 GMT

Hey @caliparcerito,

New command is 'cli-timeout <value>'

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 06:44:50 GMT

Hi there,

I'm trying to configure the new 8200PF running on the 10.0.00 as a layer 2 device which will connect to another 8200PF functioning as the L3 device. On the 7400 series I can assign an ip address to the L2 device and an ip default gateway but on the 8200 i'm to configure for L2 function is doesnt allow an ip. I use the

vlan 25
tagged ethe 1/2/1

int ve 25
ip address 10.30.30.9 255.255.255.0
ip route 0.0.0.0/0 10.30.30.1
exit

but it wouldn't take the Ip route. says node doesn't exit. Any help on this would be appreciated.

Re: icx8200 v10.0.00

BenBeck — Wed, 29 Mar 2023 18:51:09 GMT

Hey @Dejeh1

10.0+ will only have router image (switch image deprecated), but you can still configure it to act as an L2 switch.

Can you show the exact message? Also, can you please upgrade the switch to 10.0a? 10.0 is the very first image ever released for that product and we would like customers to move to 10.0a.

Link:

https://support.ruckuswireless.com/software?filter=204#sort=relevancy&f:@source=[Software%20Downloads]&f:@commonproducts=[ICX-8200]

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 06:42:44 GMT

Hi @BenBeck

The image in use now is the RDR10000 image, I'll upgrade to the 10.0a and try running the Ip route command again to see if it takes it this time. Also the command

enable super-user-password
enable aaa console

fdp advertise ipv4

isn't accepted, I guess these were also depreciated, are there any replacement commands for the above?

Re: icx8200 v10.0.00

BenBeck — Thu, 30 Mar 2023 13:07:44 GMT

Hey @Dejeh1

Please take a look at the 10.0 documentation (security guide for aaa) as it will lay out all options formally. Quite a bit has changed.

To auth enable prompt:

aaa authentication enable default

Regarding console aaa, there is no longer a separate command. Starting with 9.0, aaa applies to console automatically.

I am still seeing fdp advertise command as available in 10.x

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 15:41:07 GMT

hi @BenBeck

Thanks, I'll try this out now and I'll revert if any issues

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 16:17:21 GMT

Hi @BenBeck

I update the image to the 10.0a and tried running the ip route command and it still wont take it. Here's the exact error message below

SW09(config-vif-253)#ip route 0.0.0.0/0 10.30.31.1
Invalid input ->route 0.0.0.0/0 10.30.31.1
Type ? for a list
Node doesn't exist

Re: icx8200 v10.0.00

BenBeck — Thu, 30 Mar 2023 16:34:05 GMT

Hey @Dejeh1

It looks like you are in interface config mode. You need to type 'exit' once and get back to global config:

ICX(config)#ip route 0.0.0.0/0 10.30.31.1

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 16:46:58 GMT

Hi @BenBeck

Yes I was in interface mode, I tried the step you provided and it worked!

Thanks Ben

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 17:21:49 GMT

Hi @BenBeck

I'll like to mention that during the image upgrade, I got the below error message after loading the upgrade image to the secondary partition:

[ 348.898300] EXT4-fs error (device mmcblk0p1): ext4_mb_generate_buddy:757: group 1, block bitmap and bg descriptor inconsistent: 25101 vs 25068 free clusters

Though a show Flash showed the image was successfully loaded to the secondary partition, should I be worried about anything else?

Re: icx8200 v10.0.00

BenBeck — Thu, 30 Mar 2023 18:19:23 GMT

Hey @Dejeh1

I am not familiar with that message. Please open a support case (see my signature) and we can look at it formally if needed.

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 21:35:50 GMT

Okay will do.

Thanks Ben

Re: icx8200 v10.0.00

Dejeh1 — Thu, 30 Mar 2023 23:09:28 GMT

Hi @BenBeck

I'm trying to configure an IP address for a single interface using the command

interface ethernet 1/2/1
port-name Frontport
ip address 10.30.30.1 255.255.255.252

but I get the error message

Invalid input ->address 10.30.30.1 255.255.255.252
Type ? for a list
Node not parsed

Also , I tried creating a router Ve and I get errors too:

ICX8200-48PF Router(config-vlan-10)# router-interface ve 10
Invalid input ->router-interface ve 10
Type ? for a list
Node doesn't exist

Is there something I'm missing?

Re: icx8200 v10.0.00

BenBeck — Fri, 31 Mar 2023 12:19:19 GMT

You no longer need to create the VE. In your example, as soon as vlan 10 exists, you can go straight to 'interface ve 10'. This is another change. Regarding 1/2/1, is it in the default vlan? You may need to issue 'route-only' on the port.

Re: icx8200 v10.0.00

Dejeh1 — Fri, 31 Mar 2023 17:54:26 GMT

Hi @BenBeck

Thanks for the clarification on the VE. Regarding 1/2/1 it's not part of any Vlan, this is an SFP port (X1) and I'll like to configure a static Ip address to it. But its not taking the config

interface ethernet 1/2/1
port-name Frontport
ip address 10.30.30.1 255.255.255.252

Invalid input ->address 10.30.30.1 255.255.255.252
Type ? for a list
Node not parsed