topic Re: mac-vlan-permit ports in ICX Switches

mac-vlan-permit ports

bob_colon — Thu, 07 Sep 2023 14:05:25 GMT

Hello,

I have a Ruckus ICX7150 switch that I'm having issues with. I'm trying to get 802.1x RADIUS authentication enabled on some ports,. When trying to remove the port from all vlans I get this message:

SSH@TPAJDSW01-01-IDF1C(config-if-e1000-2/1/30)#vlan-config remove all
Error - Port(s)ethe 2/1/30 are 'mac-vlan-permit' ports
Port(s) ethe 2/1/30 can not be removed from VLANs 1 100

When I look at the configs of vlan 1 or vlan 100, I don't see the ports mentioned.

There is nothing on the config of the port itself:

SSH@TPAJDSW01-01-IDF1C(config)#sh ru int e 2/1/30
interface ethernet 2/1/30
inline power power-by-class 3
!

I can't find anything in the configs pertaining to mac-vlan-permit. in the configs. Is there someone who can help The switch is running SPR08090g firmware.

Thank you!

Re: mac-vlan-permit ports

Chandini — Fri, 08 Sep 2023 12:06:51 GMT

Hi Bob_colon

Thank you for reaching us

From the details shared i suppose you mensioned that you see no related commands in the configuration to mac-vlan-permit.

For example i have attached a picture below.

From the details shared looks like you have checked the configuration in vlan and interface and dont see any mac-vlan related commands in the configuration is what i undretsnad. Correct me if i am wrong.

I did try looking into security guide for 8030 and 8090 and looks like the mac-vlan commands are only available until code 8030.

Could you please help me with below details.

Have you tried upgrading the switch recently ?
Please help with output of below commands
- Show flash
- Show version
Also could you please check and let me know if you are able to execute below commands in 8090 version
- show table-mac-vlan
- show table-mac-vlan e 2/1/30
Are you seeing issue with only port 2/1/30 ?

I hope this helps

Thanks

Re: mac-vlan-permit ports

bob_colon — Sun, 10 Sep 2023 18:19:39 GMT

You are correct, there is nothing show in the configs for mac-vlan-permit. The version is: SPR08090g.

Stack unit 1:
NAND Type: Micron NAND 2GiB (x 1)
Compressed Pri Code size = 32566572, Version:08.0.90gT213 (SPR08090g.bin)
Compressed Sec Code size = 28337116, Version:08.0.61cT213 (SPR08061c.bin)
Compressed Pri Boot Code size = 786944, Version:10.1.15T225 (mnz10115)
Compressed Sec Boot Code size = 786944, Version:10.1.11T225 (mnz10111)
Code Flash Free Space = 1252028416
Stack unit 2:
NAND Type: Micron NAND 2GiB (x 1)
Compressed Pri Code size = 32566572, Version:08.0.90gT213 (SPR08090g.bin)
Compressed Sec Code size = 28337116, Version:08.0.61cT213 (SPR08061c.bin)
Compressed Pri Boot Code size = 786944, Version:10.1.15T225
Compressed Sec Boot Code size = 786944, Version:10.1.11T225
Code Flash Free Space = 1252245504

Re: mac-vlan-permit ports

Chandini — Mon, 11 Sep 2023 09:35:01 GMT

Hi Team

Ack and Noted. Thanks for reverting.

Could you please let me know if you verified the image version is 8090 from "show version" details ? Please verify if the switch is booting from primary or secondary flash ?
Have you tried to reboot the switch once from primary and noted if the issue still occurs ?

Below details also would be needed to understand more on the issue

Could you please help me with below details as well.

Have you tried upgrading the switch recently ?
Please help with output of below commands
- Show flash
- Show version
Also could you please check and let me know if you are able to execute below commands in 8090 version
- show table-mac-vlan
- show table-mac-vlan e 2/1/30
Are you seeing issue with only port 2/1/30 ?

I suppose this case may need more details to be shared. You could also feel free to log a case with us to work further on the issue using below link.

https://support.ruckuswireless.com/contact-us

Thanks

Re: mac-vlan-permit ports

bob_colon — Mon, 11 Sep 2023 14:29:59 GMT

My replies keep getting deleted anytime I try and show the switch output

Version: SPR08090g.bin

Show flash indicates that the switch was upgraded from SPR08061c, which appears to be on the secondary flash, the primary, which is what it booted off of is running (SPR08061c

Re: mac-vlan-permit ports

bob_colon — Mon, 11 Sep 2023 14:31:01 GMT

Sorry, I forgot to add, the table-mac-vlan is not a valid command.

Re: mac-vlan-permit ports

Chandini — Tue, 12 Sep 2023 10:01:33 GMT

Hi Bob_colon

Thank you for reverting with details.

From the details shared I suppose you are able to view 8090 in "Show version" output. Correct me if I am wrong.

And noted table-mac-vlan coming up as invalid is what I was expecting.

Could you also help me with below details

Have you tried to reboot the switch once from primary and noted if the issue still occurs ?
Are you seeing issue with only port 2/1/30 ?
What is the status of port 2/1/3 ? is it "Up" or "Down" ? Is it connected to any end device ? If yes what is the device it is connected to.

During downtime follow the below steps and see if it helps resolve the issue

Connect to switch using console
Run "write memory"
Run "skip"
Take backup of configuration by running "show run"
And reboot the switch using "Device# boot system flash primary "

Once the switch boots up check if that helps to resolve the issue you are seeing.

You could also feel free to log a case with us to work further on the issue using below link.

https://support.ruckuswireless.com/contact-us

Thanks