Advice on how to implement a 12port ICX7150

[JD]

Hello All,

We are currently working on a way to setup a sort of out-of-band management system in our small environment. Basically a mini PC will be connected to the 12port ICX7150 and the 12port will be connected to other ruckus switches in our other sites. The end goal is that if/when a resource in one of the sites isn't responding we can simply get on the mini pc remotely and then get to the site with the the 12port and its connection to that site's switch and subsequently its resources . The topology is akin to a hub and spoke but instead of all devices being connected to one central device we want the 12port ICX7150 to connect to all the sites we have. The problem is I am unsure of how the configuration on the 12port would be and what configuration would be on the switches on our remote sites as I don't want to cause any loops or broadcast storms I was wondering how I may achieve this goal. I appreciate any help or any advice on the matter.

[jdryan]

Setting up a Out of band management system using a 12 port switch where all other swtchs' management interfaces connect back to one of the 12 ports should be fairly easy. with a mini PC on the 12 port unit. 

on the 12 port switch :
make sure you have the SPR version of the Image on there. 
Licenses should not be an issues as all devices will be a part of the same single vlan.
all you would need to set up is a Vlan : you can create one or you can use the default one the vlan 1 
define a SVI/vlan interface  for it with an IP address defined on there. 
and that should do : 

if you choose to use vlan 1 : that will save you the trouble of port association as all ports are untagged to it by default
and post that you once you have the connections set up : all you would need to ensure all are a part of the same network 
on the other switches : depending on the code version used you can have either an management interface seperately like in SPR variant where you can access it using interface management 1 command and then set an IP there. 

OR in the SPS version set an ip directly on the switch : and use the management port to connect to the 12 port unit. 

this should get you started. 

[JD]

Hello,

Thank you for the reply! Just so I understand correctly, on the 12 port switch (with the SPR firmware) I would need to set a VLAN up (or use default VLAN 1) and then untag the port where the mini pc is connected on that VLAN, setup up a router-interface on that VLAN and an IP for it. The next part is what I'm a little confused by, so then I would tag the ports on the 12port switch with the VLAN that I made and plug the other switches at the other sites to those ports and make sure that the ports on the switch in the other sites are tagged as well on the same VLAN? Am I understanding that correctly? If so, then would I still be able to get to the devices at the remote sites, even with the different IP address and VLAN? Apologies in advance for the intrusive questions.

[jdryan]

no if you use the default vlan : vlan 1 on the 12 port switch and the management port on the other switches : you would not need to tag : as for the default vlan all ports are untagged and the management port on a given unit works as untagged only, hence that should make it easier. 

you can create a vlan and then do untag of all ports to the new vlan that should also work well. 

if you use tagging as you mentioned, it would be In band Management network, where a subnet that is a part of the network that you have is used for management, here in this usually as its part of the network and not isolated like OOBM : you can access even with different ips. 
in these kinds of set up, usually where the intervlan routing or routing takes place : ACLS are put in that help avoid cross subnet access locking it down to one subnet only. 
and it can be a bit detail oriented [ not rocket science ... but can be a bit tricky ] 

hence your approach of OOBM with either a new vlan or default vlan on the 12 port switch with all ports untagged and using mgmt interface on the other switches, should be easier. 
not to forget the definition of subnet for that [ assigning of IPs on the 12 port one and on management interfaces ]. 

No worries, I'm glad we could help out. 

[Chandini]

Adding to the thread . Please check the below quick start up guide for initial steps on working with the switch. I hope this helps. 

Quick start guide : 

https://docs.commscope.com/en-US/bundle/icx-quickstart/page/GUID-C44737B7-9844-47FE-BFCA-04944AF19C9...

Below link has details with accessing support and software details.

https://docs.commscope.com/bundle/icx-quickstart/page/GUID-9E975253-3763-4EB0-A0C4-37D4A0AA2DBA.html

Refer Layer 2 switching guide for all details on vlan config and spanning tree details 

https://docs.commscope.com/bundle/fastiron-08095-l2guide/page/GUID-63824063-904C-4E15-9760-121BCD9BF...

Thanks