Announcement: ICX FastIron 08.0.30t is now available on Support

[michael_brado]

     Our ICX FastIron developers and QAhave a new maintenance release with bug fixes.

This firmware runs on FCX, FSX, ICX – 6610, 6430/6450, 6650, 7250, 7450, 7750 models.

 

FastIron 08.0.30t Release Notes:

https://support.ruckuswireless.com/documents/2657-fastiron-08-0-30t-release-notes

 

Ruckus ICX FastIron 08.0.30t Software Release (.zip):

https://support.ruckuswireless.com/software/1994-ruckus-icx-fastiron-08-0-30t-software-release-zip

 

MD5:  480cea85722d2c138c4df7cbb8d4b175

 

   Thanks and best regards,

[eric_markow_641]

Thank you. According to the release notes, this release "contains defect fixes. There are no enhancements in this release." 

Is there going to be a future release adding the capability of an ICX6450-C12P to have a diffie-hellman-group14-sha1 SSH key exchange? The current key exchange capability of an ICX6450-C12-PD is not supported by modern SSH clients, as it has known security flaws. I am currently running version 80.0.30saT311

Thank you!

[michael_brado]

I forwarded your question to the FastIron development team...

[jijo_panangat]

Hello Eric,

You are correct!  diffie-hellman-group14-sha1 isnt supported on 8030t. This is supported on 8070 and higher releases but limited to ICX 7000 series platforms. Adding this capability on 8030 branch is very unlikely will get you a confirmation shortly.

Here is excerpt from 8030t release notes- “Brocade Fast Iron Release 08.0.30f introduces new enhancements”

•Key exchange method -By default, diffie-hellman-group1-sha1 is the key-exchange method used to establish an SSH connection. You can change the default key-exchange method and configure diffie-hellman-group14-sha1 as the key-exchange method using the ip ssh key-exchange-method dh-group14-sha1 command. The diffie-hellman-group14-sha1 method provides enhanced encryption of shared secrets between two devices. This is supported only on FCX devices

[jijo_panangat]

Hello Eric,

You are correct!  diffie-hellman-group14-sha1 isnt supported on 8030t. This is supported on 8070 and higher releases but limited to ICX 7000 series platforms. Adding this capability on 8030 branch is very unlikely will get you a confirmation shortly.

Here is excerpt from 8030t release notes- “Brocade Fast Iron Release 08.0.30f introduces new enhancements”

 •Key exchange method -By default, diffie-hellman-group1-sha1 is the key-exchange method used to establish an SSH connection. You can change the default key-exchange method and configure diffie-hellman-group14-sha1 as the key-exchange method using the ip ssh key-exchange-method dh-group14-sha1 command. The diffie-hellman-group14-sha1 method provides enhanced encryption of shared secrets between two devices. This is supported only on FCX devices

 Could you let us know who is end customer here.