{"id":2321,"date":"2020-04-09T16:40:31","date_gmt":"2020-04-09T13:40:31","guid":{"rendered":"https:\/\/blog.3kgroup.ee:443\/?p=2321"},"modified":"2020-10-23T14:49:52","modified_gmt":"2020-10-23T11:49:52","slug":"ruckus-icx-switchide-seadistamine-2","status":"publish","type":"post","link":"https:\/\/blog.3kgroup.ee:443\/?p=2321&lang=en","title":{"rendered":"Ruckus ICX switch setup."},"content":{"rendered":"\n

Creating access<\/h3>\n\n\n\n

First, we connect to the ICX switch through the console. We make the physical connection with a standard USB cable with a USB-C connector on the switch side, the same cable used to charge newer phones.<\/p>\n\n\n\n

The first setting is to assign a management IP to the switch and activate the web interface. Mgmt IP becomes 192.168.3.19, subnet \/24, gateway 192.168.3.1 and we create a certificate.<\/p>\n\n\n\n

ICX7150-C12 Switch>enable
No password has been assigned yet\u2026
ICX7150-C12 Switch#configure terminal
ICX7150-C12 Switch(config)#ip address 192.168.3.19\/24
ICX7150-C12 Switch(config)#ip default-gateway 192.168.3.1
ICX7150-C12 Switch(config)#crypto-ssl certificate generate
Creating certificate, please wait\u2026
<\/p>\n\n\n\n

ICX7150-C12 Switch(config)#
ssl-certificate creation is successful
crypto-ssl certificate generate secret_data<\/p>\n\n\n\n

Loome kasutaja 'ruckus' parooliga 'ruckus'. Switchi nimeks saab '3K_ICX' ning k\u00e4suga 'write mem' kirjutame seaded m\u00e4llu.<\/p>\n\n\n\n

ICX7150-C12 Switch(config)#username ruckus password ruckus
ICX7150-C12 Switch(config)#aaa authentication login default local
ICX7150-C12 Switch(config)#aaa authentication web-server default local
ICX7150-C12 Switch(config)#web-management https<\/p>\n\n\n\n

ICX7150-C12 Switch(config)#hostname 3K_ICX
3K_ICX(config)#enable telnet authentication
3K_ICX(config)#enable aaa console
3K_ICX(config)#write mem
There is no startup config file, unable to save legacy config
Flash Memory Write (8192 bytes per dot)
.
Write startup-config done.
Copy Done.
3K_ICX(config)# <\/p>\n\n\n\n

Now you can access the switch through web-interface.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

To activate ssh access over a mgmt link, a key pair must be created:<\/p>\n\n\n\n

3K_ICX(config)#crypto key generate rsa modulus 2048
3K_ICX(config)#
Creating RSA key pair, please wait\u2026
RSA Key pair is successfully created
3K_ICX(config)# <\/p>\n\n\n\n

  • \"\"<\/figure><\/li>
  • \"\"<\/figure><\/li><\/ul><\/figure>\n\n\n\n

    Creating VLANs.<\/h3>\n\n\n\n

    Vlans can be added in bulk, ie vlans with similar settings do not have to be created and configured one by one. This option saves a lot of time and effort.
    We add VLANs between 21-40 and assign them to port 1\/1\/3<\/p>\n\n\n\n

    <\/p>\n\n\n\n

    SSH@3K_ICX>enable
    No password has been assigned yet...
    SSH@3K_ICX#conf t
    SSH@3K_ICX(config)#vlan 21 to 40 #Siin lisame vlanid 21-40
    SSH@3K_ICX(config-mvlan-21-40)#tag
    tagged 802.1Q tagged port
    SSH@3K_ICX(config-mvlan-21-40)#tagged ethernet 1\/1\/3 #Siin lisame vlani'd switchi pordile 1\/1\/3
    SSH@3K_ICX(config-mvlan-21-40)#Added tagged port(s) ethe 1\/1\/3 to port-vlan 21.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 22.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 23.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 24.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 25.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 26.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 27.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 28.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 29.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 30.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 31.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 32.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 33.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 34.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 35.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 36.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 37.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 38.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 39.
    Added tagged port(s) ethe 1\/1\/3 to port-vlan 40.
    SSH@3K_ICX(config-mvlan-21-40)#spanning-tree 802-1w # K\u00e4ivitame Spanning Tree Protocol'i protsessi switchis
    SSH@3K_ICX(config-mvlan-21-40)#
    SSH@3K_ICX(config-mvlan-21-40)#spanning-tree 802-1w ethernet 1\/1\/3 admin-pt2pt-mac # M\u00e4\u00e4rame pordi 1\/1\/3 admin point-to-point lingiks, pordil on Rapid STP <\/p>\n\n\n\n

    The same, but using different syntax. We add VLAN 2, 4, 6, 8 and 10.<\/p>\n\n\n\n

    SSH@3K_ICX#conf t
    SSH@3K_ICX(config)#vlan 2 4 6 8 10
    SSH@3K_ICX(config-mvlan-2*10)#tagg
    tagged 802.1Q tagged port
    SSH@3K_ICX(config-mvlan-2*10)#tagged ethernet 1\/1\/4
    SSH@3K_ICX(config-mvlan-2*10)#Added tagged port(s) ethe 1\/1\/4 to port-vlan 2.
    Added tagged port(s) ethe 1\/1\/4 to port-vlan 4.
    Added tagged port(s) ethe 1\/1\/4 to port-vlan 6.
    Added tagged port(s) ethe 1\/1\/4 to port-vlan 8.
    Added tagged port(s) ethe 1\/1\/4 to port-vlan 10.
    SSH@3K_ICX(config-mvlan-2*10)#<\/p>\n\n\n\n

    You can check the settings:<\/p>\n\n\n\n

    System-max vlan Params: Max(4095) Default(64) Current(64)
    Default vlan Id :1
    Total Number of Vlan Configured :26
    VLANs Configured :1 to 2 4 6 8 10 21 to 40
    SSH@3K_ICX#
    SSH@3K_ICX#show interfaces ethernet 1\/1\/4
    GigabitEthernet1\/1\/4 is down, line protocol is down
    Port down for 20 minute(s) 9 second(s)
    Hardware is GigabitEthernet, address is d4c1.9e94.1617 (bia d4c1.9e94.1617)
    Configured speed auto, actual unknown, configured duplex fdx, actual unknown
    Configured mdi mode AUTO, actual unknown
    Member of 5 L2 VLANs, port is tagged, port state is BLOCKING
    BPDU guard is Disabled, ROOT protect is Disabled, Designated protect is Disabled
    Link Error Dampening is Disabled
    STP configured to ON, priority is level0, mac-learning is enabled <\/p>\n\n\n\n

    Here we see that in addition to the default VLAN 1, VLANs 2, 4, 6, 8, 10, 21 to 40 are created, of which 5 VLANs are assigned to port 1\/1\/4.<\/p>\n","protected":false},"excerpt":{"rendered":"

    First, we connect to the ICX switch through the console. We make the physical connection with a standard USB cable with a USB-C connector on the switch side, the same cable used to charge newer phones.<\/p>\n","protected":false},"author":5,"featured_media":3450,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[442],"tags":[279],"class_list":["post-2321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-3k-support-services","tag-icx-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=\/wp\/v2\/posts\/2321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2321"}],"version-history":[{"count":4,"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=\/wp\/v2\/posts\/2321\/revisions"}],"predecessor-version":[{"id":2775,"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=\/wp\/v2\/posts\/2321\/revisions\/2775"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=\/wp\/v2\/media\/3450"}],"wp:attachment":[{"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.3kgroup.ee:443\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}