Scribd
Upload
177 views4 pages

ICX Switches - Sample Config

The document discusses configuration steps for ICX switches including stack configuration, loopback interface, OSPF, VLANs, VRRP-E, static routing, LACP, software upgrade, breakout mode, and 802.1x authentication.

Uploaded by

Ajaz Memon
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
177 views4 pages

ICX Switches - Sample Config

The document discusses configuration steps for ICX switches including stack configuration, loopback interface, OSPF, VLANs, VRRP-E, static routing, LACP, software upgrade, breakout mode, and 802.1x authentication.

Uploaded by

Ajaz Memon
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

ICX switches

1. Stack configuration
ICX7750
stack unit 1
module 1 icx7750-48-xgf-port-management-module
module 2 icx7750-qsfp-6port-qsfp-240g-module
priority 128
stack-port 1/2/1 1/2/4
stack unit 2
module 1 icx7750-48-xgf-port-management-module
module 2 icx7750-qsfp-6port-qsfp-240g-module
priority 128
stack-port 2/2/1 2/2/4
stack enable

ICX6450
stack unit 1
module 1 icx6450-24-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
priority 128
stack-port 1/2/1 1/2/3
stack unit 2
module 1 icx6450-24-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
stack-port 2/2/1 2/2/3
stack unit 3
module 1 icx6450-24-port-management-module
module 2 icx6450-sfp-plus-4port-40g-module
stack-port 3/2/1 3/2/3
stack enable

2. Loopback interface
interface Loopback 1
ip ospf area 0
ip ospf active
ip address 192.168.2.253/32
3.

OSPF
a.

Global
router ospf
area 0

b.

Assign Physical interface to OSPF area


interface TenGigabitEthernet 1/1/15
ip ospf area 0

ip ospf active
ip address 192.168.1.6/30
c.

Assign Virtual interface to OSPF area


interface Ve 60
ip ospf area 0
ip ospf active

4.

VLAN
a.

Layer 2 Vlan and add ports


Vlan 60
Untagged Ethernet 1/0/1
Tagged eth 1/0/11

b.

Layer 3 vlan interface


Vlan 60
Router-interface ve 60
!
interface Ve 60
ip address 10.200.60.2/24
!

5.

VRRP-E (Optional)
a. Global
Rouetr vrrp-extended
b.

Interface configuration
interface Ve 60 (switch 1)
ip address 10.200.60.2/24
ip vrrp-extended vrid 60
backup priority 200
ip-address 10.200.60.1
advertise backup
activate
!
interface Ve 60 (switch 2)
ip address 10.200.60.3/24
ip vrrp-extended vrid 60
backup
ip-address 10.200.60.1
advertise backup
activate

6.

Static Route
ip route 0.0.0.0/0 10.200.85.78

(untagged/Access Port)
(tagged/Trunk Port)

7.

LACP
a.

Configure LAG
lag "sw-1" static id 1
ports ethernet 1/21 to 1/22
primary-port 1/21
deploy
!

8.

Software upgrade
Use TFTP server to upgrade images in the device. Assign IP address to management port and connect
tftp server machine on management port
a.

Application Image
i. Switch Image

copy tftp flash <ip-address> SWS08030e.bin primary


OR
ii. Layer 3 image

copy tftp flash <ip-address> SWR08030e.bin primary


b.

Boot roM

copy tftp flash 10.113.145.127 swz10105.bin bootrom


9.

Breakout mode for ICX7750


Configuring 40 Gbps breakout ports
Use the breakout ethernet command to divide available ICX 7750 40 Gbps ports into four 10 Gbps
sub-ports when a breakout cable is attached.
By default, all main 40 Gbps ports are configured to come up in 40 Gbps mode. Once ports are cabled
for breakout, configure the ports using the breakout ethernet command at the global configuration
level.
Device# configure terminal
Device(config)# store-and-forward
Device(config)# breakout ethernet 1/2/1
Device# write memory
Device#reload

(Follow same command all required ports)

Then the write-memory command is issued, followed by the reload command, to successfully
configure the port for breakout.
The four 10 Gbps sub-ports for port 1/2/1 can be represented as 1/2/1:1, 1/2/1:2, 1/2/1:3, and
1/2/1:4.

10. 802.1x Authentication


a.

Global Configuration
authentication
auth-default-vlan 78
restricted-vlan 999
auth-fail-action restricted-vlan
dot1x enable
dot1x enable ethe 1/1/45
mac-authentication enable
mac-authentication enable ethe 1/1/45
mac-authentication password-format xx-xx-xx-xx-xx-xx
aaa authentication dot1x default radius
radius-server host 10.126.10.186
radius-server host 10.100.11.176
radius-server host 10.212.1.176
radius-server key abcd

b.

interface Configuration
interface ethernet 1/1/45
dot1x port-control auto
inline power
voice-vlan 86

You might also like