Configuring Brocade Switches

From Alteeve Wiki
Jump to navigation Jump to search

 AN!Wiki :: How To :: Configuring Brocade Switches

Serial Connection

You can use screen to connect to the switch (default values are fine).

screen /dev/ttySO

The screen will be blank until you press <enter>.

ICX6610-24 Switch>
ICX6610-24 Switch>enable 
No password has been assigned yet...

There is no default user name and password. To use the web interface later, a user and password needs to be set.

Note: Super User level password can be an alphanumeric string, but cannot begin with a number.
ICX6610-24 Switch#configure terminal 
ICX6610-24 Switch(config)#enable super-user-password secret
ICX6610-24 Switch(config)#enable user disable-on-login-failure 10
ICX6610-24 Switch(config)#user alteeve privilege 0 password secret 
ICX6610-24 Switch(config)#show users
Username                                        Password                           Encrypt   Priv Status   Expire Time
======================================================================================================================
alteeve                                         $1$HF4..Zv.$uF.PUT.bqkMy5GicUIrhG/ enabled   0    enabled  Never
ICX6610-24 Switch(config)#write memory
Write startup-config done.

Automatic copy to member units:  2
ICX6610-24 Switch(config)#aaa authentication web-server default local
ICX6610-24 Switch(config)#Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.

Form the Stack

> enable
# config terminal
## (config) stack enable
## (config) exit
# show stack
# stack secure-setup
 Do you accept the topology (RING) (y/n)?: y
 Do you accept the unit id's (y/n)?: y

(switches reboot)

> enable
# show stack
ICX6610-24 Switch#show stack
alone: standalone, D: dynamic config, S: static config
ID   Type         Role    Mac Address    Pri State   Comment                   
1  S ICX6610-24   active  748e.f8ff.cf1c 128 local   Ready                              

    active                                                                     
     +---+                                                                     
 =2/6| 1 |2/1=                                                                 
     +---+                                                                     
                                                                              
Current stack management MAC is 748e.f8ff.cf1c
Note: no "stack mac" config. My MAC will change after failover.
ICX6610-24 Switch#T=1h25m22.3: Election, was active, no change, ID=1, pri=128, 2U(1-2), A=u1, nbr#=1 1, 
Done hot swap: active controller unit 1 sets unit 2 to Ready.

Config changed due to add/del units. Do write mem if you want to keep it
Stack unit 2 Power supply 1 is up
Stack unit 2 Power supply 2 is up
Assigned unit 2 to be standby
start running config sync
Running config sync to standby is complete

ICX6610-24 Switch#show stack

alone: standalone, D: dynamic config, S: static config
ID   Type         Role    Mac Address    Pri State   Comment                   
1  S ICX6610-24   active  748e.f8ff.cf1c 128 local   Ready                              
2  D ICX6610-24   standby 748e.f8ff.cf84   0 remote  Ready                              

    active       standby                                                       
     +---+        +---+                                                        
 =2/1| 1 |2/6==2/6| 2 |2/1=                                                    
 |   +---+        +---+   |                                                    
 |                        |                                                    
 |------------------------|                                                    
                                                                              
Standby u2 - No hitless failover. Reason: hitless-failover not configured
Current stack management MAC is 748e.f8ff.cf1c
Note: no "stack mac" config. My MAC will change after failover.
# write memory

Write startup-config done.

Automatic copy to member units:  2
ICX6610-24 Switch#Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.

Assign IP to Switch

> enable
# config terminal
## (config) ip address 10.255.8.1 255.255.0.0
## (config) exit
# ping 10.255.8.1

Ping self done.

# ping 10.255.255.254

Sending 1, 16-byte ICMP Echo to 10.255.255.254, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 10.255.255.254  : bytes=16 time=2ms TTL=64
Success rate is 100 percent (1/1), round-trip min/avg/max=2/2/2 ms.

Update the firmware

Note: These switches have two firmwares;
  • Layer 2 (S)
    • Compressed Pri Code size = 5325231, Version:07.3.00cT7f1 (/foundry/FGS/os/FCXS07300c.bin)
  • Layer 3 (R)
    • Compressed Sec Code size = 6811631, Version:07.3.00cT7f3 (/foundry/FGS/os/FCXR07300c.bin)

Create a my.brocade.com account

> enable
# config terminal
## (config) show flash

Stack unit 1:
  Compressed Pri Code size = 5325231, Version:07.3.00cT7f1 (/foundry/FGS/os/FCXS07300c.bin)
  Compressed Sec Code size = 6811631, Version:07.3.00cT7f3 (/foundry/FGS/os/FCXR07300c.bin)
  Compressed Boot-Monitor Image size = 370555, Version:07.3.02T7f5
  Code Flash Free Space = 53215232
Stack unit 2:
  Compressed Pri Code size = 5325231, Version 07.3.00cT7f1 (/foundry/FGS/os/FCXS07300c.bin)
  Compressed Sec Code size = 6811631, Version 07.3.00cT7f3 (/foundry/FGS/os/FCXR07300c.bin)
  Compressed Boot-Monitor Image size = 370555, Version 07.3.02T7f5
  Code Flash Free Space = 53084160

## (config) exit
# copy tftp flash 10.255.255.254 FCXS07400d.bin primary

ICX6610-24 Switch#Flash Memory Write (8192 bytes per dot) 
Automatic copy to member units:  2
....<lots of dots>....
TFTP to Flash Done.

# show flash

Stack unit 1:
  Compressed Pri Code size = 5702656, Version:07.4.00dT7f1 (FCXS07400d.bin)
  Compressed Sec Code size = 6811631, Version:07.3.00cT7f3 (/foundry/FGS/os/FCXR07300c.bin)
  Compressed Boot-Monitor Image size = 370555, Version:07.3.02T7f5
  Code Flash Free Space = 52822016
Stack unit 2:
  Compressed Pri Code size = 5702656, Version 07.4.00dT7f1 (FCXS07400d.bin)
  Compressed Sec Code size = 6811631, Version 07.3.00cT7f3 (/foundry/FGS/os/FCXR07300c.bin)
  Compressed Boot-Monitor Image size = 370555, Version 07.3.02T7f5
  Code Flash Free Space = 52690944

# write memory

Write startup-config done.

Automatic copy to member units:  2
Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.

# reload

Are you sure? (enter 'y' or 'n'): y
Reload request sent to attached stack member(s)...
Rebooting(0)...
Note: It takes a while to reboot because it will update the firmware of the second node. Please be patient.
> enable
# show version

  Copyright (c) 1996-2012 Brocade Communications Systems, Inc. All rights reserved.
    UNIT 1: compiled on Jul 08 2013 at 18:50:06 labeled as FCXS07400d
                (5702656 bytes) from Primary FCXS07400d.bin
        SW: Version 07.4.00dT7f1 
    UNIT 2: compiled on Jul 08 2013 at 18:50:06 labeled as FCXS07400d
                (5702656 bytes) from Primary FCXS07400d.bin
        SW: Version 07.4.00dT7f1 
  Boot-Monitor Image size = 370555, Version:07.3.02T7f5 (grz07302)
  HW: Stackable ICX6610-24
==========================================================================
UNIT 1: SL 1: ICX6610-24 24-port Management Module
         Serial  #: xxxx
         License: BASE_SOFT_PACKAGE   (LID: dzrHKJMlFKI)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 1: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 1: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================
UNIT 2: SL 1: ICX6610-24 24-port Management Module
         Serial  #: xxxx
         License: BASE_SOFT_PACKAGE   (LID: dzrHKJMlFKd)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 2: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 2: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================
  800 MHz Power PC processor 8544E (version 0021/0023) 400 MHz bus
65536 KB flash memory
  512 MB DRAM
STACKID 1  system uptime is 4 minutes 2 seconds 
STACKID 2  system uptime is 4 minutes 2 seconds 
The system : started=warm start  reloaded=by "reload"
My stack unit ID = 1, bootup role = active

Configure VLAN

We're creating three separate VLANs;

  • VID 100 (BCN)
  • VID 200 (SN)
  • VID 300 (IFN)

All ports default to VID 1. All unassigned ports remain in VID 1.

# config terminal
## (config) vlan 100 name bcn
### (config-vlan-100) untag ethernet 1/1/1 to 1/1/10

Added untagged port(s) ethe 1/1/1 to 1/1/10 to port-vlan 100.

### (config-vlan-100) untag ethernet 2/1/1 to 2/1/10

Added untagged port(s) ethe 2/1/1 to 2/1/10 to port-vlan 100.

### (config-vlan-100) vlan 200 name sn
### (config-vlan-200) untag ethernet 1/1/11 to 1/1/14 ethernet 2/1/11 to 2/1/24

Added untagged port(s) ethe 1/1/11 to 1/1/14 ethe 2/1/11 to 2/1/24 to port-vlan 200.

Oops. Have to send some ports back to VID 1.

### (config-vlan-200) no untag ethernet 2/1/15 to 2/1/24
### (config-vlan-200) show vlan

Total PORT-VLAN entries: 3
Maximum PORT-VLAN entries: 64

Legend: [Stk=Stack-Id, S=Slot]

PORT-VLAN 1, Name DEFAULT-VLAN, Priority level0, Spanning tree On
 Untagged Ports: (U1/M1)  15  16  17  18  19  20  21  22  23  24 
 Untagged Ports: (U1/M3)   1   2   3   4   5   6   7   8 
 Untagged Ports: (U2/M1)  15  16  17  18  19  20  21  22  23  24 
 Untagged Ports: (U2/M3)   1   2   3   4   5   6   7   8 
   Tagged Ports: None
   Uplink Ports: None
 DualMode Ports: None
 Mac-Vlan Ports: None
     Monitoring: Disabled
PORT-VLAN 100, Name bcn, Priority level0, Spanning tree On
 Untagged Ports: (U1/M1)   1   2   3   4   5   6   7   8   9  10 
 Untagged Ports: (U2/M1)   1   2   3   4   5   6   7   8   9  10 
   Tagged Ports: None
   Uplink Ports: None
 DualMode Ports: None
 Mac-Vlan Ports: None
     Monitoring: Disabled
PORT-VLAN 200, Name sn, Priority level0, Spanning tree On
 Untagged Ports: (U1/M1)  11  12  13  14 
 Untagged Ports: (U2/M1)  11  12  13  14 
   Tagged Ports: None
   Uplink Ports: None
 DualMode Ports: None
 Mac-Vlan Ports: None
     Monitoring: Disabled

{{note|1=A port in VID 1 will simply change to the newly assigned VID. Ports in other VIDs need to be reset with no untag ... before re

Back to configuring.

### (config-vlan-200) vlan 300 name ifn
### (config-vlan-300) untag ethernet 1/1/15 to 1/1/24 ethernet 2/1/15 to 2/1/24

Added untagged port(s) ethe 1/1/15 to 1/1/24 ethe 2/1/15 to 2/1/24 to port-vlan 300.

### show vlan

Total PORT-VLAN entries: 4
Maximum PORT-VLAN entries: 64

Legend: [Stk=Stack-Id, S=Slot]

PORT-VLAN 1, Name DEFAULT-VLAN, Priority level0, Spanning tree On
 Untagged Ports: (U1/M3)   1   2   3   4   5   6   7   8 
 Untagged Ports: (U2/M3)   1   2   3   4   5   6   7   8 
   Tagged Ports: None
   Uplink Ports: None
 DualMode Ports: None
 Mac-Vlan Ports: None
     Monitoring: Disabled
PORT-VLAN 100, Name bcn, Priority level0, Spanning tree On
 Untagged Ports: (U1/M1)   1   2   3   4   5   6   7   8   9  10 
 Untagged Ports: (U2/M1)   1   2   3   4   5   6   7   8   9  10 
   Tagged Ports: None
   Uplink Ports: None
 DualMode Ports: None
 Mac-Vlan Ports: None
     Monitoring: Disabled
PORT-VLAN 200, Name sn, Priority level0, Spanning tree On
 Untagged Ports: (U1/M1)  11  12  13  14 
 Untagged Ports: (U2/M1)  11  12  13  14 
   Tagged Ports: None
   Uplink Ports: None
 DualMode Ports: None
 Mac-Vlan Ports: None
     Monitoring: Disabled
PORT-VLAN 300, Name ifn, Priority level0, Spanning tree On
 Untagged Ports: (U1/M1)  15  16  17  18  19  20  21  22  23  24 
 Untagged Ports: (U2/M1)  15  16  17  18  19  20  21  22  23  24 
   Tagged Ports: None
   Uplink Ports: None
 DualMode Ports: None
 Mac-Vlan Ports: None
     Monitoring: Disabled

### (config-vlan-300) exit
### (config) write memory

Write startup-config done.

Automatic copy to member units:  2
Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.

### (config) exit

Trunking

Passive Trunk

This is used when the connected switch does not support LACP.

Note: Configure with only one cable connected into the trunk ports.
# config terminal
## (config) trunk ethernet 1/1/24 ethernet 2/1/24

Trunk will be created in next trunk deploy.

## (config) trunk deploy
## (config) write memory

Active Trunk

This is used if you can create an LACP on the client's switch.

Note: Configure with only one cable connected into the trunk ports.
# config terminal
## (config) interface ethernet 1/1/23 ethernet 2/1/23
## (config-mif-1/1/23,2/1/23) link-aggregate active
## exit
## show link-aggregate

System ID: 748e.f8ff.cf1c
Long  timeout: 90, default: 90
Short timeout: 3, default: 3
Port  [Sys P] [Port P] [  Key ] [Act][Tio][Agg][Syn][Col][Dis][Def][Exp][Ope]
1/1/23      1        1      482   Yes   S   Agg  Syn  Col  Dis  Def  No   Dwn
2/1/23      1        1      482   Yes   S   Agg  Syn  Col  Dis  Def  No   Dwn

Installing Keys

Once you get the license file from Brocade, copy the key(s) to the root of your TFTP server (/var/lib/tftpboot/).

Note the LID number and which stack ID. In this case, I renamed the license files so that 'an-s01_01.key' was for the LID for switch stack 1 (the license key's suffix is the LID of the unit, see 'show config').

ICX6610-24 Switch>enable
Password:
ICX6610-24 Switch#ping 10.255.255.254
Sending 1, 16-byte ICMP Echo to 10.255.255.254, timeout 5000 msec, TTL 64
Type Control-c to abort
^C
Ping aborted!
ICX6610-24 Switch#terminal config
Invalid input -> config
Type ? for a list
ICX6610-24 Switch#config terminal
ICX6610-24 Switch(config)#ip address 10.255.8.1 255.255.0.0
ICX6610-24 Switch(config)#ping 10.255.255.254
Invalid input -> ping 10.255.255.254
Type ? for a list
ICX6610-24 Switch(config)#exit
ICX6610-24 Switch#ping 10.255.255.254
Sending 1, 16-byte ICMP Echo to 10.255.255.254, timeout 5000 msec, TTL 64
Type Control-c to abort
Reply from 10.255.255.254  : bytes=16 time<1ms TTL=64
Success rate is 100 percent (1/1), round-trip min/avg/max=0/0/0 ms.
ICX6610-24 Switch#copy tftp license 10.255.255.254 an-s01_01.key
Incomplete command.
ICX6610-24 Switch#copy tftp license 10.255.255.254 an-s01_01.key
Incomplete command.
ICX6610-24 Switch#copy tftp license 10.255.255.254 an-s01_01.key unit 1
ICX6610-24 Switch#Flash Memory Write (8192 bytes per dot) .
Copy Software License from TFTP to Flash Done.

ICX6610-24 Switch#show license                          1_01.key unit 2 
Index      License Name              Lid          License Type    Status     License Period  License Capacity  
Stack unit 1:
1          ICX6610-10G-LIC-POD       dzrHKJMlFKd  Normal          Invalid    Unlimited                  4 
ICX6610-24 Switch#license delete unit 1 index 1
ICX6610-24 Switch#show license
License record empty
ICX6610-24 Switch#copy tftp license 10.255.255.254 an-s01_01.key unit 2  
ICX6610-24 Switch#Flash Memory Write (8192 bytes per dot) .
Copy Software License from TFTP to Flash Done.

Copy software license to stack unit 2 success
Flash Memory Write (8192 bytes per dot) .
T=20h33m21.2: Election, was active, no change, ID=1, pri=128, 2U(1-2), A=u1, nbr#=1 1, 

ICX6610-24 Switch#show license
Index      License Name              Lid          License Type    Status     License Period  License Capacity  
Stack unit 2:
1          ICX6610-10G-LIC-POD       dzrHKJMlFKd  Normal          Active     Unlimited                  4 
ICX6610-24 Switch#copy tftp license 10.255.255.254 an-s0201.key unit 1  
ICX6610-24 Switch#TFTP: received error request -- code 1 message File not found

Copy Software License from TFTP to Flash copy stack Error: tftp file not found.

ICX6610-24 Switch#copy tftp license 10.255.255.254 an-s02_01.key unit 1
ICX6610-24 Switch#Flash Memory Write (8192 bytes per dot) .
Copy Software License from TFTP to Flash Done.
T=20h34m13.1: Election, was active, no change, ID=1, pri=128, 2U(1-2), A=u1, nbr#=1 1, 

ICX6610-24 Switch#show license
Index      License Name              Lid          License Type    Status     License Period  License Capacity  
Stack unit 1:
1          ICX6610-10G-LIC-POD       dzrHKJMlFKI  Normal          Active     Unlimited                  4 
Stack unit 2:
1          ICX6610-10G-LIC-POD       dzrHKJMlFKd  Normal          Active     Unlimited                  4 
ICX6610-24 Switch#write memory
Write startup-config done.

Automatic copy to member units:  2
ICX6610-24 Switch#Flash Memory Write (8192 bytes per dot) .
Flash to Flash Done.

Enable ports

ICX6610-24 Switch#config terminal
ICX6610-24 Switch(config)#interface ethernet 1/3/1 to 1/3/4 
ICX6610-24 Switch(config-mif-1/3/1-1/3/4)#speed-du
  speed-duplex               Set to 100 or 10 (or 10G on ICX6450), half or full
ICX6610-24 Switch(config-mif-1/3/1-1/3/4)#speed-duplex 
  10-full            
  10-half            
  100-full           
  100-half           
  1000-full-master   
  1000-full-slave    
  10g-full           
  auto               
ICX6610-24 Switch(config-mif-1/3/1-1/3/4)#speed-duplex 10g-full
ICX6610-24 Switch(config-mif-1/3/1-1/3/4)#inter
ICX6610-24 Switch(config-mif-1/3/1-1/3/4)#interfa
ICX6610-24 Switch(config-mif-1/3/1-1/3/4)#interface ethernet 2/3/1 to 2/3/4
ICX6610-24 Switch(config-mif-2/3/1-2/3/4)#speed-duplex 10g-full
ICX6610-24 Switch(config-mif-2/3/1-2/3/4)#U2-MSG: INFO: 2/3/4: optics <-> speed mismatch. Replace with SFP+ to enable link.
U2-MSG: INFO: 2/3/4: optics <-> speed mismatch. Replace with SFP+ to enable link.
interface ethernet 2/3/4
ICX6610-24 Switch(config-if-e10000-2/3/4)#speed-duplex 1000-full-master

Notes

Port numbering syntax is:

<stack>/<module>/<port>

Module numbering;

  • 1; Copper 1 Gbit
  • 2; Fibre stack
  • 3; 10 Gbps fibre

 

Any questions, feedback, advice, complaints or meanderings are welcome.
Alteeve's Niche! Enterprise Support:
Alteeve Support
Community Support
© Alteeve's Niche! Inc. 1997-2024   Anvil! "Intelligent Availability®" Platform
legal stuff: All info is provided "As-Is". Do not use anything here unless you are willing and able to take responsibility for your own actions.