How do you configure an ICX-7450 with the ICX7400-SERVICE-MOD IPSec Module?

  • 1
  • Question
  • Updated 4 weeks ago
  • (Edited)
I have an ICX-7450 48-Port PoE switch with the ICX7400-SERVICE-MOD IPSec hardware module installed and firmware upgraded to the 08.0.80 release.  Following the IPSec section of the Ruckus FastIron I can't get any of the commands for configuring ipsec or ikev2 to work.  They don't even appear as valid commands in the CLI help.  The module is installed and detected at boot up but none of the related commands are available.  What am I missing here is there special firmware I need for the IPSec hardware to work?
Photo of pete23482

pete23482

  • 2 Posts
  • 0 Reply Likes
  • frustrated

Posted 4 weeks ago

  • 1
Photo of Simon

Simon, Employee

  • 28 Posts
  • 10 Reply Likes
Hi Pete

There appears to be an issue with 8.0.80 code and the IPsec commands only showing if the L3 license has been enabled. I would suggest opening a TAC case to get them to look at this further and advise on a fix.
Photo of William Hadley

William Hadley, Employee

  • 9 Posts
  • 5 Reply Likes
Pete - You need the L3 premium license installed to be specific.
Photo of Simon

Simon, Employee

  • 28 Posts
  • 10 Reply Likes
The L3 premium license is NOT needed to use the IPsec module, but an issue with the 8.0.80 release means that the commands are not visible without it and this needs to be fixed. 

The workaround is to enable the L3 license until the fix is available. (Note that you should be using the L3 image already to allow the IPsec configuration).
(Edited)
Photo of pete23482

pete23482

  • 2 Posts
  • 0 Reply Likes
Thanks for the tip, I generated a trial L3 premium license and the commands appeared.  What is a TAC case?  I originally opened a support ticket about this issue and it was immediately closed saying I didn't have a support contract.  Is this issue fixed in the 08.0.90 release?
(Edited)
Photo of Simon

Simon, Employee

  • 28 Posts
  • 10 Reply Likes
Hi Pete

A TAC case is a support case TAC = Technical Assistance Centre

If you don't have a support contract then TAC coverage is only provided for the first 90 days (except for hardware replacement, that is for the life of the product).

I doubt the issue if fixed in 8.0.90 as it is a new defect. I expect that it will be addressed in the next maintenance release.