-
Configuration Notes and Feature Limitations for Symmetrical Flow Control
Last Updated
Sep 03, 2026
result they may hold buffers up to a core limit due to multiple port congestions. Under this condition, the stack may break. Similarly, in switches like ICX 7450 which has two devices (packet processors), pause frames are not propogated from one packet processor to another. Not propagating pause frames
-
Designated VLAN for Management Sessions to a Layer 2 Switch
Last Updated
Sep 03, 2026
used. To use one of the other gateways, modify the configuration so that the gateway you want to use has the lowest metric. If more than one gateway has the lowest metric, the gateway that appears first in the running-config is used. On ICX 7750, ICX 7450, and ICX 7250 devices, pings to the data port
-
IPSec over NAT
Last Updated
Sep 03, 2026
be disabled. In non-FIPS mode, you can disable this feature if necessary. IPsec is supported only on ICX 7450 devices. How It Works The IKEv2 control protocol discovers any NAT devices between IKE peers by sending new payloads called NAT Discovery (NAT-D) within IKE_SA_INIT messages. Each side sends
-
IPSec over NAT
Last Updated
Sep 03, 2026
be disabled. In non-FIPS mode, you can disable this feature if necessary. IPsec is supported only on ICX 7450 devices. How It Works The IKEv2 control protocol discovers any NAT devices between IKE peers by sending new payloads called NAT Discovery (NAT-D) within IKE_SA_INIT messages. Each side sends
-
IPSec over NAT
Last Updated
Sep 03, 2026
be disabled. In non-FIPS mode, you can disable this feature if necessary. IPsec is supported only on ICX 7450 devices. How It Works The IKEv2 control protocol discovers any NAT devices between IKE peers by sending new payloads called NAT Discovery (NAT-D) within IKE_SA_INIT messages. Each side sends
-
Creating and Configuring an MKA Keychain
Last Updated
Sep 03, 2026
key is created, and the device is placed in MKA key configuration mode. Configure the authentication algorithm for the key. Options are authentication-algorithm aes-128-cmac and authentication-algorithm aes-256-cmac. ICX 7450 devices support only AES-128-CMAC. device(config-keychain-mka-sample-key
-
Configuring MACsec Integrity and Encryption
Last Updated
Sep 03, 2026
checking using the GCM-AES-128 cipher suite. gcm-aes-128 integrity-only: Enables integrity checking without encryption. gcm-aes-256: Enables encryption and integrity checking using the GCM-AES-256 cipher suite. The gcm-aes-256 option is not supported on ICX 7450 devices. gcm-aes-256 integrity-only
-
ethernet loopback (VLAN-aware)
Last Updated
Sep 03, 2026
mode as flow-aware, the ethernet loopback test-mac command must be executed for the specific port from the interface mode before enabling Ethernet loopback. The ethernet loopback test-mac command is mandatory on ICX 7750, ICX 7450 and ICX 7250 devices. To enable Ethernet loopback on these devices
-
Topologies Handled by Zero-touch or SPX Interactive-setup
Last Updated
Sep 03, 2026
Topologies Handled by Zero-touch or SPX Interactive-setup Topologies Handled by Zero-touch or SPX Interactive-setup Topologies Handled by Zero-touch or SPX Interactive-setup ICX 7150 devices, ICX 7250 devices, ICX 7450 devices, or any combination can be discovered and automatically incorporated
-
show dot1x-mka config
Last Updated
Sep 03, 2026
fe347846 cce52c7d Release version Command history 08.0.20 This command was introduced. 08.0.30 Support for this command was added on ICX 7450 devices. 08.0.70 Support for this command was added on ICX 7650 devices. 08.0.90 Support for this command was added on ICX 7850 devices.