Summary

Question

Customer Environment

Symptoms

Troubleshooting Steps

This guide offers a step-by-step demonstration to validate the onboarding of ICX devices into the Unleashed system, during the onboarding process, you need to input the switch's IP address and its local credentials. The Unleashed system then establishes an SSH connection to configure SNMP on the ICX switch, which is crucial for monitoring.

1. Topology Reference for this Lab 

The below topology will used for the demonstration. This will help in accurately troubleshooting and verifying the ICX onboarding process into the Unlashed System. 


Figure 1 Network topology reference for onboarding the ICX-8200.

2. Adding a Switch in Pending State Discovered by LLDP 

If a switch is in the pending state because it was auto discovered by LLDP, follow these steps to add it to the Unleashed system: 
 
2.1 Identify the Pending Switch: 
Navigate to the Unleashed dashboard. 
Locate the switch that is in the pending state.
Then Click Approve.

Click here for a reference 
 
2.2 If the switch is not automatically discovered, you can manually add it by selecting the Add Switch option.
Click on the?Add?to add switch into the Unlashed system. 



Figure 2 Adding the switch.

2.3   Enter Credentials: 

A prompt will appear asking for the switch’s credentials. 
Enter the?username?and?password?for the switch. 

 
Figure 3 Entering switch credentials.

2.4 Confirm and Save: 

Verify the credentials entered are correct. 
Click?add?to add the switch to the Unleashed system. 

  
Figure 4 Entering switch credentials.

3. Troubleshooting: Verifying and Creating Credentials on the ICX RUCKUS switch

 
3.1 Verify Current Credentials 
To ensure the username and password on the ICX-8200 are correct, follow these steps: 

3.2   Access the ICX-8200: 
Connect to the ICX-8200 switch via SSH or console. 

3.3    Verify Credentials: 
Use the current credentials to log in. 
If the credentials are correct, you will gain access to the switch’s configuration mode. 

3.4 Create New Credentials (if necessary) 
If the current credentials are incorrect or you need to create new ones, follow these steps: 

3.5 Enter Configuration Mode: 
Once logged in, enter the configuration mode by typing: 

                           ICX8200-C08PF> enable 
                           ICX8200-C08PF# configure terminal 
 
3.6 Create New Username and Password: 
Use the following command to create a new username and password: 

                                                       ICX8200-C08PF(config)# username <User> password <Password> 

Replace <User> with the desired username and <Password> with the desired password. 

 Example: 
                                                        ICX8200-C08PF(config)# username super password pass 

3.7 Save Configuration: 
Ensure you save the new configuration to avoid losing changes after a reboot: 

                                                        ICX8200-C08PF(config)# write memory  

4. Verify SSH Access and Registration 

Once you enter the switch’s username and password, the system will attempt to access the switch via SSH. You can verify the success of this registration by checking the output of the?show logging?command. 

4.1 Expected Output for Successful Registration 
When the registration is successful, you should see logs indicating a successful SSH connection and SNMP configuration. 

Figure 5 Expected output for successful registration. 


4.2 Expected Output for Incorrect Password 
 If the password is incorrect, the logs will show failed login attempts. This is the expected conversation you should see in the?show logging?output for an incorrect password. 

 

Figure 6: Expected output for incorrect password.

4.3 Command Reference :
For more detailed information on the?show logging?command, refer to the FastIron Command Reference. 

Link as reference https://docs.commscope.com/bundle/fastiron-10010-commandref/page/GUID-D1307AB0-38DE-49B7-9C4D-A40E47174F71.html 

5. Enabling SSH debuggin on the ICX plataform for version 90.10 and later.

5.1 Enable SSH Debugging 
To diagnose issues such as incorrect passwords or incompatible SSH on 9010 Code stream , you can enable SSH debugging. This will help you identify and resolve authentication problems. 
 Use the following command to enable SSH debugging: 

                                                          logmgr monitor management:sshd:all 

Example of a Password Mismatch :
When there is a password mismatch, the logs will display messages indicating failed authentication attempts. This helps in pinpointing the exact issue with the credentials. 


Figure 8: SSH debugging enabled.

5.2 Expected Message for Successful Credentials 
If the credentials match successfully, you will see logs indicating a successful SSH connection. This confirms that the switch has been accessed correctly and the credentials are valid. 


Figure 9: Successful SSH connection log.

By enabling SSH debugging, you can effectively monitor and troubleshoot SSH-related issues on the ICX platform. This ensures that any problems with authentication.  

6. Troubleshooting: Capturing Data with Wireshark on Unleashed 

6.1 Capturing Data with Wireshark.
To fully capture the data during the onboarding process, you can use Wireshark on the Unleashed system. Follow these steps: 
Link as reference : https://docs.commscope.com/bundle/unleashed-200.16-onlinehelp/page/GUID-FE747C7C-8F63-409B-A423-63F898CA8331.html 

6.2 Select the Master Access Point: 
Ensure you select the Master Access Point in the Unleashed system. 
Make sure the AP is ticked and ‘Streaming Mode’ options. 
Click ‘Start’ to begin the capture. 

 Figure 10: Selecting the Master Access Point in Unleashed.

6.3 Open Wireshark: 
Go to Capture > Manage Interfaces > Remote Interfaces. 
Click the + button to add the AP IP address. 
Click OK to confirm. 
 

Figure 11: Wireshark interface configuration.

6.5 Select Interfaces of Interest: 
The interfaces of interest are BR0 (the virtual interface handling all management traffic) and either eth0 or eth1, depending on which one the access point uses as the uplink to the switch. 
Ensure only the relevant interface is selected and ticked. Click Start to begin capturing data. 

Figure 12: Interface selection for Wireshark capture.

6.6 SNMP OIDs for Onboarding Process 
These are the SNMP OIDs requested by the Unleashed system during the onboarding process. Capturing this data will help in troubleshooting and verifying the onboarding process. 



Figure 13: SNMP OID request capture

Resolution