Upstream/lab-docu
1
0
Fork 0
mirror of https://github.com/Fohdeesha/lab-docu.git synced 2025-01-24 18:51:20 +01:00
Code Issues Projects Releases Wiki Activity

licensing cleanup

Browse Source
This commit is contained in:
Jon Sands 2021-07-04 04:41:46 -04:00
parent e0be5f77f4
commit 0e62ba205c
3 changed files with 25 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

55
docs/6450.md
View File

@ -1,13 +1,11 @@
# ICX6450 Licensing
**DISCLAIMER:** This is intended for educational use only, or in a homelab type environment.
Brocade licenses are keyed to a specific switch License ID, so they cannot be loaded on multiple switches. Thankfully these ID's are stored in a separate EEPROM and can be easily changed.
Brocade licenses are keyed to a specific switch License ID, so they cannot be loaded on multiple switches. Thankfully these IDs are stored in a separate EEPROM and can be easily changed.
To download and use the legitimate license files linked below on as many switches as you need, you simply need to change your switch license ID to match. Only the license system reads this EEPROM, so changing these values has no effect on the switch whatsoever.
To download and use the master license files in this guide on as many switches as you need, you simply need to change your license ID to match. Only the license code reads this value, so changing it has no negative effects.
**DISCLAIMER:** This is intended for educational use only, or in a homelab type environment.
**WARNING:** DO NOT SHARE THIS LINK, GUIDE, OR FILES WITH ANYONE! The licenses will be blacklisted and this process will be patched out in firmware - do not ruin it for everyone.
To begin, visit the [Brocade Overview](http://fohdeesha.com/docs/icx64xx/) page, and download the firmware ZIP - this also contains the license files.
## What Does This Do?
@ -20,39 +18,18 @@ On the Brocade ICX6450, the `POD` license and the `PREM` license in this gui
## Update The Switch
To do this, you need the latest bootloader and OS. I cannot be held responsible if you break something running these commands on an older bootloader image where they might have acted differently.
To do this, you need the latest firmware - this is not optional! Follow the update guide to upgrade to the latest firmware image if you haven't already - [ICX6450 Update & Start Guide](http://fohdeesha.com/docs/icx64xx/).
Follow this link to upgrade to the latest firmware image AND bootloader - [ICX6450 Update & Start Guide](http://fohdeesha.com/docs/icx64xx/).
**Note:** If this is a new/unconfigured switch, or a used switch with an unknown config on it, follow that update guide all the way through to the `Saving & Conclusions` section! This will get the switch in a state that it can TFTP licenses in.
**Note:** If this is a new/unconfigured switch, or a switch with an unknown config on it, follow that update guide all the way through to the `Saving & Conclusions` section! This will get the switch in a state that it can TFTP licenses in.
When upgraded and configured, move on to the below.
## Optional: Delete Existing Licenses
If your switch came with partial licenses already (find out with `show license`), you can delete them if you'd like following the below:
```
enable
license delete unit 1 all
```
However if you would like to keep the old licenses (in case you want to resell the switch or similar), you do not have to follow the above. Just note that when you change your switch serial and load in the licenses from this guide, the old licenses will show as `invalid`, but they will not affect anything and will go back to `valid` if you ever revert the switch serial and delete my licenses.
Now you can move on to the below.
## Download Licenses
[`ICX6450 Official Licenses`](store/icx6450-lic.zip)
`ZIP Updated: 06-13-2018`
## Change The Serial
We need to change the serial and license ID to match the new licenses. From the normal switch OS:
```
enable
hw pid-prom serial BZS2533H7V3
hw pid-prom serial 2ax5o2jk68e
hw pid-prom clear-sw-lid
reload
```
@ -60,11 +37,11 @@ The switch will reboot, and when it comes back up it will have a new license ID
## Importing The Licenses
Once it's booted into the OS, put the license files from the ZIP above on your TFTP server. If you need an easy and temporary TFTP server for windows, I recommend [Tftpd32 Portable Edition](http://www.tftpd64.com/tftpd32_download.html). Once the licenses are being hosted by TFTP, import them one at a time. Replace the IP's in the commands with the IP of your own TFTP server:
Once it's booted into the OS, ensure you are hosting the firmware ZIP contents via TFTP. If you need an easy and temporary TFTP server for windows, I recommend [Tftpd32 Portable Edition](http://www.tftpd64.com/tftpd32_download.html). Now we can import the licenses. Replace the IP's in the commands with the IP of your own TFTP server:
```
enable
copy tftp license 192.168.1.8 1-6450prem.xml unit 1
copy tftp license 192.168.1.8 2-6450ports.xml unit 1
copy tftp license 192.168.1.8 ICX6450/1-6450-prem.xml unit 1
copy tftp license 192.168.1.8 ICX6450/2-6450-ports.xml unit 1
```
Now make sure they imported properly:
@ -72,7 +49,11 @@ Now make sure they imported properly:
```
show license
```
The `Status` column should show `Active` for both licenses. If it does, write memory then reload the switch to bring the 10gbE ports out of the `ERR-DIS` state:
The `Status` column should show `Active` for both new licenses.
**Note:** If the switch had other licenses on it beforehand, they will now show as `invalid` - this is expected as the serial no longer matches. If you ever decide to revert the switch, the original licenses will become `active` again once the serial is reverted to stock.
write memory then reload the switch to bring the 10gbE ports out of the `ERR-DIS` state:
```
write mem
reload
@ -81,7 +62,7 @@ That's it! It will come back up fully licensed with all four 10gbE ports ready t
## Reverting
If you want to revert the switch to its original serial and license ID (for instance, if you sell it), that's quite easy. First, get the serial number from your switch. It should be on a sticker on the bottom of the unit. Then just use the commands we used earlier from the regular OS, but now using your actual serial. Make sure the capitalization matches what is on your switch!
If you want to revert the switch to its original serial and license ID (for instance, if you sell it), that's quite easy. First, get the serial number from your switch. It should be on a sticker on the bottom of the unit. Then just use the commands we used earlier, but now using your actual serial. Make sure the capitalization matches what is on your switch!
```
enable
hw pid-prom serial YourSNhere
@ -103,6 +84,8 @@ show license
#now delete each of my licenses (they should be the ones showing invalid)
#replace X with the number of the license in the list you want to delete:
license delete unit 1 index X
#once a license is deleted, the index number of remaining lics changes
#run show license again before deleting more if you're deleting multiple
```
It now has the stock license ID and serial, and the licenses have been removed. The output of `show license` should be empty (unless you previously had licenses from before this guide, in which case they should now show valid).
@ -110,4 +93,4 @@ It now has the stock license ID and serial, and the licenses have been removed.
Q: Since all the switches in a stack would have the same license and serial after this procedure, would this cause issues?
A: No - stacking works perfectly. The License and Serial ID are only used for licensing. The switch and stack is totally unaware of them. Stacking uses each switches MAC address to keep track of stack members, and the MAC is unmodified.
A: No - stacking works perfectly. The License and Serial ID are only used for licensing. The switch and stack is totally unaware of them. Stacking uses each switch base MAC address to keep track of stack members, and the MAC is unmodified.

3
docs/brocade-overview.md Normal file
View File

@ -0,0 +1,3 @@
##Brocade Overview
plink master zip here, include RE info and disclaimers

12
docs/fcxlic.md
View File

@ -1,14 +1,10 @@
# FCX Licensing
**DISCLAIMER:** This is intended for educational use only, or in a homelab type environment.
Brocade switches used to be licensed via a physical EEPROM with a magic string written into it. When the OS booted and saw this magic string, it knew to enable advanced features.
The FCX was the last Brocade model to use this scheme before moving to keyed software licenses. They even shipped with a blank EEPROM in the socket ready to go. This means we just need to write the magic string to this EEPROM to fully unlock licensed features.
**DISCLAIMER:** This is intended for educational use only, or in a homelab type environment.
**WARNING:** DO NOT SHARE THIS LINK, GUIDE, OR FILES WITH ANYONE! The licenses will be blacklisted and this process will be patched out in firmware - do not ruin it for everyone.
## What Does This Do?
On the Brocade FCX, the ```ADV``` license in this guide unlocks the following:
@ -18,11 +14,9 @@ On the Brocade FCX, the ```ADV``` license in this guide unlocks the following:
- IPv6-in-IPv4 tunnels - will terminate Hurricane Electric tunnels etc
## Update The Switch
To do this, you need the latest bootloader and OS.
To do this, you need the latest bootloader and OS - this is not optional! Follow the update guide to upgrade to the latest firmware image AND bootloader if you haven't already - [FCX Update & Start Guide](http://fohdeesha.com/docs/fcx/)
Follow this link to upgrade to the latest firmware image AND bootloader - [ICX/FCX Update & Start Guide](http://fohdeesha.com/docs/fcx/)
**Note:** If this is a new/unconfigured switch, or a used switch with an unknown config on it, follow that update guide all the way through to the `Saving & Conclusions` section! This will get the switch in a state that it can TFTP licenses in.
**Note:** If this is a new/unconfigured switch, or a switch with an unknown config on it, follow that update guide all the way through to the `Saving & Conclusions` section! This will get the switch in a state that it can TFTP licenses in.
When upgraded and configured, move on to the below.