ICX Port Profiles

An ICX port profile is used to dynamically configure a port using predefined port settings depending on the end device connected to the port.

Feature Overview

The ICX Port Profile feature provides an automated way of configuring the ICX switch port when connected to different devices (such as IP phones, wireless access points, printers, and so on). Following is the typical workflow:

  • Your defining the ICX port profiles on switches
  • The system detecting a device using either the Link Layer Discovery Protocol Tag Length Value (LLDP TLV) or MAC-Organizational Unique Identifier (MAC-OUI)
  • The system applying a matching port profile on the ICX port. There are two types of ICX port profiles:
    • Static port profile: Applied to selected ports manually and does not contain MAC OUI and LLDP TLV match criteria settings
    • Dynamic port profile: Applied to ports based on user-defined criteria (LLDP TLV or MAC OUI)

Following are the benefits:

  • Efficient management: Efficient way of managing the port settings for each ICX device
  • Network management: Simpler, automated configuration and deployment of switches and connected devices, thus minimizing configuration errors

Requirements

An ICX port profile can be configured on ICX devices supporting RUCKUS FastIron firmware version 10.0.20b and later.

Considerations

Consider the following regarding ICX port profile configuration and usage:

  • LLDP TLV is given the first priority for device identification. If LLDP lookup fails, MAC OUI information is used to find the matching profile.
  • When configuring an ICX port profile, the PoE Enable option must be enabled to add LLDP TLV and MAC OUI match criteria.
  • An ICX port profile can contain multiple MAC OUI and LLDP TLV entries.
  • A switch can support multiple ICX port profiles, but those profiles cannot contain the same MAC OUI or LLDP TLV match criteria.
  • Enabling IPSG automatically renders the Ingress ACL, 802.1x, and MAC Auth settings inactive due to mutual exclusivity.
  • IPSG enable and dot1x/macAuth enable are mutually exclusive; only one can be selected.
  • Untagged or tagged VLANs cannot be overwritten.
  • Locally modified port profiles are overridden if their names match the name of a tenant-level ICX Port Profile and are already applied to the related Regular Switch Configuration Profile.

Best Practices

This feature has no special recommendations for feature enablement or usage.

Prerequisites

This feature has no prerequisites to feature enablement or usage.