# Initial/Basic Setup of an ICX Switch

<details id="bkmrk-introduction-direct-"><summary>Introduction</summary>

Direct management of ICX switches can be performed either via a command-line interface (CLI) or via a web GUI. By default, only the CLI is enabled. This guide explains how to access the CLI, enable the web GUI, and secure all configuration access methods. The web GUI allows full configuration and monitoring of Layer 2 functions, QoS, ACL, authentication, PoE, performing software updates, and much more.

</details><details id="bkmrk-introduction-to-the-"><summary>Introduction to the CLI</summary>

Start by powering up the switch, and connect a serial cable to the console port on the switch. Once this connection has been made to the switch, a command-line interface (CLI) session can be initiated via a terminal emulation program such as PuTTY ([www.putty.org](http://www.putty.org/)). When PuTTY is started, use the following settings depending on whether you are connecting via Telnet or a serial interface:

[![image.png](https://techblog.jcditservices.com/uploads/images/gallery/2024-08/scaled-1680-/IsGimage.png)](https://techblog.jcditservices.com/uploads/images/gallery/2024-08/IsGimage.png)

[![image.png](https://techblog.jcditservices.com/uploads/images/gallery/2024-08/scaled-1680-/4Keimage.png)](https://techblog.jcditservices.com/uploads/images/gallery/2024-08/4Keimage.png)

Once connected to the switch, the interface will present a console prompt.

</details><details id="bkmrk-securing-the-web%2C-se"><summary>Securing the Web, Serial, and Telnet Interfaces</summary>

**<span style="color: rgb(224, 62, 45);">IMPORTANT</span>**

<span style="color: rgb(224, 62, 45);">As of version 80.9x the first thing you will be <u>forced</u> to do when you login to the switch via CLI is change the default password for the default user 'super'.</span>

<span style="color: rgb(224, 62, 45);">When you follow the instructions below you will reach the command line ' username &lt;username&gt; password &lt;password&gt;'</span>

<span style="color: rgb(224, 62, 45);">If your username differs from the default 'super' you will be creating an additional user account. With this in mind, you may want to remove the 'super' account. Particularly if you have put in a memorable/simple password in for the sake of logging into the unit (you may have put '12345678' or 'password' in to initially login).</span>

<span style="color: rgb(224, 62, 45);">To remove an account enter the following command at the config level:</span>

<span style="color: rgb(224, 62, 45);">device(config)#no user &lt;username&gt;</span>

<span style="color: rgb(224, 62, 45);">You can see what users have been created by running the following command at enable level:</span>

<span style="color: rgb(224, 62, 45);">device#show users</span>

<span style="color: rgb(0, 0, 0);">The following commands enable web access and secure the web GUI and serial interfaces with a default username and password of your choice.</span>

**<span style="color: rgb(224, 62, 45);">IMPORTANT</span>**

<span style="color: rgb(224, 62, 45);">The following commands were used on version **SPS08090k** (stable release as of August 2022). Upgrading/downgrading from the release may result in unrecognised commands.</span>

<span style="color: rgb(0, 0, 0);">device&gt;enable  
device#conf t  
device(config)#crypto-ssl certificate generate  
device(config)#aaa authentication web-server default local  
device(config)#aaa authentication login default local  
device(config)#enable telnet authentication  
device(config)#username **<span style="color: rgb(224, 62, 45);">XXXX </span>**password **<span style="color: rgb(224, 62, 45);">XXXX</span>**  
device(config)#enable super-user-password **<span style="color: rgb(224, 62, 45);">XXXX</span>**  
device(config)#enable aaa console  
device(config)#no telnet server  
device(config)#web-management https  
device(config)#no user super  
device(config)#wr me</span>

The password can be changed by repeating the username &lt;username&gt; password &lt;password&gt; command or via the web interface under Configure &gt; System &gt; Management &gt; User Account.

Cut and paste the following command set at the user EXEC prompt to apply the complete configuration outlined above and set a default username of <span style="color: rgb(224, 62, 45);">**super** </span>with a password of <span style="color: rgb(224, 62, 45);">**sp-admin** </span>and an enable password of <span style="color: rgb(224, 62, 45);">**password**</span>

**enable**  
**conf t**  
**crypto-ssl certificate generate**  
**aaa authentication web-server default local**  
**aaa authentication login default local**  
**enable telnet authentication**  
**username <span style="color: rgb(224, 62, 45);">super</span> password<span style="color: rgb(224, 62, 45);"> sp-admin</span>**  
**enable super-user-password <span style="color: rgb(224, 62, 45);">password</span>**  
**enable aaa console**  
**no telnet server**  
**web-management https**  
**no user super**  
**wr me**

Access to the web interface is now possible, and all access methods are protected by a username and password.

<span style="color: rgb(224, 62, 45);">**IMPORTANT**</span>

<span style="color: rgb(224, 62, 45);">To ensure that your switches are secure from unauthorized access, always set a secure password. Never leave a switch with the default brocade/brocade or super/sp-admin settings provided above.</span>

</details><details id="bkmrk-accessing-the-web-in"><summary>Accessing the Web Interface</summary>

To access the device by web interface simply browse to the dynamic IP the switch obtains (by default the switch is DHCP) or add a static IP address to the device**.** For example, if you wanted to access the switch based on a static IP address of 192.168.2.100/24 and a gateway address of 192.168.2.1 you would need to do the following;

device&gt; enable

device# conf t

device(config)# ip address 192.168.2.100 255.255.255.0

device(config)# ip default-gateway 192.168.2.1

device(config)# wr mem

device(config)# exit

device#

You should now be able to browse to 192.168.2.100 via a web browser.

</details>