Skip to content

Switch Services (0.4.0)

Overview

The Switch Service REST API facilitates the management and configuration of RUCKUS ICX switches via the RUCKUS One platform. This API allows for programmatic control of switch operations, network configurations, security policies, and monitoring across various environments.

What This API Does

  • Manage ICX switch devices and their configurations
  • Configure network settings including VLANs, ports, LAGs, and virtual ethernet interfaces
  • Control security policies with AAA servers, ACLs, and trusted port settings
  • Create and apply switch profiles and templates for consistent configurations
  • Handle firmware upgrades and configuration backups
  • Configure DHCP servers and static routing
  • Import and onboard new switches to the platform
  • Manage CLI templates and web authentication pages

Authentication

All API calls require valid authentication via JWT (JSON Web Token) in Authorization header.

Regional Endpoints

Select the appropriate API endpoint based on your region:

  • North America: https://api.ruckus.cloud
  • Europe: https://api.eu.ruckus.cloud
  • Asia: https://api.asia.ruckus.cloud

Error Handling

The API uses standard HTTP status codes with detailed error messages in the response body.

Common Error Responses

All endpoints may return these common error responses:

  • 400 Bad Request: Invalid input data or validation errors
  • 401 Unauthorized: Missing or invalid authentication
  • 403 Forbidden: Insufficient permissions
  • 404 Not Found: Requested resource doesn't exist
  • 422 Unprocessable Entity: Business rule violations
  • 500 Internal Server Error: Unexpected server errors.
Download OpenAPI description
Languages
Servers
RUCKUS One API host for North American region.
https://api.ruckus.cloud
RUCKUS One API host for European region.
https://api.eu.ruckus.cloud
RUCKUS One API host for Asian region.
https://api.asia.ruckus.cloud

AAA Server

Manage AAA (authentication, authorization, and accounting) servers.

Operations

AAA Setting

Manage AAA (authentication, authorization, and accounting) settings.

Operations

Command Line Interface Template

Manage command line interface templates.

Operations

Configuration History

Retrieve switch configuration history records.

Operations

DHCP Server

Manage ICX DHCP servers.

Operations

ICX Switch

Manage ICX switch settings.

Operations

Import Switch

Import and register new switches.

Operations

LAG

Manage LAGs (link aggregation groups).

Operations

Profile

Manage switch profiles and profile configurations.

Operations

Profile ACL

Manage ACL (access control list) of switch profile.

Operations

Profile Template

Manage switch profile templates.

Operations

Profile VLAN

Manage VLANs (virtual local area networks) of switch profile.

Operations

Get Profile VLANDeprecated

Request

Get the specified VLAN of the switch profile. This method will be removed no sooner than 08/31/2026.

Security
jwtAuth
Path
switchProfileIdstringrequired
vlanIdstringrequired
No request payload

Responses

OK

Body
idstring

The identifier

vlanIdinteger(int32)

The VLAN identifier, ranging from 1 to 4095, uniquely identifying this VLAN.

vlanNamestring

The descriptive name assigned to this VLAN for identification purposes.

rootBridgeFamilyIdstring

The switch family identifier for the root bridge in spanning tree topology.

Enum"__NULL""ICX7150""ICX7250""ICX7650""ICX7850""ICX7550""ICX8200""ICX8100"
ipv4DhcpSnoopingboolean

The flag indicating whether IPv4 DHCP snooping is enabled for this VLAN to prevent rogue DHCP servers.

ipv4DhcpSnoopingTrustPortstring

The comma separated list of port identifiers trusted for DHCP snooping, allowing DHCP server responses.

arpInspectionboolean

The flag indicating whether ARP inspection is enabled for this VLAN to prevent ARP spoofing attacks.

arpInspectionTrustPortstring

The comma separated list of port identifiers trusted for ARP inspection, bypassing ARP validation.

igmpSnoopingstring

The IGMP snooping mode for this VLAN to optimize multicast traffic delivery.

Enum"active""passive""none"
multicastVersioninteger(int32)

The IGMP version number used for multicast group management in this VLAN.

spanningTreeProtocolstring

The STP (Spanning Tree Protocol) variant enabled for this VLAN.

Enum"rstp""stp""none"
spanningTreePriorityinteger(int32)

The STP (Spanning Tree Protocol) bridge priority value for this VLAN, used in root bridge election.

switchFamilyModelsArray of objects(SwitchFamilyModel_V1)unique

The set of switch family models with specific configurations for this VLAN across different hardware types.

Response
{ "id": "string", "vlanId": 0, "vlanName": "string", "rootBridgeFamilyId": "__NULL", "ipv4DhcpSnooping": true, "ipv4DhcpSnoopingTrustPort": "string", "arpInspection": true, "arpInspectionTrustPort": "string", "igmpSnooping": "active", "multicastVersion": 0, "spanningTreeProtocol": "rstp", "spanningTreePriority": 0, "switchFamilyModels": [ { … } ] }

Update VLANDeprecated

Request

Update the VLAN of the switch profile. This method will be removed no sooner than 08/31/2026.

Security
jwtAuth
Path
switchProfileIdstringrequired
vlanIdinteger(int32)required
Bodyrequired
idstring

Unique identifier for the VLAN configuration.

vlanIdinteger(int32)[ 1 .. 4095 ]required

VLAN identifier number (1-4095).

vlanNamestring

VLAN name for identification and management purposes.

rootBridgeFamilyIdstring

Root bridge family ID for spanning tree protocol.

Enum"__NULL""ICX7150""ICX7250""ICX7650""ICX7850""ICX7550""ICX8200""ICX8100"
ipv4DhcpSnoopingboolean

Enable IPv4 DHCP snooping to prevent rogue DHCP servers (default: false).

ipv4DhcpSnoopingTrustPortstring

Comma separated list of trusted port identifiers for DHCP snooping.

ipv4DhcpSnoopingTrustPortListArray of strings

List of individual trusted port identifiers for DHCP snooping parsed from ipv4DhcpSnoopingTrustPort.

ipv6DhcpSnoopingboolean

Enable IPv6 DHCP snooping to prevent such attacks, DHCPv6 snooping helps to secure the IPv6 address configuration in the network (default: false).

ipv6DhcpSnoopingTrustPortstring

Comma separated list of trusted port identifiers for IPv6 DHCP snooping.

ipv6DhcpSnoopingTrustPortListArray of strings

List of individual trusted port identifiers for IPv6 DHCP snooping parsed from ipv6DhcpSnoopingTrustPort.

arpInspectionboolean

Enable ARP inspection to prevent ARP spoofing attacks (default: false).

arpInspectionTrustPortstring

Comma separated list of trusted port identifiers for ARP inspection.

arpInspectionTrustPortListArray of strings

List of individual trusted port identifiers for ARP inspection parsed from arpInspectionTrustPort.

ipv6NdInspectionboolean

Enable IPv6 ND (Neighbor Discovery) inspection to prevents IPv6 address spoofing at the switch level (default: false).

ipv6NdInspectionTrustPortstring

Comma separated list of trusted port identifiers for IPv6 ND (Neighbor Discovery) inspection.

ipv6NdInspectionTrustPortListArray of strings

List of individual trusted port identifiers for IPv6 ND (Neighbor Discovery) inspection parsed from ipv6NdInspectionTrustPort.

arpTrustPortsListArray of strings

List of ARP trusted ports for internal use.

dhcpTrustPortsListArray of strings

List of DHCP trusted ports for internal use.

ipv6DhcpTrustPortsListArray of strings

List of IPv6 DHCP trusted ports for internal use.

ipv6NdTrustPortsListArray of strings

List of IPv6 ND (Neighbor Discovery) trusted ports for internal use.

igmpSnoopingstring

IGMP snooping mode for multicast traffic optimization.

Enum"active""passive""none"
multicastVersioninteger(int32)[ 0 .. 3 ]

IGMP multicast version (0-3).

spanningTreeProtocolstring

STP (Spanning Tree Protocol) mode for loop prevention.

Enum"rstp""stp""none"
spanningTreePriorityinteger(int32)[ 0 .. 65535 ]

Spanning tree priority value for root bridge election (0-65535, default: 32768, lower values have higher priority).

switchFamilyModelsArray of objects(SwitchFamilyModelBo)unique

Set of switch family model configurations for this VLAN.

managementVlanboolean

Flag indicating whether this is a management VLAN for switch management access (default: false).

switchVlanPortModelsArray of objects(SwitchVlanPortModelBo)unique

Set of port model configurations defining which ports are assigned to this VLAN as tagged, untagged, or voice ports.

switchIdstring

Switch identifier (serial number) where this VLAN is configured.

enableAsDefaultVlanbooleanrequired

Flag to enable this VLAN as the default VLAN for the switch (default: false).

{ "id": "string", "vlanId": 1, "vlanName": "string", "rootBridgeFamilyId": "__NULL", "ipv4DhcpSnooping": true, "ipv4DhcpSnoopingTrustPort": "string", "ipv4DhcpSnoopingTrustPortList": [ "string" ], "ipv6DhcpSnooping": true, "ipv6DhcpSnoopingTrustPort": "string", "ipv6DhcpSnoopingTrustPortList": [ "string" ], "arpInspection": true, "arpInspectionTrustPort": "string", "arpInspectionTrustPortList": [ "string" ], "ipv6NdInspection": true, "ipv6NdInspectionTrustPort": "string", "ipv6NdInspectionTrustPortList": [ "string" ], "arpTrustPortsList": [ "string" ], "dhcpTrustPortsList": [ "string" ], "ipv6DhcpTrustPortsList": [ "string" ], "ipv6NdTrustPortsList": [ "string" ], "igmpSnooping": "active", "multicastVersion": 3, "spanningTreeProtocol": "rstp", "spanningTreePriority": 65535, "switchFamilyModels": [ { … } ], "managementVlan": true, "switchVlanPortModels": [ { … } ], "switchId": "string", "enableAsDefaultVlan": true }

Responses

OK

Body
idstring

The identifier

vlanIdinteger(int32)

The VLAN identifier, ranging from 1 to 4095, uniquely identifying this VLAN.

vlanNamestring

The descriptive name assigned to this VLAN for identification purposes.

rootBridgeFamilyIdstring

The switch family identifier for the root bridge in spanning tree topology.

Enum"__NULL""ICX7150""ICX7250""ICX7650""ICX7850""ICX7550""ICX8200""ICX8100"
ipv4DhcpSnoopingboolean

The flag indicating whether IPv4 DHCP snooping is enabled for this VLAN to prevent rogue DHCP servers.

ipv4DhcpSnoopingTrustPortstring

The comma separated list of port identifiers trusted for DHCP snooping, allowing DHCP server responses.

arpInspectionboolean

The flag indicating whether ARP inspection is enabled for this VLAN to prevent ARP spoofing attacks.

arpInspectionTrustPortstring

The comma separated list of port identifiers trusted for ARP inspection, bypassing ARP validation.

igmpSnoopingstring

The IGMP snooping mode for this VLAN to optimize multicast traffic delivery.

Enum"active""passive""none"
multicastVersioninteger(int32)

The IGMP version number used for multicast group management in this VLAN.

spanningTreeProtocolstring

The STP (Spanning Tree Protocol) variant enabled for this VLAN.

Enum"rstp""stp""none"
spanningTreePriorityinteger(int32)

The STP (Spanning Tree Protocol) bridge priority value for this VLAN, used in root bridge election.

switchFamilyModelsArray of objects(SwitchFamilyModel_V1)unique

The set of switch family models with specific configurations for this VLAN across different hardware types.

Response
{ "id": "string", "vlanId": 0, "vlanName": "string", "rootBridgeFamilyId": "__NULL", "ipv4DhcpSnooping": true, "ipv4DhcpSnoopingTrustPort": "string", "arpInspection": true, "arpInspectionTrustPort": "string", "igmpSnooping": "active", "multicastVersion": 0, "spanningTreeProtocol": "rstp", "spanningTreePriority": 0, "switchFamilyModels": [ { … } ] }

Delete Profile VLANDeprecated

Request

Delete the specified VLAN of the switch profile. This method will be removed no sooner than 08/31/2026.

Security
jwtAuth
Path
switchProfileIdstringrequired
vlanIdstringrequired
No request payload

Responses

OK

Body
requestIdstring

The unique identifier for tracking this API operation request.

responseobject(EmptyView)

The response data containing the result of the operation.

Response
{ "requestId": "string", "response": { "id": "string" } }

Get VLANsDeprecated

Request

List all of VLANs in profiles with the specified venue and the specific model. This method will be removed no sooner than 08/31/2026. The following URL /venues/{venueId}/switchProfiles/vlans can be used for this content.

Security
jwtAuth
Path
venueIdstringrequired
Query
modelstringrequired
No request payload

Responses

OK

Body
idstring

The identifier

vlanIdinteger(int32)

The VLAN identifier, ranging from 1 to 4095, uniquely identifying this VLAN.

vlanNamestring

The descriptive name assigned to this VLAN for identification purposes.

rootBridgeFamilyIdstring

The switch family identifier for the root bridge in spanning tree topology.

Enum"__NULL""ICX7150""ICX7250""ICX7650""ICX7850""ICX7550""ICX8200""ICX8100"
ipv4DhcpSnoopingboolean

The flag indicating whether IPv4 DHCP snooping is enabled for this VLAN to prevent rogue DHCP servers.

ipv4DhcpSnoopingTrustPortstring

The comma separated list of port identifiers trusted for DHCP snooping, allowing DHCP server responses.

arpInspectionboolean

The flag indicating whether ARP inspection is enabled for this VLAN to prevent ARP spoofing attacks.

arpInspectionTrustPortstring

The comma separated list of port identifiers trusted for ARP inspection, bypassing ARP validation.

igmpSnoopingstring

The IGMP snooping mode for this VLAN to optimize multicast traffic delivery.

Enum"active""passive""none"
multicastVersioninteger(int32)

The IGMP version number used for multicast group management in this VLAN.

spanningTreeProtocolstring

The STP (Spanning Tree Protocol) variant enabled for this VLAN.

Enum"rstp""stp""none"
spanningTreePriorityinteger(int32)

The STP (Spanning Tree Protocol) bridge priority value for this VLAN, used in root bridge election.

switchFamilyModelsArray of objects(SwitchFamilyModel_V1)unique

The set of switch family models with specific configurations for this VLAN across different hardware types.

Response
{ "id": "string", "vlanId": 0, "vlanName": "string", "rootBridgeFamilyId": "__NULL", "ipv4DhcpSnooping": true, "ipv4DhcpSnoopingTrustPort": "string", "arpInspection": true, "arpInspectionTrustPort": "string", "igmpSnooping": "active", "multicastVersion": 0, "spanningTreeProtocol": "rstp", "spanningTreePriority": 0, "switchFamilyModels": [ { … } ] }

Retrieve Untagged VLANsDeprecated

Request

List of venues switch profile VLANs with specific model and untagged port. This method will be removed no sooner than 08/31/2026.

Security
jwtAuth
Path
venueIdstringrequired
Bodyrequired
modelstring

The switch model to determine the VLAN tagging capabilities and supported features.

Enum"ICX7150-24""ICX7150-24P""ICX7150-48""ICX7150-48P""ICX7150-48PF""ICX7150-48ZP""ICX7150-C12P""ICX7150-C10ZP""ICX7150-C08P""ICX7150-C08PT"
{ "model": "ICX7150-24" }

Responses

OK

Body
idstring

The identifier

vlanIdinteger(int32)

The VLAN identifier, ranging from 1 to 4095, uniquely identifying this VLAN.

vlanNamestring

The descriptive name assigned to this VLAN for identification purposes.

rootBridgeFamilyIdstring

The switch family identifier for the root bridge in spanning tree topology.

Enum"__NULL""ICX7150""ICX7250""ICX7650""ICX7850""ICX7550""ICX8200""ICX8100"
ipv4DhcpSnoopingboolean

The flag indicating whether IPv4 DHCP snooping is enabled for this VLAN to prevent rogue DHCP servers.

ipv4DhcpSnoopingTrustPortstring

The comma separated list of port identifiers trusted for DHCP snooping, allowing DHCP server responses.

arpInspectionboolean

The flag indicating whether ARP inspection is enabled for this VLAN to prevent ARP spoofing attacks.

arpInspectionTrustPortstring

The comma separated list of port identifiers trusted for ARP inspection, bypassing ARP validation.

igmpSnoopingstring

The IGMP snooping mode for this VLAN to optimize multicast traffic delivery.

Enum"active""passive""none"
multicastVersioninteger(int32)

The IGMP version number used for multicast group management in this VLAN.

spanningTreeProtocolstring

The STP (Spanning Tree Protocol) variant enabled for this VLAN.

Enum"rstp""stp""none"
spanningTreePriorityinteger(int32)

The STP (Spanning Tree Protocol) bridge priority value for this VLAN, used in root bridge election.

switchFamilyModelsArray of objects(SwitchFamilyModel_V1)unique

The set of switch family models with specific configurations for this VLAN across different hardware types.

Response
{ "id": "string", "vlanId": 0, "vlanName": "string", "rootBridgeFamilyId": "__NULL", "ipv4DhcpSnooping": true, "ipv4DhcpSnoopingTrustPort": "string", "arpInspection": true, "arpInspectionTrustPort": "string", "igmpSnooping": "active", "multicastVersion": 0, "spanningTreeProtocol": "rstp", "spanningTreePriority": 0, "switchFamilyModels": [ { … } ] }

Retrieve Tagged VLANsDeprecated

Request

List of venues switch profile VLANs with specific model and tagged port. This method will be removed no sooner than 08/31/2026.

Security
jwtAuth
Path
venueIdstringrequired
Bodyrequired
modelstring

The switch model to determine the VLAN tagging capabilities and supported features.

Enum"ICX7150-24""ICX7150-24P""ICX7150-48""ICX7150-48P""ICX7150-48PF""ICX7150-48ZP""ICX7150-C12P""ICX7150-C10ZP""ICX7150-C08P""ICX7150-C08PT"
{ "model": "ICX7150-24" }

Responses

OK

Body
idstring

The identifier

vlanIdinteger(int32)

The VLAN identifier, ranging from 1 to 4095, uniquely identifying this VLAN.

vlanNamestring

The descriptive name assigned to this VLAN for identification purposes.

rootBridgeFamilyIdstring

The switch family identifier for the root bridge in spanning tree topology.

Enum"__NULL""ICX7150""ICX7250""ICX7650""ICX7850""ICX7550""ICX8200""ICX8100"
ipv4DhcpSnoopingboolean

The flag indicating whether IPv4 DHCP snooping is enabled for this VLAN to prevent rogue DHCP servers.

ipv4DhcpSnoopingTrustPortstring

The comma separated list of port identifiers trusted for DHCP snooping, allowing DHCP server responses.

arpInspectionboolean

The flag indicating whether ARP inspection is enabled for this VLAN to prevent ARP spoofing attacks.

arpInspectionTrustPortstring

The comma separated list of port identifiers trusted for ARP inspection, bypassing ARP validation.

igmpSnoopingstring

The IGMP snooping mode for this VLAN to optimize multicast traffic delivery.

Enum"active""passive""none"
multicastVersioninteger(int32)

The IGMP version number used for multicast group management in this VLAN.

spanningTreeProtocolstring

The STP (Spanning Tree Protocol) variant enabled for this VLAN.

Enum"rstp""stp""none"
spanningTreePriorityinteger(int32)

The STP (Spanning Tree Protocol) bridge priority value for this VLAN, used in root bridge election.

switchFamilyModelsArray of objects(SwitchFamilyModel_V1)unique

The set of switch family models with specific configurations for this VLAN across different hardware types.

Response
{ "id": "string", "vlanId": 0, "vlanName": "string", "rootBridgeFamilyId": "__NULL", "ipv4DhcpSnooping": true, "ipv4DhcpSnoopingTrustPort": "string", "arpInspection": true, "arpInspectionTrustPort": "string", "igmpSnooping": "active", "multicastVersion": 0, "spanningTreeProtocol": "rstp", "spanningTreePriority": 0, "switchFamilyModels": [ { … } ] }

Get Multiple VLANsDeprecated

Request

Get multiple VLANs of the switch profile. This method will be removed no sooner than 08/31/2026.

Security
jwtAuth
Path
switchProfileIdstringrequired
Query
pageinteger(int32)
sizeinteger(int32)
No request payload

Responses

OK

Body
idstring

The identifier

vlanIdinteger(int32)

The VLAN identifier, ranging from 1 to 4095, uniquely identifying this VLAN.

vlanNamestring

The descriptive name assigned to this VLAN for identification purposes.

rootBridgeFamilyIdstring

The switch family identifier for the root bridge in spanning tree topology.

Enum"__NULL""ICX7150""ICX7250""ICX7650""ICX7850""ICX7550""ICX8200""ICX8100"
ipv4DhcpSnoopingboolean

The flag indicating whether IPv4 DHCP snooping is enabled for this VLAN to prevent rogue DHCP servers.

ipv4DhcpSnoopingTrustPortstring

The comma separated list of port identifiers trusted for DHCP snooping, allowing DHCP server responses.

arpInspectionboolean

The flag indicating whether ARP inspection is enabled for this VLAN to prevent ARP spoofing attacks.

arpInspectionTrustPortstring

The comma separated list of port identifiers trusted for ARP inspection, bypassing ARP validation.

igmpSnoopingstring

The IGMP snooping mode for this VLAN to optimize multicast traffic delivery.

Enum"active""passive""none"
multicastVersioninteger(int32)

The IGMP version number used for multicast group management in this VLAN.

spanningTreeProtocolstring

The STP (Spanning Tree Protocol) variant enabled for this VLAN.

Enum"rstp""stp""none"
spanningTreePriorityinteger(int32)

The STP (Spanning Tree Protocol) bridge priority value for this VLAN, used in root bridge election.

switchFamilyModelsArray of objects(SwitchFamilyModel_V1)unique

The set of switch family models with specific configurations for this VLAN across different hardware types.

Response
{ "id": "string", "vlanId": 0, "vlanName": "string", "rootBridgeFamilyId": "__NULL", "ipv4DhcpSnooping": true, "ipv4DhcpSnoopingTrustPort": "string", "arpInspection": true, "arpInspectionTrustPort": "string", "igmpSnooping": "active", "multicastVersion": 0, "spanningTreeProtocol": "rstp", "spanningTreePriority": 0, "switchFamilyModels": [ { … } ] }

Delete Multiple VLANsDeprecated

Request

Delete multiple VLANs of the switch profile. This method will be removed no sooner than 08/31/2026.

Security
jwtAuth
Path
switchProfileIdstringrequired
Bodyapplication/jsonrequiredArray [
string
]
application/json
[ "string" ]

Responses

OK

Body
requestIdstring

The unique identifier for tracking this API operation request.

responseobject(EmptyView)

The response data containing the result of the operation.

Response
{ "requestId": "string", "response": { "id": "string" } }

Retrieve VLANsDeprecated

Request

List all usable VLANs for multiple ports of the same switch. This method will be removed no sooner than 08/31/2026. The following URL /venues/{venueId}/switches/{switchId}/vlanUnions can be used for this content.

Security
jwtAuth
Path
switchIdstringrequired
No request payload

Responses

OK

Body
switchDefaultVlanArray of objects(VlanIntersectContent)

The list of switch default VLAN configurations, representing the native VLAN settings on switches.

profileVlanArray of objects(VlanIntersectContent)

The list of VLAN configurations defined in port profiles.

switchVlanArray of objects(VlanIntersectContent)

The list of VLAN configurations directly assigned to switches.

Response
{ "switchDefaultVlan": [ { … } ], "profileVlan": [ { … } ], "switchVlan": [ { … } ] }

Switch Access Control List

Manage ACLs (access control lists).

Operations

Switch Configuration Backup

Manage switch configuration backups and restore operations.

Operations

Switch Firmware Upgrade

Manage switch firmware upgrade and scheduling operations.

Operations

Switch Ports

Manage switch port configurations.

Operations

Switch Static Routes

Manage static route configurations.

Operations

Switch VLAN

Manage VLANs (virtual local area networks).

Operations

Switch Virtual Ethernet

Manage VE (virtual ethernet) port settings.

Operations

Trusted Port

Manage a port's trust settings.

Operations

Venue Switch Setting

Manage a switch's venue level settings.

Operations

Venue Template AAA Server

Manage venue template AAA (authentication, authorization, and accounting) servers.

Operations

Venue Template AAA Setting

Manage venue template AAA (authentication, authorization, and accounting) settings.

Operations