Reference Guide

Port-based ACLs These ACLs are applied on all three port modes: on ports directly connected to an FCF, server-facing
ENode ports, and bridge-to-bridge links. Port-based ACLs take precedence over global ACLs.
FCoE-generated
ACLs
These take precedence over user-configured ACLs. A user-configured ACL entry cannot deny FCoE and
FIP snooping frames.
The following illustration shows a switch used as a FIP snooping bridge in a converged Ethernet network. The top-of-rack (ToR)
switch operates as an FCF for FCoE traffic. Converged LAN and SAN traffic is transmitted between the ToR switch and an
Z9500 switch.The switch operates as a lossless FIP snooping bridge to transparently forward FCoE frames between the ENode
servers and the FCF switch.
Figure 35. FIP Snooping on an Z9500 Switch
The following sections describe how to configure the FIP snooping feature on a switch:
● Allocate CAM resources for FCoE.
● Perform FIP snooping (allowing and parsing FIP frames) globally on all VLANs or on a per-VLAN basis.
● To assign a MAC address to an FCoE end-device (server ENode or storage device) after a server successfully logs in, set
the FCoE MAC address prefix (FC-MAP) value an FCF uses. The FC-MAP value is used in the ACLs installed in bridge-to-
bridge links on the switch.
● To provide more port security on ports that are directly connected to an FCF and have links to other FIP snooping bridges,
set the FCF or Bridge-to-Bridge Port modes.
288
FCoE Transit