Users Guide
Dynamic ACL generation on the switch operating as a FIP snooping bridge function as follows:
Port-based ACLs These ACLs are applied on all three port modes: on ports directly connected to an FCF, server-facing ENode
ports, and bridge-to-bridge links. Port-based ACLs take precedence over global ACLs.
FCoE-generated
ACLs
These take precedence over user-congured ACLs. A user-congured ACL entry cannot deny FCoE and FIP
snooping frames.
The following illustration shows a switch used as a FIP snooping bridge in a converged Ethernet network. The top-of-rack (ToR)
switch operates as an FCF for FCoE trac. Converged LAN and SAN trac is transmitted between the ToR switch and an S4820T
switch. The switch operates as a lossless FIP snooping bridge to transparently forward FCoE frames between the ENode servers
and the FCF switch.
Figure 39. FIP Snooping on an S4820T Switch
The following sections describe how to congure the FIP snooping feature on a switch:
• Allocate CAM resources for FCoE.
FCoE Transit
307