Important Points to Remember
•
Enable DCBx on the switch before enabling the FIP Snooping feature.
•
To enable the feature on the switch, configure FIP Snooping.
•
To allow FIP frames to pass through the switch on all VLANs, enable FIP snooping globally on a switch.
•
A switch can support a maximum eight VLANs. Configure at least one FCF/bridge-to-bridge port mode interface for any FIP
snooping-enabled VLAN.
•
You can configure multiple FCF-trusted interfaces in a VLAN.
•
When you disable FIP snooping:
– ACLs are not installed, FIP and FCoE traffic is not blocked, and FIP packets are not processed.
– The existing per-VLAN and FIP snooping configuration is stored. The configuration is re-applied the next time you enable the
FIP snooping feature.
•
You must apply the CAM-ACL space for the FCoE region before enabling the FIP-Snooping feature. If you do not apply CAM-
ACL space, the following error message is displayed:
Dell(conf)#feature fip-snooping
% Error: Cannot enable fip snooping. CAM Region not allocated for Fcoe.
Dell(conf)#
NOTE: Manually add the CAM-ACL space to the FCoE region as it is not applied by default.
To support FIP-Snooping and set CAM-ACL in the Z9500 switch, usecam-acl l2acl 4 ipv4acl 4 ipv6acl 0 ipv4qos
2 l2qos 1 l2pt 0 ipmacacl 0 vman-qos 0 ecfmacl 0 fcoeacl 2 iscsioptacl 0 command.
CAM ACL Table
-- Chassis Cam ACL --
Current Settings(in block sizes)
L2Acl
:
Ipv4Acl
:
Ipv6Acl
:
Ipv4Qos
:
L2Qos
:
L2PT
:
IpMacAcl
:
VmanQos
:
VmanDualQos
:
EcfmAcl
:
FcoeAcl
:
iscsiOptAcl
:
ipv4pbr
:
vrfv4Acl
:
Openflow
:
fedgovacl
:
nlbclusteracl:
st-sjc-s5000-29#
Enabling the FCoE Transit Feature
The following sections describe how to enable FCoE transit.
NOTE: FCoE transit is disabled by default. To enable this feature, you must follow the
As soon as you enable the FCoE transit feature on a switch-bridge, existing VLAN-specific and FIP snooping configurations are
applied. The FCoE database is populated when the switch connects to a converged network adapter (CNA) or FCF port and
compatible DCB configurations are synchronized. By default, all FCoE and FIP frames are dropped unless specifically permitted by
existing FIP snooping-generated ACLs. You can reconfigure any of the FIP snooping settings.
312
FCoE Transit
1 block = 128 entries
4
4
0
2
1
0
0
0
0
0
2
0
0
0
0
0
0
Configure FIP
Snooping.