Fip Snooping In A Switch Stack; How Fip Snooping Is Implemented - Dell PowerEdge M IO Aggregator Command Reference Manual

The following sections describe how to configure the FIP snooping feature on a switch that functions as a
FIP snooping bridge so that it can perform the following functions:
• Perform FIP snooping (allowing and parsing FIP frames) globally on all VLANs or on a per-VLAN
basis.
• Set the FCoE MAC address prefix (FC-MAP) value used by an FCF to assign a MAC address to an
FCoE end-device (server ENode or storage device) after a server successfully logs in.
• Set the FCF mode to provide additional port security on ports that are directly connected to an FCF.
• Check FIP snooping-enabled VLANs to ensure that they are operationally active.
• Process FIP VLAN discovery requests and responses, advertisements, solicitations, FLOGI/FDISC
requests and responses, FLOGO requests and responses, keep-alive packets, and clear virtual-link
messages.

FIP Snooping in a Switch Stack

FIP snooping supports switch stacking as follows:
• A switch stack configuration is synchronized with the standby stack unit.
• Dynamic population of the FCoE database (ENode, Session, and FCF tables) is synchronized with the
standby stack unit. The FCoE database is maintained by snooping FIP keep-alive messages.
• In case of a failover, the new master switch starts the required timers for the FCoE database tables.
Timers run only on the master stack unit.
Note: As a best practice, Dell Force10 recommends that you do not configure FIP Snooping on a stacked
Aggregator.

How FIP Snooping is Implemented

As soon as the Aggregator is activated in an M1000e chassis as a switch-bridge, existing VLAN-specific
and FIP snooping auto-configurations are applied. The Aggregator snoops FIP packets on VLANs enabled
for FIP snooping and allows legitimate sessions. By default, all FCoE and FIP frames are dropped unless
specifically permitted by existing FIP snooping-generated ACLs.
FIP Snooping | 97