Configuring Fip Snooping; Overview; Fip Snooping Network Diagram - HP FlexFabric 5700 Series Configuration Manual

Configuring FIP snooping

Overview

To communicate with devices in the FC SAN, a node must register with an FC fabric. An FC switch has
point-to-point connections with nodes. An FC switch brings up an interface connected to a node only
after the node completes fabric login on the interface.
In an FCoE implementation, Transit switches can be present between ENodes and FCF switches, so the
connections between ENodes and FCF switches are no longer point-to-point. In this case, a node that has
not performed fabric login might communicate with the FC SAN. For example, two ENodes are
connected to one FCF switch through a Transit switch. After one ENode has registered with the FCF
switch and the corresponding interface is brought up, the other ENode can also communicate with the
FC SAN.
FCoE Initialization Protocol Snooping (FIP snooping) is a security feature that can run only on Transit
switches in an FCoE network. By checking source MAC addresses of FCoE frames, FIP snooping enables
a Transit switch to forward FCoE frames only between the following elements:
An ENode that has performed fabric login.
•
The FCF switch that has accepted its fabric login.
•

FIP snooping network diagram

Figure 29 shows a typical FIP snooping network diagram.
Figure 29 FIP snooping network diagram
ENode
Ethernet interfaces on a Transit switch can operate in ENode or FCF mode. An Ethernet interface
connected to an ENode must be configured to operate in ENode mode. An Ethernet interface connected
to an FCF switch must be configured to operate in FCF mode.
To control packet exchange between ENodes and FCF switches, perform the following tasks:
• Enable FIP snooping.
Configure the Ethernet interfaces to operate in a correct mode on the Transit switch.
•
ENode
FCF
mode
mode
ENode FCF
mode mode
Transit switch
FCF switch
Fabric
FCF switch
102