Cisco MDS 9000 Series Configuration Manual page 161

Configuring and Managing Zones
The following example shows a zone in the active zone set for a VSAN. This is the basic programming that
exists on an interface because of Hard zoning.
zone1
member host (FCID 0x010001)
member target1 (FCID 0x010002)
In such a scenario, the following is the ACL programming:
fc1/1 - Host interface
Entry#
1
2
fc1/2 - Target1 interface
Entry#
1
2
Note In addition to what is provided here, additional programming exists.
The mask indicates which parts of the FCIDs are matched with the input frame. So, when there is a mask
0xffffff, the entire FCID is considered when matching it to the ACL entry. If the mask is 0x000000, none of
it is considered because, by default, it will match all the FCIDs.
In the above programming example, note that when a frame is received on fc1/1, and if it has a source ID(FCID)
of 0x010001(the host) and a destination ID(FCID) of 0x010002(Target1), it will be permitted and routed to
the destination. If it is any other end-to-end communication, it will be dropped.
The following example shows another scenario where zoning is changed:
zone1
member host (FCID 010001)
member target1 (FCID 010002)
member target2 (FCID 010003)
member target3 (FCID 010004)
In such a scenario, the following is the ACL programming:
Source ID Mask
010001 ffffff
000000 000000
Source ID Mask
010002 ffffff
000000 000000
Destination ID
010002(target1)
000000
Destination ID
010001(Host)
000000
Cisco MDS 9000 Series Fabric Configuration Guide, Release 8.x
Zoning Types
Mask Action
ffffff Permit
000000 Drop
Mask Action
ffffff Permit
000000 Drop
139