When Both Dscp And L2Cos Are Used; Ipsec Implementation Over Fcip - Brocade Communications Systems 8 Administrator's Manual

When both DSCP and L2CoS are used

If an FCIP tunnel is not VLAN tagged, only DSCP is relevant. If the FCIP tunnel is VLAN tagged, both
DSCP and L2CoS are relevant, unless the VLAN is end-to-end, with no intermediate hops in the IP
network. The following table shows the default mapping of DSCP priorities to L2Cos priorities per
tunnel ID. This may be helpful when consulting with the network administrator. These values may
be modified per FCIP tunnel.
TABLE 8
Virtual CIrcuit (VC)
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

IPSec implementation over FCIP

Internet Protocol security (IPsec) uses cryptographic security to ensure private, secure
communications over Internet Protocol networks. IPsec supports network-level data integrity, data
confidentiality, data origin authentication, and replay protection. It helps secure your SAN against
network-based attacks from untrusted computers, attacks that can result in the denial-of-service of
applications, services, or the network, data corruption, and data and user credential theft. By
default, when creating an FCIP tunnel, IPsec is disabled.
Used to provide greater security in tunneling on an FR4-18i blade or a Brocade 7500 Extension
Switch, the IPsec feature does not require you to configure separate security for each application
that uses TCP/IP. When configuring for IPsec, however, you must ensure that there is an FR4-18i
blade or a Brocade 7500 Extension Switch at each end of the FCIP tunnel. IPsec works on FCIP
tunnels with or without IP compression (IPComp), FCIP Fastwrite, and OSTP. IPsec can only be
created on tunnels using IPv4 addressing.
IPsec requires the High-Performance Extension over FCIP/FC license.
Fabric OS FCIP Administrator's Guide
53-1001766-01
Default Mapping of DSCP priorities to L2Cos Priorities
DSCP priority/bits
46 / 101110
7 / 000111
11 / 001011
15 / 001111
19 / 010011
23 / 010111
27 / 011011
31 / 011111
35 / 100011
39 / 100111
43 / 101011
47 / 101111
51 / 110011
55 / 110111
59 / 111011
63 / 111111
IPSec implementation over FCIP
L2CoS priority/bits
7 / 111
1 / 001
3 / 011
3 / 011
3 / 011
3 / 011
0 / 000
0 / 000
0 / 000
0 / 000
4 / 100
4 / 100
4 / 100
4 / 100
4 / 100
0 / 000
3
Assigned to:
Class F
Medium QoS
Medium QoS
Medium QoS
Medium QoS
Medium QoS
Class 3 Multicast
Broadcast/Multicast
Low Qos
Low Qos
High QoS
High QoS
High QoS
High QoS
High QoS
Reserved
45