Ipsec Implementation Over Fcip; Default Mapping Of Dscp Priorities To L2Cos Priorities - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

When both DSCP and L2CoS are used
If an FCIP tunnel is not VLAN tagged, only DSCP is relevant. If the FCIP tunnel is VLAN tagged, both DSCP
and L2CoS are relevant, unless the VLAN is end-to-end, with no intermediate hops in the IP network.
Table 85 shows the default mapping of DSCP priorities to L2Cos priorities per tunnel ID. This may be
helpful when consulting with the network administrator. These values may be modified per FCIP tunnel.
Table 85

Default Mapping of DSCP priorities to L2Cos Priorities

Virtual CIrcuit
(VC)
0
1
2
3
4
5
6
7
8
9
10
1 1
12
13
14
15

IPSec implementation over FCIP

Internet Protocol security (IPSec) uses cryptographic security to ensure private, secure communications over
Internet Protocol networks. IPSec supports network-level data integrity, data confidentiality, data origin
authentication, and replay protection. It helps secure your SAN against network-based attacks from
untrusted computers, attacks that can result in the denial-of-service of applications, services, or the network,
data corruption, and data and user credential theft. By default, when creating an FCIP tunnel, IPSec is
disabled.
Used to provide greater security in tunneling on an FR4- 1 8i blade or a 400 Multi-protocol Router, the IPSec
feature does not require you to configure separate security for each application that uses TCP/IP. When
configuring for IPSec, however, you must ensure that there is an FR4- 1 8i blade or a 400 Multi-protocol
Router at each end of the FCIP tunnel. IPSec works on FCIP tunnels with or without IP compression
(IPComp), FCIP fastwrite, and tape pipelining. IPsec can be created only on tunnels using IPv4 addressing.
IPSec requires the High-Performance Extension over FCIP/FC license.
388 Configuring and monitoring FCIP extension services
DSCP priority/bits L2CoS priority/bits
46 / 101 1 10 7 / 1 1 1
7 / 0001 1 1 1 / 001
1 1 / 00101 1 3 / 01 1
15 / 001 1 1 1 3 / 01 1
19 / 01001 1 3 / 01 1
23 / 0101 1 1 3 / 01 1
27 / 01 101 1 0 / 000
31 / 01 1 1 1 1 0 / 000
35 / 10001 1 0 / 000
39 / 1001 1 1 0 / 000
43 / 10101 1 4 / 100
47 / 101 1 1 1 4 / 100
51 / 1 1001 1 4 / 100
55 / 1 101 1 1 4 / 100
59 / 1 1 101 1 4 / 100
63 / 1 1 1 1 1 1 0 / 000
Assigned to:
Class F
Medium QoS
Medium QoS
Medium QoS
Medium QoS
Medium QoS
Class 3 Multicast
Broadcast/Multicast
Low Qos
Low Qos
High QoS
High QoS
High QoS
High QoS
High QoS
--