Fip Snooping On Ethernet Bridges - Dell Force10 MXL Blade Configuration Manual

Figure 10-1. FIP discovery and login between an ENode and an FCF

FIP Snooping on Ethernet Bridges

In a converged Ethernet network, intermediate Ethernet bridges can snoop on FIP packets during the login
process on an FCF. Then, using ACLs, a transit bridge can permit only authorized FCoE traffic to be
transmitted between an FCoE end-device and an FCF. An Ethernet bridge that provides these functions is
called a FIP snooping bridge (FSB).
On a FIP snooping bridge, ACLs are created dynamically as FIP login frames are processed. The ACLs are
installed on switch ports configured for the following port modes:
• ENode mode for server-facing ports
• FCF mode for a trusted port directly connected to an FCF
You must enable FIP snooping on an MXL Switch and configure the FIP snooping parameters. When you
enable FIP snooping, all ports on the switch by default become ENode ports.
Dynamic ACL generation on an MXL Switch operating as a FIP snooping bridge functions as follows:
• Global ACLs are applied on server-facing ENode ports.
FIP Snooping | 189