Administrator Guide

You must enable FIP snooping on an Aggregator and configure the FIP snooping parameters. When you
enable FIP snooping, all ports on the switch by default become ENode ports.
Dynamic ACL generation on an Aggregator operating as a FIP snooping bridge functions as follows:
• Global ACLs are applied on server-facing ENode ports.
• Port-based ACLs are applied on ports directly connected to an FCF and on server-facing ENode ports.
• Port-based ACLs take precedence over global ACLs.
• FCoE-generated ACLs take precedence over user-configured ACLs. A user-configured ACL entry cannot
deny FCoE and FIP snooping frames.
The below illustration depicts an Aggregator used as a FIP snooping bridge in a converged Ethernet network.
The ToR switch operates as an FCF for FCoE traffic. Converged LAN and SAN traffic is transmitted between
the ToR switch and an Aggregator. The Aggregator operates as a lossless FIP snooping bridge to transparently
forward FCoE frames between the ENode servers and the FCF switch.
Figure 42. FIP Snooping on an Aggregator
The following sections describes how to configure the FIP snooping feature on a switch that functions as a
FIP snooping bridge so that it can perform the following functions:
• Performs FIP snooping (allowing and parsing FIP frames) globally on all VLANs or on a per-VLAN basis.
FIP Snooping 380