White Papers

Table Of Contents
create the VLANs on the switch which handles FCoE traffic (use the interface vlan command).
configure each FIP snooping port to operate in Hybrid mode so that it accepts both tagged and untagged VLAN frames (use
the portmode hybrid command).
configure tagged VLAN membership on each FIP snooping port that sends and receives FCoE traffic and has links with an
FCF, ENode server, or another FIP snooping bridge (use the tagged port-type slot/port command).
The default VLAN membership of the port must continue to operate with untagged frames. FIP snooping is not supported on a
port that is configured for nondefault untagged VLAN membership.
Important Points to Remember
Enable DCBx on the switch before enabling the FIP Snooping feature.
To enable the feature on the switch, configure FIP Snooping.
To allow FIP frames to pass through the switch on all VLANs, enable FIP snooping globally on a switch.
A switch can support a maximum eight VLANs. Configure at least one FCF/bridge-to-bridge port mode interface for any FIP
snooping-enabled VLAN.
You can configure multiple FCF-trusted interfaces in a VLAN.
When you disable FIP snooping:
ACLs are not installed, FIP and FCoE traffic is not blocked, and FIP packets are not processed.
The existing per-VLAN and FIP snooping configuration is stored. The configuration is re-applied the next time you enable
the FIP snooping feature.
To support FIP-Snooping and set CAM-ACL, usecam-acl l2acl 4 ipv4acl 4 ipv6acl 0 ipv4qos 2 l2qos 1
l2pt 0 ipmacacl 0 vman-qos 0 ecfmacl 0 fcoeacl 2 command.
CAM ACL Table
-- Chassis Cam ACL --
Current Settings(in block sizes)
1 block = 128 entries
L2Acl : 4
Ipv4Acl : 4
Ipv6Acl : 0
Ipv4Qos : 2
L2Qos : 1
L2PT : 0
IpMacAcl : 0
VmanQos : 0
VmanDualQos : 0
EcfmAcl : 0
FcoeAcl : 2
iscsiOptAcl : 0
ipv4pbr : 0
vrfv4Acl : 0
Openflow : 0
fedgovacl : 0
nlbclusteracl: 0
st-sjc-s5000-29#
Enabling the FCoE Transit Feature
The following sections describe how to enable FCoE transit.
NOTE: FCoE transit is disabled by default. To enable this feature, you must follow the Configuring FIP Snooping.
As soon as you enable the FCoE transit feature on a switch-bridge, existing VLAN-specific and FIP snooping configurations are
applied. The FCoE database is populated when the switch connects to a converged network adapter (CNA) or FCF port and
compatible DCB configurations are synchronized. By default, all FCoE and FIP frames are dropped unless specifically permitted
by existing FIP snooping-generated ACLs. You can reconfigure any of the FIP snooping settings.
FCoE Transit
301