White Papers

Table Of Contents
You must enable FIP snooping on an Aggregator and configure the FIP snooping parameters. When you enable FIP snooping, all
ports on the switch by default become ENode ports.
Dynamic ACL generation on an Aggregator operating as a FIP snooping bridge functions as follows:
Global ACLs are applied on server-facing ENode ports.
Port-based ACLs are applied on ports directly connected to an FCF and on server-facing ENode ports.
Port-based ACLs take precedence over global ACLs.
FCoE-generated ACLs take precedence over user-configured ACLs. A user-configured ACL entry cannot deny FCoE and FIP
snooping frames.
The below illustration depicts an Aggregator used as a FIP snooping bridge in a converged Ethernet network. The ToR switch
operates as an FCF for FCoE traffic. Converged LAN and SAN traffic is transmitted between the ToR switch and an Aggregator.
The Aggregator operates as a lossless FIP snooping bridge to transparently forward FCoE frames between the ENode servers
and the FCF switch.
Figure 44. FIP Snooping on an Aggregator
The following sections describes how to configure the FIP snooping feature on a switch that functions as a FIP snooping bridge
so that it can perform the following functions:
Performs FIP snooping (allowing and parsing FIP frames) globally on all VLANs or on a per-VLAN basis.
Set the FCoE MAC address prefix (FC-MAP) value used by an FCF to assign a MAC address to an ECoE end-device (server
ENode or storage device) after a server successfully logs in.
Set the FCF mode to provide additional port security on ports that are directly connected to an FCF.
Check FIP snooping-enabled VLANs to ensure that they are operationally active.
Process FIP VLAN discovery requests and responses, advertisements, solicitations, FLOGI/FDISC requests and responses,
FLOGO requests and responses, keep-alive packets, and clear virtual-link messages.
312
FIP Snooping