Reference Guide

FCoE Transit | 351
The following sections describe how to configure the FCoE transit feature on a switch that functions as a
FIP snooping bridge so that it can perform the following functions:
• Allocate CAM resources for FCoE.
• Perform FIP snooping (allowing and parsing FIP frames) globally on all VLANs or on a per-VLAN
basis.
• Set the FCoE MAC address prefix (FC-MAP) value used by an FCF to assign a MAC address to an
FCoE end-device (server ENode or storage device) after a server successfully logs in. The FC-MAP
value is used in the ACLs installed in bridge-to-bridge links on the switch.
• Set the FCF mode to provide additional port security on ports that are directly connected to an FCoE
forwarder.
• Check FIP snooping-enabled VLANs to ensure that they are operationally active.
• Process FIP VLAN discovery requests and responses, advertisements, solicitations, FLOGI/FDISC
requests and responses, FLOGO requests and responses, keep-alive packets, and clear virtual-link
messages.
Configuring FIP Snooping
After you enable FCoE transit, the configuration of FIP snooping on an S5000 not configured as an NPIV
proxy gateway consists of the following tasks. For information about FIP snooping on an NPIV proxy
gateway, see FIP Snooping on an NPIV Proxy Gateway.
1. Enable the FCoE transit feature on a switch to maintain FIP snooping information on the switch.
2. Enable FIP snooping on all VLANs (globally) or individual VLANs on a FIP snooping bridge.
3. Configure the FC-Map value applied globally by the switch on all VLANs or an individual VLAN.
The FC-MAP value checks the first 24 bits in the MAC address in incoming FCoE frames.
4. Configure the maximum number of FIP-snooping sessions supported on the switch for an ENode
MAC address.
5. Configure FCF port mode used for bridge-to-FCF links in FIP snooping.
For a sample FIP snooping configuration, refer to Figure 16-11.
Enabling the FCoE Transit Feature
By default, FCoE transit is disabled on an S5000 switch. To enable FCoE transit and configure FIP
snooping, follow the steps in FIP Snooping Configuration Procedure.
• When you enable FCoE transit, the switch snoops FIP packets on VLANs enabled for FIP snooping
and allows legitimate sessions. FCoE and FIP packets are dropped on VLANs disabled for FIP
snooping.
• When you disable FCoE transit, the S5000 operates as a pure Layer 2 switch that switches FCoE and
FIP packets.
Note: The FCoE-Trusted Port mode used to connect to another FIP snooping bridge (bridge-bridge link)
is not supported on the S5000.