Converged Enhanced Ethernet Administrator's Guide v6.4.0 (53-1001761-01, June 2010)

32 Converged Enhanced Ethernet Administrator’s Guide
53-1001761-01
Ingress VLAN filtering
4
DRAFT: BROCADE CONFIDENTIAL
• Admit VLAN tagged and untagged frames—All tagged and untagged frames would be
processed as follows:
- All untagged frames are classified into native VLANs.
- All frames egressing are untagged for the native VLANs.
- Any tagged frames coming with a VLAN tag equal to the configured native VLAN are
processed.
- For ingress and egress, non-native VLAN tagged frames are processed according to the
allowed VLAN user specifications. This is called converged mode.
NOTE
Ingress VLAN filtering is enabled by default on all Layer 2 interfaces. This ensures that VLANs are
filtered on the incoming port (depending on the user configuration).
Figure 6 displays the frame processing logic for an incoming frame.
FIGURE 6 Ingress VLAN filtering
There are important facts you should know about Ingress VLAN filtering:
• Ingress VLAN filtering is based on port VLAN membership.
• Port VLAN membership is configured through the CEE CLI.
• Dynamic VLAN registration is not supported.
• The Brocade FCoE hardware does VLAN filtering at both the ingress and egress ports.
• The VLAN filtering behavior on logical Layer 2 interfaces such as LAG interfaces is the same as
on port interfaces.
• The VLAN filtering database (FDB) determines the forwarding of an incoming frame.
Is the port
a trunk?
Assign the
frame to the
classified VLAN
Assign the
frame to the
configured PVID
Drop frame
Drop frame
Is the VLAN ID
an allowed VLAN?
Assign the frame to the
VLAN present in the VLAN ID
field of the Ethernet header
Incoming frame
on an interface
No
No
No
Ye s
Ye s
Is the port an
access interface?
No
Ye s
Ye s
Does the frame match any
of the configured VLAN classifiers
(MAC address based and
protocol based)?