Lenovo ThinkSystem NE2552E, Application Manual

Page: 252 / 574

252
NE2552E Application Guide for ENOS 8.4
Port FCF and ENode Detection
When FIP snooping is enabled on a port, the port is placed in FCF auto ‐ detect
mode by default. In this mode, the port assumes connection to an ENode unless
FIP packets show the port is connected to an FCF.
Ports can also be specifically configured as to whether automatic FCF detection
should be used, or whether the port is connected to an FCF or ENode:
When FCF mode is
on
, the port is assumed to be connected to a trusted FCF, and
only ACLs appropriate to FCFs will be installed on the port. When
off
, the port is
assumed to be connected to an ENode, and only ACLs appropriate to ENodes will
be installed. When the mode is changed (either through manual configuration or as
a result of automatic detection), the appropriate ACLs are automatically added,
removed, or changed to reflect the new FCF or ENode connection.
FCoE Connection Timeout
FCoE ‐ related ACLs and VLANs are added, changed, and removed as FCoE device
connection and disconnection are discovered. In addition, the administrator can
enable or disable automatic removal of ACLs for FCFs and other FCoE connections
that timeout (fail or are disconnected) without FIP notification.
By default, automatic removal of ACLs upon timeout is enabled. To change this
function, use the following CLI command:
FCoE ACL Rules
When FIP Snooping is enabled on a port, the switch automatically installs the
appropriate ACLs to enforce the following rules for FCoE traffic:
 Ensure that FIP frames from ENodes may only be addressed to FCFs.
 Flag important FIP packets for switch processing.
 Ensure no end device uses an FCF MAC address as its source.
 Each FCoE port is assumed to be connected to an ENode and includes
ENode ‐ specific ACLs installed, until the port is either detected or configured to
be connected to an FCF.
 Ports that are configured to have FIP snooping disabled will not have any FIP or
FCoE related ACLs installed.
 Prevent transmission of all FCoE frames from an ENode prior to its successful
completion of login (FLOGI) to the FCF.
 After successful completion of FLOGI, ensure that the ENode uses only those
FCoE source addresses assigned to it by FCF.
 After successful completion of FLOGI, ensure that all ENode FCoE source
addresses originate from or are destined to the appropriate ENode port.
NE2552E(config)# fcoe fips port
<port alias, number, list, or range>
fcf-mode
{auto|on|off}
NE2552E(config)# [ no ] fcoe fips timeout-acl