Lenovo ThinkSystem NE2552E, Application Manual

Page: 249 / 574

© Copyright Lenovo 2018 Chapter 15: Fibre Channel over Ethernet
249
FCoE Initialization Protocol Snooping
FCoE Initialization Protocol (FIP) snooping is an FCoE feature. In order to enforce
point ‐ to ‐ point links for FCoE traffic outside the regular Fibre Channel topology,
Ethernet ports used in FCoE can be automatically and dynamically configured
with Access Control Lists (ACLs).
Using FIP snooping, the NE2552E examines the FIP frames normally exchanged
between the FCF and ENodes to determine information about connected FCoE
devices. This information is used to create narrowly tailored ACLs that permit
expected FCoE traffic to and from confirmed Fibre Channel nodes, and deny all
other undesirable FCoE or FIP traffic.
In case of LAG, FIP traffic from a particular FCF can be received by any member
port on which the FCF was detected.
FIP Snooping Requirements
The following are required for implementing the FIP snooping bridge feature:
 The NE2552E must be connected to the Fibre Channel network through a FCF
such as a Lenovo Rackswitch G8264CS , a Lenovo CN4093 10Gb Converged Scalable
Switch or a Cisco Nexus 5000 Series Switch.
 For each NE2552E switch port participating in FCoE, the connected server must
use a FCoE ‐ licensed Converged Network Adapter (CNA) and must have the
FCoE license enabled (if applicable) on the CNA.
 CEE must be turned on (see “Turning CEE On or Off” on page 246 ). When CEE
is on, the DCBX, PFC and ETS features are enabled and configured with default
FCoE settings. These features may be reconfigured, but must remain enabled for
FCoE to function.
 FIP snooping must be turned on (see “Global FIP Snooping Settings” on
page 250 ). When FIP snooping is turned on, the feature is enabled on all ports by
default. The administrator can disable FIP snooping on individual ports that do
not require FCoE, but FIP snooping must remain enabled on all FCoE ports for
FCoE to function.