826 Configuring Data Center Bridging FeaturesFIP SnoopingThe FCoE Initialization Protocol (FIP) is used to perform the functions ofFC_BB_E device discovery, initialization, and maintenance. FIP uses aseparate EtherType from FCoE to distinguish discovery, initialization, andmaintenance traffic from other FCoE traffic. FIP frames are standardEthernet size (1518 Byte 802.1q frame), whereas FCoE frames are amaximum of 2240 bytes. FIP Snooping is supported on the PC80xx switches.FIP snooping is a frame inspection method used by FIP Snooping Bridges tomonitor FIP frames and apply policies based upon the L2 header informationin those frames.FIP snooping allows for:• Auto configuration of Ethernet ACLs based on information in theEthernet headers of FIP frames.• Emulation of FC point-to-point links within the DCB Ethernet network.• Enhanced FCoE security/robustness by preventing FCoE MAC spoofing.The role of FIP snooping-enabled ports on the switch falls under one of thefollowing types:• Perimeter or Edge port (connected directly to a Fibre Channel end node orENode).• Fibre Channel forwarder (FCF) facing port (that receives traffic fromFCFs targeted to the ENodes).The default port role in an FCoE-enabled VLAN is as a perimeter port. FCF-facing ports are configured by the user.Enabling and Disabling FIP SnoopingWhen FIP snooping is globally enabled on the switch, FC-BB-5 Annex DACLs are installed on the switch, and FIP frames are snooped. FIP snoopingwill not allow FIP or FCoE frames to be forwarded over a port until the port isoperationally enabled for PFC. VLAN tagging must be enabled on theinterface in order to carry the dot1p values through the network. EstablishingNOTE: The PowerConnect 8024/8024F FIP Snooping Bridge feature supports theconfiguration of the perimeter port role and FCF-facing port roles and is intendedfor use only at the edge of the switched network.
