FIP Snooping | 97The following sections describe how to configure the FIP snooping feature on a switch that functions as aFIP snooping bridge so that it can perform the following functions:• Perform FIP snooping (allowing and parsing FIP frames) globally on all VLANs or on a per-VLANbasis.• Set the FCoE MAC address prefix (FC-MAP) value used by an FCF to assign a MAC address to anFCoE end-device (server ENode or storage device) after a server successfully logs in.• Set the FCF mode to provide additional port security on ports that are directly connected to an FCF.• Check FIP snooping-enabled VLANs to ensure that they are operationally active.• Process FIP VLAN discovery requests and responses, advertisements, solicitations, FLOGI/FDISCrequests and responses, FLOGO requests and responses, keep-alive packets, and clear virtual-linkmessages.FIP Snooping in a Switch StackFIP snooping supports switch stacking as follows:• A switch stack configuration is synchronized with the standby stack unit.• Dynamic population of the FCoE database (ENode, Session, and FCF tables) is synchronized with thestandby stack unit. The FCoE database is maintained by snooping FIP keep-alive messages.• In case of a failover, the new master switch starts the required timers for the FCoE database tables.Timers run only on the master stack unit.How FIP Snooping is ImplementedAs soon as the Aggregator is activated in an M1000e chassis as a switch-bridge, existing VLAN-specificand FIP snooping auto-configurations are applied. The Aggregator snoops FIP packets on VLANs enabledfor FIP snooping and allows legitimate sessions. By default, all FCoE and FIP frames are dropped unlessspecifically permitted by existing FIP snooping-generated ACLs.Note: As a best practice, Dell Force10 recommends that you do not configure FIP Snooping on a stackedAggregator.
