98 | FIP Snoopingw w w . d e l l . c o m | s u p p o r t . d e l l . c o m FIP Snooping on VLANsFIP snooping is enabled globally on an Aggregator on all VLANs:• FIP frames are allowed to pass through the switch on the enabled VLANs and are processed togenerate FIP snooping ACLs.• FCoE traffic is allowed on VLANs only after a successful virtual-link initialization (fabric loginFLOGI) between an ENode and an FCF. All other FCoE traffic is dropped.• At least one interface is auto-configured for FCF (FIP snooping bridge-FCF) mode on a FIPsnooping-enabled VLAN. Multiple FCF trusted interfaces are auto-configured in a VLAN.• A maximum of eight VLANS are supported for FIP snooping on an Aggregator. FIP snoopingprocesses FIP packets in traffic only from the first eight incoming VLANs.FC-MAP ValueThe FC-MAP value that is applied globally by the Aggregator on all FCoE VLANs to authorize FCoEtraffic is auto-configured.The FC-MAP value is used to check the FC-MAP value for the MAC address assigned to ENodes inincoming FCoE frames. If the FC-MAP value does not match, FCoE frames are dropped. A sessionbetween an ENode and an FCF is established by the switch-bridge only when the FC-MAP value on theFCF matches the FC-MAP value on the FIP snooping bridge.Bridge-to-FCF LinksA port directly connected to an FCF is auto-configured in FCF mode. Initially, all FCoE traffic is blocked;only FIP frames are allowed to pass.FCoE traffic is allowed on the port only after a successful FLOGI request/response and confirmed use ofthe configured FC-MAP value for the VLAN.Impact on other Software FeaturesFIP snooping affects other software features on an Aggregator as follows:• MAC address learning: MAC address learning is not performed on FIP and FCoE frames, which aredenied by ACLs dynamically created by FIP snooping on server-facing ports in ENode mode.• MTU auto-configuration: MTU size is set to mini-jumbo (2500 bytes) when a port is in Switchportmode, the FIP snooping feature is enabled on the switch, and FIP snooping is enabled on all orindividual VLANs.• Link aggregation group (LAG): FIP snooping is supported on port channels on ports on which PFCmode is on (PFC is operationally up).
