• To provide more port security on ports that are directly connected to an FCF and have links to otherFIP snooping bridges, set the FCF or Bridge-to-Bridge Port modes.• To ensure that they are operationally active, check FIP snooping-enabled VLANs.• Process FIP VLAN discovery requests and responses, advertisements, solicitations, FLOGI/FDISCrequests and responses, FLOGO requests and responses, keep-alive packets, and clear virtual-linkmessages.FIP Snooping in a Switch StackFIP snooping supports switch stacking as follows:• A switch stack configuration is synchronized with the standby stack unit.• Dynamic population of the FCoE database (ENode, Session, and FCF tables) is synchronized with thestandby stack unit. The FCoE database is maintained by snooping FIP keep-alive messages.• In case of a failover, the new master switch starts the required timers for the FCoE database tables.Timers run only on the master stack unit.Using FIP SnoopingThere are four steps to configure FCoE transit.1. Enable the FCoE transit feature on a switch.2. Enable FIP snooping globally on all Virtual Local Area Networks (VLANs) or individual VLANs on a FIPsnooping bridge.3. Configure the FC-Map value applied globally by the switch on all VLANs or an individual VLAN.4. Configure FCF mode for a FIP snooping bridge-to-FCF link.For a sample FIP snooping configuration, refer to FIP Snooping Configuration Example.Statistical information is available for FIP Snooping-related information. For available commands, refer tothe FCoE Transit chapter in the Dell Networking OS Command Line Reference Guide.FIP Snooping PrerequisitesBefore you enable FCoE transit and configure FIP snooping on a switch, ensure that certain conditionsare met.A FIP snooping bridge requires data center bridging exchange protocol (DCBx) and priority-based flowcontrol (PFC) to be enabled on the switch for lossless Ethernet connections (refer to the Data CenterBridging (DCB) chapter). Dell Networking recommends also enabling enhanced transmission selection(ETS); however, ETS is recommended but not required.If you enable DCBx and PFC mode is on (PFC is operationally up) in a port configuration, FIP snooping isoperational on the port. If the PFC parameters in a DCBx exchange with a peer are not synchronized, FIPand FCoE frames are dropped on the port after you enable the FIP snooping feature.For VLAN membership, you must:• create the VLANs on the switch which handles FCoE traffic (use the interface vlan command).• configure each FIP snooping port to operate in Hybrid mode so that it accepts both tagged anduntagged VLAN frames (use the portmode hybrid command).FCoE Transit 317
