HP StorageWorks 8/80 Brocade Converged Enhanced Ethernet Administrator's Guide - Page 58

Ingress VLAN filtering,

Page 58 highlights

4 Ingress VLAN filtering • Admit VLAN tagged and untagged frames-The untagged frames are classified into native VLANs. Any tagged frames coming with a VLAN tag equal to the configured native VLAN are dropped. This is called converged mode. NOTE Ingress VLAN filtering is enabled by default on all Layer 2 interfaces. This ensures that VLANs are filtered on the incoming port (depending on the user configuration). Figure 10 shows the frame processing logic for an incoming frame. FIGURE 10 Ingress VLAN filtering Incoming frame on an interface Is the port Yes Is the VLAN ID No a trunk? an allowed VLAN? Drop frame No Yes No Is the port an access interface? Drop frame Yes Assign the frame to the VLAN present in the VLAN ID field of the Ethernet header Does the frame match any of the configured VLAN classifiers No (MAC address based and protocol based)? Yes Assign the frame to the classified VLAN Assign the frame to the configured PVID There are important facts you should know about Ingress VLAN filtering: • Ingress VLAN filtering is based on port VLAN membership. • Port VLAN membership is configured through the CEE CLI. • Dynamic VLAN registration is not supported. • The Brocade FCoE hardware does VLAN filtering at both the ingress and egress ports. • The VLAN filtering behavior on logical Layer 2 interfaces such as LAG interfaces is the same as on port interfaces. • The VLAN filtering database (FDB) determines the forwarding of an incoming frame. Additionally, there are important facts you should know about the VLAN FDB: • The VLAN FDB contains information that helps determine the forwarding of an arriving frame based on MAC address and VLAN ID data. The FDB contains both statically configured data and dynamic data that is learned by the switch. • The dynamic updating of FDB entries using learning is supported (if the port state permits). 38 Converged Enhanced Ethernet Administrator's Guide 53-1001346-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162

38
Converged Enhanced Ethernet Administrator’s Guide
53-1001346-01
Ingress VLAN filtering
4
Admit VLAN tagged and untagged frames—The untagged frames are classified into native
VLANs. Any tagged frames coming with a VLAN tag equal to the configured native VLAN are
dropped. This is called converged mode.
NOTE
Ingress VLAN filtering is enabled by default on all Layer 2 interfaces. This ensures that VLANs are
filtered on the incoming port (depending on the user configuration).
Figure 10
shows the frame processing logic for an incoming frame.
FIGURE 10
Ingress VLAN filtering
There are important facts you should know about Ingress VLAN filtering:
Ingress VLAN filtering is based on port VLAN membership.
Port VLAN membership is configured through the CEE CLI.
Dynamic VLAN registration is not supported.
The Brocade FCoE hardware does VLAN filtering at both the ingress and egress ports.
The VLAN filtering behavior on logical Layer 2 interfaces such as LAG interfaces is the same as
on port interfaces.
The VLAN filtering database (FDB) determines the forwarding of an incoming frame.
Additionally, there are important facts you should know about the VLAN FDB:
The VLAN FDB contains information that helps determine the forwarding of an arriving frame
based on MAC address and VLAN ID data. The FDB contains both statically configured data
and dynamic data that is learned by the switch.
The dynamic updating of FDB entries using learning is supported (if the port state permits).
Is the port
a trunk?
Assign the
frame to the
classified VLAN
Assign the
frame to the
configured PVID
Drop frame
Drop frame
Is the VLAN ID
an allowed VLAN?
Assign the frame to the
VLAN present in the VLAN ID
field of the Ethernet header
Incoming frame
on an interface
No
No
No
Yes
Yes
Is the port an
access interface?
No
Yes
Yes
Does the frame match any
of the configured VLAN classifiers
(MAC address based and
protocol based)?