Fibre channel over ethernet (FCoE) link aggregation group (LAG) support in data center networks

Patent metadata

Field	Value
Publication number	US-9942144-B1
Application number	US-201414502136-A
Country	US
Kind code	B1
Filing date	Sep 30, 2014
Priority date	Sep 30, 2014
Publication date	Apr 10, 2018
Grant date	Apr 10, 2018

Abstract

Techniques are described for supporting Fiber Channel over Ethernet (FCoE) link aggregation groups (LAGs) between a server and a data center switch in a data center. The techniques enable an access switch in the data center switch to assign class identifiers to each member link in an FCoE LAG between an FCoE node (Enode) of the server and the access switch. In this way, the access switch is able to redirect FCoE traffic from a Fiber Channel forwarder (FCF) of a storage area network (SAN) toward the Enode on the correct member link of the FCoE LAG. The techniques also enable scaling of FCoE initialization protocol (FIP) and FCoE sessions by installing FIP snooping filters that use on a source media access control (MAC) address hit determination in ingress filter processors (IFPs) of the access switch to avoid session limitations of virtual local area network (VLAN) filter processors (VFPs).

First claim

What is claimed is:

1. A method comprising:
establishing, by an access switch of a data center, a plurality of virtual links that emulate point-to-point physical links between a Fibre Channel forwarder (FCF) of a storage area network (SAN) and a plurality of virtual node (VN) ports on a Fibre Channel over Ethernet (FCoE) node (Enode) of a server, wherein the access switch emulates native Fibre Channel by sending packets associated with the FCF of the SAN and one of the plurality of VN ports on the Enode over the same one of the plurality of virtual links;
receiving, by the access switch and from the FCF of the SAN on the one of the plurality of virtual links, a first Fibre Channel over Ethernet (FCoE) packet destined for a destination media access control (MAC) address of the one of the plurality of VN ports on the Enode;
determining, by the access switch and based on an entry for the destination MAC address in a MAC table of the access switch, a FCoE link aggregation group (LAG) interface and a class identifier associated with the destination MAC address of the one of the plurality of VN ports on the Enode, the class identifier identifying only a single member link of a plurality of member links of the FCoE LAG interface over which FCoE packets destined for the destination MAC address of the one of the plurality of VN ports on the Enode are to be forwarded, wherein the single member link of the plurality of member links of the FCoE LAG interface comprises a portion of the one of the plurality of virtual links; and
forwarding the first FCoE packet from the access switch to the one of the plurality of VN ports on the Enode on the single member link of the plurality of member links of the FCoE LAG interface, the single member link being identified by the class identifier associated with the destination MAC address of the one of the plurality of VN ports on the Enode.

2. The method of claim 1 , prior to receiving the first FCoE packet, further comprising:
receiving, with the access switch on the single member link of the plurality of member links of the FCoE LAG interface and from the one of the plurality of VN ports on the Enode of the server, a first FCoE initialization protocol (FIP) packet;
assigning the class identifier to only the single member link of the plurality of member links of the FCoE LAG interface on which the first FIP packet is received;
receiving, with the access switch and from the FCF of the SAN, a second FIP packet accepting a login of the Enode to the FCF;
associating the class identifier assigned to only the single member link of the plurality of member links of the FCoE LAG interface with the destination MAC address of the one of the plurality of VN ports on the Enode; and
installing the destination MAC address and the class identifier in the entry of the MAC table of the access switch.

3. The method of claim 1 , further comprising:
receiving, with the access switch on the FCoE LAG interface and from the one of the plurality of VN ports on the Enode of the server, a second FCoE packet destined for a destination MAC address of the FCF of the SAN;
applying a virtual local area network (VLAN) filter processor (VFP) to the second FCoE packet to determine whether the FCF is a known FCF learned from FCoE initialization protocol (FIP) snooping; and
in response to determining that the destination MAC address of the FCF included in the second FCoE packet identifies the known FCF, allowing the FCoE packet to pass through the VFP to an ingress filter processor (IFP).

4. The method of claim 3 , further comprising, in response to determining that the destination MAC address of the FCF included in the second FCoE packet identifies the known FCF, assigning a VFP class identifier to the second FCoE packet, wherein the VFP class identifier is used by the IFP to filter the second FCoE packet.

5. The method of claim 3 , further comprising, in response to determining that a source MAC address of the one of the plurality of VN ports on the Enode included in the second FCoE packet identifies the known FCF, determining that the second FCoE packet has a spoofed source MAC address and dropping the second FCoE packet.

6. The method of claim 1 , further comprising:
receiving, with the access switch on the FCoE LAG interface and from the one of the plurality of VN ports on the Enode of the server, a second FCoE packet destined for the FCF of the SAN;
applying an ingress filter processor (IFP) to the second FCoE packet to determine whether the Enode is logged-in to the FCF; and
only allowing the second FCoE packet to pass through the IFP when the Enode is logged-in to the FCF.

7. The method of claim 1 , further comprising:
receiving, with the access switch on the FCoE LAG interface from a source MAC address of the one of the plurality of VN ports on the Enode of the server, a second FCoE packet destined for the FCF of the SAN;
performing a lookup in the MAC table based on the source MAC address of the one of the plurality of VN ports on the Enode included in the second FCoE packet;
applying an ingress filter processor (IFP) to the second FCoE packet to determine whether the Enode is logged-in to the FCF based on whether the source MAC address of the one of the plurality of VN ports on the Enode included in the second FCoE packet matches an entry of the MAC table;
when the source MAC address of the one of the plurality of VN ports on the Enode included in the second FCoE packet matches an entry of the MAC table, determining that the Enode is logged-in to the FCF and forwarding the second FCoE packet to the FCF.

8. The method of claim 7 , further comprising, when the source MAC address of the one of the plurality of VN ports on the Enode included in the second FCoE packet does not match an entry of the MAC table, determining that the Enode is not logged-in to the FCF and dropping the second FCoE packet.

9. An access switch in a data center, the access switch comprising:
a memory; and
one or more processors in communication with the memory and configured to operate as:
a control unit configured to establish a plurality of virtual links that emulate point-to-point physical links between a Fibre Channel forwarder (FCF) of a storage area network (SAN) and a plurality of virtual node (VN) ports on a Fibre Channel over Ethernet (FCoE) node (Enode) of a server, wherein the access switch emulates native Fibre Channel by sending packets associated with the FCF of the SAN and one of the plurality of VN ports on the Enode over the same one of the plurality of virtual links, and establish a Fibre Channel over Ethernet (FCoE) link aggregation group (LAG) between the access switch and the plurality of VN ports on the Enode; and
a forwarding engine including a media access control (MAC) table, an FCoE LAG interface, and at least one port to receive, from the FCF of the SAN on the one of the plurality of virtual links, a first FCoE packet destined for a destination MAC address of the one of the plurality of VN ports on the Enode of the server, wherein the forwarding engine is configured to:
determine, based on an entry for the destination MAC address in the MAC table, the FCoE LAG interface and a class identifier associated with the destination MAC address of the one of the plurality of VN ports on the Enode, the class identifier identifying only a single member link of a plurality of member links of the FCoE LAG interface over which FCoE packets destined for the destination MAC address of the one of the plurality of VN ports on the Enode are to be forwarded, wherein the single member link of the plurality of member links of the FCoE LAG comprises a portion of the one of the plurality of virtual links, and
forward the first FCoE packet from the

Assignees

• Juniper Networks Inc

Inventors

• Ramalingam Nirmal Kumar
• Shukla Amit
• Adusumalli Srilakshmi

Classifications

• H04L49/252

  Store and forward routing · CPC title

• H04L41/0213

  Standardised network management protocols, e.g. simple network management protocol [SNMP] · CPC title

• H04L43/0811

  by checking connectivity · CPC title

• H04L45/66

  Layer 2 routing, e.g. in Ethernet based MAN's · CPC title

• H04L45/745 Primary

  Address table lookup; Address filtering · CPC title