Abstract: Techniques are provided for the creation of a peer zone definition for use in a Fibre Channel (FC) Fabric. The peer zone definition defines a peer zone in which two or more initiator host devices are each permitted to communicate with a target device, but the two or more initiator host devices are prevented from communicating with each other. In accordance with one example, a target device and of two or more initiator host devices connected to the FC Fabric are received. A peer zone definition is created, and the peer zone definition is transmitted to the switches composing the FC Fabric for enforcement.

Abstract: Techniques are provided for the creation of a peer zone definition for use in a Fiber Channel (FC) Fabric. The peer zone definition defines a peer zone in which two or more initiator host devices are each permitted to communicate with a target device, but the two or more initiator host devices are prevented from communicating with each other. In accordance with one example, a target device and of two or more initiator host devices connected to the FC Fabric are received. A peer zone definition is created, and the peer zone definition is transmitted to the switches composing the FC Fabric for enforcement.

Abstract: A distributed Fiber Channel over Ethernet (FCoE) Forwarder (FCF) and a distributed Fiber Channel Switch are described. The Distributed FCF is realized by instantiating respective connections between at least one Controlling FCF and a plurality of FCoE Data-Plane Forwarder (FDF) devices and between individual FDF devices. The Distributed FC Switch is realized by instantiating respective connections between at least one Controlling Switch and a plurality of FC Data-Plane Forwarder (FCDF) devices and between individual FCDF devices.

Abstract: In one embodiment, a method includes establishing at a Fibre Channel over Ethernet (FCoE) Data-Plane Forwarder (FDF), a connection with a controller in communication with a plurality of FDFs, processing at the FDF, control information received from the controller, and forwarding FCoE frames based on the control information. The FDF communicates with the other FDFs in an FCoE fabric and communicates with the controller through a control connection. An apparatus is also disclosed herein.

Abstract: In one embodiment, a method includes instantiating a virtual Fiber Channel over Ethernet (FCoE) Forwarder (FCF) at a primary FCF, the virtual FCF associated with a virtual domain identifier and a virtual FCF-MAC (Media Access Control) address, wherein the primary FCF and a secondary FCF form a virtual Port Channel (vPC) for communication with a host, and allocating node port identifiers to virtual node ports on vPC ports at the host from the virtual domain identifier. An apparatus and logic are also disclosed herein.

Abstract: Non-Internet Protocol (IP) centric resources are accessed based on a value in the form of an IP address. This value (represented as the IP address) is converted to a non-IP address, which is to used access one or more non-IP address space resources. This value (represented as the IP address) typically includes an encoding of the non-IP address and/or an indirect reference (e.g., table index, pointer to a memory location) to the non-IP address.

Abstract: An example method for direct data placement over User Datagram Protocol (UDP) in a network environment is provided and includes creating a queue pair (QP) for unreliable datagram transport in Infiniband according to an OpenFabrics Application Programming Interface (API) specification, mapping data generated by an application for transmission over the QP in a network environment to a UDP datagram, and passing the UDP datagram to a network interface for transmission.

Abstract: An example method for Fibre Channel over Ethernet (FCoE) support in a Transparent Interconnection of Lots of Links (TRILL) network environment is provided and includes configuring at least two virtual storage area networks (SANs) in a TRILL network environment, which includes a plurality of leaf switches and spine switches, with each leaf switch being configured as a FCoE forwarder (FCF) enabled to forward frames according to FCoE protocol, and configuring at least an edge broadcast domain and a transport broadcast domain for each virtual SAN at each leaf switch. The edge broadcast domain includes end device links between the leaf switch and one or more end devices, and the transport broadcast domain includes spine links between the leaf switch and the spine switches.

Abstract: In one embodiment, a Fibre Channel over Ethernet (FCoE) proxy point (FPP) that is connected to one or more end-point devices is coupled to one or more other FPPs, and to a FCoE control and management plane (F-CMP) server. The FPP provides data plane functionality. The F-CMP server provides control plane functionality. At least some control and management traffic received at the FPP is proxied between the F-CMP server and the one or more end point devices connected to the FPP. FCoE traffic received at the FPP from the one or more end point devices connected to the FPP is transmitted to the one or more other FPPs without the FCoE traffic traversing the F-CMP server. The transmitting is performed by data plane functionality of the FPP operating under directions from the control plane functionality of the F-CMP server.

Abstract: This document discusses, among other things, applying network policy at a network device. In an example embodiment fiber channel hard zoning information may be received that indicates whether a fiber channel frame is permitted to be communicated between two fiber channel ports. Some example embodiments include identifying a media access control addresses associated with the fiber channel ports. An example embodiment may include generating one or more access control entries based on the fiber channel identifications of the fiber channel ports and the zoning information. The access control entries may be distributes to an Ethernet port to be inserted into an existing access control list and used to enforce a zoning policy upon fiber channel over Ethernet frames.

Abstract: In one embodiment, a method includes instantiating a virtual Fibre Channel over Ethernet (FCoE) Forwarder (FCF) at a primary FCF, the virtual FCF associated with a virtual domain identifier and a virtual FCF-MAC (Media Access Control) address, wherein the primary FCF and a secondary FCF form a virtual Port Channel (vPC) for communication with a host, and allocating node port identifiers to virtual node ports on vPC ports at the host from the virtual domain identifier. An apparatus and logic are also disclosed herein.

Abstract: Techniques are provided for performing discovery in a Fiber Channel over Ethernet (FCoE) network. An FCF discovers other FCoE Forwarders (FCFs) connected to its network segment by transmitting a solicitation message to the multicast MAC address “All-FCF-MACS”. All FCFs receive packets with this multicast MAC address including the solicitation message that announces the presence of the FCF. Each FCF replies with a unicast advertisement message that provides the new FCF with a MAC address of the responding FCF. The FCF builds a list of the FCFs available on its network segment and may then establish a virtual link with one or more of the FCFs through an exchange link parameter (ELP) exchange.

Abstract: Methods and apparatus are provided for improving both node-based and message-based security in a fibre channel network. Entity to entity authentication and key exchange services can be included in existing initialization messages used for introducing fibre channel network entities into a fibre channel fabric, or with specific messages exchanged over an already initialized communication channel. Both per-message authentication and encryption mechanisms can be activated using the authentication and key exchange services. Messages passed between fibre channel network entities can be encrypted and authenticated using information provided during the authentication sequence. Security services such as per-message authentication, confidentiality, integrity protection, and anti-replay protection can be implemented.

Abstract: A distributed Fiber Channel over Ethernet (FCoE) Forwarder (FCF) and a distributed Fibre Channel Switch are described. The Distributed FCF is realized by instantiating respective connections between at least one Controlling FCF and a plurality of FCoE Data-Plane Forwarder (FDF) devices and between individual FDF devices. The Distributed FC Switch is realized by instantiating respective connections between at least one Controlling Switch and a plurality of FC Data-Plane Forwarder (FCDF) devices and between individual FCDF devices.

Abstract: A distributed Fiber Channel over Ethernet (FCoE) Forwarder (FCF) and a distributed Fiber Channel Switch are described. The Distributed FCF is realized by instantiating respective connections between at least one Controlling FCF and a plurality of FCoE Data-Plane Forwarder (FDF) devices and between individual FDF devices. The Distributed FC Switch is realized by instantiating respective connections between at least one Controlling Switch and a plurality of FC Data-Plane Forwarder (FCDF) devices and between individual FCDF devices. The components of the distributed FCF or Switch are collectively represented by a single Domain identifier (Domain_ID), and thus the distributed FCF or Switch appears to outside entities as a non-distributed FCF or Switch.

Abstract: Methods and apparatus are provided for improving both node-based and message-based security in a fiber channel network. Entity to entity authentication and key exchange services can be included in existing initialization messages used for introducing fiber channel network entities into a fiber channel fabric, or with specific messages exchanged over an already initialized communication channel. Both per-message authentication and encryption mechanisms can be activated using the authentication and key exchange services. Messages passed between fiber channel network entities can be encrypted and authenticated using information provided during the authentication sequence. Security services such as per-message authentication, confidentiality, integrity protection, and anti-replay protection can be implemented.

Abstract: An example method for direct data placement over User Datagram Protocol (UDP) in a network environment is provided and includes creating a queue pair (QP) for unreliable datagram transport in Infiniband according to an OpenFabrics Application Programming Interface (API) specification, mapping data generated by an application for transmission over the QP in a network environment to a UDP datagram, and passing the UDP datagram to a network interface for transmission.

Abstract: An example method for Fibre Channel over Ethernet (FCoE) support in a Transparent Interconnection of Lots of Links (TRILL) network environment is provided and includes configuring at least two virtual storage area networks (SANs) in a TRILL network environment, which includes a plurality of leaf switches and spine switches, with each leaf switch being configured as a FCoE forwarder (FCF) enabled to forward frames according to FCoE protocol, and configuring at least an edge broadcast domain and a transport broadcast domain for each virtual SAN at each leaf switch. The edge broadcast domain includes end device links between the leaf switch and one or more end devices, and the transport broadcast domain includes spine links between the leaf switch and the spine switches.

Abstract: An upgrade process is provided to upgrade first and second switches in a converged network handling storage area network traffic and data network traffic, in which the first and second switches are coupled to a host, e.g., a Fibre Channel over Ethernet (FCoE) via distributed network links, e.g., Virtual PortChannel links or Distributed Resilient Interconnect (DRNI) links. The first switch is isolated from the host so that all distributed network links traffic associated with the host is transferred to the second switch. The firmware of the first switch is upgraded while all distributed network links traffic associated with the host is handled by the second switch. The firmware of the second switch is upgraded is a similar manner while all distributed network links traffic associated with the host is handled by the first switch.

Abstract: Techniques are provided for performing discovery in a Fiber Channel over Ethernet (FCoE) network. An FCoE Node (ENode) discovers the FCoE Forwarders (FCFs) connected to its network segment by transmitting a solicitation message to the multicast MAC address “All-FCF-MACs”. All FCFs receive packets with this multicast MAC address including the solicitation message that announces the presence of the ENode. Each FCF replies with a unicast advertisement message that provides the ENode with a MAC address of the responding FCF. The ENode builds a list of the FCFs available on its network segment and may then establish a virtual link with one or more of the FCFs through a Fabric Login (FLOGI) exchange.