Dell Configuration Guide for the S4048–ON System 9.14.2.6

• Enable DCBx on the switch before enabling the FIP Snooping feature.
• To enable the feature on the switch, configure FIP Snooping.
• To allow FIP frames to pass through the switch on all VLANs, enable FIP snooping globally on a switch.
• A switch can support a maximum eight VLANs. Configure at least one FCF/bridge-to-bridge port mode interface for any FIP snooping-enabled VLAN.
• You can configure multiple FCF-trusted interfaces in a VLAN.
• When you disable FIP snooping:
  • ACLs are not installed, FIP and FCoE traffic is not blocked, and FIP packets are not processed.

  • The existing per-VLAN and FIP snooping configuration is stored. The configuration is re-applied the next time you enable the FIP snooping feature.
• You must apply the CAM-ACL space for the FCoE region before enabling the FIP-Snooping feature. If you do not apply CAM-ACL space, the following error message is displayed:

  DellEMC(conf)#feature fip-snooping
  % Error: Cannot enable fip snooping. CAM Region not allocated for Fcoe.
  DellEMC(conf)#

To support FIP-Snooping and set CAM-ACL, usecam-acl l2acl 4 ipv4acl 4 ipv6acl 0 ipv4qos 2 l2qos 1 l2pt 0 ipmacacl 0 vman-qos 0 ecfmacl 0 fcoeacl 2 command.

CAM ACL Table

-- Chassis Cam ACL --
             Current Settings(in block sizes)
                   1 block = 128 entries
L2Acl        :         4
Ipv4Acl      :         4
Ipv6Acl      :         0
Ipv4Qos      :         2
L2Qos        :         1
L2PT         :         0
IpMacAcl     :         0
VmanQos      :         0
VmanDualQos  :         0
EcfmAcl      :         0
FcoeAcl      :         2
iscsiOptAcl  :         0
ipv4pbr      :         0
vrfv4Acl     :         0
Openflow     :         0
fedgovacl    :         0
nlbclusteracl:         0

st-sjc-s5000-29#