Frame filtering of fibre channel packets
First Claim
1. A Fibre Channel device for use in a Fibre Channel fabric for filtering data packets, the fabric coupling a plurality of internal devices, the Fibre Channel device comprising:
- a data packet register for storing portions of a data packet;
a first memory storing filtering information relating to a first portion of a data packet;
a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a second memory storing filtering information relating to a second portion of the data packet;
a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a third memory coupled to said first comparator indicating group information based on said first comparator output;
a fourth memory coupled to said second comparator indicating group information based on said second comparator output; and
a comparison circuit coupled to said third and fourth memories to determine the presence of any overlap in said indicated group information and providing an output indicative thereof.
7 Assignments
0 Petitions
Accused Products
Abstract
The present invention provides a system and a method for filtering a plurality of frames sent between devices coupled to a fabric by Fiber Channel connections. Frames are reviewed against a set of individual frame filters. Each frame filter is associated with an action, and actions selected by filter matches are prioritized. Groups of devices are “zoned” together and frame filtering ensures that restrictions placed upon communications between devices within the same zone are enforced. Zone group filtering is also used to prevent devices not within the same zone from communicating. Zoning may also be used to create LUN-level zones, protocol zones, and access control zones. In addition, individual frame filters may be created that reference selected portions of frame header or frame payload fields.
-
Citations
66 Claims
-
1. A Fibre Channel device for use in a Fibre Channel fabric for filtering data packets, the fabric coupling a plurality of internal devices, the Fibre Channel device comprising:
-
a data packet register for storing portions of a data packet;
a first memory storing filtering information relating to a first portion of a data packet;
a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a second memory storing filtering information relating to a second portion of the data packet;
a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a third memory coupled to said first comparator indicating group information based on said first comparator output;
a fourth memory coupled to said second comparator indicating group information based on said second comparator output; and
a comparison circuit coupled to said third and fourth memories to determine the presence of any overlap in said indicated group information and providing an output indicative thereof. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51)
-
-
18. A Fibre Channel switch for use in a Fibre Channel fabric for filtering data packets, the fabric coupling a plurality of internal devices, the Fibre Channel switch comprising:
-
a microprocessor;
local memory connected to said microprocessor; and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes;
a data packet register for storing portions of a data packet;
a first memory storing filtering information relating to a first portion of a data packet;
a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a second memory storing filtering information relating to a second portion of the data packet;
a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a third memory coupled to said first comparator indicating group information based on said first comparator output;
a fourth memory coupled to said second comparator indicating group information based on said second comparator output; and
a comparison circuit coupled to said third and fourth memories to determine the presence of any overlap in said indicated group information and providing an output indicative thereof.
-
-
35. A Fibre Channel fabric comprising:
-
a plurality of external devices;
a first Fibre Channel switch coupled to a first portion of said plurality of external devices; and
a second Fibre Channel switch coupled to a second portion of said plurality of external devices and coupled to said first Fibre Channel switch, wherein the fabric is configured into at least two zones, where said external devices are allowed to exchange data packets only with external devices in the same zone and wherein said first and second Fibre Channel switches enforce the zones in hardware, each of said first and second Fibre Channel switches including;
;
a microprocessor;
local memory connected to said microprocessor; and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes;
a data packet register for storing portions of a data packet;
a first memory storing filtering information relating to a first portion of a data packet;
a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a second memory storing filtering information relating to a second portion of the data packet;
a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a third memory coupled to said first comparator indicating group information based on said first comparator output;
a fourth memory coupled to said second comparator indicating group information based on said second comparator output; and
a comparison circuit coupled to said third and fourth memories to determine the presence of any overlap in said indicated group information and providing an output indicative thereof.
-
-
52. A method device for filtering Fibre Channel data packets, the method comprising the steps of:
-
storing portions of a data packet;
storing filtering information relating to a first portion of a data packet;
comparing said filtering information relating to the first portion of the data packet to said stored portions of the data packet and providing an output indicative thereof;
storing filtering information relating to a second portion of the data packet;
comparing said filtering information relating to the second portion of the data packet to said stored portions of the data packet and providing an output indicative thereof;
indicating group information based on said first comparison output;
indicating group information based on said second comparison output; and
determining the presence of any overlap in said indicated group information and providing an output indicative thereof. - View Dependent Claims (53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66)
-
Specification