Fibre channel zoning hardware for directing a data packet to an external processing device
First Claim
1. A Fibre Channel device for use in a Fibre Channel fabric, the fabric coupling a plurality of external data devices, the fabric configured into at least two zones, where the external data devices are allowed to exchange data packets only with external data devices in the same zone, the Fibre Channel device enforcing the zones in hardware, the Fibre Channel device comprising:
- a receiving port for coupling to the fabric and receiving data packets;
a first transmitting port for coupling to the fabric and transmitting data packets;
a second transmitting port for coupling to an external data packet processing device; and
device logic connecting said receiving port and said first and second transmitting ports, wherein said device logic includes;
zoning data storage for storing configuration data indicative of the zone configuration of the fabric;
a comparison circuit connected to said zoning data storage for comparing at least a portion of the initial fields of a received data packet with said stored configuration data and providing an output; and
an action circuit connected to said comparison circuit and utilizing said comparison circuit output to determine an action to be performed on the received data packet, wherein the action determined by said action circuit is to provide a data packet to said second transmitting port for transmission of the data packet to the external data packet processing device.
7 Assignments
0 Petitions
Accused Products
Abstract
The present invention provides a system and a method for filtering a plurality of frames sent between devices coupled to a fabric by Fibre Channel connections. Frames are reviewed against a set of individual frame filters. Each frame filter is associated with an action, and actions selected by filter matches are prioritized. Groups of devices are “zoned” together and frame filtering ensures that restrictions placed upon communications between devices within the same zone are enforced. Zone group filtering is also used to prevent devices not within the same zone from communicating. Zoning may also be used to create LUN-level zones, protocol zones, and access control zones. In addition, individual frame filters may be created that reference selected portions of frame header or frame payload fields.
-
Citations
63 Claims
-
1. A Fibre Channel device for use in a Fibre Channel fabric, the fabric coupling a plurality of external data devices, the fabric configured into at least two zones, where the external data devices are allowed to exchange data packets only with external data devices in the same zone, the Fibre Channel device enforcing the zones in hardware, the Fibre Channel device comprising:
-
a receiving port for coupling to the fabric and receiving data packets;
a first transmitting port for coupling to the fabric and transmitting data packets;
a second transmitting port for coupling to an external data packet processing device; and
device logic connecting said receiving port and said first and second transmitting ports, wherein said device logic includes;
zoning data storage for storing configuration data indicative of the zone configuration of the fabric;
a comparison circuit connected to said zoning data storage for comparing at least a portion of the initial fields of a received data packet with said stored configuration data and providing an output; and
an action circuit connected to said comparison circuit and utilizing said comparison circuit output to determine an action to be performed on the received data packet, wherein the action determined by said action circuit is to provide a data packet to said second transmitting port for transmission of the data packet to the external data packet processing device. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A Fibre Channel switch for use in a Fibre Channel fabric, the fabric coupling a plurality of external data devices, the fabric configured into at least two zones, where the external devices are allowed to exchange data packets only with external data devices in the same zone, the Fibre Channel switch enforcing the zones in hardware, the Fibre Channel switch comprising:
-
a microprocessor;
local memory connected to said microprocessor; and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes;
a receiving port for coupling to the fabric and receiving data packets;
a first transmitting port for coupling to the fabric and transmitting data packets;
a second transmitting port for coupling to an external data packet processing device; and
device logic connecting said receiving port and said first and second transmitting ports, wherein said device logic includes;
zoning data storage for storing configuration data indicative of the zone configuration of the fabric;
a comparison circuit connected to said zoning data storage for comparing at least a portion of the initial fields of a received data packet with said stored configuration data and providing an output; and
an action circuit connected to said comparison circuit and utilizing said comparison circuit output to determine an action to be performed on the received data packet, wherein the action determined by said action circuit is to provide a data packet to said second transmitting port for transmission of the data packet to the external data packet processing device. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19, 20, 21, 22)
-
-
23. A Fibre Channel fabric comprising:
-
a plurality of external data devices;
a first Fibre Channel switch coupled to a first portion of said plurality of external data devices; and
a second Fibre Channel switch coupled to a second portion of said plurality of data external devices and coupled to said first Fibre Channel switch, wherein the fabric is configured into at least two zones, where said external data devices are allowed to exchange data packets only with external data devices in the same zone and wherein said first and second Fibre Channel switches enforce the zones in hardware, each of said first and second Fibre Channel switches including;
a microprocessor;
local memory connected to said microprocessor; and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes;
a receiving port for coupling to the fabric and receiving data packets;
a first transmitting port for coupling to the fabric and transmitting data packets;
a second transmitting port for coupling to an external data packet processing device; and
device logic connecting said receiving port and said first and second transmitting ports, wherein said device logic includes;
zoning data storage for storing configuration data indicative of the zone configuration of the fabric;
a comparison circuit connected to said zoning data storage for comparing at least a portion of the initial fields of a received data packet with said stored configuration data and providing an output; and
an action circuit connected to said comparison circuit and utilizing said comparison circuit output to determine an action to be performed on the received data packet, wherein the action determined by said action circuit is to provide a data packet to said second transmitting port for transmission of the data packet to the external data packet processing device. - View Dependent Claims (24, 25, 26, 27, 28, 29, 30, 31, 32, 33)
-
-
34. A Fibre Channel device for use in a Fibre Channel fabric, the fabric coupling a plurality of external data devices, the fabric configured into at least two zones, where the external data devices are allowed to exchange data packets only with external data devices in the same zone, the Fibre Channel device enforcing the zones in hardware, the Fibre Channel device comprising:
-
a receiving port for coupling to the fabric and receiving data packets;
a first transmitting port for coupling to the fabric and transmitting data packets;
a second transmitting port for coupling to an external data packet processing device; and
device logic connecting said receiving port and said first and second transmitting ports, wherein said device logic includes;
zoning data storage for storing configuration data indicative of the zone configuration of the fabric;
a comparison circuit connected to said zoning data storage for comparing at least a portion of the initial fields of a received data packet with said stored configuration data and providing an output; and
an action circuit connected to said comparison circuit and utilizing said comparison circuit output to determine an action to be performed on the received data packet, wherein the action determined by said action circuit is to provide a data packet to said second transmitting port for transmission of the data packet to the external data packet processing device, and wherein said zoning data storage includes;
a data packet register for storing portions of a data packet;
a first memory storing filtering information relating to a first portion of a data packet;
a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a second memory storing filtering information relating to a second portion of the data packet;
a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a third memory coupled to said first comparator indicating group information based on said first comparator output; and
a fourth memory coupled to said second comparator indicating group information based on said second comparator output. - View Dependent Claims (35, 36, 37, 38, 39, 40, 41, 42, 43)
-
-
44. A Fibre Channel switch for use in a Fibre Channel fabric, the fabric coupling a plurality of external data devices, the fabric configured into at least two zones, where the external devices are allowed to exchange data packets only with external data devices in the same zone, the Fibre Channel switch enforcing the zones in hardware, the Fibre Channel switch comprising:
-
a microprocessor;
local memory connected to said microprocessor; and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes;
a receiving port for coupling to the fabric and receiving data packets;
a first transmitting port for coupling to the fabric and transmitting data packets;
a second transmitting port for coupling to an external data packet processing device; and
device logic connecting said receiving port and said first and second transmitting ports, wherein said device logic includes;
zoning data storage for storing configuration data indicative of the zone configuration of the fabric;
a comparison circuit connected to said zoning data storage for comparing at least a portion of the initial fields of a received data packet with said stored configuration data and providing an output; and
an action circuit connected to said comparison circuit and utilizing said comparison circuit output to determine an action to be performed on the received data packet, wherein the action determined by said action circuit is to provide a data packet to said second transmitting port for transmission of the data packet to the external data packet processing device, and wherein said zoning data storage includes;
a data packet register for storing portions of a data packet;
a first memory storing filtering information relating to a first portion of a data packet;
a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a second memory storing filtering information relating to a second portion of the data packet;
a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a third memory coupled to said first comparator indicating group information based on said first comparator output; and
a fourth memory coupled to said second comparator indicating group information based on said second comparator output. - View Dependent Claims (45, 46, 47, 49, 50, 51, 52, 53)
-
-
48. The Fibre Channel switch of claim 442, wherein said device logic further includes:
-
a memory for storing data packets;
receiver logic connected to said receiving port and said memory for receiving a data packet from said receiving port and storing the data packet in said memory; and
transmitter logic connected to said first and second transmitting ports and said memory for retrieving the data packet from said memory and providing the data packet to said first or second transmitting port.
-
-
54. A Fibre Channel fabric comprising:
-
a plurality of external data devices;
a first Fibre Channel switch coupled to a first portion of said plurality of external data devices; and
a second Fibre Channel switch coupled to a second portion of said plurality of data external devices and coupled to said first Fibre Channel switch, wherein the fabric is configured into at least two zones, where said external data devices are allowed to exchange data packets only with external data devices in the same zone and wherein said first and second Fibre Channel switches enforce the zones in hardware, each of said first and second Fibre Channel switches including;
a microprocessor;
local memory connected to said microprocessor; and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes;
a receiving port for coupling to the fabric and receiving data packets;
a first transmitting port for coupling to the fabric and transmitting data packets;
a second transmitting port for coupling to an external data packet processing device; and
device logic connecting said receiving port and said first and second transmitting ports, wherein said device logic includes;
zoning data storage for storing configuration data indicative of the zone configuration of the fabric;
a comparison circuit connected to said zoning data storage for comparing at least a portion of the initial fields of a received data packet with said stored configuration data and providing an output; and
an action circuit connected to said comparison circuit and utilizing said comparison circuit output to determine an action to be performed on the received data packet, wherein the action determined by said action circuit is to provide a data packet to said second transmitting port for transmission of the data packet to the external data packet processing device, and wherein said zoning data storage includes;
a data packet register for storing portions of a data packet;
a first memory storing filtering information relating to a first portion of a data packet;
a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a second memory storing filtering information relating to a second portion of the data packet;
a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
a third memory coupled to said first comparator indicating group information based on said first comparator output; and
a fourth memory coupled to said second comparator indicating group information based on said second comparator output. - View Dependent Claims (55, 56, 57, 58, 59, 60, 61, 62, 63)
-
Specification