Systems and methods for hard zoning in networks
View Patent ↗Method and system for a network device configured to control access to other devices in a network is provided. The network device includes a port configured to receive a frame. The port includes a plurality of sub-ports configured to operate as independent ports for sending and receiving frames using one of a plurality of network links at a plurality of rates and complying with a plurality of protocols. The network device also includes a source address look up table (ALUT) and a destination address look up table (LLUT), wherein when the frame is received the network device is configured to compare a source identifier of the frame and a destination identifier of the frame to the ALUT and the LLUT. When one ALUT table entry matches the source identifier of the frame, the network device outputs a bit map of zones based on the source identifier of the frame, compares the output bit map of zones with a zone bit map of the LLUT, and when there are any matching bits between the two maps, transmits the frame.
1. A machine-implemented method for controlling access to network devices in a network, the method comprising:
receiving a frame at a port of one of the network devices; wherein the port includes a plurality of sub-ports configured to operate as independent ports for sending and receiving frames using one of a plurality of network links at a plurality of rates and complying with a plurality of protocols;
sending a source identifier of the frame and a destination identifier of the frame to a source address look up table (ALUT) and a destination address look up table (LLUT);
comparing the source identifier of the frame with entries in the ALUT;
outputting a bit map of zones based on the source identifier of the frame when one ALUT table entry matches the source identifier of the frame;
comparing the output bit map of zones with a zone bit map of the LLUT; and
transmitting the frame when there are any matching bits between the two maps.
2. The method of claim 1 , further comprising: rejecting the frame when no ALUT table entries match the source identifier of the frame.
3. The method of claim 2 , further comprising: presenting the rejected frame to a switch element processor, and the processor sending a reject response to a source of the rejected frame.
4. The method of claim 1 , further comprising: rejecting the frame when multiple ALUT table entries match the source identifier of the frame.
5. The method of claim 4 , further comprising: presenting the rejected frame to a switch element processor, and the processor sending a reject response to a source of the rejected frame.
6. The method of claim 1 , further comprising: determining whether the frame needs to be translated from a first protocol to a second protocol.
7. The method of claim 6 , further comprising if translation is needed, translating the frame from the first protocol to the second protocol.
8. The method of claim 7 , wherein the first protocol is Fibre Channel and the second protocol is Fibre Channel over Ethernet (FCoE), or vice versa.
9. The method of claim 1 , wherein comparing the source identifier of the frame with entries in the ALUT comprises hashing or using associative memory hardware.
10. The method of claim 1 , wherein the ALUT and the LLUT are located in a common area of the port.
11. A switch element configured to control access to devices in a network, the switch element comprising:
a port configured to receive a frame; wherein the port includes a plurality of sub-ports configured to operate as independent ports for sending and receiving frames using one of a plurality of network links at a plurality of rates and complying with a plurality of protocols;
a source address look up table (ALUT) and a destination address look up table (LLUT), wherein when the frame is received the switch element is configured to compare a source identifier of the frame and a destination identifier of the frame to the ALUT and the LLUT;
wherein when one ALUT table entry matches the source identifier of the frame, the switch element outputs a bit map of zones based on the source identifier of the frame, compares the output bit map of zones with a zone bit map of the LLUT, and when there are any matching bits between the two maps, transmits the frame.
12. The switch element of claim 11 , wherein when no ALUT table entries match the source identifier of the frame, the switch element rejects the frame.
13. The switch element of claim 12 , wherein the switch element presents the rejected frame to a switch element processor, and the processor sends a reject response to a source of the rejected frame.
14. The switch element of claim 11 , wherein when multiple ALUT table entries match the source identifier of the frame, the switch element rejects the frame.
15. The switch element of claim 14 , wherein the switch element presents the rejected frame to a switch element processor, and the processor sends a reject response to a source of the rejected frame.
16. The switch element of claim 11 , wherein the switch element determines whether the frame needs to be translated from a first protocol to a second protocol.
17. The switch element of claim 16 , wherein when translation is needed, the switch element translates the frame from the first protocol to the second protocol.
18. The switch element of claim 17 , wherein the first protocol is Fibre Channel and the second protocol is Fibre Channel over Ethernet (FCoE), or vice versa.
19. The switch element of claim 11 , wherein comparing the source identifier of the frame with entries in the ALUT comprises hashing or using associative memory hardware.
20. The switch element of claim 11 , wherein the ALUT and the LLUT are located in a common area of the port.