Frame filtering of fibre channel packets

A Fibre Channel switch for use in a Fibre Channel fabric for filtering data packets, the fabric coupling a plurality of internal devices, the Fibre Channel switch comprising:

• a microprocessor;
• local memory connected to said microprocessor;
• and
• a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes:
• a data packet register for storing portions of a data packet;
• a first memory storing filtering information relating to a first portion of a data packet;
• a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
• a second memory storing filtering information relating to a second portion of the data packet;
• a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
• a third memory coupled to said first comparator indicating group information based on said first comparator output;
• a fourth memory coupled to said second comparator indicating group information based on said second comparator output;
• and
• a comparison circuit coupled to said third and fourth memories to determine the presence of any overlap in said indicated group information and providing an output indicative thereof.

A Fibre Channel fabric comprising:

• a plurality of external devices;
• a first Fibre Channel switch coupled to a first portion of said plurality of external devices;
• and
• a second Fibre Channel switch coupled to a second portion of said plurality of external devices and coupled to said first Fibre Channel switch,
• wherein the fabric is configured into at least two zones, where said external devices are allowed to exchange data packets only with external devices in the same zone and wherein said first and second Fibre Channel switches enforce the zones in hardware, each of said first and second Fibre Channel switches including::
• a microprocessor;
• local memory connected to said microprocessor;
• and
• a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes:
• a data packet register for storing portions of a data packet;
• a first memory storing filtering information relating to a first portion of a data packet;
• a first comparator coupled to said first memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
• a second memory storing filtering information relating to a second portion of the data packet;
• a second comparator coupled to said second memory and said data packet register comparing said information to the data packet and providing an output indicative thereof;
• a third memory coupled to said first comparator indicating group information based on said first comparator output;
• a fourth memory coupled to said second comparator indicating group information based on said second comparator output;
• and
• a comparison circuit coupled to said third and fourth memories to determine the presence of any overlap in said indicated group information and providing an output indicative thereof.

A method device for filtering Fibre Channel data packets, the method comprising the steps of:

• storing portions of a data packet;
• storing filtering information relating to a first portion of a data packet;
• comparing said filtering information relating to the first portion of the data packet to said stored portions of the data packet and providing an output indicative thereof;
• storing filtering information relating to a second portion of the data packet;
• comparing said filtering information relating to the second portion of the data packet to said stored portions of the data packet and providing an output indicative thereof;
• indicating group information based on said first comparison output;
• indicating group information based on said second comparison output;
• and
• determining the presence of any overlap in said indicated group information and providing an output indicative thereof.