US 7,352,740 B2Granted

Extent-based fibre channel zoning in hardware

AssigneeBrocade Communciations Systems, Inc.

InventorsRichard L. Hammons, David C. Banks

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention provides a system and a method for filtering a plurality of frames sent between devices coupled to a fabric by Fiber Channel connections. Frames are reviewed against a set of individual frame filters. Each frame filter is associated with an action, and actions selected by filter matches are prioritized. Groups of devices are “zoned” together and frame filtering ensures that restrictions placed upon communications between devices within the same zone are enforced. Zone group filtering is also used to prevent devices not within the same zone from communicating. Zoning may also be used to create LUN-level and extent-level zones, protocol zones, and access control zones. In addition, individual frame filters may be created that reference selected portions of frame header or frame payload fields.

Claims33

Dependent claims

A Fibre Channel device for use in a Fibre Channel fabric, the fabric coupling a plurality of external devices, the fabric configured into at least two zones, where the external devices are allowed to exchange data packets only with external devices in the same zone, the Fibre Channel device enforcing the zones in hardware, the Fibre Channel device comprising:

a receiving port for coupling to the fabric and receiving data packets;
a transmitting port for coupling to the fabric and transmitting data packets;
and
device logic connecting said receiving port and said transmitting port, wherein said device logic includes:
zoning data storage for storing configuration data indicative of the zone configuration of the fabric, including logical unit numbers (LUNs) and extents within such LUNs of the external devices allowed to exchange data packets;
a LUN and block fields comparison circuit connected to said zoning data storage for comparing the LUN and block fields of a received data packet with said stored configuration data and providing an output;
and
an action circuit connected to said LUN and block fields comparison circuit and utilizing said LUN and block fields comparison circuit output to determine an action to be performed on the received data packet.

5 more elements

A Fibre Channel switch for use in a Fibre Channel fabric, the fabric coupling a plurality of external devices, the fabric configured into at least two zones, where the external devices are allowed to exchange data packets only with external devices in the same zone, the Fibre Channel switch enforcing the zones in hardware, the Fibre Channel switch comprising:

a microprocessor;
local memory connected to said microprocessor;
and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes:
a receiving port for coupling to the fabric and receiving data packets;
a transmitting port for coupling to the fabric and transmitting data packets;
and
device logic connecting said receiving port and said transmitting port, wherein said device logic includes:
zoning data storage for storing configuration data indicative of the zone configuration of the fabric, including logical unit numbers (LUNs) and extents within such LUNs of the external devices allowed to exchange data packets;
a LUN and block fields comparison circuit connected to said zoning data storage for comparing the LUN and block fields of a received data packet with said stored configuration data and providing an output;
and
an action circuit connected to said LUN and block fields comparison circuit and utilizing said LUN and block fields comparison circuit output to determine an action to be performed on the received data packet.

9 more elements

A Fibre Channel fabric comprising:

a plurality of external devices;
a first Fibre Channel switch coupled to a first portion of said plurality of external devices;
and
a second Fibre Channel switch coupled to a second portion of said plurality of external devices and coupled to said first Fibre Channel switch,
wherein the fabric is configured into at least two zones, where said external devices are allowed to exchange data packets only with external devices in the same zone and wherein said first and second Fibre Channel switches enforce the zones in hardware, each of said first and second Fibre Channel switches including:
a microprocessor;
local memory connected to said microprocessor;
and
a Fibre Channel device connected to and controlled by said microprocessor, wherein said Fibre Channel device includes:
a receiving port for coupling to the fabric and receiving data packets;
a transmitting port for coupling to the fabric and transmitting data packets;
and
device logic connecting said receiving port and said transmitting port, wherein said device logic includes:
zoning data storage for storing configuration data indicative of the zone configuration of the fabric, including logical unit numbers (LUNs) and extents within such LUNs of the external devices allowed to exchange data packets;
a LUN and block fields comparison circuit connected to said zoning data storage for comparing the LUN and block fields of a received data packet with said stored configuration data and providing an output;
and
an action circuit connected to said LUN and block fields comparison circuit and utilizing said LUN and block fields comparison circuit output to determine an action to be performed on the received data packet.

14 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/425,556Filed 29 Apr 2003
Published: US 2004/0218593 A14 Nov 2004
Granted: 1 Apr 2008
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

H04L 63/102
For controlling access to devices or network resources: entity profiles
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L 63/104
For controlling access to devices or network resources: grouping of entities
H04L
Digital communication