公开(公告)号：US09219638B2

公开(公告)日：2015-12-22

申请号：US13685435

申请日：2012-11-26

Applicant: Cisco Technology, Inc.

Inventor： Silvano Gai ,  Claudio DeSanti ,  James Paul Rivers

IPC: G06F7/04 ,  H04L12/24 ,  H04L29/06

CPC classification number: H04L41/00 ,  H04L63/101

Abstract: This document discusses, among other things, applying network policy at a network device. In an example embodiment fiber channel hard zoning information may be received that indicates whether a fiber channel frame is permitted to be communicated between two fiber channel ports. Some example embodiments include identifying a media access control addresses associated with the fiber channel ports. An example embodiment may include generating one or more access control entries based on the fiber channel identifications of the fiber channel ports and the zoning information. The access control entries may be distributes to an Ethernet port to be inserted into an existing access control list and used to enforce a zoning policy upon fiber channel over Ethernet frames.

Abstract translation: 本文件还讨论了在网络设备上应用网络策略。 在示例实施例中，可以接收指示光纤信道帧是否被允许在两个光纤信道端口之间传送的光纤信道硬分区信息。 一些示例性实施例包括识别与光纤通道端口相关联的媒体访问控制地址。 示例性实施例可以包括基于光纤信道端口和分区信息的光纤信道标识来生成一个或多个接入控制条目。 访问控制条目可以被分发到以太网端口以插入现有的访问控制列表中，并且用于在以太网帧上的光纤信道上实施分区策略。