Access control list endpoint implementation

摘要

A method, system, and computer program product for providing direct communications between FCoE endpoint devices within the same fibre channel network zone. A direct fibre channel (DFC) utility provides an FCoE stack with an exclusive ability to define an Ethertype within an ethertype field of an Ethernet packet with FCoE. In addition, the DFC utility enables storage of access control lists (ACLs) containing allowed destination addresses and allowed source addresses within the adapter of an FCoE endpoint. Additionally, the DFC utility initiates an exchange of messages with an Ethernet switch to determine a feasibility of establishing direct connections between endpoints. In particular, the DFC utility determines whether the Ethernet switch supports FCoE ACL checking. Further, the DFC utility creates a zone ID for the FCoE endpoint device. The DFC utility allows direct communication between FCoE endpoints within the same fibre zone.