fc1/1 Host interface
Entry# Source ID Mask Destination ID Mask Action
1 010001 ffffff 010002(target1) ffffff Permit
2 010001 ffffff 010003(target2) ffffff Permit
3 010001 ffffff 010004(target3) ffffff Permit
4 000000 000000 000000 000000 Drop
fc1/2 - Target1 interface
Entry# Source ID Mask Destination ID Mask Action
1 010002 ffffff 010001(host) ffffff Permit
2 010002 ffffff 010003(target2) ffffff Permit
3 010002 ffffff 010004(target3) ffffff Permit
4 000000 000000 000000 000000 Drop
fc1/3 - Target2 interface
Entry# Source ID Mask Destination ID Mask Action
1 010003 ffffff 010001(host) ffffff Permit
2 010003 ffffff 010002(target1) ffffff Permit
3 010003 ffffff 010004(target3) ffffff Permit
4 000000 000000 000000 000000 Drop
fc1/4 - Target3 interface
Entry# Source ID Mask Destination ID Mask Action
1 010004 ffffff 010001(host) ffffff Permit
2 010004 ffffff 010002(target1) ffffff Permit
3 010004 ffffff 010003(target2) ffffff Permit
4 000000 000000 000000 000000 Drop
The above example demonstrates that the number of TCAM entries consumed by a zone (N) is equal to
N*(N-1). So, a zone with four members would have used a total of 12 TCAM entries (4*3 = 12).
The above example shows two entries in each of the target interfaces (fc1/2-fc1/4) that are probably not needed
since it is usually not advantageous to zone multiple targets together. For example, in fc1/2, there is an entry
that permits Target1 to communicate with Target2, and an entry that permits Target1 to communicate with
Target3.
As these entries are not needed and could even be detrimental, they should be avoided. You can avoid the
addition of such entries by using single-initiator or single-target zones (or use Smart Zoning).
If the same two devices are present in more than one zone in a zone set, TCAM programming will not be
repeated.
Note
The following example shows a zone that is changed to three separate zones:
zone1
member host (FCID 010001)
member target1 (FCID 010002)
zone2
member host (FCID 010001)
member target2 (FCID 010003)
zone3
member host (FCID 010001)
member target3 (FCID 010004)
In such a scenario, the following is the ACL programming:
fc1/1 - Host interface - This would look the same
Entry# Source ID Mask Destination ID Mask Action
1 010001 ffffff 010002(target1) ffffff Permit
2 010001 ffffff 010003(target2) ffffff Permit
3 010001 ffffff 010004(target3) ffffff Permit
Cisco MDS 9000 Series Fabric Configuration Guide, Release 8.x
140
Configuring and Managing Zones
Zoning Types