Fibre channel traffic redirect scheme using access control lists

Disclosed are methods and apparatus for redirecting fiber channel data that is transmitted between a first and a second node, such as a host and target, in a storage area network (SAN) to an intelligent node that facilitates implementation of a service on such redirected data. Such redirection is provided transparently with respect to the first and second nodes without significantly reconfiguring the existing infrastructure of the first and second nodes. In a specific Fiber Channel implementation, the redirection is accomplished without rewiring any of the nodes in the network fabric or reconfiguring zones or virtual storage area networks (VSANs). In general, such redirection is accomplished by rewriting the data as it traverses on a path between the first and second node towards an original destination (e.g., the first or second node) so that the data is redirected to an intelligent node. The intelligent node then facilitates implementation of a service on such redirected data and then forwards the serviced data back to its original destination. In one example, setup of this redirection function is accomplished simply by making a request to a network device (e.g., a host and/or target switch) in the first and second node's communication path, where the request identifies the first node, the second node, and the intelligent node.