Force10 Networks PSeries 100-00055-01 - Manual (Page 20)

20 Introduction
Inline Deployment
Use the P-Series for inline traffic inspection in IPS or firewall applications at 10-Gigabit line rate
(
Figure 4 ).
• For IPS deployment, no special configuration is needed; the P-Series is in inline IPS mode by default.
• For a firewall deployment, enable drop mode (see Command Line Reference on page 79 ).
Figure 4
10Gig 10Gig Data Center PB-10GE-2P PB-10GE-2P
P-Series P10
10-Gigabit 10-Gigabit
Internet LAN Core
P-Series P10
10-Gigabit 10-Gigabit
Campus Core/
Backbone
fn90029mp
Data Center
P-Series Inline Deployment
Fail-safe Deployment
The P-Series hardware is fail-safe. In the event of a software exception or reboot, the card continues to
function as it did before the event. In the event of a power failure, the hardware stops functioning, and
traffic is dropped. When the appliance powers up again, all the traffic is allowed by default, and the card
functions as before. Use an optical bypass switch in an inline deployment so that traffic continues to flow
in the event of a power failure, as shown in
Figure 5 .
Figure 5
Optical Bypass
10-Gigabit
10-Gigabit
P0 P1
P-Series P10
fn90030mp
Fail-safe Behavior with Optical Bypass