Highly-available deployment, Passive deployment – Force10 Networks PSeries 100-00055-01 User Manual

Page 21

Advertising
background image

P-Series Installation and Operation Guide, version 2.3.1.2

21

Highly-available Deployment

Use optical bypass switches with the P-Series for a highly-available, redundant deployment, as shown in

Figure 6

. Both the appliances have the same configuration so that in the event of a power failure on one

device, the other continues to operate, and the detection engine remains intact. In the event that both
devices experience a power failure, the traffic continues to flow through the bypass switches.

Figure 6

Optical Bypass

10-Gigabit

P0

P1

P-Series P10

10-Gigabit

P0

P1

fn90031mp

Highly-available Redundant Deployment

Passive Deployment

Enable passive mode (see

Command Line Reference on page 79

) with fiber taps in line for IDS

deployments.

Send traffic from one side of the tap to port P0 and traffic from the other side to port P1, as shown in

Figure 7

.

Aggregate traffic from both sides of the link to one port, as shown in

Figure 8

.

Aggregate traffic from both sides of the link to one port using a SPAN port, as shown in

Figure 9

.

Figure 7

Network Tap

P-Series P10

fn90032mp

P0

P1

10-Gigabit

10-Gigabit

Passive Deployment using a Network Tap

Advertising