Force10 Networks 100-00055-01 Inline Deployment, Fail-safe Deployment, Gigabit, P-Series P10

Inline Deployment

Use the P-Series for inline traffic inspection in IPS or firewall applications at 10-Gigabit line rate (Figure 4).

•For IPS deployment, no special configuration is needed; the P-Series is in inline IPS mode by default.

•For a firewall deployment, enable drop mode (see Command Line Reference on page 79).

Figure 4 P-Series Inline Deployment

10-Gigabit	10-Gigabit
Internet	LAN Core
	P-Series P10

10-Gigabit10-Gigabit

Campus Core/ Backbone

P-Series P10 Data Center

fn90029mp

Fail-safe Deployment

The P-Series hardware is fail-safe. In the event of a software exception or reboot, the card continues to function as it did before the event. In the event of a power failure, the hardware stops functioning, and traffic is dropped. When the appliance powers up again, all the traffic is allowed by default, and the card functions as before. Use an optical bypass switch in an inline deployment so that traffic continues to flow in the event of a power failure, as shown in Figure 5.

Figure 5 Fail-safe Behavior with Optical Bypass

10-Gigabit

Optical Bypass

10-Gigabit

P0

P1

P-Series P10 fn90030mp

20 Introduction