Force10 Networks 100-00055-01 manual Highly-available Deployment, Passive Deployment

Highly-available Deployment

Use optical bypass switches with the P-Series for a highly-available, redundant deployment, as shown in Figure 6. Both the appliances have the same configuration so that in the event of a power failure on one device, the other continues to operate, and the detection engine remains intact. In the event that both devices experience a power failure, the traffic continues to flow through the bypass switches.

Figure 6 Highly-available Redundant Deployment

10-Gigabit

Optical Bypass

10-Gigabit

P0

P1P0

P1

P-Series P10 fn90031mp

Passive Deployment

Enable passive mode (see Command Line Reference on page 79) with fiber taps in line for IDS deployments.

•Send traffic from one side of the tap to port P0 and traffic from the other side to port P1, as shown in Figure 7.

•Aggregate traffic from both sides of the link to one port, as shown in Figure 8.

•Aggregate traffic from both sides of the link to one port using a SPAN port, as shown in Figure 9.

Figure 7 Passive Deployment using a Network Tap

Network Tap

10-Gigabit

10-Gigabit

P0

P1

P-Series P10 fn90032mp

P-Series Installation and Operation Guide, version 2.3.1.2 21