Allot NetEnforcer AC-1000 Series, Hardware Manual

Page: 82 / 97

Chapter 4: Redundancy
NetEnforcer AC-1000 Hardware Guide
4-18
Connecting the NetEnforcer in Active Redundancy
Line 1 (and 3 in the AC-1040)
is used to pass actual traffic – these interfaces will be
used to connect the NetEnforcers to the corresponding switches or routers.
Line 2 (and 4 in the AC-1040)
is used to duplicate traffic and pass it to the second
NetEnforcer. Traffic that is passed between NetEnforcers is not sent to adjacent network
devices – it is only used for monitoring and classification purposes.
Active Redundancy for the AC-1020
In this configuration the operator uses two links to access the Internet. To achieve
redundancy, each link will use a separate switch and router. Each link requires an AC-
1020 unit and a bypass unit to enable Active Redundancy.
Each link has a similar structure. The switch port is connected to the Internal port of the
first line card’s bypass unit. The corresponding port is connected to the Internal port of
the AC-1020. The External port of the AC-1020 is connected to the external port of the
bypass unit while its corresponding port connects to the router. The other ports of the
bypass unit remain unconnected. The two AC-1020 cross-connect one to another with
two links to enable synchronization of traffic between the two units.
Active Redundancy for the AC-1040
This configuration is suitable for a high-availability fully meshed environment, where
operators use two switches and two routers to connect their networks to the Internet.
Each switch connects to the two routers to provide redundancy.
In this scenario, two AC-1040 units are installed together with two bypass units.
•
The two AC-1040 units cross-connect one to another with four links to
synchronize the traffic information between themselves.
•
Each AC-1040 unit connects via its corresponding bypass unit to the two
switches (via two internal interfaces) and to a router (via two external interfaces).
•
The remaining interfaces of the bypass units remain unconnected.