Chapter 4: Redundancy
NetEnforcer AC-2500 Hardware Guide
4-14
Connecting the NetEnforcer in Active
Redundancy
Line 1 (and 2 in the AC-2540)
is used to pass actual traffic – these interfaces will be
used to connect the NetEnforcers to the corresponding switches or routers.
Line 3 (and 4 in the AC-2540)
is used to duplicate traffic and pass it to the second
NetEnforcer. Line 3 duplicates the traffic of Line 1 and Line 4 duplicates the traffic of
Line 2. Traffic that is passed between NetEnforcers is not sent to adjacent network
devices – it is only used for monitoring and classification purposes.
Active Redundancy for the AC-2520
In this configuration the operator uses two links to access the Internet. To achieve
redundancy, each link will use a separate switch and router. Each link requires an AC-
2520 unit and a bypass unit to enable Active Redundancy.
Each link has a similar structure. The switch port is connected to the Internal port of the
first line card’s bypass unit. The corresponding port is connected to the Internal port of
the AC-2520. The External port of the AC-2520 is connected to the external port of the
bypass unit while its corresponding port connects to the router. The other ports of the
bypass unit remain unconnected. The two AC-2520 cross-connect one to another with
two links to enable synchronization of traffic between the two units.
Active Redundancy for the AC-2540
This configuration is suitable for a high-availability fully meshed environment, where
operators use two switches and two routers to connect their networks to the Internet.
Each switch connects to the two routers to provide redundancy.
In this scenario, two AC-2540 units are installed together with two bypass units.
•
The two AC-2540 units cross-connect one to another with four links to
synchronize the traffic information between themselves.
•
Each AC-2540 unit connects via its corresponding bypass unit to the two
switches (via two internal interfaces) and to a router (via two external interfaces).