Force10 Networks PSeries 100-00055-01 Manuel d'utilisateur télécharger pdf (Page 20)

20 Introduction

Inline Deployment

Use the P-Series for inline traffic inspection in IPS or firewall applications at 10-Gigabit line rate

(Figure 4).

• For IPS deployment, no special configuration is needed;

the P-Series is in inline IPS mode by default.

• For a firewall deployment, enable drop mode (see Command Line Reference on page 79).

Figure 4

10Gig

Data Center

PB-10GE-2P

P-Series P10

10-Gigabit

Internet

LAN Core

P-Series P10

10-Gigabit

Campus Core/

Backbone

fn90029m

Data Center

P-Series Inline Deployment

Fail-safe Deployment

The P-Series hardware is fail-safe. In the event of a software exception or reboot, the card continues to

function as it did before the event. In the event of a power failure, the hardware stops functioning, and

traffic is dropped. When the appliance powers up again, all the traffic is allowed by default, and the card

functions as before. Use an optical bypass switch in an inline deployment so that traffic continues to flow

in the event of a power failure, as shown in Figure 5.

Figure 5

Optical Bypass

10-Gigabit

P-Series P10

fn90030m

Fail-safe Behavior with Optical Bypass

1 2 ... 15 16 17 18 19 20 21 22 23 24 25 ... 131 132

Pas de commentaire

Force10 Networks PSeries 100-00055-01 Manuel d'utilisateur Page 20