Pseries Installation Guide

P-Series Installation and Operation Guide, version 2.3.1.2 21
Highly-available Deployment
Use optical bypass switches with the P-Series for a highly-available, redundant deployment, as shown in
Figure 6. Both the appliances have the same configuration so that in the event of a power failure on one
device, the other continues to operate, and the detection engine remains intact. In the event that both
devices experience a power failure, the traffic continues to flow through the bypass switches.
Figure 6
Optical Bypass
10-Gigabit
P0
P1
P-Series P10
10-Gigabit
P0
P1
fn90031mp
Highly-available Redundant Deployment
Passive Deployment
Enable passive mode (see Command Line Reference on page 79) with fiber taps in line for IDS
deployments.
• Send traffic from one side of the tap to port P0 and traf
fic from the other side to port P1, as shown in
Figure 7.
• Aggregate traffic from both sides of the link to one port, as show
n in Figure 8.
• Aggregate traffic from both sides of the link to one port using a SPAN port, as shown in Figure 9.
Figure 7
Network Tap
P-Series P10
fn90032mp
P0 P1
10-Gigabit
10-Gigabit
Passive Deployment using a Network Tap