Page History

Platform Redundancy

Platform Redundancy

The 

Types of platform redundancy include:

• Server—The Server modules provide 1:1 redundancy with automatic switchover and no interruption to stable calls.
• Power—The 

  Spacevars
  0 product

  has no common power supplies; each server module is connected to both redundant AC or DC power feeds and handles its own DC conversion.
• Cooling—The

  Spacevars
  0 series

  has three fan modules and the 

  Spacevars
  0 series2

  four fan modules. The

  Spacevars
  0 product

  can operate indefinitely if one fan module fails.

For more information on installing the HA pairs, refer to Installing SBC Application.

Geographical Redundancy High Availability (GRHA)

The 

This feature is not configurable during software installation nor is it changeable during an upgrade.

Refer to Enabling Geographical Redundancy HA Mode to enable this feature.

Bond Link Monitoring

The

Enhanced Leadership Algorithm

When network issues prevent the 

HA Network Requirements

GRHA mode network requirements are listed below:

• 10G/1G bandwidth for direct and not direct cable connectionsThe HA ports are connected to the switches directly.
• The network connecting to the SBCs must support ARP monitoring.

HA Link Delays per HA Pair

The 

Network Requirements and Supported Configurations

The network requirements for GRHA includes:

• STP can be used, but must run RSTP (Rapid Spanning Tree). If Cisco STP is used, PortFast must be enabled.
• For VLAN configuration, you must use an access port (with tags stripped) to the SBC.
• For HA, two VLANs should be configured The SBC HA interfaces must be connected to the same VLAN in the switching network with separate paths between paired SBCs. The two ports of the HA interface must be isolated from each other.network must use transparent layer2 connections between the sites (switches).
• Ensure each Each SBC HA VLAN must be is network isolated to the attached SBCs.  from other attached SBC HAs.
• Any network or data outage exceeding 100 ms causes an HA link failover from active HA link to the backup. If the Dual failure on both links exceeds one second, it causes split brain.

Additional requirements

• one second, it causes split brain.

Additional requirements

• The VLAN
• The two ports of the HA interface are isolated from each other; attach them to tagged switch ports configured as two separate VLANs. If configured on the same VLAN, any network interruption that affects the VLAN interrupts the traffic on both HA ports, thus eliminating any benefit provided due to redundant ports.
• The two VLANs are configured in the switching network to use separate paths between the paired SBCs. Any overlap in paths introduces a single point of failure that could interrupt traffic on both HA ports simultaneously. This includes the switch to which each HA port is directly connected.
• The VLANs to which the SBC HA ports are port attached must contain only the paired SBCs. The other VLANs produce a false indication of connectivity. Specifically, the traffic generated by an ACME device attached to the same or a nearby switch may keep a Ribbon HA port active, despite the existence of a network outage that prevents end-to-end communication between the paired SBC
• PortFast or its equivalent is used to eliminate delays when ports are added/enabled. This especially applies to media interfaces. Without this feature, the STP-induced delays cause media drops that induces callers to hang up.
• The STP variant used in the switching network is robust enough to isolate interruptions to specific VLANs and network subsets. The original STP and later RSTP operate on the switched network, irrespective of VLANs. Even if HA ports are isolated on independent VLANs, a change in network topology or even a span outage could produce a significant interruption on both the HA legs simultaneously. Cisco-provided PVRST+MST provides the needed protections. GRHA allows physical partitioning of switching networks.
• Switching networks (configured without STP) or its variants are used if they can be guaranteed to have no loops in their topology. This guarantee applies to all VLANs as well as all untagged interfaces. Eliminating STP also removes issues related to convergence delays. However, most larger networks are at risk for inadvertent loops, so Ribbon does not recommend such configuration.
• The ARP interval for each HA port is fixed at 100 ms. Network interruptions longer than this interval causes a switchover between the two HA ports without impacting higher layer functions. The TIPC timer is fixed at 1 second.  The interruptions that affect both HA ports simultaneously for longer than 1 second results in a split-brain condition. Topology changes and other interruptions must not interrupt both HA ports at the same time.

Non-Disruptive Fail-Over

In a High Availability configuration with an active and standby (redundant) server where active server fails, switch-over is completely automatic preserving the integrity of stable calls.

A switch-over from active to redundant server can result in packet loss. Fax (and modem) calls are generally not tolerant to media interruptions. Despite the fact that some fax and modem calls may be preserved during a switch-over, it is not uncommon for fax machines and modems to terminate their transmissions as a result of a server switch-over.

SBC 7000 Port Redundancy and Link Detection

Port Redundancy Model

Each 

For a depiction of media port inter-connectivity in an HA configuration, see the Management and HA Port Connections diagram on page Connecting SBC 7000 Series Ethernet and Data Cables.

Terminology:

• Primary port: An Ethernet packet port that will attempt to become active if on an active CE. All four packet ports on the 52x0, the two packet ports on a 51x0 and two dedicated packet ports on the 7000 (MEDIA 0_P, MEDIA 1_P) are considered primary ports.
• Secondary port: An Ethernet packet port designated as an alternate for a specific on-board primary port. The 

  Spacevars
  0 series2

  contains one secondary port for each 10 GigE primary port (SBC 5xx0 servers do not have secondary ports). The primary and secondary port roles are static and not modifiable by the user. 

• Active port: An Ethernet packet port that is currently selected for use (e.g. for signaling, media, etc.); either a primary or secondary port on an active CE.

  Info
  title Note
  A port which is in the active state does not necessarily imply that is "up".

  
  

• Local standby port: A standby port on an active

  Spacevars
  0 series2

  CE providing redundancy protection to the currently active port.

• Standby port: A collective term for a local standby port on an active CE or any packet port on an inactive CE. Standby ports can provide protection for active ports.
• Enabled or Disabled ports: A packet port may be administratively enabled or disabled. A port that is disabled cannot be an active port. Packet ports on an inactive CE do not have their own distinct administrative state. They share this configured element with their counterpart on the active CE.

Link Detection Support

The 

The following probing mechanisms are available on the 

*  Address Resolution Protocol - Address Conflict Detection / Internet Control  Message Protocol Version 6 – Neighbor Unreachability Detection

ARP ACD/ICMPv6 NUD Methods for Standby Ports

IPv4 ARP ACD

If the destination address configured is an IPv4 address, then IPv4 probing is initiated by sending ARP probe requests and listening for the responses.

ARP request probes are sent with:

• Sender IP address of 0.0.0.0. The use of 0.0.0.0 is compatible with rfc 5227 on IPv4 Address Conflict Detection. This is convenient to use on standby ports since IP addresses are not assigned for standby ports.
• Sender hardware address containing the current local MAC address assigned to the sending port.
• Target IP address containing the configured target IP address to be probed.
• Target hardware address containing all zeros. The ARP request is sent on the LAN using L2 broadcast.

By default the SBC expects the target to respond to the ARP probe with an ARP response having an L2 unicast MAC as the DESTINATION and SOURCE. However you can configure the SBC to allow broadcast replies if your network includes devices that send them. See Link Detection - CLI for information on setting this configuration.

IPv6 ICMPv6 NUD

If the destination address configured is an IPv6 address, then IPv6 probing would be initiated using Neighbor Unreachability Detection mechanism (RFC 4861 section 7). This is based on Neighbor Solicitation and Neighbor Advertisement ICMPv6 messages.

Because these are IP packets, the 

Neighbor Solicitation messages are sent with:

• IP source address containing auto-generated link local IP address
• IP destination address containing configured target IP address
• ICMP layer target address containing configured target IP address
• ICMP layer source link layer address This field is left blank to prevent the target from learning our L2: L3 address binding from these probes.

The Neighbor Solicitation message is sent on the LAN via L2 unicast to the system with the target IP address.

The target can be expected to respond with a Neighbor Advertisement using L2 unicast. Received messages are validated per RFC 4861 section 7.1.2: Check that the S bit = 1 (solicited) and that the target address = our configured target IP address.

The impact of a link or switch failure on

ARP Implementation

Most switches, in their default behavior, forward ARP Probes without issue; however, if a switch has ARP inspection/filtering functionality enabled, that feature must not discard RFC5227 ARP Probes as “invalid” or it cannot be configured on ports connected to 

The 

ARP Probes are forwarded like any other traffic by most switches in their default behavior. Some switches have features (for example, Dynamic ARP Inspection, Dynamic ARP Protection, etc.) that, when enabled, discard “invalid” ARP packets. These features may incorrectly consider ARP Probes per RFC 5227 to be “invalid” ARP packets. If such a feature is enabled, the feature must not discard RFC5227 ARP Probes as “invalid” or it cannot be configured on the switch ports connected to 

By default the SBC expects the target to respond to the ARP probe with an ARP response having an L2 unicast MAC as the DESTINATION and SOURCE. However you can configure the SBC to allow broadcast replies if your network includes devices that send them. See Link Detection - CLI for information on setting this configuration.

Disabling ARP Probing on Standby Ports

The 

When the probeOnStandby flag is disabled, there is a possibility for a toggling situation when the Link Monitor on the active port detects a failure via ICMP ping to a destination, while on the standby packet port it can only use the physical health of the port. Therefore, once the port becomes standby, it can look healthy if the physical port is up; however, when it becomes active and fails to reach the configured destination, it looks unhealthy.

% set addressContext <addressContext_name> linkDetectionGroup <LDG_name> linkMonitor <name> probeOnStandby <disabled | enabled>

SBC 7000 Redundancy Performance

The different aspects of

• 1K profile – Comprises 1,000 instances each of address contexts, zones, interface groups, interfaces, signaling ports, and trunk groups.
• 4K profile – Comprises 4,000 instances each of address contexts, zones, interface groups, interfaces, signaling ports, and trunk groups.
• 4/40K profile – Comprises 4,000 instances each of address contexts, zones, interface groups, interfaces and signaling ports; and 40,000 trunk groups.

HA Restoration

The

HA Connectivity Requirements

To meet the redundancy performance requirements, HA connectivity between the active and standby nodes in a 

Media Signaling and Management Recovery

The 

Signaling

After a fault is detected and the system switches over, the behavior of the 

• Call and registration signaling are accepted and responded to within five seconds of switch-over. Note that this does not indicate that calls will be accepted at this time. However, within this time window they are cleanly rejected so upstream nodes are not unduly burdened with retransmissions, and are then able to quickly re-route the calls to alternate servers.
• Most new calls and registrations are accepted within 15 seconds of switch-over. Not all calls may be accepted at this point. Depending on the load at the time of the switch-over, the box may control congestion by throttling the call accepts until the switch-over cleanup is complete.
• Full call and registration acceptance is achieved within two minutes of switch-over.

Management Interfaces

Management interfaces are available within two seconds after a switch-over. Specifically, it is possible to login through the management interfaces on the activated standby within two seconds.

Media Recovery

The media recovery time depends on the failure mode and whether the calls are pass-through or transcoded. The following table shows the worst-case

Port Switchover Latency After Hardware or Link Detection Failure

The following table lists the maximum time for the