Redundant Ethernet MPLS VPN

Properly securing a redundant Ethernet MPLS VPN

Redundant Ethernet MPLS VPN: what counts

A failure in the Ethernet MPLS VPN can have serious consequences. Redundancy is crucial, especially for companies with high availability requirements. Depending on budget and risk, various backup options can be implemented to keep operations stable.

In a nutshell:

  • Media redundancy: Combination of different line media such as fiber optic copper LTE or radio relay
  • Router redundancy: Use of several routers with HSRP to compensate for failures of individual devices
  • Separate house supply: Physically separate cable routes prevent interruptions during construction work
  • Carrier redundancy: protection by different network operators and separate backbones
  • Cost assessment: Cost depends on bandwidth availability and desired SLA level

The solution: Companies should carefully examine how much downtime is tolerable and which redundancy strategy best suits the network design. This is the only way to guarantee a genuine no single point of failure.

What this article covers: which redundancy your network really needs and how media redundancy, router redundancy, a separate house supply and carrier redundancy work together. The key question: how well is your Ethernet MPLS VPN protected against network outages and disruptions?

What redundancy against network outage do I need?

What happens if a line or even the central node of my Ethernet MPLS VPN goes down? What is the maximum time I can be offline before my company suffers damage? Admittedly, there are companies in which this question plays a somewhat subordinate role. The reasons for this may lie in the budget or the fact that you can be offline for up to a day without suffering any damage. But what do companies do that are obliged to be almost permanently available or are subject to further industry-specific requirements?

Depending on requirements or conditions, a company must therefore address the issue of redundancy. This applies both to data transfer and, in the age of “All IP“, to telephony. The following overview will help you to quickly find the right option for you. You are probably familiar with some of the terms carriers use these days, such as gold, silver, protected or simply backup. These terms describe the type of backup or SLA. However, as these are carrier-specific terms, we will dispense with them here and reduce them to what they actually mean. These options are available.

Media redundancy

It is best to connect your locations via different line media. If, for example, the fiber optic network fails due to a fiber break, your redundantly connected location will continue to be supplied via copper backup. The following media are available:

  • Copper: Here the connection is available via xDSL and Ethernet up to 10 Mbit/s
  • Fiber optics: Offers one of the widest ranges of bandwidth with up to 10 Gbit/s. Fiber optic is either already available or can be developed.
  • LTE/Dual LTE: Here, too, there are fluctuations that are caused by the network operator’s expansion, but can also be found in the building shielding. With ideal availability, an upload of up to 12 Mbit/s can be achieved here.
  • WLL (Wireless Local Loop) or simply radio relay: Depending on availability, this is ideal for bandwidths from 10 Mbit/s.

Router redundancy

If you already secure one data line with a second data line on a router, you have a line backup. Unfortunately, however, you are not protected if this router fails, even if both lines are synchronized and active. This router redundancy results from the fact that you terminate each connection with a router, whereby both routers talk to each other via your LAN with HSRP and one automatically takes over the traffic should the other router fail or need to be replaced.

Separate house supply

This type of backup provides security in the event that the primary cable route is cut, for example due to civil engineering work. The probability of a simultaneous interruption on two separate sides of a building is very low. As a rule, the easiest way to achieve a separate building supply is to order your services on two different media, glass and copper, for example.

However, you will achieve higher availability if you have your building connected with fiber optics from two sides, if this has not already been done, and your services run node and edge disjoint. This means that these lines will not physically meet.

Carrier redundancy

Carrier redundancy is designed to protect you in the event that your primary network provider has a problem, such as a backbone failure. You can request your provider to provide your primary network with its own fiber and the backup via another provider (but only billed via one). The simplest example in this case would be to set up the primary network with your own optical fiber and the backup network with copper leased line redundantly via a third-party provider. This means that, in addition to carrier redundancy, you also have redundancy of the medium and the house feed. The medium can be either fiber optic or radio relay, which only has a positive effect on the availability of your network. Probably the best form of real backup is to secure a wired network with radio relay from a second provider. In this case, you are actually operating two networks actively, on two media, transferred to different routers, routed in two carrier backbones and have “no single point of failure”, as the saying goes.

Costs

The costs for your backup are heavily dependent on the following factors: Bandwidth and runtime, the availability of the solution and the effort required to implement it. Depending on the requirements, the backup can be a fraction of the cost of your primary network or even the same. It is also important to decide how high the fall height may be, i.e. how high the lowest bandwidth must or may be in order to maintain operations. Maintaining a backup just for the sake of it, which is of no use in the event of a fault or cannot be used at all, only generates costs.

How SAVECALL supports your redundancy

If you have any further questions on the subject of backup or redundancy of your Ethernet MPLS network, or if you need to fulfill a new requirement or SLA, please do not hesitate to contact us. Based on more than 80 carrier partnerships, we assess media, router, house-supply and carrier redundancy vendor-neutral and find the combination that matches your availability requirements, network design and budget.

Conclusion: real redundancy without a single point of failure

Real resilience only emerges when medium, router, house supply and carrier are considered together. Anyone who depends on their Ethernet MPLS VPN for business-critical operations combines these layers to match risk and budget and, ideally, secures two active networks over two media, two routers and two backbones. This is how a genuine no single point of failure is created.

Frank Frommknecht, Key Account Consultant at SAVECALL

Written by

Frank Frommknecht

Key Account Consultant, SAVECALL

Has supported companies for over 20 years in selecting and optimizing their connectivity solutions. His focus: making complex telecommunications understandable from the customer’s perspective and finding the right solution strategically.

Why

Selection & operation of worldwide connectivity & cloud infrastructure. Without vendor risk & unnecessary costs.

Sources

Frequently asked questions

Frequently asked questions about redundant Ethernet MPLS VPN

Why does an Ethernet MPLS VPN need redundancy?

A failure of the line or the central node can bring operations to a standstill. For companies with high availability requirements or industry-specific obligations, redundancy is therefore crucial, for data traffic as well as for telephony in the All-IP era. What matters is how much downtime is tolerable. From this you can derive which redundancy strategy best fits the network design and ensures a genuine no single point of failure.

What is media redundancy?

With media redundancy, locations are connected via different line media. If, for example, the fiber optic network fails due to a fiber break, a copper backup keeps the location supplied. The options include copper via xDSL and Ethernet up to 10 Mbit/s, fiber optics with up to 10 Gbit/s, LTE or dual LTE, and radio relay (WLL). Which combination makes sense depends on availability, required bandwidth and location.

How does router redundancy with HSRP work?

A pure line backup using two data lines on one router does not protect you if that single router fails, even with two active lines. With router redundancy, each connection terminates on its own router. Both routers communicate over the LAN using HSRP. If one router fails or has to be replaced, the other automatically takes over the traffic. This removes the device itself as a single point of failure.

What does a separate house supply achieve?

A separate house supply protects you if the primary cable route is cut, for example during civil engineering work. Two physically separate cable routes are very unlikely to be interrupted at the same time. The easiest way to achieve this is to order two different media such as glass and copper. Even higher availability is possible if the building is connected with fiber from two sides and the services run node and edge disjoint.

When is carrier redundancy worthwhile?

Carrier redundancy protects against problems at your primary provider, such as a backbone failure. The primary network runs over one provider and the backup over a second, independent network operator. The best form of a real backup is to secure a wired network additionally via radio relay from a second provider. This way two active networks run over two media, two routers and two carrier backbones with no single point of failure.

How much does a backup cost?

Costs depend on bandwidth, runtime, availability and implementation effort. Depending on requirements, the backup can cost a fraction of the primary network or just as much. What matters is the fall height: the minimum bandwidth needed to keep operations running in the event of a fault. A backup that does not take effect when needed only generates costs. SAVECALL assesses these factors vendor-neutral and finds the right balance of security and budget.

Articles you might also like

What drives you forward – & what drives

Book a free expert consultation