IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
S 6.53 Redundant arrangement of network
components
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: Administrator, Purchase Department
Central active network components need to remain highly available because a
large number of users are generally dependent upon the smooth operation of a
local network. To allow operations to be resumed as quickly as possible
following the occurrence of a malfunction, a redundancy must be created for
each area in accordance with the applicable availability requirements, so that a
partial or complete failure of the related network components can be tolerated,
whilst keeping the resources required for prevention within acceptable limits.
There are two different ways of achieving redundancy:
- The redundant network components can be stored in a warehouse, in order
to allow quick replacement in an emergency. If this is not done, longdrawn
procurement routines will often be required before errors can be
remedied. Alternatively, maintenance or delivery contracts can be
concluded with the related manufacturers in order to guarantee a quick
replacement of defective components (also refer to S 6.14 Replacement
procurement plan). After that, the configuration backup data can be
reloaded in order to minimise the downtime for the affected network
segments (refer to S 6.52 Regular backup of configuration data of active
network components).
- Even during planning of the network, it is advisable to allow for a
redundancy of network components. For example, all central switches and
- depending on the protocols in use - all routers should be mirrored at least
once in the network in order to achieve redundant server connections and
redundant links between the individual network components (refer to
Figure 1). Correct operation is to be guaranteed by means of a suitable,
logical network configuration.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000