Of late we have seen a growing interest in building “disaster recovery” solutions for both the data and the voice applications so critical for business operation. First, we need to make sure we understand the difference between redundancy, resiliency and other configuration options to assure business continuity. Many more installations now include the use of a remote “collocation” facility as an key component of the installation plan. What is the best way to configure a ShoreTel HQ server, for example to provide for continued operation under a wide variety of options.
The subject of redundancy is almost amusing at times. How much redundancy is reasonable and appropriate? You can have all the redundancy your budget can fund, but at the end of the day are you able to continue the business operation in the event of a catastrophic event. Clearly, two power supplies are better than one. If they are both plugged into the same commercial power outlet however, it really will not matter how many power supplies you have if you lose commercial power! Again, we need to focus on what are we trying to protect?
Redundant servers? Some HQ servers have been configured with “double take” enabling a hot standbye server to take over in the event of a primary server failure. Candidly, we do not see the benefit of hot standby server swaps in the ShoreTel architecture and it is a nightmare to administer, backup and restore. The cost of the solution out weights the benefits and there are other configurations that are more cost effective and work just as well.
For example, there is no law that says you can not install a ShoreTel Distributed Voice Mail server at the same level as the ShoreTel HQ server. Actually this works just fine! Install the servers at the same physical location, or put the HQ server in the remote “collocation” facility. If they are installed at the same “logical” level (i.e. appear on the same level in the Shoreware Director, either server can handle the load. Generally, you would put all of the users and switches for that site under the DVM and use the HQ as your “fail up” and proxy solution. Nothing wrong with this configuration, it is cost effective and easy to administer. From time to time you might hear ShoreTel say “ please wait while I connect you to the correct server” but even that can be managed.
ShoreTel HQ has three services that are not distributed: Route Points; Account Codes and Workgroups. If you lose th HQ server, you will lose these services, but generally that is a small price to pay for this level of resiliency! ShoreTel Version 10 promises to distribute these services, so there is no reason not to configure this way and achieve full surviability given the building is still standing.
You don’t have to think very long about a Katrina or Haiti, especially if you live in California! It is only prudent to not only plan for some level of “redundancy”, but also to plan for how the business would operation if we could not get into our building! If we put the HQ server at the “collocation” facility and we provide for Trunk Lines and “dial tone”, we can balance this possibility. The issue is, that if the building housing the people becomes unavailable, users can still log in and route their phones to cell phones or make use of RDP to access their Call Managers.
The “collocation” option often requires a trade off between band width and trunk lines. You can put all your trunk lines at the colo, in which case every call made from the sites, will traverse a WAN. So moving the trunk lines to the colo increases resiliency but also drives up your WAN cost. At the end of the day it is most likely some combination of bandwidth and trunk lines spread between the facilities. In either case, you will work with your carrier to enable lines to be repointed in the event of an outage. This is a bit more challenging if you are in New York and your collocation facility is in Phoenix, but it can be done.
We are experimenting with the use of SIP trunk facilities at the Collocation site. Generally, this can be more cost effective especially if you can get an agreement for a burstable SIP pipe. You may not want to pay for T1’s at the collocation if you are only planning to use them for a disaster situation! SIP also enables you to be generally independent of your physical location.
It is a sign of the times that we spend so much time planning for “what if” scenarios, but being prepared is not only prudent but appropriate.