JP2015165609A - Communication system and redundant configuration setting method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow costs required to construct a redundant configuration to be reduced.SOLUTION: A communication system includes: a transmitting node device that has a redundant configuration and recovers from a fault by switching a transmission path from an active system to a standby system when the fault has occurred; and a management device that determines the redundant configuration of the transmitting node device on the basis of at least any one of service quality or an evaluation index. The transmitting node device sets the redundant configuration on the basis of a control signal received from the management device.

Description

  The present invention relates to a redundant configuration technique for a communication system.

  To achieve reliability in a communication network, establish a system that does not interfere with the services provided on the network by performing communication by avoiding the facility where the failure occurred in the event of a failure. Is important. For example, (1 + 1) redundancy method (see Patent Document 1) including one standby system for one active system, or N (N is an integer) for M (M is an integer) active system An (M: N) redundancy system (see Patent Document 2) having a spare system is proposed.

JP 2002-51009 A Japanese Patent No. 4237789

  The (1 + 1) redundancy system is a redundant configuration having one dedicated standby system for one working system. A signal similar to that in the active system is transmitted to the dedicated standby system, and when a failure occurs in the active system, the dedicated standby system is immediately switched to the dedicated standby system and recovery is performed. Note that switching recovery in the (1 + 1) redundancy method can be performed without instantaneous interruption without causing an instantaneous interruption that causes the network user to detect a failure.

  On the other hand, the (M: N) redundancy scheme is a redundant configuration having N shared standby systems for M active systems. In the (M: N) redundancy system, unlike the (1 + 1) redundancy system, a relationship such as (1 + 1) in which the same signal as that in the active system is transmitted to the standby system is not established. In the (M: N) redundancy system, after a failure occurs in the active system, the shared standby system is set as a new active system to perform recovery. For this reason, in the (M: N) redundancy system, this setting operation takes some time, and therefore, unlike the (1 + 1) redundancy system, an instantaneous interruption occurs in switching recovery. However, since the (M: N) redundancy method shares the standby system, the amount of equipment can be reduced as compared with the (1 + 1) redundancy method.

  A problem with these redundancy methods is that different devices are required for each redundant configuration when the required quality of the client is different. In other words, a plurality of types of devices corresponding to the redundancy schemes having different switching recovery such as the (1 + 1) redundancy scheme and the (M: N) redundancy scheme are required. Therefore, high cost is required for constructing a redundant configuration.

  In view of the above circumstances, an object of the present invention is to provide a technique capable of reducing the cost required for constructing a redundant configuration while satisfying the required quality of a client.

  One aspect of the present invention is based on a transmission node device having a redundant configuration that recovers a failure by switching a transmission path from an active system to a standby system when a failure occurs, and based on at least one of service quality and an evaluation index And a management device that determines a redundant configuration of the transmission node device, wherein the transmission node device is a communication system that sets a redundant configuration based on a control signal received from the management device.

  One aspect of the present invention is the communication system described above, wherein the management device determines a redundant configuration based on at least one evaluation index of equipment cost, a preset number of repairs, or a total cost. .

  One aspect of the present invention is the communication system described above, wherein the management device has, as the redundant configuration, a service quality that indicates whether or not an instantaneous interruption is allowed at the time of switching recovery when a failure occurs in the active system. A satisfactory redundant configuration, or an occupied primary standby system having one spare as a switching destination for one active system, and a shared primary having a spare as a shared switching destination for a plurality of active systems Equipped with a redundant configuration with a standby system, or a dedicated or shared secondary standby system for reconstructing a redundant configuration before the occurrence of a failure after switching recovery execution by the primary standby system for the occurrence of a failure in the active system A redundant configuration that satisfies at least one of the redundant configurations is determined.

  According to one aspect of the present invention, a management device determines a redundant configuration of a transmission node device based on at least one of service quality and an evaluation index, and control that the transmission node device receives from the management device A redundant configuration setting method comprising: setting a redundant configuration based on a signal.

  According to the present invention, the cost required for constructing a redundant configuration can be reduced.

It is a block diagram which shows the structure of the communication system which concerns on embodiment of this invention. It is a figure which shows an example of the sequence at the time of constructing | recovering the redundant structure in the transmission node 10 remotely by the management apparatus 21 outside the transmission node 10. FIG. It is a figure showing the classification | category of the redundant structure constructed | assembled based on the evaluation index set to the quality of service provided from a signal or a client, and the management apparatus. 5 is a flowchart illustrating an example of processing when a redundant configuration is determined by the management device 21. It is a flowchart which shows the process of switching recovery | restoration at the time of the failure occurrence in a redundant structure, and redundant structure reconstruction. It is a flowchart which shows the process at the time of determining a redundant structure with a management apparatus. It is a flowchart which shows the process at the time of determining a primary backup system. It is a flowchart which shows the process at the time of determining a secondary standby system. It is a flowchart which shows the process at the time of determining a secondary standby system. It is a flowchart which shows the process at the time of determining a secondary standby system.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a communication system according to an embodiment of the present invention.
In FIG. 1, the transmission node 10 includes an electrical signal switching device 11, a plurality of transceivers 12 a to 12 f, an optical cross-connect device 13, and a control device 14. In addition, a management device 21 and a management database 22 are provided outside the transmission node 10.

  The electrical signal switching device 11 has a function of outputting an input signal to an arbitrary output port as a switching function unit, and an electrical signal branching function unit that branches one input signal and outputs the same signal from a plurality of output ports. Prepare. The transceivers 12 a to 12 f receive the electrical signal from the electrical signal switching device 11, convert the electrical signal into an optical signal, and output the optical signal to the optical cross-connect device 13. The optical cross-connect device 13 transmits the optical signals from the transceivers 12a to 12f to the receiving node. The control device 14 receives a control signal from the management device 21, and performs setting of switching destinations of input signals of the electrical signal switching device 11 and the optical cross-connect device 13, operation settings of the transceivers 12a to 12f, and the like.

  The management device 21 determines a redundant configuration according to the service quality that is given in advance to the signal or requested by the client, and transmits a control signal to the control device 14. The management database 22 is connected to the management device 21. The management database 22 includes setting information of the electrical signal switching device 11 and the optical cross-connect device 13 for constructing a service quality and a redundant configuration for each signal, failure information and types of the transceivers 12a to 12f (active system / primary standby system). • Record the secondary standby system). In the present embodiment, the management device 21 can be installed at a location geographically separated from the transmission node 10. Thus, a redundant configuration based on the redundant configuration information transmitted from the management device 21 before signal transmission can be remotely constructed.

  Input signals A to C are input to the electrical signal switching device 11 of the transmission node 10. The output destination of the input signals A to C is switched by the electrical signal switching device 11. Input signals A to C are electrical signals. Signals output from the electrical signal switching device 11 are input to the transceivers 12a to 12f and converted from electrical signals to optical signals. The converted optical signal is transmitted to the receiving node for each signal by the optical cross-connect device 13. As examples of electrical signals and optical signals, it is possible to use signals such as Ethernet (registered trademark), MPLS-TP (Multi-Protocol Label Switching-Transport Profile), and ODU (Optical Channel Data Unit) as electrical signals. . As an optical signal, an OTU (Optical Channel Transport Unit) signal can be used.

  In the transmission node 10 in the optical communication network shown in FIG. 1, the transceivers 12a to 12f in the transmission node 10 are targeted for redundancy. That is, in this example, three input signals A to C are input to the transmission node 10. In contrast, in the transmission node 10, six transceivers 12a to 12f are provided. The transceivers 12a to 12f are divided into an active system and a standby system. When an unexpected failure occurs, the configurations of the transceivers 12a to 12f are switched from the active system to the standby system or from the standby system to the standby system.

  Here, the backup system is classified into two types, a primary backup system and a secondary backup system. The primary standby system is a standby system that becomes a switching destination when a failure occurs in the active system. The secondary standby system is a standby system for reconstructing the redundant configuration of the active system and the primary standby system before the occurrence of a failure after switching recovery by the primary standby system. The primary standby system and the secondary standby system are further classified into two types, ie, an occupation type and a shared type. The occupation type of the primary standby system is a standby system that is used for only one active system. The shared type of the primary standby system is a standby system that is shared and used by a plurality of active systems. The occupancy type of the secondary standby system is a secondary standby system that is occupied by one combination of the active system and the primary standby system that is composed of the active system and the primary standby system. The shared type of the secondary backup system is a backup system that is shared and used by a plurality of combinations of the active system and the primary backup system.

  The redundant configuration is determined by the management device 21 based on the quality of service given in advance to the signal or requested by the client and the evaluation index preset in the management device 21. The service quality includes information on whether or not to perform switching recovery without interruption and the operation rate of the signal. The presence / absence of uninterrupted switching recovery means whether instantaneous interruption is allowed or not allowed at the time of switching recovery. The evaluation index set in advance for the management device has the minimum equipment cost design (hereinafter referred to as “minimum equipment cost”), and the design that satisfies the set number of times of failure repair for one year (hereinafter described as “satisfied number of repairs set”) , A total cost minimum design of maintenance costs calculated from the equipment cost and the number of repairs (hereinafter referred to as “total cost minimum”).

  When the redundant configuration is determined, a control signal for setting the redundant configuration is transmitted from the management device 21 outside the transmission node 10 to the control device 14 in the transmission node 10. The control signal includes information on the redundant configuration to be constructed, such as the device to be switched, the setting change contents for each device, the type change of the transceiver. The control device 14 includes a control signal receiving unit that receives a control signal of the management device 21. When the control device 14 receives a control signal from the management device 21, each device (electrical signal switching device 11, transceivers 12a to 12f, optical cross-connect device 13) that requires switching setting based on this control signal. The switch execution instruction is issued. Each apparatus that receives the instruction performs switching, thereby constructing a redundant configuration as a whole.

  FIG. 2 is a diagram illustrating an example of a sequence when a redundant configuration in the transmission node 10 is remotely constructed by the management device 21 outside the transmission node 10.

  In FIG. 2, the management device 21 receives the quality of service given to the signal or requested by the client in the form of external input (step S101), and determines the redundant configuration based on the information and the quality of service in the management database 22 (step S101). Step S102). Information on the redundant configuration determined by the management device 21 is transmitted as a control signal to the control device 14 in the transmission node 10 (step S103). In the control signal, information on the redundant configuration to be constructed includes a device to be switched, a setting change content for each device, a type change of the transceiver, and the like. The control device 14 receives the control signal from the management device 21 (step S104), and outputs a switching execution instruction to each device that requires switching setting (step S105). Each device that receives the instruction is switched to build a redundant configuration as a whole (steps S106 to S108).

  As a specific example, assume that a (1 + 1) redundant configuration of the input signal A is created. In this case, the electrical signal switching device 11 branches the input signal A into two and then changes the output port to a connection destination to the transceiver 12a and the transceiver 12b. The optical cross-connect device 13 connects the optical signals output from the transmitter / receiver 12a and the transmitter / receiver 12b to the path toward the signal A reception node. The transceiver 12a and the transceiver 12b are turned on, and the wavelength of the optical signal, the output light intensity, and the like are set. As a result, a redundant configuration can be constructed remotely from the outside of the transmission node 10 by the management device 21.

  Thus, in the present embodiment, a redundant configuration can be constructed remotely by the management device 21 outside the transmission node 10. When the path of the input signal is connected to the transmission node 10 in advance, manual connection work at the site is not required, and a redundant configuration corresponding to the service quality can be constructed remotely.

  Next, processing when determining the redundant configuration in the management apparatus 21 will be described. As described above, the management device 21 determines the redundant configuration based on the service quality given to the signal or requested by the client and the evaluation index set in the management device.

  FIG. 3 is a diagram showing the type of redundant configuration constructed based on the quality of service given to a signal or requested by a client and the evaluation index set in the management apparatus. As shown in FIG. 3, the service quality includes the presence or absence of an instantaneous interruption at the time of switching recovery and the operating rate. The evaluation index includes minimum equipment cost, satisfaction of the number of set repairs, and minimum total cost. The presence or absence of an instantaneous interruption at the time of switching recovery means whether or not to perform an uninterrupted switching recovery that does not cause the network user to detect a failure when a failure occurs in the active system.

  If instantaneous interruption at the time of restoration of switching is not allowed, a dedicated standby system that transmits the same signal is required when the active system fails. Therefore, if a momentary interruption is not allowed at the time of switching recovery, a redundant configuration including an occupied primary standby system is constructed. On the other hand, when instantaneous interruption is allowed at the time of switching recovery, a redundant configuration including an exclusive or shared primary standby system is constructed. Note that the secondary standby system can use either an occupancy type or a shared type regardless of whether or not there is a momentary interruption during the switching recovery.

FIG. 4 is a flowchart illustrating an example of processing performed when the management apparatus 21 determines a redundant configuration.
In FIG. 4, the quality of service assigned for each signal or requested by the client is set in the management apparatus 21 (step S201). When the service quality is set, the management apparatus 21 determines whether or not the set service quality allows an instantaneous interruption at the time of restoration of switching (step S202). In step S202, when the set service quality does not allow instantaneous interruption at the time of restoration of switching, and non-instantaneous switching is requested, the management apparatus 21 sets the occupied primary spare as a candidate for the use standby system. A system, exclusive / shared secondary standby system is set (step S203). On the other hand, if instantaneous interruption is allowed at the time of switching recovery in step S202, the management apparatus 21 uses the occupied / shared primary standby system and the occupied / shared secondary standby system as candidates for the used standby system. (Step S204). After the type of standby system to be used is set, the management device 21 determines a redundant configuration that satisfies the evaluation index (step S205).

  In order to realize the (1 + 1) redundancy system, a redundant configuration including one occupied primary standby system for one active system is constructed. In order to realize the (M: N) redundant configuration, a redundant configuration including N shared primary standby systems is constructed for the M active systems. The construction of the above redundant configuration is performed before signal transmission of the input signals A to C.

  In the example of FIG. 1, it is assumed that the input signal A is set with a service quality that does not allow an instantaneous interruption at the time of switching. Further, it is assumed that the input signal B and the input signal C are set with service quality that allows instantaneous interruption at the time of switching. In this case, the management device 21 determines the transmitter / receiver 12a as an active system for the input signal A, and determines the transmitter / receiver 12b as an occupied primary standby system for the input signal A. Further, the management device 21 determines the transceiver 12c as the working system for the input signal B, and determines the transceiver 12d as the working system for the input signal C. In addition, the management device 21 determines the transceiver 12e as a shared primary standby system for the input signal B and the input signal C. In addition, the management device 21 determines the transceiver 12f as a shared secondary standby system shared between redundant configurations.

  With such a redundant configuration, the active transmitter / receiver 12a and the occupied primary standby transmitter / receiver 12b are provided for the input signal A, thereby forming a (1 + 1) redundant system. In other words, the input signal A is branched into two by the electric signal switching device 11, one is connected to the active transceiver 12a, and the other is connected to the occupied primary standby transceiver 12b, and a (1 + 1) redundant system is constructed. Is done. The input signal A converted from an electrical signal to an optical signal by the transceiver 12a is transmitted to the signal A reception node by the optical cross-connect device 13. The second input signal A converted from an electrical signal to an optical signal by the dedicated primary standby transceiver 12b is transmitted to the signal A reception node by the optical cross-connect device. In FIG. 1, when transmitting in the same fiber, the wavelengths of the optical signals output from the transmitter / receiver 12a and the transmitter / receiver 12b are different. In addition, when transmitting in another fiber and transmitting to a receiving node, you may use the same wavelength. When a failure occurs in the transmitter / receiver 12a, switching is restored by switching to the signal A of 12b on the receiving side.

Also, for the input signal B and the input signal C, respective active transceivers 12c and 12d and a primary standby shared single transceiver 12e are provided, and a (2: 1) redundant system is constructed. Will be. That is, the input signal B passes through the electrical signal switching device 11, is converted from an electrical signal to an optical signal by the transceiver 12 c, and is transmitted to the signal B reception node by the optical cross-connect device 13. The input signal C passes through the electrical signal switching device 11, is converted from an electrical signal to an optical signal by the transmitter / receiver 12 d, and is transmitted to the signal C reception node by the optical cross-connect device 13. If a failure occurs in the active transceiver 12c or 12d, the primary standby shared transceiver 12e is switched to. Then, the input signal B or C is converted from an electrical signal to an optical signal by the transceiver 12e via the electrical signal switching device 11, and transmitted to the reception node of the signal B or signal C by the optical cross-connect device 13. The
The transceiver 12f is shared as a shared secondary standby system between the (1 + 1) redundant configuration of the input signal A and the (2: 1) redundant configuration of the input signal B and the input signal C.

  When a failure occurs in the active system, recovery is performed by switching from the active system to the primary standby system. In this example, the input signal A can be switched and restored without interruption by switching to the occupied primary standby transceiver 12b. On the other hand, the input signal B and the input signal C can be restored by switching to the shared primary standby transceiver 12e. In this case, a momentary interruption occurs when switching to the standby system.

  After the switching recovery is completed, the redundant configuration before the failure can be reconstructed by setting the shared secondary standby transmitter / receiver 12f to the new primary standby system having the failed redundant configuration. . Thereby, it is possible to maintain the quality of service before the occurrence of the failure. When there is no primary standby system and only a secondary standby system is provided in a certain redundant configuration, the recovery is performed by switching directly from the active system to the secondary standby system.

FIG. 5 is a flowchart showing the process of switching recovery and redundant configuration reconstruction when a failure occurs in the redundant configuration.
First, the management device 21 detects a failure (step S301), collates with the management database 22, and determines the location of the failure and the type of transceiver (step S302). In step S302, when the location where the failure has occurred is the active system, the management apparatus 21 determines whether or not a primary standby system exists (step S303). In step S303, when the primary standby system exists, the management apparatus 21 performs recovery by switching from the active system to the primary standby system (step S304). At the time of switching to the primary standby system, the management device 21 changes the settings of the transceivers 12a to 12f, the electrical signal switching device 11, and the optical cross-connect device 13 via the control device 14, and changes the settings. Information is recorded in the management database 22.

  In step S304, after the switching recovery, the management apparatus 21 shifts the processing to the determination of the presence of the secondary standby system (step S305). In step S305, if there is a secondary standby system, the management apparatus 21 assigns the secondary standby system as a new standby system to the redundant system of the active system and the primary standby system in which the failure has occurred. A redundant system similar to the redundant system before the occurrence is reconstructed (step S306). At the time of allocation, the management device 21 changes the settings of the transceivers 12a to 12f, the electrical signal switching device 11, and the optical cross-connect device 13 via the control device 14, and the change information is stored in the management database 22. To record. If there is no secondary standby system in step S305, nothing is performed and the switching recovery process ends.

  In step S303, if the primary standby system does not exist when a failure occurs in the active system, the management apparatus 21 shifts the processing to the determination of the presence of the secondary standby system (step S307). In step S307, if the secondary standby system does not exist, the active system cannot be recovered and the failure information is recorded in the management database 22.

  In step S307, when the secondary standby system exists, the management device 21 changes the settings of the transceivers 12a to 12f, the electrical signal switching device 11, and the optical cross-connect device 13 via the control device 14 (step S308). ). Then, the management device 21 records the change information in the management database 22.

  In step S302, when a failure occurs in the primary standby system, first, the presence determination of the secondary standby system is performed (step S305). In step S305, when the secondary standby system exists, the management apparatus 21 assigns the secondary standby system as a new standby system for the redundant system formed as the primary standby system and the active system in which the failure has occurred, and before the failure occurs. A redundant system similar to the redundant system is reconstructed (step S306). At the time of allocation, the management device 21 changes the settings of the transceivers 12a to 12f, the electrical signal switching device 11, and the optical cross-connect device 13 via the control device 14, and the change information is stored in the management database 22. To record. In step S305, when there is no secondary standby system, the management apparatus 21 records the failure information in the management database 22, and the switching recovery process ends.

In step S302, when a failure occurs in the secondary standby system, the management device 21 only records the failure information in the management database 22, and ends the switching recovery process.
Next, the evaluation index will be described. As described above, the management device 21 determines the redundant configuration based on the evaluation index after setting the type of the standby system according to the service quality as to whether the instantaneous interruption is permitted. At this time, when the evaluation index is the equipment cost, the management device 21 determines the redundant configuration so that the equipment cost to be configured is minimized while satisfying the service quality. The operating rate indicates the rate at which the device or system operates normally for a certain time. The equipment cost is the product of the cost per equipment and the number of equipment.

  In the present embodiment, it is assumed that a failure occurs only in the transceivers 12a to 12f in the transmission node 10, and only the operation rate of the transceivers 12a to 12f is considered in the calculation of the operation rate. Not only this but calculation including the operation rate of the electric signal switching device 11, the optical cross-connect device 13, the transmission path to the receiving node, etc. is also possible.

  The operating rates of the input signal A, the input signal B, and the input signal C when the redundant configuration as shown in FIG. 1 is obtained are obtained by the following calculation. Here, the operating rate of each of the transceivers 12a to 12f is set to α. It is assumed that the operating rates of the transceivers 12a to 12f are given in the previous stage of the redundant configuration determination by the management device 21. The shared secondary standby system is used with equal probability in each redundant system, that is, both the (1 + 1) redundant system of the input signal A and the (2: 1) redundant system of the input signal B and the input signal C. Therefore, each redundant system uses the secondary standby system with a probability of 1/2. Note that it is possible to perform calculation by changing the ratio according to the number of transceivers that form a redundant system. In this case, since the number of active systems and primary standby systems is 2 for the input signal A and 3 for the input signals B and C, the redundant system of the input signal A is 2/5, the input The redundant system of signals B and C uses the secondary standby system with a probability of 3/5.

  In the case of an input signal A, if one failure occurs in either the active system or the primary standby system, if there is a failure in the active system, after switching to the primary standby system is restored, the secondary standby system is Using the probability of 2, the redundant system of the active system and the primary standby system is reconstructed. If the reconstruction cannot be performed, only the active system is operated, and the signal transmission becomes abnormal, that is, the signal transmission becomes impossible simultaneously with the occurrence of the second failure. In addition, when the reconstruction is successful, the switching recovery is possible even if a second failure occurs in the reconstructed active system and the primary standby system. If the third failure occurs after the restoration of switching, signal transmission becomes impossible.

In the calculation of the operation rate, it is not necessary to consider the reconstruction at the time of switching recovery, and it may be considered that the secondary standby system can be used with a probability of 1/2. Therefore, operation rate R _A in the input signal A can be obtained as follows.
R _A = r ₁ + r ₂ + r ₃
r ₁ : Operation rate when no failure occurs in the active system r ₂ : Operation rate when a failure occurs in the active system and is restored by the primary standby system r ₃ : A failure occurs in the active system and the primary standby system , Occupancy rate when restored by secondary standby system

Here, the operating rate r ₁ when no failure occurs in the active system is (r ₁ = α). Further, the operating rate r ₂ when a failure occurs in the active system and the primary standby system is restored is (r ₂ = α × (1−α)). Further, the operating rate r ₃ when a failure occurs in the active system and the primary standby system and is restored by the secondary standby system is (r ₃ = (1−α) × (1−α) × 1/2 ×). α).

Note that (1-α) is the probability that a failure occurs in the transmitter / receiver, and twice the operation rate r ₂ is a combination of two types of failure occurrence because a failure occurs in either the active system or the primary standby system. There is. The ½ × α times the operation rate r ₃ is attributed to the fact that the rebuilding success probability of the secondary standby system is ½.

  In the case of an input signal B, if one failure occurs in either the active system or the primary standby system, if there is a failure in the active system, after switching to the primary standby system is restored, the secondary standby system is The redundant system of the active system and the primary standby system is reconstructed with a probability of 2. If the reconstruction is not possible, only the active system is operated, and if the second failure occurs in the input signal B, the signal transmission is abnormal, and if the input signal C occurs, the third failure occurs. Sometimes the signal transmission of the input signal B is abnormal, i.e. signal transmission becomes impossible. In addition, when the reconstruction is successful, the switching recovery is possible even if a second failure occurs in the reconstructed active system and the primary standby system. If the third failure occurs after switching recovery, if the failure occurs in the input signal B, the signal transmission is abnormal. If the failure occurs in the input signal C, the signal of the input signal B when the fourth failure occurs. Transmission is abnormal, that is, signal transmission is impossible.

  As in the case of the input signal A, in the calculation of the operation rate, it is not necessary to consider the reconstruction at the time of switching recovery, and it can be considered that the secondary standby system can be used with a probability of 1/2. Since the primary standby system and the secondary standby system are shared with the input signal C, a failure occurs in the active system of the input signal B, and the primary standby system is 1 when the active system of the input signal C is normal. The secondary standby system can be used for recovery with a probability of 1/2. Further, when a failure has occurred in the active system of the input signal B while a failure has occurred in the active system of the input signal B, the active system of the input signal B can be restored with a probability of 1/2 respectively. Finally, the input signal B can use the primary standby system with a probability of 1/2 and the secondary standby system with a probability of 1/4.

Therefore, operation rate R _B in the input signal B can be obtained as follows.
R _B = r ₄ + r ₅ + r ₆ + r ₇
r ₄ : Operation rate when no failure occurs in the active system of the input signal B r ₅ : A failure occurs in the active system of the input signal B, the active system of the input signal C is normal, and is restored by the primary standby system Utilization rate r ₆ : The active system of the input signal B has failed, the active system of the input signal C is normal, and the primary standby system has also failed, and is restored by the secondary standby system operating rate r 7 cases _that: operation rate when a failure in both of the working system of the input signal B input signal C is generated, is recovered by the primary backup system or secondary protection system

Here, the operating rate r ₄ when no failure occurs in the working system of the input signal B is (r ₄ = α). Further, when a failure occurs in the working system of the input signal B, the working system of the input signal C is normal, and the recovery rate is restored by the primary standby system, the operating rate r ₅ is (r ₅ = (1−α) × α × α). In addition, when the failure occurs in the working system of the input signal B, the working system of the input signal C is normal, and the failure occurs also in the primary standby system, the operation rate r when the secondary standby system is restored. ₆ is (r ₆ = (1−α) × α × (1−α) × 1/2 × α). In addition, when the failure of both the input signal B and the input signal C occurs in the working system, and the recovery is performed by the primary standby system or the secondary standby system, the operating rate r ₇ is the value of the primary standby system and the secondary standby system. When both are normal, one of them is used to restore the active system of the input signal B with a probability of 1/2, and when only the primary standby system is normal, the active system of the input signal B is with a probability of 1/2. When only the recovery and secondary standby system is normal, the active system of the input signal B is recovered with a probability of 1/2, and is expressed by the following equation.

The input signal from C, providing the same redundancy as the input signal B, operation rate R _C in the input signal C is represented as follows.
R _C = R _B

  As described above, the operation rate can be calculated for each redundant configuration. After the management device 21 creates a plurality of redundant configuration candidates and calculates the operating rate of each redundant configuration, the number of the transceivers 12a to 12f is the largest among the redundant configurations that satisfy a preset operating rate. Determine fewer redundant configurations.

Next, determination of a redundant configuration when the number of repairs that occur in one year is set as an evaluation index instead of equipment cost will be described. The period of time of one year can be changed to an arbitrary period. The number of repairs is derived from the following equation by the maintenance operation rate and the average repair time MTTR (Mean Time To Repair) per repair.
Number of repairs = (1-maintenance availability) ÷ MTTR

  The maintenance operation rate is different from the operation rate given as the service quality, and means an operation rate obtained based on the maintenance policy. Specifically, the operation rate given as the signal service quality determines that the signal transmission is not normal when it affects the signal transmission due to the failure of the transceivers 12a to 12f, that is, the signal transmission is abnormal. That is, this is determined to be normal up to the state where only the active system is finally operated due to the accumulation of failures. On the other hand, the maintenance operation rate is determined to be abnormal when the operation is performed only in the active system, and when it is determined to be abnormal, it is determined that the redundant configuration of the signal has failed and repair is performed. Note that the timing for determining a failure according to the maintenance policy can be changed. It is determined that the operation only in the active system, which is given as the service quality of the normal signal, is normal, and it is determined that the state where there are two primary standby systems or two secondary standby systems in addition to the active system is normal For example, the determination timing can be changed.

  In the determination stage of the redundant configuration by the management device 21, the redundant configuration is constructed so that the repair time satisfies the set value or less.

In addition, when the cost per one of the transceivers 12a to 12f and the cost per repair are given before the redundant configuration, the equipment cost, the repair cost, and the total cost may be determined as follows. . In addition, a redundant configuration that minimizes the total cost can also be determined.
Equipment cost = Number of redundant transceivers x Cost per transceiver Repair cost = Number of repairs x Cost per repair Total cost = Equipment cost + Repair cost

In addition, when the cost of facilities other than the redundancy target such as the cost of the electrical signal switching device 11, the optical cross-connect device 13, and the transmission path other than the transceivers 12a to 12f is given in advance to the facility cost, these The equipment cost is
Equipment cost = number of redundantly configured transceivers × cost per transceiver + cost of equipment other than the redundancy target.

  As described above, the redundant configuration is determined so as to satisfy the evaluation index. Hereinafter, determination of such a redundant configuration will be described. Note that the operation rate, the number of set repairs, and the total cost are calculated by the calculation method described above.

FIG. 6 is a flowchart showing processing when the management device 21 determines a redundant configuration. In determining the redundant configuration, first, the primary standby system is determined based on the service quality, and then the secondary standby system is determined based on the evaluation index set in the management apparatus, whereby the redundant configuration is determined.
The following three evaluation indices (A) to (C) can be used as evaluation indices used when determining the secondary standby system. Which evaluation index is used is set in advance before determining the redundant configuration.
(A) Minimum equipment cost (B) Satisfaction of set number of repairs (C) Minimum total cost In any evaluation index, a redundant configuration that satisfies the operating rate input to the management apparatus as service quality is determined. The processing up to the determination of the primary standby system is the same regardless of the evaluation index, and the redundant configuration is determined by using at least one of these evaluation indexes in the determination of the secondary standby system.
FIG. 7 is a flowchart showing a process for determining a primary standby system, and FIGS. 8 to 10 are flowcharts showing a process for determining a secondary standby system. In FIG. 7, the service quality previously given to the signal is input to the management apparatus 21 (step S401). Thereafter, one working system for the signal is added. At this point, the system has only one active system.

  Next, the primary standby system is added or set according to the input service quality (step S402). The management apparatus 21 determines whether or not the input service quality can be instantaneously interrupted when switching when a failure occurs (step S403). Are added (step S404). As a result, a redundant configuration having one active system and one occupied primary backup system is obtained.

  In step S403, if the input service quality allows momentary interruption, the shared primary standby system is provided, but at this time, the primary standby system of another signal whose redundant configuration has already been determined. It is determined whether or not sharing is possible (step S405). By setting in advance the number of active systems that can be shared by the shared primary standby system in the management apparatus 21, it is possible to share if the number is less than the set number, and sharing when the set number is shared by the active system It becomes impossible.

  If sharing is not possible in step S405, the management apparatus 21 adds one new shared primary standby system (step S406). Thus, a redundant configuration having one active system and one shared primary standby system is obtained. At this time, the shared primary backup system is a primary backup system used only in the current signal active system.

  On the other hand, if it is determined in step S405 that it can be shared with the existing primary standby system, the management device 21 adds the current signal active system to the redundant configuration that has already been constructed, and the shared primary The active system of the current signal is added to the sharing target in the standby system (step S407). As a result, the redundant configuration becomes a redundant configuration including the active system included in the existing redundant configuration, the newly added active system, and the standby system included in the existing redundant configuration.

The above is the determination flow of the primary standby system, and the determination flow of the secondary standby system based on each evaluation index is shown below.

FIG. 8 is a flowchart showing the secondary standby system determination process when the minimum equipment cost is selected as the evaluation index.
In FIG. 8, the management apparatus 21 determines whether or not the redundant configuration determined up to the primary standby system satisfies the operation rate required as the service quality (step S501). When the operation rate required as the service quality is satisfied, the management device 21 determines that the redundant configuration is the redundant configuration of the current signal.

  If the operation rate is not satisfied in step S501, the management apparatus 21 determines whether or not the redundant secondary protection system having the secondary standby system can be shared with the existing redundant configuration (step S503). An existing redundant configuration having a secondary standby system is searched, and if it exists, the operation rate calculation of the existing redundant configuration when the current redundant configuration is shared is executed. Even when the redundant configuration of the current signal and the secondary standby system are shared, if the operating rate required by the existing redundant configuration is satisfied, the secondary redundant system of the existing redundant configuration is replaced with the redundant configuration of the current signal. Setting is made as a shared secondary standby system (step S504). When the secondary standby system in the existing redundant configuration is the exclusive type, the setting is changed to the shared type and then set as the shared secondary standby system in the redundant configuration of the current signal. Note that the setting change of the secondary standby system in the existing redundant configuration is executed by changing the information in the management database 22 after the redundant configuration of the current signal is finally determined.

  In step S503, if there is no existing redundant configuration that satisfies the operating rate even if the current signal is shared with the redundant configuration, the management apparatus 21 uses the existing redundant standby system having the occupation type secondary standby system. Explore the configuration. When there is no existing redundant configuration having a secondary standby system that can be shared in these searches, sharing is impossible. In that case, the management device 21 adds one new secondary secondary system as a redundant configuration of the original signal (step S505).

  After the setting or addition of the secondary standby system is completed, the management device 21 calculates the operation rate of the redundant configuration of the current signal again and determines whether the operation rate is satisfied (step S501). When the operation rate is satisfied, the redundant configuration is determined as the redundant configuration of the current signal. When the operating rate is not satisfied, the setting of the secondary standby system or additional processing is repeated until the operating rate is satisfied.

FIG. 9 is a flowchart showing the secondary standby system determination process when satisfaction of the set number of repairs is selected as the evaluation index.
In FIG. 9, the management apparatus 21 determines whether the redundant configuration determined up to the primary standby system satisfies the operation rate required as service quality (step S601). The process proceeds to determination of the number of set repairs (step S602).

  If the operation rate is not satisfied in step S601, it is determined whether the secondary standby system of the redundant configuration having the secondary standby system can be shared with the existing redundant configuration (step S603). An existing redundant configuration having a secondary standby system is searched, and if it exists, the operation rate calculation of the existing redundant configuration when the current redundant configuration is shared is executed. Even when the redundant configuration of the current signal and the secondary standby system are shared, if the operation rate required by the existing redundant configuration is satisfied, the management device 21 displays the secondary standby system of the existing redundant configuration. Setting is made as a shared secondary standby system having a redundant signal configuration (step S604). When the secondary standby system in the existing redundant configuration is the exclusive type, the setting is changed to the shared type and then set as the shared secondary standby system in the redundant configuration of the current signal. Note that the setting change of the secondary standby system in the existing redundant configuration is executed by changing the information in the management database 22 after the redundant configuration of the current signal is finally determined.

  In step S603, when searching for the secondary standby system of the existing redundant configuration, the shared type is searched first, and there is no existing redundant configuration that satisfies the operating rate even if the current signal redundant configuration is shared. In this case, an existing redundant configuration having an occupied secondary standby system is searched. When there is no existing redundant configuration having a secondary standby system that can be shared in these searches, sharing is impossible. In that case, the management apparatus 21 adds one new secondary secondary system as a redundant configuration of the original signal (step S605).

  After the setting or addition of the secondary standby system is completed, the management device 21 calculates the operation rate of the redundant configuration of the current signal again and determines whether the operation rate is satisfied (step S601). If the operating rate is satisfied, the process proceeds to determination of the number of set repairs (step S602). If the operating rate is not satisfied, the setting of the secondary standby system or the additional processing flow is repeated until the operating rate is satisfied.

  After satisfying the operating rate, the management device 21 shifts the processing to determination of the number of set repairs (step S602). The set repair count means an upper limit value of the annual repair count in the redundant configuration, and is set in advance before the redundant configuration is determined. If the annual number of repairs of the redundant configuration that satisfies the operating rate is less than or equal to the set repair count, the condition of the set repair count is satisfied, and if it exceeds, the condition is not satisfied.

If the condition is satisfied in step S602, the management device 21 determines that the redundant configuration is the redundant configuration of the current signal.
In step S602, if the condition is not satisfied, the management device 21 sets or adds a secondary standby system as in the case where the operation rate is not satisfied (steps S607 to S609).

  After the setting or addition of the secondary standby system is completed, the management device 21 determines the number of repairs of the redundant configuration of the current signal (step S602). When the determination condition is satisfied, the redundant configuration is determined as the redundant configuration of the current signal. If the determination condition is not satisfied, the setting of the secondary standby system or additional processing is repeated until the determination condition for the number of repairs is satisfied.

FIG. 10 is a flowchart showing the secondary standby system determination process when the total cost minimum is selected as the evaluation index.
In FIG. 10, the management device 21 determines whether or not the redundant configuration determined up to the primary standby system satisfies the operation rate required as service quality (step S701). When the redundant configuration determined up to the primary standby system satisfies the operation rate required as the service quality, the management device 21 adds it as a redundant configuration candidate (step S702).

  If the operation rate is not satisfied in step S701, it is determined whether the secondary standby system of the redundant configuration having the secondary standby system can be shared with the existing redundant configuration (step S703). The management device 21 searches for an existing redundant configuration having a secondary standby system, and if present, executes the operation rate calculation of the existing redundant configuration when the existing redundant configuration is shared with the current signal redundant configuration. Even when the redundant configuration of the current signal and the secondary standby system are shared, if the operating rate required by the existing redundant configuration is satisfied, the secondary redundant system of the existing redundant configuration is replaced with the redundant configuration of the current signal. Setting is made as a shared secondary standby system (step S704). When the secondary standby system in the existing redundant configuration is the exclusive type, the setting is changed to the shared type and then set as the shared secondary standby system in the redundant configuration of the current signal. Note that the setting change of the secondary standby system in the existing redundant configuration is executed by changing the information in the management database 22 after the redundant configuration of the current signal is finally determined.

  In step S703, if there is no existing redundant configuration that satisfies the operating rate even if the current signal is shared with the redundant configuration, the management device 21 uses the existing redundant standby system that has the occupation type secondary standby system. Explore the configuration. When there is no existing redundant configuration having a secondary standby system that can be shared in these searches, sharing is impossible. In that case, the management apparatus 21 adds one new secondary secondary system as a redundant configuration of the original signal (step S705).

  After the setting or addition of the secondary standby system is completed, the management apparatus 21 calculates the operation rate of the redundant configuration of the current signal again and determines whether or not the operation rate is satisfied (step S701). If the operating rate is satisfied, the management apparatus 21 adds the current redundant configuration as a final redundant configuration candidate (step S702). When the operating rate is not satisfied, the setting of the secondary standby system or additional processing is repeated until the operating rate is satisfied.

  In step S702, after the operation rate is satisfied and the candidate is added as a redundant configuration candidate, the process proceeds to determination of the number of redundant configuration candidates (step S706). The number of redundant configuration candidates means the value of the number of redundant configurations registered as final redundant configuration candidates, and the lower limit of the number of redundant configuration candidates registered as the number of configuration configuration candidates before determining the redundant configuration is It is set in advance. When the number of candidates registered as a redundant configuration satisfying the operation rate is equal to or greater than the number of set configuration candidates, the condition for the number of set configuration candidates is satisfied, and when the number is lower, the condition is not satisfied.

  If the condition is satisfied in step S706, the management apparatus 21 selects a redundant configuration that realizes the minimum total cost among the registered redundant configuration candidates (step S707), and determines the redundant configuration of the current signal. .

  In step S706, if the condition is not satisfied, the management device 21 sets or adds a secondary standby system as in the case where the operation rate is not satisfied (steps S709 to S711).

  After the setting or addition of the secondary standby system is completed, the management apparatus 21 newly registers the redundant configuration of the current signal as a configuration candidate (step S702), and the number of registered configuration candidates is equal to or greater than the number of configuration configuration candidates. It is determined whether or not the condition is satisfied (step S706). If the condition is satisfied in step S706, the management apparatus 21 selects a redundant configuration that realizes the minimum total cost among the registered redundant configuration candidates (step S707), and determines the redundant configuration of the current signal. . In step S706, if the number is less than the number of set configuration candidates and the condition is not satisfied, the setting of the secondary standby system or additional processing is repeated until the determination condition for the number of set configuration candidates is satisfied.

  The above is a flowchart that satisfies the given service quality and determines the redundant configuration based on the evaluation index set on the management apparatus side.

  A specific example of determining a redundant configuration will be described with reference to FIG. Here, it is assumed that a redundant configuration of the input signal A and the input signal B is constructed in advance, and a redundant configuration of the input signal C is newly constructed. It is assumed that the operating rate α of the transceiver is 0.9. The input signal A is set as non-instantaneous when switching is restored as service quality and 0.991 as the operation rate. In the input signal B, instantaneous interruption at the time of switching recovery is allowed as service quality, and 0.99 is set as the operation rate. The input signal A and the input signal B have already been made redundant. In the redundant configuration of the input signal A, the transmitter / receiver 12a is set as the active system, the transmitter / receiver 12b is set as the occupied primary backup system, and the transmitter / receiver 12f is set as the occupied secondary backup system. In the redundant configuration of the input signal B, the transceiver 12c is set as the active system, and 12e is set as the shared primary backup system.

  As for the service quality of the input signal C to be newly constructed, instantaneous interruption at the time of switching recovery is allowed, and the operation rate is set to 0.99. At this time, a description will be given of a case where the evaluation index for determining the redundant configuration on the management apparatus side is the minimum equipment cost. The flow for determining the relevant redundant configuration is shown in FIGS.

  First, based on the flow of FIG. 6, the management apparatus determines the redundant configuration of the input signal C. Next, the primary standby system determination flow shown in FIG. 7 is performed, and the quality of service of the input signal C is set to the management apparatus (step S401). Then, one active system is added as a redundant configuration of the input signal C (step S402). Next, since instantaneous interruption is allowed as the service quality, a sharing judgment with another signal is started (step S403). Here, in the other redundant configuration, since the input signal B already has a shared primary standby system as a redundant configuration, it is determined whether or not the primary standby system can be shared. Here, it is assumed that the maximum number of shares of the primary standby system is set to 2 on the management apparatus side. The number of shares of the active system in the shared primary standby system of the input signal B is known to be one since it is only the active system of the input signal B. Therefore, it can be determined that sharing with other signals is possible (step S405). Based on the determination that sharing with other signals is possible, the working system of the input signal C is added to the sharing target of the shared primary primary system of the input signal B. Further, the redundant configuration considered from the determination that sharing is possible is a redundant configuration combining the redundant configuration of the existing input signal B and the active system of the input signal C, that is, the active system of the input signal B and the input signal. A redundant configuration including one shared primary backup system shared by the C active system, the input signal B, and the input signal C is considered (step S407).

Next, the flow proceeds to the secondary standby system determination flow (FIG. 8) when the minimum equipment cost is set as the evaluation index. Since the evaluation index set by the management apparatus is the smallest equipment cost, the process first determines whether the operating rate is satisfied (step S501). When the operation rate of the redundant configuration considered at this time is calculated based on the above-described operation rate calculation method, the operation rate R _B of the input signal B is as follows when the operation rate α of the transceiver is used. It is expressed in

This is because the failure of the active system of the input signal B and the failure of the active system of the input signal B, the active system of the input signal C and the shared primary standby system are normal, and the primary standby The probability that the input signal B is restored in the system, and the probability that the working system of both the input signals B and C fails, and the working system of the input signal B is restored in the normal shared primary standby system are added. It will be happy. Incidentally, operation rate _{R C} of the input signal C becomes _R C = _{R B.}

Since the operation rate as the service quality set in the input signal B and the input signal C is both 0.99, it can be determined that this redundant configuration does not satisfy the operation rate. Therefore, the process next moves to determination of sharing with other signals (step S503).
Other signals, here the input signal A, already have a redundant configuration with an occupied secondary standby system. Therefore, it is determined whether the occupied secondary standby system in the redundant configuration of the input signal A can be shared with the redundant configuration of the input signal B and the input signal C currently considered. When the secondary standby system of the input signal A is changed to a shared type and the redundant configuration of the input signals B and C is shared, the secondary standby system of the input signal A has a redundant configuration of both with a probability of 1/2. Used for recovery. Its operation rate R _A redundant input signals A in this case is expressed as follows.

  This is because there is a probability that no failure occurs in the working system of the input signal A, a failure occurs in the working system of the input signal A, the occupied primary backup system is normal, and the input signal A is restored in the primary backup system. And the probability that both the active system of the input signal A and the occupied primary standby system fail and the active system of the input signal A is restored in the normal shared secondary standby system It will be. Since the operation rate set as the service quality for the input signal A is 0.991, the redundant configuration of the input signal A is not changed even if the occupied secondary system in the redundant configuration of the input signal A is changed to the shared type. It satisfies the set service quality utilization rate. Accordingly, it is determined that sharing is possible, the occupied secondary standby system in the redundant configuration of the input signal A is changed to the shared type, and the redundant configuration of the input signals B and C is added to the sharing target (step S504). By this work, the redundant configuration of the input signals B and C has a working system for the input signals B and C, respectively, and is a redundant configuration including one shared primary backup system and one shared secondary backup system. .

It is determined again whether the operation rate is satisfied from the determination flow of the redundant configuration (step S501). Operating rate R _B similarly input signal B is represented as follows.

This is the same formula as R _B = r ₄ + r ₅ + r ₆ + r ₇ described in the operation rate calculation part. As before, the operation rate R _C of the input signal _C is R _C = R _B.
Since the operating rate as the service quality set in the input signals B and C is both 0.99, this satisfies the operating rate condition. Therefore, the redundant configuration is determined based on the determination that the operation rate is satisfied.

  The redundant configuration determined by the management apparatus through the above flow is transmitted to the transmission node apparatus in the form of a control signal. In the transmission node apparatus, the transceiver 12a is finally used for the input signal A, and the transceiver 12b is the input signal. A primary standby system of A, the transmitter / receiver 12c is the active system of the input signal B, the transmitter / receiver 12d is the active system of the input signal C, the transmitter / receiver 12e is the shared primary standby system of the input signal A and the input signal B, The transceiver 12f becomes a shared secondary standby system shared by the input signals A to C.

  So far, the flow for satisfying the instantaneous interruption condition and operation rate at the time of switching recovery set as the service quality and determining the redundant configuration based on the evaluation index determined by the management apparatus has been described. However, it is possible to determine a redundant configuration that satisfies only one of the service quality and the evaluation index. When only the given service quality is satisfied, the evaluation index is not determined. In this case, the determination flow of the primary standby system and the secondary standby system is the same as that shown in FIGS. . Further, it is possible to construct a redundant configuration that satisfies only the evaluation index and does not satisfy the operation rate. In this case, the determination flow of the primary standby system and the secondary standby system is as shown in FIG. 7 for the primary standby system, and the secondary standby system is a flow that always satisfies the conditions in the operation rate determination in FIGS. 8 to 10. realizable.

  In addition, a redundant configuration having only an occupied or shared primary standby system as a standby system, or only an occupied or shared secondary standby system as a standby system while satisfying at least one of service quality and evaluation index It is also possible to determine a redundant configuration having When determining the redundant configuration having only the primary standby system as the standby system, the primary standby system determination flow shown in FIG. 7 is followed by the flow in which the secondary standby system shown in FIGS. A redundant configuration having only a standby system is determined. In this case, the other signal sharing determination unit performs the same determination as the sharing determination shown in FIG. When determining the redundant configuration having only the secondary standby system as the standby system, after the process up to the addition of the active system (step S402) in FIG. 7 is executed, the process proceeds to the flow in FIGS. The configuration is determined.

  As described above, in the present embodiment, a redundant configuration corresponding to different service qualities can be constructed in the same device by constructing a redundant configuration corresponding to the service quality on the device side. Therefore, a plurality of types of devices are not required for each redundant configuration, and it is possible to construct a redundant configuration corresponding to a plurality of service qualities with one type of device. In this embodiment, in addition to the equipment cost as an evaluation index, it is also possible to construct a redundant configuration using the total number of repairs per year and the total cost of the equipment cost and the repair cost as an evaluation index. A redundant configuration can be constructed. In the present embodiment, a redundant configuration can be constructed remotely by using the management device 21 to remotely control the transmission node 10. In the present embodiment, a plurality of different redundant configurations can be constructed in the same transmission node 10. In this embodiment, a primary standby system is set as a standby system for switching to a working system when a failure occurs, and a secondary standby system is set as a standby system for reconstructing the redundant configuration after switching recovery. It is possible. Depending on the number and combination of these spare systems, it is possible to cope with fine service quality.

  In the present embodiment, when a failure occurs in the active system, switching recovery from the active system to the primary standby system is executed. If a secondary standby system has been set up after switching recovery, assign it to a new primary standby system using the secondary standby system, and rebuild the configuration of the active system and the primary standby system before the failure occurs. It is possible to maintain the configuration of the active system and the primary standby system before the failure occurs. With this recovery method, even after a failure occurs, recovery performance equivalent to that before the failure can be realized. In addition, this secondary standby system can be shared between redundant configurations of different or the same service quality, and can be realized while suppressing a significant increase in equipment cost for a plurality of failures more than conventional.

You may make it implement | achieve each apparatus in embodiment mentioned above with a computer. In that case, a program for realizing this function may be recorded on a computer-readable recording medium, and the program recorded on this recording medium may be read into a computer system and executed. Here, the “computer system” includes an OS and hardware such as peripheral devices. The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory inside a computer system serving as a server or a client in that case may be included and a program held for a certain period of time. Further, the program may be a program for realizing a part of the above-described functions, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system. You may implement | achieve using programmable logic devices, such as FPGA (Field Programmable Gate Array).
The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes designs and the like that do not depart from the gist of the present invention.

DESCRIPTION OF SYMBOLS 10 ... Transmission node, 11 ... Electric signal switching device, 12a-12f ... Transmitter / receiver, 13 ... Optical cross-connect device, 14 ... Control device, 21 ... Management device, 22 ... Management database

Claims (4)

A transmission node device having a redundant configuration that performs recovery from a failure by switching the transmission path from the active system to the standby system when a failure occurs;
A management device that determines a redundant configuration of the transmission node device based on at least one of quality of service or evaluation index,
The transmission node device is a communication system that sets a redundant configuration based on a control signal received from the management device.   The communication system according to claim 1, wherein the management device determines a redundant configuration based on at least one evaluation index of equipment cost, a preset number of repairs, or total cost.   The management device has, as the redundant configuration, a redundant configuration that satisfies service quality indicating whether or not instantaneous interruption is allowed at the time of switching recovery when a failure occurs in the active system, or switching for one active system For a redundant configuration with a shared primary standby system having a spare as a shared switching destination for a dedicated primary standby system or a plurality of active systems with one spare as a destination, or for occurrence of a failure in the active system Determine a redundant configuration that satisfies at least one of the redundant configurations with an occupied or shared secondary standby system to reconstruct the active system before the failure occurs or the configuration consisting of the active system and the primary standby system The communication system according to claim 1. The management device determines a redundant configuration of the transmission node device based on at least one of the service quality and the evaluation index;
The transmission node device sets a redundant configuration based on a control signal received from the management device;
A redundant configuration setting method.

Images