Geographical redundancy and an efficient switchover process to redundant equipment (210) is achieved by separating active main equipment (220) and standby redundant equipment in different geographical locations so that failures can be avoided in the event of a natural disaster or other event that affects an entire building or region. In addition, partial switchover can be performed for components or functions that become inoperative to corresponding redundant components in the standby equipment. To provide further redundancy and prevent unneeded switchovers, status or heartbeat messages are transmitted between the active main equipment and standby redundant equipment over two different networks.