In the case of detection of failure on a direct link interconnecting Master and Backup upstream switches, a control module of the Master upstream switch sends a partial failure message representing the occurrence of partial failure in the Master upstream switch via any of multiple lines connected to multiple ports of the Master upstream switch to the Backup upstream switch. Upon reception of the partial failure message from the Master upstream switch, a control module of the Backup upstream switch identifies partial failure occurring in the Master upstream switch and keeps the Backup operating status of the Backup upstream switch. Upon no reception of the partial failure message from the Master upstream switch, on the other hand, the control module of the Backup upstream switch identifies total failure occurring in the Master upstream switch and switches over the operating status of the Backup upstream switch from Backup to Master. In the event of failure occurring in the Master upstream switch, this arrangement effectively prevents unintentional interruption of data communication but ensures normal data communication in a network without causing the double-master state and the control loop in the network.