Architecting Redundant PTP Deployments