To achieve redundancy, how many connections from the same SC Series controller are required per fault domain?