Fault tolerance considerations suggest that the DC- DC converters in the nodes should be redundant. A layered protection scheme is being designed to allow rapid and safe restoration of as much of the system as possible in the event of a cable fault or node failure.