350-501 · Question #276
Refer to the exhibit. ISP ASN 65100 provides Internet services to router CE-1 and receives customer prefix 198.18.18.0/24 via eBGP. An administrator for the ISP is now provisioning RTBH services to pr
The correct answer is A. route-map RTBH-CUSTOMER-IN permit 10. To implement Remote Triggered Black Hole (RTBH) services for a customer, the RTBH trigger router must use a route-map to set the next-hop to a discard address and assign a specific blackhole BGP community to the target prefix.
Question
Refer to the exhibit. ISP ASN 65100 provides Internet services to router CE-1 and receives customer prefix 198.18.18.0/24 via eBGP. An administrator for the ISP is now provisioning RTBH services to provide on-demand data-plane security for the customer’s IP space. Which route-map configuration must the administrator apply to router RTBH-1 to complete the implementation of RTBH services to CE-1?
Exhibit
Options
- Aroute-map RTBH-CUSTOMER-IN permit 10
- Broute-map RTBH-CUSTOMER-IN permit 10
- Croute-map RTBH-CUSTOMER-IN permit 10
- Droute-map RTBH-CUSTOMER-IN permit 10
How the community answered
(41 responses)- A83% (34)
- B5% (2)
- C10% (4)
- D2% (1)
Why each option
To implement Remote Triggered Black Hole (RTBH) services for a customer, the RTBH trigger router must use a route-map to set the next-hop to a discard address and assign a specific blackhole BGP community to the target prefix.
The route-map configuration for RTBH on the trigger router must specify the discard next-hop (e.g., 192.0.2.1) and apply a specific blackhole community (e.g., 65100:666). This causes other BGP routers to install a discard route for the blackholed prefix when they receive this advertisement, effectively dropping traffic to the victim.
Without the specific configuration details from this choice, it is assumed to either lack the critical `set ip next-hop` and `set community` commands or include incorrect configurations for an RTBH implementation.
Without the specific configuration details from this choice, it is assumed to either lack the critical `set ip next-hop` and `set community` commands or include incorrect configurations for an RTBH implementation.
Without the specific configuration details from this choice, it is assumed to either lack the critical `set ip next-hop` and `set community` commands or include incorrect configurations for an RTBH implementation.
Concept tested: BGP Remote Triggered Black Hole (RTBH) configuration
Source: https://www.cisco.com/c/en/us/td/docs/ios/solutions_docs/rtr_blackhole.html
Topics
Community Discussion
No community discussion yet for this question.