Answer the following questions for the network in Figure 1 assuming the valley-free export-all routing policy....

Transcribed Image Text:

Answer the following questions for the network in Figure 1 assuming the valley-free export-all routing policy. AS 39 AS 36 AS 33 AS 69 AS 66 AS 666 AS 99 AS 96 1 AS 93 1.2.10/23 1.2.8/21 Figure 1: Network and relationships. AS 33 and AS 93 announce the prefixes listed below them. 1. What would be the routing table at AS 69, without attack? 2. If no defense is deployed, what announcement (s) could AS 666 send, and to which ASes, to attract traffic sent to IP 1.2.11.2 from as many ASes as possible ? List the ASes whose traffic would be captured. 3. Repeat, if ASes 39, 69, 99, 33 and 93 adopt ROV, and AS 33 and/or AS 93 distribute appropriate ROA (s). Which ROA (s) should be distributed? 4. Repeat, if all ASes deploy ROV. 5. Repeat, if all ASes deploy ROV and path-end. 6. Repeat, if all ASes deploy ROV, and ASes 39, 69, 99, 33 and 93 adopt BGPsec, with 'security 3rd' policy (and allowing legacy announcements). 7. Repeat, if all ASes adopt both ROV and BGPsec, with 'security 3rd' policy (and allowing legacy announcements). 8. Repeat, if all ASes adopt both ROV and BGPsec, with 'security 1st' policy (and allowing legacy announcements). 9. Repeat, if all ASes adopt ROV and ASes 39, 69, 99, 33 and 93 adopt ASPA. Answer the following questions for the network in Figure 1 assuming the valley-free export-all routing policy. AS 39 AS 36 AS 33 AS 69 AS 66 AS 666 AS 99 AS 96 1 AS 93 1.2.10/23 1.2.8/21 Figure 1: Network and relationships. AS 33 and AS 93 announce the prefixes listed below them. 1. What would be the routing table at AS 69, without attack? 2. If no defense is deployed, what announcement (s) could AS 666 send, and to which ASes, to attract traffic sent to IP 1.2.11.2 from as many ASes as possible ? List the ASes whose traffic would be captured. 3. Repeat, if ASes 39, 69, 99, 33 and 93 adopt ROV, and AS 33 and/or AS 93 distribute appropriate ROA (s). Which ROA (s) should be distributed? 4. Repeat, if all ASes deploy ROV. 5. Repeat, if all ASes deploy ROV and path-end. 6. Repeat, if all ASes deploy ROV, and ASes 39, 69, 99, 33 and 93 adopt BGPsec, with 'security 3rd' policy (and allowing legacy announcements). 7. Repeat, if all ASes adopt both ROV and BGPsec, with 'security 3rd' policy (and allowing legacy announcements). 8. Repeat, if all ASes adopt both ROV and BGPsec, with 'security 1st' policy (and allowing legacy announcements). 9. Repeat, if all ASes adopt ROV and ASes 39, 69, 99, 33 and 93 adopt ASPA.

Answer rating: 100% (QA)

To answer these questions well need to analyze the routing behavior and the impact of different rout... View the full answer