1
00:00:00,000 --> 00:00:03,472
[AUDIO LOGO]

2
00:00:03,472 --> 00:00:09,140

3
00:00:09,140 --> 00:00:12,430
Congratulations on
completing another skill.

4
00:00:12,430 --> 00:00:17,170
Now it's time for a review
in the form of a quiz.

5
00:00:17,170 --> 00:00:21,420
So let's go ahead and jump
in with our first question.

6
00:00:21,420 --> 00:00:23,960
What are the two types of RTBH?

7
00:00:23,960 --> 00:00:30,320

8
00:00:30,320 --> 00:00:35,690
So hopefully, we remember that
RTBH is your remote triggered

9
00:00:35,690 --> 00:00:37,340
black hole filtering.

10
00:00:37,340 --> 00:00:42,230
And the two types of that
are destination-based.

11
00:00:42,230 --> 00:00:44,210
This is going to
filter the traffic

12
00:00:44,210 --> 00:00:46,040
based on where it's going.

13
00:00:46,040 --> 00:00:49,500
And source-based,
which is, of course,

14
00:00:49,500 --> 00:00:53,850
going to filter based on where
the traffic is coming from.

15
00:00:53,850 --> 00:00:56,060
So that means that for
this question, our two

16
00:00:56,060 --> 00:01:01,320
correct answers are 2 and 4.

17
00:01:01,320 --> 00:01:02,940
Next question.

18
00:01:02,940 --> 00:01:07,740
When you enable TTL
security, all BGP packets

19
00:01:07,740 --> 00:01:10,755
are then sent with a TTL of--

20
00:01:10,755 --> 00:01:16,840

21
00:01:16,840 --> 00:01:20,730
So hopefully, we remember
how TTL security works.

22
00:01:20,730 --> 00:01:26,970
It sends all of the BGP
packets with the maximum TTL.

23
00:01:26,970 --> 00:01:30,750
And then there's a TTL
on the receiving side

24
00:01:30,750 --> 00:01:33,450
that's acting as a
minimum threshold.

25
00:01:33,450 --> 00:01:39,280
Well, the maximum value
for the TTL is 255.

26
00:01:39,280 --> 00:01:44,190
So in this case, that would
make 3 the correct answer.

27
00:01:44,190 --> 00:01:45,630
Final question.

28
00:01:45,630 --> 00:01:49,050
What is the default
behavior of route

29
00:01:49,050 --> 00:01:52,410
limiting when the
maximum is exceeded?

30
00:01:52,410 --> 00:01:58,370

31
00:01:58,370 --> 00:02:01,390
So for this one, let's
just go down our list.

32
00:02:01,390 --> 00:02:05,260
Our first answer is
to discard any routes

33
00:02:05,260 --> 00:02:08,060
in excess of the maximum.

34
00:02:08,060 --> 00:02:11,620
Now that actually doesn't
sound like a bad answer.

35
00:02:11,620 --> 00:02:14,110
However, that's not
one of our choices.

36
00:02:14,110 --> 00:02:17,110
Discarding routes is
not one of the things

37
00:02:17,110 --> 00:02:19,100
that route limiting does.

38
00:02:19,100 --> 00:02:24,130
Number 2, just send a
syslog notification.

39
00:02:24,130 --> 00:02:28,990
Well, this also is not
correct simply because it

40
00:02:28,990 --> 00:02:32,140
says the default behavior.

41
00:02:32,140 --> 00:02:36,640
Can we have it just send
a syslog notification?

42
00:02:36,640 --> 00:02:37,990
Yes.

43
00:02:37,990 --> 00:02:41,120
If we add the
warning only option,

44
00:02:41,120 --> 00:02:44,110
then 2 is exactly
what it would do.

45
00:02:44,110 --> 00:02:46,810
But that's not the
default behavior.

46
00:02:46,810 --> 00:02:50,290
Number 3, take
the neighbor down.

47
00:02:50,290 --> 00:02:52,610
That actually is what it does.

48
00:02:52,610 --> 00:02:56,950
It sends a BGP notification,
shuts down the neighborship.

49
00:02:56,950 --> 00:03:01,970
Now we also have an option to
have it automatically restart

50
00:03:01,970 --> 00:03:04,310
after a certain amount of time.

51
00:03:04,310 --> 00:03:07,340
But that wouldn't really change
the answer to this question,

52
00:03:07,340 --> 00:03:10,230
whether we configure
it to restart or not.

53
00:03:10,230 --> 00:03:14,060
And number 4 is to reload
the linecard connected

54
00:03:14,060 --> 00:03:15,170
to the neighbor.

55
00:03:15,170 --> 00:03:17,610
This is just simply incorrect.

56
00:03:17,610 --> 00:03:23,220
So number 3 would be our correct
answer for this question.

57
00:03:23,220 --> 00:03:25,560
So that concludes this quiz.

58
00:03:25,560 --> 00:03:29,150
If you find that you are missing
any of the information needed

59
00:03:29,150 --> 00:03:31,400
to answer these
questions, I would

60
00:03:31,400 --> 00:03:35,240
encourage you to go back and
review the sources referenced

61
00:03:35,240 --> 00:03:37,110
on each question.

62
00:03:37,110 --> 00:03:40,280
Otherwise, congratulations
on completing

63
00:03:40,280 --> 00:03:42,810
implementing BGP security.

64
00:03:42,810 --> 00:03:45,140
I hope this has been
informative for you.

65
00:03:45,140 --> 00:03:48,340
And I'd like to thank
you for viewing.

66
00:03:48,340 --> 00:03:52,000