Question 180
A post-incident design review discusses the following: A full-mesh iBGP design grows from 8 to 70 routers, producing an impractical number of peering sessions. Which preventive design control MOST DIRECTLY addresses this specific risk?
Explanation
Correct Answer
Test route-reflector redundancy and loop-prevention identifiers before scale-out. This control targets the underlying design risk. Route reflectors reduce the need for every iBGP speaker to peer with every other speaker, while preserving iBGP route propagation rules. The follow-up acceptance check remains: Clients receive intended reachable prefixes through both reflectors and reflector failure does not isolate the control plane.
Incorrect Answers
BGP multipath requires compatible selected paths under the platform’s path-equivalence rules; mere coexistence of peers is not enough. The repeat risk here is different: Route reflectors reduce the need for every iBGP speaker to peer with every other speaker, while preserving iBGP route propagation rules. A directly relevant preventive control is: Test route-reflector redundancy and loop-prevention identifiers before scale-out.
AS-path length can influence outside-AS best-path selection but remote networks keep final policy authority. The repeat risk here is different: Route reflectors reduce the need for every iBGP speaker to peer with every other speaker, while preserving iBGP route propagation rules. A directly relevant preventive control is: Test route-reflector redundancy and loop-prevention identifiers before scale-out.
BGP local preference is used within an AS to prefer an outbound path, with higher values preferred. The repeat risk here is different: Route reflectors reduce the need for every iBGP speaker to peer with every other speaker, while preserving iBGP route propagation rules. A directly relevant preventive control is: Test route-reflector redundancy and loop-prevention identifiers before scale-out.