CND (312-38) Network Defense Simulation

In this simulation, you will analyze the architectural requirements for inter-domain routing. You will learn to distinguish between protocols used within an organization and those required for communication between different Autonomous Systems (AS).

Network Scenario

An enterprise network (AS 65001) is establishing a redundant connection to a regional Internet Service Provider (AS 65010). The network administrator needs to ensure that the gateway routers can exchange reachability information with the ISP's edge routers to maintain optimal path selection for outbound traffic.

Internal Infrastructure

Core Switch: 10.0.0.1 (L3)
Interior Gateway Protocol: OSPF Area 0
End-user VLANs: 10.0.10.0/24, 10.0.20.0/24

Edge Architecture

Boundary Router: 172.16.0.1 (GW-1)
ISP Peer: 172.16.0.2
Required: Inter-AS route advertisement

Traffic & Logs

Boundary Router - Routing Table Update Log

[2023-10-24 14:22:01] INFO: Local neighbor 10.0.0.1 (OSPF) updated.
[2023-10-24 14:22:15] WARN: External peer 172.16.0.2 not found in internal IGP tables.
[2023-10-24 14:22:15] INFO: Protocol initialization required for Inter-AS exchange.
[2023-10-24 14:22:30] SYSTEM: Determining Exterior Gateway Protocol (EGP) requirements...
[2023-10-24 14:23:05] ALERT: Missing configuration for cross-domain gateway communication.

Question

Which of the following protocols are used to exchange routing information between the two gateways network of autonomous systems?

Expert Analysis

1. Network Context

The scenario describes communication between two different "Autonomous Systems" (AS). In networking, an AS is a collection of IP networks under the control of one or more network operators on behalf of a single administrative entity.

2. Identifying the Behavior

Communication within an AS uses Interior Gateway Protocols (IGP). Communication *between* systems requires an Exterior Gateway Protocol (EGP). While the specific protocol "EGP" is largely replaced by BGP today, the term "EGP" broadly defines the category of protocols used for this specific purpose in the context of routing hierarchies.

3. Why Answer C is Correct

EGP (Exterior Gateway Protocol) is specifically designed to exchange routing information between gateways of different Autonomous Systems. It ensures that the routers at the edge of AS 65001 can communicate with AS 65010.

4. Why Others are Wrong

OSPF: An Interior Gateway Protocol (IGP) used for routing within a single AS.
IGMP: Used for managing IP multicast memberships.
ICMP: Used for diagnostics and error reporting (e.g., Ping), not for routing table exchange.

5. Defensive Action

When implementing EGP/BGP at the gateway, defenders must apply route filtering and MD5 authentication to prevent "Route Hijacking," where a malicious AS advertises paths they do not own to intercept traffic.

Mini Lesson: Traffic Pattern Recognition

In a network defense context, if you see high-volume routing updates coming from an external interface using a protocol like OSPF, it may indicate a misconfiguration or a "VLAN hopping" attack trying to peer with your internal backbone. Inter-AS traffic should strictly be encapsulated or handled via EGP/BGP at the boundary.

Ready for more practice?

Explore more CND simulations