Diversion: BGP + next L3

• Divert: BGP

  announce a /32 from the box
  
  no_export and no_advertise community
  

• Return:

Next layer 3 device

Victim traffic

Victim

clean traffic

Malicious

packets

L2 device

L3

R

Previous slide

Next slide

Back to first slide

View graphic version