Which hierarchical design characteristic would be recommended at both the core and distribution layers to protect the network in the case of a route failure?