Making IGP Robust to Link Failures