FCSS-LED-AR-7-6: Fortinet NSE 6 - LAN Edge 7.6 ArchitectDemo

By Fortinet · Question Mode

QuestionQ15

Authentication

When diagnosing a FortLink connectivity problem between a FortiGate and a FortiSwitch, why is it important to check their time and date settings?

  • A Time synchronization is critical for the CAPWAP DTLS tunnel.
  • B Time and date are used to determine the encryption algorithm on FortiLink.
  • C Incorrect time synchronization may disrupt the FortiLink discovery protocol (LLDP or MCLAG).
  • D Matching time settings ensure proper STP convergence on the FortiLink interface.
Explanation

FortiLink CAPWAP management uses a DTLS-secured tunnel. Correct time is required to validate certificate validity periods during DTLS negotiation, so an incorrect clock can prevent the CAPWAP DTLS tunnel from establishing.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!