NSE5-SSE-AD-7-6: Fortinet NSE 5 - FortiSASE and SD-WAN 7.6 Core Administrator

By Fortinet · Question Mode

QuestionQ26

VerifiedTroubleshooting Wireless Networks

Refer to the exhibit.

Question Image

An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt sends traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed through HUB1-VPN1. However, it is routed through HUB1-VPN3.

Based on the output in the exhibit, which two reasons, individually or together, could explain the observed behavior?

Choose two
Explanation

The routing table shows the only route to 10.0.0.0/8 is the static route (S) via HUB1-VPN3; HUB1-VPN1 only has BGP routes to 10.0.3.0/24 and 10.1.0.0/24, so it has no valid route to this destination and SD-WAN skips it as a candidate member (A). Among members, VPN3's priority value is 1 versus 15 for VPN1, so VPN3 has the lower route-priority value (higher preference) and its path wins (C). D is incorrect because the exhibit shows a static route in the routing-table output, not a policy route — policy (PBR) routes never appear in 'get router info routing-table'. B is wrong because in SLA mode with sla-compare-order the selection follows configured order/SLA state, and a numerically higher priority value actually means lower preference.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!