NSE6-SDW-AD-7-6: Fortinet NSE 6 - SD-WAN 7.6 Enterprise AdministratorDemo

By Fortinet · Question Mode

QuestionQ34

Advanced IPsec

Refer to the exhibit.

Question Image

Two hub-and-spoke groups are linked by redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.

Which two configuration settings are necessary for spoke A1 to establish an auto-discovery VPN (ADVPN) shortcut with spoke B2?

Choose two
  • A On the hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
  • B On the spokes, auto-discovery-receiver must be enabled on the IPsec VPNs to the hub.
  • C On the hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
  • D On the spokes, auto-discovery-sender must be enabled on the IPsec VPNs to hubs.
Explanation

An ADVPN shortcut is initiated when the source spoke sends an auto-discovery message through its hub, requiring auto-discovery-sender on the spoke-to-hub IPsec VPN. For spokes in different hub-and-spoke groups, the discovery messages must cross the hub-to-hub tunnels, which require auto-discovery-forwarder so they can participate in the auto-discovery process.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!