NSE6-SDW-AD-7-6: Fortinet NSE 6 - SD-WAN 7.6 Enterprise AdministratorDemo

By Fortinet · Question Mode

QuestionQ37

SD-WAN troubleshooting

Refer to the exhibit.

Question Image

An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt sends traffic to the 10.0.0.0/8 network.

The administrator expects the traffic to match SD-WAN rule ID 1 and be routed through HUB1-VPN1. However, the traffic is routed through HUB1-VPN3.

Based on the output in the exhibit, which two reasons, separately or together, could account for the observed behavior?

Choose two
  • A HUB1-VPN3 has a lower route priority value (higher priority) than HUB1-VPN1.
  • B HUB1-VPN3 has a higher member configuration priority than HUB1-VPN1.
  • C The traffic matches a regular policy route configured with HUB1-VPN3 as the outgoing device.
  • D HUB1-VPN1 does not have a valid route to the destination.
Explanation

A lower route-priority value is preferred, and the routing table shows the 10.0.0.0/8 static route through HUB1-VPN3 with priority 10. SD-WAN also selects a member only when that member has a valid route to the particular destination. The displayed HUB1-VPN1 BGP routes are for other, more-specific prefixes, so HUB1-VPN1 may have no valid route for the relevant address within 10.0.0.0/8.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!