NSE6-SDW-AD-7-6: Fortinet NSE 6 - SD-WAN 7.6 Enterprise AdministratorDemo

By Fortinet · Question Mode

QuestionQ4

Advanced IPsec

Refer to the exhibit.

Question Image

You used the SD-WAN overlay orchestrator to prepare an IPsec tunnel configuration for a hub-and-spoke SD-WAN topology. The exhibit displays the FortiManager installation preview for one FortiGate device.

Based on the exhibit, which statement accurately describes the configuration applied to the FortiGate device?

  • A It is a hub device. It will automatically discover the spoke devices and add them to the SD-WAN topology.
  • B It is a spoke device that establishes dynamic IPsec tunnels to the hub. The local subnet range is 10.10.128.0/23.
  • C It is a hub device. It can send ADVPN shortcut offers.
  • D It is a spoke device that establishes dynamic IPsec tunnels to the hub. It can send auto-discovery VPN (ADVPN) shortcut requests.
Explanation

A dynamic Phase 1 IPsec interface configured with peertype any is the hub-side configuration that accepts dialup connections from spokes. Enabling auto-discovery-sender on that hub enables it to send ADVPN shortcut offers. Fortinet’s ADVPN hub examples use this same combination of settings.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!