NSE7-SDW-7-0: Fortinet NSE 7 - SD-WAN 7.0Demo

By Fortinet · Question Mode

QuestionQ6

SD-WAN

Refer to the exhibit.

Question Image

An administrator is troubleshooting SD-WAN on a FortiGate. A device behind branch1_fgt sends traffic to the 10.0.0.0/8 network. The administrator expects this traffic to match SD-WAN rule ID 1 and be routed through T_INET_0_0. Instead, it is routed through T_INET_1_0.

Based on the output in the exhibit, which two reasons could cause this behavior?

Choose two
  • A The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.
  • B T_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.
  • C T_INET_0_0 does not have a valid route to the destination.
  • D T_INET_1_0 has a higher member configuration priority than T_INET_0_0.
Explanation

Regular policy routes take precedence over SD-WAN policy routes, so a matching policy route can send the traffic through T_INET_1_0. SD-WAN selects a member only when that member has a valid route to the destination; if T_INET_0_0 lacks a valid route to 10.0.0.0/8, the rule can use T_INET_1_0 instead. In manual mode, the service’s configured member order determines preference, not the member-level priority values.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!