NSE7-SSE-AR-26: Fortinet NSE 7 - FortiSASE 26 Architect

By Fortinet · Question Mode

QuestionQ16

VerifiedSD-WAN traffic control and IPsec

You configure overlay tunnels for an SD-WAN hub-and-spoke topology that uses IPsec tunnels, BGP on loopback, and dynamic BGP.

Which two IPsec settings are recommended for this topology?

Choose two
Explanation

For a BGP-on-loopback SD-WAN overlay, the spoke IPsec tunnel is configured as a network device so it can participate as an SD-WAN overlay member, and it uses a localid to identify the spoke during IKE negotiation. The BGP peering itself terminates on loopback interfaces rather than relying on hub-assigned tunnel addresses through mode configuration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!