NSE7-SSE-AR-26: Fortinet NSE 7 - FortiSASE 26 Architect

By Fortinet · Question Mode

QuestionQ20

VerifiedSD-WAN traffic control and IPsec

Refer to the exhibit.

Question Image

Two hub-and-spoke groups are linked by redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.

Which two configuration settings are necessary for spoke A1 to establish an auto-discovery VPN (ADVPN) shortcut with spoke B2?

Choose two
Explanation

For an inter-region ADVPN shortcut, the hub-to-hub IPsec VPNs must forward auto-discovery shortcut messages, and each spoke must accept the shortcut-discovery messages received through its VPN to the hub. Thus, enable auto-discovery-forwarder on the hub-to-hub VPNs and auto-discovery-receiver on the spoke-to-hub VPNs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!