NSE7-SSE-AR-26: Fortinet NSE 7 - FortiSASE 26 Architect

By Fortinet · Question Mode

QuestionQ38

VerifiedSD-WAN traffic control and IPsec

Refer to the exhibit.

Question Image

Question Image

How does FortiGate process ICMP traffic whose source IP address is 10.0.1.125 and whose destination IP address is 128.66.0.125?

Explanation

The traffic matches the IPv4 SD-WAN service rule for source range 10.0.1.0–10.0.1.255 and destination range 128.66.0.0–128.66.255.255. Both port7 and port8 are selected members for that rule, and its SLA hash mode is round-robin, which distributes matching traffic across the selected interfaces in equal portions and circular order. Fortinet SD-WAN CLI reference

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!