FCP_FGT_AD-7.4 · Question #32
A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes. All traffic must be routed through the primary tunnel when both…
The correct answer is A. Enable Dead Peer Detection (DPD): Dead Peer Detection is crucial for detecting if the remote C. Configure a lower distance on the static route for the primary tunnel and a higher distance on. To configure redundant IPsec VPN tunnels on FortiGate with failover capability, the following two key configuration changes are required: peer is unreachable. By enabling DPD, FortiGate can quickly detect a dead tunnel, ensuring a faster failover to the secondary tunnel when…
Question
A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes. All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover. Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)
Options
- AEnable Dead Peer Detection (DPD): Dead Peer Detection is crucial for detecting if the remote
- BEnable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.
- CConfigure a lower distance on the static route for the primary tunnel and a higher distance on
- DConfigure a higher distance on the static route for the primary tunnel, and a lower distance on the
How the community answered
(37 responses)- A73% (27)
- B8% (3)
- D19% (7)
Explanation
To configure redundant IPsec VPN tunnels on FortiGate with failover capability, the following two key configuration changes are required: peer is unreachable. By enabling DPD, FortiGate can quickly detect a dead tunnel, ensuring a faster failover to the secondary tunnel when the primary tunnel goes down. the static route for the secondary tunnel: The static route with the lower distance (higher priority) will be used when both tunnels are operational. If the primary tunnel fails, the higher distance (lower priority) route for the secondary tunnel will take over, ensuring traffic is routed correctly.
Topics
Community Discussion
No community discussion yet for this question.