FCP_FGT_AD-7.6 · Question #33
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic. Which…
The correct answer is D. On Demand. Disable: Disable Dead Peer Detection. On-idle: Trigger Dead Peer Detection when no IPsec traffic is received. On-demand: Trigger Dead Peer Detection when no IPsec traffic is received AND FortiGate has been sending IPsec traffic. On-demand is the default setting.
Question
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic. Which DPD mode on FortiGate meets this requirement?
Options
- AEnabled
- BOn Idle
- CDisabled
- DOn Demand
How the community answered
(34 responses)- A6% (2)
- C3% (1)
- D91% (31)
Explanation
Disable: Disable Dead Peer Detection. On-idle: Trigger Dead Peer Detection when no IPsec traffic is received. On-demand: Trigger Dead Peer Detection when no IPsec traffic is received AND FortiGate has been sending IPsec traffic. On-demand is the default setting.
Topics
Community Discussion
No community discussion yet for this question.