nerdexam
Fortinet

FCSS_EFW_AD-7.4 · Question #1

Refer to the exhibit, which shows an ADVPN network. An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2. What two options must the administrator…

The correct answer is A. set ebgp-enforce-multrhop enable B. set next-hop-self enable. In this ADVPN (Auto-Discovery VPN) network, there are two hubs (Hub A and Hub B) connected via EBGP, while IBGP is used within each overlay. To ensure proper BGP routing between the overlays, the administrator must configure specific BGP options.. set ebgp-enforce-multihop…

FortiGate-VM Configuration in Azure

Question

Refer to the exhibit, which shows an ADVPN network. An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2. What two options must the administrator configure in BGP? (Choose two.)

Exhibit

FCSS_EFW_AD-7.4 question #1 exhibit

Options

  • Aset ebgp-enforce-multrhop enable
  • Bset next-hop-self enable
  • Cset ibgp-enforce-multihop advpn
  • Dset attribute-unchanged next-hop

How the community answered

(18 responses)
  • A
    83% (15)
  • C
    11% (2)
  • D
    6% (1)

Explanation

In this ADVPN (Auto-Discovery VPN) network, there are two hubs (Hub A and Hub B) connected via EBGP, while IBGP is used within each overlay. To ensure proper BGP routing between the overlays, the administrator must configure specific BGP options.. set ebgp-enforce-multihop enable By default, EBGP requires directly connected neighbors. Since Hub A and Hub B are not directly connected but reach each other over an IPsec tunnel, multihop must be enabled for EBGP sessions to work. set next-hop-self enable In IBGP, the next-hop attribute does not change by default. When an IBGP route is advertised from a spoke to another hub or spoke, the next-hop needs to be updated to ensure proper reachability. Enabling next-hop-self forces the BGP speaker to advertise itself as the next-hop, ensuring that all spokes properly reach routes across the overlays.

Topics

#ADVPN#BGP#ebgp-enforce-multihop#next-hop-self

Community Discussion

No community discussion yet for this question.

Full FCSS_EFW_AD-7.4 Practice