FCSS_LED_AR-7.6 · Question #35
Refer to the exhibits. The exhibits show the WTP profile and VAP CLI configurations on FortiGate managing a remote AP. The AP is designed to grant a remote employee access to company network…
The correct answer is A. Configure the S231F wtp-profile to add a split tunneling ACL with a destination subnet of D. Configure the S231F wtp profile to enable split tunneling to the AP subnet using the command. The SSID is tunneled to FortiGate, so the client can reach corporate subnets but not the home LAN. Enabling split tunneling on the WTP profile and adding an ACL entry for the home subnet lets traffic to 192.168.1.0/24 be locally bridged at the remote AP.
Question
Refer to the exhibits. The exhibits show the WTP profile and VAP CLI configurations on FortiGate managing a remote AP. The AP is designed to grant a remote employee access to company network resources, including the database and AD servers. The employee can reach company resources but is unable to access a local printer at home. What two solutions are required to fix this issue? (Choose two.)
Exhibits
Options
- AConfigure the S231F wtp-profile to add a split tunneling ACL with a destination subnet of
- BConfigure the EmployeeHome VAP profile for local bridging using the command set local-
- CConfigure the EmployeeHome VAP profile to disable host isolation using the command set
- DConfigure the S231F wtp profile to enable split tunneling to the AP subnet using the command
How the community answered
(41 responses)- A56% (23)
- B17% (7)
- C27% (11)
Explanation
The SSID is tunneled to FortiGate, so the client can reach corporate subnets but not the home LAN. Enabling split tunneling on the WTP profile and adding an ACL entry for the home subnet lets traffic to 192.168.1.0/24 be locally bridged at the remote AP.
Topics
Community Discussion
No community discussion yet for this question.