FCSS_NST_SE-7.6 · Question #29
Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network. An administrator would like to lest session failover…
The correct answer is A. Change the priority of the port1 static route to 11. D. Configure set snat-route-change enable. set snat-route-change enable - With it disabled, existing SNAT sessions keep using the original egress interface even if routing changes. Enabling it lets the FortiGate remap the live session to the new route immediately. Change port1 route priority to 11 - Raising port1's…
Question
Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network. An administrator would like to lest session failover between the two service provider connections. Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)
Exhibits
Options
- AChange the priority of the port1 static route to 11.
- BChange the priority of the port2 static route to 5.
- CConfigure unset snap-route-change to return it to the default setting.
- DConfigure set snat-route-change enable.
How the community answered
(27 responses)- A63% (17)
- B26% (7)
- C11% (3)
Explanation
set snat-route-change enable - With it disabled, existing SNAT sessions keep using the original egress interface even if routing changes. Enabling it lets the FortiGate remap the live session to the new route immediately. Change port1 route priority to 11 - Raising port1's priority makes port2's route (priority 10) become the best path, so the session will switch to port2 once SNAT route change is allowed.
Topics
Community Discussion
No community discussion yet for this question.