NSE4 · Question #310
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)
The correct answer is B. The interface is a member of a virtual wire pair. C. The operation mode is transparent. D. The interface is a member of a zone. An interface on a FortiGate cannot be configured with an IP address if it is part of a virtual wire pair, if the FortiGate is in transparent mode, or if it is a member of a logical switch.
Question
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)
Options
- AThe interface has been configured for one-arm sniffer.
- BThe interface is a member of a virtual wire pair.
- CThe operation mode is transparent.
- DThe interface is a member of a zone.
- ECaptive portal is enabled in the interface.
How the community answered
(37 responses)- A5% (2)
- B84% (31)
- E11% (4)
Why each option
An interface on a FortiGate cannot be configured with an IP address if it is part of a virtual wire pair, if the FortiGate is in transparent mode, or if it is a member of a logical switch.
An interface configured for one-arm sniffer mode requires an IP address for management and for the sniffer to function and collect traffic.
An interface configured as part of a virtual wire pair operates at Layer 2 and does not carry an IP address, as the FortiGate functions transparently like a bridge.
When the FortiGate is operating in transparent mode, most interfaces function as Layer 2 bridges and therefore do not have their own IP addresses configured.
If an interface is a member of a software switch or hardware switch (which logically group interfaces for Layer 2 functionality, akin to a zone), the IP address is configured on the switch interface itself, not on the individual member interfaces.
Enabling a captive portal on an interface requires that interface to have an IP address to redirect user traffic and present the portal page.
Concept tested: FortiGate interface IP address configuration restrictions
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469905/interface-types
Topics
Community Discussion
No community discussion yet for this question.