NSE4 · Question #335
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
The correct answer is A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other C. Tunnels are negotiated dynamically between spokes.. ADVPN enables spokes to dynamically negotiate tunnels with each other on demand and relies on dynamic routing protocols to exchange routes for direct spoke-to-spoke communication.
Question
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
Options
- AIt requires the use of dynamic routing protocols so that spokes can learn the routes to other
- BADVPN is only supported with IKEv2.
- CTunnels are negotiated dynamically between spokes.
- DEvery spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase
How the community answered
(45 responses)- A93% (42)
- B2% (1)
- D4% (2)
Why each option
ADVPN enables spokes to dynamically negotiate tunnels with each other on demand and relies on dynamic routing protocols to exchange routes for direct spoke-to-spoke communication.
ADVPN relies on dynamic routing protocols (like OSPF or BGP) running over the hub-and-spoke tunnels to allow spokes to discover and learn routes to other spokes' networks for direct communication.
ADVPN can be configured using both IKEv1 and IKEv2, although IKEv2 offers advantages and is often preferred.
A key characteristic of ADVPN is its ability to dynamically establish direct spoke-to-spoke IPsec tunnels only when traffic needs to flow between them, rather than requiring permanent static tunnels.
The purpose of ADVPN is to avoid the need for configuring static tunnels between every spoke, as it automates the negotiation of spoke-to-spoke tunnels on demand.
Concept tested: ADVPN functionality and requirements
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/332152/advpn-overview
Topics
Community Discussion
No community discussion yet for this question.