NSE4 · Question #450
A FortiGate devices has two VDOMs in NAT/route mode. Which of the following solutions can be implemented by a network administrator to route traffic between the two VDOMs.(Choose two)
The correct answer is B. Manually create and configured an inter-VDOM link between yours. C. Interconnect and configure an external physical interface in one VDOM to another physical. Routing traffic between FortiGate VDOMs in NAT/route mode can be achieved by either manually configuring virtual inter-VDOM links or by physically connecting dedicated interfaces from each VDOM.
Question
A FortiGate devices has two VDOMs in NAT/route mode. Which of the following solutions can be implemented by a network administrator to route traffic between the two VDOMs.(Choose two)
Options
- AUse the inter-VDOMs links automatically created between all VDOMS.
- BManually create and configured an inter-VDOM link between yours.
- CInterconnect and configure an external physical interface in one VDOM to another physical
- DConfigure both VDOMs to share the same table.
How the community answered
(26 responses)- A8% (2)
- B73% (19)
- D19% (5)
Why each option
Routing traffic between FortiGate VDOMs in NAT/route mode can be achieved by either manually configuring virtual inter-VDOM links or by physically connecting dedicated interfaces from each VDOM.
FortiGate does not automatically create inter-VDOM links between all VDOMs; these virtual interfaces must be manually configured by an administrator if inter-VDOM routing is desired.
Manually creating and configuring an inter-VDOM link (a virtual interface) between the two VDOMs is a common and supported method to route traffic directly and logically between them.
Interconnecting and configuring an external physical interface in one VDOM to another physical interface in a different VDOM allows traffic to be routed between them as if they were separate physical devices connected by a cable.
VDOMs are designed for logical separation, each operating with its own distinct routing table; configuring them to share the same routing table would defeat the purpose of VDOM isolation in NAT/route mode.
Concept tested: Inter-VDOM routing methods (FortiGate)
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/523277/inter-vdom-links
Topics
Community Discussion
No community discussion yet for this question.