NSE4 · Question #486
Which action does the FortiGate take when link health monitor times out?
The correct answer is D. All routes using the next-hop gateway configured in the link health monitor are removed from. When a FortiGate's link health monitor times out, it removes all routes from the routing table that use the configured next-hop gateway that failed the health check.
Question
Which action does the FortiGate take when link health monitor times out?
Options
- AAll routes to the destination subnet configured in the link health monitor are removed from the
- BThe distance values of all routes using interface configured in the link health monitor are
- CThe priority values of all routes using configured in the link health monitor are increased.
- DAll routes using the next-hop gateway configured in the link health monitor are removed from
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- D93% (28)
Why each option
When a FortiGate's link health monitor times out, it removes all routes from the routing table that use the configured next-hop gateway that failed the health check.
The link health monitor is tied to a specific next-hop gateway; it's the routes using that gateway that are affected, not necessarily all routes to a destination subnet.
Increasing the administrative distance of routes would make them less preferred, but the direct action for a failed gateway is typically to remove the routes rather than just modify their distance.
Increasing priority values would make routes *more* preferred, which is the opposite of the desired behavior when a link or next-hop fails.
A link health monitor is configured to periodically check the reachability of a specific next-hop gateway. If the monitor times out (meaning the gateway is unreachable), the FortiGate's primary action is to remove all static routes from its routing table that are configured to use that failed next-hop gateway, effectively blackholing traffic or forcing it to fail over to another path.
Concept tested: FortiGate link health monitor actions
Source: https://docs.fortinet.com/document/fortigate/7.4.0/admin-guide/60225/sd-wan-health-checks
Topics
Community Discussion
No community discussion yet for this question.