A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.

All traffic must be routed through the primary tunnel when both tunnels are up

The secondary tunnel must be used only if the primary tunnel goes down

In addition, FortiGate should be able to detect a dead tunnel to speed up tunnelfailover

Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

Question

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.

All traffic must be routed through the primary tunnel when both tunnels are up
The secondary tunnel must be used only if the primary tunnel goes down
In addition, FortiGate should be able to detect a dead tunnel to speed up tunnelfailover

Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

Accepted Answer

A. Enable Dead Peer Detection. B. Configure a lower distance on the static route for the primary tunnel, and a higher distance on the

Answer

C. Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.

Answer

D. Configure a higher distance on the static route for the primary tunnel, and a lower distance on the

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes. - All traffic must be routed through the primary tunnel when both…