NSE4_FGT-7.0 · Question #189
Refer to the exhibit. An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic. Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers?…
The correct answer is B. Administrator didn't configure a gateway for the SD-WAN members, or configured gateway is not D. The Enable probe packets setting is not enabled. This question identifies two critical configuration omissions that would prevent a FortiGate performance SLA from successfully sending probe packets to monitor network path health.
Question
Refer to the exhibit. An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic. Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)
Exhibit
Options
- AThe Detection Mode setting is not set to Passive.
- BAdministrator didn't configure a gateway for the SD-WAN members, or configured gateway is not
- CThe configured participants are not SD-WAN members.
- DThe Enable probe packets setting is not enabled.
How the community answered
(37 responses)- A5% (2)
- B84% (31)
- C11% (4)
Why each option
This question identifies two critical configuration omissions that would prevent a FortiGate performance SLA from successfully sending probe packets to monitor network path health.
Setting the detection mode to 'Passive' would monitor existing traffic rather than actively sending probes, so not being passive wouldn't prevent probe packets; rather, an 'Active' mode is usually associated with sending probes.
For FortiGate to send performance SLA probes, the SD-WAN member interfaces must have a correctly configured and reachable gateway. Without a gateway, the FortiGate cannot route the probe packets out to their specified destinations.
Performance SLAs are inherently designed for SD-WAN members. If participants are not SD-WAN members, the performance SLA itself would be misconfigured for its intended purpose, but the direct cause of not sending probes is more specific.
The 'Enable probe packets' setting within the performance SLA configuration must be explicitly enabled. If this setting is disabled, the FortiGate will not generate or transmit any probe packets, regardless of other settings.
Concept tested: FortiGate SD-WAN performance SLA troubleshooting
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/734267/sd-wan-performance-sla
Topics
Community Discussion
No community discussion yet for this question.