NSE4_FGT-7.0 · Question #4
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
The correct answer is A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other C. Tunnels are negotiated dynamically between spokes. Auto Discovery VPN (ADVPN) enables spokes to dynamically negotiate direct tunnels between themselves and relies on dynamic routing protocols for route propagation among spokes.
Question
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
Options
- AIt requires the use of dynamic routing protocols so that spokes can learn the routes to other
- BADVPN is only supported with IKEv2.
- CTunnels are negotiated dynamically between spokes.
- DEvery spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase
How the community answered
(30 responses)- A90% (27)
- B3% (1)
- D7% (2)
Why each option
Auto Discovery VPN (ADVPN) enables spokes to dynamically negotiate direct tunnels between themselves and relies on dynamic routing protocols for route propagation among spokes.
ADVPN requires dynamic routing protocols, such as BGP or OSPF, to allow spokes to learn routes to other spokes via the hub, facilitating the establishment of direct spoke-to-spoke tunnels.
While FortiGate's ADVPN implementation primarily relies on IKEv2, the statement implies a universal restriction that may not apply to all ADVPN concepts or implementations across different vendors, making it not a universally best descriptive feature.
A core feature of ADVPN is its ability to dynamically negotiate and establish direct VPN tunnels between spokes, optimizing traffic flow by eliminating the need for traffic to traverse the hub after initial discovery.
ADVPN's primary purpose is to eliminate the need for manually configured static tunnels between every spoke, instead establishing them dynamically as needed.
Concept tested: FortiGate Auto Discovery VPN features
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469904/auto-discovery-vpn-advpn
Topics
Community Discussion
No community discussion yet for this question.