nerdexam
Fortinet

NSE4_FGT-7.0 · Question #96

Examine the network diagram shown in the exhibit, and then answer the following question: A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and…

The correct answer is A. 172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0] D. 172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]. To achieve ECMP on a FortiGate, two static routes to the same destination must be configured with identical administrative distances and different next-hop gateways/interfaces to enable load balancing.

Routing

Question

Examine the network diagram shown in the exhibit, and then answer the following question:

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

Exhibit

NSE4_FGT-7.0 question #96 exhibit

Options

  • A172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]
  • B172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]
  • C172.20.2.0/24 (1/150) via 10.10.3.2, port3 [10/0]
  • D172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]

How the community answered

(28 responses)
  • A
    75% (21)
  • B
    14% (4)
  • C
    11% (3)

Why each option

To achieve ECMP on a FortiGate, two static routes to the same destination must be configured with identical administrative distances and different next-hop gateways/interfaces to enable load balancing.

A172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]Correct

This route specifies the destination 172.20.2.0/24 with an administrative distance of 1 and uses 10.10.1.2 via port1, establishing one path for ECMP.

B172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]

This route has an administrative distance of 25, which is higher than the administrative distance of 1 in options A and D, preventing it from participating in ECMP with those routes.

C172.20.2.0/24 (1/150) via 10.10.3.2, port3 [10/0]

While this route has the same administrative distance (1) as A and D, it uses 'port3' and if combined with option D, would mean both ECMP paths use the same interface, contradicting the requirement to use "both port1 and port3 links."

D172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]Correct

This route specifies the same destination 172.20.2.0/24 with an administrative distance of 1 and uses 10.30.3.2 via port3. When combined with option A, both routes have the same administrative distance, allowing FortiGate's ECMP to load balance traffic across both port1 and port3 links.

Concept tested: FortiGate static routes and ECMP configuration

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469904/ecmp-routing-for-static-routes

Topics

#ECMP#static routing#network design#load balancing

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice