NSE4_FGT-7.0 · Question #96
Examine the network diagram shown in the exhibit, and then answer the following question: A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and…
The correct answer is A. 172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0] D. 172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]. To achieve ECMP on a FortiGate, two static routes to the same destination must be configured with identical administrative distances and different next-hop gateways/interfaces to enable load balancing.
Question
Examine the network diagram shown in the exhibit, and then answer the following question:
A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)
Exhibit
Options
- A172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]
- B172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]
- C172.20.2.0/24 (1/150) via 10.10.3.2, port3 [10/0]
- D172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]
How the community answered
(28 responses)- A75% (21)
- B14% (4)
- C11% (3)
Why each option
To achieve ECMP on a FortiGate, two static routes to the same destination must be configured with identical administrative distances and different next-hop gateways/interfaces to enable load balancing.
This route specifies the destination 172.20.2.0/24 with an administrative distance of 1 and uses 10.10.1.2 via port1, establishing one path for ECMP.
This route has an administrative distance of 25, which is higher than the administrative distance of 1 in options A and D, preventing it from participating in ECMP with those routes.
While this route has the same administrative distance (1) as A and D, it uses 'port3' and if combined with option D, would mean both ECMP paths use the same interface, contradicting the requirement to use "both port1 and port3 links."
This route specifies the same destination 172.20.2.0/24 with an administrative distance of 1 and uses 10.30.3.2 via port3. When combined with option A, both routes have the same administrative distance, allowing FortiGate's ECMP to load balance traffic across both port1 and port3 links.
Concept tested: FortiGate static routes and ECMP configuration
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469904/ecmp-routing-for-static-routes
Topics
Community Discussion
No community discussion yet for this question.
