nerdexam
Fortinet

NSE7_EFW-7.2 · Question #41

Winch two statements about ADVPN are true? (Choose two)

The correct answer is A. auto-discovery-receiver must be set to enable on the spokes C. lt supports NAI for on-demand tunnels. ADVPN (Auto Discovery VPN) is a feature that allows to dynamically establish direct tunnels (called shortcuts) between the spokes of a traditional Hub and Spoke architecture. The auto- discovery receiver must be set to enable on the spokes to allow them to receive NHRP messages…

FortiGate VPN

Question

Winch two statements about ADVPN are true? (Choose two)

Options

  • Aauto-discovery-receiver must be set to enable on the spokes
  • BSpoke to-spoke traffic never goes through the hub
  • Clt supports NAI for on-demand tunnels
  • DRouting is configured by enabling add-advpn-route

How the community answered

(26 responses)
  • A
    81% (21)
  • B
    8% (2)
  • D
    12% (3)

Explanation

ADVPN (Auto Discovery VPN) is a feature that allows to dynamically establish direct tunnels (called shortcuts) between the spokes of a traditional Hub and Spoke architecture. The auto- discovery receiver must be set to enable on the spokes to allow them to receive NHRP messages from the hub and other spokes. NHRP (Next Hop Resolution Protocol) is used for on-demand tunnels, which are established when there is traffic between spokes. Routing is configured by enabling add-nhrp-route, not add-advpn-route.

Topics

#ADVPN#auto-discovery-receiver#spoke configuration#on-demand tunnels

Community Discussion

No community discussion yet for this question.

Full NSE7_EFW-7.2 Practice