The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is 10.1.1.0/24. The headquarters' subnet is 10.2.2.0/24.
The desired usage for tunA and tunB has been defined as follows:

- sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
- sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
- sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB

Which static routing configuration meets the requirements?

Question

The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is 10.1.1.0/24. The headquarters' subnet is 10.2.2.0/24.
The desired usage for tunA and tunB has been defined as follows:

- sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
- sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
- sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB

Which static routing configuration meets the requirements?

Accepted Answer

B. config router static
 edit 1
 set dst 10.2.2.0 255.255.255.0
 set distance 10
 set priority 5
 set device "tunA"
 next
 edit 2
 set dst 10.2.2.0 255.255.255.0
 set distance 10
 set priority 10
 set device "tunB"
 next
 end

Answer

A. config router static
 edit 1
 set dst 10.2.2.0 255.255.255.0
 set distance 10
 set device "tunA"
 next
 edit 2
 set dst 10.2.2.0 255.255.255.0
 set distance 20
 set device "tunB"
 next
 end

Answer

C. config router static
 edit 1
 set dst 10.2.2.0 255.255.255.0
 set distance 10
 set weight 20
 set device "tunA"
 next
 edit 2
 set dst 10.2.2.0 255.255.255.0
 set distance 10
 set weight 10
 set device "tunB"
 next
 end

Answer

D. config router static
 edit 1
 set dst 10.2.2.0 255.255.255.0
 set distance 10
 set device "tunA"
 next
 edit 2
 set dst 10.2.2.0 255.255.255.0
 set distance 10
 set device "tunB"
 next
 end

The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is…

Question

Options

How the community answered

Community Discussion