Free Preparation Discussions
MENU
Fortinet Exam FCSS_EFW_AD-7.4 Topic 5 Question 5 Discussion
Topic #: 5
Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1.
Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?
When multiple remote sites connect to the same hub using overlapping subnets, FortiGate needs to determine which route should be used for traffic forwarding. The route-overlap setting in IPsec Phase 2 allows FortiGate to handle this scenario by deciding whether to keep the existing route (use-old) or replace it with a new route (use-new).
In an ECMP (Equal-Cost Multi-Path) routing setup, both routes should be retained and balanced, but FortiGate does not support ECMP directly over overlapping routes in IPsec Phase 2. Instead, an administrator must decide which connection takes precedence using route-overlap settings.
Alease
2 months agoFletcher
14 days agoTamesha
15 days agoHermila
1 months agoJaleesa
2 months agoChana
7 days agoSabina
16 days agoSabina
17 days agoTheron
1 months agoWinfred
2 months agoMaricela
2 months agoMammie
24 days agoLuisa
1 months agoBobbye
2 months agoJerilyn
13 days agoBarrie
14 days agoMaira
15 days agoMadalyn
16 days agoChantell
17 days agoRose
18 days agoJanae
28 days agoBuffy
2 months agoSommer
2 months agoTracey
2 months agoNadine
2 months ago