Free Preparation Discussions
MENU
Fortinet Exam FCSS_EFW_AD-7.4 Topic 5 Question 5 Discussion
Topic #: 5
Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1.
Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?
When multiple remote sites connect to the same hub using overlapping subnets, FortiGate needs to determine which route should be used for traffic forwarding. The route-overlap setting in IPsec Phase 2 allows FortiGate to handle this scenario by deciding whether to keep the existing route (use-old) or replace it with a new route (use-new).
In an ECMP (Equal-Cost Multi-Path) routing setup, both routes should be retained and balanced, but FortiGate does not support ECMP directly over overlapping routes in IPsec Phase 2. Instead, an administrator must decide which connection takes precedence using route-overlap settings.
Alease
1 months agoTamesha
11 hours agoHermila
22 days agoJaleesa
1 months agoSabina
1 days agoSabina
2 days agoTheron
27 days agoWinfred
1 months agoMaricela
2 months agoMammie
9 days agoLuisa
21 days agoBobbye
2 months agoMaira
11 hours agoMadalyn
1 days agoChantell
2 days agoRose
3 days agoJanae
13 days agoBuffy
1 months agoSommer
2 months agoTracey
2 months agoNadine
2 months ago