Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet FCSS_EFW_AD-7.6 Exam - Topic 5 Question 3 Discussion

Refer to the exhibit, which shows an ADVPN networkAn administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.What two options must the administrator configure in BGP? (Choose two.)
A) set ebgp-enforce-multrhop enable and B) set next-hop-self enable
C) set ibgp-enforce-multihop advpn
D) set attribute-unchanged next-hop

Fortinet FCSS_EFW_AD-7.6 Exam - Topic 5 Question 3 Discussion

Actual exam question for Fortinet's FCSS_EFW_AD-7.6 exam
Question #: 3
Topic #: 5
[All FCSS_EFW_AD-7.6 Questions]

Refer to the exhibit, which shows an ADVPN network

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.

What two options must the administrator configure in BGP? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B

In this ADVPN (Auto-Discovery VPN) network, there are two hubs (Hub A and Hub B) connected via EBGP, while IBGP is used within each overlay. To ensure proper BGP routing between the overlays, the administrator must configure specific BGP options..

set ebgp-enforce-multihop enable

By default, EBGP requires directly connected neighbors. Since Hub A and Hub B are not directly connected but reach each other over an IPsec tunnel, multihop must be enabled for EBGP sessions to work.

set next-hop-self enable

In IBGP, the next-hop attribute does not change by default. When an IBGP route is advertised from a spoke to another hub or spoke, the next-hop needs to be updated to ensure proper reachability. Enabling next-hop-self forces the BGP speaker to advertise itself as the next-hop, ensuring that all spokes properly reach routes across the overlays.


by Linwood at Oct 05, 2025, 11:54 PM

Limited Time Offer

25%

Off

Get Premium FCSS_EFW_AD-7.6 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Luisa
5 months ago
I’d go with B and D for sure. They maintain the next-hop.
upvoted 0 times
...
Christa
5 months ago
I think B is a must, but A seems too specific.
upvoted 0 times
...
Janna
5 months ago
I agree with Daniel. C is key for IBGP connections.
upvoted 0 times
...
Sina
5 months ago
I’m not sure about A. B and D seem safer for stability.
upvoted 0 times
...
Daniel
5 months ago
I’m leaning towards A and C. Multihop is crucial in ADVPN.
upvoted 0 times
...
Emerson
5 months ago
I feel the same! B is definitely important for next-hop.
upvoted 0 times
...
Rosalia
6 months ago
This question is tricky! I think B and D might be the right choices.
upvoted 0 times
...
Clay
6 months ago
Definitely need to set attribute-unchanged next-hop!
upvoted 0 times
...
Lai
6 months ago
I thought we didn't need multihop for ADVPN setups?
upvoted 0 times
...
Vanda
6 months ago
I think option A is a must too.
upvoted 0 times
...
Asuncion
6 months ago
I definitely remember that next-hop-self is crucial for IBGP, but I can't shake the feeling that there might be another option that fits better.
upvoted 0 times
...
Filiberto
6 months ago
Haha, I bet the administrator is scratching their head trying to figure this one out!
upvoted 0 times
...
Amalia
7 months ago
Gotta enable next-hop-self for sure!
upvoted 0 times
...
Allene
7 months ago
I practiced a similar question where we had to configure BGP attributes, and I feel like "set attribute-unchanged next-hop" might be relevant for this scenario.
upvoted 0 times
...
Stefanie
7 months ago
I think I remember something about enabling next-hop-self for IBGP, but I'm not entirely sure if it's the right option here.
upvoted 0 times
...
Eugene
7 months ago
I’m a bit confused about the multihop options. I thought "set ebgp-enforce-multihop enable" was important, but I can't recall if it applies to both IBGP and EBGP.
upvoted 0 times
...
Dorothy
7 months ago
Wait, are we really using EBGP for this? Seems off.
upvoted 0 times
...
Isadora
8 months ago
Wait, is this a trick question? I'm going to go with B) and C) just to be safe.
upvoted 0 times
...
Sharen
8 months ago
A) set ebgp-enforce-multrhop enable? Really? That's just silly.
upvoted 0 times
...
Jamal
8 months ago
D) set attribute-unchanged next-hop sounds like a good option too.
upvoted 0 times
...
Claudio
8 months ago
I think C) set ibgp-enforce-multihop advpn is also important for this ADVPN setup.
upvoted 0 times
...
Letha
9 months ago
B) set next-hop-self enable is definitely the way to go.
upvoted 0 times
...
Jerrod
9 months ago
I feel like I've seen questions like this before, so I'm cautiously optimistic. I'll start by identifying the key requirements - connecting the two overlay networks using IBGP and EBGP. Then I'll carefully consider each of the options to determine the two most relevant configurations.
upvoted 0 times
...
Leota
9 months ago
Okay, let's see. I'm pretty sure we need to enable something to handle the multi-hop nature of the ADVPN connections. And we'll probably need to set the next-hop to ensure the routes are propagated correctly between the networks. I'll give it a shot and see if I can narrow it down.
upvoted 0 times
...
Carla
9 months ago
Hmm, this seems like a tricky one. I'm a bit confused about the difference between IBGP and EBGP and how they might apply in an ADVPN setup. I'll need to review my BGP notes to make sure I understand the right configuration options.
upvoted 0 times
...
Patria
9 months ago
I think I'd start by looking at the exhibit to understand the ADVPN network topology. Then I'd focus on the BGP configuration options, trying to determine which ones are relevant for connecting the two overlay networks.
upvoted 0 times
Jenelle
3 months ago
I’m leaning towards A and D for the configuration.
upvoted 0 times
...
Catrice
4 months ago
I think option A and B might be the right choices.
upvoted 0 times
...
Stacey
4 months ago
Definitely! The BGP options are crucial for the connection.
upvoted 0 times
...
Chu
4 months ago
I agree, the exhibit is key to understanding the setup.
upvoted 0 times
...
...

Save Cancel