Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam FCSS_EFW_AD-7.6 Topic 5 Question 3 Discussion

Actual exam question for Fortinet's FCSS_EFW_AD-7.6 exam
Question #: 3
Topic #: 5
[All FCSS_EFW_AD-7.6 Questions]

Refer to the exhibit, which shows an ADVPN network

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.

What two options must the administrator configure in BGP? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B

In this ADVPN (Auto-Discovery VPN) network, there are two hubs (Hub A and Hub B) connected via EBGP, while IBGP is used within each overlay. To ensure proper BGP routing between the overlays, the administrator must configure specific BGP options..

set ebgp-enforce-multihop enable

By default, EBGP requires directly connected neighbors. Since Hub A and Hub B are not directly connected but reach each other over an IPsec tunnel, multihop must be enabled for EBGP sessions to work.

set next-hop-self enable

In IBGP, the next-hop attribute does not change by default. When an IBGP route is advertised from a spoke to another hub or spoke, the next-hop needs to be updated to ensure proper reachability. Enabling next-hop-self forces the BGP speaker to advertise itself as the next-hop, ensuring that all spokes properly reach routes across the overlays.


Contribute your Thoughts:

Claudio
5 days ago
I think C) set ibgp-enforce-multihop advpn is also important for this ADVPN setup.
upvoted 0 times
...
Letha
11 days ago
B) set next-hop-self enable is definitely the way to go.
upvoted 0 times
...
Jerrod
16 days ago
I feel like I've seen questions like this before, so I'm cautiously optimistic. I'll start by identifying the key requirements - connecting the two overlay networks using IBGP and EBGP. Then I'll carefully consider each of the options to determine the two most relevant configurations.
upvoted 0 times
...
Leota
21 days ago
Okay, let's see. I'm pretty sure we need to enable something to handle the multi-hop nature of the ADVPN connections. And we'll probably need to set the next-hop to ensure the routes are propagated correctly between the networks. I'll give it a shot and see if I can narrow it down.
upvoted 0 times
...
Carla
26 days ago
Hmm, this seems like a tricky one. I'm a bit confused about the difference between IBGP and EBGP and how they might apply in an ADVPN setup. I'll need to review my BGP notes to make sure I understand the right configuration options.
upvoted 0 times
...
Patria
1 months ago
I think I'd start by looking at the exhibit to understand the ADVPN network topology. Then I'd focus on the BGP configuration options, trying to determine which ones are relevant for connecting the two overlay networks.
upvoted 0 times
...

Save Cancel