Fortinet FCSS_EFW_AD-7.6 Exam - Topic 5 Question 3 Discussion

Actual exam question for Fortinet's FCSS_EFW_AD-7.6 exam

Question #: 3
Topic #: 5

[All FCSS_EFW_AD-7.6 Questions]

Refer to the exhibit, which shows an ADVPN network

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.

What two options must the administrator configure in BGP? (Choose two.)

Aset ebgp-enforce-multrhop enable

Bset next-hop-self enable

Cset ibgp-enforce-multihop advpn

Dset attribute-unchanged next-hop

Show Suggested Answer

Suggested Answer: A, B

In this ADVPN (Auto-Discovery VPN) network, there are two hubs (Hub A and Hub B) connected via EBGP, while IBGP is used within each overlay. To ensure proper BGP routing between the overlays, the administrator must configure specific BGP options..

set ebgp-enforce-multihop enable

By default, EBGP requires directly connected neighbors. Since Hub A and Hub B are not directly connected but reach each other over an IPsec tunnel, multihop must be enabled for EBGP sessions to work.

set next-hop-self enable

In IBGP, the next-hop attribute does not change by default. When an IBGP route is advertised from a spoke to another hub or spoke, the next-hop needs to be updated to ensure proper reachability. Enabling next-hop-self forces the BGP speaker to advertise itself as the next-hop, ensuring that all spokes properly reach routes across the overlays.

by Linwood at Oct 05, 2025, 11:54 PM

Limited Time Offer

25%

Off

Get Premium FCSS_EFW_AD-7.6 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Luisa

3 months ago

I’d go with B and D for sure. They maintain the next-hop.

upvoted 0 times

...

Christa

3 months ago

I think B is a must, but A seems too specific.

upvoted 0 times

...

Janna

3 months ago

I agree with Daniel. C is key for IBGP connections.

upvoted 0 times

...

Sina

4 months ago

I’m not sure about A. B and D seem safer for stability.

upvoted 0 times

...

Daniel

4 months ago

I’m leaning towards A and C. Multihop is crucial in ADVPN.

upvoted 0 times

...

Emerson

4 months ago

I feel the same! B is definitely important for next-hop.

upvoted 0 times

...

Rosalia

4 months ago

This question is tricky! I think B and D might be the right choices.

upvoted 0 times

...

Clay

4 months ago

Definitely need to set attribute-unchanged next-hop!

upvoted 0 times

...

Lai

4 months ago

I thought we didn't need multihop for ADVPN setups?

upvoted 0 times

...

Vanda

5 months ago

I think option A is a must too.

upvoted 0 times

...

Asuncion

5 months ago

I definitely remember that next-hop-self is crucial for IBGP, but I can't shake the feeling that there might be another option that fits better.

upvoted 0 times

...

Filiberto

5 months ago

Haha, I bet the administrator is scratching their head trying to figure this one out!

upvoted 0 times

...

Amalia

5 months ago

Gotta enable next-hop-self for sure!

upvoted 0 times

...

Allene

5 months ago

I practiced a similar question where we had to configure BGP attributes, and I feel like "set attribute-unchanged next-hop" might be relevant for this scenario.

upvoted 0 times

...

Stefanie

5 months ago

I think I remember something about enabling next-hop-self for IBGP, but I'm not entirely sure if it's the right option here.

upvoted 0 times

...

Eugene

6 months ago

I’m a bit confused about the multihop options. I thought "set ebgp-enforce-multihop enable" was important, but I can't recall if it applies to both IBGP and EBGP.

upvoted 0 times

...

Dorothy

6 months ago

Wait, are we really using EBGP for this? Seems off.

upvoted 0 times

...

Isadora

6 months ago

Wait, is this a trick question? I'm going to go with B) and C) just to be safe.

upvoted 0 times

...

Sharen

6 months ago

A) set ebgp-enforce-multrhop enable? Really? That's just silly.

upvoted 0 times

...

Jamal

7 months ago

D) set attribute-unchanged next-hop sounds like a good option too.

upvoted 0 times

...

Claudio

7 months ago

I think C) set ibgp-enforce-multihop advpn is also important for this ADVPN setup.

upvoted 0 times

...

Letha

7 months ago

B) set next-hop-self enable is definitely the way to go.

upvoted 0 times

...

Jerrod

7 months ago

I feel like I've seen questions like this before, so I'm cautiously optimistic. I'll start by identifying the key requirements - connecting the two overlay networks using IBGP and EBGP. Then I'll carefully consider each of the options to determine the two most relevant configurations.

upvoted 0 times

...

Leota

7 months ago

Okay, let's see. I'm pretty sure we need to enable something to handle the multi-hop nature of the ADVPN connections. And we'll probably need to set the next-hop to ensure the routes are propagated correctly between the networks. I'll give it a shot and see if I can narrow it down.

upvoted 0 times

...

Carla

8 months ago

Hmm, this seems like a tricky one. I'm a bit confused about the difference between IBGP and EBGP and how they might apply in an ADVPN setup. I'll need to review my BGP notes to make sure I understand the right configuration options.

upvoted 0 times

...

Patria

8 months ago

I think I'd start by looking at the exhibit to understand the ADVPN network topology. Then I'd focus on the BGP configuration options, trying to determine which ones are relevant for connecting the two overlay networks.

upvoted 0 times