Fortinet Exam NSE7_EFW-7.0 Topic 5 Question 28 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.0 exam

Question #: 28
Topic #: 5

Refer to the exhibits.

Which contain the partial configurations of two VPNs on FortiGate.

An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.

Which two changes must administrator make to fix the issue? (Choose two.)

AUse different pre-shared keys on both VPNs

BEnable Mode Config on both VPNs.

CSet up specific peer IDs on both VPNs.

DChange to aggressive mode on both VPNs.

Show Suggested Answer

Suggested Answer: C, D

To set peer-id, the VPN must be set in aggressive mode - https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-select-an-IPSec-dialup/ta-p/192292

by Stephen at Mar 16, 2024, 01:54 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joesph

5 days ago

Agreed, C. And enabling Mode Config on both VPNs might help as well. That could ensure the users are getting the correct configuration when they connect.

upvoted 0 times

...

Janine

6 days ago

Personally, I would start by checking the pre-shared keys. Making sure they are different on each VPN sounds like a good first step. And setting up specific peer IDs could also help distinguish between the two VPNs.

upvoted 0 times

...

Kanisha

7 days ago

You're right, A. I'm thinking the administrator might need to take a closer look at the VPN settings. Perhaps the pre-shared keys or the peer IDs are not set up correctly.

upvoted 0 times

...

Tamesha

8 days ago

Hmm, this is an interesting one. The issue seems to be that the FortiGate is not matching the user-2 VPN for the members of the Users-2 group. I wonder if the problem could be with the configuration of the VPN itself.

upvoted 0 times

...