View all questions & answers for the NSE 5 - FortiSwitch 7.6 Administrator Exam Materials exam

NSE 5 - FortiSwitch 7.6 Administrator Exam Materials - Question #15 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibits. Traffic arriving on port2 on FortiSwitch is tagged with VLAN ID 10 and destined for PC1 connected on port1. PC1 expects to receive traffic untagged from port1 on FortiSwitch. Which two configurations can you perform on FortiSwitch to ensure PC1 receives untagged traffic on port1? (Choose two answers)

  • A. Add VLAN ID 10 as a member of the untagged VLANs on port1.
  • B. Include VLAN 10 and VLAN 20 as allowed VLANs on port1.
  • C. Add the MAC address of PC1 as a member of VLAN 10.
  • D. Remove VLAN 10 from the allowed VLANs and add it to untagged VLANs on port1.
Correct Answer: A,C

Brave-Dump Community Votes

Answer: A, C (3 votes) 75%
Answer: A, D (1 vote) 25%

Community Explanations & Comments (4)

javaughn Bryan 10 months ago
Selected: A, D
A&D are absolutely correct.

If the connected device expects to receive untagged traffic, then you must also include VLAN 10 in the untagged VLANs setting so FortiSwitch forwards the frames without a VLAN tag.

PAGE: 367 | FORTISWITCH 7.6 ADMIN GUIDE
John 10 months ago
Selected: A, C
ANSWER: A & C
Untagged VLANs do not bypass Allowed VLANs; Fortinet documentation explicitly requires untagged VLANs to also be members of the allowed VLAN list (page 117 FS.7.6). & pg 121 fs 7.2
DIRECT QUOTE:
Untagged VLANs: Usually, you don’t have to configure this setting. However, some features, like
quarantine MAC or dynamic VLAN assignment, require it for the feature to work. This setting applies to
egress traffic only, and defines a list of VLANs for which the egress traffic is sent untagged. For the setting
to take effect, the untagged VLAN must also be a member of the allowed VLANs list.
Anonymous User 7 months ago
Selected: A, C
For a VLAN to be configured as Untagged, it must be the first member of the allowed VLAN list. If you remove it from "Allowed," traffic will not even be able to pass through the port.
Page 117 - FortiSwitch 7.6 Administrator
Ale 1 week ago
Selected: A, C
This is from Lesson 11: "Standalone Switch - Layer 2 and Layer 3".
"You must include VLAN 10 in the allowed VLANs setting. In addition, if the connected device expects to receive untagged traffic, then you must also include VLAN 10 in the untagged VLANs..."