View all questions & answers for the NSE 7 - Secure Networking 7.6 Architect Exam Materials exam
NSE 7 - Secure Networking 7.6 Architect Exam Materials - Question #37 Discussion
Community Explanations & Comments (10)
Anonymous User
2 months ago
Selected: B, C
Enterprise Admin Study Guide P.105-108
FortiGate acts as IKE mode config Server -> mode-cfg enable
Setting on branches -> set net-device enable
FortiGate acts as IKE mode config Server -> mode-cfg enable
Setting on branches -> set net-device enable
Anonymous User
2 months ago
Selected: C, D
SD-WAN_7.6_Enterprise_Administrator_Study_Guide-Online (page 120)
IPsec Templates Settings—BGP on Loopback
SD-WAN Manager > Overlay Orchestration
Edit SD-WAN Overlay Template - Region Settings (1/5)
Hub template main settings
type dynamic
net-device disable
mode-cfg disable
exchange-interface-IP enable
exchange-ip-addr4: hub loopback IP address
network-overlay enable
network-id
Branch template main settings
type static
net-device enable
mode-cfg disable
exchange-interface-IP enable
exchange-ip-addr4: spoke loopback IP address
network-overlay enable
network-id
local ID
IPsec Templates Settings—BGP on Loopback
SD-WAN Manager > Overlay Orchestration
Edit SD-WAN Overlay Template - Region Settings (1/5)
Hub template main settings
type dynamic
net-device disable
mode-cfg disable
exchange-interface-IP enable
exchange-ip-addr4: hub loopback IP address
network-overlay enable
network-id
Branch template main settings
type static
net-device enable
mode-cfg disable
exchange-interface-IP enable
exchange-ip-addr4: spoke loopback IP address
network-overlay enable
network-id
local ID
Jai Chauhan
1 month ago
CD is correct
Md Nasir Uddin
2 months ago
Selected: B, C
config vpn ipsec phase1-interface
edit "Hub_to_Spokes"
set type dynamic <-- Must be a dial-up server, not static
set mode-cfg enable <-- RECOMMENDED: Dynamically hands out IPs to spokes
set ipv4-start-ip 169.254.1.1
set ipv4-end-ip 169.254.1.254
set net-device disable <-- Disabled on Hub to share a single interface for all dials
next
end
edit "Hub_to_Spokes"
set type dynamic <-- Must be a dial-up server, not static
set mode-cfg enable <-- RECOMMENDED: Dynamically hands out IPs to spokes
set ipv4-start-ip 169.254.1.1
set ipv4-end-ip 169.254.1.254
set net-device disable <-- Disabled on Hub to share a single interface for all dials
next
end
Bob
2 months ago
This config without loopback.
Pablo Meganck
2 months ago
Selected: C, D
Answer C and D
SD-WAN_7.6_Enterprise_Administrator_Study_Guide page 120 (BGP on loopback)
SD-WAN_7.6_Enterprise_Administrator_Study_Guide page 120 (BGP on loopback)
Anonymous User
1 month ago
Selected: B, C
correct
Luis
1 month ago
Selected: C, D
Answer in Fortinet Training: SD-WAN Enterprise Administrator - SD-WAN Overlay Design and Best Practices (Diapositive 30. "IPsec Templates Settings - BGP on Lookpback").
Anonymous User
1 month ago
Selected: C, D
SD-WAN_7.6_Enterprise_Administrator_Study_Guide-Online (page 120) - Check the settings on BGP on Loopback
marek Marucha
1 month ago
Selected: C, D
Branch template main settings
type static
net-device enable
mode-cfg disable
exchange-interface-IP enable
exchange-ip-addr4: spoke loopback IP address
network-overlay enable
network-id
local ID
type static
net-device enable
mode-cfg disable
exchange-interface-IP enable
exchange-ip-addr4: spoke loopback IP address
network-overlay enable
network-id
local ID
Flag20
1 week ago
Selected: C, D
SD-WAN 7.6 Enterprise Administrator Study Guide, page 120
Kurt Richter
1 day ago
Selected: C, D
Using loopback interfaces for BGP, meaning tunnel interfaces dont need IP addressing, thus mode-cfg is unnecessary
You configure the overlay tunnels for an SD-WAN hub-and-spoke topology defined with IPsec tunnels, BGP on loopback, and dynamic BGP. Which are two recommended IPsec settings for this topology? (Choose two answers)
Brave-Dump Community Votes