The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are established
between this FortiGate and the headquarters’ IPsec gateway. The branch office’s subnet is 10.1.1.0/24. The
headquarters’ subnet is 10.2.2.0/24. The desired usage for tunA and tunB has been defined as follows:
– sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
– sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
– sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB
Which static routing configuration meets the requirements?
A.
B.
C.
D.
B is the correct answer
The routing table contains the two static routes but only the one with the lowest priority (port 16) is used for routing traffic. The second one is used to accept traffic ingressing tunB
1
0
B is correct.
1
0
Agree that C is not the right answer.. administrative weights are related to load balancing the traffic between the two in a ratio.. A weight of 20 and 10 equates to 67% and 33% of traffic go to tunA and tunB accordingly.
What you want is distance to be the same (so both are in routing table) but different priorities so one wins. B is my vote.
0
0