Exam NSE8_811 topic 1 question 11 discussion

Actual exam question from Fortinet's NSE8_811

Question #: 11
Topic #: 1

Refer to the exhibit.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time debug shows the output in the exhibit when site A is disconnected.
Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

A. set route-overlap allow
B. set single-source disable
C. set enforce-unique-id disable
D. set add-route enable

Show Suggested Answer

Suggested Answer: A 🗳️

by kinge2 at Aug. 21, 2022, 8:19 a.m.

Comments

Submit Cancel

aioross

2 years, 6 months ago

Selected Answer: A

Correct: A

upvoted 1 times

...

kinge2

2 years, 8 months ago

C is wrong as per https://docs.fortinet.com/document/fortigate/6.4.7/cli-reference/356620/config-vpn-ipsec-phase1 Disable peer ID uniqueness enforcement. keep-new Enforce peer ID uniqueness, keep new connection if collision found. keep-old Enforce peer ID uniqueness, keep old connection if collision found.

upvoted 1 times

...

kinge2

2 years, 8 months ago

Selected Answer: A

A is correct as per https://community.fortinet.com/t5/FortiGate/Technical-Tip-Allowing-multiple-IPSec-dial-up-connection-from/ta-p/198550 There are 3 options: Action for overlapping routes. - use-old: Use the old route and do not add the new route. - use-new: Delete the old route and add the new route. - allow: Allow overlapping routes.

upvoted 2 times

...

Exam NSE8_811 All Questions

View all questions & answers for the NSE8_811 exam

Exam NSE8_811 topic 1 question 11 discussion

Comments

aioross

kinge2

kinge2

SY0-701