FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface. In this scenario, what are two requirements for the VLAN ID? (Choose two.)
A.
The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.
B.
The two VLAN subinterfaces can have the same VLAN ID, only if they belong to different VDOMs.
C.
The two VLAN subinterfaces must have different VLAN IDs.
D.
The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in different subnets.
Anything but the "different VLAN" answer is impossible from a networking view, as well as configuration on the FG is concerned. At least up to 7.0 it's impossible to configure the same VLAN on the same physical link multiple times, no matter if it's in separate VDOMs or not.
P.S. - did some tests - at least up to 7.0.12, the firewall will instantly complain about duplicate VLAN ID no matter if you select different VDOMs, IPs, or IPs from the same subnet (which will ADDITIONALLY cause an IP-conflict with the first VLAN interface)
So, if the official test has this question and asks for two choices, it's definitely wrong ... (as any sane technician would argue)
t is C and D. But to achieve this monstrosity you have to implement 802.1Q and 802.1AD vlans and they need to be in different subnets.
And yes this is still mind boggling.
I used my own lab to resolve this question:
If you use the same VLAN ID to add a second subinterface to the same physical interface is not allowed you get the error (
VLAN ID used by another VLAN switch) unless you change the VLAN Protocol to 802.1AD, no matter the VDOM you assign the subinterface.
Being said that, options A and B are not true, the option C is correct and option D is true if as I said before you use 802.1Q in one subinterface and 802.1AD in the second subinterface.
B and C, to achieve this configuration (2 vlan interfaces on the same phisical port with same vlanID) you must use 802.1AD vlan protocol (is not mentioned but you must know) and, of course, to have a switch supporting this protocol, but in any case the 2 vlan interfaces MUST be assigned to 2 different VDOMs, to avoid conflict. so B answer is true, answer C is also true as on a single VDOM it's impossible to configure 2 vlan Interfaces with same vlanID, regardless from vlan protocol. Very trichi question ;-)
the firewall will instantly complain about duplicate VLAN ID no matter if you select different VDOMs, IPs, or IPs from the same subnet (which will ADDITIONALLY cause an IP-conflict with the first VLAN interface)
So, if the official test has this question and asks for two choices, it's definitely wrong ... (as any sane technician would argue
On other websites, this question only requests a single answer. B and D can be done using a different vlan type,but that's because it's Q in Q tunneling, so it's not really a vlan interface.
c,D
In a scenario where FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface, the correct requirements for the VLAN ID are:
C. **The two VLAN subinterfaces must have different VLAN IDs.** Each VLAN subinterface should have a unique VLAN ID to properly segregate traffic between VLANs.
D. **The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in different subnets.** If two VLAN subinterfaces share the same VLAN ID, they must belong to different IP subnets to avoid IP address conflicts and ensure proper routing of traffic.
So, options C and D are the correct requirements for the VLAN ID in this scenario.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Garry_G
Highly Voted 2 years agoGarry_G
1 year, 8 months agoBungee75
10 months, 2 weeks agoerawemk
Highly Voted 1 year, 10 months ago6600d98
Most Recent 3 weeks, 1 day agoGasparin
3 months, 2 weeks agoOzzygate
9 months agoAJMD
11 months agoGasimovTofig
11 months, 2 weeks agolearner2024
11 months, 3 weeks agoGopiChandMurari
11 months, 3 weeks agoMAUROBTA
1 year, 1 month agoMAUROBTA
1 year, 1 month agoBosubw
1 year, 1 month agoGoodServant
1 year, 1 month agoznznzn219
1 year, 3 months agoGeniusA
1 year, 4 months agoTheManDude
1 year, 5 months agoDiego_Farani
1 year, 5 months ago