Exam NSE7_EFW-7.0 All Questions

View all questions & answers for the NSE7_EFW-7.0 exam

Exam NSE7_EFW-7.0 topic 1 question 48 discussion

Actual exam question from Fortinet's NSE7_EFW-7.0

Question #: 48
Topic #: 1

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

A. Enable route redistribution under config router bgp.
B. Configure the hub as a route reflector.
C. Configure auto-discovery-sender on the hub.
D. Add a prefix list to the hub that permits routes to be shared between the spokes.

Show Suggested Answer

Suggested Answer: B 🗳️

by racdab at Jan. 9, 2023, 12:47 p.m.

Comments

Submit Cancel

certifi46

1 year, 1 month ago

Selected Answer: B

set route-reflector-client

upvoted 2 times

...

Seph1

1 year, 2 months ago

Selected Answer: B

If all VPNs are connected so the only thing you must enable is route-reflector - B Page 468 - NSE Study Guide

upvoted 2 times

...

fcatena

1 year, 3 months ago

B correct - C - configuration unser VPN

upvoted 1 times

...

racdab

1 year, 5 months ago

Selected Answer: B

B: route-reflector-client is used on the Hub for full mesh networks

upvoted 1 times

...

Nappel

1 year, 5 months ago

Selected Answer: B

A: Is for redistribution of other Routing protocols B: route-reflector-client is used on the Hub for full mesh networks C: Is configured on the Spokes and not the hub D: Not needed Source: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-BGP-route-reflector/ta-p/191503 Source 2: RFC 4456

upvoted 4 times

majidsheik23

11 months, 1 week ago

With Route Reflector mechanism, the Router that will be a Route Reflector (RR) become RR Server and the other iBGP neighbors are configured as RR Clients on this RR Server. These RR Clients send updates to RR Server and the full mesh requirement is bypassed. Without fullmesh, all iBGP Routers learn all BGP Routes. This mechanism is also a Hub and Spoke toplogy. Route Reflectors are Hubs and RR Clients are Spokes here. https://ipcisco.com/lesson/bgp-route-reflector/

upvoted 1 times

...

luismanzanero

1 year, 1 month ago

pg. 466 and 467, set auto-discovery-sender on the Hub

upvoted 1 times

...

racdab

1 year, 5 months ago

Selected Answer: C

enable set auto-discovery-sender if you want advpn.this settting indicates that when ipsec traffic transit the hub

upvoted 1 times

...