Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Solution Specialist: SD-WAN 7.6 Enterprise Architect · Fortinet
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A&B correct. Hub is always the sender and forwarder Spoke is always the receiver I remember this by thinking about male female ends of plugs. hub is the male end and spoke is the female end.
The answer is AB. A: auto-discovery-sender must be enabled on IPsec tunnels to spokes (basic configuration in any scenario) B: auto-discovery forwarder must be enabled on IPsec tunnels to hubs for shortcuts between spokes that don't connect to the same hub via tunnels.
A (auto-discovery-sender on hubs → spokes) Hubs must be able to send shortcut offers when they see transit traffic for a remote spoke. That is what tells the origin spoke “hey — I can offer you a direct shortcut to that remote spoke.” So the hub → spoke phase-1s need auto-discovery-sender enabled. B (auto-discovery-forwarder on hub→hub tunnels) In a multi-hub (redundant hub) topology the hubs must forward discovery offers between regions: the hub-to-hub tunnels need auto-discovery-forwarder enabled so an offer that originates in Region A can be forwarded to the appropriate hub in Region B (and vice versa). Without the forwarder on the hub-to-hub VPN, spokes in different hub regions won’t learn about each other and won’t build the ADVPN shortcut.