Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 29 of 114
Free Preview · 114 of 380 · questions 1–114 of 380 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
- The Enterprise Firewall 7.6 Administrator Study Guide states: "You can also use the network command to configure FortiGate BGP to advertise prefixes." Therefore, FortiGate_C must originate the required prefix by adding 100.64.2.0/24 under config router bgp # config network. By default, the configured prefix must exactly match an active route in FortiGate_C's routing table. The topology indicates that 100.64.2.0/24 is directly connected to FortiGate_C, so the network-import check succeeds and FortiGate_C advertises that specific prefix to FortiGate_B. FortiGate_B can then advertise the learned BGP route to FortiGate_A through the existing eBGP adjacency. Connected-route redistribution on FortiGate_C would be too broad because it would redistribute all eligible connected routes, including the other connected subnet 100.65.3.0/24. A route-map-in on FortiGate_A can filter routes that FortiGate_A receives, but it cannot originate a route that FortiGate_C has not advertised. FortiGate_B does not need to redistribute BGP into BGP; normal BGP route propagation handles the advertisement between autonomous systems. Example configuration on FortiGate_C: config router bgp config network edit 1 set prefix 100.64.2.0 255.255.255.0 next end end References: Dynamic Routing Supplement - Network Command , page 346; Fortinet: BGP network command and exact-prefix requirement ; FortiOS 7.6.7 CLI Reference .