Within IPsec tunnel templates available on FortiManager, which template will you use to configure static tunnels for a hub and spoke topology?
Within IPsec tunnel templates available on FortiManager, which template will you use to configure static tunnels for a hub and spoke topology?
In a hub and spoke topology, the 'Branch_IPsec_Recommended' template is used to configure static tunnels. This template defines settings for static tunnels where the remote IP address is known, which fits the requirement for spoke sites connected to a central hub.
Recommended templates will allow you to prepare a template for IPsec tunnels using Fortinet recommended settings for phase1 and phase2 parameters. • The IPsec_Fortinet_Recommended template defines a template for a static point-to-point tunnel • The BRANCH_IPsec_Recommended template defines a template for a static tunnel (with a known remote IP address) • The HUB_IPsec_Recommended template defines a template for a dynamic tunnel (an IPsec hub for dial-up tunnels)
According Study Guide 7.2 page 59: The Branch_IPsec_Recommended template defines a template for a static tunnel
Should be D.... Question says: "to configure static tunnels for a hub and spoke topology" According Study Guide 7.2 page 59: The Branch_IPsec_Recommended template defines a template for a static tunnel
D Dynamic tunnels on hub Static tunnels on spokes
D is correct. Page 58 stududy guide 7.2 For Static tunnel is The BRANCH_IPsec_Recommended template defines a template for a static tunnel (with a known remote IP address)
D is correct. See page 59 in the 7.2 Study Guide which explains that Branch_ipsec_recommended is what defines a template for a STATIC tunnel.
HUB_IPSec_Recommended - Fortinet's recommended template for hub IPSec tunnels. Branch_IPSec_Recommended - Fortinet's recommended template for IPSec branch device configurations. IPSec_Fortinet_ Recommended - Fortinet's recommended template for IPSec configurations.This template is not used for SD-WAN configuration.
A is correct. Refer to below link https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/959026/recommended-ipsec-templates
A is correct
D is the correct one. Study guid p59