Examice

Exam nse8_812 All QuestionsBrowse all questions from this exam

Go to Exam

Question 45

Review the following FortiGate-6000 configuration excerpt:

Based on the configuration, which statement is correct regarding SNAT source port partitioning behavior?

It dynamically distributes SNAT source ports to operating FPCs or FPMs.

It is the default SNAT configuration and preserves active sessions when an FPC or FPM goes down.

It statically distributes SNAT source ports to operating FPCs or FPMs.

It equally distributes SNAT source ports across chassis slots.

Correct Answer: C

The provided FortiGate-6000 configuration command 'set nat-source-port chassis-slots' indicates that SNAT source ports are statically distributed to the operating FPCs or FPMs. This means that when the configuration is executed, each FPC or FPM is assigned a specific range of SNAT source ports, and these assignments do not change dynamically. If an FPC or FPM is disabled, the SNAT source ports assigned to it are not reallocated to the other FPCs or FPMs, maintaining the static distribution. Therefore, the behavior described in option C is accurate.

Discussion

Viewable8041Option: C

https://docs.fortinet.com/document/fortigate/7.4.1/fortigate-6000-administration-guide/81276/controlling-snat-port-partitioning-behavior

Pat1361Option: C

"chassis-slots this option statically allocates SNAT source ports to all FPCs that are enabled when you enter the command. If you disable an FPC from the CLI, the SNAT source ports assigned to that FPC will not be re-allocated to the remaining FPCs. All FPCs that are still operating will maintain the same SNAT source port allocation and active sessions being processed by the still operating FPCs will not be affected."