BGP Prefix Paths and SD-WAN
30 Questions
0 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Which direction must fec-egress be enabled in order for FortiGate to send parity packets?

  • Egress (correct)
  • Neither Ingress nor Egress
  • Both Ingress and Egress
  • Ingress

    • Which direction must fec-ingress be enabled in order for FortiGate to process parity packets sent by the remote FortiGate?

  • Both Ingress and Egress
  • Egress
  • Neither Ingress nor Egress
  • Ingress (correct)

    • What must be enabled on the firewall policy that matches the traffic you want to generate parity packets for?

  • FEC (correct)
  • Neither FEC nor Hardware Offloading
  • Hardware Offloading
  • Both FEC and Hardware Offloading

    • What does FortiOS automatically do on sessions that are subject to FEC?

    <p>Manually disable hardware offloading</p> Signup and view all the answers

    What does FortiGate use for original and parity packets when FEC is enabled?

    <p>Specific security payload index</p> Signup and view all the answers

    What does a packet capture taken using the example configuration show?

    <p>Original and parity packets</p> Signup and view all the answers

    What is the impact of FEC on the quality of IPsec overlays?

    <p>Positive impact</p> Signup and view all the answers

    What is the reported packet loss before enabling FEC?

    <p>27%</p> Signup and view all the answers

    What is the reported packet loss after increasing fec-redundant to 3?

    <p>1%</p> Signup and view all the answers

    What should you keep in mind when increasing the value of fec-redundant?

    <p>Increased bandwidth usage</p> Signup and view all the answers

    Which of the following is true about FortiGate's default behavior when advertising BGP prefixes?

    <p>FortiGate advertises one path per prefix by default.</p> Signup and view all the answers

    In the SD-WAN overlay deployment shown, how many paths does the hub reflect for each prefix?

    <p>One path</p> Signup and view all the answers

    Why is it recommended to have sites learn all available paths to all possible destinations in SD-WAN?

    <p>To ensure SD-WAN rules are not skipped.</p> Signup and view all the answers

    How many paths does the hub learn for the prefix 10.0.1.0/24 in the diagram on this slide?

    <p>Two paths</p> Signup and view all the answers

    What are the next hop addresses for the two paths learned by the hub for the prefix 10.0.1.0/24?

    <p>10.201.1.1 and 10.202.1.1</p> Signup and view all the answers

    How many additional paths does the hub send in addition to the two paths it learns for the prefix 10.0.1.0/24?

    <p>Two additional paths</p> Signup and view all the answers

    What is the purpose of configuring the spoke to receive any additional paths sent by the neighbor?

    <p>To allow the spoke to learn all available paths for a prefix.</p> Signup and view all the answers

    How many routes does spoke2 receive for the prefix 10.0.1.0/24 from the hub?

    <p>Four routes</p> Signup and view all the answers

    What does the routing table on spoke2 show for the prefix 10.0.1.0/24?

    <p>Duplicate routes</p> Signup and view all the answers

    What does the hub do to the prefixes learned from clients?

    <p>Reflects the prefixes to all peers.</p> Signup and view all the answers

    Which command can be used to view the identified paths in FortiGate's BGP configuration?

    <p>get router info bgp network</p> Signup and view all the answers

    How can you control the number of selected identified paths to be advertised by the hub in FortiGate's BGP configuration?

    <p>By enabling additional-path-select setting</p> Signup and view all the answers

    What does FortiOS 7.0.1 and 6.4.7 do with duplicate routes in the routing table?

    <p>Consolidates them for cosmetic purposes</p> Signup and view all the answers

    What is the purpose of Forward Error Correction (FEC) in FortiGate's IPsec overlays?

    <p>To reduce the number of retransmissions</p> Signup and view all the answers

    Which command can be used to configure FEC on an IPsec overlay in FortiGate?

    <p>CLI configuration</p> Signup and view all the answers

    What happens if the fec-send-timeout period is reached in FortiGate's FEC configuration?

    <p>FortiGate sends the parity packets regardless of fec-base</p> Signup and view all the answers

    Which SPI is used for both original and parity packets in FortiGate's FEC implementation?

    <p>0x00000001</p> Signup and view all the answers

    What is the purpose of parity packets in FortiGate's FEC implementation?

    <p>To contain error-correcting data</p> Signup and view all the answers

    Which FortiGate version introduced the consolidation of duplicate routes in the routing table?

    <p>FortiOS 7.0.0 and 6.4.7</p> Signup and view all the answers

    What is the recommended use case for Forward Error Correction (FEC) in FortiGate's IPsec overlays?

    <p>Delivering a better user experience for business-critical applications</p> Signup and view all the answers

    More Like This

    Use Quizgecko on...
    Browser
    Open
    Browser
    Browser