SD-WAN and OC-VPN Integration

Play an AI-generated podcast conversation about this lesson

What does the performance SLA feature in SD-WAN enable you to do?

Sync member configuration changes between FortiGate and FortiManager

Configure well-known internet services for monitoring

Set performance requirements for member traffic

Monitor member health and performance (correct)

Which type of monitoring checks the health of a member by periodically sending probes from the member to servers?

Passive monitoring

Active monitoring (correct)

Undefined monitoring

Centralized monitoring

What are the performance metrics monitored by performance SLAs in SD-WAN?

Interface speed and bandwidth

CPU and memory usage

Security threats and attacks

Packet loss, latency, and jitter (correct)

Why is it important to configure performance SLAs in SD-WAN?

To ensure members meet the health and performance requirements for steering traffic Signup and view all the answers

What happens to local member configuration changes when a new configuration installation is done on FortiManager?

The local changes are overwritten by the new configuration installation Signup and view all the answers

Which of the following is NOT a default performance SLA in SD-WAN?

Level3_DNS Signup and view all the answers

What is the purpose of health checks in performance SLAs?

To determine the state of members (alive or dead) Signup and view all the answers

Which type of monitoring determines the health of a member based on the traffic passing through it?

Passive monitoring Signup and view all the answers

What is the purpose of SLA targets in performance SLAs?

To define minimum performance requirements for members Signup and view all the answers

Which statement is true about member configuration portability in SD-WAN?

Members with undefined interfaces can be configured with the same SD-WAN settings on multiple sites. Signup and view all the answers

What happens to SD-WAN members if the interface is not defined?

SD-WAN members are disabled and cannot be used. Signup and view all the answers

When should you use FortiManager for SD-WAN management?

When you want to use per-device SD-WAN management. Signup and view all the answers

What is the purpose of leaving the Interface Member setting undefined when configuring a new member?

To allow the member to use different interfaces on different devices. Signup and view all the answers

What is the role of OC-VPN in SD-WAN integration?

To dynamically add OC-VPN tunnels as SD-WAN members. Signup and view all the answers

What is the purpose of using the FortiGate CLI for SD-WAN configuration?

To configure the actual interfaces to use as members on each site. Signup and view all the answers

What is the benefit of having members with no interface defined in SD-WAN integration with OC-VPN?

To automatically create IPsec tunnels. Signup and view all the answers

Which FortiGate management option should be used for configuring members with undefined interfaces?

FortiGate CLI Signup and view all the answers

What is the purpose of using the configuration from an existing SD-WAN site as a template for new sites?

To apply the same SD-WAN configuration on different FortiGate devices. Signup and view all the answers

Which one of these is true about defining an interface for SD-WAN members?

The interface cannot be changed after it is defined. Signup and view all the answers