The Ultimate Packet Duplication Quiz

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Which of the following is a requirement for packet duplication in SD-WAN?

The links used for duplication must support hardware offload.
The duplicate packets must be exact copies of the original packet.
Packet duplication must be enabled on the receiving FortiGate.
The best route must match an SD-WAN member. (correct)

What is the purpose of packet duplication in SD-WAN?

To reduce data loss on IPsec tunnels.
To forward all copies of the packet to the next hop.
To save resources at the receiving end.
To enable out-of-band inspection or packet capture. (correct)

What happens when packet deduplication is enabled on the receiving FortiGate?

All copies of the packet are accepted.
All duplicate packets are dropped.
Only the first copy of the packet is accepted. (correct)
All duplicate packets are forwarded to the next hop.

Which feature provides an efficient way to reduce data loss on IPsec tunnels?

FEC (A) Signup and view all the answers

What are duplicate packets in SD-WAN?

Verbatim copies of the original packet. (D) Signup and view all the answers

How many additional members can duplicate packets be sent through in SD-WAN?

Up to three additional members. (A) Signup and view all the answers

What type of links are required for packet duplication in SD-WAN?

IPsec links (A) Signup and view all the answers

Which of the following is NOT a supported feature of Forward Error Correction (FEC)?

Hardware offload (A) Signup and view all the answers

What is the goal of enabling packet deduplication on the receiving FortiGate?

To save resources at the receiving end. (D) Signup and view all the answers

In the example on the slide, how many IPsec overlays are the FortiGate devices connected through?

Three (B) Signup and view all the answers

According to the text, when does FortiGate create duplicates?

When the performance is the one shown in the second output (A) Signup and view all the answers

What is the benefit of restricting packet duplication to SD-WAN rules?

More granular control and flexibility (D) Signup and view all the answers

How can you configure packet duplication rules to duplicate traffic based on the detected application?

By leveraging the application steering feature of SD-WAN rules (C) Signup and view all the answers

What does the SD-WAN rule ID 1 status indicate?

ICMP traffic is duplicated (D) Signup and view all the answers

What is the purpose of the IPsec exchange interface feature?

To exchange IP addresses during tunnel negotiation (A) Signup and view all the answers

What is the advantage of using the IPsec exchange interface feature over IKE mode config?

Allows you to assign fixed IP addresses on the spoke side (D) Signup and view all the answers

What is the configuration change required on the spoke FortiGate when exchanging IPsec interface IP addresses using IKE?

Assign a different local IP address (B) Signup and view all the answers

When defining the hub IP address for exchanging IPsec interface IP addresses using IKE, what netmask should be used?

/24 (D) Signup and view all the answers

Can IP addresses be exchanged using IKE when one of the gateways is not a FortiGate device?

No, it requires both gateways to be FortiGate devices (B) Signup and view all the answers

What does the IKE mode config allow you to do with IP addresses on the spoke side?

Assign IP addresses automatically (D) Signup and view all the answers

Which FortiGate device is configured to always duplicate packets?

Spoke FortiGate (B) Signup and view all the answers

What is the purpose of the duplication rule on the spoke FortiGate?

To forward up to three copies of the packet (C) Signup and view all the answers

What is the result of the hub FortiGate's duplication rule?

To accept only the packet received through T_MPLS (A) Signup and view all the answers

What is the value of duplication-max-num on the spoke FortiGate?

3 (C) Signup and view all the answers

What does the packet-duplication setting on the spoke FortiGate instruct FortiGate to do?

Always duplicate packets (C) Signup and view all the answers

What does the packet-deduplication setting on the hub FortiGate instruct FortiGate to do?

Accept only one copy of the packet (B) Signup and view all the answers

When is on-demand packet duplication triggered?

When the outgoing interface doesn't meet any SLA targets (C) Signup and view all the answers

How does FortiGate determine the quality of the outgoing interface for on-demand packet duplication?

Based on the status of the SLA targets configured (C) Signup and view all the answers

What is the result of forced packet duplication?

FortiGate always duplicates packets (C) Signup and view all the answers

What determines the outgoing interface for packet duplication?

The quality of the outgoing interface (D) Signup and view all the answers

Study Notes

Packet Duplication in SD-WAN

Packet duplication is required when using IPsec tunnels in SD-WAN, and it helps reduce data loss.
Duplicate packets are sent through multiple links to ensure delivery in case of packet loss on one link.

Packet Deduplication

When packet deduplication is enabled on the receiving FortiGate, it removes duplicate packets, preventing data duplication.
The goal of enabling packet deduplication is to prevent data duplication on the receiving end.

Forward Error Correction (FEC)

FEC provides an efficient way to reduce data loss on IPsec tunnels by duplicating packets.

Configuring Packet Duplication

Packet duplication can be restricted to SD-WAN rules, which helps optimize bandwidth usage.
Packet duplication rules can be configured to duplicate traffic based on detected applications.

IPsec Exchange Interface

The IPsec exchange interface feature allows exchanging IPsec interface IP addresses without IKE mode config.
The advantage of using the IPsec exchange interface feature is that it does not require IKE mode config.

Configuring Packet Duplication Rules

The spoke FortiGate is configured to always duplicate packets.
The duplication rule on the spoke FortiGate instructs FortiGate to duplicate packets.
The hub FortiGate's duplication rule instructs FortiGate to duplicate packets only when necessary.

On-Demand Packet Duplication

On-demand packet duplication is triggered when packet loss is detected on a link.
FortiGate determines the quality of the outgoing interface for on-demand packet duplication based on link quality.

Forced Packet Duplication

Forced packet duplication is triggered when packet loss is detected on all links, and it sends duplicate packets on all available links.
The outgoing interface for packet duplication is determined by the duplication rule configuration.

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Description

Test your knowledge on packet duplication, an advanced networking technique used to send duplicate packets through additional links. Whether it's underlay or overlay, this quiz covers the requirements, benefits, and best practices of packet duplication. Learn about hardware offloading, SD-WAN integration, data loss protection, OOB inspection, and deduplication techniques. Put your networking skills to the test and become an expert in packet duplication.