VPN Gateways
20 Questions
6 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

During phase2 negotiation, the protected network can be used by FortiManager for negotiating the local subnet.

  • False
  • True (correct)

    • When configuring the managed gateway, which device should be selected?

  • Star or dial-up community
  • FortiManager
  • FortiGate device (correct)
  • Hub or spoke

    • Which interface should be selected as the default VPN Interface for terminating the IPsec tunnel?

  • FortiGate device
  • Default VPN Interface (correct)
  • Local Gateway
  • Advanced

    • When an interface has multiple IP addresses assigned, what is the purpose of specifying the Local Gateway IP address?

    <p>To specify the IPsec tunnel termination point</p> Signup and view all the answers

    When configuring advanced settings for IPsec, what can be configured?

    <p>Peer ID</p> Signup and view all the answers

    Is normalised IPsec interface configuration required for SD-WAN member configuration?

    <p>No</p> Signup and view all the answers

    When using per-platform mapping, is it necessary to install the VPN configuration first?

    <p>No</p> Signup and view all the answers

    When using per-device mapping, is it necessary to install the VPN configuration first?

    <p>Yes</p> Signup and view all the answers

    Are normalised interfaces required for configuring an IPsec interface as an SD-WAN member?

    <p>No</p> Signup and view all the answers

    What must firewall policies for SD-WAN reference?

    <p>SD-WAN zones</p> Signup and view all the answers

    Which type of gateways require manual VPN configuration application by the administrator?

    <p>External gateways</p> Signup and view all the answers

    What are the two types of gateways mentioned in the text?

    <p>Managed gateways and external gateways</p> Signup and view all the answers

    What settings are required for managed gateway configuration?

    <p>Protected Network and Local protected subnets</p> Signup and view all the answers

    Which type of gateways can FortiManager push the settings to during installation?

    <p>Managed gateways</p> Signup and view all the answers

    What is the role required for star or dial-up topologies?

    <p>Role</p> Signup and view all the answers

    Which interface is used as the default VPN interface for the tunnel termination?

    <p>Default VPN Interface</p> Signup and view all the answers

    What is the purpose of the advanced settings in managed gateway configuration?

    <p>To configure additional settings like peer ID and IKE mode config</p> Signup and view all the answers

    What does FortiManager display when creating a new managed gateway?

    <p>A wizard that walks through the managed gateway configuration</p> Signup and view all the answers

    What determines the remote protected subnets for a managed gateway?

    <p>The local networks configured for other gateways in the community</p> Signup and view all the answers

    What is the purpose of external gateways?

    <p>To manually apply VPN configuration</p> Signup and view all the answers

    Study Notes

    FortiManager and IPsec Configuration

    • During phase 2 negotiation, the protected network can be used by FortiManager for negotiating the local subnet.
    • When configuring a managed gateway, the device to be selected is the FortiManager.
    • The interface to be selected as the default VPN interface for terminating the IPsec tunnel is the one specified as the Local Gateway IP address.
    • Specifying the Local Gateway IP address is necessary when an interface has multiple IP addresses assigned, to determine the correct IP address for IPsec negotiation.
    • In advanced settings for IPsec, settings such as encryption algorithms, authentication methods, and key exchange protocols can be configured.
    • Normalised IPsec interface configuration is required for SD-WAN member configuration.
    • When using per-platform mapping, VPN configuration must be installed first.
    • When using per-device mapping, VPN configuration does not need to be installed first.
    • Normalised interfaces are required for configuring an IPsec interface as an SD-WAN member.
    • Firewall policies for SD-WAN must reference the IPsec interface.

    Gateway Configuration

    • Manual VPN configuration application is required by the administrator for external gateways.
    • The two types of gateways mentioned are managed gateways and external gateways.
    • Settings required for managed gateway configuration include IPsec settings, VPN configuration, and interface configuration.
    • FortiManager can push settings to managed gateways during installation.
    • The role required for star or dial-up topologies is a hub.
    • The interface used as the default VPN interface for tunnel termination is the one specified as the Local Gateway IP address.
    • The purpose of advanced settings in managed gateway configuration is to customize IPsec settings.
    • When creating a new managed gateway, FortiManager displays the gateway configuration settings.
    • The remote protected subnets for a managed gateway are determined by the gateway's configuration.
    • The purpose of external gateways is to provide VPN connectivity to remote sites or networks.

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Description

    Test your knowledge on VPN Gateways and their types in this quiz. Learn about managed gateways, FortiGate devices, external gateways, and the process of adding gateways to the community. Challenge yourself and become an expert in VPN configurations!

    More Like This

    Use Quizgecko on...
    Browser
    Open
    Browser
    Browser