A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.
Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

Question

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.

Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

Ilya Shadrin · Accepted Answer

On HQ-FortiGate, set IKE mode to Main (ID protection).

Ilya Shadrin · Accepted Answer

On Remote-FortiGate, set port2 as Interface.

Ilya Shadrin · Answer

On both FortiGate devices, set Dead Peer Detection to On Demand.

Ilya Shadrin · Answer

On HQ-FortiGate, disable Diffie-Helman group 2.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 108 - NSE4_FGT-7.2 discussion

Suggested answer: A, D

0 comments