ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 12 - NSE7_EFW-7.2 discussion

Report
Export

You want to improve reliability over a lossy IPSec tunnel.

Which combination of IPSec phase 1 parameters should you configure?

A.
fec-ingress and fec-egress
Answers
A.
fec-ingress and fec-egress
B.
Odpd and dpd-retryinterval
Answers
B.
Odpd and dpd-retryinterval
C.
fragmentation and fragmentation-mtu
Answers
C.
fragmentation and fragmentation-mtu
D.
keepalive and keylive
Answers
D.
keepalive and keylive
Suggested answer: C

Explanation:

For improving reliability over a lossy IPSec tunnel, the fragmentation and fragmentation-mtu parameters should be configured. In scenarios where there might be issues with packet size or an unreliable network, setting the IPsec phase 1 to allow for fragmentation will enable large packets to be broken down, preventing them from being dropped due to size or poor network quality. The fragmentation-mtu specifies the size of the fragments. This is aligned with Fortinet's recommendations for handling IPsec VPN over networks with potential packet loss or size limitations.

asked 18/09/2024
Daniel Calleja
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first