An administrator needs to deploy managed FortiSwitch devices in a remote location where multiple VLANs must be utilized to segment devices. No Layer 3 switch or router is present. The only WAN connectivity is the router provided by the ISP connected to the public internet. Which two items will the administrator need to use? (Choose two.)
Select an option, then click Submit answer.
Reference / correct answer:
FortiSwitch and FortiGate devices configured with VXLAN interfaces.
Most accepted answer: B. FortiSwitch and FortiGate devices configured with VXLAN interfaces.
Community votes: A=4, B=6, C=4, D=4
Selected Answer: BD This one is tricky, the key here is "multiple VLANs must be utilized and No Layer 3 switch or router is present, only the ISP router" - ISP router cant be used for vlan segmentation - Fortilink-13-mode only provides management over L3 networks, user traffic must be handled by the network devices in the remote site (Study Guide page 154) - VXLAN is the second method available allowing a layer-2 overlay network when managing a FortiSwitch unit over a layer-3 network and FortiSwitch devices can also tunnel data VLANs in addition to switch management B - Correct VXLAN method for management and user data traffic (Study Guide page 155) D - The switch needs hardware-based VXLAN support (Study Guide page 155) upvoted 1 times
Selected Answer: BD I'm voting for the VXLAN solution, where the switch has to be HW capable. upvoted 1 times
Selected Answer: BD I vote B,D - it states all there is is the ISP router to the public internet - so there is NAT occuring outbound. You will need VXLAN and hardware-based so that the data vlan traffic is also able to be send via the VXLAN tunnel towards the FGT since there is no onsite customer router upvoted 1 times
Selected Answer: BC Page 155 VXLAN can be used to create a layer 2 tunnel over a Layer 3 network. Allows NAT in layer3 networks due to frames being encapsulated in VXLAN protocol Data and management traffic with NAT supported available on devices with hardware-based VXLAN upvoted 1 times
Selected Answer: AC A. A FortiSwitch interface connected to the ISP router configured with fortilink-l3-mode enabled. [CORRECT] "Enable fortilink-l3-mode on the FortiSwitch ports facing the remote FortiGate, if you are using the internal interface for FortiGate communication" B. FortiSwitch and FortiGate devices configured with VXLAN interfaces. [WRONG] VXLAN are used when there are routers and NAT applied in the communication between FGT and FSW. According to the question "No Layer 3 switch or router is present." so we can't use VXLAN. C. FortiSwitch devices configured with NAT disabled. [CORRECT] "You can also manage FortiSwitch devices over a Layer 3 network that is fully routable. This is, no NAT is performed along the path." Reference: FortiSwitch 7.2 Study Guide, page 154 upvoted 3 times