Exit NSE7_EFW-6.4 Fortinet NSE 7 - Enterprise Firewall 6.4
Question 4 of 5
0% complete
Q4 Single choice

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic
cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output.

Why?

  • A

    The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.

  • B

    The log-filter setting was set incorrectly. The VPN's traffic does not match this filter.

  • C

    The debug shows only error messages. If there is no output, then the tunnel is operating normally.

  • D

    The debug output shows phase 1 negotiation only. After that, the administrator must enable the
    following real time debug: diagnose debug application ipsec -1.

Previous Next