Free Preparation Discussions
MENU
Fortinet Exam FCP_FGT_AD-7.4 Topic 1 Question 8 Discussion
Topic #: 1
Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.
When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output.
Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?
In this scenario, the FortiGate device is using a Virtual IP (VIP) to map the public IP address (203.0.113.2) to the internal IP address of the web server (172.16.1.10). The fact that the administrator does not see any sniffer output for incoming traffic suggests that the FortiGate is not responding to ARP requests for the public IP address (203.0.113.2).
Enabling arp-reply in the VIP configuration allows the FortiGate to respond to ARP requests for the public IP, thereby allowing traffic to reach the FortiGate, which will then forward it to the web server based on the VIP mapping.
Mindy
1 months agoDenae
8 days agoTy
9 days agoCarissa
10 days agoAnthony
24 days agoDominga
1 months agoDalene
1 months agoRodolfo
12 days agoAshlyn
1 months agoMarg
1 months agoMary
2 months agoNidia
2 months agoMary
2 months agoGerald
2 months agoVallie
30 days agoKatie
1 months agoMammie
2 months ago