Configuration - The exhibits show a FortiGate network topology and the output of the status of high availability on the FortiGate. Given this information, which statement is correct?
A.
The ethertype values of the HA packets are 0x8890, 0x8891, and 0x8892.
B.
The cluster mode can support a maximum of four (4) FortiGate VMs.
C.
The cluster members are on the same network and the IP addresses were statically assigned.
D.
FGVMEVLQOG33WM3D and FGVMEVGCJNHFYI4A share a virtual MAC address.
It's very confusing that the drawing has a ha-link in it (and no port numbers). But the CLI shows ip addresses and a unicast heartbeat. This is an indication that we are looking at a unicast-hb-setup in an active passive cluster. And therefore, they must be on the same network and have static ips assigned,
All answers can be correct to an extent, I would choose D because the virtual mac address is always asigned to the primary.
C states they are on the same network, but they are not because there is no connection bridging the switches.
D is correct because both members in the HA a-p cluster share a virtual MAC for each service port. C is incorrect because only the peer IP should be statically added in unicast mode. The local interface IP can be added by a DHCP server. The documentation says "The heartbeat interfaces must be connected to the same network and the IP addresses must be added to these interfaces". It does not say how - statically or by a DHCP server.
I have to correct myself. C is the correct answer. The diagram shows that port 3 is directly connected, which means that there can be no DHCP server on this segment.
D is correct, C is wrong because the IP address can be obtained using DHCP even if the FGTs are running in HA A-P mode.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HA-and-dynamic-interface-support-DHCP/ta-p/193933
It is C
https://docs.fortinet.com/document/fortigate-private-cloud/7.4.0/microsoft-hyper-v-administration-guide/397100/ha
Unicast HA heartbeat interfaces must be connected to the same network and you must add IP addresses to these interfaces.
The unicast method does not change the FortiGate-VM interface MAC addresses to virtual MAC addresses.
When HA A-P, they are sharing the same virtual MAC
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
MightyPirateC
2 months, 3 weeks agodspavvn
7 months, 2 weeks agonode345
10 months, 2 weeks agonode345
10 months, 1 week agogabrielf
11 months, 2 weeks agoama6
1 year, 3 months agoac89l
11 months, 3 weeks agopplee_sh
1 year, 4 months agoViewable8041
1 year, 4 months agopplee_sh
1 year, 4 months ago