Click the Exhibit button.
A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.
However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.
Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?
A. set enforce-unique-id disable
B. set add-route enable
C. set single-source disable
D. set route-overlap allow
|
Download Printable PDF. VALID exam to help you PASS. |
 |
D
https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/487941/vpn-ipsec-phase2-interface-phase2
set route-overlap {use-old | use-new | allow} Action for overlapping routes.
use-old Use the old route and do not add the new route.
use-new Delete the old route and add the new route.
allow Allow overlapping routes.