Q: 1
Refer to the exhibit.
Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are installed with
extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?
Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are installed with
extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?Options
Discussion
Option B similar question showed up in an official guide review session.
Call it B. The hub FortiGate should not have any extensions like FortiSwitch or FortiAP attached, otherwise performance and reliability can suffer. Spokes can run those, but best to keep the hubs clean. Pretty sure that's what Fortinet recommends. Someone correct me if you know otherwise.
Yeah, B fits. Fortinet recommends hubs without extensions for stability and performance reasons. Pretty sure that's the best approach here.
Has anyone checked the official guide for this? Practice exams suggest FortiManager may be needed for complex SD-WAN topologies, so wouldn't C make sense too? Not totally sure since labs usually focus more on hub vs spoke roles.
Honestly, I think A could work since you can technically add all devices into the SD-WAN topology.
B imo, had something like this in a mock, hubs should be FortiGate only with no extensions.
Why wouldn't Option A work here if the hubs had extensions?
Yeah it’s B here. Hubs in a Fortinet SD-WAN setup should be plain FortiGate devices without extensions like FortiSwitch or AP, keeps stability up. Spokes can run extensions but not hubs. Pretty sure I’ve seen this in official docs, but open to correction.
I don't think it's A. The trap is believing you can use any device as a hub, but best practice (and exam reports) show hubs need to be FortiGates without extensions attached. B covers that requirement. Anyone see docs saying otherwise?
B tbh. Hubs need to be clean FortiGates, no extensions like AP or Switch attached. Keeps the SD-WAN core stable. Disagree?
Be respectful. No spam.
