FCP-FGT-AD - VPN - Section 5.2

Implement a meshed or partially redundant IPsec VPN including IKE phase 1 and phase 2 configuration.

Implement IPsec VPN tunnels by configuring IKE phase 1 authentication and encryption parameters and IKE phase 2 selectors, then apply them in hub-and-spoke or redundant VPN topologies. Diagnose tunnel negotiation failures by correlating phase 1 and phase 2 status outputs with the configured settings.

IPsec VPNIKE phase 1IKE phase 2hub-and-spokeredundant VPN

More in this domain

Back to all VPN objectives, or the FCP-FGT-AD cert hub.

Examworthy is not affiliated with or endorsed by Fortinet. Original, blueprint-aligned practice material only.