Valid NSE7_EFW-7.2 Dumps shared by ExamDiscuss.com for Helping Passing NSE7_EFW-7.2 Exam! ExamDiscuss.com now offer the newest NSE7_EFW-7.2 exam dumps, the ExamDiscuss.com NSE7_EFW-7.2 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com NSE7_EFW-7.2 dumps with Test Engine here:
Exhibit. Refer to the exhibit, which contains an active-active toad balancing scenario. During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate. What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?
Correct Answer: B
The destination MAC address when packets are forwarded from the primary FortiGate to the secondary FortiGate is the secondary virtual MAC port1. This is because the primary FortiGate uses the virtual MAC address of the secondary FortiGate as the destination MAC address for the SYN packet. The virtual MAC address is derived from the HA group ID and the interface ID, and it is unique for each HA cluster member and interface. The virtual MAC address enables the secondary FortiGate to receive the SYN packet without ARP resolution. Reference: You can find more information about active-active load balancing and virtual MAC address in the following Fortinet Enterprise Firewall 7.2 documents: Virtual server load balance NP session offloading in HA active-active configuration Technical Tip: How to enable TCP load balance in HA with active-active mode
