Review the exhibit. What would be the best routing command to allow host Certkiller A to communicate with host Certkiller B? (Assume a route from the 208 to Host Certkiller A’s subnet already exists.)
A.
set route 0.0.0.0/0 int e2 gateway 192.167.1.254
B.
set route 192.168.20.0 interface e1 gateway 192.167.1.254
C.
configure route 192.168.20.0/24 gateway 192.167.1.254 int e2
D.
set route 192.168.20.0/24 interface e2 gateway 192.168.1.254
Explanation:
When you want to connect to a remote network, you need to inform your firewall of its location.You would do this by adding network routes on your
firewall. These routes tell the firewall where the remote network can be found. A default route is also known as the route of last resort. So if a packet on a device needs to get to a location and no other routes on the device are able to identify the next gateway for it to go to, it will use the default gateway. To add a static route using the CLI, enter the command : set route ipaddress/netmask interface interfacename
gateway gatewayip, where ipaddress is the virtual router’s IP address, netmask is the cirtual router’s netmask, interfacename is the next hop gateway, and gateway ip is the IP address of the next hop gateway. In this scenario Certkiller A (10.1.10.5) wants to communicate with Certkiller B (192.168.20.5).
Certkiller A does not know the path to reach
Certkiller B. Certkiller A knows the path to Router Certkiller 1 and Certkiller 1 knows the route to the Netscreen 208. So Certkiller A can communicate with the Netscreen 208.
However the netscreen 208 does not know the path to reach 192.168.20.x subnet, therefore we must tell the netscreen 208 how to reach that subnet. We must tell the netscreen 208, that it can reach subnet
192.168.20.x VIA router Certkiller 2 that is connected to interface 2.
The command that we use is : set route 192.168.20.0/24 interface e2 gateway 192.168.1.254