NSE7 Troubleshooting and Diagnostics Practice Question
A BGP peering between two FortiGates is not establishing. The administrator runs 'get router info bgp neighbor' and sees that the neighbor state is 'Idle' and the BGP configuration appears correct. What should the administrator check next?
⚠ Common exam trap
The trap here is that candidates often jump to debugging or assume a configuration error (like AS number mismatch) when the neighbor state is Idle, but the most fundamental cause—IP reachability—is frequently overlooked.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that the BGP neighbor IP is reachable via the routing table
When a BGP neighbor is stuck in the 'Idle' state, it typically indicates that BGP cannot initiate the TCP connection to the neighbor. The most common cause is that the neighbor IP address is not reachable via the routing table. Even if the BGP configuration (AS number, neighbor IP) is correct, BGP will remain Idle until it can successfully open a TCP session on port 179. Therefore, verifying IP reachability (e.g., with 'ping' or checking the routing table) is the logical next step.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Run 'diagnose ip router bgp all enable' to enable debug
Why it's wrong here
Debug is helpful but not the next step; connectivity should be checked first.
- ✗
Check the BGP AS number configuration
Why it's wrong here
AS number mismatch would cause 'Active' or 'Connect' state, not 'Idle'.
- ✓
Verify that the BGP neighbor IP is reachable via the routing table
Why this is correct
If the neighbor is unreachable, BGP stays in Idle state.
- ✗
Increase the BGP timers
Why it's wrong here
Timer changes do not fix 'Idle' state.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.