Courseiva
Troubleshooting and DiagnosticseasyMultiple ChoiceObjective-mapped

How to Check BGP Advertised Routes on FortiGate

An administrator wants to verify that a BGP route is being advertised to a neighbor. Which command displays the routes that FortiGate is advertising to a specific BGP neighbor?

Quick Answer

The answer is `get router info bgp neighbor <ip> advertised-routes`. This command is correct because it directly queries the FortiGate’s BGP routing table for the routes that have been selected for outbound advertisement to a specific neighbor, filtering out any routes that are suppressed by policies or path attributes. On the Fortinet NSE 7 Advanced Security NSE7 exam, this question tests your ability to distinguish between verification commands: a common trap is confusing this with `get router info bgp network` (which shows locally injected networks) or `show ip bgp` (a Cisco equivalent). The key concept is that BGP advertises only the best path after applying outbound route maps and prefix lists, so this command confirms exactly what the neighbor will receive. Memory tip: think “advertised-routes” as “outbound truth”—if you want to see what you’re sending, use this command.

⚠ Common exam trap

Many candidates confuse the FortiOS 'get router info bgp neighbor <ip> advertised-routes' command with Cisco's 'show ip bgp neighbors <ip> advertised-routes' or mistakenly use a generic 'show ip bgp summary' command, which only shows neighbor state and not the actual advertised routes.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

get router info bgp neighbor <ip> advertised-routes

The command 'get router info bgp neighbor <ip> advertised-routes' is the specific FortiOS CLI command that displays the BGP routes that the FortiGate has advertised to a particular BGP neighbor. This command queries the BGP table for routes that have been sent to the neighbor and are in the Adj-RIB-Out, which is exactly what the administrator needs to verify outbound route advertisement.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • get router info bgp network

    Why it's wrong here

    Shows locally originated BGP networks, not advertised routes.

  • get router info bgp neighbor <ip> advertised-routes

    Why this is correct

    Correct command.

  • diagnose ip router bgp routes

    Why it's wrong here

    This is not a standard FortiGate command.

  • show ip bgp summary

    Why it's wrong here

    Shows neighbor summary, not advertised routes.

About these practice questions

One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more way this is tested on NSE7

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. An administrator configures BGP route advertisement but the routes are not being sent to the neighbor. The BGP session is established. What is the MOST likely cause?

medium
  • A.The BGP administrative distance is set too high
  • B.The BGP neighbor has the wrong update-source interface
  • C.The route is filtered by a route-map
  • D.The 'network' statement is missing for the desired prefix

Why D: The BGP session is established, so Layer 3 connectivity and TCP port 179 are working. The most common reason for routes not being advertised to a neighbor is that the 'network' statement is missing for the desired prefix. In BGP, the 'network' command does not advertise the prefix unless it matches an exact route in the IP routing table; without it, BGP has no prefix to send, even if the session is up.

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.