>
    Configure an Interface as a DHCP Relay Agent
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Set Up Firewalls
    4. DHCP
    5. Configure an Interface as a DHCP Relay Agent
    Download PDF
    Next-Generation Firewall

    Configure an Interface as a DHCP Relay Agent

    Table of Contents

    Configure an Interface as a DHCP Relay Agent

    Enable a firewall interface to transmit DHCP messages between clients and servers.
    Contact your account team to enable Cloud Management for NGFWs using Strata Cloud Manager.
    Where Can I Use This?
    What Do I Need?
    • NGFW (Managed by Strata Cloud Manager)
    • VM-Series, funded with Software NGFW Credits
    • AIOps for NGFW Premium license (use the Strata Cloud Manager app)
    • Prisma Access
       license
    To enable a firewall interface to transmit DHCP messages between clients and servers, you must configure the firewall as a DHCP relay agent. The interface can forward messages to a maximum of eight external IPv4 DHCP servers. A client
    DHCPDISCOVER
     message is sent to all configured servers, and the
    DHCPOFFER
     message of the first server that responds is relayed back to the requesting client.
    • You can configure a combined total of 500 DHCP servers and DHCP relay agents on all firewall models except for PA-5200 Series and PA-7000 Series firewalls.
    • On PA-5220 firewalls, you can configure a maximum of 500 DHCP servers and a maximum of 2,048 DHCP relay agents minus the number of DHCP servers configured. For example, if you configure 500 DHCP servers, you can configure 1,548 DHCP relay agents.
    • On PA-5250, PA-5260, and PA-7000 Series firewalls, you can configure a maximum of 500 DHCP servers, and a maximum of 4,096 DHCP relay agents minus the number of DHCP servers configured. For example, if you configure 500 DHCP servers, you can configure 3,596 DHCP relay agents.
    1. Log in to
      Strata Cloud Manager
      .
    2. Configure the interface that will act as a DHCP relay agent.
      1. Configure a Layer 3 interface or Layer 3 VLAN interface.
      2. Assign the Layer 3 interface to a logical router.
      3. Assign the Layer 3 interface to a zone.
    3. Select
      Manage
      Configuration
      NGFW and Prisma Access
      Device Settings
      DHCP
      DHCP Server Relay
       and select the Configuration Scope where you want to create the DHCP server relay agent.
      Select a firewall from your
      Folders
       or select
      Snippets
       to configure the DHCP server relay agent in a snippet.
    4. For the
      Interface Name
      , select the interface you want to be the DHCP relay agent.
    5. For the
      IP Addresses
      ,
      Add
       the address of the DHCP server to and from which you’ll relay DHCP messages.
      You can add up to eight DHCP servers for a single DHCP relay agent.
    6. Save
      .
    7. Push Config
       to push your configuration changes.

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.