Next-Generation Firewall
Configure an Interface as a DHCP Relay Agent
Table of Contents
Configure an Interface as a DHCP Relay Agent
Enable a firewall interface to transmit DHCP messages
between clients and servers.
Contact your account team to enable Cloud Management for NGFWs using
Strata Cloud Manager.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
One of these:
|
To enable a firewall interface to transmit DHCP messages between clients and servers,
you must configure the firewall as a DHCP relay agent. The interface can forward
messages to a maximum of eight external IPv4 DHCP servers. A client
DHCPDISCOVER message is sent to all configured
servers, and the DHCPOFFER message of the first server
that responds is relayed back to the requesting client.
- You can configure a combined total of 500 DHCP servers and DHCP relay agents on all firewall models except for PA-5200 Series and PA-7000 Series firewalls.
- On PA-5220 firewalls, you can configure a maximum of 500 DHCP servers and a maximum of 2,048 DHCP relay agents minus the number of DHCP servers configured. For example, if you configure 500 DHCP servers, you can configure 1,548 DHCP relay agents.
- On PA-5250, PA-5260, and PA-7000 Series firewalls, you can configure a maximum of 500 DHCP servers, and a maximum of 4,096 DHCP relay agents minus the number of DHCP servers configured. For example, if you configure 500 DHCP servers, you can configure 3,596 DHCP relay agents.
- Log in to Strata Cloud Manager.Configure the interface that will act as a DHCP relay agent.
- Configure a Layer 3 interface or Layer 3 VLAN interface.Assign the Layer 3 interface to a logical router.Assign the Layer 3 interface to a zone.Select and select the Configuration Scope where you want to create the DHCP server relay agent.Select a firewall from your Folders or select Snippets to configure the DHCP server relay agent in a snippet.For the Interface Name, select the interface you want to be the DHCP relay agent.For the IP Addresses, Add the address of the DHCP server to and from which you’ll relay DHCP messages.You can add up to eight DHCP servers for a single DHCP relay agent.Save.Push Config to push your configuration changes.
