In a Layer 3 deployment, the firewall routes traffic between multiple ports. This deployment requires that you assign an IP address to each interface and configure Virtual Routers to route the traffic. Choose this option when routing is required.
Figure: Layer 3 Deployment
The following Layer 3 interface deployments are also supported:
Point-to-Point Protocol over Ethernet Support
You can configure the firewall to be a Point-to-Point Protocol over Ethernet (PPPoE) termination point to support connectivity in a Digital Subscriber Line (DSL) environment where there is a DSL modem but no other PPPoE device to terminate the connection.
You can choose the PPPoE option and configure the associated settings when an interface is defined as a Layer 3 interface.
PPPoE is not supported in HA active/active mode.
DHCP Client
You can configure the firewall interface to act as a DHCP client and receive a dynamically assigned IP address. The firewall also provides the capability to propagate settings received by the DHCP client interface into a DHCP server operating on the firewall. This is most commonly used to propagate DNS server settings from an ISP to client machines operating on the network protected by the firewall.
DHCP client is not supported in HA active/active mode.
For more information, see DHCP.

Related Documentation