Configure an Interface as a DHCP Relay Agent
To enable a firewall interface to transmit DHCP messages between clients and servers, you must configure the firewall as a DHCP relay agent. The interface can forward messages to a maximum of eight external IPv4 DHCP servers and eight external IPv6 DHCP servers. A client DHCPDISCOVER message is sent to all configured servers, and the DHCPOFFER message of the first server that responds is relayed back to the requesting client.
Capacities are as follows:
- You can configure a combined total of 500 DHCP servers (IPv4) and DHCP relay agents (IPv4 and IPv6) on all firewall models except for PA-5200 Series and PA-7000 Series firewalls
- On PA-5220 firewalls, you can configure a maximum of 500 DHCP servers and a maximum of 2,048 DHCP relay agents minus the number of DHCP servers configured. For example, if you configure 500 DHCP servers, you can configure 1,548 DHCP relay agents.
- On PA-5250, PA-5260, and PA-7000 Series firewalls, you can configure a maximum of 500 DHCP servers, and a maximum of 4,096 DHCP relay agents minus the number of DHCP servers configured. For example, if you configure 500 DHCP servers, you can configure 3,596 DHCP relay agents.
Before configuring a DHCP relay agent, make sure you have configured a Layer 3 Ethernet or Layer 3 VLAN interface, and the interface is assigned to a virtual router and a zone.
- Select DHCP Relay.Select NetworkDHCPDHCP Relay.
- Specify the IP address of each DHCP server with which
the DHCP relay agent will communicate.
- In the Interface field, select from the drop-down the interface you want to be the DHCP relay agent.
- Select either IPv4 or IPv6, indicating the type of DHCP server address you will specify.
- If you checked IPv4, in the DHCP Server IP Address field, Add the address of the DHCP server to and from which you will relay DHCP messages.
- If you checked IPv6, in the DHCP Server IPv6 Address field, Add the address of the DHCP server to and from which you will relay DHCP messages. If you specify a multicast address, also specify an outgoing Interface.
- (Optional) Repeat the prior three steps to enter a maximum of eight DHCP server addresses per IP address family.
- Commit the configuration.Click OK and Commit.
DHCP Relay Network > DHCP > DHCP Relay Before configuring a firewall interface as a DHCP relayagent , make sure you have configured a Layer 3 ...
DHCP This section describes Dynamic Host Configuration Protocol (DHCP) and the tasks required to configure an interface on a Palo Alto Networks firewall to act ...
Configure an Interface as a DHCP Server
Configure an Interface as a DHCP Server The prerequisites for this task are: Configure a Layer 3 Ethernet or Layer 3 VLAN interface. Assign the ...
DHCP Overview DHCP is a standardized protocol defined in RFC 2131 , Dynamic Host Configuration Protocol . DHCP has two main purposes: to provide TCP/IP ...
Configuration Capacity Improvements
For some firewall models, PAN-OS® 8.1 supports more address objects, address groups, service objects, service groups, zones, security rules, FQDN address objects, and DHCP relay ...
Network > DHCP
Network > DHCP Dynamic Host Configuration Protocol (DHCP) is a standardized protocol that provides TCP/IP and link-layer configuration parameters and network addresses to dynamically configured ...
DHCP Overview Network > DHCP DHCP uses a client-server model of communication. This model consists of three roles that the firewall can fulfill: DHCP client, ...
DHCP Messages DHCP uses eight standard message types, which are identified by an option type number in the DHCP message. For example, when a client ...
Device > Setup > Interfaces
Device > Setup > Interfaces Use this page to configure connection settings, allowed services, and administrative access for the management (MGT) interface on all firewall ...