https://live.paloaltonetworks.com/t5/globalprotect-articles/globalprotect-support-for-dhcp-based-ip-address-assignments/ta-p/586161 <DIV class="lia-message-template-content-zone"> <DIV class="p" dir="ltr"> <DIV dir="ltr"><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Title_GlobalProtect-Support-DHCP-Based-IP-Address_palo-alto-networks.jpg" style="width: 960px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/59597i30B441F58D431B8F/image-size/large?v=v2&amp;px=999" role="button" title="Title_GlobalProtect-Support-DHCP-Based-IP-Address_palo-alto-networks.jpg" alt="Title_GlobalProtect-Support-DHCP-Based-IP-Address_palo-alto-networks.jpg" /></span></DIV> <DIV dir="ltr">&nbsp;</DIV> <DIV dir="ltr">With PANOS 11.2, you can now configure a DHCP server profile on the GlobalProtect gateway to use DHCP server for managing and assigning IP addresses for the endpoints connected remotely through the GlobalProtect app. (Please note that this is only supported on the VM series firewalls with PANOS 11.2). Users who are using enterprise DHCP servers can enable this feature for centralized IP management and IP address assignments. When you configure a DHCP server profile on the GlobalProtect gateway and upon successful communication between the gateway and the DHCP server, the gateway obtains DHCP IP addresses from a DHCP member server. The GlobalProtect gateway then assigns the IP addresses as the tunnel IP for the endpoints that are remotely connected through the GlobalProtect app. If the DHCP server fails to respond to the gateway within the set communication timeout and retry times period, the gateway falls back to the private Static IP pool for the allocation of IP addresses for the endpoints.</DIV> <DIV dir="ltr">&nbsp;</DIV> </DIV> <DIV class="p" dir="ltr"> <DIV dir="ltr">When the GlobalProtect gateway assigns the DHCP IP addresses to the endpoints, you can configure their DHCP server to create Dynamic DNS ( Address and Pointer Record) records for the GlobalProtect connected users. DDNS are useful for endpoint admins to do troubleshooting on the GlobalProtect connected remote user endpoints. The IP addresses get registered to the DDNS server only when you configure IP Address Management (IPAM) on Windows server, DDNS server, or on the Infoblox server.</DIV> <DIV dir="ltr">&nbsp;</DIV> </DIV> <DIV class="p"> <DIV>To configure the feature, see<SPAN>&nbsp;</SPAN><A class="xref" href="https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-gateways/dhcp-based-ip-address-assignment-and-management-for-globalprotect" target="_blank" rel="noopener" data-scope="external" data-format="html" data-type="">DHCP Based IP Address Assignment and Management for GlobalProtect</A><SPAN>&nbsp;</SPAN>section in the GlobalProtect Admin Guide.&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Please see a brief video on how to configure this feature below:</DIV> <DIV>&nbsp;</DIV> <DIV><div class="lia-vid-container video-embed-center"><div id="lia-vid-6352524020112w954h540r377" class="lia-video-brightcove-player-container"><video-js data-video-id="6352524020112" data-account="6058004142001" data-player="default" data-embed="default" class="vjs-fluid" controls="" data-application-id="" style="width: 100%; height: 100%;"></video-js></div><script src="https://players.brightcove.net/6058004142001/default_default/index.min.js"></script><script>(function() { var wrapper = document.getElementById('lia-vid-6352524020112w954h540r377'); var videoEl = wrapper ? wrapper.querySelector('video-js') : null; if (videoEl) { if (window.videojs) { window.videojs(videoEl).ready(function() { this.on('loadedmetadata', function() { this.el().querySelectorAll('.vjs-load-progress div[data-start]').forEach(function(bar) { bar.setAttribute('role', 'presentation'); bar.setAttribute('aria-hidden', 'true'); }); }); }); } }})();</script><a class="video-embed-link" href="https://live.paloaltonetworks.com/t5/video/gallerypage/video-id/6352524020112">(view in My Videos)</a></div></DIV> </DIV> </DIV> Thu, 09 May 2024 18:15:39 GMT ror 2024-05-09T18:15:39Z https://live.paloaltonetworks.com/t5/globalprotect-articles/globalprotect-support-for-dhcp-based-ip-address-assignments/ta-p/586161 <P>With PANOS 11.2, you can now configure a DHCP server profile on the GlobalProtect gateway to use DHCP server for managing and assigning IP addresses for the endpoints connected remotely through the GlobalProtect app.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Title_GlobalProtect-Support-DHCP-Based-IP-Address_palo-alto-networks.jpg" style="width: 960px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/59598iE623883FF9B268FD/image-size/large?v=v2&amp;px=999" role="button" title="Title_GlobalProtect-Support-DHCP-Based-IP-Address_palo-alto-networks.jpg" alt="Title_GlobalProtect-Support-DHCP-Based-IP-Address_palo-alto-networks.jpg" /></span></P> Thu, 09 May 2024 18:15:39 GMT https://live.paloaltonetworks.com/t5/globalprotect-articles/globalprotect-support-for-dhcp-based-ip-address-assignments/ta-p/586161 ror 2024-05-09T18:15:39Z