https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-dhcp-pool/m-p/564742#M4596 <P>Hi <SPAN style="background: var(--ck-color-mention-background); color: var(--ck-color-mention-text);"><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/254959">@albenel</a></SPAN> ,</P> <P>&nbsp;</P> <P>You can add multiple IP pools. When multiple pools are used within the same gateway config the <SPAN style="background-color:rgb(255,255,255);color:rgb(3,45,96);font-size:12.25px;">firewall keeps a pointer to the pool from which the last successful IP address assignment was taken. The next client will get the next available IP from the pointer's pool. I think it depends on what an organization is trying to accomplish. For example, if you have multiple different user groups needing access to GP, I would recommend having a separate portal/gateway for them that includes a separate IP pool. Ex: corporate user portal/gw, contractors. For a single portal and multiple gateway scenario, you can divide ip pool usage based on region or team.&nbsp;</SPAN></P> Wed, 08 Nov 2023 05:12:04 GMT JayGolf 2023-11-08T05:12:04Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-dhcp-pool/m-p/564106#M4580 <P>Does Global Protect typically use one DHCP pool for multiple profiles? What is best practices?</P> Thu, 02 Nov 2023 15:56:20 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-dhcp-pool/m-p/564106#M4580 albenel 2023-11-02T15:56:20Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-dhcp-pool/m-p/564742#M4596 <P>Hi <SPAN style="background: var(--ck-color-mention-background); color: var(--ck-color-mention-text);"><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/254959">@albenel</a></SPAN> ,</P> <P>&nbsp;</P> <P>You can add multiple IP pools. When multiple pools are used within the same gateway config the <SPAN style="background-color:rgb(255,255,255);color:rgb(3,45,96);font-size:12.25px;">firewall keeps a pointer to the pool from which the last successful IP address assignment was taken. The next client will get the next available IP from the pointer's pool. I think it depends on what an organization is trying to accomplish. For example, if you have multiple different user groups needing access to GP, I would recommend having a separate portal/gateway for them that includes a separate IP pool. Ex: corporate user portal/gw, contractors. For a single portal and multiple gateway scenario, you can divide ip pool usage based on region or team.&nbsp;</SPAN></P> Wed, 08 Nov 2023 05:12:04 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-dhcp-pool/m-p/564742#M4596 JayGolf 2023-11-08T05:12:04Z