topic Configuring PA-5250 to act as gateway for guest wireless in General Topics

Configuring PA-5250 to act as gateway for guest wireless

Brett-Welch — Thu, 20 Jan 2022 23:06:54 GMT

Hi All,

I'm attempting to configure a 5250 to act as the gateway and DHCP server for my guest wireless. I have a Cisco 9800 WLC directly connected via fiber from Gi0/2 to Eth1/15 on the 5250 over VLAN 825. I then created VLAN 825 on the 5250 as an SVI and associated it with Eth1/15. I have a DHCP server setup to hand out IPs from the 10.14.0.0/19 subnet. My APs are communicating fine via my internal coporate network however I can't seem to get an IP address from the FW. I also can't set a DNS server to be handed out via DHCP. Eth1/15 is currently a layer 2 port. I'm wondering if I need to make Eth1/15 a layer 3 port and move the gateway from the VLAN 825 interface to Eth1/15.

Re: Configuring PA-5250 to act as gateway for guest wireless

Raido_Rattameister — Fri, 21 Jan 2022 04:25:11 GMT

If you take packet capture on Palo interface Eth1/15 do you see incoming DHCP discover packets?

Re: Configuring PA-5250 to act as gateway for guest wireless

OtakarKlier — Fri, 21 Jan 2022 19:32:16 GMT

Hello,

Take a look at the logs and see where the traffic is getting blocked. If the DHCP server is not on the same vlan, the layer 3 interface on the vlan will be the one responsible for the dhcp relay.

Regards,