topic Static default route setup for DHCP client WAN interface in General Topics

Static default route setup for DHCP client WAN interface

palorox2023 — Sun, 20 Aug 2023 04:54:27 GMT

Hello All

I would be much appreciated if you can help with setting up my static default route which I believe is the culprit why I'm not able to route data traffic to internet.

eth1/1: WAN interface, the interface is set as L3 untagged, configured DHCP-client for IPv4. ISP assigns a new IP every 10-12 hours and the bridge-mode cable modem is connected to the eth 1/1 port. I'm not able to reach internet from 10.0.9.5 and I don't know what needs to be set from the "Next Hop" pull down menu. Can't use IP address since my ISP assigns IP dynamically and changes every 10-12 hours. Please see my settings below which should help you visualize better how my PA is setup as of now.

--thanks for your help in advance

Re: Static default route setup for DHCP client WAN interface

TomYoung — Mon, 21 Aug 2023 00:59:34 GMT

Hi @palorox2023 ,

When you check the box "Automatically create default route pointing to default gateway provided by server", you do not have to manually create a default static route. The NGFW does so. The route created from DHCP looks like the 2nd route in the routing table. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQRCA0

Delete your static default route. That looks like the 1st entry in the routing table. It is not active and not needed.

Your routing and NAT look fine. Do you see the traffic in the traffic logs allowed and forwarded to the proper interface?

Thanks,

Tom

Re: Static default route setup for DHCP client WAN interface

palorox2023 — Sat, 26 Aug 2023 10:39:51 GMT

thanks for your reply. I deleted the static default route, but I still can't route data traffic to outside WAN via eth1/1. I checked the traffic from the Monitor tab but I don't see traffic going out. here is updated route table after deleting the static default route. I am also attaching the interface setup.

Re: Static default route setup for DHCP client WAN interface

T.Loring — Wed, 22 Jan 2025 16:15:01 GMT

Did you ever get this figured out? I am running into this exact issue where I can not get my service routes to go out with DHCP WAN port.

Re: Static default route setup for DHCP client WAN interface

TomYoung — Wed, 22 Jan 2025 16:38:51 GMT

Hi @palorox2023 ,

Sorry for not replying. The interface down does not look like a good sign. I have used the DHCP added default route many times. It should work without issue.

Thanks,

Tom

Re: Static default route setup for DHCP client WAN interface

Cobaltix_CNavarro — Thu, 06 Feb 2025 19:58:49 GMT

Was it the metric? looks like your default out was set to 70 but the interface setting was lower...