topic Re: DHCP issue in vwire in General Topics

DHCP issue in vwire

VinceM — Fri, 05 Jul 2013 07:23:56 GMT

Hi all,

Having a really simple archie with two ports in vwire (Allow all vlan and multicast on it), create a rule "trust to untrust allow all".

Issue is for dhcp request, I have to create a rule allowing dhcp answer from untrust to trust ....

In my mind there is no reason to do that .. If request is allowed, answer should be automatically.

Maybe someone have the same issue .... and find either the reason or a good explanation 🙂

UhMayYeah — Fri, 05 Jul 2013 08:01:18 GMT

What is the OS installed on the firewall.?

Do you see any DHCP related traffic matching this reverse direction rule?

VinceM — Fri, 05 Jul 2013 08:10:23 GMT

Sorry for missing info

PANOS is 5.0.5 and yes, when making a tcpdump on drop stage I can see dhcp packet dropped by palo.

UhMayYeah — Fri, 05 Jul 2013 08:47:52 GMT

Doesn't seem to be right to me .You can open a case with Support for detailed Debug.

VinceM — Fri, 05 Jul 2013 09:05:27 GMT

After short discution with one of our local Palo Se, he has the same issue.

Maybe a known bug ? will check with palo.

Rgds