topic Re: DHCP Server in PA in General Topics

DHCP Server in PA

SOC_CSG — Mon, 09 Feb 2015 07:09:40 GMT

Hi,

I have a client who has configured DHCP server in its Catalyst6500, he has configured 35VLAN aprox with dhcp server in each one. They have having problems in C6500´s CPU because of DHCP and a bug in this switch. Could they configure 15 VLAN in the PA and PA does the role of DHCP server?????Could the PA´s CPU rises up a lot, and perfomance goes down?????? What is the max about DHCP server in PA??? One of the VLAN will connect around 500 users by dhcp :S

Model is PA-2050

Re: DHCP Server in PA

HULK — Mon, 09 Feb 2015 07:35:39 GMT

Hello COS,

For PA 2050 firewall, please find below the limit:

DHCP Server: 10

Max # of assigned addresses : 64,000

Thanks

Re: DHCP Server in PA

SOC_CSG — Mon, 09 Feb 2015 07:56:22 GMT

DHCP process in PA can rises up a lot the CPU, and performace gets high???? any impact???

sorry its a PA2020 with PANos 5.0.11

Re: DHCP Server in PA

oklier — Mon, 09 Feb 2015 23:51:42 GMT

We only use it for VPN clients but havent seen many performance issues. Ever think about dhcp relay to a server that has DHCP installed on it? The DHCP functions in the PAN and options are limited.

Re: DHCP Server in PA

rborda — Tue, 10 Feb 2015 00:37:51 GMT

Hi COS,

If you have a large quantity of dhcp request done on the PA-2050, you could see performance issues. As Oklier stated you could designate another device to be your DHCP server and if needed you can enable DHCP relay on the firewall. If you do decide to enable DHCP relay please review the following document to assist you in this configuration How to Configure a DHCP Relay on Palo Alto Networks Firewall