topic Re: DHCP Clients Not Getting IP From ISP Router Thru VWIRE in General Topics

DHCP Clients Not Getting IP From ISP Router Thru VWIRE

DRobinson_TIC — Mon, 23 Oct 2017 23:37:56 GMT

Hi All,

I may be missing something but wanted to check with you all. I have a network with a PA-200 (vwire) between a FIOS router and a Netgear Layer 2 switch. I also have WAPs connected to the switch. The FIOS router is providing DHCP address to the wired/wireless clients connected. The DHCP clients are not getting IP addresses and I'm getting errors that the DHCP server cannot be reached. I do have an outbound rule so I can test URL filtering, but everything is set to alert in the URL Filter Profile. BTW, no DHCP issues are encountered with the PA removed from the mix.

It's a pretty simple setup so I was wondering if anyone has had this type of issue. Or maybe my setup isn't correct? I'd appreciate the help.

Thanks,

Dan

Re: DHCP Clients Not Getting IP From ISP Router Thru VWIRE

AndyYerger — Tue, 24 Oct 2017 01:10:01 GMT

Quick question on your vwire did you create an untrust zone and a trust zone? That is what I did and I had the same issue. I created a security policy rule from untrust to trust on my vwire with only the application dhcp and that worked for me.

Andy

Re: DHCP Clients Not Getting IP From ISP Router Thru VWIRE

AndyYerger — Tue, 24 Oct 2017 01:12:19 GMT

Also forgot stick that dhcp rule at the top of the security policy list.

Re: DHCP Clients Not Getting IP From ISP Router Thru VWIRE

DRobinson_TIC — Tue, 24 Oct 2017 02:22:05 GMT

Thanks Andy. I'll try that tomorrow or Wednesday and and follow up on the thread.

Dan

Re: DHCP Clients Not Getting IP From ISP Router Thru VWIRE

mgarg — Tue, 24 Oct 2017 02:42:55 GMT

For testing create an any any policy to check if that resolves the issue. If that helps, then create a bidirectional security policy from between your inside and outside zone and allow the dhcp application.

Re: DHCP Clients Not Getting IP From ISP Router Thru VWIRE

DRobinson_TIC — Wed, 25 Oct 2017 02:31:09 GMT

That did the trick. The zones were already in place so all I needed to do was allow DHCP from the Untrusted to the Trusted and it worked like a charm. I guess I was hoping for a striaght plug-n-play but I'm glad it's working.

Thanks,

Dan