topic Re: Is it possible ! How to get internet from dhcp client with vlan in General Topics

Is it possible ! How to get internet from dhcp client with vlan

shrikant — Tue, 20 Apr 2021 11:33:10 GMT

Hello Friends !

I am new to palo alto network ,i starting to understand and learn palo alto network firewall some time back .

I have setup a firewall panos 9.04 on ubuntu with kvm using bridge connection and vlan ( i want to setup a passthroguth but due to iommu group i am fail to do so)

my isp (with rj 45) is providing me dhcp address with vlan i am able to get/reslove ip address .

my problem is how to setup snat or/and virtual route

Re: Is it possible ! How to get internet from dhcp client with vlan

reaper — Tue, 20 Apr 2021 11:53:14 GMT

if your interface is DHCP client, you can set up a SNAT rule bound to the interface without defining the IP

the virtual router automatically learns the default route if you enable the interface to accept it

Re: Is it possible ! How to get internet from dhcp client with vlan

shrikant — Tue, 20 Apr 2021 12:28:45 GMT

Thanks !

I did this part but i am not able to get internet in session browser i can see lot of traffic with dns only .

Re: Is it possible ! How to get internet from dhcp client with vlan

shrikant — Tue, 20 Apr 2021 13:17:47 GMT

Re: Is it possible ! How to get internet from dhcp client with vlan

BPry — Tue, 20 Apr 2021 16:14:17 GMT

@shrikant,

Take DNS out of the equation and try running a simple ICMP request to an IP that you know to accept ICMP traffic (9.9.9.9, 8.8.8.8, ect) and see if you get a response. You likely won't; your logs don't see a session_end_reason, but I imagine that the traffic is aging out. Verify that you have your routes setup correctly.

Re: Is it possible ! How to get internet from dhcp client with vlan

shrikant — Tue, 20 Apr 2021 18:28:49 GMT

@reaper @BPry Thanks .To be very honest there was no problem or may be some issuse

The problem was my isp throw login page to get start and that was not coming i dont know after running dhcp with inherited fix then problem ? i was using opendns

Sorry ,this is my 1st setup i have many question then answers so very very honestly i dont know what was problem hope you understand

i was using astaro firewall about 8-10 years back(after sophos took over stop selling ) ,i am small reseller but now i had 2-3 inquiry about paloalto firewall so i want to start using firewall (some years back i talk to palo alto network people in india that time they told me that they was just focus on large network so i drop idea learning palo alto but now i have inquiry form very old customer who want to shift )

i have to go long way in learning .don't have proper lic even 🙂 (download panos from youtube link 🙂 )

Edit : but i have many issues /question with setup 🙂 why and how i am able to browse internet on host ( firewall and host on same subnet )

Thanks you !

shrikant

Re: Is it possible ! How to get internet from dhcp client with vlan

aleksandar.astardzhiev — Wed, 21 Apr 2021 11:42:36 GMT

Hi @shrikant,

I would strongly suggest you to start using Home : Beacon (paloaltonetworks.com)

There are tones of studing materials and most of them are free to access.

If you run virtual firewall without license you will not be able to use any of the "deep inspection" features (like IPS, AV, etc) and also the number of concurrent connections is limited. You wouldn't see any log enrty again because you don't have license. But for complete beginner as you will be still great, because you can poke with everything and test the basic stuff like routing, nat and basic layer4 rules (you may even run remote access vpn).

Re: Is it possible ! How to get internet from dhcp client with vlan

shrikant — Wed, 21 Apr 2021 12:48:01 GMT

Thanks for information !

Will explore it.

Thank you !