Layer 3

[heatherhill]

I am getting ready to set up our firewall at our commany. I have done the free learning curriculum and what I learned was information but it didn't prepare for my first steps totally. I understand that the basic required properties when setting up a Layer 3 interface is: type, virtual router, security zone..I am going to be setting our interface with the DHCP client  (IPv4) to use the DHCP Server. Do I still have to set up the virtual router if im going to be using a IPv4 address.

[reaper · Accepted solution]

hi @heatherhill

I created a series of articles and tutorial videos to assist in setting up from scratch here : https://live.paloaltonetworks.com/t5/Community-Blog/Getting-Started-The-Palo-Alto-Networks-Firewall-... 

[reaper]

if your interface is set as dhcp client, it will be getting an IP from an external source (like a regular client on your network)

I'd recommend only doing this on an external itnerface, as you get an IP from your ISP.

your internal interfaces should have static IP addresses so your clients can easily be set to connect to this IP as their default gateway

you will still need a virtual router since your firewall will act as a routing device for any client located behind it. in the case of a dhcp client interface on the ISP side, the Virtual router will receive a default route automatically by the upstream ISP device (make sure to enable this option when configuring your interface as dhcp client)

[OtakarKlier]

Hello @heatherhill,

In short, yes you will be using a virtual router. Its how the PAN knows how to route traffic. Check out the links @reaper posted and feel free to ask more questions here or in a new post. Another good resource would be your SE, i've learned a ton over the years from them and still reach out from time to time.

Cheers!