Layer 3

L0 Member

Layer 3

I am getting ready to set up our firewall at our commany. I have done the free learning curriculum and what I learned was information but it didn't prepare for my first steps totally. I understand that the basic required properties when setting up a Layer 3 interface is: type, virtual router, security zone..I am going to be setting our interface with the DHCP client  (IPv4) to use the DHCP Server. Do I still have to set up the virtual router if im going to be using a IPv4 address.

Community Manager

Re: Layer 3

hi @heatherhill

 

I created a series of articles and tutorial videos to assist in setting up from scratch here : https://live.paloaltonetworks.com/t5/Community-Blog/Getting-Started-The-Palo-Alto-Networks-Firewall-... 


Help the community: Like helpful comments and mark solutions
Reaper out
Community Manager

Re: Layer 3

if your interface is set as dhcp client, it will be getting an IP from an external source (like a regular client on your network)

I'd recommend only doing this on an external itnerface, as you get an IP from your ISP.

 

your internal interfaces should have static IP addresses so your clients can easily be set to connect to this IP as their default gateway

 

you will still need a virtual router since your firewall will act as a routing device for any client located behind it. in the case of a dhcp client interface on the ISP side, the Virtual router will receive a default route automatically by the upstream ISP device (make sure to enable this option when configuring your interface as dhcp client)


Help the community: Like helpful comments and mark solutions
Reaper out
L7 Applicator

Re: Layer 3

Hello @heatherhill,

In short, yes you will be using a virtual router. Its how the PAN knows how to route traffic. Check out the links @reaper posted and feel free to ask more questions here or in a new post. Another good resource would be your SE, i've learned a ton over the years from them and still reach out from time to time.

 

Cheers!

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!