Configuring multiple DHCP scopes via single layer 3 interface

cancel
Showing results for 
Search instead for 
Did you mean: 

Configuring multiple DHCP scopes via single layer 3 interface

Hi All,

 

I am running PanOS 10.1.0 vm image. Devices are connected as mentioned below.

 

Firewall E1/2 ---> L3 switch ---> Vlan 10, Vlan 20

 

I would really appreciate if some can tell me how to configure two DHCP scopes for Vlan 10 and Vlan 20 in PA firewall because once I configured one scope under E1/2 , for second scope E1/2 is not appearing.

 

gayansasamarakoon_0-1634935691287.png

 

 

I would really appreciate your help.

 

Thank You,

Gayan   

1 ACCEPTED SOLUTION

Accepted Solutions

L4 Transporter

Thank you for posting question @gayansa.samarakoon

 

The DHCP server is bound to an interface. This is one of the pre-requisite: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/dhcp/configure-an-interface-as... Once you assign an interface to one pool, you will have to create a new interface for other pool.

 

If possible, could you configure on PA side sub-interfaces Eth1/2.10 and Eth 1/2.20 and assign an IP address to each interface, then configure E0/0 on R6 as dot1.q trunk and add Vlans 10 and 20 to the trunk? In this way you will be able to create a separate DHCP pool for Vlan 10 and 20. If you have configured an SVI interface as Gateway in R6 for Vlans 10 and 20, could you move it to PA sub-interfaces Eth1/2.10 and Eth 1/2.20 and assign them as Gateway DHCP option? After this, clients in Vlans 10 and 20 should be able to get an IP address from PA.

 

Kind Regards

Pavel

 

 

Pavel Kucera

View solution in original post

2 REPLIES 2

L4 Transporter

Thank you for posting question @gayansa.samarakoon

 

The DHCP server is bound to an interface. This is one of the pre-requisite: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/dhcp/configure-an-interface-as... Once you assign an interface to one pool, you will have to create a new interface for other pool.

 

If possible, could you configure on PA side sub-interfaces Eth1/2.10 and Eth 1/2.20 and assign an IP address to each interface, then configure E0/0 on R6 as dot1.q trunk and add Vlans 10 and 20 to the trunk? In this way you will be able to create a separate DHCP pool for Vlan 10 and 20. If you have configured an SVI interface as Gateway in R6 for Vlans 10 and 20, could you move it to PA sub-interfaces Eth1/2.10 and Eth 1/2.20 and assign them as Gateway DHCP option? After this, clients in Vlans 10 and 20 should be able to get an IP address from PA.

 

Kind Regards

Pavel

 

 

Pavel Kucera

View solution in original post

Hi Pavel,

 

Thanks a lot for your prompt reply and valuable insight regarding this issue.

 

Regards,

Gayan

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!