DHCP Clients Not Getting IP From ISP Router Thru VWIRE

[DRobinson_TIC]

Hi All,

I may be missing something but wanted to check with you all.  I have a network with a PA-200 (vwire) between a FIOS router and a Netgear Layer 2  switch.  I also have WAPs connected to the switch.  The FIOS router is providing DHCP address to the wired/wireless clients connected.  The DHCP clients are not getting IP addresses and I'm getting errors that the DHCP server cannot be reached.  I do have an outbound rule so I can test URL filtering, but everything is set to alert in the URL Filter Profile.  BTW, no DHCP issues are encountered with the PA removed from the mix.

It's a pretty simple setup so I was wondering if anyone has had this type of issue.  Or maybe my setup isn't correct?  I'd appreciate the help.

Thanks,

Dan

[AndyYerger · Accepted solution]

Quick question on your vwire did you create an untrust zone and a trust zone? That is what I did and I had the same issue. I created a security policy rule from untrust to trust on my vwire with only the application dhcp and that worked for me.

Andy

[AndyYerger]

Also forgot stick that dhcp rule at the top of the security policy list.

[DRobinson_TIC]

Thanks Andy.  I'll try that tomorrow or Wednesday and and follow up on the thread.

Dan

[mgarg]

For testing create an any any policy to check if that resolves the issue. If that helps, then create a bidirectional security policy from between your inside and outside zone and allow the dhcp application.

[DRobinson_TIC]

That did the trick.  The zones were already in place so all I needed to do was allow DHCP from the Untrusted to the Trusted and it worked like a charm.  I guess I was hoping for a striaght plug-n-play but I'm glad it's working. 

Thanks,

Dan