Is it possible ! How to get internet from dhcp client with vlan

[shrikant]

Hello Friends !

I am new to palo alto network ,i starting to understand and learn palo alto network firewall some time back .

I have setup a firewall panos 9.04 on ubuntu with kvm using bridge connection and  vlan  ( i want to setup a passthroguth but due to iommu group i am fail to do so)

my isp (with rj 45) is providing me dhcp address  with vlan i am able to get/reslove ip address .

my problem is how to setup snat or/and virtual route

[reaper]

if your interface is DHCP client, you can set up a SNAT rule bound to the interface without defining the IP

the virtual router automatically learns the default route if you enable the interface to accept it

[shrikant]

Thanks !

I did this part but i am not able to get internet in session browser  i can see lot of traffic with dns only .

[shrikant]

[BPry]

@shrikant,

Take DNS out of the equation and try running a simple ICMP request to an IP that you know to accept ICMP traffic (9.9.9.9, 8.8.8.8, ect) and see if you get a response. You likely won't; your logs don't see a session_end_reason, but I imagine that the traffic is aging out. Verify that you have your routes setup correctly.