- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
12-14-2017 11:59 AM
I am getting ready to set up our firewall at our commany. I have done the free learning curriculum and what I learned was information but it didn't prepare for my first steps totally. I understand that the basic required properties when setting up a Layer 3 interface is: type, virtual router, security zone..I am going to be setting our interface with the DHCP client (IPv4) to use the DHCP Server. Do I still have to set up the virtual router if im going to be using a IPv4 address.
12-15-2017 01:05 AM
hi @heatherhill
I created a series of articles and tutorial videos to assist in setting up from scratch here : https://live.paloaltonetworks.com/t5/Community-Blog/Getting-Started-The-Palo-Alto-Networks-Firewall-...
12-15-2017 01:05 AM
hi @heatherhill
I created a series of articles and tutorial videos to assist in setting up from scratch here : https://live.paloaltonetworks.com/t5/Community-Blog/Getting-Started-The-Palo-Alto-Networks-Firewall-...
12-15-2017 01:08 AM
if your interface is set as dhcp client, it will be getting an IP from an external source (like a regular client on your network)
I'd recommend only doing this on an external itnerface, as you get an IP from your ISP.
your internal interfaces should have static IP addresses so your clients can easily be set to connect to this IP as their default gateway
you will still need a virtual router since your firewall will act as a routing device for any client located behind it. in the case of a dhcp client interface on the ISP side, the Virtual router will receive a default route automatically by the upstream ISP device (make sure to enable this option when configuring your interface as dhcp client)
12-15-2017 08:26 AM
Hello @heatherhill,
In short, yes you will be using a virtual router. Its how the PAN knows how to route traffic. Check out the links @reaper posted and feel free to ask more questions here or in a new post. Another good resource would be your SE, i've learned a ton over the years from them and still reach out from time to time.
Cheers!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!