This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About dmwalsh568
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About dmwalsh568
02-23-2023
2Posts
0Likes
0Solutions
Feb 23, 2023Last Visited
User
Activity
User
Profile
Latest posts by dmwalsh568
| Subject | Views | Posted |
|---|---|---|
| 832 | 02-21-2023 01:06 PM | |
| 968 | 02-17-2023 08:24 AM |
User Badges
Community Statistics
| Member Since | 10-22-2018 05:05 AM |
| Date Last Visited | 02-23-2023 01:10 PM |
| Posts | 2 |
02-21-2023
01:06 PM
My 3220s are connected via 1Gbps copper lines to the core switch. The Aruba 6405 core switch has dual 10Gbps fiber connections to each IDF and a lot of our traffic is internal - going between VLANs for printing, connecting to projectors, etc. I figured there was no sense in forcing most of the traffic down a shared 1Gbps pipe. But your reply got me to thinking, and it seems my core switch can do DHCP service much more easily than futzing around with virtual interfaces and virtual routes to use a single interface. The core switch already has all the VLANs and does the layer 3 routing, so adding a DHCP scope to each VLAN is much easier than doing voodoo on the 3220s.
... View more
02-17-2023
08:24 AM
School network here with an old Windows server running DHCP for our 10 VLANs.
Would like to use our PA-3220 firewalls to run DHCP so I can get rid of the old server.
Layer 3 routing happens inside the building network on the top of rack switch (Aruba 6405) DHCP Relay is also enabled on the top of rack switch since the DHCP server is on a separate VLAN to isolate it from other network traffic.
Firewalls are connected via a single interface to the internal network. VLANs are configured on the firewall so it knows about all of them and I have policies enabled to give each VLAN appropriate access to the Internet.
The one document I saw that talked about this issue mentioned creating a virtual router for each scope, but I currently have two virtual routers to enable failover from one ISP feed to another. Wasn't sure how to set up the DHCP scopes without making a mess of the failover VRs.
All suggestions appreciated, even if it's just I should create a case or need to hire a VAR to help me with the config.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-23-2023
01:10 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks