I'll start off by waving the " I'm not as strong in networking & network security as I probably should be " flag so I apologize in advance for my lack of expertise in these areas and products. In short, I need assistance getting PXE to work on devices connected to a PA-820. In this particular case the PA-820 is the DHCP server which is different than our standard office configuration*. That said, the setup here is fairly basic: ethernet 1/1 is the WAN port ethernet 1/2, 1/3 & 1/4 are up & configured for use The PA-820 is the DHCP server Under Network > DHCP > DHCP Server each ethernet interface has its own DHCP configuration. (I couldn't figure out if there was a better way to get DHCP working on all ports with the same IP range.) ethernet 1/2 > 192.168.1.0/26 IP Pool: 192.168.1.20-62 Broadcast: 10.199.155.63 Subnet Mask: 255.255.255.192 (255.255.255.192/26) ethernet 1/3 > 192.168.1.64/26 IP Pool: 192.168.1.65-126 Broadcast: 10.199.155.127 Subnet Mask: 255.255.255.192 (255.255.255.192/26) ethernet 1/4 > 192.168.1.128/26 IP Pool: 192.168.1.129-190 Broadcast: 10.199.155.191 Subnet Mask: 255.255.255.192 (255.255.255.192/26) No additional subnets No VLANs The imaging server that provides PXE services plugged into ethernet 1/2 The clients I need to image are plugged into ethernet 1/3 & 1/4 Server and clients can communicate with each other. DHCP works on interfaces ethernet 1/2, 1/3 & 1/4 PXE doesn't work on any interface; not even ethernet 1/2 where I have the imaging server and a VM connected. Here's what [I think] I know: When I attempt to PXE boot, it doesn't work and on the clients I'm seeing errors like: PXE-E16: No valid offer received PXE-E18: Server response timeout On the PXE server, I'm not seeing any PXE requests in the log which seems to suggest the client's discover request isn't reaching the PXE server I've tried two different clients in each port to confirm it wasn't a client/port specific issue I setup a VM on the imaging server to the same NIC as the imaging server and PXE fails there as well for the same reason as above. If I use boot media I can confirm IP's are issued and the imaging process works; just not PXE If I plug in a standard consumer switch into ethernet 1/2 then plug the imaging server and one of the clients into the consumer switch, DHCP works but not PXE. I did find a post that suggested creating a NAT rule to translate incoming TFTP connections sent to the firewall IP to the IP address of the actual TFTP server. I'm skeptical because of my current understanding of how the DHCP/PXE process works, which admittedly might be incomplete and accurate. That said, I'm open to trying that if there isn't a better solution. Thank you for taking the time to review this. I really appreciate any suggestions you might have not just about getting PXE working but also the setup. *Standard Office Configuration: For what it's worth, in all of our offices, Domain Controllers serve up IP's via DHCP and we get the networking team to configure ip helpers on the Cisco switches that point to the PXE server which allows machines on all VLANs to PXE boot. We don't use DHCP options and I don't want to use them since Microsoft doesn't support using DHCP options and the MVP Community agrees: https://support.microsoft.com/en-us/help/259670/pxe-clients-computers-do-not-start-when-you-configure-the-dynamic-host https://techcommunity.microsoft.com/t5/configuration-manager-blog/you-want-to-pxe-boot-don-t-use-dhcp-options/ba-p/275562 https://deploymentbunny.com/2016/02/29/osd-how-make-pxe-work-in-configmgr-osd-mdt-and-wds-work-perfectly-fine-stop-using-dhcp-option-66-67/
... View more