PXE Boot over DHCP Relay VLAN interface

Daniel_P30
Daniel_P30
in Firebox - Networking, Multi-Wan, VLAN, NAT, SD-WAN

I have the problem that the DHCP requests not forwarded from Subnet B to DHCP server because the Firebox is sending blocked traffic from DHCP server to Subnet B default gateway. I have all configured DHCP Relay policies of port 67 TCP/UDP and 68 TCP/UDP.
I dont know at the moment where the failure is.

Answers

  • Bruce_Briggs
    Bruce_Briggs

    You do not need to add DHCP policies to do a DHCP relay, you need to add DHCP relay to a firewall interface - select the Use DHCP Relay radio button and add the DHCP server IP addr

  • Daniel_P30
    Daniel_P30

    Hi Bruce thanks for your answer. But I think I have mispronunced to this topic. At the moment I have a DHCP Relay. The problem is that the tarffc is blocked for port 67 although there is a policie that sould allow the traffic for port 67.

  • Bruce_Briggs
    Bruce_Briggs

    If these are broadcast packets, then you will see denies for them in your firewall logs.
    XTM normally will deny all broadcast packets that hit a routed firewall interface.

  • Daniel_P30
    Daniel_P30

    How can I fix that if all broadcast packets will deny?

  • Bruce_Briggs
    Bruce_Briggs

    All you can do is to add policies to not Log the denied broadcast packets.
    For example, I have a DHCP Server packet filter, set to Denied, From: Any-external To: Any, with Logging not selected. This stops the logging of DHCP/BOOTP packets coming in on external

  • Daniel_P30
    Daniel_P30

    Thanks I will try it.

Categories