Related Topics
Configure DHCP Relay
One way to assign IP addresses to computers on the trusted or optional networks is to use a DHCP server on a separate network. You can use DHCP relay to get IP addresses for the computers on the trusted or optional network. With this feature, the Firebox sends DHCP requests to the IP address of up to three DHCP servers you specify.
To use more than one DHCP server for DHCP relay, the device must use Fireware v11.10 or higher.
Make sure the Firebox has a route to the IP addresses you specify for DHCP relay. If the DHCP server you want to use is not on a network protected by your Firebox, you must set up a branch office VPN tunnel between your device and the network where the DHCP server is for this feature to operate correctly.
You can add the IP addresses of up to three DHCP servers. If you have configured two DHCP servers for failover, add the IP addresses of both the primary and secondary DHCP servers to the configuration for DHCP relay. The Firebox sends DHCP requests to the IP addresses of all DHCP servers you specify.
To configure DHCP relay, from Fireware Web UI:
- Select Network > Interfaces.
The Network Interfaces page appears. - Select a trusted or an optional interface and click Configure.
- From the drop-down list at the bottom of the page, select Use DHCP Relay.
- In the DHCP Server text box, type the IP address of a DHCP server and click Add.
- Repeat the previous step to add the IP addresses of up to three DHCP servers.
To configure DHCP relay, from Policy Manager:
- Select Network > Configuration.
The Network Configuration dialog box appears. - Select a trusted or an optional interface and click Configure.
- Select Use DHCP Relay.
- Type the IP address of the DHCP server and click Add.
- Repeat the previous step to add the IP addresses of up to three DHCP servers.
Make sure to add a static route to each DHCP server, if necessary. The DHCP server can be on the network at the remote end of a branch office VPN tunnel.