Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementEasy
A company is integrating a new Palo Alto Networks firewall into their existing network infrastructure. The firewall's management interface needs to dynamically obtain an IP address, subnet mask, and default gateway from an upstream network device. Which network configuration mode should be selected for the management interface to achieve this?
- ADHCP Client
- BStatic
- CVirtual Wire
- DLayer 3
Show answer & explanationAnswer & explanation
Correct answer: A. DHCP Client
To dynamically obtain an IP address, subnet mask, and default gateway from an upstream network device, the management interface should be configured in DHCP Client mode. This allows the firewall to request and receive network configuration from a DHCP server.
Why the other options are wrong
- B. Static mode requires manual configuration of IP address, subnet mask, and default gateway.
- C. Virtual Wire is a transparent Layer 2 mode and does not involve IP address assignment to the interface itself.
- D. Layer 3 refers to the interface's operational mode (routing), not how it obtains its IP address.
Management Interface DHCP
Configuring the Palo Alto Networks firewall's management interface to obtain its IP address and network settings dynamically via DHCP.
- Simplifies initial setup in networks with DHCP servers.
- Requires an upstream DHCP server.
- Configured under Device > Setup > Management > Management Interface.
Memory trick: If the firewall's management interface needs an IP 'delivered', it becomes a 'DHCP Client'.