If you're using an external DHCP server instead of using Sophos Firewall as the server, you must configure the external server to route DHCP packets through the relay agent's interface. You can't configure Sophos Firewall as a DHCPv6 server and a DHCPv6 relay agent simultaneously. You can also configure agents to relay DHCP packets through IPsec VPN tunnels. It then forwards DHCP communication between clients in the relay agent's network and DHCP servers in other networks. To configure Sophos Firewall as the DHCP server, go to the Server section and click Add.ĭHCP relay agent: You can configure Sophos Firewall as a DHCP relay agent.You can also configure the server to assign static IP addresses mapped to clients' MAC addresses. The server leases IP addresses that belong to the same subnet as the relay agent's source address. For these server configurations, you can use the same DHCP interface on which the server listens for DHCP queries. Since clients in each network require different sets of network parameters (example: default gateway), you must configure the DHCP server as many times as the networks for which you want to lease IP addresses. When clients leave the network, the server releases the assigned IP addresses and reuses these.įor Sophos Firewall to lease IP addresses directly to clients within the server's network, the DHCP interface must belong to the client network.įor Sophos Firewall to lease IP addresses to clients in other networks, you must configure a DHCP relay agent. Allows you to locate and troubleshoot IP address-related issues faster.ĭHCP server: As a DHCP server, Sophos Firewall assigns IP addresses and network parameters to DHCP clients.

Allows you to use address space effectively, redistributing IP addresses that aren't in use.Allows mobile devices to move seamlessly between networks.Simplifies the configuration of endpoint devices, including mobile devices, servers, and routers.You can configure DHCP servers and relay agents on physical and virtual interfaces, such as VLANs, wireless networks, and bridge interfaces, but not on an interface alias.

Check point dhcp gateway vpn