Network Layer Skillets¶
The workflow menu network dropdown allows the user to select a deployment option.
Layer 3 Routing¶
The L3 deployment is a 2-zone, 2-interface model with IP routing.
Interface settings¶
Sample interface configurations with one for external/untrust and one internal/trust.
untrust interface uses DHCP and provides default route inheritance to the internet
trust interface iuses a static IP configuration
the interface names and the trust IP address are variables to adjust as needed
Zones¶
Two zones are provided in the template. The names are variables with default values set to trust and internet.
Virtual Router¶
The internet gateway deployment uses L3 zones and interfaces so routing configuration is required.
adds each of the firewall interfaces
uses inheritance from the DHCP internet interface to create a default gateway route to the internet
Source NAT¶
Provides dynamic ip and port mapping using the public internet interface address.
DHCP Server¶
Simple DHCP server mapped to the trust interface
use of IP address range located in the trust subnet
inherits DNS information from the untrust interface
Note
This skillet does not include Dynamic DNS (DDNS) although it is a supported feature in PAN-OS v10.0. DDNS is recommended if GlobalProtect or other configurations using the public IP are used.
Network Profiles¶
Interface management profiles
sets the interface interface for ping only
allows for configuration access from the trust interface
Note
Device management will vary by users. It is expected that these profiles will be updated specific to the user management model.
Virtual Wire¶
The vwire deployment is a 2-zone, 2-interface model as a virtual wire.
Interface settings¶
Sample interface configurations with one for external/untrust and one internal/trust.
Interface are set to vwire type
virtual wire created using the 2 interfaces
L2/L3 Hybrid Switching/Routing¶
Interface settings¶
Sample interface configurations with
Internal interfaces set to Layer 2
vlan and internet interfaces set to Layer 3
Zones¶
- 3 Zone configuration
L2 - trust
L3 - untrust
L3 - trust
Virtual Router¶
The internet gateway deployment uses L3 zones and interfaces so routing configuration is required.
contained in the vlan interface
uses inheritance from the DHCP internet interface to create a default gateway route to the internet
Source NAT¶
Provides dynamic ip and port mapping using the public internet interface address.
DHCP Server¶
Simple DHCP server mapped to the vlan L3 trust interface
use of IP address range located in the trust subnet
inherits DNS information from the untrust internet interface
Note
This skillet does not include Dynamic DNS (DDNS) although it is a supported feature in PAN-OS v10.0. DDNS is recommended if GlobalProtect or other configurations using the public IP are used.
Network Profiles¶
Interface management profiles
sets the interface interface for ping only
allows for configuration access from the trust interface