https://community.checkpoint.com/t5/Firewall-and-Security-Management/DHCP-Relay-via-S2S-VPN/m-p/209974#M39785 <P>So you would build the tunnel as usual (regular or permanent, I believe with PAN these days, it can only be route based) and as far as dhcp relay, as long as right ports/protocols are allowed, dont see why it would not work.</P> <P>Best,</P> <P>Andy</P> Thu, 28 Mar 2024 21:30:00 GMT the_rock 2024-03-28T21:30:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/DHCP-Relay-via-S2S-VPN/m-p/209935#M39781 <P>Hi, we are thinking of opening a new branch office at a partner's location and would like to be able to connect remote users to the main site via a site 2 site VPN. Is there any best practice or suggestion for example for relaying DHCP directly into the VPN.</P><P>The partner is equipped with Palo Alto firewall, and we have a cluster of 6200 plus 81.10.</P><P>Thank you all</P> Thu, 28 Mar 2024 13:12:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/DHCP-Relay-via-S2S-VPN/m-p/209935#M39781 GianniPapetti 2024-03-28T13:12:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/DHCP-Relay-via-S2S-VPN/m-p/209974#M39785 <P>So you would build the tunnel as usual (regular or permanent, I believe with PAN these days, it can only be route based) and as far as dhcp relay, as long as right ports/protocols are allowed, dont see why it would not work.</P> <P>Best,</P> <P>Andy</P> Thu, 28 Mar 2024 21:30:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/DHCP-Relay-via-S2S-VPN/m-p/209974#M39785 the_rock 2024-03-28T21:30:00Z