Palo Alto PA-220 as a main router

rzmuda · 2025-01-07T00:37:55.249Z

I have tried to make this work. Alot of links I found lead to sales force that is broken.
I need to enable a port i would think 1 or 2 as a wan port and other as dhcp cleints lan. How can this be done? I am using the mgmt port to go into the router now over ip
Its used for a small business/home

Rod-IT · 2025-01-07T09:01:51.962Z

Is this because of this?

FortiGate 80C open firmware - Networking - Spiceworks Community

It’s not clear what you are asking for help with, are you saying you can’t get it doing anything?

rzmuda · 2025-01-07T15:11:05.152Z

The other does work but its not supported with any updates where as this newer one is.

Rod-IT · 2025-01-07T15:20:21.246Z

But what issue are you facing?

rzmuda · 2025-01-08T15:00:07.454Z

I am trying to set this up as a main router before I take it to a site in 2 weeks.
I cant find out out how to set port 1 or 2 as the wan port and make the others are lan ports just for 1 network ion the inside.

Rod-IT · 2025-01-08T16:46:24.654Z

Not sure how accurate this is, it’s taken from the web.

To configure WAN ports on a Palo Alto PA-220, follow these steps:

Access the Web Interface:

Connect your computer to the management port of the PA-220.
Open a web browser and go to https://<your_firewall_ip>.
Log in with your admin credentials.
Configure the Interface:
Navigate to Network > Interfaces.
Select the Ethernet port you want to configure as a WAN port (e.g., ethernet1/1).
Click Edit.
Assign the Interface Type:
Set the Interface Type to Layer 3.
Assign the interface to a Virtual Router (default is usually fine).
Assign the interface to a Security Zone (create a new zone named “WAN” if it doesn’t exist).
Configure the IP Address:
Under the IPv4 tab, set the IP Address to either a static IP provided by your ISP or configure it to obtain an IP address via DHCP.
If using DHCP, check the DHCP Client option.
Set Up NAT Policies:
Navigate to Policies > NAT.
Create a new NAT rule to translate internal IP addresses to the WAN IP address.
Create Security Policies:
Navigate to Policies > Security.
Create rules to allow traffic from the internal network to the internet and vice versa, as needed.
Commit Changes:
Click Commit in the upper right corner to apply the changes.

rzmuda · 2025-01-09T14:17:57.596Z

will check later thanks