An interface on a Palo Alto Networks firewall can perform the
role of a DHCP server, client, or relay agent. The interface of
a DHCP server or relay agent must be a Layer 3 Ethernet, Aggregated
Ethernet, or Layer 3 VLAN interface. You configure the firewall
interfaces with the appropriate settings for any combination of
roles. The behavior of each role is summarized in
Firewall as a DHCP Server and Client.