A customer would like to support Apple Bonjour in their environment for ease of configuration. Which type of interface in needed on their PA-3200 Series firewall to enable Bonjour Reflector in a…

The correct answer is B. Layer 3 interface. The Bonjour Reflector feature on Palo Alto firewalls is enabled per Layer 3 interface. Bonjour uses multicast DNS (mDNS), which is inherently limited to a single Layer 2 broadcast domain. By enabling Bonjour Reflector on Layer 3 interfaces, the firewall relays mDNS packets…

Submitted by haruto_sh· Apr 18, 2026Deploy and Configure

Question

A customer would like to support Apple Bonjour in their environment for ease of configuration. Which type of interface in needed on their PA-3200 Series firewall to enable Bonjour Reflector in a segmented network?

Options

AVirtual Wire interface
BLayer 3 interface
CLayer 2 interface
DLoopback interface

How the community answered

(65 responses)

A
2% (1)
B
95% (62)
C
3% (2)

Explanation

The Bonjour Reflector feature on Palo Alto firewalls is enabled per Layer 3 interface. Bonjour uses multicast DNS (mDNS), which is inherently limited to a single Layer 2 broadcast domain. By enabling Bonjour Reflector on Layer 3 interfaces, the firewall relays mDNS packets between routed segments, allowing Apple services like AirPrint and AirPlay to work across subnets. Virtual Wire and Layer 2 interfaces do not support this feature because they operate at lower OSI layers without the routing context needed. Loopback interfaces do not carry user traffic between segments.

Topics

#Bonjour Reflector#Interface Types#Layer 3 Interfaces#Network Segmentation

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice