I need to service Isolated VLANS and I don't want to use VM's or setup a DHCP server for each VLAN. Since I need more than 256 IP's on many VLANS, I'm trying to figure out what to do. I do have 9400 switches connected to the FTD's but I'm wavering between setting the vlans up in VRF's with DHCP on the switch to isolate or PBR or something else. NOT being able to host VLAN's directly on the FW is a major blow and again, can't exactly host them on the FW when I can't have the services attached to the VLAN. What's the best option to create isolated VLANS and then have the FW route to critical services with the FW rules in place.
