PaloAlto Networks PA-5200 Seriesp, Hardware Reference Manual

Page: 42 / 60

Service the PA-5200 Series Firewall
status : not in use
4. Replace the other drive in the array so the drive models in the array are the same. In this
example, physically remove the Log2 drive, remove it from the carrier, and then install
the second replacement drive in the carrier. 9.e shows how to swap drives in a carrier.
5. Add the second replacement drive to the RAID 1 array. In this example, run the following
command to add the Log2 drive to the array:
admin@PA-5020> request system raid add log2
The system automacally starts to configure the new drive to mirror the other drive in
the RAID 1 array.
6. Periodically view the RAID status unl you see that the
Disk Pair Log
shows
Available and both drives show active sync status. To view RAID status, run the
following command:
admin@PA-5020> show system raid detail
The following output shows that both drives are in the active sync state:
Disk Pair Log Available
Status clean
Disk id Log1 Present
model : ST2000NX0999
size : 1907729 MB
status : active sync
Disk id Log2 Present
model : ST2000NX0999
size : 1907729 MB
status : active sync
Replace a System Drive on a PA-5200 Series Firewall
The following procedure describes how to replace a failed system drive. There are two scenarios:
one where the replacement drive is the same model as the failed drive and one where the
replacement drive is not the same model.
If you replace a system drive with a different model drive, you must boot the firewall
into the Maintenance Recovery Tool (MRT) to copy data between drives. In a high
availability (HA) configuraon, suspend the firewall with the failed drive as described in
this procedure.
In a high availability (HA) configuraon, if one system drive fails (or if both system drives
fail) in the acve firewall, the firewall enters the non-funconal HA state and fails over. If
the firewall is not in an HA configuraon and one system drive fails, the firewall connues
to operate. If both system drives fail in a non-HA configuraon, you will need to replace
the systems drives and restore the firewall configuraon from a recent configuraon
backup.
PA-5200 Series Next-Gen Firewall Hardware Reference 42
©
2021 Palo Alto Networks, Inc.