PA-7000 Series Firewall Module and Interface Card Information
Item
Component
Description
1
QSFP+ ports
Two quad small form-factor pluggable (QSFP+)
10Gbps/40Gbps Ethernet interfaces as defined by the
IEEE 802.3ba standard.
The two physical QSFP+ interfaces operate at 40Gbps
each. The firewall uses the ports to forward all dataplane
logs to an external system, such as Panorama, Firewall
Data Lake, or a syslog server.
Configure the ports in
Device
>
Log Forwarding Card
.
PAN-OS 10.0 and later:
To breakout the two interfaces into individual 10G
ports, you must configure the LFC as lfc1/1 and use
the PAN-QSFP-40GBASE-SR4. Lfc1/1 auto-configures
ports 1-4 in the first interface and auto-configures ports
5-8 in the second interface for up to eight usable 10G
ports. You can use any number of the eight ports for
your configuration. If four ports (one ethernet interface)
is used, the LFC provides a maximum transfer rate of
40Gbps. If all eight ports (both ethernet interfaces) are
used, then the LFC provides a maximum transfer rate of
80Gbps.
To properly breakout the QSFP+ ports,
you must use the PAN-QSFP-40GBASE-
SR4 transceiver and an appropriate passive
breakout cable.
When not using a breakout deployment, you must
configure the LFC as lfc1/9. Lfc1/9 auto-configures port
9 in the first interface and auto-configures port 10 in the
second interface for up to two usable 40G ports. You can
use one or both interfaces to provide up to 40G or 80G
connectivity in this way.
PA-7000 Series Firewall Hardware Reference
49
©
2023 Palo Alto Networks, Inc.
