Install the Mandatory Front Slot Cards
36
• Installing the Hardware
Palo Alto Networks
Install an NPC in an HA Configuration
This topic describes the steps required to install a Network Processing Card (NPC) when two PA-7050
devices are in an HA configuration.
As with all Palo Alto Networks firewalls, the hardware must match in both devices in the HA
configuration, so when adding NPCs, you must install an NPC in the same slot in each chassis in the
HA pair.
Important:
When installing a new NPC in a PA-7050, the HA software will manage how the NPC is
brought up. When you insert the cards into each chassis, it will stay in a disabled state. This will ensure
that the NPC does not initiate and start passing traffic until both devices in the HA pair are ready to use
the NPCs. The following procedures will describe how to bring up the NPCs after they are installed.
1.
Attach the provided ESD strap to your wrist and plug it into one of the ESD ports located on the
front of the chassis. The ESD ports are located along the bottom row of the chassis and you will see
three ports, any of which can be used. For details on the ESD port location, see “Front Panel (AC)”
on page 6.
2.
Using a Phillips-head screwdriver, remove the blank slot cover from the slot on each chassis that
the NPC will be installed in. For example, if slot 3 will be used, remove the blank slot card from
slot 3 on both chassis. NPCs can be installed in slots 1,2,3,5,6, and/or 7 and must match when
installed in an HA pair.
3.
Insert an NPC in a slot on the first chassis and another NPC in the same slot number in the second
chassis.
4.
Run the following command to power-on both cards in the HA pair:
request chassis power-on slot
slot-number
target ha-pair
For example, if you install the NPCs in slot 3 of both chassis run:
request chassis power-on slot s3 target ha-pair
This will simultaneously power-on both cards in each chassis.
Enable the NPCs by running the following command:
request chassis enable slot s3 target ha-pair
5.
You can check the status of the card in slot 3 on either chassis by running:
show chassis status slot s3
If the cards are successfully installed, the status will show an output similar to the following:
Slot
...
Component
........
Card
Status
.....
Config Status
3
.....
PA-7000-20G-NPC
.
Up
..............
Success
6.
Connect the network cables and the NPCs are ready to use.
Note: In an HA configuration, you can add a new NPC to one of the chassis in the
pair and HA will not fail over. This is done to allow time to install NPCs in both
chassis. The NPCs will stay in a disabled state until a matching NPC is installed in
the secondary chassis and both cards have been powered on and enabled. The
cards will then be ready to use. After both NPCs are installed and functioning, if
one fails, an HA failover will occur.
