PaloAlto Networks PA-220R Скачать руководство пользователя

Страница: 2 / 40

Contact Informaon

Corporate Headquarters:
Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95054

www.paloaltonetworks.com/company/contact-support.html

About the Documentaon

• For the most recent version of this guide or for access to related documentaon, visit the

Technical Documentaon portal

docs.paloaltonetworks.com

• To search for a speciﬁc topic, go to our search page

docs.paloaltonetworks.com/search.html

• Have feedback or quesons for us? Leave a comment on any page in the portal, or write to us

at documenta[email protected].

Copyright

Palo Alto Networks, Inc.

www.paloaltonetworks.com

2018–2021 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo

Alto Networks. A list of our trademarks can be found at

www.paloaltonetworks.com/company/

trademarks.html

. All other marks menoned herein may be trademarks of their respecve

companies.

Last Revised

October 28, 2020

PA-220R Next-Gen Firewall Hardware Reference

2021 Palo Alto Networks, Inc.

Содержание PA-220R

Страница 1: ...PA 220R Next Gen Firewall Hardware Reference docs paloaltonetworks com ...

Страница 2: ...ltonetworks com search html Have feedback or ques ons for us Leave a comment on any page in the portal or write to us at documenta on paloaltonetworks com Copyright Palo Alto Networks Inc www paloaltonetworks com 2018 2021 Palo Alto Networks Inc Palo Alto Networks is a registered trademark of Palo Alto Networks A list of our trademarks can be found at www paloaltonetworks com company trademarks ht...

Страница 3: ...il 21 Install the PA 220R Firewall on a Wall 22 Install the PA 220R Firewall in a 19 inch Equipment Rack 24 Connect Power to a PA 220R Firewall 27 Prepare to Connect DC Power to a PA 220R Firewall 28 Connect DC Power to a PA 220R Firewall 29 PA 220R Firewall Speciﬁca ons 31 PA 220R Physical Speciﬁca ons 32 PA 220R Electrical Speciﬁca ons 33 PA 220R Environmental Speciﬁca ons 34 PA 220R Miscellaneo...

Страница 4: ...Table of Contents PA 220R Next Gen Firewall Hardware Reference 4 2021 Palo Alto Networks Inc ...

Страница 5: ...to Networks next genera on ﬁrewall or appliance The following topics apply to all Palo Alto Networks ﬁrewalls and appliances except where noted Upgrade Downgrade Considera ons for Firewalls and Appliances Tamper Proof Statement Third Party Component Support Product Safety Warnings 5 ...

Страница 6: ...interface for the Data Services service route n a Upgrading a PA 7000 Series Firewall with a ﬁrst genera on switch management card PA 7050 SMC or PA 7080 SMC PAN OS 8 0 and later Before upgrading the ﬁrewall run the following CLI command to check the ﬂash drive s status debug system disk smart info disk 1 If the value for a ribute ID 232 Available_Reservd_Space 0x0000 is greater than 20 then proce...

Страница 7: ...oduct matches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used to seal the box or crate is not compromised The integrity of the warranty label on the ﬁrewall or appliance is not compromised PA 7000 Series ﬁrewalls only PA 7000 Series ﬁrewalls are modular systems and therefore do not include a warranty label on the ﬁrewall PA 220R Next G...

Страница 8: ...rd Party Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Component Support statement PA 220R Next Gen Firewall Hardware Reference 8 2021 Palo Alto Networks Inc ...

Страница 9: ... grounded and shielded Ethernet cables to ensure agency compliance with electromagne c compliance EMC regula ons French Transla on Des câbles Ethernet blindés reliés à la terre doivent être u lisés pour garan r la conformité de l organisme aux émissions électromagné ques CEM PA 3200 PA 5200 PA 5400 PA 7050 and PA 7080 ﬁrewalls only At least two people are recommended for unpacking handling and rel...

Страница 10: ...xtrac ng the en re fan tray This allows the fans to stop spinning and helps you avoid serious injury when removing the fan tray You can replace a fan tray while the ﬁrewall is powered on but you must replace it within 45 seconds and you can only replace one fan tray at a me to prevent the thermal protec on circuit from shu ng down the ﬁrewall French Transla on Pare feu PA 7000 uniquement Lors du r...

Страница 11: ...e conducteur à électrode de mise à la terre du système d alimenta on c c est raccordé The ﬁrewall must be in the same immediate area such as adjacent cabinets as any other equipment that has a connec on between the earthing conductor of the DC supply circuit and the earthing of the DC system French Transla on Le pare feu doit se trouver dans la même zone immédiate des armoires adjacentes par exemp...

Страница 12: ...indiqué dans la procédure d installa on de votre pare feu pare feu The ﬁrewall permits the connec on of the earthed conductor of the DC supply circuit to the earthing conductor at the equipment as described in the installa on procedure for your ﬁrewall French Transla on Ce pare feu permet de raccorder le conducteur de mise à la terre du circuit d alimenta on c c au conducteur de mise à la terre de...

Страница 13: ...e high availability HA passive cooling no fans to reduce noise and power consump on RJ 45 ports with built in surge protec on and dual 12 48VDC power inputs for power redundancy First Supported So ware Release PAN OS 8 1 The following topics describe the hardware features and the status LEDs of the PA 220R ﬁrewall To view or compare performance and capacity informa on refer to the Product Selec on...

Страница 14: ...l see Connect Power to a PA 220R Firewall 3 Ethernet ports 1 through 6 Six RJ 45 10Mbps 100Mbps 1000Mbps ports for network traﬃc You can set the link speed and duplex or choose auto nego ate for each port These ports also have built in surge protec on 4 SFP ports 7 and 8 Two SFP 1Gbps ports for network traﬃc These ports also support 100Base FX 5 MGT port Use this Ethernet 10Mbps 100Mbps 1000Mbps p...

Страница 15: ...ping speeds up the process of conﬁguring and licensing the ﬁrewall to make it opera onal on the network with or without internet access 8 CONSOLE port Micro USB Use this port to connect a management computer to the ﬁrewall using a standard Type A USB to micro USB cable The console connec on provides access to ﬁrewall boot messages the Maintenance Recovery Tool MRT and the command line interface CL...

Страница 16: ... PA 220R ﬁrewall The only usable components on the back panel are the two screw holes used to Install the PA 220R Firewall on a DIN Rail There are also two DIN bracket screw holes not shown on the bo om of the ﬁrewall PA 220R Next Gen Firewall Hardware Reference 16 2021 Palo Alto Networks Inc ...

Страница 17: ...rewall is opera ng normally Yellow The ﬁrewall is boo ng HA High Availability Green The ﬁrewall is the ac ve peer in an ac ve passive conﬁgura on Yellow The ﬁrewall is the passive peer in an ac ve passive conﬁgura on Oﬀ HA is not opera onal on this ﬁrewall In an ac ve ac ve conﬁgura on the HA LED indicates HA status for only the local ﬁrewall and has two possible states it does not indicate HA con...

Страница 18: ...green indicates a network link Right LED Blinking green indicates network ac vity SFP LEDs These ports have one green LED Solid green indicates a network link Blinking green indicates network ac vity PA 220R Next Gen Firewall Hardware Reference 18 2021 Palo Alto Networks Inc ...

Страница 19: ...r on a DIN rail You can also order a wall mount kit to install the ﬁrewall on a wall or a rack mount kit to install the ﬁrewall in a 19 equipment rack Install the PA 220R Firewall on a Flat Surface Install the PA 220R Firewall on a DIN Rail Install the PA 220R Firewall on a Wall Install the PA 220R Firewall in a 19 inch Equipment Rack 19 ...

Страница 20: ...220R Firewall on a Flat Surface A ach the rubber pads to the recessed circles on the bo om of the ﬁrewall and then place the ﬁrewall right side up on a ﬂat stable surface PA 220R Next Gen Firewall Hardware Reference 20 2021 Palo Alto Networks Inc ...

Страница 21: ...urface of the ﬁrewall using the DIN bracket cap ve screws Ensure that the spring loaded clips on the DIN bracket are oriented so that they will grasp the bo om of the DIN rail when you install it STEP 3 Engage the bo om of the DIN bracket with spring loaded clips with the bo om part of the DIN rail Push the ﬁrewall and bracket upward to fully compress the spring loaded clips against the rail and t...

Страница 22: ... screws and torque each screw to 9 in lbs STEP 3 Use a Phillips head screwdriver to install the appropriate hardware to mount the ﬁrewall to the wall based on the wall type To ensure proper heat dissipa on install the ﬁrewall so that the front panel with ports and LEDs faces either le or right Drywall First hold the ﬁrewall up to the wall where you will install it and use a sharp object to mark th...

Страница 23: ...rewall to the wall using four anchor screws Plywood Hold the ﬁrewall up to the wall where you will install it and then use a Phillips head screwdriver to mount the bracket to the wall using four 3 4 plywood screws PA 220R Next Gen Firewall Hardware Reference 23 2021 Palo Alto Networks Inc ...

Страница 24: ...all hanging oﬀ the edge of the table by about three inches STEP 2 Place the shelf upside down on top of the ﬁrewall and align the four holes on the bo om of the shelf with the four screw holes on the bo om of the ﬁrewall The front bezel of the ﬁrewall protrudes out of the front opening of the shelf STEP 3 Secure the shelf to the ﬁrewall using four 6 32 x 1 4 Phillips head screws and torque each sc...

Страница 25: ...rque to 25 in lbs Use cage nuts not provided to secure the screws if the rack has square holes The weight of the product is not enough to require moun ng to the rear posts of the four post rack PA 220R Next Gen Firewall Hardware Reference 25 2021 Palo Alto Networks Inc ...

Страница 26: ...Install the PA 220R Firewall PA 220R Next Gen Firewall Hardware Reference 26 2021 Palo Alto Networks Inc ...

Страница 27: ...ing topics describe how to prepare the hardware that is required to connect power to a PA 220R ﬁrewall and how to connect ground and DC power to the ﬁrewall Prepare to Connect DC Power to a PA 220R Firewall Connect DC Power to a PA 220R Firewall 27 ...

Страница 28: ...are for the Installa on STEP 1 Read PA 220R Electrical Speciﬁca ons for power requirements STEP 2 Measure and cut the DC power cables and ground cable Ensure that the DC power cables reach from the ﬁrewall to your DC power source and that the ground cable reaches from the ﬁrewall to your ground loca on You will need one ground cable and two DC cables one for the posi ve connec on and one for the n...

Страница 29: ...ore you a ach the DC terminal block to the ﬁrewall STEP 2 Connect one end of a 16 22AWG ground cable to the ﬁrewall and connect the other end to earth ground There are three ground loca ons on the ﬁrewall one screw on ground point above the DC power inputs and two ground inputs on the DC terminal block last two inputs to the right of the DC inputs use only one of the three ground loca ons even if ...

Страница 30: ...s to more than 2 in lbs STEP 4 Op onal Repeat step 3 to connect a second DC power source to terminals B and B STEP 5 Plug the cabled DC terminal block into the DC inputs on the ﬁrewall Secure the terminal block by turning the two screws on each side of the block clockwise and torque to 3 in lbs STEP 6 Power on the DC power source to power on the ﬁrewall The ﬁrewall powers on and the power PWR LED ...

Страница 31: ...ardware speciﬁca ons for the PA 220R ﬁrewall For feature capacity and performance informa on refer to the PA 220R ﬁrewall datasheet PA 220R Physical Speciﬁca ons PA 220R Electrical Speciﬁca ons PA 220R Environmental Speciﬁca ons PA 220R Miscellaneous Speciﬁca ons 31 ...

Страница 32: ...des hardware that protrudes from the front of the ﬁrewall If the rubber feet are installed on the bo om of the ﬁrewall add 78 2cm to the height Rack Units The following dimensions apply when the ﬁrewall is installed in the PA 220R 19 inch rack kit Rack units 2U Rack kit dimensions 3 5 H x 8 D x 19 W 8 89cm H x 20 32cm D x 48 26cm W Weight Firewall weight 4 5 lbs 2 04kg Shipping weight 6 lbs 2 72kg...

Страница 33: ...ut power must be limited to less than 100W as deﬁned in IEC 60950 1 Speciﬁca on Value Rated input voltage and current 12 48VDC 1 4A Maximum input voltage range 10 60VDC Power consump on 13 17W Maximum current consump on 1 4A 12VDC Maximum inrush current 4 9A 12VDC If you want to power the PA 220R with AC power you must order the PAN PWR 60W AC adapter PA 220R Next Gen Firewall Hardware Reference 3...

Страница 34: ...rature range 40 F to 158 F 40 to 70 C Non opera ng temperature 40 F to 167 F 40 to 75 C Humidity tolerance 5 to 90 non condensing Airﬂow The PA 220R ﬁrewall uses passive cooling and does not contain fans Maximum BTU hr 55BTU hr Acous c noise Emits no sound Maximum opera ng al tude 10 000 3 048m PA 220R Next Gen Firewall Hardware Reference 34 2021 Palo Alto Networks Inc ...

Страница 35: ...ribes PA 220R ﬁrewall miscellaneous speciﬁca ons Speciﬁca on Value Storage capacity One 32GB solid state drive SSD for the PAN OS system ﬁles system logs and network traﬃc logs Mean me between failures MTBF 29 years PA 220R Next Gen Firewall Hardware Reference 35 2021 Palo Alto Networks Inc ...

Страница 36: ...PA 220R Firewall Speciﬁca ons PA 220R Next Gen Firewall Hardware Reference 36 2021 Palo Alto Networks Inc ...

Страница 37: ...y with the laws and regula ons in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagne c compa bility when used for their intended purpose To view compliance statements for the PA 220R ﬁrewall see PA 220R Firewall Hardware Compliance Statements 37 ...

Страница 38: ...on This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruc ons may cause harmful interference to radio communica ons However there is no guarantee that interference will not occur in a par cular installa on If this equipment does cause harmful interference to radio or television recep on which can be determined by turning th...

Страница 39: ...ogy Equipment VCCI which governs radio frequency emissions in Japan The following informa on is in accordance to VCCI Class A requirements Transla on This is a Class A product In a domes c environment this product may cause radio interference in which case the user may be required to take correc ve ac ons PA 220R Next Gen Firewall Hardware Reference 39 2021 Palo Alto Networks Inc ...

Страница 40: ...PA 220R Firewall Hardware Compliance Statements Overview PA 220R Next Gen Firewall Hardware Reference 40 2021 Palo Alto Networks Inc ...

Результаты поиска

Содержание PA-220R

Отзывы:

Похожие инструкции для PA-220R

Бренды по названию

Популярные бренды

PaloAlto Networks PA-220R, Справочник по аппаратуре

Результаты поиска

Содержание PA-220R

Отзывы:

Похожие инструкции для PA-220R

Бренды по названию

Популярные бренды