background image

Table of Contents

PA-3400 Series Next-Gen Firewall Hardware Reference

4

©

2022 Palo Alto Networks, Inc.

Содержание PA-3400 Series

Страница 1: ...PA 3400 Series Next Gen Firewall Hardware Reference docs paloaltonetworks com...

Страница 2: ...networks com search html Have feedback or ques ons for us Leave a comment on any page in the portal or write to us at documenta on paloaltonetworks com Copyright Palo Alto Networks Inc www paloaltonet...

Страница 3: ...on to the Firewall 28 Connect Power to a PA 3400 Series Firewall 30 Service the PA 3400 Series Firewall 33 Interpret the PA 3400 Series Status LEDs 34 Replace a PA 3400 Series Power Supply 37 Replace...

Страница 4: ...Table of Contents PA 3400 Series Next Gen Firewall Hardware Reference 4 2022 Palo Alto Networks Inc...

Страница 5: ...to Networks next genera on rewall or appliance The following topics apply to all Palo Alto Networks rewalls and appliances except where noted Upgrade Downgrade Considera ons for Firewalls and Applianc...

Страница 6: ...terface for the Data Services service route n a Upgrading a PA 7000 Series Firewall with a rst genera on switch management card PA 7050 SMC or PA 7080 SMC PAN OS 8 0 and later Before upgrading the rew...

Страница 7: ...ct matches the tracking number that is physically labeled on the box or crate The integrity of the tamper proof tape used to seal the box or crate is not compromised The integrity of the warranty labe...

Страница 8: ...arty Component Support Before you consider installing third party hardware read the Palo Alto Networks Third Party Component Support statement PA 3400 Series Next Gen Firewall Hardware Reference 8 202...

Страница 9: ...grounded and shielded Ethernet cables to ensure agency compliance with electromagne c compliance EMC regula ons French Transla on Des c bles Ethernet blind s reli s la terre doivent tre u lis s pour...

Страница 10: ...ng the en re fan tray This allows the fans to stop spinning and helps you avoid serious injury when removing the fan tray You can replace a fan tray while the rewall is powered on but you must replac...

Страница 11: ...le conducteur lectrode de mise la terre du syst me d alimenta on c c est raccord The rewall must be in the same immediate area such as adjacent cabinets as any other equipment that has a connec on bet...

Страница 12: ...qu dans la proc dure d installa on de votre pare feu pare feu The rewall permits the connec on of the earthed conductor of the DC supply circuit to the earthing conductor at the equipment as described...

Страница 13: ...y to help you meet your deployment requirements All models in this series provide next genera on security features to help you secure your organiza on through advanced visibility and control of applic...

Страница 14: ...be remapped as HA 1 ports via PAN OS or Panorama These remapped HA 1 ports o er high availability connec vity over a longer distance than what is permi ed by the HA1 A and HA1 B ports listed below 3...

Страница 15: ...rts due to a failure or manual restart the HA1 B link will also restart If this occurs and the HA1 A link is not connected and con gured then a split brain condi on occurs Therefore we recommend that...

Страница 16: ...his port to connect a management computer to the rewall using a standard Type A USB to micro USB cable The console connec on provides access to rewall boot messages the Maintenance Recovery Tool MRT a...

Страница 17: ...low 3 zSFP ports 23 through 26 Four SFP28 25Gbps ports that also support 1G SFP and 10G SFP modules 4 zQSFP ports 27 through 36 Two form factor pluggable QSFP QSFP28 40Gbps 100Gbps Ethernet ports 5 HS...

Страница 18: ...occurs and the HA1 A link is not connected and con gured then a split brain condi on occurs Therefore we recommend that you connect and con gure the HA1 A ports and the HA1 B ports to provide redundan...

Страница 19: ...E port Micro USB Use this port to connect a management computer to the rewall using a standard Type A USB to micro USB cable The console connec on provides access to rewall boot messages the Maintenan...

Страница 20: ...Fan assemblies Provides ven la on and cooling for the rewall The fans are not eld replaceable 2 Ground stud Use the single post ground stud to connect the rewall to earth ground ground cable not incl...

Страница 21: ...ies Firewall in an Equipment Rack The PA 3400 Series next genera on rewall ships with rack mount brackets for installa on in a four post 19 equipment rack Install the PA 3400 Series Firewall Using the...

Страница 22: ...to install the PA 3400 Series rewall in a 19 four post equipment rack using the four post rack kit PAN PA 1RU RACK4 STEP 1 A ach one rack mount bracket to each side of the rewall in the front mount p...

Страница 23: ...o 6 32 x 5 16 screws for each rail and torque to 9 in lbs STEP 3 With help from another person hold the rewall in the rack and secure the front rack mount brackets to the front rack posts using two sc...

Страница 24: ...an Equipment Rack screws 10 32 x 3 4 or 12 24 x 1 2 for your rack and torque to 25 in lbs Use cage nuts to secure the screws if the rack has square holes PA 3400 Series Next Gen Firewall Hardware Ref...

Страница 25: ...cket into each of the two previously installed side rack mount rails and secure the brackets to the back rack posts using the appropriate screws for your rack 10 32 x 3 4 or 12 24 x 1 2 and torque to...

Страница 26: ...Install the PA 3400 Series Firewall in an Equipment Rack PA 3400 Series Next Gen Firewall Hardware Reference 26 2022 Palo Alto Networks Inc...

Страница 27: ...es the second power supply is for redundancy Before you connect power read the PA 3400 Series Electrical Speci ca ons Learn how to Set Up a Connec on to the Firewall based on your desired boot mode pr...

Страница 28: ...abled If the rewall boots with FIPS CC mode enabled the rewall will automa cally boot in standard mode STEP 1 Use an RJ 45 Ethernet cable to connect the device to the correct port The port s connected...

Страница 29: ...Standard Mode and the rewall will begin reboo ng in standard mode ZTP mode Stand by as the rewall boots up STEP 5 Set up the rewall manually if using standard mode If using ZTP mode the device group...

Страница 30: ...works hardware or the data that resides on the hardware read the Product Safety Warnings STEP 1 Remove the nut and star washer from the ground stud on the back of the rewall STEP 2 Crimp a 14AWG groun...

Страница 31: ...a Connec on to the Firewall STEP 5 Connect the other end of the power cords to an AC power source A er the power supply is connected the power supply powers on the input and output LEDs on the power s...

Страница 32: ...Connect Power to a PA 3400 Series Firewall PA 3400 Series Next Gen Firewall Hardware Reference 32 2022 Palo Alto Networks Inc...

Страница 33: ...following topics describe how to interpret the PA 3400 Series rewall status LEDs and how to replace the serviceable components Interpret the PA 3400 Series Status LEDs Replace a PA 3400 Series Power S...

Страница 34: ...en The rewall is powered on O The rewall is not powered on or an error occurred with the internal power system for example power is not within tolerance levels Status Green The rewall is opera ng norm...

Страница 35: ...ailure or the hardware overheated and exceeded the high temperature threshold O The rewall is opera ng normally Fans Green The fan tray and all fans are opera ng normally Red A fan failed If one of th...

Страница 36: ...output Input LED Top Solid green Input voltage opera ng within the normal speci ed range Blinking green Overvoltage or undervoltage warning O Exceeded the overvoltage or undervoltage threshold or no i...

Страница 37: ...escribes how to replace a PA 3400 Series power supply To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides on the hardware read the Product Safety Warning...

Страница 38: ...ly slot Push the power supply all the way in un l the release lever clicks and secures the power supply STEP 5 Connect the AC power cord to the power supply input and secure it to the power supply usi...

Страница 39: ...ed to obtain a backup con gura on that you saved from the failed rewall to restore your con gura on To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data that resides o...

Страница 40: ...1 0 24 network such as 192 168 1 2 STEP 7 From a web browser go to h ps 192 168 1 1 and when prompted log in to the web interface using the default username and password admin admin STEP 8 Con gure m...

Страница 41: ...ies rewall hardware speci ca ons For feature capacity and performance informa on refer to the PA 3400 Series datasheet PA 3400 Series Physical Speci ca ons PA 3400 Series Electrical Speci ca ons PA 34...

Страница 42: ...n Value Rack units and dimensions Rack units 1RU Dimensions 1 7 H x 14 23 D x 17 12 W 4 32 cm H x 36 14 cm D x 43 49 cm W The depth dimension includes hardware that protrudes from the back of the rewa...

Страница 43: ...are the same for all models in the series Speci ca on Value Power Supplies Two 450W AC power supplies the second power supply is for redundancy Input voltage 100 240VAC 50 60Hz Power consump on Maximu...

Страница 44: ...40 C Non opera ng temperature 4 F to 158 F 20 C to 70 C Humidity tolerance non condensing Opera ng and non opera ng rela ve humidity 10 to 90 Air ow Front to back Maximum BTU hr 819BTU hr Electromagne...

Страница 45: ...he following table describes PA 3400 Series rewall miscellaneous speci ca ons Speci ca on Value Storage capacity One 480GB SSD for system les and log storage Mean me between failures MTBF 14 years PA...

Страница 46: ...PA 3400 Series Firewall Speci ca ons PA 3400 Series Next Gen Firewall Hardware Reference 46 2022 Palo Alto Networks Inc...

Страница 47: ...h the laws and regula ons in each country where there are requirements applicable to our products Our products meet standards for product safety and electromagne c compa bility when used for their int...

Страница 48: ...This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruc ons may cause harmful interference to radio communica ons However the...

Страница 49: ...uipment VCCI which governs radio frequency emissions in Japan The following informa on is in accordance to VCCI Class A requirements Transla on This is a Class A product In a domes c environment this...

Страница 50: ...PA 3400 Series Firewall Hardware Compliance Statements PA 3400 Series Next Gen Firewall Hardware Reference 50 2022 Palo Alto Networks Inc...

Отзывы: