PaloAlto Networks PA-5200 Series, Справочник по аппаратуре

Страница: 5 / 8

© Palo Alto Networks, Inc. PA ‐ 5200 Next ‐ Gen Firewall Hardware Reference • 11
PA ‐ 5200 Series Firewall Overview Front Panel Description
4 HSCI port These ports vary depending on your firewall model:
• PA ‐ 5220 firewall —One QSFP+ 40Gbps port (supports only a 40Gbps
(QSFP+) transceiver or QSFP+ active optical cable).
• PA ‐ 5250 and PA ‐ 5260 firewalls —One QSFP28 40/100Gbps port
(supports 40Gbps (QSFP+) or 100Gbps transceiver (QSFP28) or equivalent
active optical cables). The link speed is based on the installed transceiver.
Use this port to connect two PA ‐ 5200 Series firewalls in a high availability
(HA) configuration as follows:
• In an active/passive configuration, this port is for HA2 (data link).
• In an active/active configuration, you can configure this port for HA2
and/or HA3. HA3 is used for packet forwarding for asymmetrically
routed sessions that require Layer 7 inspection for App ‐ ID™ and
Content ‐ ID™.
The HSCI ports must be connected directly between the two firewalls
in the HA configuration (not between a network switch or router).
When directly connecting the HSCI ports between two PA ‐ 5220
firewalls that are physically located near each other, Palo Alto
Networks recommends that you use a 40Gbps QSFP+ Active Optical
Cable (AOC). When directly connecting two PA ‐ 5250 or two PA ‐ 5260
firewalls, use either a 40Gbps QSFP+ Active Optical Cable (AOC) or a
100Gbps QSFP28 Active Optical Cable (AOC).
For installations where the two firewalls are not near each other and
you cannot use an AOC cable, use a standard 40Gbps or 100Gbps
transceivers and the appropriate cable length.
5 AUX 1 and AUX 2 ports Use these SFP+ ports for HA1, management functions, or log forwarding to
Panorama.
For
information on configuring the port, refer to the on ‐ device Help content
in
Device > Setup > Interfaces
or refer to the PAN ‐ OS 8.0 Web Interface
Reference .
6 HA1 ‐ A and HA1 ‐ B Two RJ ‐ 45 10/100/1000Mbps ports for high ‐ availability control (HA1).
Item Component (Continued) Description
Copyright © 2007-2017 Palo Alto Networks