background image

Install the Mandatory Front Slot Cards

34

 • Installing the Hardware

Palo Alto Networks

After the chassis is powered up for the first time, the drives will be formatted and configured in a 
RAID 1 configuration. The first two drives on the left (A1 and A2) will be a RAID 1 pair and the 
second two drives (B1 and B2) on the right will be a second RAID 1 pair. The initial formating and 
RAID configuration should only take 3-4 minutes. To verify the drive configuration see “Verify the 
LPC Configuration” on page 42.

Install a Network Processing Card (NPC)

The Network Processing Card (NPC) is not required to operate the chassis, but you need at least one 
NPC to process data traffic. NPCs can be installed in slots 1,2,3,5,6, and/or 7. For information about 
NPCs, see “Network Processing Card (NPC)” on page 17. 

This section describes how to install an NPC during the initial configuration of the chassis in a single 
chassis or in an High Availability (HA) configuration. If you are replacing a failed NPC or installing 
additional NPCs, see “Replace a Network Processing Card (NPC)” on page 58. For information on 
verifying the NPC configuration, see “Verify the NPC configuration” on page 43.

If an NPC is installed in slot 1, ethernet1/1 and ethernet1/2 will be configured as a virtual wire. When 
installed in any other slot, there is no default configuration applied to the ports.

The following sections describe the steps required to install an NPC in a single chassis, or an HA 
configuration:

“Install an NPC in a Single Chassis” in the next section

“Install an NPC in an HA Configuration” on page 36

Install an NPC in a Single Chassis

This topic describes the required steps to install an NPC in a single PA-7050. NPCs can be installed in 
slots 1,2,3,5,6, and/or 7. 

To install a NPC:

1.

Attach the provided ESD strap to your wrist and plug it into one of the ESD ports located on the 
front of the chassis. The ESD ports are located along the bottom row of the chassis and you will see 
three ports, any of which can be used. For details on the ESD port location, see “Front Panel (AC)” 
on page 6.

2.

Remove the NPC from the anti-static bag and slide it into any of the available NPC slots ensuring 
that the handles are in the open position. When the card is about 1/4” from being fully inserted, 
adjust the levers to align with the chassis and then close the levers to seat the card in place as 
shown in Figure 18. 

Содержание PA-7050 PAN-AIRDUCT

Страница 1: ...PA 7050 Hardware Reference Guide...

Страница 2: ...r instructions on configuring the features on the firewall refer to https www paloaltonetworks com documentation For access to the knowledge base complete documentation set discussion forums and video...

Страница 3: ...ware 23 Tamper Proof Statement 23 Before You Begin 23 Equipment Rack Installation 24 2 Post Rack Installation 25 4 Post Rack Installation 26 Install the Mandatory Front Slot Cards 30 Install the Switc...

Страница 4: ...Processing Card LPC 57 Replace a Network Processing Card NPC 58 Front Card Slot States 61 NPC Troubleshooting Commands 62 Chapter 5 Specifications 63 Physical Specifications 63 Interface Specificatio...

Страница 5: ...ink and HA3 packet forwarding to provide full hardware redundancy in an active passive or active active configurations A dedicated log card handles all log processing and uses two pairs of drives each...

Страница 6: ...PC PA 7000 BLANK PA 7000 BLANK PA 7000 BLANK PA 7050 SMC PA 7000 BLANK PA 7000 BLANK PA 7000 AMC 1TB POWER ACTIVITY FAULT 1 3 5 7 9 11 2 4 6 8 10 12 14 16 18 20 22 24 13 15 17 19 21 23 PA 7000 AMC 1TB...

Страница 7: ...on various chassis components IMPORTANT The SMC must be installed in slot 4 and is required to operate the chassis For more information on the management interface see Switch Management Card SMC on p...

Страница 8: ...wer supplies When DC power supplies are installed the back panel AC inlets and switches are not functional and must be covered with the provided cover plate For more information see Electrical Specifi...

Страница 9: ...Palo Alto Networks Overview 9 Back Panel AC Back Panel AC Figure 2 shows the back panel of the PA 7050 AC platform and Table 2 describes the back panel features Figure 2 Back Panel AC 1 3 2...

Страница 10: ...attached to the provided copper grounding lug and crimped with the proper crimping tool Attach one end of the grounding cable to building ground and attach the other end to the grounding lug bolts on...

Страница 11: ...ANK PA 7000 BLANK PA 7000 AMC 1TB POWER ACTIVITY FAULT 1 3 5 7 9 11 2 4 6 8 10 12 14 16 18 20 22 24 13 15 17 19 21 23 PA 7000 AMC 1TB POWER ACTIVITY FAULT PA 7000 AMC 1TB POWER ACTIVITY FAULT PWR STS...

Страница 12: ...e DC platform will have a cover plate over the AC inlets and power switches When using DC power supplies the AC power cord inlets and switches are not functional The grounding lug is utilized for both...

Страница 13: ...d to power down the card for removal Both latches left right need to slide up to remove the card but only the left side contains the micro switch Do not slide the left latch up unless you intend to po...

Страница 14: ...synchronization Connect this port directly from HA1 A port the first device in the pair to the HA1 A on the second device in the pair or connect them together through a switch or router HA1 cannot be...

Страница 15: ...llation HSCI A on the first chassis connects directly to HSCI A on the second chassis and HSCI B on the first chassis connects to HSCI B on the second chassis This will provide full 80 gigabit transfe...

Страница 16: ...uration In an Active Active configuration the HA LED only indicates HA status for the local device and does not indicate HA connectivity of the peer If HA is active on the given device the LED is gree...

Страница 17: ...G Red LED will change to red if there is a drive failure temperature issue or other issue with the Log Processing Card LPC To determine which drive has failed check the LEDs on each AMC Disk drive Off...

Страница 18: ...SFP ports for network traffic 3 SFP ports Four SFP ports for network traffic 4 LED dashboard Four LEDs indicating NPC status For details on the LEDs see Interpreting the NPC LEDs on page 18 5 NPC rel...

Страница 19: ...ain at least one formated AMC drive During normal operation all four AMC drives should be installed in two RAID 1 pairs LPC and AMC Component Descriptions on page 20 Interpreting the AMC Disk Drive LE...

Страница 20: ...erabyte capacity The first two drives on the left Drives A1 and A2 are a RAID 1 pair and the next two drives on the right B1 and B2 are also a RAID 1 pair for a total of 2 terabytes of log storage Imp...

Страница 21: ...ctions and states of the AMC LEDs Table 13 Functions and States of the LPC LEDs LED State Description Activity Green Blinks green when there is activity on the drive Off No activity or powered off Fau...

Страница 22: ...Log Processing Card LPC 22 PA 7050 Modules and Interface Card Overview Palo Alto Networks...

Страница 23: ...and NPC Configuration on page 42 Tamper Proof Statement To ensure that products purchased from Palo Alto Networks have not been tampered with during shipping verify the following upon receipt of each...

Страница 24: ...ble and serial connector Ensure that the proper power source is available to power all four power supplies Two circuits should be used for each pair of power supplies to provide redundancy and to allo...

Страница 25: ...the 2 post cable management brackets using the fives screws included with the bracket In a 2 post installation the sides of the chassis should be exposed after installing the chassis in the rack so th...

Страница 26: ...s described in the following section To install the PA 7050 in a grounded 19 inch 4 post rack 1 Move the brackets from the 2 post to 4 post mount position The brackets are in two sections on each side...

Страница 27: ...rom the chassis as shown in Figure 12 Store the rear brackets because they are not needed for a 4 post installation Figure 12 PA 7050 Front and Rear Bracket Removal 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 POW...

Страница 28: ...tall the 4 post cable management brackets using the six screws included with the bracket In a 4 post installation the cable management brackets install over the chassis rack mount bracket used to moun...

Страница 29: ...tion using a mechanical equipment lift 5 Align the mounting holes on the side of the chassis with holes in the rack rail ensuring that the chassis is level 6 Attach the chassis brackets to the rack us...

Страница 30: ...nagement Card SMC The Switch Management Card SMC is required to operate the chassis and must be installed in slot 4 The SMC has different size alignment pins which prevents it from being installed in...

Страница 31: ...to the LPC When the PA 7050 is initially installed you must allow enough time for drives to be formatted and put into the RAID configuration before traffic can be processed and logged The chassis will...

Страница 32: ...chassis and then close the levers to seat the card in place as shown in Figure 16 Figure 16 LPC Install Remove Illustration 4 Tighten the thumb screws on each side of the LPC to secure it to the chas...

Страница 33: ...t in place For more information on how to install remove AMC Drives see Replace an AMC Disk Drive on page 49 Figure 17 Installing an AMC Drive into the LPC Note The AMC Drives can be installed in any...

Страница 34: ...n verifying the NPC configuration see Verify the NPC configuration on page 43 If an NPC is installed in slot 1 ethernet1 1 and ethernet1 2 will be configured as a virtual wire When installed in any ot...

Страница 35: ...lly ordered three NPCs you will have three empty slots Each empty slot must be covered with the provided blank slot covers to ensure proper airflow and to prevent debris from entering the chassis You...

Страница 36: ...be installed in For example if slot 3 will be used remove the blank slot card from slot 3 on both chassis NPCs can be installed in slots 1 2 3 5 6 and or 7 and must match when installed in an HA pair...

Страница 37: ...uld be connected to provide redundancy See Figure 19 for an illustration of the AC power connection IMPORTANT When the front chassis slots are fully populated you must have a minimum number of power s...

Страница 38: ...ower circuit This will ensure that if one power circuit goes down the other power circuit will provide enough temporary power to keep the chassis operational 6 Secure the power cord inlets using the p...

Страница 39: ...ully inserted The other end of the cable has two red positive and two black negative wires that are 15 feet long Crimp the two black wires together using a lug designed to connect to your DC negative...

Страница 40: ...es When connecting the High Availability HA cables HA1 control must be configured on the HA1 A and or HA1 B ports HA2 data link can be configured on NPC data ports or the dedicated HSCI ports HA3 pack...

Страница 41: ...Palo Alto Networks Installing the Hardware 41 Connect Cables Figure 21 PA 7050 Cable Connections Management Console HA1 HA1 Backup Network Network SFP SFP HA2 HA3 QSFP HA2 HA3 QSFP PA 7050 4 SMC 4 SMC...

Страница 42: ...ting to ready the drives should take approximately 3 4 minutes In the following output Disk Pair S8A shows Available and the status of the first RAID 1 is clean The second RAID 1 pair Disk Pair S8B is...

Страница 43: ...AdminPowerOff it will need to be powered on by running request chassis admin power on slot slot number To power off a slot run request chassis admin power off slot slot number When using the AdminPowe...

Страница 44: ...Verify the LPC and NPC Configuration 44 Installing the Hardware Palo Alto Networks...

Страница 45: ...page 54 Replace Front Slot Cards on page 55 Cautions and Warnings The following lists cautions and warnings that must be observed before working with the hardware THIS PRODUCT COMPLIES WITH 21 CFR 104...

Страница 46: ...sk of electric shock disconnect all power supply cords before servicing the switch the switch might have more than one French Translation Pour r duire le risque de choc lectrique d branchez tous les c...

Страница 47: ...a is where access can be gained only by craft service personnel through the use of a special tool lock and key or other means of security and is controlled by the authority responsible for the locatio...

Страница 48: ...power supplies located on the front of the chassis and the power switch on the back of the chassis corresponds to each power supply To locate the failed power supply view the system logs or check the...

Страница 49: ...out to the open position When the handle is halfway open you will notice two small tabs on each end that will fit into two notches in the chassis These tabs are used to fully seat the power supply int...

Страница 50: ...pply 1 Power off the DC power source that is connected to the failed DC power supply 2 Remove the DC power cable from the failed DC power supply by squeezing the two clips on each side of the plastic...

Страница 51: ...supply There are two clips on each side of the connector that will click in place when fully inserted 9 Turn on the electric current to the DC feed and the new power supply will power on Replace an AM...

Страница 52: ...tem log or by viewing the LED on the front of the AMC front panels The bottom left drive LED labeled FAULT will turn red in the event of a drive failure To look for the failed drive from the CLI run t...

Страница 53: ...nstalled a new drive for A2 run request system raid slot 8 add A2 A reboot of the system would also add the drive automatically If you are replacing a functioning drive the drive must be removed first...

Страница 54: ...n 45 seconds and you can only replace one fan tray at a time two total or the thermal protection circuit will automatically shut down the firewall If more than two individual fans fail on one or both...

Страница 55: ...remove the fan tray from the chassis 4 Install the new fan tray by sliding the tray into the chassis ensuring it is seated properly 5 Turn the thumb screws to the right until they stop This will lock...

Страница 56: ...you replace the filter every six months Discard used filters do not attempt to clean and reuse them You can purchase replacement air filters from Palo Alto Networks or an authorized reseller It is no...

Страница 57: ...that you use High Availability HA for full redundancy Replace a Switch Management Card SMC on page 56 Replace a Log Processing Card LPC on page 57 Replace a Network Processing Card NPC on page 58 Not...

Страница 58: ...e ESD ports are located along the bottom row of the chassis and you will see three ports any of which can be used For details on the ESD port location see Front Panel AC on page 6 3 Make note of the c...

Страница 59: ...our wrist and plug it into one of the ESD ports located on the front of the chassis The ESD ports are located along the bottom row of the chassis and you will see three ports any of which can be used...

Страница 60: ...d For details on replacing AMC Disk drives Replace an AMC Disk Drive on page 49 9 Reconnect the power cords and power on the chassis Replace a Network Processing Card NPC If a Network Processing Card...

Страница 61: ...to Network Interfaces and each NPC slot will show status as shown in Figure 32 Figure 32 Network Processing Card NPC Status If the NPC failed due to a hardware problem the status will show Failure Th...

Страница 62: ...o secure it to the chassis 8 Insert the network cables that were removed earlier For slot status information and troubleshooting see the following sections Front Card Slot States on page 61 and NPC Tr...

Страница 63: ...able slot slot number target ha pair Front Card Slot States The following table describes the possible states that a PA 7050 slot can be in as well as the states of an installed card To view slot stat...

Страница 64: ...s You can use this command to remove an NPC To power off a slot request chassis power off slot slot number To power on a slot request chassis power on slot slot number Power off a slot using the admin...

Страница 65: ...ions Specification Description Height 15 75 inches 40cm 9 RU Depth 23 75 inches 60 32cm Width 17 5 inches 44 45cm Weights Chassis AC 111 2 lbs 50kg Includes the chassis two fan trays air filter and fo...

Страница 66: ...erface Specifications Specification Description Ethernet ports NPC 12 RJ 45 10 100 1000 ports for network traffic SFP ports NPC Eight Small Form Factor Pluggable SFP ports for network traffic SFP port...

Страница 67: ...ated power output per power supply four total PA 7050 firewall AC power supplies 2750W PA 7050 firewall DC power supplies 2500W Voltage Input PA 7050 with AC power supplies 100 240 VAC 20A 50 60 Hz Al...

Страница 68: ...al Specifications Specification Description Operating temperature range 0 to 50 C 32 F to 122 F Storage temperature range 20 to 70 C 4 F to 158 F Humidity 5 to 90 non condensing Chassis airflow Side t...

Страница 69: ...reclude loosening deterioration and electrochemical corrosion of the hardware and the joined materials The device is suitable for connection to the Central Office CO or Customer Premise Equipment CPE...

Страница 70: ...Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take corrective actions BSMI EMC Statement User warning This is a Class A...

Отзывы: