background image

Interface Specifications

64

 • Specifications

Palo Alto Networks

Interface Specifications

Table 18 lists the interfaces for the PA-7050. When a PA-7050 is fully loaded, the front cards slots will 
contain one SMC, one LPC, and up to six Network Processing Cards (NPCs). In a fully loaded chassis, 
you would multiply the NPC numbers in the following table by six. For example, if six NPC are 
installed, the chassis would have 72 10/100/1000 Ethernet ports.

Mounting

Standard 19-inch rack 2-post or 4-post installation. 

The chassis ships with the rack mount brackets in the mid-mount (2-post) 
position. For a 4-post installation, the mounting brackets must be moved 
from the mid-mount (2-post) position to a front mount (4-post) position.

Power supplies

PA-7050 uses four AC or four DC self-contained hot-swappable power 
supplies located at the bottom front of the chassis. For more details, see 
“Electrical Specifications and Power Cords” on page 65. 

Table 17.   Physical Specifications (Continued)

Specification

Description

Table 18.   Interface Specifications 

Specification

Description

Ethernet ports

(NPC) 12 RJ-45 10/100/1000 ports for network traffic.

SFP ports

(NPC) Eight Small Form-Factor Pluggable (SFP) ports for network traffic.

SFP+ ports

(NPC) Four 10 gigabit Small Form-Factor Pluggable (SFP+) ports for 
network traffic.

High-availability (HA) port 
(HA1-A and HA1-B)

(SMC) Two RJ-45 ports for high-availability control and synchronization.

Management ports (MGT)

(SMC) One RJ-45 port to access the device CLI through an Ethernet 
interface.

Management console port 
(CONSOLE)

(SMC) One RJ-45 port for connecting a serial console. Use these settings:

– Data rate: 9600

– Data bits: 8

– Parity: none

– Stop bits: 1

– Flow control: None

QSFP HA Ports (HSCI-A and 
HSCI-B)

(SMC) Two Quad Port SFP (QSFP) interfaces used to connect two PA-
7050s for a High Availability (HA) configuration. Each port is comprised 
of four 10 gigabits links internally for a combined speed of 40 gigabits and 
is used for HA2 data link in an active/passive configuration or HA3 
forwarding in an active/active configuration. When HSCI-A and HSCI-B 
are both connected, the total bandwidth will be 80 gigabits.

HA2 (data link) can be configured on the HSCI ports or on NPC data ports.

USB port

(SMC) USB port for future use.

Содержание PA-7050 PAN-AIRDUCT

Страница 1: ...PA 7050 Hardware Reference Guide...

Страница 2: ...r instructions on configuring the features on the firewall refer to https www paloaltonetworks com documentation For access to the knowledge base complete documentation set discussion forums and video...

Страница 3: ...ware 23 Tamper Proof Statement 23 Before You Begin 23 Equipment Rack Installation 24 2 Post Rack Installation 25 4 Post Rack Installation 26 Install the Mandatory Front Slot Cards 30 Install the Switc...

Страница 4: ...Processing Card LPC 57 Replace a Network Processing Card NPC 58 Front Card Slot States 61 NPC Troubleshooting Commands 62 Chapter 5 Specifications 63 Physical Specifications 63 Interface Specificatio...

Страница 5: ...ink and HA3 packet forwarding to provide full hardware redundancy in an active passive or active active configurations A dedicated log card handles all log processing and uses two pairs of drives each...

Страница 6: ...PC PA 7000 BLANK PA 7000 BLANK PA 7000 BLANK PA 7050 SMC PA 7000 BLANK PA 7000 BLANK PA 7000 AMC 1TB POWER ACTIVITY FAULT 1 3 5 7 9 11 2 4 6 8 10 12 14 16 18 20 22 24 13 15 17 19 21 23 PA 7000 AMC 1TB...

Страница 7: ...on various chassis components IMPORTANT The SMC must be installed in slot 4 and is required to operate the chassis For more information on the management interface see Switch Management Card SMC on p...

Страница 8: ...wer supplies When DC power supplies are installed the back panel AC inlets and switches are not functional and must be covered with the provided cover plate For more information see Electrical Specifi...

Страница 9: ...Palo Alto Networks Overview 9 Back Panel AC Back Panel AC Figure 2 shows the back panel of the PA 7050 AC platform and Table 2 describes the back panel features Figure 2 Back Panel AC 1 3 2...

Страница 10: ...attached to the provided copper grounding lug and crimped with the proper crimping tool Attach one end of the grounding cable to building ground and attach the other end to the grounding lug bolts on...

Страница 11: ...ANK PA 7000 BLANK PA 7000 AMC 1TB POWER ACTIVITY FAULT 1 3 5 7 9 11 2 4 6 8 10 12 14 16 18 20 22 24 13 15 17 19 21 23 PA 7000 AMC 1TB POWER ACTIVITY FAULT PA 7000 AMC 1TB POWER ACTIVITY FAULT PWR STS...

Страница 12: ...e DC platform will have a cover plate over the AC inlets and power switches When using DC power supplies the AC power cord inlets and switches are not functional The grounding lug is utilized for both...

Страница 13: ...d to power down the card for removal Both latches left right need to slide up to remove the card but only the left side contains the micro switch Do not slide the left latch up unless you intend to po...

Страница 14: ...synchronization Connect this port directly from HA1 A port the first device in the pair to the HA1 A on the second device in the pair or connect them together through a switch or router HA1 cannot be...

Страница 15: ...llation HSCI A on the first chassis connects directly to HSCI A on the second chassis and HSCI B on the first chassis connects to HSCI B on the second chassis This will provide full 80 gigabit transfe...

Страница 16: ...uration In an Active Active configuration the HA LED only indicates HA status for the local device and does not indicate HA connectivity of the peer If HA is active on the given device the LED is gree...

Страница 17: ...G Red LED will change to red if there is a drive failure temperature issue or other issue with the Log Processing Card LPC To determine which drive has failed check the LEDs on each AMC Disk drive Off...

Страница 18: ...SFP ports for network traffic 3 SFP ports Four SFP ports for network traffic 4 LED dashboard Four LEDs indicating NPC status For details on the LEDs see Interpreting the NPC LEDs on page 18 5 NPC rel...

Страница 19: ...ain at least one formated AMC drive During normal operation all four AMC drives should be installed in two RAID 1 pairs LPC and AMC Component Descriptions on page 20 Interpreting the AMC Disk Drive LE...

Страница 20: ...erabyte capacity The first two drives on the left Drives A1 and A2 are a RAID 1 pair and the next two drives on the right B1 and B2 are also a RAID 1 pair for a total of 2 terabytes of log storage Imp...

Страница 21: ...ctions and states of the AMC LEDs Table 13 Functions and States of the LPC LEDs LED State Description Activity Green Blinks green when there is activity on the drive Off No activity or powered off Fau...

Страница 22: ...Log Processing Card LPC 22 PA 7050 Modules and Interface Card Overview Palo Alto Networks...

Страница 23: ...and NPC Configuration on page 42 Tamper Proof Statement To ensure that products purchased from Palo Alto Networks have not been tampered with during shipping verify the following upon receipt of each...

Страница 24: ...ble and serial connector Ensure that the proper power source is available to power all four power supplies Two circuits should be used for each pair of power supplies to provide redundancy and to allo...

Страница 25: ...the 2 post cable management brackets using the fives screws included with the bracket In a 2 post installation the sides of the chassis should be exposed after installing the chassis in the rack so th...

Страница 26: ...s described in the following section To install the PA 7050 in a grounded 19 inch 4 post rack 1 Move the brackets from the 2 post to 4 post mount position The brackets are in two sections on each side...

Страница 27: ...rom the chassis as shown in Figure 12 Store the rear brackets because they are not needed for a 4 post installation Figure 12 PA 7050 Front and Rear Bracket Removal 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 POW...

Страница 28: ...tall the 4 post cable management brackets using the six screws included with the bracket In a 4 post installation the cable management brackets install over the chassis rack mount bracket used to moun...

Страница 29: ...tion using a mechanical equipment lift 5 Align the mounting holes on the side of the chassis with holes in the rack rail ensuring that the chassis is level 6 Attach the chassis brackets to the rack us...

Страница 30: ...nagement Card SMC The Switch Management Card SMC is required to operate the chassis and must be installed in slot 4 The SMC has different size alignment pins which prevents it from being installed in...

Страница 31: ...to the LPC When the PA 7050 is initially installed you must allow enough time for drives to be formatted and put into the RAID configuration before traffic can be processed and logged The chassis will...

Страница 32: ...chassis and then close the levers to seat the card in place as shown in Figure 16 Figure 16 LPC Install Remove Illustration 4 Tighten the thumb screws on each side of the LPC to secure it to the chas...

Страница 33: ...t in place For more information on how to install remove AMC Drives see Replace an AMC Disk Drive on page 49 Figure 17 Installing an AMC Drive into the LPC Note The AMC Drives can be installed in any...

Страница 34: ...n verifying the NPC configuration see Verify the NPC configuration on page 43 If an NPC is installed in slot 1 ethernet1 1 and ethernet1 2 will be configured as a virtual wire When installed in any ot...

Страница 35: ...lly ordered three NPCs you will have three empty slots Each empty slot must be covered with the provided blank slot covers to ensure proper airflow and to prevent debris from entering the chassis You...

Страница 36: ...be installed in For example if slot 3 will be used remove the blank slot card from slot 3 on both chassis NPCs can be installed in slots 1 2 3 5 6 and or 7 and must match when installed in an HA pair...

Страница 37: ...uld be connected to provide redundancy See Figure 19 for an illustration of the AC power connection IMPORTANT When the front chassis slots are fully populated you must have a minimum number of power s...

Страница 38: ...ower circuit This will ensure that if one power circuit goes down the other power circuit will provide enough temporary power to keep the chassis operational 6 Secure the power cord inlets using the p...

Страница 39: ...ully inserted The other end of the cable has two red positive and two black negative wires that are 15 feet long Crimp the two black wires together using a lug designed to connect to your DC negative...

Страница 40: ...es When connecting the High Availability HA cables HA1 control must be configured on the HA1 A and or HA1 B ports HA2 data link can be configured on NPC data ports or the dedicated HSCI ports HA3 pack...

Страница 41: ...Palo Alto Networks Installing the Hardware 41 Connect Cables Figure 21 PA 7050 Cable Connections Management Console HA1 HA1 Backup Network Network SFP SFP HA2 HA3 QSFP HA2 HA3 QSFP PA 7050 4 SMC 4 SMC...

Страница 42: ...ting to ready the drives should take approximately 3 4 minutes In the following output Disk Pair S8A shows Available and the status of the first RAID 1 is clean The second RAID 1 pair Disk Pair S8B is...

Страница 43: ...AdminPowerOff it will need to be powered on by running request chassis admin power on slot slot number To power off a slot run request chassis admin power off slot slot number When using the AdminPowe...

Страница 44: ...Verify the LPC and NPC Configuration 44 Installing the Hardware Palo Alto Networks...

Страница 45: ...page 54 Replace Front Slot Cards on page 55 Cautions and Warnings The following lists cautions and warnings that must be observed before working with the hardware THIS PRODUCT COMPLIES WITH 21 CFR 104...

Страница 46: ...sk of electric shock disconnect all power supply cords before servicing the switch the switch might have more than one French Translation Pour r duire le risque de choc lectrique d branchez tous les c...

Страница 47: ...a is where access can be gained only by craft service personnel through the use of a special tool lock and key or other means of security and is controlled by the authority responsible for the locatio...

Страница 48: ...power supplies located on the front of the chassis and the power switch on the back of the chassis corresponds to each power supply To locate the failed power supply view the system logs or check the...

Страница 49: ...out to the open position When the handle is halfway open you will notice two small tabs on each end that will fit into two notches in the chassis These tabs are used to fully seat the power supply int...

Страница 50: ...pply 1 Power off the DC power source that is connected to the failed DC power supply 2 Remove the DC power cable from the failed DC power supply by squeezing the two clips on each side of the plastic...

Страница 51: ...supply There are two clips on each side of the connector that will click in place when fully inserted 9 Turn on the electric current to the DC feed and the new power supply will power on Replace an AM...

Страница 52: ...tem log or by viewing the LED on the front of the AMC front panels The bottom left drive LED labeled FAULT will turn red in the event of a drive failure To look for the failed drive from the CLI run t...

Страница 53: ...nstalled a new drive for A2 run request system raid slot 8 add A2 A reboot of the system would also add the drive automatically If you are replacing a functioning drive the drive must be removed first...

Страница 54: ...n 45 seconds and you can only replace one fan tray at a time two total or the thermal protection circuit will automatically shut down the firewall If more than two individual fans fail on one or both...

Страница 55: ...remove the fan tray from the chassis 4 Install the new fan tray by sliding the tray into the chassis ensuring it is seated properly 5 Turn the thumb screws to the right until they stop This will lock...

Страница 56: ...you replace the filter every six months Discard used filters do not attempt to clean and reuse them You can purchase replacement air filters from Palo Alto Networks or an authorized reseller It is no...

Страница 57: ...that you use High Availability HA for full redundancy Replace a Switch Management Card SMC on page 56 Replace a Log Processing Card LPC on page 57 Replace a Network Processing Card NPC on page 58 Not...

Страница 58: ...e ESD ports are located along the bottom row of the chassis and you will see three ports any of which can be used For details on the ESD port location see Front Panel AC on page 6 3 Make note of the c...

Страница 59: ...our wrist and plug it into one of the ESD ports located on the front of the chassis The ESD ports are located along the bottom row of the chassis and you will see three ports any of which can be used...

Страница 60: ...d For details on replacing AMC Disk drives Replace an AMC Disk Drive on page 49 9 Reconnect the power cords and power on the chassis Replace a Network Processing Card NPC If a Network Processing Card...

Страница 61: ...to Network Interfaces and each NPC slot will show status as shown in Figure 32 Figure 32 Network Processing Card NPC Status If the NPC failed due to a hardware problem the status will show Failure Th...

Страница 62: ...o secure it to the chassis 8 Insert the network cables that were removed earlier For slot status information and troubleshooting see the following sections Front Card Slot States on page 61 and NPC Tr...

Страница 63: ...able slot slot number target ha pair Front Card Slot States The following table describes the possible states that a PA 7050 slot can be in as well as the states of an installed card To view slot stat...

Страница 64: ...s You can use this command to remove an NPC To power off a slot request chassis power off slot slot number To power on a slot request chassis power on slot slot number Power off a slot using the admin...

Страница 65: ...ions Specification Description Height 15 75 inches 40cm 9 RU Depth 23 75 inches 60 32cm Width 17 5 inches 44 45cm Weights Chassis AC 111 2 lbs 50kg Includes the chassis two fan trays air filter and fo...

Страница 66: ...erface Specifications Specification Description Ethernet ports NPC 12 RJ 45 10 100 1000 ports for network traffic SFP ports NPC Eight Small Form Factor Pluggable SFP ports for network traffic SFP port...

Страница 67: ...ated power output per power supply four total PA 7050 firewall AC power supplies 2750W PA 7050 firewall DC power supplies 2500W Voltage Input PA 7050 with AC power supplies 100 240 VAC 20A 50 60 Hz Al...

Страница 68: ...al Specifications Specification Description Operating temperature range 0 to 50 C 32 F to 122 F Storage temperature range 20 to 70 C 4 F to 158 F Humidity 5 to 90 non condensing Chassis airflow Side t...

Страница 69: ...reclude loosening deterioration and electrochemical corrosion of the hardware and the joined materials The device is suitable for connection to the Central Office CO or Customer Premise Equipment CPE...

Страница 70: ...Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take corrective actions BSMI EMC Statement User warning This is a Class A...

Отзывы: