74
PA-5400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-5400 Series Firewall
Hardware
©
2021 Palo Alto Networks, Inc.
State
Description
Empty
The slot is empty and is ready to use.
Up
The card is powered on and has a valid software configuration.
Disabled
(
HA only
) The slot is not enabled.
In a high availability (HA) configuration, the NC slots stay in a disabled
state until you enable the slot. This is by design, so you can install new
NCs without causing a failover. After you insert matching NCs in both
firewalls, you then bring up both cards simultaneously.
HA-Disabled
(
HA only
) After you enable a slot, this status appears until both slots
are ready.
This also occurs if the peer does not have a matching card in the same
slot number or the card in the peer is not ready.
Stopping
The card is preparing for removal.
Starting
The card is in the process of powering on and the software is
initiating.
PowerOff
The card is powered down and ready for removal.
AdminPowerOff
An administrator powered down the slot and it will not be available
until you power it back on. If there is a slot that you want ignored in
an HA configuration HA, put it in this state.
Failure
The card has failed and needs to be replaced.
Unsupported
The card is not a supported type for this slot.
PA-5400 Series Logical Card Slots
The PA-5400 Series firewall requires the use of logical card slots in order to direct processing power from
). For this to occur, an
NC in Slot 1 of the appliance is logically paired to a DPC in Slot 3. Similarly, an NC in Slot 2 of the appliance
is logically paired to a DPC in Slot 4. Logical pairing of the NC and DPC allows the appliance to process
exception packets and other data that the NC does not process alone.
If you install a DPC in Slot 2 of the appliance, then there is no logical pairing with Slot 4.
See the following table of possible CLI commands that are used to restart, power on, or power off a card.
For more information on card states, see
PA-5400 Series Front Slot and Card States
.