PA-5400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-5400 Series Firewall Hardware
71
©
2021 Palo Alto Networks, Inc.
PA-5400 Series Firewall Networking Card (NC) Troubleshooting
Commands
The following table describes common commands that you can use to troubleshoot NC issues on a
PA-5400 Series firewall.
The PA-5450 firewall makes use of paired
in order to direct processing
power from a Data Processing Card (DPC) to a corresponding NC. Certain commands
issued to the NC affect or are affected by the status of its corresponding DPC.
Purpose
Command
Show NC slot status.
Run the following to view all of the slots:
admin@PA-5450> show chassis status
To view the status of one slot run:
admin@PA-5450> show chassis status slot <slot-
number>
For example, to check the status of slot 1, run:
admin@PA-5450> show chassis status slot s1
Temporarily power on and off
an NC slot.
This command gracefully
powers off a slot and ends
current sessions. You can use
this command to remove an
NC.
To power off a slot:
admin@PA-5450> request chassis power-off slot
<slot-number>
To power on a slot:
admin@PA-5450> request
chassis power-on slot <slot-number>
Power off an NC slot.
When running this command,
the NC slot stays powered off,
even after a reboot.
admin@PA-5450> request chassis admin-power-off slot
<slot-number>
Enable a slot so the NC can
pass traffic.
admin@PA-5450> request chassis enable slot <slot-
number>
Enable new NCs on
both firewalls in an HA
configuration.
In an HA configuration, you must install the same number and
model of NCs in each firewall and the slot numbers must match. For
example, after installing two NCs (one in each firewall), the firewall
keeps them in a disabled state until you enable them. This allows the
firewall to start HA monitoring on each NC at the same time.
