PA-7080 NEXT-GEN FIREWALL QUICK START GUIDE (CONTINUED)
docs.paloaltonetworks.com |
© 2018 | Palo Alto Networks, Inc. | Part Number: 810-000242-00E
Where to Go Next
•
To learn more about the firewall, refer to the PA-7000 Series Hardware Reference Guide:
https://docs.paloaltonetworks.com/hardware
.
•
To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:
https://docs.paloaltonetworks.com
.
(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)
•
To contact support, go to:
https://www.paloaltonetworks.com/company/contact-support
.
Connect to the Management Interface
1. Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the
firewall.
2. Change the IP address on your computer to an address in the
192.168.1.0/24 network, such as 192.168.1.2.
3. From a web browser, go to https://192.168.1.1.
4. When prompted, log in to the web interface using the default
username and password (
admin
/
admin
).
(
Optional
) If you are not able to connect to the management
web interface, you can check the status of the firewall by
connecting to the console port using the DB-9 to RJ-45 serial
cable (provided) and terminal emulation software, or by
using the micro USB port if you have PA-7080-SMC-B (refer
to
https://docs.paloaltonetworks.com/resources/micro-usb-
console-port
). The console connection provides access to
firewall boot messages, maintenance mode, and the com-
mand line interface (CLI).
Front Slot Card Installation
The PA-7080 firewall requires that you install a minimum of three cards in the front slots of the chassis. These cards include the
following: The Switch Management Card (SMC), the Logging Card, and the Network Processing Card (NPC). The front card slots
are numbered from 1-12, starting with slot 1 on the left side while facing the chassis.
The NPCs are hot-swappable and by following the proper procedures, you can remove and install them with the chas-
sis powered on. Although the SMC and logging card have protection to avoid damage if they are removed, they are not
designed to be hot-swapped. The protection system for all front slot cards are contained in the release levers. If you open
the release levers when the chassis is powered, built-in micro switches in the levers cause the card to power down to
avoid damage when the card is removed. Avoid moving these levers unless you intend to remove the card. For details on
replacing front slot cards, refer to the “Service” section of the PA-7000 Series Hardware Reference Guide.
1. Remove the SMC from the antistatic bag and slide it into slot 6 until
it is about 1/2” from being fully inserted.
2. Open the levers on each side of the card by pulling them toward you
simultaneously until they are fully open as shown in Figure 6. Notice
that during this process, the ball studs that are used to secure the
levers to the card disengage.
3. Adjust the levers to align with the chassis and simultaneously close
both levers to seat the card in place. Push the card levers inward
toward the center of the card and apply enough pressure to pop the
ball studs into place.
4. Tighten the thumb screws on each side and then use a #1 Phillips-
head torque driver and torque from 4 to 5 in-lbs.
Page 2 of 2
4
Installation Notes
•
Attach the provided ESD wrist strap around your wrist and then remove the alligator clip from the other end. Plug the banana
clip connector into one of the ESD ports on the front of the chassis. You can use either of the two ESD ports located just above
the air-intake vent and air filter.
•
Install the front slot cards after you install the chassis in the rack and do not power on the chassis until all cards are installed. This
reduces the weight of the chassis and avoids the risk of damaging the cards during the rack mount process.
•
After installing the required cards, install a blank slot cover over all empty NPC slots to prevent objects from entering the front
of the chassis and preserve proper cooling.
Install the Switch Management Card (SMC)
The SMC provides management connectivity to the chassis and HA
ports, and contains the chassis status LEDS. The SMC must be installed
in slot 6.
1. Remove the logging card from the antistatic bag and slide it into slot 7
until it is about 1/2” from being fully inserted.
2. Open the double levers on each side of the card by first releasing the
inner levers by pulling them toward you, and then do the same for the
outer levers as shown in Figure 7.
3. Adjust the levers to align with the chassis and close both levers
simultaneously to seat the card in place.
4. Tighten the thumb screws on each side and then use a #1 Phillips-head
torque driver and torque from 4 to 5 in-lbs.
Steps 5-6 apply only to the LPC. The LFC does not use AMC
modules, so you can skip these steps if installing an LFC.
5. Prepare the four AMCs for installation in the LPC by removing them
from the antistatic bags and ensuring that the front handle on each
AMC is pulled out to the unlocked position.
6. Insert the first AMC into the top logging card slot and push the handle
inward until it stops to lock it to the LPC as shown in Figure 7. Do the
same for the other three AMCs. During the initial installation, you can
insert the AMCs in any order.
Install the Logging Card (LPC or LFC)
The logging card performs log processing and log storage functions (de-
pending on the model) and must be installed in slot 7.
Figure 6
SMC Install
AMC
Figure 7
LPC and AMC
Install a Network Processing Card (NPC)
The NPC provides data network connectivity for the firewall and you must have a minimum of one NPC installed. You can install a
total of 10 NPCs in the following slots: 1, 2, 3, 4, 5, 8, 9, 10, 11, and/or 12.
To take advantage of the increased EDL capacity introduced in PAN-
OS 9.0, the firewall must have all high-capacity 100G NPCs installed.
If a lower capacity NPC is installed, such as the PA-7000 20GXM, the
EDL capacity uses the capabilities of the lower capacity NPC.
Figure 8 shows the NPC installation. Refer to the “PA-7000 NPC Component
Descriptions” sections in the PA-7000 Series Hardware Reference Guide for
details on the available NPCs that you can install in a PA-7080 firewall.
1. Remove the NPC from the antistatic bag and slide the card into an
available NPC slot until it is about 1/2” from being fully inserted.
2. Open the double levers on each side of the card by first pulling the inner
levers toward you to release the outer levers as shown in Figure 8.
3. Adjust the levers to align with the chassis and close both levers
simultaneously to seat the card to the chassis.
4. Tighten the thumb screws on each side of the card and then use a #1
Phillips-head torque driver and torque from 4 to 5 in-lbs.
Figure 8
NPC Install
5