PaloAlto Networks PA-7050 PAN-AIRDUCT, Hardware Reference Manual

Page 1: ...PA 7050 Hardware Reference Guide...

Page 2: ...r instructions on configuring the features on the firewall refer to https www paloaltonetworks com documentation For access to the knowledge base complete documentation set discussion forums and video...

Page 3: ...ware 23 Tamper Proof Statement 23 Before You Begin 23 Equipment Rack Installation 24 2 Post Rack Installation 25 4 Post Rack Installation 26 Install the Mandatory Front Slot Cards 30 Install the Switc...

Page 4: ...Processing Card LPC 57 Replace a Network Processing Card NPC 58 Front Card Slot States 61 NPC Troubleshooting Commands 62 Chapter 5 Specifications 63 Physical Specifications 63 Interface Specificatio...

Page 5: ...ink and HA3 packet forwarding to provide full hardware redundancy in an active passive or active active configurations A dedicated log card handles all log processing and uses two pairs of drives each...

Page 6: ...PC PA 7000 BLANK PA 7000 BLANK PA 7000 BLANK PA 7050 SMC PA 7000 BLANK PA 7000 BLANK PA 7000 AMC 1TB POWER ACTIVITY FAULT 1 3 5 7 9 11 2 4 6 8 10 12 14 16 18 20 22 24 13 15 17 19 21 23 PA 7000 AMC 1TB...

Page 7: ...on various chassis components IMPORTANT The SMC must be installed in slot 4 and is required to operate the chassis For more information on the management interface see Switch Management Card SMC on p...

Page 8: ...wer supplies When DC power supplies are installed the back panel AC inlets and switches are not functional and must be covered with the provided cover plate For more information see Electrical Specifi...

Page 9: ...Palo Alto Networks Overview 9 Back Panel AC Back Panel AC Figure 2 shows the back panel of the PA 7050 AC platform and Table 2 describes the back panel features Figure 2 Back Panel AC 1 3 2...

Page 10: ...attached to the provided copper grounding lug and crimped with the proper crimping tool Attach one end of the grounding cable to building ground and attach the other end to the grounding lug bolts on...

Page 11: ...ANK PA 7000 BLANK PA 7000 AMC 1TB POWER ACTIVITY FAULT 1 3 5 7 9 11 2 4 6 8 10 12 14 16 18 20 22 24 13 15 17 19 21 23 PA 7000 AMC 1TB POWER ACTIVITY FAULT PA 7000 AMC 1TB POWER ACTIVITY FAULT PWR STS...

Page 12: ...e DC platform will have a cover plate over the AC inlets and power switches When using DC power supplies the AC power cord inlets and switches are not functional The grounding lug is utilized for both...

Page 13: ...d to power down the card for removal Both latches left right need to slide up to remove the card but only the left side contains the micro switch Do not slide the left latch up unless you intend to po...

Page 14: ...synchronization Connect this port directly from HA1 A port the first device in the pair to the HA1 A on the second device in the pair or connect them together through a switch or router HA1 cannot be...

Page 15: ...llation HSCI A on the first chassis connects directly to HSCI A on the second chassis and HSCI B on the first chassis connects to HSCI B on the second chassis This will provide full 80 gigabit transfe...

Page 16: ...uration In an Active Active configuration the HA LED only indicates HA status for the local device and does not indicate HA connectivity of the peer If HA is active on the given device the LED is gree...

Page 17: ...G Red LED will change to red if there is a drive failure temperature issue or other issue with the Log Processing Card LPC To determine which drive has failed check the LEDs on each AMC Disk drive Off...

Page 18: ...SFP ports for network traffic 3 SFP ports Four SFP ports for network traffic 4 LED dashboard Four LEDs indicating NPC status For details on the LEDs see Interpreting the NPC LEDs on page 18 5 NPC rel...

Page 19: ...ain at least one formated AMC drive During normal operation all four AMC drives should be installed in two RAID 1 pairs LPC and AMC Component Descriptions on page 20 Interpreting the AMC Disk Drive LE...

Page 20: ...erabyte capacity The first two drives on the left Drives A1 and A2 are a RAID 1 pair and the next two drives on the right B1 and B2 are also a RAID 1 pair for a total of 2 terabytes of log storage Imp...

Page 21: ...ctions and states of the AMC LEDs Table 13 Functions and States of the LPC LEDs LED State Description Activity Green Blinks green when there is activity on the drive Off No activity or powered off Fau...

Page 22: ...Log Processing Card LPC 22 PA 7050 Modules and Interface Card Overview Palo Alto Networks...

Page 23: ...and NPC Configuration on page 42 Tamper Proof Statement To ensure that products purchased from Palo Alto Networks have not been tampered with during shipping verify the following upon receipt of each...

Page 24: ...ble and serial connector Ensure that the proper power source is available to power all four power supplies Two circuits should be used for each pair of power supplies to provide redundancy and to allo...

Page 25: ...the 2 post cable management brackets using the fives screws included with the bracket In a 2 post installation the sides of the chassis should be exposed after installing the chassis in the rack so th...

Page 26: ...s described in the following section To install the PA 7050 in a grounded 19 inch 4 post rack 1 Move the brackets from the 2 post to 4 post mount position The brackets are in two sections on each side...

Page 27: ...rom the chassis as shown in Figure 12 Store the rear brackets because they are not needed for a 4 post installation Figure 12 PA 7050 Front and Rear Bracket Removal 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 POW...

Page 28: ...tall the 4 post cable management brackets using the six screws included with the bracket In a 4 post installation the cable management brackets install over the chassis rack mount bracket used to moun...

Page 29: ...tion using a mechanical equipment lift 5 Align the mounting holes on the side of the chassis with holes in the rack rail ensuring that the chassis is level 6 Attach the chassis brackets to the rack us...

Page 30: ...nagement Card SMC The Switch Management Card SMC is required to operate the chassis and must be installed in slot 4 The SMC has different size alignment pins which prevents it from being installed in...

Page 31: ...to the LPC When the PA 7050 is initially installed you must allow enough time for drives to be formatted and put into the RAID configuration before traffic can be processed and logged The chassis will...

Page 32: ...chassis and then close the levers to seat the card in place as shown in Figure 16 Figure 16 LPC Install Remove Illustration 4 Tighten the thumb screws on each side of the LPC to secure it to the chas...

Page 33: ...t in place For more information on how to install remove AMC Drives see Replace an AMC Disk Drive on page 49 Figure 17 Installing an AMC Drive into the LPC Note The AMC Drives can be installed in any...

Page 34: ...n verifying the NPC configuration see Verify the NPC configuration on page 43 If an NPC is installed in slot 1 ethernet1 1 and ethernet1 2 will be configured as a virtual wire When installed in any ot...

Page 35: ...lly ordered three NPCs you will have three empty slots Each empty slot must be covered with the provided blank slot covers to ensure proper airflow and to prevent debris from entering the chassis You...

Page 36: ...be installed in For example if slot 3 will be used remove the blank slot card from slot 3 on both chassis NPCs can be installed in slots 1 2 3 5 6 and or 7 and must match when installed in an HA pair...

Page 37: ...uld be connected to provide redundancy See Figure 19 for an illustration of the AC power connection IMPORTANT When the front chassis slots are fully populated you must have a minimum number of power s...

Page 38: ...ower circuit This will ensure that if one power circuit goes down the other power circuit will provide enough temporary power to keep the chassis operational 6 Secure the power cord inlets using the p...

Page 39: ...ully inserted The other end of the cable has two red positive and two black negative wires that are 15 feet long Crimp the two black wires together using a lug designed to connect to your DC negative...

Page 40: ...es When connecting the High Availability HA cables HA1 control must be configured on the HA1 A and or HA1 B ports HA2 data link can be configured on NPC data ports or the dedicated HSCI ports HA3 pack...

Page 41: ...Palo Alto Networks Installing the Hardware 41 Connect Cables Figure 21 PA 7050 Cable Connections Management Console HA1 HA1 Backup Network Network SFP SFP HA2 HA3 QSFP HA2 HA3 QSFP PA 7050 4 SMC 4 SMC...

Page 42: ...ting to ready the drives should take approximately 3 4 minutes In the following output Disk Pair S8A shows Available and the status of the first RAID 1 is clean The second RAID 1 pair Disk Pair S8B is...

Page 43: ...AdminPowerOff it will need to be powered on by running request chassis admin power on slot slot number To power off a slot run request chassis admin power off slot slot number When using the AdminPowe...

Page 44: ...Verify the LPC and NPC Configuration 44 Installing the Hardware Palo Alto Networks...

Page 45: ...page 54 Replace Front Slot Cards on page 55 Cautions and Warnings The following lists cautions and warnings that must be observed before working with the hardware THIS PRODUCT COMPLIES WITH 21 CFR 104...

Page 46: ...sk of electric shock disconnect all power supply cords before servicing the switch the switch might have more than one French Translation Pour r duire le risque de choc lectrique d branchez tous les c...

Page 47: ...a is where access can be gained only by craft service personnel through the use of a special tool lock and key or other means of security and is controlled by the authority responsible for the locatio...

Page 48: ...power supplies located on the front of the chassis and the power switch on the back of the chassis corresponds to each power supply To locate the failed power supply view the system logs or check the...

Page 49: ...out to the open position When the handle is halfway open you will notice two small tabs on each end that will fit into two notches in the chassis These tabs are used to fully seat the power supply int...

Page 50: ...pply 1 Power off the DC power source that is connected to the failed DC power supply 2 Remove the DC power cable from the failed DC power supply by squeezing the two clips on each side of the plastic...

Page 51: ...supply There are two clips on each side of the connector that will click in place when fully inserted 9 Turn on the electric current to the DC feed and the new power supply will power on Replace an AM...

Page 52: ...tem log or by viewing the LED on the front of the AMC front panels The bottom left drive LED labeled FAULT will turn red in the event of a drive failure To look for the failed drive from the CLI run t...

Page 53: ...nstalled a new drive for A2 run request system raid slot 8 add A2 A reboot of the system would also add the drive automatically If you are replacing a functioning drive the drive must be removed first...

Page 54: ...n 45 seconds and you can only replace one fan tray at a time two total or the thermal protection circuit will automatically shut down the firewall If more than two individual fans fail on one or both...

Page 55: ...remove the fan tray from the chassis 4 Install the new fan tray by sliding the tray into the chassis ensuring it is seated properly 5 Turn the thumb screws to the right until they stop This will lock...

Page 56: ...you replace the filter every six months Discard used filters do not attempt to clean and reuse them You can purchase replacement air filters from Palo Alto Networks or an authorized reseller It is no...

Page 57: ...that you use High Availability HA for full redundancy Replace a Switch Management Card SMC on page 56 Replace a Log Processing Card LPC on page 57 Replace a Network Processing Card NPC on page 58 Not...

Page 58: ...e ESD ports are located along the bottom row of the chassis and you will see three ports any of which can be used For details on the ESD port location see Front Panel AC on page 6 3 Make note of the c...

Page 59: ...our wrist and plug it into one of the ESD ports located on the front of the chassis The ESD ports are located along the bottom row of the chassis and you will see three ports any of which can be used...

Page 60: ...d For details on replacing AMC Disk drives Replace an AMC Disk Drive on page 49 9 Reconnect the power cords and power on the chassis Replace a Network Processing Card NPC If a Network Processing Card...

Page 61: ...to Network Interfaces and each NPC slot will show status as shown in Figure 32 Figure 32 Network Processing Card NPC Status If the NPC failed due to a hardware problem the status will show Failure Th...

Page 62: ...o secure it to the chassis 8 Insert the network cables that were removed earlier For slot status information and troubleshooting see the following sections Front Card Slot States on page 61 and NPC Tr...

Page 63: ...able slot slot number target ha pair Front Card Slot States The following table describes the possible states that a PA 7050 slot can be in as well as the states of an installed card To view slot stat...

Page 64: ...s You can use this command to remove an NPC To power off a slot request chassis power off slot slot number To power on a slot request chassis power on slot slot number Power off a slot using the admin...

Page 65: ...ions Specification Description Height 15 75 inches 40cm 9 RU Depth 23 75 inches 60 32cm Width 17 5 inches 44 45cm Weights Chassis AC 111 2 lbs 50kg Includes the chassis two fan trays air filter and fo...

Page 66: ...erface Specifications Specification Description Ethernet ports NPC 12 RJ 45 10 100 1000 ports for network traffic SFP ports NPC Eight Small Form Factor Pluggable SFP ports for network traffic SFP port...

Page 67: ...ated power output per power supply four total PA 7050 firewall AC power supplies 2750W PA 7050 firewall DC power supplies 2500W Voltage Input PA 7050 with AC power supplies 100 240 VAC 20A 50 60 Hz Al...

Page 68: ...al Specifications Specification Description Operating temperature range 0 to 50 C 32 F to 122 F Storage temperature range 20 to 70 C 4 F to 158 F Humidity 5 to 90 non condensing Chassis airflow Side t...

Page 69: ...reclude loosening deterioration and electrochemical corrosion of the hardware and the joined materials The device is suitable for connection to the Central Office CO or Customer Premise Equipment CPE...

Page 70: ...Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take corrective actions BSMI EMC Statement User warning This is a Class A...