Verify the PA-5450 Firewall NC Configuration
Table of Contents
Expand all | Collapse all
Verify the PA-5450 Firewall NC Configuration
Learn how to view and monitor the status of one or both
PA-5400 Series Networking Card slots.
When you first set up a PA-5450, both NC slots are ready
to use. If you are working with a firewall that is already deployed,
you should check slot status before adding a new NC to ensure that
the NC slot is ready. If the firewall is in a high availability
(HA) configuration, a newly installed NC stays in a disabled state
until a matching NC is installed. After you install a matching NC
in the same slot number in the HA peer firewall, you must enable
the NCs.
The following commands describe how to view NC status and how
to change the state of an NC.
The PA-5450 firewall makes use of paired Logical Card Slots in
order to direct processing power from a Data Processing Card (DPC) to
a corresponding NC. Certain commands issued to the NC affect or
are affected by the status of its corresponding DPC.
To view NC status, run the following command:
admin@PA-5450> show chassis status slot <slot-number>For example, to view the status of slot 2 run the following command:
admin@PA-5450> show chassis status slot s2If an NC slot is ready to use, the status shows empty.
When you insert an NC, the system updates the status of the slot.
After you successfully install an NC, the status shows CardStatus Up and Config Status Success.
You can power down a slot and the slot will stay in the down
state until you power it on. Use the following commands to change
the slot status:
To power on an NC slot:
admin@PA-5450> request chassis admin-power-on slot <slot-number>To power off an NC slot:
admin@PA-5450> request chassis admin-power-off slot <slot-number>To temporarily power down a slot:
admin@PA-5450> request chassis power-off slot <slot-number>In an HA configuration, you must install the same number and
model of NCs in each appliance and the slot numbers must match.
After you install the NCs in each appliance, the firewall keeps
them in a disabled state until you enable them. This allows the
firewall to start HA monitoring on both NCs.
Use the following command to bring up a pair of NCs in an HA
configuration:
admin@PA-5450> request chassis power-on slot <slot-number> target ha-pairFor example, to enable NCs installed in slot 2 of both appliances,
run the following command:
admin@PA-5450> request chassis power-on slot s2 target ha-pairFor information on installing NCs, see Install a PA-5400 Series Firewall Networking Card (NC).