Replace a PA-5450 Front Slot Card in a High Availability (HA) Configuration
Table of Contents
Expand all | Collapse all
Replace a PA-5450 Front Slot Card in a High Availability
(HA) Configuration
Remove and install a Networking Card or Data Processing
Card from the PA-5450 firewall without putting your High Availability
setup at risk.
When High Availability (HA) is configured
on the firewall, you must take additional steps to remove and install
a Networking Card (NC) or Data Processing Card (DPC). Although it
is possible to hot-swap the front slot cards, following the procedure
outlined below will prevent slot or device failures in a live HA
deployment.
- To insert a new pair of NCs or DPCs into an HA pair:
- Insert the card into both devices.
- If the slot is in theAdmin-power-downstate, then issue the following command on both devices to power on the slots:request chassis admin-power-on slot X target ha-pair
- Once the slots have both successfully made it to theDisablestate, issue the following command to allow traffic to flow through the slot on both devices:request chassis enable slot X target ha-pair
- To remove a pair of NCs or DPCs from an HA pair:
- Disable HA on the HA pair.
- On the device whose front slot card you want to remove, issue the following command where X is the slot and Y is the amount of time to allow the slot to power down gracefully:request chassis admin-power-off slot X Y target ha-pair
- Once both slots are powered off, remove the cards from both devices.
- Issue the following command after the slots are removed to make sure future slots will power up when they are added:request chassis admin-power-on slot X target ha-pair
- If a slot fails in a running HA pair, it will take the device that sees the failure into a Non-Functional or Tentative state. To bring the two devices back up:
- On the device whose front slot card you want to remove, issue the following command where X is the slot. The down device should move into a functional state.request chassis admin-power-off slot X now target ha-pair
- Remove the failed card from its slot.
- Prepare to return the failed card. The non-failed card on the other device can be left in anAdminPowerOffstate until you receive a replacement card.
- To install a replacement of the failed card:
- When you receive the replacement NC or DPC, insert it into the device that needs the replacement card.
- Issue the following command where X is the slot inserted:request chassis admin-power-on slot X target ha-pair
- Once the slots move into aDisablestate, issue the following command and the slots will allow traffic to start flowing to the slot:request chassis enable slot X target ha-pair