PA-5510, PA-5520, and PA-5530
Table of Contents
PA-5510, PA-5520, and PA-5530
View the front, back, and top panel components and descriptions of the PA-5510,
PA-5520, and PA-5530 firewalls.
The following image shows the front panel of the PA-5510, PA-5520,
and PA-5530 firewalls (PA-5510 pictured) and the table describes each front panel
component.
|
Item
|
Component
|
Description
|
|---|---|---|
|
1
|
USB-C Port
|
One USB-C port used for debugging and administration only. Use it
to bootstrap the firewall or perform self-service enhanced
factory reset (EFR).
|
|
2
|
Console port (USB-C)
|
Use this port to connect a management computer to the firewall
using a standard Type-C USB cable.
The console connection provides access to firewall boot messages,
the Maintenance Recovery Tool (MRT), and the command line
interface (CLI).
|
|
3
|
Console Port (RJ-45)
|
Use this port to connect a management computer to the firewall
using a 9-pin serial-to-RJ-45 cable and terminal emulation
software.
The console connection provides access to firewall boot messages,
the Maintenance Recovery Tool (MRT), and the command line
interface (CLI).
If your management computer does not
have a serial port, use a USB-to-serial converter. Use the following settings to configure your terminal emulation
software to connect to the console port:
|
|
4
|
Management Port
|
One 1Gbps/10Gbps SFP+ Management port used to access the
management web interface and perform administrative tasks. The
firewall uses this port for management services, such as
retrieving licenses and updating threat and application
signatures.
|
|
5
|
Logging Port
|
One 1Gbps/10Gbps SFP+ logging port that can be used as a log
interface. You must Configure Log
Forwarding to forward logs from the log port to one
or more log collectors. If the log interface is not configured,
the management interface is used to forward logs instead.
|
|
6
|
LED Indicators
|
Ten LEDs that indicate the status of various hardware components.
For details on the LEDs, see PA-5500 Series Firewall LED Definitions.
|
|
7
|
SSD Cover
|
Secures the device's SSD, which contains PAN-OS system files,
system logs, and network traffic logs.
|
|
8
|
Copper RJ-45 Ports
|
Eight 1Gbps/2.5Gbps/5Gbps/10Gbps RJ-45 ports. Port 1 is used for
Zero Touch
Provisioning (ZTP).
|
|
9
|
SFP/SFP+ Fiber Ports
|
Eight 1Gbps/10Gbps SFP/SFP+ ports.
|
|
10
|
SFP28 Fiber Ports
|
Eight 10Gbps/25Gbps SFP28 ports.
|
|
11
|
QSFP28 Ports
|
Six 40Gbps/100Gbps QSFP28 ports. Ports 30 and 32 support
breakout into four 10Gbps/25Gbps interfaces each: port 30 breaks
out into ports 35–38 and port 32 breaks out into ports
39–42.
|
|
12
|
HSCI Ports
|
Two HSCI ports that offer 100Gbps connectivity and are used to
connect two firewalls in a high availability (HA) configuration
as follows:
The HSCI ports must be connected directly between the two
firewalls in the HA configuration (without a switch or
router between them). The HSCI ports are not recommended for long-distance links (½
mile/1 km and above) regardless of the optical transceiver's
rated capabilities. For long-distance links, use the data
ports. Do not assign an IP address to the HSCI port. The port
carries raw Layer 1 traffic that is not routable or
switchable and does not support IP addressing. Assigning an
IP address to the HSCI port causes the firewall to enter a
permanent suspended state. For high-throughput deployments, do not use a 1Gbps copper
interface for HA2. Use the HSCI port or a 10Gbps/40Gbps
fiber interface to ensure sufficient bandwidth for HA data
synchronization. When you configure path monitoring, do not use your HA peer's
data interface IP address as the monitored destination.
Using the peer's IP address causes the firewall to
incorrectly detect a path failure and trigger an unnecessary
failover. |
The following image shows the back panel of the PA-5510, PA-5520, and
PA-5530 firewalls and the table describes each back panel component.
The back panel of the firewall should remain accessible to ensure ease of replacing a
power supply or fan assembly.
|
Item
|
Component
|
Description
|
|---|---|---|
|
1
|
Fan Assemblies
|
Three dual-rotor fan assemblies (for a total of six fans) that
provide the appliance with cooling and ventilation. Each fan
assembly can be individually replaced.
The fan assemblies are numbered 1 through 3 from left to
right.
For information on replacing or installing a fan, see Replace a PA-5500 Series Firewall Fan Assembly.
The firewall is designed to continue
operating even if one fan rotor has failed. |
|
2
|
Power Supplies
|
Two power supplies that provide AC or DC power to the appliance.
The power supplies are numbered 1 through 2 from left to
right.
You cannot mix AC and DC
power supplies. You must use two of the same type of power
supply. For information on connecting power to the appliance, see Connect Power to the PA-5500 Series Firewall.
|
|
3
|
Electrostatic Discharge (ESD) port
|
Provides a grounding point that you use when removing or
installing appliance components. Secure the provided wrist strap
end of the ESD strap around your wrist and plug the other end
into the ESD port.
|
The following image shows the top panel of the PA-5510, PA-5520, and PA-5530 firewalls
(PA-5510 pictured) and the table describes each top panel component.
|
Item
|
Component
|
Description
|
|---|---|---|
|
1
|
PCI Slot Access Hatch
|
Reserved for a future release.
|