Verify the PA-5450 Firewall NC Configuration

Learn how to view and monitor the status of one or both PA-5400 Series Networking Card slots.
When you first set up a PA-5450, both NC slots are ready to use. If you are working with a firewall that is already deployed, you should check slot status before adding a new NC to ensure that the NC slot is ready. If the firewall is in a high availability (HA) configuration, a newly installed NC stays in a disabled state until a matching NC is installed. After you install a matching NC in the same slot number in the HA peer firewall, you must enable the NCs.
The following commands describe how to view NC status and how to change the state of an NC.
The PA-5450 firewall makes use of paired Logical Card Slots in order to direct processing power from a Data Processing Card (DPC) to a corresponding NC. Certain commands issued to the NC affect or are affected by the status of its corresponding DPC.
To view NC status, run the following command:
admin@PA-5450>
show chassis status slot <slot-number>
For example, to view the status of slot 2 run the following command:
admin@PA-5450>
show chassis status slot s2
If an NC slot is ready to use, the status shows
empty
. When you insert an NC, the system updates the status of the slot.
After you successfully install an NC, the status shows
CardStatus Up
and
Config Status Success
.
You can power down a slot and the slot will stay in the down state until you power it on. Use the following commands to change the slot status:
To power on an NC slot:
admin@PA-5450>
request chassis admin-power-on slot <slot-number>
To power off an NC slot:
admin@PA-5450>
request chassis admin-power-off slot <slot-number>
To temporarily power down a slot:
admin@PA-5450>
request chassis power-off slot <slot-number>
In an HA configuration, you must install the same number and model of NCs in each appliance and the slot numbers must match. After you install the NCs in each appliance, the firewall keeps them in a disabled state until you enable them. This allows the firewall to start HA monitoring on both NCs.
Use the following command to bring up a pair of NCs in an HA configuration:
admin@PA-5450>
request chassis power-on slot <slot-number> target ha-pair
For example, to enable NCs installed in slot 2 of both appliances, run the following command:
admin@PA-5450>
request chassis power-on slot s2 target ha-pair
For information on installing NCs, see Install a PA-5400 Series Firewall Networking Card (NC).

Recommended For You