PA-5400 Series Firewall Networking Card (NC) Troubleshooting Commands

Learn about various CLI commands that enable troubleshooting of the PA-5400 Series Networking Card (NC).
The following table describes common commands that you can use to troubleshoot NC issues on a PA-5400 Series firewall.
The PA-5450 firewall makes use of paired Logical Card Slots in order to direct processing power from a Data Processing Card (DPC) to a corresponding NC. Certain commands issued to the NC affect or are affected by the status of its corresponding DPC.
Purpose
Command
Show NC slot status.
Run the following to view all of the slots:
admin@PA-5450>
show chassis status
To view the status of one slot run:
admin@PA-5450>
show chassis status slot <slot-number>
For example, to check the status of slot 1, run:
admin@PA-5450>
show chassis status slot s1
Temporarily power on and off an NC slot.
This command gracefully powers off a slot and ends current sessions. You can use this command to remove an NC.
To power off a slot:
admin@PA-5450>
request chassis power-off slot <slot-number>
To power on a slot:
admin@PA-5450>
request chassis power-on slot <slot-number>
Power off an NC slot.
When running this command, the NC slot stays powered off, even after a reboot.
admin@PA-5450>
request chassis admin-power-off slot <slot-number>
Enable a slot so the NC can pass traffic.
admin@PA-5450>
request chassis enable slot <slot-number>
Enable new NCs on both firewalls in an HA configuration.
In an HA configuration, you must install the same number and model of NCs in each firewall and the slot numbers must match. For example, after installing two NCs (one in each firewall), the firewall keeps them in a disabled state until you enable them. This allows the firewall to start HA monitoring on each NC at the same time.
To enable NCs after inserting them into the same slot numbers on each firewall in an HA configuration, run the following command:
admin@PA-5450>
request chassis power-on slot <slot-number> target ha-pair
For example, to enable NCs installed in slot 2 of both firewalls, run the following command:
admin@PA-5450>
request chassis power-on slot 2 target ha-pair
You can use the
ha-pair
option in an HA configuration for many of the slot control commands.

Recommended For You