Replace a PA-5450 Front Slot Card in a High Availability (HA) Configuration

Remove and install a Networking Card or Data Processing Card from the PA-5450 firewall without putting your High Availability setup at risk.
When High Availability (HA) is configured on the firewall, you must take additional steps to remove and install a Networking Card (NC) or Data Processing Card (DPC). Although it is possible to hot-swap the front slot cards, following the procedure outlined below will prevent slot or device failures in a live HA deployment.
  • To insert a new pair of NCs or DPCs into an HA pair:
    1. Insert the card into both devices.
    2. If the slot is in the
      Admin-power-down
      state, then issue the following command on both devices to power on the slots:
      request chassis admin-power-on slot X target ha-pair
    3. Once the slots have both successfully made it to the
      Disable
      state, issue the following command to allow traffic to flow through the slot on both devices:
      request chassis enable slot X target ha-pair
  • To remove a pair of NCs or DPCs from an HA pair:
    1. On either device, issue the following command where X is the slot and Y is the amount of time to allow the slot to power down gracefully:
      request chassis admin-power-off slot X Y target ha-pair
    2. Once both slots are powered off, remove the cards from both devices.
    3. Issue the following command after the slots are removed to make sure future slots will power up when they are added:
      request chassis admin-power-on slot X target ha-pair
  • If a slot fails in a running HA pair, it will take the device that sees the failure into a Non-Functional or Tentative state. To bring the two devices back up:
    1. On either device, issue the following command where X is the slot. The down device should move into a functional state.
      request chassis admin-power-off slot X now target ha-pair
    2. Remove the failed card from its slot.
    3. Prepare to return the failed card. The non-failed card on the other device can be left in an
      AdminPowerOff
      state until you receive a replacement card.
  • To install a replacement of the failed card:
    1. When you receive the replacement NC or DPC, insert it into the device that needs the replacement card.
    2. Issue the following command where X is the slot inserted:
      request chassis admin-power-on slot X target ha-pair
    3. Once the slots move into a
      Disable
      state, issue the following command and the slots will allow traffic to start flowing to the slot:
      request chassis enable slot X target ha-pair

Recommended For You