Focus

PA-5400 Series Next-Gen Firewall Hardware Reference

Replace a PA-5450 Front Slot Card in a High Availability (HA) Configuration

Table of Contents

Replace a PA-5450 Front Slot Card in a High Availability (HA) Configuration

Remove and install a Networking Card or Data Processing Card from the PA-5450 firewall without putting your High Availability setup at risk.

When High Availability (HA) is configured on the firewall, you must take additional steps to remove and install a Networking Card (NC) or Data Processing Card (DPC). Although it is possible to hot-swap the front slot cards, following the procedure outlined below will prevent slot or device failures in a live HA deployment.

To insert a new pair of NCs or DPCs into an HA pair:
1. Insert the card into both devices.
2. If the slot is in the Admin-power-down state, then issue the following command on both devices to power on the slots:
```
request chassis admin-power-on slot X target ha-pair
```
3. Once the slots have both successfully made it to the Disable state, issue the following command to allow traffic to flow through the slot on both devices:
```
request chassis enable slot X target ha-pair
```
To remove a pair of NCs or DPCs from an HA pair:
1. Disable HA on the HA pair.
2. On the device whose front slot card you want to remove, issue the following command where X is the slot and Y is the amount of time to allow the slot to power down gracefully:
```
request chassis admin-power-off slot X Y target ha-pair
```
3. Once both slots are powered off, remove the cards from both devices.
4. Issue the following command after the slots are removed to make sure future slots will power up when they are added:
```
request chassis admin-power-on slot X target ha-pair
```
If a slot fails in a running HA pair, it will take the device that sees the failure into a Non-Functional or Tentative state. To bring the two devices back up:
1. On the device whose front slot card you want to remove, issue the following command where X is the slot. The down device should move into a functional state.
```
request chassis admin-power-off slot X target ha-pair now
```
```
Executing this command will power off the given slot. Do you want to continue? (y or n)
```
2. Remove the failed card from its slot.
3. Prepare to return the failed card. The non-failed card on the other device can be left in an AdminPowerOff state until you receive a replacement card.
To install a replacement of the failed card:
1. When you receive the replacement NC or DPC, insert it into the device that needs the replacement card.
2. Issue the following command where X is the slot inserted:
```
request chassis admin-power-on slot X target ha-pair
```
3. Once the slots move into a Disable state, issue the following command and the slots will allow traffic to start flowing to the slot:
```
request chassis enable slot X target ha-pair
```

PA-5450 Logical Card Slots

Install an MPC Logging Drive