Verify the PA-7000 Series Firewall NPC Configuration
When you first set up a PA-7000 Series firewall, all
NPC slots are ready to use. If you are working with a firewall that
is already deployed, you should check slot status before adding
a new NPC to ensure that the NPC slot is ready. If the firewall
is in a high availability (HA) configuration, a newly installed
NPC stays in a disabled state until a matching NPC is installed.
After you install a matching NPC in the same slot number in the
HA peer firewall, you must enable the NPCs.
The following commands describe how to view NPC status and how
to change the state of an NPC.
To view NPC status, run the following command:
admin@PA-7050>
show chassis
status slot <slot-number>
For example, to view the status of slot 3 run the following command:
admin@PA-7050>
show chassis
status slot s3
If an NPC slot is ready to use, the status shows
empty
.
When you insert an NPC, the system updates the status of the slot.
After you successfully install an NPC, the status shows
Card
Status Up
and
Config Status Success
.
You can power down a slot and the slot will stay in the down
state until you power it on. Use the following commands to change
the slot status:
admin@PA-7050>
request
chassis admin-power-on slot <slot-number>
To power off an NPC slot:
admin@PA-7050>
request
chassis admin-power-off slot <slot-number>
To temporarily power down a slot:
admin@PA-7050>
request
chassis power-off slot <slot-number>
In an HA configuration, you must install the same number and
model of NPCs in each chassis and the slot numbers must match. After
you install the NPCs in each chassis, the firewall keeps them in
a disabled state until you enable them. This allows the firewall
to start HA monitoring on both NPCs.
Use the following command to bring up a pair of NPCs in an HA
configuration:
admin@PA-7050>
request
chassis power-on slot <slot-number> target ha-pair
For example, to enable NPCs installed in slot 3 of both chassis,
run the following command:
admin@PA-7050>
request
chassis power-on slot s3 target ha-pair
