Focus

PA-7000 Series Firewall Hardware Reference

Verify the PA-7000 Series Firewall NPC Configuration

Table of Contents

Verify the PA-7000 Series Firewall NPC Configuration

When you first set up a PA-7000 Series firewall, all NPC slots are ready to use. If you are working with a firewall that is already deployed, you should check slot status before adding a new NPC to ensure that the NPC slot is ready. If the firewall is in a high availability (HA) configuration, a newly installed NPC stays in a disabled state until a matching NPC is installed. After you install a matching NPC in the same slot number in the HA peer firewall, you must enable the NPCs.

The following commands describe how to view NPC status and how to change the state of an NPC.

To view NPC status, run the following command:

admin@PA-7050> show chassis
status slot <slot-number>

For example, to view the status of slot 3 run the following command:

admin@PA-7050> show chassis
status slot s3

If an NPC slot is ready to use, the status shows empty. When you insert an NPC, the system updates the status of the slot.

After you successfully install an NPC, the status shows Card Status Up and Config Status Success.

You can power down a slot and the slot will stay in the down state until you power it on. Use the following commands to change the slot status:

To power on an NPC slot:

admin@PA-7050> request
chassis admin-power-on slot <slot-number>

To power off an NPC slot:

admin@PA-7050> request
chassis admin-power-off slot <slot-number>

To temporarily power down a slot:

admin@PA-7050> request
chassis power-off slot <slot-number>

In an HA configuration, you must install the same number and model of NPCs in each chassis and the slot numbers must match. After you install the NPCs in each chassis, the firewall keeps them in a disabled state until you enable them. This allows the firewall to start HA monitoring on both NPCs.

Use the following command to bring up a pair of NPCs in an HA configuration:

admin@PA-7050> request
chassis power-on slot <slot-number> target ha-pair

For example, to enable NPCs installed in slot 3 of both chassis, run the following command:

admin@PA-7050> request
chassis power-on slot s3 target ha-pair

For information on installing NPCs, see Replace a PA-7000 Series Network Processing Card (NPC) and for information on slot status indicators, see PA-7000 Series Front Slot States.

Verify the PA-7000 Series Firewall LPC Configuration

Install the PA-7080 Firewall EMI Filter