Verify the PA-7000 Series Firewall NPC Configuration

When you first set up a PA-7000 Series firewall, all NPC slots are ready to use. If you are working with a firewall that is already deployed, you should check slot status before adding a new NPC to ensure that the NPC slot is ready. If the firewall is in a high availability (HA) configuration, a newly installed NPC stays in a disabled state until a matching NPC is installed. After you install a matching NPC in the same slot number in the HA peer firewall, you must enable the NPCs.
The following commands describe how to view NPC status and how to change the state of an NPC.
To view NPC status, run the following command:
admin@PA-7050>
show chassis status slot <slot-number>
For example, to view the status of slot 3 run the following command:
admin@PA-7050>
show chassis status slot s3
If an NPC slot is ready to use, the status shows
empty
. When you insert an NPC, the system updates the status of the slot.
After you successfully install an NPC, the status shows
Card Status Up
and
Config Status Success
.
You can power down a slot and the slot will stay in the down state until you power it on. Use the following commands to change the slot status:
To power on an NPC slot:
admin@PA-7050>
request chassis admin-power-on slot <slot-number>
To power off an NPC slot:
admin@PA-7050>
request chassis admin-power-off slot <slot-number>
To temporarily power down a slot:
admin@PA-7050>
request chassis power-off slot <slot-number>
In an HA configuration, you must install the same number and model of NPCs in each chassis and the slot numbers must match. After you install the NPCs in each chassis, the firewall keeps them in a disabled state until you enable them. This allows the firewall to start HA monitoring on both NPCs.
Use the following command to bring up a pair of NPCs in an HA configuration:
admin@PA-7050>
request chassis power-on slot <slot-number> target ha-pair
For example, to enable NPCs installed in slot 3 of both chassis, run the following command:
admin@PA-7050>
request chassis power-on slot s3 target ha-pair
For information on installing NPCs, see Replace a PA-7000 Series Network Processing Card (NPC) and for information on slot status indicators, see PA-7000 Series Front Slot States.

Recommended For You