Verify the PA-7000 Series Firewall NPC Configuration
When you first set up a PA-7000 Series firewall, all
NPC slots are ready to use. If you are working with a firewall that
is already deployed, you should check slot status before adding
a new NPC to ensure that the NPC slot is ready. If the firewall
is in a high availability (HA) configuration, a newly installed
NPC stays in a disabled state until a matching NPC is installed.
After you install a matching NPC in the same slot number in the
HA peer firewall, you must enable the NPCs.
The following commands describe how to view NPC status and how
to change the state of an NPC.
To view NPC status, run the following command:
status slot <slot-number>
For example, to view the status of slot 3 run the following command:
status slot s3
If an NPC slot is ready to use, the status shows
When you insert an NPC, the system updates the status of the slot.
After you successfully install an NPC, the status shows
Config Status Success
You can power down a slot and the slot will stay in the down
state until you power it on. Use the following commands to change
the slot status:
In an HA configuration, you must install the same number and
model of NPCs in each chassis and the slot numbers must match. After
you install the NPCs in each chassis, the firewall keeps them in
a disabled state until you enable them. This allows the firewall
to start HA monitoring on both NPCs.
Use the following command to bring up a pair of NPCs in an HA