PA-7000 Series Firewall SMC Component Descriptions
Table of Contents
PA-7000 Series Firewall SMC Component Descriptions
Learn about the PA-7000 SMC components.
The following images show the first-generation PA-7050
SMCs and the PA-7080 SMC and the tables describe each SMC component.
There are two versions of the first-generation PA-7050 Switch
Management Card (SMC): version 1 and version 2.
The PA-7050 firewall
must be running PAN-OS 6.1 or a later release to recognize a version
2 SMC. Physically, there are two differences between the versions:
the version 2 SMC uses the same install and release levers as the LPC—version
1 does not; and the USB port is in a different location. There are
no functional differences between the two versions.
Version
2 of the SMC is not the same as the second-generation SMC-B. See PA-7000 Series Firewall SMC-B Component Descriptions for details
about the second-generation SMC-B.
PA-7050 Version 1 SMC, First Generation
PA-7050 Version 2 SMC, First Generation
PA-7080 SMC, First Generation
Item | Component | Description |
|---|---|---|
1 | HA1-A | Ethernet 10/100/1000Mbps port for high availability (HA)
control and synchronization. Connect this port directly from HA1-A
port on the first firewall in an HA pair to the HA1-A port on the
second firewall in the pair, or connect these two ports to each
other through a switch or router. You cannot configure HA1
(control) on NPC data ports or the MGT port. |
2 | HA1-B | Ethernet 10/100/1000Mbps port for high availability (HA)
control and synchronization. Use this port as a backup to HA1-A.
Connect this port directly from HA1-B port on the first firewall
in an HA pair to the HA1-B port on the second firewall in the pair,
or connect these two ports to each other through a switch or router. You
cannot configure HA1 (control) on NPC data ports or the MGT port. |
3 | MGT | Ethernet 10/100/1000Mbps port used to access
the management interface. To manage the firewall, change your management
computer IP address to 192.168.1.2, connect an RJ-45 cable from
your computer to the MGT port and browse to https:// 192.168.1.1.
The default login name is admin and the default password is admin. The Management port cannot be
used to configure HA1 or HA1 backup. You must use the dedicated
HA1-A and HA1-B ports. |
4 | Console | Use this port to connect a management computer
to the firewall using a 9-pin serial-to-RJ-45 cable and terminal emulation
software. The console connection provides access to firewall boot
messages, the Maintenance Recovery Tool (MRT), and the command line
interface (CLI). If your management computer does not
have a serial port, use a USB-to-serial converter. |
5 | HSCI-A (High Speed
Chassis Interconnect) | Quad-SFP+ (QSFP+) interface used to connect
two PA-7000 Series firewalls for a high availability (HA) configuration.
Each port is comprised of four 10Gbps links internally for a combined
speed of 40Gbps and is used for HA2 data link in an active/passive
configuration. When in active/active mode, the port is also used
for HA3 packet forwarding for asymmetrically routed sessions that
require Layer 7 inspection for App-ID™ and Content‑ID™. In
a typical installation, HSCI-A on the first chassis connects directly
to HSCI-A on the second chassis and HSCI-B on the first chassis
connects to HSCI-B on the second chassis. This provides full 80Gbps
transfer rates. In software, both ports (HSCI-A and HSCI-B) are
treated as one HA interface. The HSCI ports are not routable
and must be connected directly to each other, not through a switch. You
can configure HA2 (data link) on the HSCI ports or on NPC data ports.
When configuring on dataplane ports, you must ensure that both the
HA2 and HA2-Backup links are configured on dataplane interfaces.
A mix of a dataplane port and an HSCI port for either HA2 or HA2-Backup
will result in a commit failure. |
6 | HSCI-B (High Speed
Chassis Interconnect) | See the HSCI-A description above for details. The
purpose of HSCI-B is to increase the bandwidth for HA2/HA3 processing. |
7 | USB port | One USB port that accepts a USB flash drive
that contains a bootstrap bundle (PAN-OS configuration) that enables
you to bootstrap the firewall. Bootstrapping enables you to provision
the firewall with a specific configuration, license it, and make
it operational on the network. The firewall must have PAN-OS
7.1 or later installed to use this feature. Prior to PAN-OS 7.1,
this port is disabled. For information on bootstrapping, refer to Bootstrap
the Firewall in the PAN-OS® Administrator’s Guide
Version 7.1. |
8 | LED Indicators | Eight LEDs that indicate the status of various hardware
components. For details on the LEDs, see Interpret
the PA-7000 Series Firewall SMC LEDs. |
9 | Mounting Screws | One screw on each side of the SMC to secure
the SMC to the chassis. |
10 | SMC installation and removal hardware |
|