: PA-7000 Series Firewall SMC Component Descriptions
Focus
Focus

PA-7000 Series Firewall SMC Component Descriptions

Table of Contents

PA-7000 Series Firewall SMC Component Descriptions

Learn about the PA-7000 SMC components.
The following images show the first-generation PA-7050 SMCs and the PA-7080 SMC and the tables describe each SMC component.
There are two versions of the first-generation PA-7050 Switch Management Card (SMC): version 1 and version 2.
Version 2 of the SMC is not the same as the second-generation SMC-B. See PA-7000 Series Firewall SMC-B Component Descriptions for details about the second-generation SMC-B.
The PA-7050 firewall must be running PAN-OS 6.1 or a later release to recognize a version 2 SMC. Physically, there are two differences between the versions: the version 2 SMC uses the same install and release levers as the LPC—version 1 does not; and the USB port is in a different location. There are no functional differences between the two versions.
PA-7050 Version 1 SMC, First Generation
PA-7050 Version 2 SMC, First Generation
PA-7080 SMC, First Generation
Item
Component
Description
1
HA1-A
Ethernet 10/100/1000Mbps port for high availability (HA) control and synchronization. Connect this port directly from HA1-A port on the first firewall in an HA pair to the HA1-A port on the second firewall in the pair, or connect these two ports to each other through a switch or router.
You cannot configure HA1 (control) on NPC data ports or the MGT port.
2
HA1-B
Ethernet 10/100/1000Mbps port for high availability (HA) control and synchronization. Use this port as a backup to HA1-A. Connect this port directly from HA1-B port on the first firewall in an HA pair to the HA1-B port on the second firewall in the pair, or connect these two ports to each other through a switch or router.
You cannot configure HA1 (control) on NPC data ports or the MGT port.
3
MGT
Ethernet 10/100/1000Mbps port used to access the management interface. To manage the firewall, change your management computer IP address to 192.168.1.2, connect an RJ-45 cable from your computer to the MGT port and browse to https:// 192.168.1.1. The default login name is admin and the default password is admin.
The Management port cannot be used to configure HA1 or HA1 backup. You must use the dedicated HA1-A and HA1-B ports.
4
Console
Use this port to connect a management computer to the firewall using a 9-pin serial-to-RJ-45 cable and terminal emulation software.
The console connection provides access to firewall boot messages, the Maintenance Recovery Tool (MRT), and the command line interface (CLI).
If your management computer does not have a serial port, use a USB-to-serial converter.
Use the following settings to configure your terminal emulation software to connect to the console port:Data rate: 9600Data bits: 8Parity: NoneStop bits: 1Flow control: None
5
HSCI-A (High Speed Chassis Interconnect)
Quad-SFP+ (QSFP+) interface used to connect two PA-7000 Series firewalls for a high availability (HA) configuration. Each port is comprised of four 10Gbps links internally for a combined speed of 40Gbps and is used for HA2 data link in an active/passive configuration. When in active/active mode, the port is also used for HA3 packet forwarding for asymmetrically routed sessions that require Layer 7 inspection for App-ID™ and Content‑ID™.
In a typical installation, HSCI-A on the first chassis connects directly to HSCI-A on the second chassis and HSCI-B on the first chassis connects to HSCI-B on the second chassis. This provides full 80Gbps transfer rates. In software, both ports (HSCI-A and HSCI-B) are treated as one HA interface.
The HSCI ports are not routable and must be connected directly to each other, not through a switch.
You can configure HA2 (data link) on the HSCI ports or on NPC data ports. When configuring on dataplane ports, you must ensure that both the HA2 and HA2-Backup links are configured on dataplane interfaces. A mix of a dataplane port and an HSCI port for either HA2 or HA2-Backup will result in a commit failure.
6
HSCI-B (High Speed Chassis Interconnect)
See the HSCI-A description above for details.
The purpose of HSCI-B is to increase the bandwidth for HA2/HA3 processing.
7
USB port
One USB port that accepts a USB flash drive that contains a bootstrap bundle (PAN-OS configuration) that enables you to bootstrap the firewall. Bootstrapping enables you to provision the firewall with a specific configuration, license it, and make it operational on the network.
The firewall must have PAN-OS 7.1 or later installed to use this feature. Prior to PAN-OS 7.1, this port is disabled. For information on bootstrapping, refer to Bootstrap the Firewall in the PAN-OS® Administrator’s Guide Version 7.1.
8
LED Indicators
Eight LEDs that indicate the status of various hardware components. For details on the LEDs, see Interpret the PA-7000 Series Firewall SMC LEDs.
9
Mounting Screws
One screw on each side of the SMC to secure the SMC to the chassis.
10
SMC installation and removal hardware
  • PA-7050 SMC—Levers and lever release latches used to install and remove the SMC card. The lever release latch on each side slides upward to release the ejection lever.
    The version 2 SMC does not use lever release latches; instead, it uses the same double-lever style used on the Log Processing Card (LPC). After loosening the thumb screws, pull the inner lever toward you to unlock the outer lever from the chassis and then pull the outer lever toward you to release the card from the chassis. The left and right inner levers have micro-switches that power off the card when they are pulled.
  • PA-7080 SMC— Two levers used to install and remove the SMC.