Replace a PA-7000 Series Firewall DPC in a Single Chassis

1. Check the status of the DPC that is having a problem. You can do this from the web interface or from the CLI. In the web interface, navigate to DeviceSetupInterfaces to view status of each DPC slot.

   If the DPC failed due to a hardware problem, the status shows Failure.
2. Put the provided ESD wrist strap on your wrist ensuring that the metal contact is touching your skin. Then attach (snap) one end of the ground cable to the wrist strap and remove the alligator clip from the banana clip on the other end of the ESD grounding cable. Plug the banana clip end into one of the ESD ports located on the front of the chassis before handling ESD sensitive hardware. For details on the ESD port location, see PA-7050 Front Panel (AC) or PA-7080 Front Panel (AC).
3. Turn the card screws on each side of the card counterclockwise until loose and then gently pull the inner release lever to release the outer ejector levers. Wait for the green power LED to go off and then pull the release lever toward you to pull the card out of the chassis.
4. Remove the DPC from the antistatic bag and partially slide it into any of the available DPC slots, ensuring that the handles are in the open position. When the card is about 1/4-inch from being fully inserted, adjust the levers to align with the chassis and then close the levers to seat the card in place.

5. Tighten the thumb screws on each side of the card to secure the card to the chassis by hand or using a Phillips-head screwdriver.
6. Enable the new DPC by running the following command using slot 3 as an example:

   admin@PA-7050> request chassis enable slot s3

   It is recommended that you observe the enabled card for about two minutes to check for internal path monitoring failures. If there is no failure, proceed to the next step.

   Check the status of the card in slot 3 on the chassis by running:

   admin@PA-7050> show chassis status slot s3

   If the card is functioning properly, the status will show an output similar to the following:

   Slot...Component........Card Status.....Config Status 
   3.......PA-7000-DPC ...Up..................Success

7. Ensure that the DPC's session distribution policy is set to session-load.

   1. Run the following command to check the DPC's current distribution policy:

      admin@PA-7050> show session distribution policy

   2. If the Ownership Distribution Policy reads as any value other than session-load, run the following command:

      admin@PA-7050> set session distribution-policy session-load

   3. Running the show session distribution policy command should now read Ownership Distribution Policy: session-load.