Verify The Npc Configuration - PaloAlto Networks PA-7000 Series Hardware Reference Manual

Verify the PA-7000 Series LPC and NPC Configuration
The output also shows the model, size, status, and the AMC serial number. Table 23 describes the
possible status levels for a drive. For information on replacing a failed drive and commands to add and
remove drives, see "Replace a PA-7000 Series LPC Drive" on page 105.
Table 23. AMC Status Indicators
Status
not in use
spare rebuilding
active sync
failed

Verify the NPC Configuration

When you first configure a PA-7000 Series firewall, all NPC slots are ready to use. If you are working
with a firewall that is already deployed, you should check slot status before adding a new NPC to ensure
that the NPC slot is ready. If the firewall is in a high availability (HA) configuration, newly installed the
NPCs stay in a disabled state until matching NPCs are installed. After you install a matching NPC in the
same slot number in the HA peer firewall, you must enable the NPCs.
The following commands describe how to view NPC status and how to change the state of an NPC.
To view NPC status, run the following command:
admin@PA-7050> show chassis status slot <slot-number>
For example, to view the status of slot 3 run the following command:
admin@PA-7050> show chassis status slot s3
If an NPC slot is ready to use, the status shows empty. When you insert an NPC, the system updates
the status of the slot. Table 28 on page 138 describes the slot status messages.
After you successfully install an NPC, the status shows Card Status Up and Config Status
Success.
You can power down a slot and the slot will stay in the down state until you power it on. Use the
following commands to change the slot status:
To power on an NPC slot:
admin@PA-7050> request chassis admin-power-on slot <slot-number>
To power off an NPC slot:
admin@PA-7050> request chassis admin-power-off slot <slot-number>
To temporarily power down a slot:
admin@PA-7050> request chassis power-off slot <slot-number>
In an HA configuration, you must install the same number and model of NPCs in each chassis and the
slot numbers must match. After you install the NPCs in each chassis, the firewall keeps them in a
disabled state until you enable them. This allows the firewall to start HA monitoring on both NPCs.
Use the following command to bring up a pair of NPCs in an HA configuration:
admin@PA-7050> request chassis power-on slot <slot-number> target
ha-pair
For example, to enable NPCs installed in slot 3 of both chassis, run the following command:
admin@PA-7050> request chassis power-on slot s3 target ha-pair
86 • Install the PA-7000 Series Firewall
Description
The drive is not part of a RAID pair.
After replacing a failed drive in a RAID 1 pair, this status message
indicates that the firewall is synchronizing data from the existing drive to
the new drive.
The drive is ready and is currently part of a RAID 1.
The drive has failed and must be replaced.
Palo Alto Networks