Replace A System Drive On A Pa-5200 Series Firewall - PaloAlto Networks PA-5200 Series Hardware Reference Manual

Replace a Drive on a PA‐5200 Series Firewall
Replace a System Drive on a PA‐5200 Series Firewall
The following procedure describes how to replace a failed system drive. There are two scenarios: one where
the replacement drive is the same model as the failed drive and one where the replacement drive is not the
same model.
If you replace a system drive with a different model drive, you must boot the firewall into the Maintenance
Recovery Tool (MRT) to copy data between drives. In a high availability (HA) configuration, suspend the firewall
with the failed drive as described in this procedure.
In a high availability (HA) configuration, if one system drive fails (or if both system drives fail) in the active firewall,
the firewall enters the non‐functional HA state and fails over. If the firewall is not in an HA configuration and one
system drive fails, the firewall continues to operate. If both system drives fail in a non‐HA configuration, you will
need to replace the systems drives and restore the firewall configuration from a recent configuration backup.
Replace a System Drive on a PA‐5200 Series Firewall
Step 1 Identify the failed drive and determine the drive model.
When the system drives are functioning normally, all system drive partitions show both drives with the status
. If a system drive fails, the
clean
failed partition array shows
In this example, the output from the
MICRON_M510DC_MT
from the panlogs array; together, these indicate that you need to replace the Sys1 drive.
admin@PA-5220> show system raid detail
Overall System Drives RAID status
--------------------------------------------------------------------------------
Drive status
Disk id Sys1
Disk id Sys2
--------------------------------------------------------------------------------
Partition status
panlogs
Drive id Sys2
maint
Drive id Sys1
Drive id Sys2
sysroot0
Drive id Sys1
Drive id Sys2
sysroot1
Drive id Sys1
Drive id Sys2
pancfg
Drive id Sys1
Drive id Sys2
panrepo
Drive id Sys1
Drive id Sys2
swap
Drive id Sys1
Drive id Sys2
Step 2 Remove the failed drive from the RAID 1 array. In this example, run the following command to remove drive
from the array:
Sys1
admin@PA-5020> request system raid remove sys1
42 • PA‐5200 Series Next‐Gen Firewall Hardware Reference
Overall System Drives RAID status
, and one of the drives will be missing (Sys1 or Sys2).
clean, degraded
show system raid detail
, the panlogs partition shows the status
degraded
Present
Present
clean, degraded
active sync
clean
active sync
active sync
clean
active sync
active sync
clean
active sync
active sync
clean
active sync
active sync
clean
active sync
active sync
clean
active sync
active sync
Copyright © 2007-2017 Palo Alto Networks
Service the PA‐5200 Series Firewall
shows
degraded
command shows that the drive model is
and drive
clean, degraded,
(MICRON_M510DC_MT)
(MICRON_M510DC_MT)
© Palo Alto Networks, Inc.
, one or more
is missing
Sys1