Replace A Drive On A Pa-5200 Series Firewall; Replace A Log Drive On A Pa-5200 Series Firewall - PaloAlto Networks PA-5200 Series Hardware Reference Manual

Replace a Drive on a PA-5200 Series Firewall

The PA-5200 Series firewalls have two solid-state drives (SSDs) used for system files and system logs and
two hard-disk drives (HDDs) used for network traffic log storage. Each drive pair is in a RAID 1 array so that
if a drive fails, you can replace the failed drive (using the same model drive) without service interruption.
The system drives are labeled SYS 1 and SYS 2 and the log drives are labeled LOG 1 and LOG 2.
When ordering a replacement drive from Palo Alto Networks or your reseller, you receive
two drives. This ensures that if the replacement drive is not the same model as the failed
drive, you can install two new matching drives. If the replacement drive model is the same as
the failed drive, you need only replace one failed drive and can store the second drive as a
spare. For firewalls in an HA pair, there is no requirement that the drive sizes match between
the paired systems.
The procedures to replace a system drive (SSD) and a log drive (HDD) are different.
•

Replace a Log Drive on a PA-5200 Series Firewall

• Replace a System Drive on a PA-5200 Series Firewall
Replace a Log Drive on a PA-5200 Series Firewall
The following procedure describes how to replace a failed log drive. There are two scenarios: one where
the replacement drive is the same model as the failed drive and one where the replacement drive is not the
same model.
In a high availability (HA) configuration, if one log drive fails (or if both log drives fail) in the
active firewall, the firewall enters the non-functional HA state and fails over. If the firewall is
not in an HA configuration and one log drive fails, the firewall continues to operate. If both
log drives fail in a non-HA configuration, the firewall continues to operate but it does not log
network traffic and you cannot commit the configuration until there is at least one functioning
log drive.
STEP 1 | Identify the failed drive and determine the drive model by running the following operational
command to view the
admin@PA-5020>
The following output shows that the Log1 drive failed and that the model number of that drive is
ST2000NX0253. The system log also shows an error that indicates which drive failed (Log1 or Log2).
Disk Pair Log
Status
Disk id Log1
model
size
status
Disk id Log2
model
size
PA-5200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | Service the PA-5200 Series Firewall
and fields:
status model
show system raid detail
: ST2000NX0253
: 1907729 MB
: failed
: ST2000NX0253
: 1907729 MB
Available
clean, degraded
Present
Present
41
2019 Palo Alto Networks, Inc.
©