Set Up A Connection To The Firewall - PaloAlto Networks PA-5400 Series Hardware Reference Manual

Set Up a Connection to the Firewall

On first startup, the PA-5450 boots into Zero Touch Provisioning (ZTP) mode by default. ZTP mode allows
you to automate the provisioning process of a new firewall that is added to a management server. To learn
more about ZTP, see
instructions below to learn how to boot in ZTP or standard mode.
If you have already booted up the firewall and selected the wrong mode, you must perform a
factory reset or private-data-reset before continuing.
Reset the Firewall to Factory Default Settings
•
• To use the private-data-reset command, you must access the firewall CLI and enter the
command request system private-data-reset. This command will remove all
logs and restore the default configuration.
ZTP mode is disabled if FIPS-CC mode is enabled. If the firewall boots with FIPS-CC mode
enabled, the firewall will automatically boot in standard mode.
STEP 1 | Use an RJ-45 Ethernet cable to connect the device to the correct port. The port(s) connected
will depend on which mode you intend the firewall to run in.
• (Standard mode) Connect the Ethernet cable from the MGT port on the firewall to the RJ-45 port of
your network switch.
• (ZTP mode) Connect the Ethernet cable from the ZTP port (Ethernet port 1) on the firewall to your
network switch.
STEP 2 | Confirm that the connection to the MGT port or Ethernet port 1 has an active network switch.
An active switch allows the firewall to trigger a "link up" state on the port you connected to
for your desired boot mode.
(
STEP 3 |
Standard mode only
to the firewall CLI to respond to a prompt during bootup. Connect a console cable from the
PA-5450 Management Processor Card (MPC) to your computer. Once the firewall is powered
on, use a terminal emulator such as PuTTY to access the CLI. See
information.
STEP 4 | Power on the firewall. See
connect power to the firewall.
• (Standard mode) Using your terminal emulator, watch for the following CLI prompt as the firewall
boots:
Do you want to exit ZTP mode and configure your firewall in standard mode
(yes/no)[no]?
Enter yes. The system will then ask you to confirm. Enter yes again to boot in standard mode.
48
PA-5400 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-5400 Series Firewall Installation
2021 Palo Alto Networks, Inc.
©
ZTP Overview. You can also bring the PA-5450 online in standard mode. See the
) If you intend to boot the firewall in standard mode, you will need access
Connect AC or DC Power to a PA-5450 Firewall
describes how to do a factory reset.
Access the CLI for more
to learn how to