PaloAlto Networks ION 7000 Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. ION 7000
  6. Hardware reference manual

PaloAlto Networks ION 7000 Hardware Reference Manual

Hide thumbs Also See for ION 7000:
Table of Contents

Advertisement

Quick Links

Download this manual
ION 7000 Hardware Reference
paloaltonetworks.com/documentation

Advertisement

Table of Contents
loading

Related Manuals for PaloAlto Networks ION 7000

Summary of Contents for PaloAlto Networks ION 7000

  • Page 1 ION 7000 Hardware Reference paloaltonetworks.com/documentation...
  • Page 2 2020-2021 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo © Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised March 31, 2021 ION 7000 HARDWARE REFERENCE |...

  • Page 3: Table Of Contents

    Rack Mount the ION 7000........................27 Install the Slide Rail into the Rack......................28 Rack Mount the Slide Rails........................29 Install the ION 7000 in Virtual In-Path Configuration..............30 Setup the ION 7000 Controller Port..................30 ION 7000 Peering Ports......................31 ION 7000 Internet Ports......................31 Install the ION 7000 in High Availability....................32...
  • Page 4 TABLE OF CONTENTS...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next-generation ® firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Tamper Proof Statement >...
  • Page 6 ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...

  • Page 7: Tamper Proof Statement

    • The integrity of the tamper-proof tape used to seal the box or crate is not compromised. • The integrity of the warranty label on the firewall or appliance is not compromised. ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc.

  • Page 8: Third-Party Component Support

    Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...

  • Page 9: Product Safety Warnings

    • Le blindage et la mise à la terre “ligne à ligne” et “ligne à la terre” sont fournis. • Le dispositif de protection doit être raccordé à la terre et un câble Ethernet blindé de catégorie 5E ou supérieure doit être utilisé. ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 10 (c.a. ou c.c.) des entrées d’alimentation et mettez le matériel hors tension. • Declaration of the Presence Condition of the Restricted Substances Marking. (Applicable to ION 1000) ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 11 ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 12 (Applicable to ION 9000) ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 13 ION 7000 HARDWARE REFERENCE | Before You Begin 2021 Palo Alto Networks, Inc. ©...
  • Page 14 ION 7000 HARDWARE REFERENCE | Before You Begin...

  • Page 15: Ion 7000 Overview

    Learn about the Prisma SD-WAN Instant-On Networks (ION) 7000 and then plan your deployment > ION 7000 > ION 7000 Ports > ION 7000 Front Panel with LEDs > ION 7000 Specifications > ION Device Compliance Statement > ION 7000 Installation Kit Components...
  • Page 16 ION 7000 HARDWARE REFERENCE | ION 7000 Overview 2021 Palo Alto Networks, Inc. ©...

  • Page 17: Ion 7000

    • Maintains path symmetry and ensures the best path for an application. • Enables application Service Level Agreements (SLAs) and path selection in conjunction with branch with ION 3000 devices. ION 7000 HARDWARE REFERENCE | ION 7000 Overview 2021 Palo Alto Networks, Inc. ©...

  • Page 18: Ion 7000 Ports

    This port is used by the ION device to communicate with the Prisma SD-WAN controller. Internet/Peering Ports These ports on the ION 7000 are used as internet ports or peering ports. SFP Ports These ports are used for 10 gigabit connectivity in copper or fiber form factors.

  • Page 19: Ion 7000 Front Panel With Leds

    ION 7000 Front Panel with LEDs The ION 7000 LEDs indicate the following status: Icons Description Displays power status. Blue light—Powered on. No light—Powered off. Displays controller connectivity status. Blue light—Connected. No light—Not Connected. ION 7000 HARDWARE REFERENCE | ION 7000 Overview 2021 Palo Alto Networks, Inc.

  • Page 20: Ion 7000 Specifications

    ION 7000 Specifications The following are the device specifications of ION 7000: Specification Description Place in Network Large, remote office data center. Controller Ports 2 x 10/100/1000 RJ-45 WAN/LAN/Internet Ports 6 x 10 GE SFP+8 x 10/100/1000 RJ-45, port pairs 5/6 and 7/8 have programmable inline fail-to-wire capability for use in branch device mode.
  • Page 21 It can be in the form of a private connection using a MPLS network through a corporate data center. It can also be a public internet connection provided by a local broadband connection. ION 7000 HARDWARE REFERENCE | ION 7000 Overview 2021 Palo Alto Networks, Inc. ©...

  • Page 22: Ion Device Compliance Statement

    • Korean Communications Commission (KCC) Class A Statement—This equipment is an electromagnetic compatible device for business purposes (Class A). The provider or user should be aware that the equipment is intended for use outside the home. ION 7000 HARDWARE REFERENCE | ION 7000 Overview 2021 Palo Alto Networks, Inc. ©...

  • Page 23: Ion 7000 Installation Kit Components

    ION 7000 Installation Kit Components The ION 7000 installation kit contains the following parts and tools to install the device: • 2x 19-inch 1U rack mount sliding rails built-in with quick-attach square hole adapters. • 4x Rail slides with accompanying screws.

  • Page 24: Power On The Ion 7000

    Press the power switch 5 times (press and hold for 1 second, then, release) to shut down the device. Reboot the ION 7000 Press the power switch 3 or 4 times to reboot the ION 7000. ION 7000 HARDWARE REFERENCE | ION 7000 Overview...

  • Page 25: Install The Ion 7000

    Install the ION 7000 Choose to deploy the Prisma SD-WAN ION 7000 in a virtual in-path or HA environment. > Rack Mount the ION 7000 > Install the Slide Rail into the Rack > Rack Mount the Slide Rails > Install the ION 7000 in Virtual In-Path Configuration...
  • Page 26 ION 7000 HARDWARE REFERENCE | Install the ION 7000 2021 Palo Alto Networks, Inc. ©...

  • Page 27: Rack Mount The Ion 7000

    • 19-inch slide lock ears The ION 7000 accessory kit contains slide lock ears for the front sides of the ION 7000. Use these ears to prevent the ION 7000 from detaching from the rack after they are fully installed.

  • Page 28: Install The Slide Rail Into The Rack

    1. Insert the slide rails into a standard 19-inch rack making sure that the rails snap into place. 2. Attach the chassis-mounting brackets to either side of the ION 7000. 3. Slide the ION 7000 into the rack and confirm that the device is installed securely in the rack. If the rack has threaded round holes: 1.

  • Page 29: Rack Mount The Slide Rails

    Orient the front bracket of both rails in the same direction. STEP 2 | Mount the rails securely and then insert the ION 7000 into the front of the sliding rails. The following figure illustrate the ION 7000 rack mounting the sliding rails: ION 7000 HARDWARE REFERENCE | Install the ION 7000 2021 Palo Alto Networks, Inc.

  • Page 30: Install The Ion 7000 In Virtual In-Path Configuration

    Install the ION 7000 in Virtual In-Path Configuration The ION 7000 uses a virtual in-path concept to allow the system to perform SD-WAN operations on as it enters and exits the data center. This mode of operation allows the ION 7000 cluster to: •...

  • Page 31: Ion 7000 Peering Ports

    This internet port must allow inbound UDP 4500 to the ION 7000 from remote ION devices. If a firewall or NAT is used outside the ION 7000 on this port, UDP 4500 needs to be port-forwarded or passed-through from the firewall or NAT device.

  • Page 32: Install The Ion 7000 In High Availability

    There is no additional configuration required on the second ION device, except for IP addresses. Both the ION 7000 devices peer with the same core and WAN edge routers. The second ION device inherits the same BGP configuration as the first device.
  • Page 33 The following image illustrates the logical connectivity and IP addressing for ION 7000 HA. The following image illustrates the setting up BGP for ION 7000 HA. ION 7000 HARDWARE REFERENCE | Install the ION 7000 2021 Palo Alto Networks, Inc.
  • Page 34 ION 7000 HARDWARE REFERENCE | Install the ION 7000...

Table of Contents