Verify The Pa-5400 Series Firewall Nc ConfiguraOn - PaloAlto Networks PA-5400 Series Hardware Reference Manual

PA-5400 Series Firewall Installaon
Verify the PA-5400 Series Firewall NC Configuraon
When you first set up a PA-5400 Series firewall, both NC slots are ready to use. If you are working
with a firewall that is already deployed, you should check slot status before adding a new NC to
ensure that the NC slot is ready. If the firewall is in a high availability (HA) configuraon, a newly
installed NC stays in a disabled state unl a matching NC is installed. Aer you install a matching
NC in the same slot number in the HA peer firewall, you must enable the NCs.
The following commands describe how to view NC status and how to change the state of an NC.
The PA-5450 firewall makes use of paired
power from a Data Processing Card (DPC) to a corresponding NC. Certain commands
issued to the NC affect or are affected by the status of its corresponding DPC.
To view NC status, run the following command:
admin@PA-5450> show chassis status slot <slot-number>
For example, to view the status of slot 2 run the following command:
admin@PA-5450> show chassis status slot s2
If an NC slot is ready to use, the status shows empty. When you insert an NC, the system updates
the status of the slot.
Aer you successfully install an NC, the status shows CardStatus Up and Config Status
Success.
You can power down a slot and the slot will stay in the down state unl you power it on. Use the
following commands to change the slot status:
To power on an NC slot:
admin@PA-5450> request chassis admin-power-on slot <slot-number>
To power off an NC slot:
admin@PA-5450> request chassis admin-power-off slot <slot-number>
To temporarily power down a slot:
admin@PA-5450> request chassis power-off slot <slot-number>
In an HA configuraon, you must install the same number and model of NCs in each appliance and
the slot numbers must match. Aer you install the NCs in each appliance, the firewall keeps them
in a disabled state unl you enable them. This allows the firewall to start HA monitoring on both
NCs.
Use the following command to bring up a pair of NCs in an HA configuraon:
PA-5400 Series Next-Gen Firewall Hardware Reference
Logical Card Slots in order to direct processing
58
2021 Palo Alto Networks, Inc.
©