PaloAlto Networks ION 7000 Hardware Reference Manual
  1. Manuals
  2. Brands
  3. PaloAlto Networks Manuals
  4. Firewall
  5. ION 7000
  6. Hardware reference manual

PaloAlto Networks ION 7000 Hardware Reference Manual

Hide thumbs Also See for ION 7000:
Table of Contents

Advertisement

Quick Links

Download this manual
ION 7000 Hardware Reference
docs.paloaltonetworks.com

Advertisement

Table of Contents
loading

Related Manuals for PaloAlto Networks ION 7000

Summary of Contents for PaloAlto Networks ION 7000

  • Page 1 ION 7000 Hardware Reference docs.paloaltonetworks.com...
  • Page 2 Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks menoned herein may be trademarks of their respecve companies. Last Revised March 31, 2021 ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 3: Table Of Contents

    Rack Mount the ION 7000.....................22 Install the Slide Rail into the Rack..................23 Rack Mount the Slide Rails.....................24 Install the ION 7000 in Virtual In-Path Configuraon............. 25 Setup the ION 7000 Controller Port................ 25 ION 7000 Peering Ports....................26 ION 7000 Internet Ports....................26 Install the ION 7000 in High Availability................
  • Page 4 Table of Contents ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 5: Before You Begin

    Before You Begin Read the following topics before you install or service a Palo Alto Networks next- ® generaon firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. > Tamper Proof Statement >...

  • Page 6: Tamper Proof Statement

    • The integrity of the tamper-proof tape used to seal the box or crate is not compromised. • The integrity of the warranty label on the firewall or appliance is not compromised. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 7: Third-Party Component Support

    Before You Begin Third-Party Component Support Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party Component Support statement. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 8: Product Safety Warnings

    French Translaon: Des câbles Ethernet blindés reliés à la terre doivent être ulisés pour garanr la conformité de l'organisme aux émissions électromagnéques (CEM). • (ION 7000 and ION 9000 only) At least two people are recommended for unpacking, handling, and relocang the heavier firewalls.
  • Page 9 French Translaon: (Tous les appareils Palo Alto Networks avec au moins deux sources d’alimentaon) Débranchez tous les cordons d’alimentaon (c.a. ou c.c.) des entrées d’alimentaon et meez le matériel hors tension. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 10 Before You Begin ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 11: Ion 7000 Overview

    Learn about the Prisma SD-WAN Instant-On Networks (ION) 7000 and then plan your deployment > ION 7000 > ION 7000 Ports > ION 7000 Front Panel with LEDs > ION 7000 Specificaons > ION Device Compliance Statement > ION 7000 Installaon Kit Components >...

  • Page 12: Ion 7000

    SD-WAN fabric across branches and data centers. It is designed to install seamlessly in the data center by peering with adjacent data center devices using tradional, standard-based roung protocols. Deploy the ION 7000 in an off-path model enabling elasc, non-disrupve scale-out and high availability (HA).

  • Page 13: Ion 7000 Ports

    This port is used by the ION device to communicate with the Prisma SD-WAN controller. Internet/Peering Ports These ports on the ION 7000 are used as internet ports or peering ports. SFP Ports These ports are used for 10 gigabit connecvity in copper or fiber form factors.

  • Page 14: Ion 7000 Front Panel With Leds

    ION 7000 Overview ION 7000 Front Panel with LEDs The ION 7000 LEDs indicate the following status: Icons Descripon Displays power status. Blue light—Powered on. No light—Powered off. Displays controller connecvity status. Blue light—Connected. No light—Not Connected. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 15: Ion 7000 SpecificaOns

    ION 7000 Overview ION 7000 Specificaons The following are the device specificaons of ION 7000: Specificaon Descripon Place in Network Large, remote office data center. Controller Ports 2 x 10/100/1000 RJ-45 WAN/LAN/Internet Ports 6 x 10 GE SFP+8 x 10/100/1000 RJ-45, port pairs 5/6 and 7/8 have programmable inline fail-to-wire capability for use in branch device mode.
  • Page 16 It can be in the form of a private connecon using a MPLS network through a corporate data center. It can also be a public internet connecon provided by a local broadband connecon. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 17: Ion Device Compliance Statement

    • Connect the equipment to an outlet on a circuit that is different from the one to which the receiver is connected. • Consult the dealer or an experienced radio/TV technician for help. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...
  • Page 18 • Korean Communicaons Commission (KCC) Class A Statement—This equipment is an electromagnec compable device for business purposes (Class A). The provider or user should be aware that the equipment is intended for use outside the home. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...

  • Page 19: Ion 7000 InstallaOn Kit Components

    ION 7000 Overview ION 7000 Installaon Kit Components The ION 7000 installaon kit contains the following parts and tools to install the device: • 2x 19-inch 1U rack mount sliding rails built-in with quick-aach square hole adapters. • 4x Rail slides with accompanying screws.

  • Page 20: Power On The Ion 7000

    Press the power switch 5 mes (press and hold for 1 second, then, release) to shut down the device. Reboot the ION 7000 Press the power switch 3 or 4 mes to reboot the ION 7000. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 21: Install The Ion 7000

    Install the ION 7000 Choose to deploy the Prisma SD-WAN ION 7000 in a virtual in-path or HA environment. > Rack Mount the ION 7000 > Install the Slide Rail into the Rack > Rack Mount the Slide Rails >...

  • Page 22: Rack Mount The Ion 7000

    • 19-inch slide lock ears The ION 7000 accessory kit contains slide lock ears for the front sides of the ION 7000. Use these ears to prevent the ION 7000 from detaching from the rack aer they are fully installed.

  • Page 23: Install The Slide Rail Into The Rack

    1. Insert the slide rails into a standard 19-inch rack making sure that the rails snap into place. 2. Aach the chassis-mounng brackets to either side of the ION 7000. 3. Slide the ION 7000 into the rack and confirm that the device is installed securely in the rack. If the rack has threaded round holes: 1.

  • Page 24: Rack Mount The Slide Rails

    Orient the front bracket of both rails in the same direcon. STEP 2 | Mount the rails securely and then insert the ION 7000 into the front of the sliding rails. The following figure illustrate the ION 7000 rack mounng the sliding rails: ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 25: Install The Ion 7000 In Virtual In-Path ConfiguraOn

    The ION 7000 uses a virtual in-path concept to allow the system to perform SD-WAN operaons on as it enters and exits the data center. This mode of operaon allows the ION 7000 cluster to: • Solicit very specific traffic for specific endpoints using tradional network roung protocols.

  • Page 26: Ion 7000 Peering Ports

    This internet port must allow inbound UDP 4500 to the ION 7000 from remote ION devices. If a firewall or NAT is used outside the ION 7000 on this port, UDP 4500 needs to be port-forwarded or passed-through from the firewall or NAT device.
  • Page 27 Install the ION 7000 STEP 2 | Physically plug in the ports from the ION 7000 devices to the appropriate devices. STEP 3 | Record the ION port numbers and connecng device port informaon for future reference. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc.

  • Page 28: Install The Ion 7000 In High Availability

    The Prisma SD-WAN ION 7000 provides a horizontally-scalable, high availability (HA) soluon between branch sites and data center clusters. STEP 1 | Add a second ION 7000 to the data center that requires high availability (HA). STEP 2 | Mimic the exisng ION 7000 cabling for the second ION 7000 device.
  • Page 29 There is no addional configuraon required on the second ION device, except for IP addresses. Both the ION 7000 devices peer with the same core and WAN edge routers. The second ION device inherits the same BGP configuraon as the first device.
  • Page 30 Install the ION 7000 The following image illustrates the seng up BGP for ION 7000 HA. ION 7000 Hardware Reference 2021 Palo Alto Networks, Inc. ©...

Table of Contents