Transcript
PA-7050 Quick Start 1.
Before You Begin
2.
Use this document as a quick reference for installing the PA-7050 next-generation firewall in an equipment rack. Please read the PA-7000 Series Hardware Reference Guide for safety information and detailed procedures for installing the hardware and for connecting power. For software configuration information, refer to https://www.paloaltonetworks.com/documentation. • To ensure safety, two or more people should work together to install the PA-7050 firewall into the rack; preferably using a mechanical equipment lift. • Verify that the intended installation site has proper air circulation and that the necessary AC or DC power source is in place. • Unpack the equipment and verify that all items are present. The PA-7050 firewall ships on two pallets: • The first pallet includes the PA-7050 chassis, installed power supplies (AC or DC), two fan trays, the air filter, two cable management brackets (one for a mid-mount rack install and one for a front-mount rack install), and the accessories kit. Note: To reduce the weight of the chassis to prepare for the rack installation, you can remove the power supplies. The accessories kit contains an Electrostatic Discharge (ESD) wrist strap, console cable, and Ethernet cable. • The second pallet includes the following: • Front slot cards, which include the Switch Management Card (SMC), Log Processing Card (LPC), and at least one Network Processing Card (NPC). • Four Advanced Mezzanine Cards (AMCs). An AMC is a carrier that holds the disk drive and connects the drive to the LPC. • Four AC cords or four DC power cables. • One 2-post grounding lug used for the AC and DC configurations (ground cable not included).
Mid-Mount or Front-Mount Installation
The PA-7050 firewall has removable rack-mount brackets on each side of the chassis that you use to install the chassis in a 19” 2-post (mid-mount) rack position or that you can move to install in a 19” 4-post (front-mount) rack position. For a mid-mount install (default), you can skip to Step 3—Rack Installation. For a front-mount install, perform the following steps: Note: The rack-mount brackets are in two sections on each side of the chassis: a front section and a back section. For quicker installation, use a power screwdriver. 1. Remove the six screws on each side of the chassis where the two brackets come together in the mid-mount position and then remove all 25 remaining screws that secure each bracket (two brackets on each side). There are a total of 112 bracket screws (56 on each side). Figure 1 and Figure 2 show how to swap the brackets, Figure 3 shows the mid-mount position, and Figure 4 shows the front-mount position. 2. Remove the front brackets (A and B) and rear brackets (C and D) from the chassis as shown in Figure 1 and store the rear brackets (not needed for a front-mount installation). 3. Swap the front brackets (A to B and B to A) and rotate the brackets 180 degrees so that the rack-mount screw holes are now on the front of the chassis. Use 25 screws to attach each front bracket to the chassis in the front position as shown in Figure 2.
Important: Wear the provided ESD strap when installing components or servicing the PA-7050 firewall. You also must have a #1 Phillips-head screwdriver available. A power screwdriver is recommended if you are moving the mounting brackets for a front-mount rack installation. How to Swap Brackets for 4-Post Install
Remove Back Brackets
3.
Rack Installation
1. (Optional) Install the provided cable management brackets before installing the chassis in the rack. The firewall ships with a mid-mount cable management bracket kit that you can attach to the front sides of the chassis using six screws (provided). There is also a front-mount cable bracket kit included that you can mount over the rack-mount brackets for a front-mount install. Refer to the PA-7000 Series Hardware Reference Guide for more details. 2. With help from at least one other person, lift the chassis and position it in the rack; preferably using a mechanical equipment lift. 3. Align the front mounting holes on each side of the chassis with the holes on the rack rail, ensuring that the chassis is level. 4. Attach the chassis rack brackets to the rack using rack-mount screws designed for your rack and tighten with a screwdriver. Install all four screws on each side of the chassis. Figure 3 shows the mid-mount position and Figure 4 shows the front-mount position.
4-post (front-mount) Install
2-post (mid-mount) Install
Front Brackets Swapped for 4-post Install
(Not needed for 4-post)
Bracket C
Bracket A
PA-705
0-FAN
PA-705
0-FAN
POWE
R
POWE
R
FAULT
FAULT
PA-7000
PA-7000 -BLANK
PA-70 50
2 PA-705
-BLANK
1
1
2
PA-705
0-FAN
POWE
1
1
Bracket D
PA-7000-BL ANK
1
2
PA-7050
R
3
PA-7000BLANK
FAULT
0-FAN
FAULT
3
FAULT
POWER
PA-705
POWE
R
FAULT
POWER
PA-7050FAN
PA-70 50
0-FAN
1
4
4
SMC
2
PA-70 50
2
SMC
PA-705
0-FAN
2
5
5
POWER FAULT
3
3
3
6
6
PA-7050FAN
1
POWER FAULT
4
SMC
4 SMC
3
4
SMC
7
7
2
1 4 SMC
5
5
5
8
2
8
5
3
6
6
6
3 6
4 SMC 4 SMC
7
7
7
7
5 5
8
8
8
8
6
6
7
7 8
8
Remove Front Brackets and Swap
Bracket B
Figure 2
Figure 1
4.
Figure 4
Figure 3
Front Slot Card Installation
5.
The PA-7050 firewall requires that you install a minimum of three cards in the front slots of the chassis. These cards include the following: The Switch Management Card (SMC) provides management connectivity to the chassis, HA ports, and the chassis status LEDs. The Log Processing Card (LPC) performs all log processing and log storage functions. The Network Processing Card (NPC) connects the firewall to a data network; you can have more than one NPC. The LPC and NPC use microswitches in the levers that power down the card when you release the inner levers. The LPC microswitches are on both sides of the card and are activated when pulling the inner lever. Avoid moving these levers when the chassis is powered on except when removing the card. Important: To avoid damaging the front slot cards, install them after you mount the chassis into the rack and with the chassis powered off. The SMC and LPC are hot-swappable; however, in a single chassis configuration, removing either card causes the chassis to power down. If the chassis is in a high availability (HA) configuration, a failover will occur if you remove the SMC or LPC.
5. Remove the LPC from the antistatic Screws located on both sides of the card used bag and then open both card levers. to secure the card to the chassis. Note: The LPC uses two levers on each side of the card as shown in Figure 6. You must pull both inner Inner lever used to levers toward you to unlock the unlock the outer lever. outer levers. 6. Install the LPC in the chassis by sliding it into slot 8 as shown in Figure 6 until it is about 1/4” from being fully inserted, ensuring that card levers are in the open position. Adjust the levers on each side of the card to align with chassis, push the card in, and then simultaneously Outer lever push the levers toward the chassis to close them and seat the card. Tighten the thumb screws (use a #1 Phillips-head screwdriver, if needed). 7. Remove each of the four AMCs from Figure 6 the antistatic bags and ensure that Card lever properly closed. the front handles are pulled out to Note: When opening the levers, you must release the the unlocked position. inner lever first to release the outer lever. 8. Insert each of the four AMCs into the empty LPC drive slots as shown in Figure 7. 9. After you install each AMC in an LPC slot, push the front handle in to lock the AMC to the LPC. Note: You can install the AMCs in any order during the initial installation. When you power on the firewall for the AMC and Drive first time, the system will format the drives and put them into two RAID 1 pairs. The two drives on the left are put into the first RAID 1 pair and the two drives on the right are put into a second RAID 1 pair.
You can power the PA-7050 firewall using either 220VAC or -48VDC power supplies but you use the same front power supply slots for both. Using DC power supplies disables the back AC inlets and switches, which you must cover with the provided cover plate. Before connecting power to the chassis for either AC or DC power, ensure that the chassis is properly grounded using the provided grounding lug. During normal operation, the chassis should have all four AC or DC power supplies connected and powered on and each pair of power supplies should be on different circuit breakers. When the chassis front slots are fully populated with all six NPCs, the chassis can temporarily operate on two AC or two DC power supplies.
1
PA-70 50
2
The SMC and the NPC use the same type of levers to install and remove the cards while the LPC uses a slightly different lever.
Important: This Quick Start does not cover all power connection procedures and safety warnings. Please refer to the PA-7000 Series Hardware Reference Guide for details.
3
1
4
SMC
Note: NPCs shipped after January 2015 use the same install/release lever mechanism as the LPC shown in Figure 6. For this type of NPC, operate the levers using the same procedure as the LPC. Also, be sure to cover all empty chassis slots with the provided blank slot covers Screws located on both sides of the card are Install an SMC and NPC used to secure the card to the chassis. to ensure proper airflow and to prevent objects from entering the front of the chassis. To install the SMC (and NPCs shipped in or before January 2015): 1. Ensure that the chassis is powered off and that no power cords or cables are connected. 2. Attach the provided ESD strap to your wrist and plug it into one of the ESD ports located on the front of the chassis. Three ESD ports are located along the bottom row of the chassis; you can use any of the three. 3. Remove the SMC from the antistatic bag and slide the release latches on both sides to unlock the card levers (Figure 5). Slide the card into slot 4, ensuring that card levers are in the open position. When the card is about 1/4” from being fully inserted, adjust the levers to align with the chassis and then close both levers simultaneously to seat the card. Tighten thumb screws (use a #1 Phillips-head screwdriver if needed). 4. Repeat the above steps for any NPCs shipped in or before January 2015. You can install up to six NPCs using slots 1, 2, 3, 5, 6 and/or 7. If you have an NPC that was shipped after January 2015, operate the levers as described in the LPC section that follows.
Release latch used to release the card levers.
1
PA-70 50
2
3
1 4
SMC
2 5
3 6 PA-7050-S
MC
4
SMC
7
5 8
ALM F
6
P
7 PA-7000-2
0G-NPC
8
Connect AC or DC Power
2
5
3
6
4
SMC
7
5
8
6
Where to Go Next
7
8
• To start configuring your PA-7050 firewall, connect a management computer to the management (MGT) port on the firewall using a standard Ethernet cable. Then, from a web browser, navigate to https://192.168.1.1. You can also connect to the serial (CONSOLE) port using these settings: data rate: 9600; data bits: 8; parity: None; stop bits: 1; flow control: None. • To learn about configuring Palo Alto Networks firewalls, go to the Technical Documentation portal at https://www.paloaltonetworks.com/documentation. • To learn about PA-7050 hardware specifications and detailed installation procedures, refer to the PA-7000 Series Hardware Reference Guide.
OWER
ACTIV
ACTIV
ITY
FAULT
PA-700 -AMC-1 TB
ITY
FAULT
Figure 5
POWE
R
PA-700 -AMC-1 TB
Card levers used to install or remove the NPC or SMC. Note: You must slide both release latches up to release the card levers. Push to lock and pull to unlock.
© 2014–2015 Palo Alto Networks, Inc. Palo Alto Networks and PAN-OS are trademarks of Palo Alto Networks, Inc
Figure 7
Revised August 18, 2015 Part Number 810-000183-00D
