PaloAlto Networks PA-7080 Quick start guide

Brand: PaloAlto Networks

Model: PA-7080

Type: Quick start guide

PA-7080 NEXT-GEN FIREWALL QUICK START GUIDE

docs.paloaltonetworks.com

Before You Begin

Use this document to install and begin setting up your Palo Alto Networks PA-7080 firewall. Refer to the PA-7000 Series Next-Gen

Firewall Hardware Reference at https://docs.paloaltonetworks.com/hardware for safety information, specifications, and more detailed

procedures for installing the firewall.

• To ensure safety, two or more people should work together to install the PA-7080 firewall into the rack, preferably using a mechanical

equipment lift.

• Verify that the installation site has adequate air circulation and AC or DC power.

• Have a #1 and #2 Phillips-head torque driver available.

• Wear the provided ESD strap when installing components or servicing the PA-7080 firewall.

• Unpack the equipment and verify that you received all items. The PA-7080 firewall ships on two pallets:

Prepare the Chassis for Installaon

You can install the PA-7080 firewall in a 19” equipment rack in a front-mount

or mid-mount rack position. The chassis ships with the front-mount brackets

and mid-mount brackets pre-installed, so you must remove one set of brack-

ets to prepare the chassis for the rack installation. The rack-mount brackets

are secured to the chassis using 10-32 screws torqued from 20 to 25 in-lbs.

Prepare for a Front-Mount Rack Install:

1. Use a #1 Phillips-head screwdriver to remove 16

screws that secure the right side mid-mount brackets

to the chassis and then do the same for the left side

mid-mount bracket as shown in Figure 1. Leave the

front-mount brackets in place.

2. Remove both mid-mount brackets and store for future

use.

3. Continue to section 3 for information on installing the

chassis in an equipment rack.

The second pallet includes:

• Front slot cards (Switch Management Card (SMC), Logging Card (LPC

or LFC), and at least one Network Processing Card (NPC). You can

install up to 10 NPCs.

• Four Advanced Mezzanine Cards (AMCs). An AMC is a carrier that

holds the disk drive and connects the drive to the Log Processing Card

(LPC).

AMC modules are not supplied with the Log Forwarding Card

(LFC).

• Four AC cords (for AC configuration). Additional power cords may be

supplied based on order.

• Eight Panduit (P/N LCD6-14A-L) two-hole compression lugs (DC

configuration) used to connect 6 American Wire Gauge (AWG) cabling

to the DC power modules (power cables not included). The stud holes

are 1/4” with .63” hole spacing.

• One two-post grounding lug for 6-AWG cabling (ground cable not

included). You can install the grounding lug in a vertical or horizontal

position. Torque the lug nut from 50-70 in-lbs.

The first pallet includes:

• PA-7080 chassis

• Four power supplies (AC or DC), installed

To reduce the weight of the chassis to prepare for

the rack installation, temporarily remove the

power supplies.

• Two fan trays, installed

• Air filter, installed

• Two cable management brackets (upper and lower)

• Accessories kit (Electrostatic Discharge (ESD) wrist strap,

console cable, and Ethernet cable)

3Install the Firewall

The front-mount and mid-mount rack installations are very similar and both procedures are covered in this section.

1. Ensure that the chassis rack-mount brackets are in the correct position as described in step 2.

2. With help from at least one other person, lift the chassis and position it in the rack, preferably using a mechanical equipment

lift.

3. Attach the chassis rack brackets to the rack using rack-mount screws designed for your rack and tighten with a screwdriver.

Install all 8 rack-mount screws on each side of the chassis. Figure 3 shows the mid-mount position and Figure 4 shows the

front-mount position.

4. (Optional) Install the upper and lower cable management brackets using 6-32 screws (provided) torqued from 7 to 9 in-lbs as

shown in Figure 5. Secure the top bracket to the chassis with 8 screws and the bottom bracket with 4 screws.

5. Continue to section 4 for information on installing the required front slot cards.

Figure 2

Remove Front-Mount

Brackets

Page 1 of 2

Prepare for a Mid-Mount Rack Install:

1. Use a #1 Phillips-head screwdriver to remove 8 screws that secure the right

side front-mount bracket to the chassis and then do the same for the left

side bracket as shown in Figure 2. Leave the mid-mount brackets in place.

2. Remove both front-mount brackets and store for future use.

3. Continue to section 3 for information on installing the chassis in an

equipment rack.

Figure 3

Mid-Mount Position

Figure 4

Front-Mount Position

Figure 5

Cable Management

Brackets

Figure 1

Remove Mid-

Mount Brackets

PA-7080 NEXT-GEN FIREWALL QUICK START GUIDE (CONTINUED)

Where to Go Next

• To learn more about the firewall, refer to the PA-7000 Series Hardware Reference Guide:

https://docs.paloaltonetworks.com/hardware.

• To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:

https://docs.paloaltonetworks.com.

(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)

• To contact support, go to:

https://www.paloaltonetworks.com/company/contact-support.

Connect to the Management Interface

1. Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the

firewall.

2. Change the IP address on your computer to an address in the

192.168.1.0/24 network, such as 192.168.1.2.

3. From a web browser, go to https://192.168.1.1.

4. When prompted, log in to the web interface using the default

username and password (admin/admin).

(Optional) If you are not able to connect to the management

web interface, you can check the status of the firewall by

connecting to the console port using the DB-9 to RJ-45 serial

cable (provided) and terminal emulation software, or by

using the micro USB port if you have PA-7080-SMC-B (refer

to https://docs.paloaltonetworks.com/resources/micro-usb-

console-port). The console connection provides access to

firewall boot messages, maintenance mode, and the com-

mand line interface (CLI).

Front Slot Card Installaon

The PA-7080 firewall requires that you install a minimum of three cards in the front slots of the chassis. These cards include the

following: The Switch Management Card (SMC), the Logging Card, and the Network Processing Card (NPC). The front card slots

are numbered from 1-12, starting with slot 1 on the left side while facing the chassis.

The NPCs are hot-swappable and by following the proper procedures, you can remove and install them with the chas-

sis powered on. Although the SMC and logging card have protection to avoid damage if they are removed, they are not

designed to be hot-swapped. The protection system for all front slot cards are contained in the release levers. If you open

the release levers when the chassis is powered, built-in micro switches in the levers cause the card to power down to

avoid damage when the card is removed. Avoid moving these levers unless you intend to remove the card. For details on

replacing front slot cards, refer to the “Service” section of the PA-7000 Series Hardware Reference Guide.

1. Remove the SMC from the antistatic bag and slide it into slot 6 until

it is about 1/2” from being fully inserted.

2. Open the levers on each side of the card by pulling them toward you

simultaneously until they are fully open as shown in Figure 6. Notice

that during this process, the ball studs that are used to secure the

levers to the card disengage.

3. Adjust the levers to align with the chassis and simultaneously close

both levers to seat the card in place. Push the card levers inward

toward the center of the card and apply enough pressure to pop the

ball studs into place.

4. Tighten the thumb screws on each side and then use a #1 Phillips-

head torque driver and torque from 4 to 5 in-lbs.

Page 2 of 2

Installation Notes

• Attach the provided ESD wrist strap around your wrist and then remove the alligator clip from the other end. Plug the banana

clip connector into one of the ESD ports on the front of the chassis. You can use either of the two ESD ports located just above

the air-intake vent and air filter.

• Install the front slot cards after you install the chassis in the rack and do not power on the chassis until all cards are installed. This

reduces the weight of the chassis and avoids the risk of damaging the cards during the rack mount process.

• After installing the required cards, install a blank slot cover over all empty NPC slots to prevent objects from entering the front

of the chassis and preserve proper cooling.

Install the Switch Management Card (SMC)

The SMC provides management connectivity to the chassis and HA

ports, and contains the chassis status LEDS. The SMC must be installed

in slot 6.

1. Remove the logging card from the antistatic bag and slide it into slot 7

until it is about 1/2” from being fully inserted.

2. Open the double levers on each side of the card by first releasing the

inner levers by pulling them toward you, and then do the same for the

outer levers as shown in Figure 7.

3. Adjust the levers to align with the chassis and close both levers

simultaneously to seat the card in place.

4. Tighten the thumb screws on each side and then use a #1 Phillips-head

torque driver and torque from 4 to 5 in-lbs.

Steps 5-6 apply only to the LPC. The LFC does not use AMC

modules, so you can skip these steps if installing an LFC.

5. Prepare the four AMCs for installation in the LPC by removing them

from the antistatic bags and ensuring that the front handle on each

AMC is pulled out to the unlocked position.

6. Insert the first AMC into the top logging card slot and push the handle

inward until it stops to lock it to the LPC as shown in Figure 7. Do the

same for the other three AMCs. During the initial installation, you can

insert the AMCs in any order.

Install the Logging Card (LPC or LFC)

The logging card performs log processing and log storage functions (de-

pending on the model) and must be installed in slot 7. Figure 6

SMC Install

AMC

Figure 7

LPC and AMC

Install a Network Processing Card (NPC)

The NPC provides data network connectivity for the firewall and you must have a minimum of one NPC installed. You can install a

total of 10 NPCs in the following slots: 1, 2, 3, 4, 5, 8, 9, 10, 11, and/or 12.

To take advantage of the increased EDL capacity introduced in PAN-

OS 9.0, the firewall must have all high-capacity 100G NPCs installed.

If a lower capacity NPC is installed, such as the PA-7000 20GXM, the

EDL capacity uses the capabilities of the lower capacity NPC.

Figure 8 shows the NPC installation. Refer to the “PA-7000 NPC Component

Descriptions” sections in the PA-7000 Series Hardware Reference Guide for

details on the available NPCs that you can install in a PA-7080 firewall.

1. Remove the NPC from the antistatic bag and slide the card into an

available NPC slot until it is about 1/2” from being fully inserted.

2. Open the double levers on each side of the card by first pulling the inner

levers toward you to release the outer levers as shown in Figure 8.

3. Adjust the levers to align with the chassis and close both levers

simultaneously to seat the card to the chassis.

4. Tighten the thumb screws on each side of the card and then use a #1

Phillips-head torque driver and torque from 4 to 5 in-lbs.

Figure 8

NPC Install

PaloAlto Networks PA-7080 Quick start guide

Brand: PaloAlto Networks

Model: PA-7080

Type: Quick start guide

Download PDF

report

PaloAlto Networks PA-7080 Quick start guide

PaloAlto Networks PA-7080 Quick start guide

Related papers

Other documents