PaloAlto Networks PA-220R User manual

PA-220R NEXT-GEN FIREWALL QUICK START GUIDE
1Before You Begin
Use this guide to install and begin setting up your Palo Alto Networks®
PA-220R next-generation firewall. Refer to the PA-220R Next-Gen Firewall Hardware
Reference at hps://www.paloaltonetworks.com/documentaon/plaorms for safety
information, specifications, and more detailed procedures for installing your firewall.
• Verify that the installation site has a DC power source.
• Unpack the equipment and verify that you received the following items:
Install the Firewall
There are four ways to install the PA-220R firewall:
• On a flat surface
• On a DIN rail
• On a wall
• In a 19-inch equipment rack
The PA-220R firewall ships with rubber pads (to install the firewall on a
flat surface) and a DIN rail bracket (to install the firewall on a DIN rail). The
wall-mount kit and 19-inch equipment-rack kit are optional and purchased
separately—refer to the PA-220R Next-Gen Firewall Hardware Reference for
the wall-mount and rack-kit installation procedures.
2
2
Install on a Flat Surface
Attach the rubber pads to the recessed
circles on the bottom of the firewall
(Figure 1) and place the firewall securely
on a stable flat surface (right-side up).
Install on a DIN Rail
You can attach the DIN bracket to either the back or to the bottom surface of the
firewall. Choose the option that best fits the installation site.
1. Attach a 35mm DIN rail (not included) to the wall where you will install the firewall.
2. Attach the DIN bracket to the back (Figure 2) or bottom surface (Figure 4)of the
firewall (use the DIN bracket captive screws). Ensure that the spring-loaded clips on
the DIN bracket are oriented so that they will grasp the bottom of the DIN rail.
3. Engage the bottom of the DIN bracket (with spring-loaded clips) with the bottom
part of the DIN rail. Push the firewall and bracket upward to fully compress the
spring-loaded clips against the rail and then pivot the firewall toward the wall so
that the top clips on the bracket will grasp the top of the rail as you carefully lower
the firewall to decompress the clips and secure the firewall on the DIN rail (Figure 3
or Figure 5).
Qty Descripon
1PA-220R next-generaon rewall.
1Standard Type-A USB to micro USB console cable.
1DB-9 female to RJ-45 male console cable.
1Shielded RJ-45 CAT6 Ethernet cable for management (MGT) port access.
1DC terminal block.
4Rubber pads for a desktop installaon.
1DIN bracket for a DIN rail installaon.
1End User License Agreement (EULA).
1China Restricon of Hazardous Substances (RoHS) declaraon.
paloaltonetworks.com/documentaon | © 2018 Palo Alto Networks, Inc. | Part Number: 810-000291-00B | Page 1
DIN Bracket
Spring-loaded
DIN Bracket Clip
s
Capve Screw
Capve Screw
Capve Screw
Spring-loaded
DIN Bracket Clip
s
DIN Bracket
Capve Screw
DIN Rail
Spring-loaded
DIN Bracket Clips
Wall
DIN Rail
Spring-loaded
DIN Bracket Clips
Wall
Figure 2
Install DIN Bracket on Back of Firewall
Figure 4
Install DIN Bracket on Bottom of Firewall
Figure 3
Install Firewall on DIN Rail (Back Mount)
Figure 5
Install Firewall on DIN Rail (Bottom Mount)
Figure 1
Install Rubber Pads

Ground
Cable (Opon 1)
Ground
Cable (Opon 2)
DC Power
Cables
DC Terminal
Block
Terminal Screws
PA-220R NEXT-GEN FIREWALL QUICK START GUIDE (CONTINUED)
4
Where to Go Next
• To learn more about the firewall, refer to the PA-220R Next-Gen Firewall
Hardware Reference:
https://www.paloaltonetworks.com/documentation/platforms.
• To learn how to configure Palo Alto Networks firewalls, go to the Technical
Documentation portal: https://www.paloaltonetworks.com/documentation.
(Use the Getting Started information in the PAN-OS Administrator’s Guide
for initial configuration tasks.)
• To contact support, go to:
https://www.paloaltonetworks.com/company/contact-support.
Connect to the Management Interface
1. Connect the RJ-45 Ethernet cable from the RJ-45 port on your computer
to the mangaement (MGT) port on the firewall.
2. Change the IP address on your computer to an address in the
192.168.1.0/24 network, such as 192.168.1.2.
3. From a web browser, go to https://192.168.1.1.
4. When prompted, log in to the web interface using the default username
and password (admin/admin).
Figure 7
Connect to the Management (MGT) Port
(Optional) If you are not able to connect to the web interface, check the status
of the firewall by connecting to the micro USB or RJ-45 console port. The con-
sole connection provides access to firewall boot messages, maintenance mode,
and the command line interface (CLI). For information about downloading the
micro USB Windows driver and instructions on how to connect using a Mac or
Linux computer, refer to hps://www.paloaltonetworks.com/documentaon/
misc/micro-usb-console.
2
3Power On the Firewall
The PA-220R firewall requires a 12-24VDC 1.25A power source. You can connect a
second DC power source for redundancy.
Due to the various cable lengths required for a given installation site, DC power
and ground cables are not included.
Power off the DC power source before connecting the DC terminal block to the
DC power inputs on the firewall.
1. Power off the DC power source that will power the firewall.
2. Connect one end of a 16-22AWG ground cable to the firewall and connect the
other end to earth ground. There are three ground points on the firewall: one
screw-on ground point above the DC terminal block and two ground inputs on the
DC terminal block (last two inputs on the right); use only one of the three ground
points.
• Screw-on ground point (Option 1)—Crimp a 6-32 ring lug (not included) to the end
of the ground cable that will connect to the firewall. Remove the ground screw
from the ground point and use the screw to attach the ring lug to the firewall
(Figure 6). Do not torque the screw by more than 6 in-lbs.
• DC terminal block ground inputs (Option 2)—Strip 1/4” of cable insulation off the
end of the ground cable that will connect to the terminal block, insert the cable
into one of the ground input terminals, and then secure the cable by turning the
flat-head terminal screw clockwise (Figure 6). Do not torque the terminal screws
by more than 2 in-lbs.
3. Strip 1/4” of cable insulation off the ends of two 16AWG DC power cables; one
cable for A+ and one cable for A-.
4. Insert the positive DC cable into terminal A+ and secure the cable by turning the
flat-head terminal screw clockwise. Insert the negative cable into terminal A- and
secure the cable using the terminal screw. Do not torque the terminal screws by
more than 2 in-lbs.
5. (Optional) Repeat steps 3 and 4
to connect a second DC power
source to terminals B+ and B-.
6. Plug the cabled DC terminal
block into the DC inputs
on the firewall. Secure the
terminal block by turning
the two screws on each
side of the block clockwise.
7. Power on the DC power
source to power on the
firewall.
Figure 6
DC Power and
Ground Connections
paloaltonetworks.com/documentaon | © 2018 Palo Alto Networks, Inc. | Part Number: 810-000291-00B | Page 2