PaloAlto Networks PA-3020 Operating and maintenance manual

PA-3000 Series
Hardware Reference Guide

Contact Information
http://www.paloaltonetworks.com/contact/contact/
About this Guide
This guide describes the PA-3000 Series (PA-3020, PA-3050, and PA-3060) firewall hardware,
provides instructions on installing the hardware, describes how to perform maintenance procedures, and
provides product specifications. This guide is intended for system administrators responsible for
installing and maintaining the PA-3000 Series firewall.
All PA-3000 Series devices run PAN-OS, a purpose-built operating system with extensive
functionality. For additional information, refer to the following resources:
•For information on the additional capabilities and for instructions on configuring the features on
the firewall, refer to https://www.paloaltonetworks.com/documentation.
•For access to the knowledge base, complete documentation set, discussion forums, and videos,
refer to https://live.paloaltonetworks.com.
•For contacting support, for information on the support programs, or to manage your account or
devices, refer to https://support.paloaltonetworks.com.
•For the latest release notes, go to the software downloads page at
https://support.paloaltonetworks.com/Updates/SoftwareUpdates.
•For capacity and performance information for all Palo Alto Networks firewalls, refer to 
https://www.paloaltonetworks.com/products/product-selection.html.
To provide feedback on the documentation, please write to us at:
[e-mail].
Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2013 Palo Alto Networks. All rights reserved.
Palo Alto Networks and PAN-OS are trademarks of Palo Alto Networks, Inc.
Part number: 810-000112-00D

Palo Alto Networks Table of Contents • 3
March 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL
Chapter 1 
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
PA-3020 and PA-3050 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
PA-3060 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
PA-3020 and PA-3050 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
PA-3060 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 2 
Install the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Tamper Proof Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Equipment Rack Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Connect Cables to the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Connect Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 3 
Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Cautions and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Interpret the Device LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Interpret the Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Replace a PA-3060 Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Chapter 4 
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Interface Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Table of Contents

4• Table of Contents Palo Alto Networks
Chapter 5 
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
VCCI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
BSMI EMC Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Palo Alto Networks Overview • 5
March 17, 2015 - Palo Alto Networks COMPANY CONFIDENTIAL
Chapter 1 
Overview
This section describes the front and back panels of the PA-3000 Series (PA-3020, PA-3050, and
PA-3060) firewalls:
•“Front Panel” on page 6
•“Back Panel” on page 8
Note: The port configuration on the PA-3020 and PA-3050 firewalls is
identical; the differences between the devices are based on performance and
capacity. The PA-3060 firewall differs from other devices in the series in
port configuration, power supply configuration, and airflow.

Front Panel
6• Overview Palo Alto Networks
Front Panel
This section describes the front panel of the PA-3000 Series firewalls.
•“PA-3020 and PA-3050 Front Panel” on page 6
•“PA-3060 Front Panel” on page 7
PA-3020 and PA-3050 Front Panel
Figure 1 shows the front panel of the PA-3020 and PA-3050 firewalls and Table 1 describes the
front-panel features.
Figure 1. PA-3020 and PA-3050 Front Panel
Table 1. PA-3020 and PA-3050 Front-Panel Features
Item Description
Ethernet ports Twelve RJ-45 10/100/1000 ports for network traffic.
SFP ports Eight Small Form-Factor Pluggable (SFP) 1 Gbit/s ports for network
traffic.
High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and
synchronization.
Management port One RJ-45 port to access the device management interfaces through
an Ethernet interface.
Console port One RJ-45 port for connecting a serial console.
USB port One USB port for future use.
Status LEDs Six LEDs indicating system status. Refer to “Interpret the Device
LEDs” on page 18 for LED definitions.
MGT
HA1 HA2
Status
LEDs
Ethernet
ports
SFP
ports
USB
port
Management
port
Console
port
HA
ports
PA-3050

Palo Alto Networks Overview • 7
Front Panel
PA-3060 Front Panel
This section describes the front panel of the PA-3000 Series firewalls.
Figure 2 shows the front panel of the PA-3060 firewall and Table 2 describes the front-panel
features.
Figure 2. PA-3060 Font Panel
Table 2. PA-3060 Front-Panel Features
Item Description
Ethernet ports Eight RJ-45 10/100/1000 ports for network traffic.
SFP ports Eight Small Form-Factor Pluggable (SFP) 1 Gbit/s ports for
network traffic.
SFP+ ports Two Enhanced Small Form-Factor Pluggable Plus (SFP+)
10 Gbit/s ports for network traffic.
High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and
synchronization.
Management port One RJ-45 port to access the device management interfaces through
an Ethernet interface.
Console port One RJ-45 port for connecting a serial console.
USB port One USB port for future use.
Status LEDs Six LEDs indicating system status. Refer to “Interpret the Device
LEDs” on page 18 for LED definitions.
Ethernet
ports
SFP
ports
HA
ports
Management
port
Console
port
USB
port
Status
LEDs
SFP+
ports

Back Panel
8• Overview Palo Alto Networks
Back Panel
This section describes the back panel of the PA-3000 Series firewalls.
•“PA-3020 and PA-3050 Front Panel” on page 6
•“PA-3060 Front Panel” on page 7
PA-3020 and PA-3050 Back Panel
Figure 3 shows the back panel of the PA-3020 and PA-3050 firewalls and Table 3 describes the
back-panel features.
Figure 3. PA-3020 and PA-3050 Back Panel
Table 3. PA-3020 and PA-3050 Back-Panel Features
Item Description
AC power inlet and power
supply
Power inlet for device power. 
Note: The power supply is not customer serviceable.
Grounding lug To ground the system, use a grounding wire of at least 14 American
Wire Gauge (AWG). Attach the 14 AWG wire to an agency-
approved crimp connector (Tyco 34120 or certified Lug), crimped
with the proper crimping tool and attached to the protective
grounding lug. Use a size #8-32 nut and a star washer (supplied) to
secure the grounding lug to the chassis and connect he other end to
the building ground. Toque the nut to 15 in-lbs. Do not over tighten.
AC Power
Inlet
Grounding
Lug
Power Supply
Exhaust

Palo Alto Networks Overview • 9
Back Panel
PA-3060 Back Panel
Figure 4 shows the back panel of the PA-3060 firewall and Table 4 describes the back-panel
features.
Figure 4. PA-3060 Back Panel
Table 4. PA-3060 Back-Panel Features
Item Description
Power supplies Two redundant, hot-swappable power supplies.
Grounding lug To ground the system, use a grounding wire of at least 14 American
Wire Gauge (AWG). Attach the 14 AWG wire to an agency-
approved crimp connector (Tyco 34120 or certified Lug), crimped
with the proper crimping tool and attached to the protective
grounding lug. Use a size #8-32 nut and a star washer (supplied) to
secure the grounding lug to the chassis and connect he other end to
the building ground. Toque the nut to 15 in-lbs. Do not over tighten.
Exhaust fans Four exhaust fans that provide front-to-back ventilation and cooling
for the device.
Power Supplies
Grounding Lug
Exhaust Fans

Back Panel
10 • Overview Palo Alto Networks