PaloAlto Networks PA-4000 Series Operating and maintenance manual

PA-4000 Series 
Hardware Reference Guide
4/7/14 Final Review Draft - Palo Alto Networks
COMPANY CONFIDENTIAL

Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2011 Palo Alto Networks. All rights reserved.
Palo Alto Networks and PAN-OS are trademarks of Palo Alto Networks, Inc. All other trademarks are the property
of their respective owners.
Part number: 810-000002-00H

Palo Alto Networks Table of Contents • 3
April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Organization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Typographical Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Notes, Cautions, and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Obtaining More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 1 
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 2 
Installing the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Equipment Rack Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Connecting Cables to the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Connecting Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 3 
Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Cautions and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Replacing a Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Interpreting the Device LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Interpreting the Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Chapter 4 
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Table of Contents

4• Table of Contents Palo Alto Networks
Interface Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Chapter 5 
Compliance Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Palo Alto Networks Preface • 5
April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL
Preface
This preface contains the following sections:
•“About This Guide” in the next section
•“Organization” on page 5
•“Typographical Conventions” on page 6
•“Notes, Cautions, and Warnings” on page 6
•“Related Documentation” on page 7
•“Obtaining More Information” on page 7
•“Technical Support” on page 7
About This Guide
This guide describes the PA-4000 Series firewall hardware, provides instructions on installing the
hardware and performing maintenance procedures, and provides product specifications. This guide is
intended for system administrators responsible for installing and maintaining the PA-4000 Series.
All PA-4000 Series run PAN-OS, a purpose-built operating system with extensive functionality. Please
refer to the PAN-OS Command Line Interface Reference Guide and Palo Alto Networks Administrator’s
Guide for information on using PAN-OS.
Organization
This guide is organized as follows:
•Chapter 1, “Overview”—Describes the features of the front and back panel of the 
PA-4000 Series.
•Chapter 2, “Installing the Hardware”—Describes how to install the PA-4000 Series hardware.
•Chapter 3, “Maintaining the Hardware”—Describes how to replace power supplies, interpret
LEDs, and troubleshoot hardware problems.
•Chapter 4, “Specifications”—Provides specifications for the PA-4000 Series.
•Chapter 5, “Compliance Statement”—Presents the compliance statement for the Voluntary Control
Council for Interference by Information Technology Equipment (VCCI).

Typographical Conventions
6• Preface Palo Alto Networks
Typographical Conventions
This guide uses the following typographical conventions for special terms and instructions.
Notes, Cautions, and Warnings
This guide uses the following symbols for notes, cautions, and warnings.
Convention Meaning Example
boldface Names of commands,
keywords, and
selectable items in the
web interface
Use the configure command to enter Configuration mode.
italics Name of variables,
files, configuration
elements, directories,
or Uniform Resource
Locators (URLs)
The address of the Palo Alto Networks home page is 
http://www.paloaltonetworks.com.
element2 is a required variable for the move command.
courier
font Commandsyntax,code examples, and screen
output
The show ntp command yields this output:
admin@PA-HDF> show ntp
NTP state:
NTP synched to 10.44.2.10
NTP server 10.43.2.10 connected: True
NTP server 10.44.2.10 connected: True
courier
bold font Text that you enter at the command prompt Enter the following command to exit from the current PAN-OS CLI level:
# exit
Symbol Description
NOTE
Indicates helpful suggestions or supplementary information.
CAUTION
Indicates information about which the reader should be careful to avoid data loss or
equipment failure.
WARNING
Indicates potential danger that could involve bodily injury.

Palo Alto Networks Preface • 7
Related Documentation
Related Documentation
The following additional documentation is provided with the firewall:
•PA-4000 Series Quick Start
•Palo Alto Networks License and Warranty
•You can find other related documentation in the Technical Documentation section at
http://support.paloaltonetworks.com.
Obtaining More Information
To obtain more information about the PA-4000 Series, refer to:
•Palo Alto Networks website—Go to http://www.paloaltonetworks.com.
•Online help—Click Help in the upper right corner of the GUI to access the online help system.
Technical Support
For technical support, use the following methods:
•Go to http://support.paloaltonetworks.com.
•Call 1-866-898-9087 (U.S, Canada, and Mexico).
•Email us at: [email protected]

Technical Support
8• Preface Palo Alto Networks

Palo Alto Networks Overview • 9
April 7, 2014 - Palo Alto Networks COMPANY CONFIDENTIAL
Chapter 1 
Overview
This chapter describes the features of the front and back panel of the PA-4000 Series firewall. For more
information, refer to the following topics:
•“Front Panel” in the next section
•“Back Panel” on page 12

Front Panel
10 • Overview Palo Alto Networks
Front Panel
Figure 1 shows the front panel of the PA-4050 and PA-4020 and Table 1 describes the front panel
features.
Figure 1. PA-4050 and PA-4020 Front Panel
Table 1. PA-4050 and PA-4020 Front Panel Features
Item Description
Ethernet ports 16 RJ-45 10/100/1000 ports for network traffic.
SFP ports Eight Small Form-Factor Pluggable (SFP) ports for network traffic.
Management ports One RJ-45 port to access the device management interfaces through an
Ethernet interface.
Management console port One DB-9 port for connecting a serial console.
High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and synchronization.
USB ports Two USB ports for future use.
LED dashboard Eight LEDs indicating system status. Refer to “Interpreting the Device
LEDs” on page 18 for LED definitions.
1357 9111315 17192123
2 4 6 8 10 12 14 16 18 20 22 24 HA2
POWER
STATUS
HA
TEMP
ALARM
FAN S
PWR 1
PWR 2
HA1MGTCONSOLEUSB 1/2
USB
ports
Ethernet
ports
Management
console port
Management
port
SFP
ports
HA
port 2
HA
port 1
LEDs