PaloAlto Networks PA-7050 PAN-AIRDUCT User manual

PA-7050 NEXT-GEN FIREWALL QUICK START GUIDE
docs.paloaltonetworks.com
1
2Mid-Mount or Front-Mount Installaon
The PA-7050 firewall has removable rack-mount brackets on each side of the chassis that you use to install the chassis in
a 19” rack. You can install the firewall in a mid-mount position (default position) or you can move the brackets to install
the firewall in a front-mount position. For a mid-mount install, you can skip to section 3—Rack Installation.
The rack-mount brackets are in two sections on each side of the chassis: a front section and a back section.
To install the firewall in a front-mount position:
1. Remove the 6 screws on each side of the chassis where the 2 brackets come together in the mid-mount position and
then remove all 25 remaining screws that secure each bracket (2 brackets on each side). There are a total of 112
bracket screws (56 on each side).
2. Remove the front brackets (A and B) and rear brackets (C and D) from the chassis as shown in Figure 1 and store the
rear brackets (not required for a front-mount installation).
3. Swap the front brackets (A to B and B to A) and rotate the brackets 180 degrees so that the rack-mount screw holes
are now on the front of the chassis. Use 25 screws to attach each front bracket to the chassis in the front position as
shown in Figure 2.
Before You Begin
Use this document to install and begin setting up your Palo Alto Networks PA-7050 firewall. Refer to the PA-7000
Series Next-Gen Firewall Hardware Reference at https://docs.paloaltonetworks.com/hardware for safety information,
specifications, and more detailed procedures for installing the firewall.
• To ensure safety, two or more people should work together to install the PA-7050 firewall into the rack, preferably
using a mechanical equipment lift.
• Verify that the installation site has adequate air circulation and AC or DC power.
• Have a #1 and #2 Phillips-head torque driver available. Use the #1 Phillips-head bit to attach the rack-mount brackets
to the firewall and use the #2 bit to secure the rack-mount brackets to the equipment rack posts. A power screwdriver
is recommended if you are moving the mounting brackets for a front-mount rack installation.
• Wear the provided ESD strap when installing components or servicing the PA-7050 firewall.
• Unpack the equipment and verify that you received all items. The PA-7050 firewall ships on two pallets:
The second pallet includes:
• Front slot cards (Switch Management Card (SMC), a Logging Card (either LPC or LFC), at least one Network
Processing Card (NPC), and an appropriate number of blank panels to fill the chassis.
• Four Advanced Mezzanine Cards (AMCs). An AMC is a carrier that holds a disk drive and connects the drive to the
Log Processing Card (LPC).
AMC modules are not supplied with the Log Forwarding Card (LFC).
• Four AC cords or four DC power cables
• One 2-post grounding lug used for the AC and DC configurations (ground cable not included).
The first pallet includes:
• PA-7050 chassis
• Four pre-installed power supplies (AC or DC).
To reduce the weight of the chassis to prepare for the rack installation, temporarily remove the power
supplies.
• Two fan trays (next-generation fan trays include the air filter in right fan tray)
• Two cable management brackets (one for a mid-mount rack install and one for a front-mount rack install)
• Accessories kit (Electrostatic Discharge (ESD) wrist strap, console cable, and Ethernet cable)
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
POWER
PA-7050-FAN
FAULT
POWER
PA-7050-FAN
FAULT
PA-7000-BLANK
PA-7050
SMC SMC
Remove Back Brackets
(Not needed for front mount)
Remove Front Brackets
and Swap
Bracket A
Bracket B
Bracket C
Bracket D
Swap Brackets for Front-Mount Install
Figure 1
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
POWER
PA-7050-FAN
FAULT
POWER
PA-7050-FAN
FAULT
PA-7000-BLANK
PA-7050
SMC
SMC
Front Brackets Swapped for Front-Mount Install
Figure 2
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
POWER
PA-7050-FAN
FAULT
POWER
PA-7050-FAN
FAULT
PA-7000-BLANK
PA-7050
SMC
SMC
Mid-mount Install
Figure 3
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
POWER
PA-7050-FAN
FAULT
POWER
PA-7050-FAN
FAULT
PA-7000-BLANK
PA-7050
SMC
SMC
Front-mount Install
Figure 4
3Rack Installaon
1. (Optional) Install the provided cable management brackets before installing the chassis in the rack. The firewall ships with a
mid-mount cable management bracket kit that you can attach to the front sides of the chassis using 6 screws (provided). There
is also a front-mount cable bracket kit included that you can mount over the rack-mount brackets for a front-mount install.
Refer to the PA-7000 Series Hardware Reference Guide for more details.
2. With help from at least one other person, lift the chassis and position it in the rack, preferably using a mechanical equipment
lift.
3. Align the front mounting holes on each side of the chassis with the holes on the rack rail, ensuring that the chassis is level.
4. Attach the chassis rack brackets to the rack using rack-mount screws designed for your rack and tighten with a screwdriver.
Install all 4 screws on each side of the chassis. Figure 3 shows the mid-mount position and Figure 4 shows the front-mount
position.
Page 1 of 2

PA-7050 NEXT-GEN FIREWALL QUICK START GUIDE (CONTINUED)
docs.paloaltonetworks.com | © 2018 | Palo Alto Networks, Inc. | Part Number: 810-000183-00H
4
5
Where to Go Next
• To learn more about the firewall, refer to the PA-7000 Series Hardware Reference Guide:
https://docs.paloaltonetworks.com/hardware.
• To learn how to configure Palo Alto Networks firewalls, go to the Technical Documentation portal:
https://docs.paloaltonetworks.com.
(Use the Getting Started information in the PAN-OS Administrator’s Guide for initial configuration tasks.)
• To contact support, go to:
https://www.paloaltonetworks.com/company/contact-support.
Connect to the Management Interface
1. Connect the standard RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall.
2. Change the IP address on your computer to an address in the 192.168.1.0/24 network, such as 192.168.1.2.
3. From a web browser, go to https://192.168.1.1.
4. When prompted, log in to the web interface using the default username and password (admin/admin).
(Optional) If you are not able to connect to the management web interface, you can check the status of the firewall by
connecting to the console port using the DB-9 to RJ-45 serial cable (provided) and terminal emulation software, or by
using the micro USB port if you have PA-7050-SMC-B (refer to https://docs.paloaltonetworks.com/resources/micro-usb-
console-port). The console connection provides access to firewall boot messages, maintenance mode, and the command
line interface (CLI).
Front Slot Card Installaon
The PA-7050 firewall requires that you install a minimum of three cards in the front slots of the chassis. These cards include
the following: The Switch Management Card (SMC) provides management connectivity to the chassis, HA ports, and the
chassis status LEDs. The Logging Card (either the Log Processing Card or the Log Forwarding Card) performs log processing
or forwarding functions. The Network Processing Card (NPC) connects the firewall to a data network; you can have more
than one NPC.
The Logging Card and NPC use micro switches in the levers that power down the card when you release the inner
levers. The logging card micro switches are on both sides of the card and are activated when pulling the inner lever.
Avoid moving these levers when the chassis is powered on except when removing the card.
To avoid damaging the front slot cards, install them after you mount the chassis into the rack and with the chassis
powered off. The SMC and logging card are hot-swappable; however, in a single chassis configuration, removing either
card causes the chassis to power down. If the chassis is in a high availability (HA) configuration, a failover will occur if
you remove the SMC or logging card.
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
PA-7050
SMC SMC
Screws located on both sides of the card used
to secure the card to the chassis.
Inner lever used to
unlock the outer lever.
Outer lever
Card lever properly closed.
Note: When opening the levers, you must release the
inner lever rst to release the outer lever.
Install the Logging Card
Figure 5
OWER
ACTIVITY
FAULT
POWER
PA-700-AMC-1TB
ACTIVITY
FAULT
PA-700-AMC-1TB
AMC and Drive
Push to lock and pull to unlock Figure 6
Page 2 of 2
1. Ensure the chassis is powered off and that no power cords or cables are connected.
2. Attach the provided ESD strap to your wrist and plug the other end in to one of the ESD ports located on the front of the
chassis—there are three to choose from along the bottom row.
3. Remove the SMC from the antistatic bag and then open both card levers. The SMC uses two levers on each side of the card
as shown in Figure 5. You must pull both inner levers toward you to unlock the outer levers.
4. Slide the card into slot 4 until it is about 1/4” from being fully inserted, ensuring that card levers are in the open position.
Adjust the levers on each side of the card to align with chassis, push the card in, and then simultaneously push the levers
toward the chassis to close them and seat the card. Tighten the thumb screws (use a #1 Phillips-head screwdriver, if
needed).
5. Repeat steps 1 through 4 to install one or more NPCs. You can install up to six NPCs using slots 1, 2, 3, 5, 6 and 7.
6. Remove the logging card (LPC or LFC) from the antistatic bag and then open both card levers. The logging card uses two
levers on each side of the card as shown in Figure 5. You must pull both inner levers toward you to unlock the outer levers.
7. Install the logging card in the chassis by sliding it into slot 8 as shown in Figure 5 until it is about 1/4” from being fully
inserted, ensuring that card levers are in the open position. Adjust the levers on each side of the card to align with chassis,
push the card in, and then simultaneously push the levers toward the chassis to close them and seat the card. Tighten the
thumb screws (use a #1 Phillips-head screwdriver, if needed).
Steps 8-10 apply only to the LPC. The LFC does not use AMC modules, so you can skip these steps if installing an LFC.
8. Remove each of the four AMCs from the antistatic bags and ensure that the front handles are pulled out to the unlocked
position.
9. Insert each of the four AMCs into the empty logging card drive slots as shown in Figure 6.
10.After you install each AMC into the logging card slots, push the front handle in to lock the AMCs to the logging card. You
can install the AMCs in any order during the initial installation. When you power on the firewall for the first time, the system
formats the drives and puts them into two RAID 1 pairs. The two drives on the left are put into the first RAID 1 pair and the
two drives on the right are put into a second RAID 1 pair.
Install the front slot cards: