PaloAlto Networks ION 1000 Application guide

ION 1000 Hardware Reference
docs.paloaltonetworks.com

Contact Information
Corporate Headquarters:
Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95054
www.paloaltonetworks.com/company/contact-support
About the Documentation
• For the most recent version of this guide or for access to related documentation, visit the Technical
Documentation portal docs.paloaltonetworks.com.
• To search for a specific topic, go to our search page docs.paloaltonetworks.com/search.html.
• Have feedback or questions for us? Leave a comment on any page in the portal, or write to us at
[email protected].
Copyright
Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2020-2021 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo
Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/
trademarks.html. All other marks mentioned herein may be trademarks of their respective companies.
Last Revised
July 15, 2021
ION 1000 Hardware Reference 2©2023 Palo Alto Networks, Inc.

Table of Contents
Before You Begin............................................................................................... 5
Tamper Proof Statement........................................................................................................... 6
Third-Party Component Support............................................................................................. 7
Product Safety Warnings...........................................................................................................8
ION 1000 Overview........................................................................................11
ION 1000.................................................................................................................................... 12
ION 1000 Ports......................................................................................................................... 13
ION 1000 Front Panel with LEDs.........................................................................................14
ION 1000 Specifications......................................................................................................... 15
ION 1000 Compliance Statement.........................................................................................17
ION 1000 Installation Kit Components...............................................................................19
Power on the ION 1000......................................................................................................... 20
Reboot the ION 1000.................................................................................................. 20
Shut Down the ION 1000...........................................................................................20
Install the ION 1000....................................................................................... 21
Rack Mount the ION 1000.....................................................................................................22
Wall Mount the ION 1000..................................................................................................... 24
Install the ION 1000 by Replacing an Existing Router.....................................................26
Install the ION 1000 With an Existing Router...................................................................27
Install the ION 1000 in Control Mode................................................................................ 28
ION 1000 Hardware Reference 3©2023 Palo Alto Networks, Inc.

Table of Contents
ION 1000 Hardware Reference 4©2023 Palo Alto Networks, Inc.

Before You Begin
Read the following topics before you install or service a Palo Alto Networks® next-generation
firewall or appliance. The following topics apply to all Palo Alto Networks firewalls and appliances
except where noted.
•Tamper Proof Statement
•Third-Party Component Support
•Product Safety Warnings
5

Before You Begin
Tamper Proof Statement
To ensure that products purchased from Palo Alto Networks were not tampered with during
shipping, verify the following upon receipt of each product:
• The tracking number provided to you electronically when ordering the product matches the
tracking number that is physically labeled on the box or crate.
• The integrity of the tamper-proof tape used to seal the box or crate is not compromised.
• The integrity of the warranty label on the firewall or appliance is not compromised.
ION 1000 Hardware Reference 6©2023 Palo Alto Networks, Inc.

Before You Begin
Third-Party Component Support
Before you consider installing third-party hardware, read the Palo Alto Networks Third-Party
Component Support statement.
ION 1000 Hardware Reference 7©2023 Palo Alto Networks, Inc.

Before You Begin
Product Safety Warnings
To avoid personal injury or death for yourself and others and to avoid damage to your Palo Alto
Networks hardware, be sure you understand and prepare for the following warnings before you
install or service the hardware. You will also see warning messages throughout the hardware
reference where potential hazards exist.
All Palo Alto Networks products with laser-based optical interfaces comply with 21 CFR
1040.10 and 1040.11.
The following safety warnings apply to all Palo Alto Networks firewalls and appliances, unless a
specific hardware model is specified.
• When installing or servicing a Palo Alto Networks firewall or appliance hardware component
that has exposed circuits, ensure that you wear an electrostatic discharge (ESD) strap. Before
handling the component, make sure the metal contact on the wrist strap is touching your skin
and that the other end of the strap is connected to earth ground.
French Translation: Lorsque vous installez ou que vous intervenez sur un composant matériel
de pare-feu ou de dispositif Palo Alto Networks qui présente des circuits exposés, veillez
à porter un bracelet antistatique. Avant de manipuler le composant, vérifiez que le contact
métallique du bracelet antistatique est en contact avec votre peau et que l’autre extrémité du
bracelet est raccordée à la terre.
• Use grounded and shielded Ethernet cables (when applicable) to ensure agency compliance
with electromagnetic compliance (EMC) regulations.
French Translation: Des câbles Ethernet blindés reliés à la terre doivent être utilisés pour
garantir la conformité de l'organisme aux émissions électromagnétiques (CEM).
• (ION 7000 and ION 9000 only) At least two people are recommended for unpacking, handling,
and relocating the heavier firewalls.
• Do not connect a supply voltage that exceeds the input range of the firewall or appliance. For
details on the electrical range, refer to electrical specifications in the hardware reference for
your firewall or appliance.
French Translation: Veillez à ce que la tension d’alimentation ne dépasse pas la plage d’entrée
du pare-feu ou du dispositif. Pour plus d’informations sur la mesure électrique, consulter la
rubrique des caractéristiques électriques dans la documentation de votre matériel de pare-feu
ou votre dispositif.
• WAN and LAN ethernet ports are suitable for interconnection to other local device ethernet
ports. These ports are not designed for direct connection to Public Switched Telephone
Network (PSTN) ports or interfaces. In addition, copper-based WAN ports, LAN ports, and
copper-based modular transceivers are not rated to connect to Telecommunications Outside
Plant (OSP) cabling.
ION 1000 Hardware Reference 8©2023 Palo Alto Networks, Inc.

Before You Begin
• (Devices with serviceable batteries only) Do not replace a battery with an incorrect battery
type; doing so can cause the replacement battery to explode. Dispose of used batteries
according to local regulations.
French Translation: Ne remplacez pas la batterie par une batterie de type non adapté, cette
dernière risquerait d’exploser. Mettez au rebut les batteries usagées conformément aux
instructions.
• I/O ports are intended for intra-building connections only and not intended for OSP (Outside
Plant) connections or any network connections subject to external voltage surge events.
•(All Palo Alto Networks appliances with two or more
power supplies)
Caution: Shock hazard
Disconnect all power cords (AC or DC) from the power
inputs to fully de-energize the hardware.
French Translation: (Tous les appareils Palo Alto
Networks avec au moins deux sources d’alimentation)
Débranchez tous les cordons d’alimentation (c.a. ou
c.c.) des entrées d’alimentation et mettez le matériel
hors tension.
ION 1000 Hardware Reference 9©2023 Palo Alto Networks, Inc.

Before You Begin
ION 1000 Hardware Reference 10 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
Learn about the Prisma SD-WAN ION 1000 and then plan your deployment.
•ION 1000
•ION 1000 Ports
•ION 1000 Front Panel with LEDs
•ION 1000 Specifications
•ION 1000 Compliance Statement
•ION 1000 Installation Kit Components
•Power on the ION 1000
11

ION 1000 Overview
ION 1000
The Prisma SD-WAN Instant-On Network (ION) 1000, designed for the enterprise branch site
only, transforms legacy wide area networks (WANs), enabling you to combine heterogeneous
underlying transports into a unified hybrid WAN. It establishes service-level agreements (SLAs) for
security, path selection, and application performance. It also helps gain direct insight into end user
application performance for traditional, SaaS, modern encrypted applications.
Deploy the ION 1000 in a standalone fashion without a data center device, thereby, enabling
granular control and visibility for direct-to-internet deployment scenarios.
The ION device participates in bi-directional communications with the Prisma SD-WAN controller,
enabling configuration of devices, applications, and WANs. It can be deployed as follows:
• Standalone Prisma SD-WAN ION 1000 (No HA)
• Prisma SD-WAN ION 1000 deployed as an HA pair
ION 1000 Hardware Reference 12 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
ION 1000 Ports
The ports on the ION 1000 are used as follows:
Ports Description
AUX This port is an auxiliary access port intended for offline
access, configuration, and troubleshooting of a system during
installation.
Internet/LAN/WAN Ports Ports 1- 4 are individual ports, used for internet, local
area network (LAN), or multi-path label switching (MPLS)
connectivity. By default, all ports 1- 4 are DHCP-enabled ports.
On the LAN port, configure the application reachability probe
to monitor the reachability of an application on a given path. If
you do not configure a port for the application probe, an alarm
is raised to indicate that application probe is disabled.
ION 1000 Hardware Reference 13 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
ION 1000 Front Panel with LEDs
The Prisma SD-WAN ION 1000 LEDs indicate the following status:
Icons Description
Displays disk status. Orange light (Blinking)—Disk activity.
Displays controller connectivity status. Green light—Connected.
Red light—Not Connected.
Displays power status. Green light—Powered On.
No light—Powered Off.
ION 1000 Hardware Reference 14 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
ION 1000 Specifications
The ION 1000 device specifications are shown below:
Feature Description
I/O
WAN/LAN/Internet 4 x 10/100/1000 RJ-45
Throughput
Throughput (encrypted 1400 byte
packets)
250 Mbps
Throughput (encrypted 600 byte
packets)
100 Mbps
Power and Mechanical
Type or Watts 1 36W Power Adapter
Power Input AC 100~240 V @50~60 Hz
Fan cooling Fanless
Certifications
Certifications FCC/UL, CE (EMC)
Environmental
Operating temperature 32°F to 104°F (0°C to 40°C)
Storage temperature -4°F to 158°F (-20°C to 70°C)
Operating humidity 5% to 90% (non-condensing)
Storage humidity 5% to 95% (non-condensing)
Mounting Options Rack Mounting, Wall Mounting
Physical
Weight 2.20lbs
Dimensions 7.28" x 1.73" x 5.39"
ION 1000 Hardware Reference 15 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
Feature Description
Local network Access Typically a downstream Layer 2 (L2) or Layer 3 (L3)
Ethernet switch and/or a Wireless Access Point
(WAP).
Internet connectivity This connectivity is used to reach the Prisma SD-
WAN controller. It can be in the form of a private
connection by an MPLS network through a corporate
data center. It can also be a public internet connection
provided through a local or broadband connection.
ION 1000 Hardware Reference 16 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
ION 1000 Compliance Statement
The following lists the ION device hardware compliance statements:
•VCCI: This section provides the compliance statement for the Voluntary Control Council for
Interference by Information Technology Equipment (VCCI), which governs radio frequency
emissions in Japan. The following information is in accordance to VCCI Class B requirements:
Translation: This is a Class B product. In a domestic environment this product may cause radio
interference, in which case the user may be required to take corrective actions.
•KCC
Translation: Korean Communications Commission (KCC) Class B Statement—This equipment
is an electromagnetic compatible device for business purposes (Class B). The provider or user
should be aware that the equipment is intended for use outside the home.
•UL: Product Ambient Temperature: 0~40 degree C
Risk of explosion if battery is replaced by an incorrect type. Dispose of used battery
according to local regulations.
•CE (European Union (EU) Electromagnetic Compatibility Directive)
The ION devices that do not contain radios (ION 1200) comply with the requirements set out
in the Electromagnetic Compatibility Directive (2014/30/EU) and the Low Voltage Directive
2014/35/EU.
The ION devices with radios (ION 1200-C-ROW, ION 1200-C5G-WW) comply with the
requirements set out in the Radio Equipment Directive (2014/53/EU).
•Federal Communications Commission (FCC) statement for a Class B digital device or
peripheral: This equipment has been tested and found to comply with the limits for a Class
B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This equipment
generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If
this equipment does cause harmful interference to radio or television reception, which can be
ION 1000 Hardware Reference 17 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment to an outlet on a circuit that is different from the one to which the
receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
•ICES (Canadian EMC Compliance Statement): This Class B digital apparatus complies with
Canadian ICES-003.
French Translation: Cet appareil numérique de la classe B est conforme à la norme NMB-003
du Canada.
•Declaration of the Presence Condition of the Restricted Substances Marking.
ION 1000 Hardware Reference 18 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
ION 1000 Installation Kit Components
The ION 1000 installation kit contains the following parts and tools to install the device:
• 1x 36W power adapter.
• 1x power cord, which varies depending on the country or region.
The following optional hardware parts must be ordered separately:
• Additional external power supply kit:
• 1x power adapter.
• 1 x region specific power cable.
• 1x USB to RJ45 serial cable.
• Rack mount kit.
• Wall mount kit.
ION 1000 Hardware Reference 19 ©2023 Palo Alto Networks, Inc.

ION 1000 Overview
Power on the ION 1000
Connect the power cables to the ION device and plug the device power cable into an AC power
outlet. When you switch on the power, the device is powered on and the power indicator turns
green.
Reboot the ION 1000
Press the power switch 3 or 4 times to reboot the ION 1000.
Shut Down the ION 1000
Shut down the ION 1000 in the following ways:
•Shut down using the Device Toolkit commands
Run the device toolkit command debug shutdown to shut down the device.
Ensure the device is physically accessible to turn it back on, before executing the
command.
•Shut down using the Power Switch
Press the power switch 5 times (press and hold for 1 second, then, release) to shut down the
device.
•Shut down using a Python script
Gracefully shut down a single ION device or multiple ION devices using a script.
First generate an API token and add it to cloudgenix_settings.py and then execute
the command ./shutdown.py --serial <20-019291-9468>. To shut down multiple
devices, add the serial numbers of the ION devices as shown below:
./shutdown.py --serial 20-019291-9468
./shutdown.py --serial 20-019291-9469
./shutdown.py --serial 20-019291-9470
ION 1000 Hardware Reference 20 ©2023 Palo Alto Networks, Inc.