PA-3000 Series Hardware Reference Guide: Downloaded From Manuals Search Engine
PA-3000 Series Hardware Reference Guide: Downloaded From Manuals Search Engine
• For access to the knowledge base, complete documentation set, discussion forums, and videos,
refer to https://live.paloaltonetworks.com.
• For contacting support, for information on the support programs, or to manage your account or
devices, refer to https://support.paloaltonetworks.com.
• For the latest release notes, go to the software downloads page at
https://support.paloaltonetworks.com/Updates/SoftwareUpdates.
• For capacity and performance information for all Palo Alto Networks firewalls, refer to
https://www.paloaltonetworks.com/products/product-selection.html.
Table of Contents
Chapter 1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
PA-3020 and PA-3050 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
PA-3060 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
PA-3020 and PA-3050 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
PA-3060 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 2
Install the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Chapter 3
Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Chapter 4
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Interface Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Electrical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Chapter 1
Overview
This section describes the front and back panels of the PA-3000 Series (PA-3020, PA-3050, and
PA-3060) firewalls:
• “Front Panel” on page 6
Front Panel
This section describes the front panel of the PA-3000 Series firewalls.
• “PA-3020 and PA-3050 Front Panel” on page 6
Ethernet SFP HA
ports ports ports Status
LEDs
PA-3050
Item Description
Ethernet ports Eight RJ-45 10/100/1000 ports for network traffic.
SFP ports Eight Small Form-Factor Pluggable (SFP) 1 Gbit/s ports for
network traffic.
SFP+ ports Two Enhanced Small Form-Factor Pluggable Plus (SFP+)
10 Gbit/s ports for network traffic.
High-availability (HA) ports Two RJ-45 ports for high-availability (HA) control and
synchronization.
Management port One RJ-45 port to access the device management interfaces through
an Ethernet interface.
Console port One RJ-45 port for connecting a serial console.
USB port One USB port for future use.
Status LEDs Six LEDs indicating system status. Refer to “Interpret the Device
LEDs” on page 18 for LED definitions.
Back Panel
This section describes the back panel of the PA-3000 Series firewalls.
• “PA-3020 and PA-3050 Front Panel” on page 6
AC Power Grounding
Inlet Lug
Power Supply
Exhaust
Item Description
Power supplies Two redundant, hot-swappable power supplies.
Grounding lug To ground the system, use a grounding wire of at least 14 American
Wire Gauge (AWG). Attach the 14 AWG wire to an agency-
approved crimp connector (Tyco 34120 or certified Lug), crimped
with the proper crimping tool and attached to the protective
grounding lug. Use a size #8-32 nut and a star washer (supplied) to
secure the grounding lug to the chassis and connect he other end to
the building ground. Toque the nut to 15 in-lbs. Do not over tighten.
Exhaust fans Four exhaust fans that provide front-to-back ventilation and cooling
for the device.
Chapter 2
Install the Hardware
• The integrity of the tamper-proof tape used to seal the box or crate has not been
compromised.
• The warranty seals on the device itself do not show evidence of tampering.
• Verify that the intended location has adequate air circulation and meets the temperature
requirements. Refer to the “Environmental Specifications” on page 24.
• On the PA-3020 and PA-3050 firewalls, allow clear space on both sides of the firewall for
side-to-side airflow. On the PA-3060 firewall, leave clear space on the front and back of the
firewall for front-to-back airflow.
• Reduced airflow—Ensure that the airflow required for safe device operation is not
compromised by the rack installation.
• Mechanical loading—Ensure that the rack mounted device does not cause hazardous
conditions due to uneven mechanical loading.
• Circuit overloading—Ensure that the circuit that supplies power to the device is
sufficiently rated to avoid circuit overloading or excess load on supply wiring. Refer to
the “Electrical Specifications” on page 23.
1. Screw the rack mounting brackets onto the front of the device using a Phillips-head
screwdriver. Figure 5 shows how the rack mounting brackets attach to the PA-3020 and
PA-3050 firewalls and Figure 6 shows how the brackets attach to the PA-3060 firewall.
Note: When installing the rack brackets on the PA-3060 firewall, first insert all
four screws (per bracket) and partially tighten. After all screws are inserted, then
torque each screw to 7 in. lbs to fully tighten.
2. Using two people, lift the device and position it in the rack.
3. Align the mounting holes on the attached rack mounting brackets with holes in the rack
rail. Ensure that the bracket and rack holes align, so the device is level.
4. Insert mounting screws into the aligned holes. Tighten with a Phillips screwdriver.
Mid-mount
position HA1
HA2
Front-mount
position
Mid-mount
position
Front-mount
position
CAUTION: Fiber transceivers that are installed by the user shall be Class I and
CDRH certified.
Network SFP
Console
HA1 HA2
Management
Connect Power
To power the PA-3020 and PA-3050 firewalls, attach a power cable to the device AC power
inlet and plug the other end into a grounded wall outlet and the device will power on. For the
PA-3060, do the same, but use two power cables on different circuits for redundancy. Figure 8
shows the power connection for a PA-3060.
Circuit A Circuit B
Chapter 3
Maintaining the Hardware
This chapter describes how to interpret LEDs and troubleshoot hardware problems.
• “Cautions and Warnings” in the next section
French Translation:
CE PRODUIT EST CONFORME AUX NORMES 21 CFR 1040.10 ET 1040.11.
CAUTION: Laser radiation exposure should be avoided. Cover any unused fiber optical ports. Do not
look directly at exposed fiber optical transmitters or cables.
WARNING: Risk of explosion if battery is replaced by an incorrect type. Dispose of used batteries
according to the instructions (Cl. 1.7.15).
French Translation:
ATTENTION: RISQUE D'EXPLOSION SI LA BATTERIE EST REMPLACÉE PAR UN
MODÈLE DE TYPE INCORRECT. METTEZ AU REBUT LES BATTERIES USAGÉES
CONFORMÉMENT AUX INSTRUCTIONS (CL.1.7.15)
WARNING: Removal of equipment top cover is to be done only by Palo Alto Networks trained
service person(s).
WARNING: To reduce the risk of electric shock, disconnect all power supply cords before servicing
the unit (the unit may have more than one).
French Translation:
Pour réduire le risque de choc électrique, débranchez tous les cordons d'alimentation avant
d'intervenir sur l'appareil (l'appareil peut avoir plus d'un).
Table 7 describes the HA and Management port LEDs for the PA-3000 Series firewalls.
2. Grasp the handle on the failed power supply. Simultaneously push down on the release lever and
then pull the power supply outward to remove the power supply. Figure 10 show how to remove
and install a power supply.
3. Slide a replacement power supply into the device and ensure that the release lever clicks into place.
4. Connect one end of the AC power cable to the power supply and connect the other end to a
grounded AC power source.
Chapter 4
Specifications
Physical Specifications
Table 8 lists the physical specifications for the PA-3000 Series firewalls.
Interface Specifications
Table 9 describes the interfaces for the PA-3000 Series firewalls.
Electrical Specifications
Table 10 lists the electrical specifications for the PA-3000 Series firewalls.
Environmental Specifications
Table 11 lists the environmental specifications for the PA-3000 Series.
Chapter 5
Compliance Statements
VCCI
This section provides the compliance statement for the Voluntary Control Council for
Interference by Information Technology Equipment (VCCI), which governs radio frequency
emissions in Japan.
The following information is in accordance to VCCI Class A requirements
Translation: This is a Class A product. In a domestic environment this product may cause
radio interference, in which case the user may be required to take corrective actions.
BSMI EMC 聲明
警告使用者 :
這是甲類的資訊產品 , 在居住的環境中使用時 , 可能會造成射頻干擾 ,
在這種情況下 , 使用者會被要求採取某些適當的對策
製造商:偉創力國際
原產地:美國 / 部份零組件產地為美國及其它國家。
輸入頻率:50-60 赫茲(Hz)
輸入電壓(AC):100 〜 240 伏特