- PA-3200 Series
※ PA-3200 Series Front Panel
The only differences between the PA-3220, PA-3250, and PA-3260 (shown) front panels are the model name and the Ethernet ports, as described in the table.
①
Ethernet ports 1 through 12
Twelve RJ-45 10Mbps/100Mpbs/1Gbps ports for network traffic. The link speed and link duplex are auto-negotiate only.
②
SFP ports 13 through 20
These ports vary depending on your firewall model:
- PA-3220 firewall—Ports 13 through 16 are SFP (1Gbps) and ports 17 through 20 are SFP or SFP+ (10Gbps) based on the installed transceiver.
- PA-3250 and PA-3260 firewalls—Ports 13 through 20 are SFP (1Gbps) or SFP+ (10Gbps) based on the installed transceiver.
③
QSFP+ ports 21 through 24
(PA-3260 only) Four QSFP+ (40Gbps) ports as defined by the IEEE 802.3ba standard.
④
HSCI port
One SFP+ (10Gbps) port (supports only an SFP+ transceiver or passive SFP+ cable).
Use this port to connect two PA-3200 Series firewalls in a high availability (HA) configuration as follows:
- In an active/passive configuration, this port is for HA2 (data link).
- In an active/active configuration, you can configure this port for HA2 and HA3. HA3 is used for packet forwarding for asymmetrically routed sessions that require Layer 7 inspection for App-ID and Content-ID.
* Note: The HSCI ports must be connected directly between the two firewalls in the HA configuration (without a switch or router between them). When directly connecting the HSCI ports between two PA-3200 Series firewalls that are physically located near each other, Palo Alto Networks recommends that you use a passive SFP+ cable.
For installations where the two firewalls are not near each other and you cannot use a passive SFP+ cable, use a standard SFP+ transceiver and the appropriate cable length.
⑤
HA1-A and HA1-B ports
Two RJ-45 10Mbps/100Mbps/1000Mbps ports for high availability (HA) control.
* Note: If the firewall dataplane restarts due to a failure or manual restart, the HA1-B link will also restart. If this occurs and the HA1-A link is not connected and configured, then a split brain condition occurs. Therefore, we recommend that you connect and configure the HA1-A ports and the HA1-B ports to provide redundancy and to avoid split brain issues.
⑥
MGT port
Use this Ethernet 10Mbps/100Mbps/1000Mbps port to access the management web interface and perform administrative tasks. The firewall also uses this port for management services, such as retrieving licenses and updating threat and application signatures.
⑦
CONSOLE port (RJ-45)
Use this port to connect a management computer to the firewall using a 9-pin serial-to-RJ-45 cable and terminal emulation software.
The console connection provides access to firewall boot messages, the Maintenance Recovery Tool (MRT), and the command line interface (CLI).
* Note: If your management computer does not have a serial port, use a USB-to-serial converter.
Use the following settings to configure your terminal emulation software to connect to the console port:
• Data rate: 9600• Data bits: 8• Parity: None• Stop bits: 1• Flow control: None
⑧
USB port
A USB port that accepts a USB flash drive with a bootstrap bundle (PAN-OS configuration).
Bootstrapping speeds up the process of configuring and licensing the firewall to make it operational on the network with or without internet access.
⑨
CONSOLE port (Micro USB)
Use this port to connect a management computer to the firewall using a standard Type-A USB-to-micro USB cable.
The console connection provides access to firewall boot messages, the Maintenance Recovery Tool (MRT), and the command line interface (CLI).
Refer to the Micro USB Console Port page for more information and to download the Windows driver or to learn how to connect from a Mac or Linux computer.
⑩
LED status indicators
Eight LEDs that indicate the status of the firewall hardware components (see Interpret the PA-3200 Series Status LEDs).
No comments:
Post a Comment