Behavior of System Logging and LED Status When a Power Supply Fails or is Removed
Resolution
Overview
This document describes the behavior of system log generation and chassis LED status on a PA-5000 Series firewall, when the main or redundant PSU (Power Supply Unit) fails or is removed.
Details
On a PA-5000 Series firewall, the following outputs indicate that both main and redundant PSUs (Power Supply Unit) are working normally:
> show system state filter chassis.leds
- chassis.leds: { 'alarm': Off, 'fans': Green, 'ha': Green, 'ps0': Green, 'ps1': Green, 'status': Green, 'temp': Green, }
> show system environmentals power-supply
----Power Supplies----
Slot Description Alarm Inserted
S1 PowerSupply#1 (left) False True
S1 PowerSupply#2 (right) False True
At this point, the redundant power supply is removed.
> show system state filter chassis.leds
chassis.leds: { 'alarm': Off, 'fans': Green, 'ha': Green, 'ps0': Green, 'ps1': Green, 'status': Green, 'temp': Green, }
PA-5020> show system environmentals power-supply
----Power Supplies----
Slot Description Alarm Inserted
S1 PowerSupply#1 (left) False True
S1 PowerSupply#2 (right) True False
Now, reinsert the redundant PSU and remove the main PSU.
> show system state filter chassis.leds
chassis.leds: { 'alarm': Off, 'fans': Green, 'ha': Green, 'ps0': Green, 'ps1': Green, 'status': Green, 'temp': Green, }
> show system environmentals power-supply
----Power Supplies----
Slot Description Alarm Inserted
S1 PowerSupply#1 (left) True False
S1 PowerSupply#2 (right) False True
During the above period, no specific system logs were generated.
> show log system direction equal backward
Time Severity Subtype Object EventID ID Description
===============================================================================
xxxx/xx/xx xx:08:03 info general general 0 Session for user admin via CLI from 10.0.0.143 timed out
xxxx/xx/xx xx:06:47 info general general 0 User admin logged in via CLI from 10.0.0.143
xxxx/xx/xx xx:06:47 info general auth-su 0 User 'admin' authenticated. From: 10.0.0.143.
xxxx/xx/xx xx:59:41 info general general 0 User admin accessed Monitor tab
Even though there are no specific logs, the removal events can be seen by checking the ehmon.log, as shown below:
> grep cp-log ehmon.log pattern Power
xxx xx xx:06:00 POWERSUPPLY: PowerSupply#2 (right) removed
xxx xx xx:07:00 POWERSUPPLY: PowerSupply#1 (left) removed
xxx xx xx:07:00 POWERSUPPLY: PowerSupply#2 (right) present
xxx xx xx:07:50 POWERSUPPLY: PowerSupply#1 (left) present
owner: kkondo