How to set FEC for 25G and 100G ports on a PA5450 when the link fails to come up.

• How to set FEC for 25G and 100G ports on a PA5450?
• This is normally used when the link fails to come up with other vendors device.

• Palo Alto PA-5450 Firewalls
• PAN-OS: 11.1.6 and above
• 25G and 100G Ethernet ports
• Forward Error Correction (FEC)

1. The enabling and disabling of the FEC can only be done through the CLI of the firewall.
   
   
2. To check the status of FEC use the following command. The example shows slot 1 and port 26.

admin@Lab35-240-PA-5450> show network interface fec slot 1 port 26
FEC config sys.s1.p26.cfg[fec]: 0

3. To check the FEC in SDB variable.

admin@Lab35-240-PA-5450> configure
admin@Lab35-240-PA-5450# run show system state | match 's1.p26.*\fec'
sys.s1.p26.cfg: { 'farloop': False, 'fec': 1, 'mode': Autoneg, 'mru': 1856, 'nearloop': False, 'pause-frames': True, 'setting': auto, }

4. To set the FEC.

admin@Lab35-240-PA-5450# set network interface ethernet ethernet1/26 fec type 
  0   auto IEEE/Vendor Recommended FEC for the module.RS-528 for NRZ modules, RS-544 for PAM-4 modules
  1   none No FEC / Disable FEC
  2   fc-fec CL74 Base-R KR FEC for fabric
  3   rs-108 CL108 Low latency RS FEC for fabric
  4   rs-528 RS(528,514) FEC for NRZ
  5   rs-544 RS(544,514) FEC for PAM-4
admin@Lab35-240-PA-5450# set network interface ethernet ethernet1/26 fec type 1  

admin@Lab35-240-PA-5450# commit 
....
Configuration committed successfully

5. After the commit, check the status again to verify the FEC setting change.

admin@Lab35-240-PA-5450# run show network interface fec port 26 slot 1
FEC config sys.s1.p26.cfg[fec]: 1

This feature is available from 11.1.6 onwards.