验证线路卡故障的命令。

验证线路卡故障的命令。

21459
Created On 02/15/22 22:20 PM - Last Modified 03/02/23 02:24 AM


Symptom


线卡问题可能导致firewall到 :
  • 意外重启以尝试恢复
  • 转到非功能状态
  • 重启进入维护模式
一个或两个线路卡将显示为失败CLI当你查看机箱状态如下
> show chassis status

Slot       Component          Card Status        Config Status   Disabled
1          PA-7000-20G-NPC    Up                 Success
2          PA-7000-20G-NPC    Failure            None <=======
3          empty
4          PA-7050-SMC        Up                 Success
5          empty
6          PA-7000-20GQ-NPC   Up                 Success
7          PA-7000-20GQ-NPC   Up                 Success
8          PA-7000-LPC        Up                 Success

--------------------------------------------------------------------------------
Chassis autocommit ready : True
Inserted slots           : 1 2 4 6 7 8
Powered slots            : 1 4 6 7 8
Config ready slots       : 1 4 6 7 8
Config done slots        : 1 4 6 7 8
Traffic enabled slots    : 1 6 7
>show chassis power

Slot       Component            Card Status        Power (w)
1          PA-7000-20G-NPC      Up                 350
2          PA-7000-20G-NPC      Failure              <==========
3          empty
4          PA-7050-SMC          Up                 300
5          empty
6          PA-7000-20GQ-NPC     Up                 350
7          PA-7000-20GQ-NPC     Up                 350
8          PA-7000-LPC          Up                 300

FANTRAY1   PA-7050-FANTRAY      Present            175
FANTRAY2   PA-7050-FANTRAY      Present            175

PS1        CAR2548FPBCXZ03A     OK                 2500 (+)
PS2        CAR2548FPBCXZ03A     OK                 2500 (+)
PS3        CAR2548FPBCXZ03A     OK                 2500 (+)
PS4        CAR2548FPBCXZ03A     OK                 2500 (+)

           Provided:                               10000
           Used:                                   2000
           Remaining:                              8000
 
可用于验证的其他命令包括:
> show chassis inventory
> show chassis status slot <s1-s8>

 


Environment


  • 帕洛阿尔托 7000 系列Firewall安装线路卡。
  • 支持的PAN-OS.


Cause


线卡故障可能由以下原因引起:
  • 特定插槽上的内部数据包路径监控失败
  • 线卡故障
当线卡故障导致路径监控失败时,会产生如下系统日志。
high     general        general 0  slot2: exiting because of path monitor failure
high     general        general 0  slot2-path_monitor: exiting because service missed too many heartbeats
critical general        general 0  Internal packet path monitoring failure, restarting slot 2
 


Resolution


  1. 与支持团队一起开票以进行进一步调查。
  2. 收集以下命令的输出:
> show chassis power
> show chassis inventory
> show chassis status slot <slot number>
> show chassis status
  1. 生成技术支持文件并上传到案例


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oNCACA2&lang=zh_CN&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language