DPC cards in down state on PA-7000
4375
Created On 08/19/22 09:14 AM - Last Modified 07/14/23 01:50 AM
Objective
The article explains how to resolve DPC Cards that is in "not-ready" state on A PA-7000 series firewall.
Environment
-
PAN-OS 9.1.0 and above.
-
Palo Alto 7000 series Firewalls.
Procedure
1. Confirm the cards are inserted and confirm its slot number. From CLI, use "show chassis inventory" command.
> show chassis inventory Slot Component Serial Number Ports Revision Power (w) Chassis 00xxxxxxxxxxx 1.0 1 empty 2 empty 3 empty 4 PA-7050-SMC-B 00xxxxxxxxxxx 0 2.1 500 5 empty 6 PA-7000-100G-NPC-A 00xxxxxxxxxxx 28 1.4 430 7 PA-7000-DPC-A 00xxxxxxxxxxx 0 1.0 490 8 PA-7000-LFC-A 00xxxxxxxxxxx 10 1.2 240
2. Confirm the status of the Cards by using command:
> show chassis status slot <slot number>
Example output:
> show chassis status slot s7 Slot Component Card Status Config Status Disabled 7 PA-7000-DPC-A PowerOff None Card Status: 'PowerOff' Detail: User requested power down =>Note that the card status is powered off Config Status: 'None' Detail: Card is not in a valid state to receive configuration
3. Power on the DPC from CLI. The command below is for the card on slot7 (s7).
> request chassis admin-power-on slot s7
4. Run the command again to confirm the status
> show chassis status slot s7
Example output:
> show chassis status slot s7 Slot Component Card Status Config Status Disabled 7 PA-7000-DPC-A Up Success Card Status: 'Up' Detail: Card is powered on and system software is running Config Status: 'Success' Detail: Config status is SUCCESS
Additional Information
Powering on the slot should get the DPC card to come up. If it does not, then proceed with the following steps.
-
Re-seat the cards
-
Hard reboot the device
-
Now confirm the status of the DPC card again from the CLI using "show chassis status slot <slot number>"
-
Run the command again to confirm the status
> show chassis status slot s7