Pa-5200 Front Panel - PaloAlto Networks PA-5200 Series Hardware Reference Manual

PA-5200 Front Panel

The following image shows the front panel of the PA-5200 Series firewall and the table describes each front
panel component. The only differences between the PA-5220 (shown), PA-5250, PA-5260, and PA-5280
panels is the model name and the Ethernet port speeds as described in the table.
Item Component
1 Ethernet ports 1 through 4
2 SFP ports 5 through 20
3 QSFP+ ports 21 through 24
4 HSCI port
PA-5200 SERIES NEXT-GEN FIREWALL HARDWARE REFERENCE | PA-5200 Series Firewall Overview
Description
Four RJ-45 100Mbps/1Gbps/10Gbps ports for
network traffic.
The link speed and link duplex are auto-negotiate
only.
Sixteen SFP/SFP+ ports for network traffic.
Each port can operate as either SFP (1Gbps) or SFP+
(10Gbps) based on the installed transceiver.
These ports vary depending on your firewall model:
• PA-5220 firewall—Four 40Gbps QSFP+ ports as
defined by the IEEE 802.3ba standard.
• PA-5250, PA-5260, and PA-5280 firewalls—
Four 40Gbps QSFP+/100Gbps QSFP28 ports as
defined by the IEEE 802.3ba standard. The link
speed is based on the installed transceiver.
These ports vary depending on your firewall model:
• PA-5220 firewall—One QSFP+ 40Gbps port
(supports only a 40Gbps (QSFP+) transceiver or
QSFP+ active optical cable).
• PA-5250, PA-5260, and PA-5280 firewalls—One
QSFP28 40/100Gbps port (supports 40Gbps
(QSFP+) or 100Gbps transceiver (QSFP28) or
equivalent active optical cables). The link speed is
based on the installed transceiver. Use this port
to connect two PA-5200 Series firewalls in a high
availability (HA) configuration as follows:
• In an active/passive configuration, this port is
for HA2 (data link).
• In an active/active configuration, you can
configure this port for HA2 and/or HA3.
HA3 is used for packet forwarding for
asymmetrically routed sessions that require
Layer 7 inspection for App-ID
ID .
™
and Content-
™
15
2019 Palo Alto Networks, Inc.
©