topic Palo Alto not booting in General Topics

Palo Alto not booting

shyamraj — Thu, 29 Sep 2016 04:18:03 GMT

I've got a PA-2050 which is having issues with booting up. Worst is that I've got no support on this device.

This is how it looks like when it boots up:

Welcome to the PanOS Bootloader.

U-Boot 4.1.14.0-0 (Build time: May 30 2013 - 16:56:05)
BIST check passed.
KESTREL board revision major:2, minor:0, serial #: 0003C105412
OCTEON CN3120-CP pass 1.1, Core clock: 500 MHz, DDR clock: 265 MHz (530 Mhz data rate)
DRAM:  1024 MB
Clearing DRAM........ done
Using default environment

Flash: 64 MB
Net:   octeth0, octeth1, octeth2
 Bus 0 (CF Card): not available


USB:   (port 0) No USB devices found.
** Bad partition - sata 0:6 **
** Bad partition - sata 0:6 **
** Bad partition - sata 0:2 **
** Bad partition - sata 0:3 **
** Bad partition - sata 0:1 **



        Autoboot to default partition in 5 seconds.
        Enter 'maint' to boot to maint partition.

size: 7208960, sector_size: 131072
Scanning JFFS2 FS: . done.
Full fpga programming SUCCESS
Unknown command 'fsload' - try 'help'
## No elf image at address 0x20000000
Octeon kestrel#

I found some commands here https://www.reddit.com/r/paloaltonetworks/comments/43n0xi/issue_with_pa200_not_booting/ and tried them but I got stuck here:

Octeon kestrel# cpld_reg write 7 1
 writing KESTREL_CPLD_REG_LED_CTRL1 (7) = 0x1
Octeon kestrel# cpld_reg write 8 0
 writing KESTREL_CPLD_REG_GPIO_FPGA (8) = 0x0
Octeon kestrel# setenv boot 'bootoctlinux $(loadaddr) $(console) $(rw) $(rootfs) numcores=$(numcores) single mtdparts=$(mtdparts)'
Octeon kestrel# run bootcmd
Full fpga programming SUCCESS
Unknown command 'fsload' - try 'help'
## No elf image at address 0x20000000
Octeon kestrel#

Here is the output of printenv:

Octeon kestrel# printenv
baudrate=9600
download_baudrate=115200
lion-file=/fpga/lion_block.bin
kc-file=/fpga/cheetah_block.bin
kernel=vmlinux.mp
root=root=/dev/sda$(partition)
extra=quiet
bootdelay=5
console=console=ttyS0,9600n8
nfsbootroot=/pub/dimg-2000-mp
netip=ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):3110:eth0
mtdids=nor0=0
bootloader_flash_update=protect off 0xbbc00000 0xbbcfffff; erase 0xbbc00000 0xbbcfffff; cp.b 0x400000 0xbbc00000 0xFFFFF
autoload=n
loadaddr=0x20000000
numcores=2
stdin=serial
stdout=serial
stderr=serial
ethact=octeth0
mtdparts=phys_mapped_flash:1M(ub),7040k(maint),12M(sysroot0),12M(sysroot1),128k(U-boot-env),1M(ub-fs)
mtdparts_jffs=mtdparts=0:1M,7040k,12M,12M,128k,1M,
fpga-force=1
kernel_partition=1
partition=1
bootcmd=fpga_program load=jffs; fsload $(loadaddr) $(kernel); run boot
boot=bootoctlinux $(loadaddr) $(console) $(netset) ethernet_nophy_mask=6 $(rw) $(root) mtdparts=$(mtdparts) numcores=$(numcores) $(extra)
partition_jffs=nor0,1
mtddevnum=1
mtddevname=0x006e0000@0xffffffff
filesize=13e4b0
fileaddr=0x400000
filename=/fpga/cheetah_block.bin

Environment size: 1072/131068 bytes
Octeon kestrel#

Could you suggest something here?

Thank you in advance.

Re: Palo Alto not booting

TranceforLife — Fri, 30 Sep 2016 12:07:31 GMT

Hard to say. Did you try to get access to the maintenance mode and do the HDD test, also reset to the default or even reinstall PAN-OS

HDD test:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Run-a-Hard-Disk-Drive-Performance-Test/ta-p/53641

How to reinstall the image:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Reinstall-or-Revert-PAN-OS-from-Maintenance-Mode/ta-p/58037

Re: Palo Alto not booting

shyamraj — Thu, 29 Sep 2016 07:11:56 GMT

@TranceforLife wrote:
Hard to say. Did you try to get access to the maintenance mode and d the HDD test, also reset to the default or even reinstall PAN-OS
HDD test:
https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Run-a-Hard-Disk-Drive-Performance-Test/ta-p/53641

How to reinstall the image:
https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Reinstall-or-Revert-PAN-OS-from-Maintenance-Mode/ta-p/58037

It never enters maintenance mode.

It does give me the option in the beginning, but when I try it stops at the same prompt as above.

Re: Palo Alto not booting

TranceforLife — Thu, 29 Sep 2016 09:18:10 GMT

Don't know if you can do much without (at least) access to the MAINT mode.

Re: Palo Alto not booting

shyamraj — Fri, 30 Sep 2016 09:32:38 GMT

@TranceforLife wrote:
Don't know if you can do much without (at least) access to the MAINT mode.

Thanks "TranceforLife" for trying to assist with this.

Can anyone else provide a suggestion?

Re: Palo Alto not booting

reaper — Fri, 30 Sep 2016 11:29:36 GMT

the harddisk is broken, is says right at the start it can't load the partitions and even at the prompt it can't retrieve the elf image

you need a new harddisk with a PAN-OS installed on it

if you have another PA-2000 you could duplicate it's disk, other than that... you could negotiate renewal of the support contract and have the disk RMA'd