Palo Alto Networks PA-5000 Series Power Supply Unit Error
40541
Created On 09/26/18 13:51 PM - Last Modified 10/28/19 18:11 PM
Symptom
After reboot of a Palo Alto Networks PA-5000 Series firewall running PAN-OS 5.0.4 in an HA cluster configuration, the following error is shown:
Dataplane down: brdagent exiting.
The dataplane fails to initialize, causing network traffic to stop.
After a while, the firewall can no longer be accessed on the WebGUI and the CLI has limited functionality and will display the following message:
Attention A critical error has been detected preventing proper boot up of the device. Please contact Palo Alto Networks to resolve this issue at 866-898-9087 or support@palonetworks.com. The system is in maintenance mode. Connect via serial console of ssh to access the recovery tool.
Environment
- PAN-OS 5.0.4
- PA-5000
Cause
The problem is likely to be caused by a power supply unit (PSU) error and can be verified with the following command:
> grep mp-log controlplane-console-output.log pattern pca954x_select
The error message output should be similar to the following for PAN-OS 5.0 and later:
i2c-octeon i2c-octeon.1: octeon_i2c_start: bad status (0x0)
pca954x_select: Failed to select the I2C multiplexor (addr=75, val=01, err=-145)!
pca954x_select: Failed to select the I2C multiplexor (addr=75, val=01, err=-145)!
The output may indicate a problem caused by an assembly issue of the PSU where a chassis ground connection is partial or incomplete.
Resolution
Remove power from the system for at least 10 seconds and see if the problem disappears. If further assistance is required, contact Palo Alto Networks Support.
Note: This description is based upon personal experience while troubleshooting and communicating with support. The problem may be not limited to HA setups, but is known only to certain batches of PSUs for PA-5000 Series firewalls.