PA5050 | temperature sensor | how to disable false alarm

[IHEP]

Hi all,

could it be that somebody know:
we have a problem with a temperature sensor on our PA5050 device

S1    Temperature @ 10G Phys [U171]       False    17.40      5.00    60.00

Time to time we see temperature 0!!! [screen 1] and it triggers a temperature alarm event and increases FAN speeds to 6-7k for 1min and than alarm is gone. We have thousands such alarms per day and it is really danger to use FANs in such way.
We assume that everything is fine with our environment and it is a software or sensor bug (we use 6.0.6 PANOS).

So is there any way to disable alarms (that it never sets True automaticaly) for specific sensor
or maybe there is a way to decrease Min C to 0 or less than 0 to disable it too.

Our support contract ended and we can not ask support team directly.

We would kindly appraciate any help!

Many thx!

Best regards
Victor Kotlyar
[screen 1]

PA5050 system env

[reaper · Accepted solution]

Hi Victor

you probably have a broken sensor, I'd recommend reaching out to support to see if they can replace your chassis (especially since the sensor cannot be disabled)

[IHEP]

Dear reaper,

many thx for your replay but asking support for replacement is not possible for us (we already tried to ask in other cases).
I only see as a solution to somehow get an access to the linux underneath PANOS and hack hardcoded Min value.

Just for information consistency the actual error rate for the last 10days is shown below [1]

best regards,
Victor

[1]
for i in `seq 20 30`; do  grep "Jan $i" /var/log/pa5050.log* |grep Temperature|wc -l;done
209
144
91
201
221
18
0
0
113
194
73

[TranceforLife]

Don't think it will be easy to hack PAN-OS :0

[IHEP]

I have just thought that this limit is analog of sensors.conf for lm_sensors so all you need is just to change 1byte value '5' to '0'.

Nobody will try to HACK PAN-OS TranceforLife interpreted a word in a wrong way, sorry.

If there is no way for a small correction in the configuration than ok no problem.

Regards,
Victor

[TranceforLife]

Hi Victor,

I am with you. In any way, it is 5000 and quite expensive box. You want to have it "healthy" betted go through the support way and RMA if need be. Or it could be just a simple PAN-OS bug  that will require you just to upgrade.

[IHEP]

Our support ended and we do not have extra money to get a new one and by the same reason we could not upgrade PAN-OS.

So we locked in our version without any support 🙂

Thx

[TranceforLife]

For low long do you run this PAN-OS and when did you notice this behaviour first time? Not sure if you tried to reinstall the same version from the web GUI?

[IHEP]

Our ssd died and we bought a new one with preinstalled PAN-OS.

It works  two months and the problems appeared as soon as we conneted 10Gbs links.

Before we stoped on PAN-OS 6.5... and there were no problems.