Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Palo Alto not booting

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Palo Alto not booting

L1 Bithead

I've got a PA-2050 which is having issues with booting up. Worst is that I've got no support on this device.

 

This is how it looks like when it boots up:

 

Welcome to the PanOS Bootloader.

U-Boot 4.1.14.0-0 (Build time: May 30 2013 - 16:56:05)
BIST check passed.
KESTREL board revision major:2, minor:0, serial #: 0003C105412
OCTEON CN3120-CP pass 1.1, Core clock: 500 MHz, DDR clock: 265 MHz (530 Mhz data rate)
DRAM:  1024 MB
Clearing DRAM........ done
Using default environment

Flash: 64 MB
Net:   octeth0, octeth1, octeth2
 Bus 0 (CF Card): not available


USB:   (port 0) No USB devices found.
** Bad partition - sata 0:6 **
** Bad partition - sata 0:6 **
** Bad partition - sata 0:2 **
** Bad partition - sata 0:3 **
** Bad partition - sata 0:1 **



        Autoboot to default partition in 5 seconds.
        Enter 'maint' to boot to maint partition.

size: 7208960, sector_size: 131072
Scanning JFFS2 FS: . done.
Full fpga programming SUCCESS
Unknown command 'fsload' - try 'help'
## No elf image at address 0x20000000
Octeon kestrel#

I found some commands here https://www.reddit.com/r/paloaltonetworks/comments/43n0xi/issue_with_pa200_not_booting/ and tried them but I got stuck here:

 

Octeon kestrel# cpld_reg write 7 1
 writing KESTREL_CPLD_REG_LED_CTRL1 (7) = 0x1
Octeon kestrel# cpld_reg write 8 0
 writing KESTREL_CPLD_REG_GPIO_FPGA (8) = 0x0
Octeon kestrel# setenv boot 'bootoctlinux $(loadaddr) $(console) $(rw) $(rootfs) numcores=$(numcores) single mtdparts=$(mtdparts)'
Octeon kestrel# run bootcmd
Full fpga programming SUCCESS
Unknown command 'fsload' - try 'help'
## No elf image at address 0x20000000
Octeon kestrel#

Here is the output of printenv:

Octeon kestrel# printenv
baudrate=9600
download_baudrate=115200
lion-file=/fpga/lion_block.bin
kc-file=/fpga/cheetah_block.bin
kernel=vmlinux.mp
root=root=/dev/sda$(partition)
extra=quiet
bootdelay=5
console=console=ttyS0,9600n8
nfsbootroot=/pub/dimg-2000-mp
netip=ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):3110:eth0
mtdids=nor0=0
bootloader_flash_update=protect off 0xbbc00000 0xbbcfffff; erase 0xbbc00000 0xbbcfffff; cp.b 0x400000 0xbbc00000 0xFFFFF
autoload=n
loadaddr=0x20000000
numcores=2
stdin=serial
stdout=serial
stderr=serial
ethact=octeth0
mtdparts=phys_mapped_flash:1M(ub),7040k(maint),12M(sysroot0),12M(sysroot1),128k(U-boot-env),1M(ub-fs)
mtdparts_jffs=mtdparts=0:1M,7040k,12M,12M,128k,1M,
fpga-force=1
kernel_partition=1
partition=1
bootcmd=fpga_program load=jffs; fsload $(loadaddr) $(kernel); run boot
boot=bootoctlinux $(loadaddr) $(console) $(netset) ethernet_nophy_mask=6 $(rw) $(root) mtdparts=$(mtdparts) numcores=$(numcores) $(extra)
partition_jffs=nor0,1
mtddevnum=1
mtddevname=0x006e0000@0xffffffff
filesize=13e4b0
fileaddr=0x400000
filename=/fpga/cheetah_block.bin

Environment size: 1072/131068 bytes
Octeon kestrel#

Could you suggest something here?

 

Thank you in advance.

 

 

5 REPLIES 5

L6 Presenter

Hard to say. Did you try to get access to the maintenance mode and do the HDD test, also reset to the default or even reinstall PAN-OS

 HDD test:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Run-a-Hard-Disk-Drive-Performance-Te...

 

How to reinstall the image:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Reinstall-or-Revert-PAN-OS-from-Main...

 


@TranceforLife wrote:

Hard to say. Did you try to get access to the maintenance mode and d the HDD test, also reset to the default or even reinstall PAN-OS

 HDD test:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Run-a-Hard-Disk-Drive-Performance-Te...

 

How to reinstall the image:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Reinstall-or-Revert-PAN-OS-from-Main...


 

It never enters maintenance mode.

 

It does give me the option in the beginning, but when I try it stops at the same prompt as above.

Don't know if you can do much without (at least) access to the MAINT mode. 


@TranceforLife wrote:

Don't know if you can do much without (at least) access to the MAINT mode. 


 

Thanks "TranceforLife" for trying to assist with this.

 

Can anyone else provide a suggestion?

the harddisk is broken, is says right at the start it can't load the partitions and even at the prompt it can't retrieve the elf image

 

you need a new harddisk with a PAN-OS installed on it

 

if you have another PA-2000 you could duplicate it's disk, other than that... you could negotiate renewal of the support contract and have the disk RMA'd

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 9826 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!