Technical Tip: 'Maximum Number of Entries Reached' and 'normal wtp table is full' Error when saving changes in AP/Operation Profiles

To resolve wireless profile errors on a FortiGate, follow these steps:

1. Verify max value table for wireless-controller.wtp:

• Consult the Max Value Table or the model's official datasheet.
• Use the 'print tablesize' or 'diagnose wireless-controller wlac tablesize' command and check the limit for wireless-controller-controller.wtp
  • This command will show the total manageable AP limit ,  as a rule of thumb Tunnel-mode AP limits are half of the total size of manageable AP's.

2. Verify if current configuration exceeds those limits.

3. If the limit is exceeded, consider upgrading to a higher-capacity FortiGate model or re-configuring the existing wireless architecture to stay within the supported limits.

Example:
Consider a deployment with 93 active FortiAPs, each broadcasting a mix of six SSIDs, five in Bridge mode and one SSID in Tunnel mode. While a model like the FortiGate 120G supports up to 128 total Access Points, it is strictly limited to a maximum of 64 FortiAPs in Tunnel mode.

Because this deployment attempts to broadcast a tunneled SSID across all 93 units, it exceeds the 64-AP tunnel limit. Consequently, the hardware cannot establish the required CAPWAP tunnels for the remaining 29 units, leading to 'Maximum Number of Entries Reached' Error.

Related article: 

Technical Tip: Maximum number of entries has been reached