FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes the print table size feature, including common queries.
Scope
FortiGate.
Solution
'print tablesize' output is different from the 'config resource-limits' output:
Config resource-limits: Purpose: Allows configuration of resource limits for specific features or functions. Output: Not directly displayed like print tablesize, but involves setting parameters that control resource allocation. Use Case: Used to adjust resource limits to optimize performance or accommodate specific network requirements.
Print tablesize is used for monitoring and viewing current system limits and usage, while config resource-limits is used for configuring and setting those limits.
If the 'print tablesize' limit is reached:
Resource Exhaustion: The system may not be able to create new entries for the specific table that has reached its limit, which can affect the functionality relying on that table.
Performance Degradation: The device might experience performance issues as it struggles to manage resources efficiently.
Configuration Errors: Attempts to add new configurations that require additional resources may fail, resulting in error messages.
Service Impact: Critical services that depend on the exhausted resources may be disrupted, potentially affecting network operations.
If the maximum value in the print table size output is lower than the maximum value available via resource-limits:
Hardware Limitations: The device's hardware may not support the higher limits set in resource-limits.
Configuration Constraints: The current configuration might impose stricter limits than the maximum possible.
VDOM Settings: If VDOMs are enabled, the per-VDOM limits might be affecting the global limits.
Possible to overwrite the value in the print table size:
It is not possible to directly overwrite the values in the print table size output.
These values are determined by the system's hardware and software capabilities.
It is needed to adjust resource limits and use the config resource-limits command to configure specific features within the constraints of the system's capabilities.
