FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
iskandar_lie
Staff
Staff
Article Id 246526
Description This article is intended to prove that a VM license can be used for VM with different specifications.
Scope FortiGate-VM.
Solution

In this scenario, there is 1 CPU-VM hardware and a 2 CPU-VM license.

 

To check hardware specification:

 

FGT # get hardware status

Model name: FortiGate-VM64-KVM

ASIC version: not available

CPU: Intel(R) Xeon(R) Gold 6338 CPU @ 2.00GHz

Number of CPUs: 1        --> 1 CPU

RAM: 2007 MB

Compact Flash: 2056 MB /dev/vda

Hard disk: 16384 MB /dev/vdb

USB Flash: not available

 

FGT # get hardware cpu

processor       : 0

vendor_id       : GenuineIntel

cpu family      : 6

model           : 106

model name      : Intel(R) Xeon(R) Gold 6338 CPU @ 2.00GHz

stepping        : 6

microcode       : 0x1

cpu MHz         : 1995.292

cache size      : 16384 KB

fpu             : yes

fpu_exception   : yes

cpuid level     : 27

wp              : yes

flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss syscall nx pdpe1gb rdtscp lm constant_tsc up ar

ch_perfmon rep_good nopl xtopology pni pclmulqdq vmx ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lah

f_lm abm 3dnowprefetch arat xsaveopt tpr_shadow vnmi flexpriority ept vpid fsgsbase tsc_adjust avx2 smep bmi2 erms rdseed

bogomips        : 3990.58

clflush size    : 64

cache_alignment : 64

address sizes   : 40 bits physical, 57 bits virtual

power management:

  

FGT #  diagnose hardware sysinfo vm full

UUID:     b5d630773da543379524f4a1917xxxxx

valid:    1

status:   1

code:     200

warn:     0

copy:     0

received: 4298297857

warning:  4297937648

recv:     202302161806

dup:

 

To check VM license specification:

 

FGT # diagnose debug vm-print-license

SerialNumber: FGVM02TMXXXXXXX  

CreateDate: Sun Feb 13 18:50:34 2022

Key: yes

Cert: yes

Key2: yes

Cert2: yes

Model: 02 (7)

CPU: 2     <----- Number of CPU license.

MEM: 2147483647

VDOM license:

  permanent: 10

  subscription: 0

 

FGVM02: '02' indicates the number of CPUs:

 

iskandar_lie_0-1676917307092.png

 

Conclusion:

- It is possible to apply 2 CPU-VM licenses to 1 CPU-VM hardware and vice versa.

If 2 CPU-VM licenses are applied to  4 CPU-VM hardware, the other 2 CPUs will not be utilized or idle.  

 

Related documents:

https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/416169/vm-license

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Migrating-a-FortiGate-VM-instance-between-...