Maximum Number of MAC and ARP Addresses Supported on the Palo Alto Networks Firewall
35109
Created On 09/25/18 20:34 PM - Last Modified 03/30/20 23:44 PM
Environment
- Any PAN-OS.
- Palo Alto Firewall.
Resolution
The following table shows the maximum values for the Palo Alto Networks firewall platforms:
|
Firewall Model
| ARP Table Capacity per device | ARP Table Capacity per broadcast domain | MAC Address Capacity | MAC Address Capacity per broadcast domain | Timeout (seconds) |
|---|
| VM-50 | 1500 | 1500 | 1500 | 1500 | 1800 |
|
VM-100
VM-200
| 2500 | 2500 | 2500 | 2500 | 1800 |
VM-300
VM-1000-HV | 10000 | 5000 | 10000 | 5000 | 1800 |
| VM-500 | 32,000 | 32,000 | 32,000 | 32,000 | 1800 |
| VM-700 | 128,000 | 128,000 | 128,000 | 128,000 | 1800 |
| PA-200 | 500 | 500 | 500 | 500 | 1800 |
| PA-220 | 1500 | 1500 | 1500 | 1500 | 1800 |
| PA-500* | 1000 | 500 | 1000 | 500 | 1800 |
PA-820
PA-850 | 3000 | 3000 | 3000 | 3000 | 1800 |
| PA-2020** | 1500 | 1000 | 1500 | 1000 | 1800 |
| PA-2050 | 2500 | 2500 | 2500 | 2500 | 1800 |
| PA-3020 | 1500 | 1500 | 1500 | 1500 | 1800 |
| PA-3050 | 2500 | 2500 | 2500 | 2500 | 1800 |
| PA-3060 | 5000 | 5000 | 5000 | 5000 | 1800 |
| PA-4020 | 10,000 | 10,000 | 10,000 | 10,000 | 1800 |
PA-4050
PA-4060 | 20,000 | 20,000 | 20,000 | 20,000 | 1800 |
| PA-5020 | 20,000 | 20,000 | 20,000 | 20,000 | 1800 |
PA-5050
PA-5060 | 32,000 | 32,000 | 32,000 | 32,000 | 1800 |
| PA-3220 | 16,000 | 16,000 | 16,000 | 16,000 | 1800 |
PA-3260
PA-3250 | 72,000 | 72,000 | 72,000 | 72,000 | 1800 |
PA-5220
PA-5250
PA-5260
PA-5280 | 128,000 | 128,000 | 128,000 | 128,000 | 1800 |
PA-7050
PA-7080 | 32,000 | 32,000 | 32,000 | 32,000 | 1800 |
* For PAN-OS version 4.1 and below, the PA-500 has Max Arp Table per device & MAC Address per device capacity of 500.
** For PAN-OS version 4.1 and below, the PA-2020 has Max Arp Table per device & MAC Address Capacity per device of 1000.
*** For PAN-OS version 7.1 and below, the VM-100/200 has Max Arp Table per device & MAC Address Capacity per device of 500.
**** For PAN-OS version 7.1 and below, the VM-300/1000 has Max Arp Table per device & MAC Address Capacity per device of 2500.