Adjusting table sizes
The conversion wizard Start options page allows you to specify whether FortiConverter allows larger table sizes and group membership than default in the output configuration.
This is useful when, for example, the source configuration has a large address group and the target configuration can accommodate the larger group. Otherwise, FortiConverter converts the large address group into two or more smaller address groups for a single policy.
For example, FortiConverter uses the following default maximum table sizes by default:
- Address groups – 2500
- Addresses per group – 300
- Custom service objects – 1024
When this option is selected, FortiConverter uses the following maximum table sizes:
- Address groups – 20000
- Addresses per group – 1500
- Custom service objects – 4096
Table size settings file
When you select Adjust table sizes, FortiConverter uses the maximum table sizes in the file TargetPlatformTablesizeSetting.txt, which is stored in the same folder as the FortiConverter executable file (for example, using the default installation path, C:\Program Files (x86)\Fortinet\FortiConverter\TargetPlatformTablesizeSetting.txt).
By default, the file contains the following values, which are suitable for high-end devices (for example, FortiGate 1200D or higher):
Address groups: 20000
Addresses per group: 1500
Custom service objects: 4096
You can manually adjust these values by editing the file.
Viewing maximum table sizes for your target device
On your target system, enter the following command:
print tablesize
The maximum table sizes are displayed in a response similar to the following output:
firewall addrgrp: 0 20000 20000
firewall addrgrp: member: 1500 0 0
firewall service custom: 0 4096 0