PA-3000 Series and PA-500 firewalls support larger networking capacities in PAN-OS 7.1 than in earlier PAN-OS releases. The increase is a doubling of capacity unless you executed the debug system arp-mac-capacity increase operational command (available in PAN-OS 6.1 and 7.0.1 releases) on a PA-3020 or PA-3050 firewall, in which case you already doubled the capacity.
The following table lists the capacities in PAN-OS 7.1 and later releases.
Capacity Description PA-500 PA-3020 PA-3050 PA-3060
Number of entries in an ARP table per broadcast domain 2,000 3,000 5,000 10,000
Number of entries in an ARP table per firewall 2,000 3,000 5,000 10,000
Number of addresses in a MAC table per broadcast domain 2,000 3,000 5,000 5,000
Number of addresses in a MAC table per firewall 2,000 3,000 5,000 5,000
Number of addresses in a Forwarding Information Base (FIB) table per virtual router 1,250 5,000 10,000 10,000
Number of routes in a Forwarding Information Base (FIB) table per virtual router 1,250 5,000 10,000 10,000
Number of addresses in a FIB table per firewall 1,250 5,000 10,000 10,000
Number of addresses in an IPv6 Neighbor table per firewall 2,000 3,000 5,000 10,000
If you decide to downgrade to an older PAN-OS release and you want to keep the larger capacities, see Downgrade While Maintaining Enhanced Capacities on PA-3050 Firewalls and PA-3020 Firewalls.

Related Documentation