Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[M/T/MX/TX] DFW_PFE: add/change for filter failed due to lack of memory space



Article ID: KB28734 KB Last Updated: 02 Jun 2014Version: 2.0

This article describes why the log messages may report that changes on a filter have failed due to a lack of memory space.


When attempting to save changes to an already existing filter, the save may fail and report the following log message:

/kernel - - - DFW_PFE: add/change for filter x failed due to lack of memory space

where "x" is the name of the filter.


The failure and log message result when the filter is too large and is using up all allocated filter memory. This issue is often seen when AIS commit scripts are running and attempting to commit the filter again, and there is not enough memory for the new commit because the current filter configuration is using all the memory.


There are two ways to resolve this problem:

  1. Decrease the size of the filter by creating several smaller filters.
  1. Increase the amount of memory for firewall filters by taking the memory from the memory designated for the routing table.

Note: For information on how to repartition memory, see the following Juniper document: Configuring the Junos OS to Allocate More Memory for Routing Tables, Firewall Filters, and Layer 3 VPN Labels.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search