-
ADC virtual-server BGP RHI
Hi, I'm trying to do RHI with BGP. I configure BGP, with peer to a router, to redistribute flagged VIP. In the virtual server I do "redistribute vip". At the router I receive the route to the VIP. If the VIP is down I still reveive the route. I expected to do not receive the VIP route if the virtual-server is down. So my…
-
A10 WAF vs A10 Next-Gen WAF
May I ask some question? What is the different between A10 WAF vs A10 Next-Gen WAF? a cloud-based WAF? software-based WAF? hardware-based WAF? Could you please explain benefits of Next-Gen WAF?
-
Application Delivery Partitions (ADPs) and Next-Gen WAF
May I ask some questions? 1. Application Delivery Partitions (ADPs) The customer asked me. They create L3V partitions on the ADC. They found all physical network interface use for the L3V partitions. For example: One creates an L3V partition for Company A. Next one, creates an L3V partition for Company B. Company A L3V…
-
Using Passive FTP in vThunder
I, unfortunately, have an application that sits behind vThunder that uses passive FTP and am having trouble getting this to work. I can configure a single port and limit the application to a single port using passive ftp and the service works but I need to use all available ports in the passive FTP standards (49152-65534)…
-
Configure VIP
Hi All, I have a model with Trunk, VLAN, LACP configured on 2 ports connecting to 2 Firewall servers and clients. However, from A10 I can ping the server and client. From the client I can ping the VE on A10, but cannot ping the VIP. Thanks
-
Harmony Controller license and FlexPool license are the same?
May I know the FlexPool license and Harmony Controller license are the same? Could you please explain and confirm?
-
Deleting a ve interface on a vblade
HI All, I'm sure theres an easy way to do this and I'm totally missing it. I'm trying to shutdown a ve interface on a vblade, the interface on the vmaster has already been disabled, but I get the message "This device is currently a vBlade. Try using the virtual chassis floating IP address instead." I've logged into the…
-
Config Virtual Servers ADC
Hi Support team, We are having an issue about config Virtual Servers. We are running A10 device in One-arm mode. From the A10 device, we can ping to Real Servers and can ping to client host succesfully. But from host, we can not ping to VIP (192.168.40.33), we just can ping the interface VE's ip address (192.168.40.101). I…
-
NHLD
Hello everyone! I would like to ask you for help, since I need to configure a client/server VPN where the client is the request from the internet, reaching A10, where it balances 3 links (NHLD), then the client's request the A10 must send it to the Firewall (LAN) which is the VPN server. Thanks a lot for your help!
-
Static NAT
Hello! I would like to request your help, I have a thunder which is performing the nhld function with two ISPs and 3 published sites, internet browsing and published sites work correctly, but there is a nateo that is made from one of the ISPs to a Private IP address (LAN) this nateo is used for SSL VPN connection in a…
-
Hosting and automating web content on A10 ADC
I'm looking to host a proxy PAC file internally. All changes to our PAC file are currently made via Git commits and then a member of our security team copies it over to a Web Server. This web server is very basic and does not support automation or the like. As such, we are looking at web hosting solutions that can be…
-
A10 physical to Vthunder migration
Hi All, We have A10 TH3430S in HA setup , we are planning to migrate to Vthunder. Current setup have multiple partitions(L3V) having more than 30 nos VLAN through trunk. Even some partition have more than 20 VLANs. While checking the Vthunder deplyment document I found that vmxnet3 interface does not support trunk and…
-
vcs Multicast IP address
Hi, installed the A10 V6 software in the Vpshere. VCS issue: After new build on A10 6.0.3 P2 the default multicast IP address (VCS config) is 224.0.1.210 (on V5 its 224.0.0.210) . VCS multicast IP address is 224.0.1.210. and it cause HA issue the standy by box become Standby-vMaster[1/2](NOLICENSE)> So we add the multicast…
-
Network port flap
I have 2 A10 thunder device in active passive cluster mode. We have 2 partitioned each node. Today all 4 ports in both the nodes went down and up again, causing services to move from one node to another and back again with massive service outage. What could be the issue
-
Aflex inside another Aflex
Hi I wonder if it is possible to use an Aflex inside another Aflex, for example when HTTP_RESPONSE { if { [HTTP::status] == 404 } { Aflex "ERROR-404" } } is this possible? Regards
-
slb template persist cookie template as command Aflex
How can I call an slb template persist cookie template as command in an HTTP event For example: when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals 192.168.1.10] } { pool example_server_group SLB slb template persist cookie "test" } }
-
Virtual Server UP/Down check via API
Hi all, I want to know is it possible to check if the slb virtual server is up or down via API ?
-
TCP default timeout on HTTP profile
Hello, I need help timeouts. We have a https virtual server, when i see its configuration "with-default" i see it has default tcp profile attached to it. As far as i know default tcp profile has idle timeout of 120secs. If i want to change this idle timeout to 300secs, how do I do it? Should i create a new TCP template…
-
Error HTTP
s.
-
Cookie Persistance
I have seen that some people prefer to use Aflex for cookie persistence, while others prefer to use an SLB template. Which do you think is the best?"
-
GSLB gateway failover
Hello I am trying to configure an A10 with 2 Internet Links to do response with a backup ip when gateway health check fails so I followed Multiple Gateway Links Configuration in the A10-GSLB.pdf but it´s not working This is an example of my configuration: gslb service-ip SIP-1 1.1.1.3 health-check HTTPS port 443 tcp…
-
Internet Access
Hello Does anyone know where I can request internet permission for the a10 network balancers and validate access?
-
session log is show reserve source and destination is ip 0.0.0.0 and client is not use web http
Hi, i check a box in log session is reserve source & destination is 0.0.0.0 and client says it cannot use web http quesion What could be the cause? Because when the client cannot use web http, the log session reserve source & destination will show the IP value 0.0.0.0.
-
Remote connection by domains, IPs and URLs of A10
Hi. How to achieve a remote connection through domains, IP's and URLs that have been provided to us for a few days, we managed to install a Thunder 1040 and the client requires this information. You need to know the IP address of the harmony controller to be able to establish a remote connection and start its…
-
A10 network updates
Hi. Does anyone know where I can see what are all the public IPs and domains that the appliance seeks to connect for ACOS updates?
-
Harmony Controller
hi. How can I configure the A10 Harmony Controller from CLI or Web, have its IP address to connect it to the Internet
-
A10 Thunder
Hello! Where can I find CIS level documents for A10 Thunder 1040 or similar to do the hardening.
-
GSLB Site
Hi When the GSLB Gateway site fails, do the SIPs related to this site go down in the gslb zone?
-
GSLB Gateway transparent Health monitor validation
Hello How can I configure the A10 to validate the GSLB gateway using a Health check with transparent to 8.8.8.8? for example, like we do in slb server because by default GSLB gateway validation is an ICMP to the gateway IP but if the gateway is UP but does not have access to the Internet the A10 will not know so it will…
-
502 Bad Request
Hello, I need your help. I have a subdomain which is throwing 502 bad request and is published on the internet, to get out of the problem quickly, I migrated its VIP to the old netscaler balancer and it started working without problems. Could you help me see what is happening? I have taken traffic captures and they do not…
