-
show vrrp-a floating-ip and object-group w/out showing running config
Hey, Seems simple but I'm not finding anything in the docs or postings. How do you show the floating-ip in a vrrp-a config without showing the running config for the vrrp-a section, which requires a privileged user? Likewise for object-group, how can that be shown without the running config for object-group section? I…
-
How to configure two different subnets as outside facing interfaces
Hi All, I want to add a VIP which is based on a different subnet. How can I achieve it? FYI I have configured Ethernet2 as my with the different subnet IP and able to ping it from other VLAN but failed to ping the VIP from other VLAN. Please help. Regards Azhar
-
Ansible help
Hi folks, I'm trying to setup an ansible playbook for our A10 devices. I intend to use the playbook to create new server, sg and vip configs. However, I am stuck with the overall setup and keep getting random errors. I tried to set up the playbook using both of the a10 ansible modules referrenced in the community and on…
-
Trunk interface is not allowed on vlan in non promiscuous mode
Hi, I created the TRUNK lacp. WHEN I try create vlan and tagg to trunk id 1 the tag fail with the message: Trunk interface is not allowed on vlan in non promiscuous mode Example: interface ethernet 1/1 enable trunk-group 1 lacp interface ethernet 1/2 enable trunk-group 1 lacp interface ethernet 2/1 enable trunk-group 1…
-
Problem with periodic-backup
I am attempting to schedule a periodic-backup and having some issues. I can successfully trigger backups of the system data and logs to another server via SFTP and SCP by using backup system and backup log However, when setting up a period backup using periodic-backup the backup is scheduled but it won't run successfully.…
-
SSH reverse proxy
I am wondering if there is a way to configure a reverse proxy for SSH on the Thunder AX? I wouldn't think it should be a big deal. The external side of the A10 would constitute the psudeo-server. The internal side of the A10 would be the psuedo-client connecting to the real server (just like HTTPS). The A10 would terminate…
-
axapi v3 export object - no password attribute?
Thanks for the really quick reply earlier today regarding partitions, glad to have this forum actively monitored. I'm not seeing a password attribute for the export object. I do see one for import, which works just fine. I tried passing it the attribute but it doesn't like it: { "response": { "status": "fail", "err": {…
-
axapi v3 - accessing non-shared partition objects
Anyone, With axapi v3 how does one access the non-shared partition objects? Specifically I can see and access shared partition objects/files bw-list, etc. but cannot figure out how to get to objects from other partitions: GET to => https://10.x.x.x/axapi/v3/file/bw-list/oper yields shared partition bw-list files: {…
-
InterVlan Issue - need help please
Hi, Before A10 Deployment, our Core firewall was doing the InterVlan Routing. At the moment A10 does the InterVlan Routing. While we require the Core Firewall to do that, we do have 10s of restriction policies. I have simulated this in a testing environment and appreciate your help. Here is my full configuration, system…
-
latest firmware
What is the latest version of the firmware for an AX2500
-
Browser reply "<hostname> didn't not send any data"
When user try to browse the url, it replied "hostname didn't not send any data" Anybody faced this before? User ---> A10 ---> 3 Physical servers
-
Configure Auto-Translate Port
Hi ! i try to create a Range for Auto Port translation for Oracle Web App (port 7777). I dont see this option! :/ I have ACOS 2.7.2-P10(build: 86) - TH1030S " To configure Auto-Translate Port: 1. Select Confi g Mode > Service > SLB 2. On the menu bar, select Global > Auto Translation 3. Click on one of the range names. The…
-
URL access restriction
Hi all, I'm working on a vThunder 2.7.2-P10 that is publicing many URL form a single virtual IP. Now I need to deny access from some IPs only for some URLs (not for all). For example I have 3 sites: site1.example.com site2.example.com site3.example.com And some IPs let's say: 1.2.3.4 1.2.3.5 1.2.3.6 I need those IPs can…
-
Ansible and A10 Networks
If you are operating an infrastructure with Ansible and are looking for A10 Networks modules, have a look at this Ansible Fork. It has not been scheduled to be included as it needs some airtime. You can try this out on ACOS 2.7.1 and higher as it needs aXAPI 2.1. When you find anything that is not working please let me…
-
axdebug via axapi
Hi all, Does anybody know how to start/stop axdebug capture via axapi in ACOS 4.X? (Or if it's possible in the first place?) The reference manual only told me how to export capture files. I'm trying to automate whole our testing process and I'd like to know if I could do it all with axapi only (for now, I've managed to do…
-
VCS UNSYNC
Hi all. how can we force the synchronization. vcs reload not work Image attached. Thanks
-
AXAPI: Determine when configuration last updated
Hi folks, I've been scouring the SDK documentation for the 4.1.x ADC code and have been unable to figure out how to determine the date time of the last configuration change. In the CLI I can run 'show running-config' and look at the top where it indicates when it was last updated and when it was last saved. In the earlier…
-
"certificate revocation list" and A10 Thunder
Hello, i Need to configure CRL on the A10 Thunder device. How the device handle the CRL list's? Is the device update the list or i have to do it myself? When the device update the CRL. How it works? Which protocol will be use?
-
Clustering A10's devices
Do we have a process of adding a secondary unit to current active standalone A10 device and bringing both on them into Active-Standby cluster? Are there any caveats to be noted ? Thanks, Abhi
-
Help with DNS Proxy
Hello, I am new to A10 and recently we started supporting a customer which has an AX1000 (I know it is old) and they want to use a feature that I think it is called DNS Proxy. They have a published service on two ISP links, so when, externally, you make a DNS query (nslookup) on the service you get both IPs but, when one…
-
Local log traffic is too heavy
Dera all, I have a strange message on my vThunder. I'm sending log messages to my syslog server to keep trace of the client connections, locally I log up to warning severity so I expect not overload my buffer, you can see my configuration in the screenshot attached. The problem is that I receive a lot of messages like…
-
mixed layer2 and layer3 environment
Hi, Can thunder support mixed transparent and route mode on the same chassis, or it's possible to do it between different ADPs. Thanks
-
Powershell Commandlets for A10
IS there any plan for A10 to create powershell commands/commandlets? I'm in a Microsoft shop with the VSTS devl platform and Python is not a good fit. I'd like to automate the deployment process to include the A10.
-
Mixed content not in a response
Hi All, I'm facing a problem with my vThunder version 2.7.2-P10(build:85). I have to publish an internal application that, after the login, build a dynamic content by xmlhttprequest. I made a simple configuration with https on the VIP and full reverse proxy through app switching in the http template pointing to the…
-
Login directly into "privilege mode"
I'm trying to configure A10 to change the default login to privilege mode and it doesn't seem to be working with login privilege mode command. Could you please let me know if i need any additional commands for this? Thanks, Abhi
-
Default Logging facility
Can you please let me know default logging facility both for system & audit logs? I have configured local7 both for system/audit and a remote host IP but not seeing any logs being sent to my remote syslog server. Thanks, Abhi
-
Healthcheck HTTP depndant on hostheader and header field ?
To do a check to a specific website hosted on a server, the server expects a specific hostheader and X-Forwarded-Proto:https. How can i add these in a healthcheck. can this be done in the host option of the healthcheck and then how to add X-Forwarded-Proto:https in the header Kind regards Igor
-
One web server, multiple URLs
Hi all, can somebody please advise me on the best approaches for the following two scenarios? I can't figure out whether aflex, http filters, WAF, or a combination of the three are the way to go. Scenario 1: One VIP reverse proxying one web server. This web server has several different websites with differing URLS (e.g…
-
Management Routing
Can you please confirm if the default gateway under management interface doesn't interfere with global/partition routing table?
-
Web Certificate with VRRP pair
Hello - I am updating the Web Certificate on our AX1030s which are configured for VRRP. From reading the instructions this looks to be a simple process but there was no mention of what to do if your AX1030s are configured as a VRRP pair. If I install the new Web Certificate on the Active member of the VRRP pair will it…