-
Virtual Server One port hearing and Multiple port Balance
Hi community I want to know if it is possible to balance between two different real servers that use ten different ports each of them. This using only One Virtual Server hearing in only one port This is a configuration example what I'm talking: slb server DNS1_SERVER 100.18.1.200 health-check-disable port 80 tcp…
-
Load balancing service with SSO Authentication
HI, i'm working in a new SLB service for an application with 2/3 servers. I'll try to explain the scenario: I would like to deploy a new VIP for load balancing of an application JAVA based (JBOSS Servers), for this we have to apply JSESSION ID persistence in the VIP with and aflex:…
-
Proxy Protocol headers
I know A10 doesn't support proxy protocol headers out-of-the-box but I was thinking would it be possible to do this using scripting? Meaning is it possible to alter http request so that proxy protocol headers are inserted before http method like this PROXY TCP4 192.168.0.1 192.168.0.11 56324 443\r\nGET / HTTP/1.1\r\nHost:…
-
Cannot connect to O365 via virtual server
Hi, When I'm using the real proxy servers, it successfully connects to o365 (web) and some other sites, while when im using the virtual server witch has the nodes of the proxy servers, it wont connect to 0365 and other sites. Is there a way on how to check this problem? TIA.
-
Redirect to other url
Can we redirect to external url when all real servers failed health check.
-
TCP-proxy Client-IP
Hi. We have SLB Virtual Service with type TCP-Proxy and we've also enabled Insert Client IP option in TCP-Proxy template but all traffic is forwarded from AX1030 internal IP .The question is how we can get source client IP ?
-
SSL SAN Certificates
All, I am having a problem getting my A10 to allow SAN type certificates for a virtual port. Does anyone know if its possible and if the A10 supports it?
-
SSLi Issue if you open HTTPs websites from search engines
Hi, I have noticed sometimes SSLi works sometimes not, I did couple of tests until I reached the following: if you open a browser like Google Chrome and then type a name of website (without .com or .net) like "cnn" then the browser will take you to the search engine, in our case Google Search because we are using Google…
-
axapi v3 export object - no password attribute?
Thanks for the really quick reply earlier today regarding partitions, glad to have this forum actively monitored. I'm not seeing a password attribute for the export object. I do see one for import, which works just fine. I tried passing it the attribute but it doesn't like it: { "response": { "status": "fail", "err": {…
-
axapi v3 - accessing non-shared partition objects
Anyone, With axapi v3 how does one access the non-shared partition objects? Specifically I can see and access shared partition objects/files bw-list, etc. but cannot figure out how to get to objects from other partitions: GET to => https://10.x.x.x/axapi/v3/file/bw-list/oper yields shared partition bw-list files: {…
-
InterVlan Issue - need help please
Hi, Before A10 Deployment, our Core firewall was doing the InterVlan Routing. At the moment A10 does the InterVlan Routing. While we require the Core Firewall to do that, we do have 10s of restriction policies. I have simulated this in a testing environment and appreciate your help. Here is my full configuration, system…
-
VCS avec VRRP-a shows unknown status
Hello, I have a problem with my VRRP-a configuration. Everything works fine, I dont have problem with the service but when I login into the ADC I see the VRRP-a status as unknown. Here's some troubleshooting I have done: AX-vMaster[1/1]#sh vcs summary VCS Chassis: VCS Enabled: Yes Chassis ID: 1 Floating IP: 10.20.10.102…
-
Disaster Recovery configuration example for GSLB
Posted by dbanares Hi, I would like to ask an example configuration for disaster recovery deployment. What are the options to select in the GSLB algorithm for this kind of deployment. I can't find this topic in the manual. Thanks, Dannel
-
AD group membership determine single factor vs dual factor Auth
I have a site where Active Directory group membership should determine whether users are prompted for single-factor or two-factor authentication. GroupA (single factor) - Windows server group NTML GroupB (two-factor) - RADIUS: duo I imagine there is away with an aFlex script after primary authentication to query group…
-
A10 Thunder URL match statistics
Hello, is there a way to have the match statistics for a URL? I will like to have the number of time a site is visited. I have this in real time and I have the logs, but going through the logs each time is too long and the real time information doesn't help. Any clue? Thanks in advance!
-
latest firmware
What is the latest version of the firmware for an AX2500
-
Dynamic vs Fixed CGNAT
Trying to use dynamic CGNAT, with a class list under one subnet and lid id. Have 50+ client subnets and want them to automatically receive nats from that pool. But, I have to enter each client subnet individually (which defeats the purpose). What's the resolution? Also, when is it appropriate to use fixed vs dynamic CGNAT?…
-
JSESSIONID - Persistance Issue
Hello, I have the following JSESSIONID aflex ready and applied to manage the JSESSIONID which is provided by the 2 servers. AFLEX SCRIPT:when HTTP_REQUEST {# Check if JSESSIONID existsif { [HTTP::cookie exists "JSESSIONID"] } {# JSESSIONID found in the request# we capture the first 32 charactersset jsess_id [HTTP::cookie…
-
VRF
Is it possible to configure vrfs in A10 thunders? If so, could you please provide example
-
ADFS Source IP and Query String
Is there a way to ensure you can keep this information in the header for ADFS HTTP requests? It seems to be stripped out of the connection requests I was told via a TCP template for proxy header? Specifically the Query String, user agent, and ports information Request Details: Date And Time: 2018-05-10 08:27:17 Client IP:…
-
Vthunder ethernet port down
Hi, I hope you can help me with this issuse. I am configuring a vthunder 4.1.1 on VMware 5.5. The OVF deploy was successfull but the ethernet ports are in a down state (only the eth ports, the mgmt port works whitout problems). At the VMware layer, the network adapters are "connected at power on", its driver is VMXNET3 for…
-
CGNAT remove a NAT pool problem
I got a trouble with removal a NAT pool in CGNAT appliance, No cgnv6 nat pool PX1_19707024 112.197.70.0 112.197.70.255 netmask /24 vrid 1 max-users-per-ip 64 NAT pool is currently in use. Please clear All sessions before removing the NAT pool. I cleared all sessions but it did not work. show cgnv6 nat pool PX1_19707024, I…
-
Cacti Template for ADC
Hi! Any link to download the template for Cacti? Thanks!
-
slb.aflex.upload not working
Tried various ways with trying to call the api endpoint direct as well as Axios but I cannot update an Aflex rule programatically. I always get a JSON error ({"code": 1174, "msg": "Invalid JSON document."}}), c:/temp/1.file below is a basic iRule for which I've tried to save also in various encodings, ASCII, UTF-8 etc:…
-
How to preserve the original source client IP using X-Forwarded-For or aFlex?
Hi, I have done doing the aFlex or X-forwarded-for configurations for A10, but still the SNAT IP of ax1030 seen in the Bluecoat Proxy User IP list. Is configurations also needed on bluecoat to preserve the original source IP? Btw, here's my configuration on my A10 SLB !Current configuration: 6155 bytes !Configuration last…
-
Maintaining client Source ip using Source nat
Hi, Please bare with me i am new in aflex and need to know if it is possible to maintain the source ip address of the client in Proxy SG bluecoat using sourcenat. Any feedback is highly appreciated. Thanks!
-
A10 configuration Guide
Hello, I'm new working with ADC and logically also with A10 Network products. I'm having a hard work trying to understand what is configured and how it works. I just get four of them, no one here knows how it's work or what is configured... I have some documentation but it's not helpfull, and I have a lot of question. So,…
-
Browser reply "<hostname> didn't not send any data"
When user try to browse the url, it replied "hostname didn't not send any data" Anybody faced this before? User ---> A10 ---> 3 Physical servers
-
Deleting a Partition
Hello All, I am having an issue deleting a partition. When attempting to delete the partition from the CLI, I get the below message. I have cleared all of the sessions per the message but I am still unable to delete the partition. Also, when attempting to delete the Partition from the GUI, I get a "Failed to delete…
-
JSESSIONID Persistence
Hi all. We have experiencing issues with the VIP with cookie persistence. Actual config: port 80 http no def-selection-if-pref-failed template http aaurl_switch template persist cookie Template_PERSIST_Cookie slb template persist cookie Template_PERSIST_Cookie expire 0 match-type service-group The JBOSS admins comment that…
