-
Creating a CNAME in GSLB
What I'm trying to do is quite simple, but I'm having zero luck, even after engaging support. We are using GSLB. We are SOA for abc.com. I want to create a CNAME record so ben.abc.com resolves to www.google.com (just an example of course). I created a new service under the abc.com zone, called ben, and added a CNAME entry…
-
A10 SSL insight Decryption test
Hello, i have an A10 SSL Insight configured in layer2 mode. I want to verify that is A10 decrypt my traffic or not. i have attached a TAP and use the decryption port but it showed noting. please guide...
-
vThunder for TPS
Hello, Could you please let me know if there is vThunder edition for Thunder TPS series ? As far as i have seen in the products section, vThunder is available only for Thunder ADC and Thunder CGN. Kindly confirm. Regards, Priya
-
System and config guide
Hello, Can anyone please provide me with the pdf for thunder tps series system and config guide ? I can find only ADC and not TPS. Regards, Priya
-
A10 requirement
can you please advice us below features are supported on A10 ? Replacing Peplink 380 LB - Concurrent sessions supports up to 50K - User browsing with load balancing and HA to support minimum 3 ISP links - To function a inbound dns load balancing, All the records of the domain will be hold on the A10 (A, MX, CNAME, TXT,…
-
AX2600 Admin password reset
I bought an A10 AX2600 load balancer off ebay recently to setup a vcs cluster with the existing one I already had but having issues resetting the password to default. I do have a decent amount of experience configuring these out of the box as a previous company I worked for was buying the AX3030's and I setup at least 5-6…
-
Graphing Virtual Server In/Out Throughput
Anyone able to graph the individual virtual server throughput using the accompany MIBs, either in ganglia or cacti?
-
Using a FQDN for a Server
Running into something here that I'm not sure if it is a bug or not. We're basically trying to use our Load Balancer to proxy to something out on the Internet. We have a VIP set up and the server is set to use the of the cloud service. For some reason, the Service Group stats don't show any up or down servers even though…
-
Interfaces showing as blocked in aVCS with VRRP-a Active/Active
I've got two ACOS devices and they're configured in aVCS with VRRP-a with several VRIDs. One VRID is assigned to one of the devices and the other is assigned to the second which should mean it acts as an Active/Active system. I was having some difficulty with OSPF and I noticed when changing the device context to unit 2 on…
-
active connection count
Hi, I'm still a newbie at this & new to this forum. We have 2 AX 1030s in a VRRP-A config. I'm trying to get an accurate count of active connections through a service group that has multiple servers used for ldaps. The graphs/tables on the monitor tab don't reflect the current active connection count. I know this because…
-
AX 2500 in two different locations
Hi, My company has two AX 2500 (2.7.1-GR1) forming an aVCS cluster. The boxes are in the same building right now and we want to move one box to another DC. Both sites are connected via L2 service and latency is low. The interface election protocol runs on the management interface for aVCS. We want to keep the benefits of…
-
1030S connect to Cisco Nexus 9K
hi all, i'm trying to connect A10-1030s 10GB port to 2 Cisco Nexus 9K. Using virtua; Port Channel (VPC) from 1030s to 2 Nexus 9k, but have looping error info. Is it can? Thanks.
-
GSLB Proxy | Inbound NHLD
Does anyone here tried to deployed GSLB proxy mode in NHDL setup?
-
How do I configure A10 Thunder with Interfaces Transparent?
Hi experts, Could you help me? I need configure a A10 Thunder ADC 1030s with firmware 4.1 and interfaces in mode transparent, I want that the interfaces in A10 works like a IPS (only the interfaces). Thanks
-
Updating vThunder in HA Pair - how to handle avcs with vrrp-a
Hello, I am looking at upgrading our vThunder load balancer and am wondering how I would go about disabling the avcs and vrrp-a to perform a successful upgrade of the secondary device. As I understand it, when just using vrrp-a, I could simply upgrade the secondary device, and then force the 1st device to standby with…
-
External health script using python
Hi, I am trying to write a python program to setup a external health monitor which expects a different text at different times. to elaborate the following is existing health monitor but the client indicated the server might return <COMM>0</COMM> sometimes. I didn't see regex options to implement this so looking for python…
-
Update SSL Template after Cert Upload via axapi
Hello everyone, I have created a script that uploads a certificate to our AX3200-12 with axapi. Is there a way to trigger a manual reload of the certificate, so that I don't have to update the client ssl template manually? Expected behavior: 1. upload ssl certificate with the same name as the old one 2. client ssl template…
-
Upgrade SoftAx 2.7.1 to 4.1
Has anyone successfully upgraded a SoftAx 2.7.1 to a 4.1 version?
-
Using aFlex to generate custom redirect URI
Hello, I would like to use aFlex to re-write a URL redirect using the name of each server in a service group. For example, I have virtual_serverA and multiple serverX (server1, server2, server3, etc.) in a service group. The A10 is configured to actively check the health of these servers. When someone connects to…
-
count source IP with x-forwarded-for
Hi May I count source IP with x-forwarded-for filed by aflex? ex: if one the same source IP connection more then 1000 in one min or 5 min, then log in syslog. I have referred "rate-limit-connection-requests" tcl, like below: when RULE_INIT { set ::MAX_REQUESTS 1000 } when HTTP_REQUEST { if { [HTTP::header exists…
-
vMaster inconsistent with vblade errors
Getting a bunch of these in the logs: vMaster is inconsistent with vBlade 0 Here is what I am seeing in the various vcs show commands: A10-1-Active-vMaster[1/1]#sh vcs summ VCS Chassis: VCS Enabled: Yes Chassis ID: 1 Floating IP: 10.1.99.100 Mask: 255.255.255.0 Multicast IP: 224.0.0.210 Multicast Port: 41217 Version:…
-
Redirect when HTTP_RESPONSE [HTTP::status] contains "200"
I need to set up a script that does redirection when there was status code 200 for the same page with dynamic context for example https://myURL.com/xtyfwdk I set the following script but has error Error : aFleX compile error : line 15: "command is invalid in current event context [ HTTP :: uri ]" used script When…
-
Server still in Disablel mode after graceful shutdwon expired
one of our server admins disbaled a server while there was still a user online. This activated the graceful shutdown and kept any further changes from being made. The timer has expired but the servers are still disabled. Besides rebooting the device, is there any other way to enable these servers on the A10 AX2500 again?
-
Adding additional VLAN tags to existin interfaces
My current configuration is listed below. I need to add VLAN 1910 to the Ethernet interfaces of 1 and 2 so they reside in both VLANs 910 & 1910. This needs to be done with little or no disruption the exist LAG and production network. Can this new VLAN 1910 be added and combined with VLAN 910 for both Ethernet interfaces 1…
-
Real Server NAT (South-North) when access Internet
Hi All, I need help on how to achieve source NAT for traffic originating from a real server and heading North to the Internet. I have set up our 3030s with basic Load Balancing, and using Source NAT Pool attached to various virtual services, which all works fine as expected to NAT incoming client traffic to the backend…
-
acos_migrate.pyc where can it be found
Where can i find acos_migrate.pyc. I want to do a trial run upgrade from 2.7.2x to 4.0.3 but i can't find the config migration script. Kind regards Igor
-
[ACOS]:LSN: TCP user-quota exceeded on pool
Dear Support Team, We are using Thunder Series Unified Application Service Gateway TH930(A10) as CGN. Currently we have a problem with the following log message: ============================================================================================ Mar 15 2016 10:22:40 Notice [ACOS]:LSN: TCP user-quota exceeded on…
-
Port Translation without "no dest nat" option
Hello, I need to create a virtual port that translate port and dest. But the ACOS force me to check "no dest nat" first before allow me to check "port translation". So A10 can't translate port and dest in the same virtual port/service? Am I correct?
-
Restrict SMTP to list of allowed IPs
MS Exchange 2007 services under one VIP, on AX 3200-12's in one-arm mode. I want to restrict the SMTP service to allow only a predefined list of client IP addresses or networks to go through. This would match the allow list on the Exchange Server configuration. The reason for this is since the AX's are in one-arm mode…
-
multicast log
Hello Multicast log exhaustively been continuously generated statement model: THunder930 version: 2.7.1-P6 show log : Warning [ACOS] : The total multicast packets 8212 per second on VLAN 36 has exceeded the configured limit of 1000