Capacity Flexpool License and Enterprise License Management User Guide

Capacity FlexPool License and Enterprise
License Management User Guide

A10 vThunder Series and Thunder Bare Metal Series
11 September 2018
© 2018 A10 NETWORKS, INC. CONFIDENTIAL AND PROPRIETARY- ALL RIGHTS RESERVED
Information in this document is subject to change without notice.
PATENT PROTECTION
A10 Networks products are protected by patents in the U.S. and elsewhere. The following website is provided to satisfy the virtual patent marking provi-
sions of various jurisdictions including the virtual patent marking provisions of the America Invents Act. A10 Networks' products, including all Thunder
Series products, are protected by one or more of U.S. patents and patents pending listed at:
https://www.a10networks.com/company/legal-notices/a10-virtual-patent-marking
TRADEMARKS
A10 Networks trademarks are listed at:
https://www.a10networks.com/company/legal-notices/a10-trademarks
CONFIDENTIALITY
This document contains confidential materials proprietary to A10 Networks, Inc. This document and information and ideas herein may not be disclosed,
copied, reproduced or distributed to anyone outside A10 Networks, Inc. without prior written consent of A10 Networks, Inc.
A10 NETWORKS INC. SOFTWARE LICENSE AND END USER AGREEMENT

Software for all A10 Networks products contains trade secrets of A10 Networks and its subsidiaries and Customer agrees to treat Software as confidential
information.
Anyone who uses the Software does so only in compliance with the terms of the End User License Agreement (EULA), provided later in this document
or available separately. Customer shall not:
1. Reverse engineer, reverse compile, reverse de-assemble, or otherwise translate the Software by any means.
2. Sub-license, rent, or lease the Software.
DISCLAIMER
This document does not create any express or implied warranty about A10 Networks or about its products or services, including but not limited to fit-
ness for a particular use and non-infringement. A10 Networks has made reasonable efforts to verify that the information contained herein is accurate,
but A10 Networks assumes no responsibility for its use. All information is provided "as-is." The product specifications and features described in this pub-
lication are based on the latest information available; however, specifications are subject to change without notice, and certain features may not be
available upon initial product release. Contact A10 Networks for current information regarding its products or services. A10 Networks’ products and ser-
vices are subject to A10 Networks’ standard terms and conditions.
ENVIRONMENTAL CONSIDERATIONS
Some electronic components may possibly contain dangerous substances. For information on specific component types, please contact the manufac-
turer of that component. Always consult local authorities for regulations regarding proper disposal of electronic components in your area.
FURTHER INFORMATION
For additional information about A10 products, terms and conditions of delivery, and pricing, contact your nearest A10 Networks location, which can be
found by visiting www.a10networks.com.
Capacity FlexPool License and Enterprise License Management User Guide
Contents
Table of Contents
Overview of Capacity FlexPool License Model ............................................................................. 5
Requirements for Capacity FlexPool License Model............................................................5
Architecture of Capacity FlexPool License Model................................................................6
Capacity FlexPool License Model Subscription Options .....................................................8
Advantages of Capacity FlexPool License Model ................................................................8
Configuring Capacity FlexPool Licensing ................................................................................... 11

Creating a GLM Account ..................................................................................................... 11
Applying a License to an ACOS Device .............................................................................. 12
Using the ACOS CLI ................................................................................................................................... 12
Importing the License from GLM ............................................................................................................ 13
Using VM Cloning ...................................................................................................................................... 15
Using the Cloud-Init Method .................................................................................................................... 15
Using the aXAPI Management ................................................................................................................ 15
Configuring a Forward Proxy Server (CLI).......................................................................... 16
Modifying the Bandwidth of an ACOS Device (CLI) ........................................................... 17
Revoking a License from an ACOS Device ......................................................................... 17
Revoking a License by using a CLI ......................................................................................................... 17
Revoking a License by using the GLM GUI ........................................................................................... 18
Modifying the Capacity FlexPool License .......................................................................... 18
Granting User Access to GLM............................................................................................. 19
Obtaining your UUID ............................................................................................................ 19
Obtaining ACOS UUID from the GUI ....................................................................................................... 19
Obtaining UUID from the CLI ................................................................................................................... 19
Capacity FlexPool License Renewals................................................................................. 20
Capacity FlexPool License System Messages .................................................................. 21
Contacting A10 Networks Technical Support.................................................................... 24
Overview of Enterprise License Manager ................................................................................... 27

ELM Architecture ................................................................................................................. 27
Downloading the ELM Image .............................................................................................. 28
Installing the ELM................................................................................................................ 29
Activating the ELM .............................................................................................................. 29
Exporting a License from the GLM to ELM ........................................................................ 32
Licensing an ACOS Device with an ELM License............................................................... 33
Revoking a License from the ELM ...................................................................................... 35
Limitations for ELM ............................................................................................................. 35
page 3
Contents
Global License Manager GUI ...................................................................................................... 37

About the Overview Screen................................................................................................. 38
About the Info Tab ..................................................................................................................................... 38
About the Billing Serial NumbersTab ..................................................................................................... 39
About the Activations Tab ........................................................................................................................ 39
About the Setup Tab .................................................................................................................................. 40
About the Edit License Screen............................................................................................ 40
About the Users with Access Screen ................................................................................. 40
About the License History Screen ...................................................................................... 41
About the Export License Screen ....................................................................................... 41
About the Return Resources Screen .................................................................................. 41
About the Revoke Screen .................................................................................................... 41
CLI Commands for Capacity FlexPool License ........................................................................... 43

ACOS Device Configuration Commands ............................................................................ 43
glm allocate-bandwidth .............................................................................................................. 44
glm appliance-name .................................................................................................................... 44
glm enable-requests .................................................................................................................... 45
glm enterprise ............................................................................................................................... 45
glm interval .................................................................................................................................... 46
glm port .......................................................................................................................................... 46
glm proxy-server ........................................................................................................................... 47
glm send license-request ........................................................................................................... 47
glm token ....................................................................................................................................... 48
glm use-mgmt-port ...................................................................................................................... 48
Proxy-server Configuration Commands ............................................................................. 49

host ................................................................................................................................................. 49
password ....................................................................................................................................... 50
port .................................................................................................................................................. 50
username ....................................................................................................................................... 51
Capacity FlexPool License Show Commands ................................................................... 51
show license .................................................................................................................................. 51
show license-debug ..................................................................................................................... 52
show license-info ......................................................................................................................... 53
page 4
Feedback
Requirements for Capacity FlexPool License Model
Overview of Capacity FlexPool License Model
This document provides information about the Capacity FlexPool license model supported by vThun-
der and Thunder Bare Metal instances. It also includes a step-by-step procedure on how to activate
your ACOS device.
NOTE: Capacity FlexPool license model is supported on vThunder instances

running ACOS version 4.1.1P5 or later, or 4.1.4 version or later.
The Capacity FlexPool license model enables you to subscribe to a specific bandwidth pool in the
Global License Manager (GLM) for a specific period of time, with an additional option of automatically
renewing your license before the license expiry date. Unlike previous license models supported by A10
Networks, Capacity FlexPool license is not node locked. You can configure multiple ACOS devices to
share bandwidth from the common license pool. For more information on the list of supported ACOS
devices, hypervisors, and environments, refer to “Requirements for Capacity FlexPool License Model”
on page 5.
The bandwidth usage is the sum of all outbound traffic of the licensed ACOS devices. For example,
during a DDoS attack when the ACOS device does not forward the traffic, the bandwidth is not
increased.
For Capacity FlexPool license, you purchase a license for a common bandwidth pool and then use any
of the following methods to configure multiple ACOS devices to have a specific amount of bandwidth
from the common pool:
• Using the ACOS CLI
• Importing the License from GLM
• Using VM Cloning
• Using the aXAPI Management
• Using the Cloud-Init Method
NOTE: Currently, you cannot configure Capacity FlexPool License by using the
ACOS GUI.
Requirements for Capacity FlexPool License Model

The following list describes the requirements for Capacity FlexPool license model:
page 5
FeedbackFF
Architecture of Capacity FlexPool License Model FFee
e
• Type of ACOS device—The Capacity FlexPool license model is supported for vThunder and
Thunder Bare Metal devices. These ACOS devices can run any supported ACOS appliance such
as Application Delivery Controller (ADC), Carrier Grade NAT (CGN), and Convergent Firewall
(CFW).
• Supported Platforms—The ACOS device can run on any supported hypervisor such as VMware
ESXi, KVM, or Hyper-V. Cloud instances for AWS and Azure are also supported.
• Internet access—The Capacity FlexPool license model requires that the ACOS device connect
to the Internet and reach the A10 Networks Global License Manager (GLM) server. If a direct con-
nection from the ACOS device to the GLM server is not feasible in your production environment,
you can configure a forward explicit proxy server such as Tinyproxy or Squid through which the
connection to the GLM server is maintained. For more information on how to configure the proxy
server, see “Configuring a Forward Proxy Server (CLI)” on page 16. If in case the connection to the
GLM server is lost, the license continues to operate as-is till the expiry date.
Instead of a proxy server, you can also use A10 Networks Enterprise License Manager (ELM) to
manage licenses for your ACOS device. ELM does not require an Internet access. ELM is an on-
premise license activation and management system. ELM is currently supported on vThunder and
Bare Metal systems running ACOS version 4.1.4-P2 and later. For more information, refer to “Over-
view of Enterprise License Manager” on page 27.
• DNS configuration—The ACOS device must be configured with either DNS primary or second-
ary addresses or both. Use the ip dns primary and the ip dns secondary commands to con-
figure the DNS for your system. If you are using a DHCP server to configure the IP addresses for
the interfaces, the DNS configuration is automatically updated.
NOTE: Access to the GLM GUI is optional. You can license an ACOS device by
using the CLI. However, the GLM GUI enables several advanced func-
tions. For more information, see “Global License Manager GUI” on
page 37.
Architecture of Capacity FlexPool License Model

Figure 1 is an example architecture of a production environment with two data centers containing mul-
tiple vThunder instances. Each of these data centers use a forward explicit proxy server to connect to
the Internet and then to the A10 Networks GLM server. There is also a single Bare Metal instance that is
connected to the Internet directly to access the GLM server.
Instead of a proxy server, you can also use A10 Networks Enterprise License Manager (ELM) to man-
age licenses for your ACOS device.
page 6
Feedback
Architecture of Capacity FlexPool License Model
FIGURE 1 Capacity FlexPool License Model Architecture
The major components of the architecture are described as follows:
• GLM—The GLM is the master licensing system for A10 Networks. The GLM is managed by A10
Networks and is the primary portal to view licensing information, device status, and data usage
for your ACOS devices. The GLM collects information from ACOS devices and issues licenses
upon request. The GLM provides a GUI where you can view and manage advanced licensing
functions.
• vThunder—vThunder is a virtualized, software-only version of an ACOS appliance. The vThunder
instances support most of the same features as standard hardware-based ACOS devices, but the
set of supported features may vary based on whether vThunder is running an SLB release or an
IPv6 Migration release.
• Thunder Bare Metal—Thunder Bare Metal is a fully operational, software-only version of the
ACOS Series SLB, ADC, or CGN device. In contrast with vThunder, which is installed on top of a
hypervisor layer, such as VMware ESXi or Microsoft Hyper-V, the Thunder Bare Metal solution
does not have a hypervisor layer. Without the need for an intervening hypervisor, device through-
put is optimized.
page 7
FeedbackFF
Capacity FlexPool License Model Subscription Options FFee
e
• Forward Proxy —The forward proxy server is a proxy server that is installed and running at the
premises of the production environment. It sits in the datacenter between the ACOS devices and
the GLM, with the Internet between them. The forward proxy server is an optional component for
production environments that are highly isolated and secure. The forward proxy server requires
an IP address or a hostname and a port number.
Capacity FlexPool License Model Subscription Options

The following table is a snapshot of the Capacity FlexPool subscription options.
TABLE 1 Capacity FlexPool License Model Subscription Options

Feature Description
Supported Products vThunder and Thunder Bare Metal
Supported Features CFW, ADC, and CGN
Bandwidth Pool 10 Gbps, 50 Gbps, 100 Gbps, and an enterprise level
agreement for custom bandwidths exceeding 100
Gbps.
Subscription Period One year and three years
Connection to GLM Direct or by using a forward proxy server
Advantages of Capacity FlexPool License Model

Prior to the Capacity FlexPool license model, A10 Networks licensing models included the perpetual
licensing model and the pay-as-you-go licensing model. The following list includes the advantages of
the Capacity FlexPool license model over traditional licensing models:
• Node-independent—Traditional licensing models required you to purchase one license for each
ACOS device and then apply the license to the device. If your deployment environment included
multiple vThunder instances, you required as many licenses. However, with the introduction of
the Capacity FlexPool license model, you are licensed a Capacity FlexPool and you can divide the
bandwidth of the pool amongst multiple ACOS devices without the need for additional licenses.
• Elastic bandwidth—Under the Capacity FlexPool license model, you can apply for a specific
bandwidth pool and then upgrade or downgrade the capacity of the pool without disrupting ser-
vice to your ACOS devices. Additionally, if an ACOS device does not require the assigned band-
width, the device has an option to return the bandwidth to the pool. An ACOS device can also
request for more bandwidth from the Capacity FlexPool.
• Multiple form factor—You can share a Capacity FlexPool license among ACOS devices with
different form factors. For example, your production environment may consist of vThunder and
page 8
Feedback
Advantages of Capacity FlexPool License Model
Thunder Bare Metal devices. You can use a single license to configure bandwidth for all of these
devices, each device is allocated some portion of the total bandwidth of the Capacity FlexPool.
page 9
FeedbackFF
Advantages of Capacity FlexPool License Model FFee
e
page 10
Feedback
Creating a GLM Account
Configuring Capacity FlexPool Licensing
Upon purchase of a Capacity FlexPool license subscription, you receive an email from support@a10-
networks.com listing the following:
• License expiry date—The expiry date of the Capacity FlexPool. The ACOS devices share the
license expiry date of the Capacity FlexPool.
• Bandwidth of the Capacity FlexPool—The total bandwidth of the Capacity FlexPool. Each
ACOS device is assigned a part of the bandwidth as throughput. For example, if a Capacity Flex-
Pool has a bandwidth of 10 Gbps, you can configure ten ACOS devices, each with 1 Gbps
throughput, or five ACOS device, each with 2 Gbps throughput, and so on.
• Capacity FlexPool license entitlement token—The entitlement token is an alphanumeric
string that helps to identify the Capacity FlexPool from which the ACOS instance is requesting
license activation. The entitlement token is unique for a Capacity FlexPool. An example value is
A1012345678.
NOTE: Safeguard your Capacity FlexPool license entitlement token. An ACOS

device can avail of a Capacity FlexPool license by using a correct token.
• Link to GLM—The GLM GUI provides some advanced license management capabilities. Log-
ging in to the GLM account requires a user name and password.
Creating a GLM Account

Creating a GLM account is optional. You can use the CLI to license the ACOS devices. However, a GLM
account enables you to perform advanced licensing functions. The GLM GUI is available at
https://glm.a10networks.com. For more information about the GLM GUI, refer to “Global License Man-
ager GUI” on page 37.
To create a GLM account to access the GLM GUI:
1. Access the following page: https://glm.a10networks.com

2. In the Email field, provide your email address.
3. In the Password field, enter a password for your account.
A confirmation email is sent to you for the email address provided.
4. Click Confirm my account.
page 11
FeedbackFF
Applying a License to an ACOS Device FFee
e
To log in to your GLM account, the login name is your email address from which you received the
account information.
Applying a License to an ACOS Device

You can apply a license to an ACOS device for Capacity FlexPool bandwidth by using any of the follow-
ing methods:
• Using the ACOS CLI
• Importing the License from GLM
• Using VM Cloning
• Using the aXAPI Management
• Using the Cloud-Init Method
Before applying a license to your ACOS device, ensure you meet the requirements described in
“Requirements for Capacity FlexPool License Model” on page 5.
NOTE: The minimum bandwidth of an ACOS device under Capacity FlexPool

license is 25 Mbps.
Using the ACOS CLI

The ACOS CLI requires the entitlement token. In this example, a value of A1012345678 is used for the
entitlement token. The entitlement token is listed in your GLM GUI.
Perform the following steps to apply a license to an ACOS device by using the CLI:
1. Log in to your ACOS device and access the CLI.

ACOS(NOLICENSE)>
2. Enter the configuration mode by running the following commands:

ACOS(NOLICENSE)> enable
ACOS(NOLICENSE)# configure
ACOS(config)(NOLICENSE)#
3. Specify the GLM entitlement token.

ACOS(config)(NOLICENSE)# glm token A1012345678
4. (optional) Specify the bandwidth in Mbps.

ACOS(config)(NOLICENSE)# glm allocate-bandwidth 1000
If you do not specify the bandwidth for the ACOS device, the default allocated bandwidth specified
in your GLM account for the Capacity FlexPool license is allocated to the device.
page 12
Feedback
5. Save the configuration by running the write mem command.

6. Send the license request to the GLM.
ACOS(config)(NOLICENSE)# glm send license-request.
License successfully updated, please log out and log back in to access license features
To check if the license is updated successfully, run the following command:

ACOS(config)# show license-info
If the license is applied, a result similar to the following is displayed:
Host ID : 1C247ADE4D818B4E82078060901E61B7C11345F7
USB ID : Not Available

Billing Serial : A1012345678
Product : ADC
Platform : vThunder
GLM Ping Interval In Hours : 24
------------------------------------------------------------------------------------
Enabled Licenses Expiry Date Notes
------------------------------------------------------------------------------------
SLB None
CGN None
GSLB None
RC None
DAF None
WAF None
SSLI 24-March-2018
DCFW 24-March-2018
GIFW 24-March-2018
URLF 24-March-2018
IPSEC 24-March-2018
VCPE 24-March-2018
VCPEE 24-March-2018
WAG 24-March-2018
AAM None
FP None
WEBROOT N/A Requires an additional Webroot license.
THREATSTOP N/A Requires an additional ThreatSTOP license.
1000 Mbps Bandwidth 24-March-2018
Importing the License from GLM

You can download the license file from the GLM GUI and import it into the ACOS device by using the
import glm-license command.
Perform the following steps to import the license to the ACOS device:
page 13
FeedbackFF
Applying a License to an ACOS Device FFee
e
1. Log in to your GLM account at https://glm.a10networks.com.

If you do not have a GLM account, see “Creating a GLM Account” on page 11.
2. Navigate to Overview > Downloads.
3. Click the Download License link.
FIGURE 2 Click the Download License Link
4. Save the activation key license file downloaded from the GLM GUI onto a server that can be locally
accessed over the network by your ACOS device.
5. Enter the configuration mode for the device:
6. Enter the following command to install the license:

ACOS(config)(NOLICENSE)# import glm-license file-name url
The file-name is the name of the activation key license file received from A10 Networks. The url
specifies the file transfer protocol, username (if required), and directory path. You can enter the
entire URL on the command line or press Enter to display a prompt for each part of the URL. If you
enter the entire URL and a password is required, you are prompted for the password. To enter the
entire URL, follow the format:
• tftp://host/file
• ftp://[user@]host[:port]/file
• scp://[user@]host/file
• sftp://[user@]host/file
For example: import glm-license tmp use-mgmt-port scp://user@hostname/path/to/
license_vTh7a1657c6e.txt
If you run the show license-info command, the license information is displayed.
page 14
Feedback
Using VM Cloning
You can clone an existing licensed VM and the cloned VM is automatically licensed with the exact set-
tings of the parent VM. The capacity of the pool is depleted by the amount of bandwidth assigned to
the cloned VM.
To clone a VM, refer to the documentation of the supported hypervisor.
Using the Cloud-Init Method

Cloud-init is a multi-distribution package that enables early initialization of a cloud instance. The cloud-
init method provides pre-boot configuration to the ACOS device. You can include the licensing informa-
tion in the pre-boot configuration file.
To check if the hypervisor of your system supports cloud-init, see the cloud-init documentation at
http://cloudinit.readthedocs.io.
For example, for OpenStack, the following are the recommended changes before you click Launch on
the Launch Instance window:
• Define the vThunder template.
• Obtain an ACOS image snapshot. Cloud-init requires that the ACOS device boots from a snap-
shot. To obtain a snapshot of your ACOS software, contact A10 technical support.
• Ensure that the Customization script source is set to Direct Input.
• Substitute appropriate values in the following code snippet and then encode the following script
in Base-64 format to include it as part of the post-creation script.
!
interface ethernet 1
enable
ip address dhcp
!
ip dns primary 172.18.61.2
glm token A1012345678
glm enable-requests
!
end
Using the aXAPI Management

aXAPI or ACOS XML Application Programming Interface is based on the Representational State Trans-
fer (REST) architecture. The aXAPI enables you to use custom third-party applications to configure a
Capacity FlexPool license for an ACOS device.
page 15
FeedbackFF
Configuring a Forward Proxy Server (CLI) FFee
e
The aXAPI offers an HTTP or HTTPS interface to configure the license for your ACOS device. The fol-
lowing methods are supported:
• POST
• GET
• PUT
• DELETE
For more information, see the aXAPI Reference Guide.
Configuring a Forward Proxy Server (CLI)

The forward proxy server is a proxy server that is installed and running at the premises of the produc-
tion environment. The forward proxy server is an optional component to connect to the GLM in produc-
tion environments that are highly isolated and secure. The forward proxy server requires an IP address
or a hostname and a port number. Perform the following steps to configure the forward proxy server in
the ACOS device.

ACOS(NOLICENSE)>

Password:
Press <Enter> if you have not set the password for the configuration mode.
3. Access the GLM proxy-server configuration mode.
ACOS(config)(NOLICENSE)# glm proxy-server
ACOS(config-proxy-server)(NOLICENSE)#
4. Specify the IP address (or host name) and a port through which the forward proxy server connects
to the GLM account.
ACOS(config-proxy-server)(NOLICENSE)# host 10.48.6.74
ACOS(config-proxy-server)(NOLICENSE)# port 3128
5. (Optional) Specify a user name and password for accessing the GLM through the forward proxy
server.
ACOS(config-proxy-server)(NOLICENSE)# username foobar
ACOS(config-proxy-server)(NOLICENSE)# password foobar
6. Exit the GLM proxy-server configuration mode.

ACOS(config-proxy-server)(NOLICENSE)# exit
The forward proxy server can now be used to access the GLM server.
page 16
Feedback
Modifying the Bandwidth of an ACOS Device (CLI)
To apply for a license by using the CLI, see “Using the ACOS CLI” on page 12.
Modifying the Bandwidth of an ACOS Device (CLI)

NOTE: If you wish to modify the bandwidth of your current Capacity FlexPool,
send an email to the A10 Networks Sales team.
You can modify the bandwidth of an ACOS device without disrupting service. In this example, the band-
width allocated to the ACOS device is modified from 1 Gbps to 5 Gbps. To modify the bandwidth, per-
form the following steps:
1. Log in to the ACOS device and enable the configuration mode:

ACOS> enable
ACOS# configure
2. Specify the new bandwidth in Mbps.

ACOS(config) glm allocate-bandwidth 5000

4. Send the license request to GLM.
ACOS(config) glm send-license request
5. Run the show license-info command to check if the bandwidth is updated.
Revoking a License from an ACOS Device

You can remove a license from an ACOS device by either using the CLI or the GLM GUI. After a license
is revoked, the bandwidth is returned to the Capacity FlexPool.
Revoking a License by using a CLI

Perform the following steps to revoke a license from the ACOS device by using the CLI.
1. Log in to the ACOS device and enable the configuration mode:

ACOS> enable
ACOS# configure
2. Run the delete command to revoke the license.

ACOS(config)# delete glm-license
Deleting GLM License
page 17
FeedbackFF
Modifying the Capacity FlexPool License FFee
e
3. Run the show license-info command to check if the license information is updated.
Revoking a License by using the GLM GUI

Perform the following steps to revoke a license from an ACOS device by using the GLM GUI:

2. Navigate to Overview > Activations.
3. Select the ACOS device for which you want to revoke the license.
You can either identify the ACOS device by using the MAC address or the UUID.
To identify the MAC address for an ACOS device, run the command show interface brief.
To identify the UUID for an ACOS device, see “Obtaining your UUID” on page 19.
4. Click the Revoke Activations button for the ACOS device.
Confirm your changes.
The ACOS device is now listed under the Revoked tab.
The ACOS device must be connected to the GLM server to reflect the changes. On the ACOS
device, run the enable license-requests command to update the ACOS device.
Modifying the Capacity FlexPool License

You can modify the following properties of the Capacity FlexPool license in the GLM GUI:
• Name
• Minimum allocated bandwidth (in Mbps)
• Default allocated bandwidth (in Mbps)
• Maximum allocated bandwidth (in Mbps)
• Check-in frequency
After making the changes, click Update License to save the changes. For more information on the
fields, see “About the Edit License Screen” on page 40.
page 18
Feedback
Granting User Access to GLM
Granting User Access to GLM

When you purchase a capacity license pool, you are provided a GLM account. You can authorize others
users access to your GLM account to perform license administration tasks.
To add a user to the GLM account, perform the following steps:

2. Click Users with Access.
3. Enter the email address of user in the email address box and then click Grant Access.
The user is sent a confirmation email to log in.
Obtaining your UUID

The Universally Unique Identifier (UUID) or host-ID is a hexadecimal number tied to your ACOS device.
The UUID is not the user-configurable system host name. It is a 40-digit hexadecimal number that
appears similar to the following: 5172DE29D49EE3C101C7A0CD54FB8A0B6EC92CEE
CAUTION: If you upgrade your underlying hypervisor, the UUID of the ACOS device
changes, thus invalidating the installed vThunder license. Therefore, if
you choose to upgrade to a newer hypervisor version, follow the steps in
Applying a License to an ACOS Device to activate your license.
You can either use the ACOS GUI or the CLI to access the UUID of an ACOS system.
Obtaining ACOS UUID from the GUI

Perform the following steps to obtain the UUID of your system from the ACOS GUI:
1. Log in to your ACOS GUI.

2. Navigate to System >> Admin.
3. Click on the Licensing tab, if not already selected, and the “Host ID” is displayed.
Obtaining UUID from the CLI

Perform the following steps to obtain the UUID of your system to obtain the UUID from the CLI:
page 19
FeedbackFF
Capacity FlexPool License Renewals FFee
e
1. Establish a connection to the ACOS device through the management interface.

2. Access the Privileged EXEC (enable) level or any configuration level of the CLI.
3. Enter the following command: show license uid
4. Copy the entire UID, which is the hexadecimal string displayed by the CLI.
Capacity FlexPool License Renewals

You can extend the license of your Capacity FlexPool at any time by contacting A10 Networks. You also
have an option to subscribe for auto-renewal of your license which renews the license 30 days prior to
expiry.
If you have extended the license of your Capacity FlexPool, ensure that the licenses of your ACOS
devices are similarly updated. You can use the glm enable-requests command to update the status of
your ACOS devices immediately. If your ACOS device is not connected to the GLM server, the license of
the device is not updated.
If you have not opted for auto-renewal, you are sent email notifications from the GLM GUI. Additionally,
the ACOS device generates syslog messages. There is also a grace period of seven days available. to
you after your license expires. The following is a sample output during a grace period. Notes the sys-
tem messages generated during this time.
ACOS(config)#sh license-info
Host ID : 06E0CE80A67595FF3AE50D0CE9F9F28DAD7AF2C0
Billing Serial : vTha123456780000
Product : CFW
Platform : vThunder
------------------------------------------------------------------------------------
------------------------------------------------------------------------------------
SLB None
CGN None
GSLB None
RC None
DAF None
WAF None
SSLI 11-July-2020 Grace period days remaining 7.
DCFW 11-July-2020 Grace period days remaining 7.
GIFW 11-July-2020 Grace period days remaining 7.
URLF 11-July-2020 Grace period days remaining 7.
IPSEC 11-July-2020 Grace period days remaining 7.
AAM None
page 20
Feedback
Capacity FlexPool License System Messages
FP None
5000 Mbps Bandwidth 11-July-2020

The following table lists the messages you may encounter for Capacity FlexPool license.
TABLE 2 Capacity FlexPool License System Messages

Message Description
ERROR: License GLM connection error The ACOS device cannot ping the GLM
server.
[SCM]:CURL: Error while making GET requests The DNS address is not configured for the
HTTP_CODE: 0 ERROR: Couldn't resolve host 'glm.a10- ACOS device.
networks.com'
[SCM]: License has changed System message generated when a change
in the license is applied successfully.
[SCM]:GLM License is valid System message generated when a license
is checked as valid.
[SCM]: License Subscription verified System message generated when a license
is verified.
page 21
FeedbackFF
Capacity FlexPool License System Messages FFee
e

Message Description
Jul 28 2017 06:53:03 Critical System message generated when the
license in near the expiry date.
[SCM]BANDWIDTH License expiring on 01-August-2017
Jul 28 2017 06:53:03 Critical
[SCM]CPU CORES License expiring on 01-August-2017
Jul 28 2017 06:53:03 Critical
[SCM]IPSEC License expiring on 01-August-2017
Jul 28 2017 06:53:03 Critical
[SCM]URLF License expiring on 01-August-2017
Jul 28 2017 06:53:03 Critical
[SCM]GIFW License expiring on 01-August-2017
Jul 28 2017 06:53:03 Critical
[SCM]DCFW License expiring on 01-August-2017
Jul 28 2017 06:53:03 Critical
[SCM]SSLI License expiring on 01-August-2017
Jul 28 2017 06:53:03 Critical
[SCM]CFW License expiring on 01-August-2017
page 22
Feedback

Message Description
Aug 25 2022 22:01:13 Critical System message generated when the
Capacity FlexPool license has expired.
[SCM]:Please contact support
Aug 25 2022 22:01:13 Critical
[SCM]:BANDWIDTH License expired on 11-July-2020. 7 days

grace period elapsed as well.
Aug 25 2022 22:01:13 Critical
[SCM]:CPU CORES License expired on 11-July-2020. 7 days

grace period elapsed as well.
Aug 25 2022 22:01:13 Critical
[SCM]:IPSEC License expired on 11-July-2020. 7 days grace

period elapsed as well.
Aug 25 2022 22:01:13 Critical
[SCM]:URLF License expired on 11-July-2020. 7 days grace

Aug 25 2022 22:01:13 Critical
[SCM]:GIFW License expired on 11-July-2020. 7 days grace

Aug 25 2022 22:01:13 Critical
[SCM]:DCFW License expired on 11-July-2020. 7 days grace

Aug 25 2022 22:01:13 Critical
[SCM]:SSLI License expired on 11-July-2020. 7 days grace

Aug 25 2022 22:01:13 Critical
[SCM]:CFW License expired on 11-July-2020. 7 days grace

Jul 27 2017 11:01:49 Info System message generated when an invalid
token is presented to the GLM server.
[SCM]:GLM return:The token sent does not match any know
licenses
page 23
FeedbackFF
Contacting A10 Networks Technical Support FFee
e
Contacting A10 Networks Technical Support

You can contact A10 Networks Technical Support by either phone or email. For email support, go to
https://www.a10networks.com/support and log a help ticket. For phone support, check the applicable
telephone number for your country at https://www.a10networks.com/company/contact-us.
For an ACOS device with Capacity FlexPool license, keep the following information in hand:
• Synopsis of the issue
• Product model
• Software version of ACOS
• Billing serial number
• Customer address
• Customer contact information
• Configuration and/or network topology information (if relevant)
To obtain the billing serial number, run the show license-info command for your ACOS device. Output
similar to the following is displayed, the billing serial number is highlighted:
vThunder#sh license-info
Host ID : 747EBADBE84D7D54708406126B8F7A9A8C18A3A0
Product : ADC
Platform : vThunder
------------------------------------------------------------------------------------
------------------------------------------------------------------------------------
SLB None
CGN None
GSLB None
RC None
DAF None
WAF None
SSLI 07-July-2020
DCFW 07-July-2020
GIFW 07-July-2020
URLF 07-July-2020
IPSEC 07-July-2020
VCPE 07-July-2020
VCPEE 07-July-2020
WAG 07-July-2020
page 24
Feedback
Contacting A10 Networks Technical Support
AAM None
FP None
page 25
FeedbackFF
Contacting A10 Networks Technical Support FFee
e
page 26
Feedback
ELM Architecture
Overview of Enterprise License Manager
A10 Networks Enterprise License Manager (ELM) is an on-premise license activation and management
system.
ELM is currently supported on vThunder and Bare Metal systems running ACOS version 4.1.4-P2 and
later. ELM is also supported on ACOS version 4.1.1.P8. ELM supports Capacity FlexPool licenses.
Some of the features of ELM include the following:
• A bi-directional transfer of licenses between the Global Licensing Management (GLM) and ELM,
by using an email client to download an ELM-specific license.
• Secured communication between the license nodes and ELM.
• Multiple user-interfaces for the license platform including HTTP, REST, and APIs.
• Easily installable format by using an OVA image.
• Multiple user logins for the license platform.
ELM software copy and activation keys are accessed through the GLM account. The account defines
the number of ELMs assigned. If the number of EMS assigned is five, it means the user can have five
ELM instances on the customer premise.
ELM Architecture
The ELM image can be installed on a system as a VM and then connected to the customer network to
manage licenses. In the following figure, the customer has two instances of ELM running on the prem-
ises. Each ELM manages a set of ACOS devices. Each ELM instance is assigned a minimum of one
Capacity FlexPool license that is then divided amongst the pool of vThunder devices based on the
throughput.
NOTE: Connection to the GLM is made through the Internet; however it is not a
requirement for the ELM to function.
page 27
FeedbackFF
Downloading the ELM Image FFee
e
FIGURE 3 Architecture of ELM
Downloading the ELM Image

You can download the ELM image from your Global License Manager (GLM) account. See the following
URL: https://glm.a10networks.com/downloads.
The A10 sales team should have set up a GLM account for you when you first purchased the product. If
you do not yet have a GLM account, contact sales@a10networks.com.
page 28
Feedback
Installing the ELM
Installing the ELM

You can install the ELM OVA image on a system configured with at least 10 GB of hard drive space and
1 GB of memory. The system can run any of the hypervisors such as VMware ESXi, KVM, or Hyper-V.
Also, the VM created for ELM must be configured such that the ACOS devices it is responsible for
licensing are reachable from the VM.
Ensure that you have already downloaded the ELM image.
Perform the following steps to install the ELM, the hypervisor used in this example is ESXi:
1. Log in to the host machine.

2. Follow the hypervisor documentation to create a virtual machine.
For ESXi, select the option Deploy a virtual machine from an OVF or OVA file.
3. Click Next.
4. Enter a name for the virtual machine, such as ELM-1.
5. Drag and drop the OVA image you had downloaded in the space provided and click Next.
6. Accept the default storage option and click Next.
7. Connect to the network switch which is connected to the ACOS devices for which you require ELM
management.
8. Leave the other defaults as-is and click Next.
9. Click Finish to create the ELM virtual machine.
After installing the ELM, log in to the ELM VM by using the CLI.
NOTE: Use the username ubuntu and password 10networks to login to the VM.
After you log in to the ELM VM, you can either specify an IP address for the ELM or specify a hostname.
You require a DNS server to specify the hostname. Also, specify the default gateway for the ELM. Save
the settings and exit from the VM.
Activating the ELM

Activating the ELM requires you to navigate to the ELM IP address or hostname.
Before activating the ELM, ensure the following:
• You have already set up the ELM instance by installing the image.
page 29
FeedbackFF
Activating the ELM FFee
e
• A10 Networks has assigned ELM instances to your GLM account. The number of ELM instances
assigned equals the total number of ELM VMs you can install on-premise. You can sign into your
GLM account and check the ELM tab on the left pane.
FIGURE 4 ELM tab in the GLM Account
Perform the following steps to activate ELM:
1. On navigating to the ELM IP address for the first time, you see the Welcome to ELM message.
Click Next.
The Networking screen is displayed.
2. In the Networking screen, specify the IP address or hostname of the ELM instance and click
Next.
The IP address or hostname is usually auto-filled.
The ELM Activation screen is displayed.
3. In the ELM activation screen, copy the ELM UUID, navigate to the specified URL, and paste the
UUID there.
4. Click Activate.
An activation string is generated in the specified URL.
page 30
Feedback
Activating the ELM
FIGURE 5 ELM Activation Screen
5. Copy the activation text and paste it in the box provided in the ELM Activation screen.
As an alternative, you can also download the activation file and upload it in the space provided.
6. Click Upload.
The Create User screen is displayed.
7. Enter your email address and password and click Create User.
8. In the final screen, you are prompted for the next step which is to import a license from the GLM to
the ELM.
You can ignore it for now and go to the home tab instead.
page 31
FeedbackFF
Exporting a License from the GLM to ELM FFee
e
Exporting a License from the GLM to ELM

ELM currently supports importing Capacity FlexPool licenses.
Before performing the procedure, ensure that the ELM instance is activated. Also ensure that A10 Net-
works has already assigned you a Capacity FlexPool license.
1. Navigate to your ELM VM and copy the ELM UUID from the homepage.
2. Navigate to your GLM account and click on the Licenses tab.
3. Click the Capacity FlexPool license assigned to you.
4. From the left-pane of the license screen, click Export License.
The Export License screen is displayed.
FIGURE 6 Export License in the GLM UI
5. In the Export License screen, paste the UUID of the ELM and click Export.
An activation text is displayed.
6. Copy the activation text.
7. Go back to the ELM URL and click on Import license.
page 32
Feedback
Licensing an ACOS Device with an ELM License
FIGURE 7 Click Import a new license in ELM Homepage
8. In the Import license screen, paste the activation text and click Upload.
9. In the ELM screen, under the Overview tab, you now see the license details of the license that you
just exported.
NOTE: If you request A10 Networks to make changes to a license that is dedi-
cated to an ELM instance, you must repeat the steps in this procedure to
import the license again from GLM to ELM. Else, the changes requested
for your license are not activated in your ELM instance.
Licensing an ACOS Device with an ELM License

The ACOS CLI requires the entitlement token for the license activation procure. In this example, a value
of A1012345678 is used for the entitlement token. The entitlement token is listed in your ELM GUI for the
specific license.
Perform the following steps to apply a license to an ACOS device by using the CLI:

ACOS(NOLICENSE)>

page 33
FeedbackFF
Licensing an ACOS Device with an ELM License FFee
e
3. Specify the ELM IP address to which you are connecting your ACOS device:
ACOS(config)(NOLICENSE)# glm enterprise 10.10.10.1
4. Specify the GLM entitlement token.

5. (optional) Specify the bandwidth in Mbps.

If you do not specify the bandwidth for the ACOS device, the default allocated bandwidth specified
in your GLM account for the Capacity FlexPool license is allocated to the device.
7. Send the license request to the GLM.
To check if the license is updated successfully, run the following command:

ACOS(config)# show license-info
If the license is applied, a result similar to the following is displayed:
Host ID : 1C247ADE4D818B4E82078060901E61B7C11345F7

Product : ADC
Platform : vThunder
------------------------------------------------------------------------------------
------------------------------------------------------------------------------------
SLB None
CGN None
GSLB None
RC None
DAF None
WAF None
SSLI 24-March-2018
DCFW 24-March-2018
GIFW 24-March-2018
URLF 24-March-2018
IPSEC 24-March-2018
VCPE 24-March-2018
VCPEE 24-March-2018
WAG 24-March-2018
AAM None
FP None
1000 Mbps Bandwidth 24-March-2018
page 34
Feedback
Revoking a License from the ELM
Revoking a License from the ELM

To revoke a license from ELM, you must first revoke it from ELM and then repeat the procedure in GLM.
1. Navigate to your ELM instance IP address or hostname in the browser.

2. Go to Overview >> Activations and click the revoke icon for the specific license.
3. Click the Revoke tab on the left-pane.
The Revoke License window is displayed.
4. If you agree to the terms, click Agree.
The Revoked License screen is displayed.
5. From the Revoked License screen, copy the revoked license audit string.
6. Navigate to the GLM URL specified in the screen and paste the license audit string in the Return
License window. Click Upload.
A message indicates the license is successfully returned to the GLM along with the resources.
Limitations for ELM

Some of the limitations for ELM are discussed in the following section:
• On deleting an ELM instance, all the licenses associated with the ELM are lost.
• After you connect to a specific ELM using the glm enterprise command, the ELM instance can-
not be changed to another one.
• If the IP address of the ELM is modified, the message endpoint cannot be reconfigured.
page 35
FeedbackFF
Limitations for ELM FFee
e
page 36
Feedback
Global License Manager GUI
The A10 Networks Global License Manager (GLM) enables you to manage licenses for various ACOS
devices. Additionally, you can perform advanced licensing functions such as viewing the throughput
usage, adjusting the maximum, default, and minimum bandwidth, revoking licenses, and so on.
You are provided the login credentials for GLM in an email from support@a10networks.com after you
purchase a subscription for a Capacity FlexPool. Figure 8 is an example of the initial sign in page for
GLM.
FIGURE 8 Initial GLM Sign In Page
The initial GLM screen shows you the list of all available licenses that you have, including perpetual and
subscription.
If you select the Capacity FlexPool subscription link for any of the licenses, you can access the follow-
ing screens:
• Overview screen
• Edit License screen
page 37
FeedbackFF
About the Overview Screen FFee
e
• Users with Access screen
• License History screen
• Export License screen
• Return Resources screen
• Revoke screen
About the Overview Screen

Figure 9 displays the GLM Capacity FlexPool overview screen. The screen has the following tabs:
• Info
• Billing Serial Numbers
• Activations
• Setup
FIGURE 9 GLM Capacity FlexPool Overview Screen
About the Info Tab

The Overview > Info tab has the following UI elements:
page 38
Feedback
About the Overview Screen
• Active/Registered Appliances—The number of ACOS devices currently reachable from the

GLM server/The number of ACOS devices consuming bandwidth from the common Capacity
FlexPool.
• Entitlement Token—The alphanumeric string that uniquely identifies a Capacity FlexPool and
is required to license an ACOS device. This is provided by A10 Networks.
• Expires—Date by which the Capacity FlexPool expires.
• Check in Frequency—The time period after which the GLM server pings the ACOS device. The
value is configurable for the Capacity FlexPool. For more information on configuring this value,
see “About the Edit License Screen” on page 40.
• Available Capacity—The blue bar indicates the amount of bandwidth consumed by all ACOS
devices licensed to the Capacity FlexPool, and the grey bar indicates the amount of bandwidth
not yet allocated.
• Minimum Allocated Bandwidth—The minimum bandwidth that an ACOS device can request
from the specific Capacity FlexPool. The value is configurable for the Capacity FlexPool. For
more information on configuring this value, see “About the Edit License Screen” on page 40.
• Default Allocated Bandwidth—The bandwidth allocated to an ACOS device that requests a
license from the Capacity FlexPool but does not specify the bandwidth. The value is configurable
for the Capacity FlexPool. For more information on configuring this value, see “About the Edit
License Screen” on page 40.
• Maximum Allocated Bandwidth—The maximum bandwidth that an ACOS device can request
from a specific Capacity FlexPool. The value is configurable for the Capacity FlexPool. For more
information on configuring this value, see “About the Edit License Screen” on page 40.
• Bandwidth Usage—A real-time graph with time plotted on the x-axis and the bandwidth plotted
on the y-axis to show a graphical representation of bandwidth utilization by ACOS devices
licensed to the Capacity FlexPool.
About the Billing Serial NumbersTab

The Overview >> Billing Serial Numbers tab contains all the serial numbers of the licenses pur-
chased.
About the Activations Tab

The Overview >> Activations tab lists the ACOS devices that are currently licensed to the Capacity
FlexPool. The tab has the Unrevoked and Revoked sections. The ACOS devices can have the follow-
ing status under the Unrevoked tab:
• Active—The GLM server is currently receiving heartbeats from the licensed ACOS device, as con-
figured by the check-in frequency value.
page 39
FeedbackFF
About the Edit License Screen FFee
e
• Inactive—The GLM server is not receiving any heartbeat from the licensed AOCS device and the
time period has crossed the check-in frequency value.
• Unregistered—The ACOS device has deleted the license of the Capacity FlexPool.
The ACOS devices can have the following status under the Activations > Revoked tab:
Archived—The license of the ACOS device is revoked from the GLM.
About the Setup Tab

The Overview > Setup tab enables you to download a text file of your license. It also provides you with
the commands to apply the license by using the following two methods:
• “Using the ACOS CLI” on page 12
• “Importing the License from GLM” on page 13
About the Edit License Screen

The Edit License screen has the following UI elements:
• Name—The name of the license.
• Minimum Allocated Bandwidth (in Mbps)—The minimum bandwidth that an ACOS device
can request from the specific Capacity FlexPool.
• Default Allocated Bandwidth (in Mbps)—The bandwidth allocated to an ACOS device that
requests a license from the Capacity FlexPool but does not specify the bandwidth.
• Maximum Allocated Bandwidth (in Mbps)—The maximum bandwidth that an ACOS device
can request from a specific Capacity FlexPool.
• Check-in Frequency— The time period after which the GLM server pings the ACOS devices
licensed to the Capacity FlexPool.
• Notes—A text box for storing information.
You can edit all of the afore-mentioned fields and click Update License to save the changes.
About the Users with Access Screen

This screen displays the users with access to GLM.
page 40
Feedback
About the License History Screen
To add users to the GLM GUI, see “Granting User Access to GLM” on page 19.
About the License History Screen

The License History screen is a log of all the changes that GLM users have made to the Capacity
FlexPool license.
About the Export License Screen

The Export License screen enables you to move the Capacity FlexPool license from GLM to ELM.
About the Return Resources Screen

If you revoke a license, use the Return Resources screen to return all the license to A10 Networks.
About the Revoke Screen

The Revoke screen enables you to revoke a Capacity FlexPool license.
page 41
FeedbackFF
About the Revoke Screen FFee
e
page 42
Feedback
ACOS Device Configuration Commands
CLI Commands for Capacity FlexPool License
The commands in this chapter configure the Capacity FlexPool license for a supported ACOS device.

The following commands are available in configuration mode to configure a Capacity FlexPool license.
• glm allocate-bandwidth
• glm appliance-name
• glm enable-requests
• glm enterprise
• glm interval
• glm port
• glm proxy-server
• glm send license-request
• glm token
• glm use-mgmt-port
page 43
ACOS x.x.x Capacity FlexPool License and Enterprise License Management User Guide for A10 Thunder Series
FeedbackFF
ACOS Device Configuration Commands FFee
e
glm allocate-bandwidth
Description Allocates the specified bandwidth in Mbps from the Capacity FlexPool to an
ACOS device.
Syntax [no] glm allocate-bandwidth bandwidth-value
Parameter Description
bandwidth-value A number for the specified bandwidth in Mbps. The mini-
mum, maximum, and default values for the bandwidth is
configurable in the GLM.
Default None.
Mode Global configuration mode
Usage Use this command to allocate bandwidth from a Capacity FlexPool to an

ACOS device. If you do not specify the bandwidth by using this command,
the value of the Default Allocated Bandwidth field in GLM (if already con-
figured) is specified for the device. The value of Default Allocated Band-
width is configurable in GLM.
Example The following example allocates a bandwidth of 1000 Mbps to an ACOS

device.
glm appliance-name
Description Creates a name for the ACOS device so that it is easily identified in the GLM.
Syntax [no] glm appliance-name appliance_name
appliance_name A name for the ACOS device.
Default None.
Usage Use this command to create a name for the ACOS device for easy identifica-
tion. Apart from the UUID and MAC address, GLM can also use the appli-
ance-name for easy identification. Uniqueness amongst ACOS appliance
names is not enforced, so it is recommended to use unique strings for each
ACOS appliance.
Example The following example creates a name for the ACOS device.
page 44
Feedback
ACOS(config)(NOLICENSE)# glm appliance-name vm_database
glm enable-requests
Description Enables the license retrieval request from the GLM server.
Syntax [no] glm enable-requests
Default The default value is 24 hours.
Usage Use this command to update the license of the ACOS device immediately.
For example, if you have extended the subscription period for your capacity
license pool, you can run glm enable-requests to update the license for your
ACOS device. You can configure the GLM license request interval by using
the “glm interval” on page 46 command.
Example ACOS(config)(NOLICENSE)# glm enable-requests
glm enterprise
Description Specifies the IP address or host name of the ELM to which the ACOS device
connects.
Syntax [no] glm enterprise { ip_address | hostname }
ip_address IP address of the ELM instance.
hostname Hostname of the ELM instance.
Default None.
Usage Use this command to specify to which ELM instance the ACOS device must
be connected for licensing.
Example The following example connect the ACOS device to an ELM with an IP
address of 10.10.10.1.
ACOS(config)(NOLICENSE)# glm enterprise 10.10.10.1
page 45
FeedbackFF
e
glm interval
Description Configures the interval in hours for the GLM license request.
Syntax [no] glm interval interval-time
interval-time A number for the GLM license request interval in hours.
The value ranges from 1 through 8760.
Default The default value is 24 hours.
Usage Use this command to configure the interval for the GLM license request.
After each interval, the ACOS device pings the GLM server.
Example The following example configures the GLM license request as 48 hours for
an ACOS device.
ACOS(config)# glm interval 48
Setting GLM ping interval to 48 hours.
glm port
Description Configures port of the ACOS device for the GLM license request.
Syntax [no] glm port port_number
port_number A number for the port.
Default The default value is 443.
Usage Use this command to configure the port of the ACOS device through which
the ACOS device connects to the GLM server.
The following example configures the port an ACOS device.
ACOS(config)# glm port 625
page 46
Feedback
glm proxy-server
Description Configures the proxy server through which the ACOS device connects to the
GLM server and enters the GLM proxy server configuration mode.
Syntax [no] glm proxy-server
Default None.
Usage Use this command to configure the proxy server through which an ACOS
device connects to the GLM server. For more information about the glm
proxy server configuration mode, see “Proxy-server Configuration Com-
mands” on page 49. The following parameters are required:
host A hostname or IP address of the proxy-server.
port A port number for the proxy-server.
Example The following example configures a proxy server for an ACOS device.
ACOS(config-proxy-server)(NOLICENSE)# exit
glm send license-request

Description Immediately sends a license request from the ACOS device to the GLM
server.
Syntax [no] glm send license-request
Default None.
Usage Use this command to immediately send a license request from the ACOS
device to the GLM.
Example The following example configures a license and sends a license request.
License successfully updated, please log out and log back in to
access license features
page 47
FeedbackFF
e
glm token
Description Updates the ACOS device with the GLM token.
Syntax [no] glm token token-number
token-number An alphanumeric string. The value is provided by A10 Net-
works.
Default None.
Usage The entitlement token is an alphanumeric string that uniquely identifies a

Capacity FlexPool and is required to license an ACOS device. The value of
the token is provided by A10 Networks. An ACOS device must be configured
with the entitlement token before configuring a license.
Example The following example configures a license and sends a license request.
ACOS(config)(NOLICENSE)# glm send license-request
License successfully updated, please log out and log back in to
access license features
glm use-mgmt-port
Description Configures the ACOS device to connect to the GLM server by using the man-
agement port.
Syntax [no] glm use-mgmt-port
Default None.
Usage Use this command to force the ACOS device to connect to the GLM server by
using the management port.
Example ACOS(config)(NOLICENSE)# glm use mgmt-port
page 48
Feedback
Proxy-server Configuration Commands
Proxy-server Configuration Commands

The following commands are available when you run the glm proxy-server command in the global
configuration mode:
• host
• password
• port
• username
host
Description Configures the host for the proxy server.
Syntax [no] host host-name
host-name A name for the host or an IP address in IPv4 format. For
the name, the maximum length of the string is 255 charac-
ters.
Default None.
Mode GLM proxy-server configuration mode
Usage Use this command to configure the host name or IP address of the proxy
server for the GLM.
Example The following example configures the host for a proxy server for an ACOS
device.
page 49
FeedbackFF
Proxy-server Configuration Commands FFee
e
password
Description Configures a password for the proxy server.
Syntax [no] password password-text
password-text A password string. The maximum length of the string is
127 characters.
Default None.
Usage Configuring a password is optional for the proxy-server.
Example The following example configures a password for the proxy-server.

ACOS(config-proxy-server)(NOLICENSE)# password foobar
port
Description Configures a port for the proxy server.
Syntax [no] port
port-number A number for the port for the GLM proxy server. The value
ranges from 1 through 65535.
Default None.
Usage Use this command to configure a port for the proxy server.
Example The following example configures a port for the proxy server.
page 50
Feedback
Capacity FlexPool License Show Commands
username
Description Configures a username for the proxy server.
Syntax [no] username
username-text A username string. The maximum length of the string is
127 characters.
Default None.
Usage Configuring a username is optional for the proxy server.
Example The following example configures a username for the GLM proxy-server.
ACOS(config-proxy-server)(NOLICENSE)# username foobar

The following show commands are available for the ACOS device in terms of the Capacity FlexPool
license feature:
• show license
• show license-debug
• show license-info
show license
Description Displays the host ID of this ACOS device.
Syntax show license [uid]
Mode Privileged EXEC or higher
Example The following example shows sample output for this command.
ACOS# show license
Host ID: 029984E1BC8EF50901B63DC0DCD1FE8A02017B9B
ACOS# show license uid
029984E1BC8EF50901B63DC0DCD1FE8A02017B9B
page 51
FeedbackFF
Capacity FlexPool License Show Commands FFee
e
show license-debug
Description This command is for internal use of A10 Networks and is documented to
notify that it does not serve any useful purpose to the customer.
Syntax show license-debug
Mode All
Example The following is a sample output.

Product : ADC
Platform : vThunder
-------------------------------------------------------------------
-------------------------------------------------------------------
SLB None
CGN None
GSLB None
RC None
DAF None
WAF None
SSLI 07-July-2020
DCFW 07-July-2020
GIFW 07-July-2020
URLF 07-July-2020
IPSEC 07-July-2020
VCPE 07-July-2020
VCPEE 07-July-2020
WAG 07-July-2020
AAM None
FP None
WEBROOT N/A Requires an additional
Webroot license.
THREATSTOP N/A Requires an additional
ThreatSTOP license.
page 52
Feedback
show license-info
Description Show current product SKU and license information on the ACOS device.
Syntax show license-info
Mode All
Usage The following table describes the fields in the command output.
Field Description
Host-ID Unique ID for the ACOS device.
USB-ID A legacy parameter, not required.
Billing Serial Auto-generated string for billing reference.
Product Type of A10 Networks product.
Platform Type of A10 device, whether hardware, hypervisor-based
or cloud-based.
GLM Ping Interval Time after which the ACOS device pings the GLM server.
Enabled Licenses Products for which the license is enabled.
Expiry Date Date by which the license of the ACOS device expires.
Notes Any notes authored.
Example The following is a sample output.

Product : ADC
Platform : vThunder
-------------------------------------------------------------------
-------------------------------------------------------------------
SLB None
CGN None
GSLB None
RC None
DAF None
WAF None
SSLI 07-July-2020
DCFW 07-July-2020
GIFW 07-July-2020
URLF 07-July-2020
IPSEC 07-July-2020
VCPE 07-July-2020
VCPEE 07-July-2020
WAG 07-July-2020
AAM None
FP None
WEBROOT N/A Requires an additional
Webroot license.
page 53
FeedbackFF
Capacity FlexPool License Show Commands FFee
e
THREATSTOP N/A Requires an additional

ThreatSTOP license.
page 54
page 55
page 56

Capacity Flexpool License and Enterprise License Management User Guide

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Capacity Flexpool License and Enterprise License Management User Guide

Uploaded by

Copyright:

Available Formats

Capacity FlexPool License and Enterprise

License Management User Guide

A10 NETWORKS INC. SOFTWARE LICENSE AND END USER AGREEMENT

Configuring Capacity FlexPool Licensing ................................................................................... 11

Overview of Enterprise License Manager ................................................................................... 27

Global License Manager GUI ...................................................................................................... 37

CLI Commands for Capacity FlexPool License ........................................................................... 43

Proxy-server Configuration Commands ............................................................................. 49

Overview of Capacity FlexPool License Model

NOTE: Capacity FlexPool license model is supported on vThunder instances

• Using the ACOS CLI

• Importing the License from GLM

• Using the aXAPI Management

• Using the Cloud-Init Method

Requirements for Capacity FlexPool License Model

Architecture of Capacity FlexPool License Model

FIGURE 1 Capacity FlexPool License Model Architecture

The major components of the architecture are described as follows:

Capacity FlexPool License Model Subscription Options

TABLE 1 Capacity FlexPool License Model Subscription Options

Advantages of Capacity FlexPool License Model

Configuring Capacity FlexPool Licensing

NOTE: Safeguard your Capacity FlexPool license entitlement token. An ACOS

Creating a GLM Account

To create a GLM account to access the GLM GUI:

1. Access the following page: https://glm.a10networks.com

Applying a License to an ACOS Device

• Using the ACOS CLI

• Importing the License from GLM

• Using the aXAPI Management

• Using the Cloud-Init Method

NOTE: The minimum bandwidth of an ACOS device under Capacity FlexPool

Using the ACOS CLI

1. Log in to your ACOS device and access the CLI.

2. Enter the configuration mode by running the following commands:

3. Specify the GLM entitlement token.

4. (optional) Specify the bandwidth in Mbps.

5. Save the configuration by running the write mem command.

To check if the license is updated successfully, run the following command:

USB ID : Not Available

Importing the License from GLM

1. Log in to your GLM account at https://glm.a10networks.com.

FIGURE 2 Click the Download License Link

6. Enter the following command to install the license:

To clone a VM, refer to the documentation of the supported hypervisor.

Using the Cloud-Init Method

• Define the vThunder template.

Using the aXAPI Management

For more information, see the aXAPI Reference Guide.

Configuring a Forward Proxy Server (CLI)

1. Log in to your ACOS device and access the CLI.

2. Enter the configuration mode by running the following commands:

6. Exit the GLM proxy-server configuration mode.

Modifying the Bandwidth of an ACOS Device (CLI)

1. Log in to the ACOS device and enable the configuration mode:

2. Specify the new bandwidth in Mbps.

3. Save the configuration by running the write mem command.

5. Run the show license-info command to check if the bandwidth is updated.

Revoking a License from an ACOS Device

Revoking a License by using a CLI

1. Log in to the ACOS device and enable the configuration mode:

2. Run the delete command to revoke the license.

Revoking a License by using the GLM GUI