Global License Manager User Guide
Global License Manager User Guide
Global License Manager User Guide
13 March 2017
© 2017 A10 Networks, Inc. Confidential and Proprietary - All Rights Reserved
Information in this document is subject to change without notice.
Patent Protection
A10 Networks products are protected by patents in the U.S. and elsewhere. The following website is provided to satisfy the virtual pat-
ent marking provisions of various jurisdictions including the virtual patent marking provisions of the America Invents Act. A10 Net-
works' products, including all Thunder Series products, are protected by one or more of U.S. patents and patents pending listed at:
https://www.a10networks.com/company/legal-notices/a10-virtual-patent-marking.
Trademarks
The A10 logo, A10 Harmony, A10 Lightning, A10 Networks, A10 Thunder, aCloud, ACOS, Affinity, aFleX, aFlow, aGalaxy, aGAPI, aVCS, AX,
aXAPI, IDsentrie, IP-to-ID, SSL Insight, SSLi, Thunder, Thunder TPS, UASG, and vThunder are trademarks or registered trademarks of A10
Networks, Inc. in the United States and other countries. All other trademarks are property of their respective owners.
Confidentiality
This document contains confidential materials proprietary to A10 Networks, Inc. This document and information and ideas herein may
not be disclosed, copied, reproduced or distributed to anyone outside A10 Networks, Inc. without prior written consent of
A10 Networks, Inc.
Anyone who uses the Software does so only in compliance with the terms of the End User License Agreement (EULA), provided later in
this document or available separately. Customer shall not:
1. reverse engineer, reverse compile, reverse de-assemble or otherwise translate the Software by any means
Disclaimer
This document does not create any express or implied warranty about A10 Networks or about its products or services, including but not
limited to fitness for a particular use and non-infringement. A10 Networks has made reasonable efforts to verify that the information
contained herein is accurate, but A10 Networks assumes no responsibility for its use. All information is provided "as-is." The product
specifications and features described in this publication are based on the latest information available; however, specifications are sub-
ject to change without notice, and certain features may not be available upon initial product release. Contact A10 Networks for current
information regarding its products or services. A10 Networks’ products and services are subject to A10 Networks’ standard terms and
conditions.
Environmental Considerations
Some electronic components may possibly contain dangerous substances. For information on specific component types, please con-
tact the manufacturer of that component. Always consult local authorities for regulations regarding proper disposal of electronic com-
ponents in your area.
Further Information
For additional information about A10 products, terms and conditions of delivery, and pricing, contact your nearest A10 Networks loca-
tion, which can be found by visiting www.a10networks.com.
Table of Contents
Overview .......................................................................................................................................... 5
Global License Manager (GLM)............................................................................................................................... 5
Overview
This document provides a step-by-step procedure on how to obtain an activation key license for your A10
appliance using A10 Networks’ Global License Manager (GLM) after A10 Networks approves the order, along
with instructions on how to import your activation key license to your A10 appliance.
https://glm.a10networks.com/
A10 Networks offers a trial license for a number of its appliances. This section provides a quick step-by-step
guide to getting a trial license:
1. From the Licenses page (Figure 2), click on Add License or +License if licenses already exist for your
account.
2. On the Create License page (see Figure 3), enter all relevant and required information. In the Product
field, select Trial from the drop-down list.
3. After completing the fields on this screen, click Create License and agree to the terms.
The following provides a walk through for obtaining an activation key license after A10 Networks has pro-
cessed a request for your appliance and completed the order.
NOTE: If you have an existing trial license or license that you wish to migrate, see
Working with Existing Licenses on page 29
1. Before you begin, you must obtain your UUID/UID/Host ID. Skip this step if you already have this; if not,
go to Obtaining your UUID/UID /Host ID on page 11 for more information.
2. Sign in to GLM. See Signing Into GLM on page 14.
3. Activate your device to obtain an activation key. See Activating your Appliance To Obtain Activation Key
License on page 15.
4. Activate the license on your system. See Activation Key License Installation on page 18.
NOTE: The Host ID is not the user-configurable system host name. It is a 40-digit
hexadecimal number that appears similar to the following:
5172DE29D49EE3C101C7A0CD54FB8A0B6EC92CEE
NOTE: ACOS 4.0.1 and 4.02 releases currently do not support the ability to display
the Host ID/UID via the GUI. To capture the UID, you must run the CLI show
license uid command, as described in Obtaining ACOS UUID from the CLI
on page 12.
CAUTION: If you upgrade your underlying hypervisor, this will change the Host ID/UID,
thus invalidating the installed vThunder license. Therefore, if you choose to
upgrade to a newer hypervisor version, you will need to obtain and install a
new vThunder license.
1. Click Config Mode and navigate to >> System >> Maintenance >> License.
2. The Host ID field appears near the top o f the page.
4. Copy the entire UID, which is the hexadecimal string displayed by the CLI.
2. Finalize your account setup by going to https://glm.a10networks.com/ and complete the following
steps:
3. Return back to the original email and select Click here to activate an appliance. This will take you back to
the GLM to begin the appliance activation process that will provide you with the activation key license.
1. Click on the appliance you wish to activate and a License Overview page detailing this appliance is dis-
played. See Figure 6.
2. On this License Overview page, click on the Activations tab, highlighted in Figure 6, and then click on
Activate an Appliance button, as shown in Figure 7.
Note: If the license is for URL Classification subscription, a Download License File button will appear.
Click to download it and follow the steps in URL Classification License Installation on page 23.
3. On the Activate Appliance page (as shown in Figure 8),in the Appliance UUID field, enter the appliance
Universally Unique Identifier (UUID), and then click Activate Appliance. For information on acquiring
your appliance UUID, see Obtaining your UUID/UID /Host ID on page 11.
A message stating “Appliance activation was requested” will be displayed as highlighted in Figure 9. In
addition, an email with the activation key, also referred to as your license, will be sent to your email
address. The page can also be refreshed, and the activation key license will appear in the Activation
Key field.
4. Proceed to Activation Key License Installation on page 18.
For SoftAX appliances, the installation of a new license for ACOS 2.7.x series or 4.0.x series will result in the
renaming within the serial number field of “SoftAX” to “vThunder”.
Note: ACOS 4.0.1 and ACOS 4.1.0 releases do NOT support the ability to activate an appliance through the
GUI. To activate the license, run the CLI import license as described in ACOS Activation Key License Instal-
lation from the CLI.
a. The GUI is not supported. Follow the CLI instructions in Importing a License to ACOS 4.1.x and Later
through the CLI on page 20.
a. Click Config Mode and navigate to System >> Maintenance >> License.
b. Click Install to expand the field.
c. Paste the entire text of the activation key license into the License field.
d. Click Update.
Following the upgrade, reboot your appliance and check the version to verify the update.
• Importing a License to ACOS 4.1.x and Later through the CLI on page 20
1. Access the Privileged EXEC (enable) level or any configuration level of the CLI.
2. Save the activation key license file sent by A10 Networks onto a server that can be locally accessed over
the network by your appliance.
3. Enter the following command to install the license:
import glm-license file-name url
The file-name is the name of the activation key license file received from A10 Networks. The url specifies
the file transfer protocol, username (if required), and directory path.
You can enter the entire URL on the command line or press Enter to display a prompt for each part of the
URL. If you enter the entire URL and a password is required, you will still be prompted for the password.
To enter the entire URL:
• tftp://host/file
• ftp://[user@]host[:port]/file
• scp://[user@]host/file
• sftp://[user@]host/file
Note: Reboot ACOS after verification to ensure full functionality of ACOS features.
CLI Example
The following commands log onto the CLI, access the Privileged EXEC level, and display the license host ID:
Password:
Last login: Mon Feb 1 21:23:14 2016 from 172.17.2.158
vThunder>enable
Password:
vThunder#show license uid
A0C774C33831F0A5FB9961EA5EDCF31330FB91A6
Close the existing CLI session and open a new CLI session. The following enhanced command verifies license
installation and lists the set of licenses and information about them:
vThunder(config)#show license-info
Host ID : 5BBB01EX264EXAMPLECB3C2FE42E02384EE8C527
USB ID : Not Available
Product : CFW
Platform : Thunder Series Unified Application Service Gateway
GLM Ping Interval In Hours : 24
------------------------------------------------------------------------------------
Enabled Licenses Expiry Date Notes
------------------------------------------------------------------------------------
SLB None
CGN None
GSLB None
RC None
DAF None
WAF None
SSLI None
DCFW None
GIFW None
URLF None
IPSEC None
AAM None
FP None
WEBROOT None Requires an additional Webroot license.
THREATSTOP None Requires an additional ThreatSTOP license.
Note: The WEBROOT and THREATSTOP fields are not applicable and must be checked separately.
1. Access the Privileged EXEC (enable) level or any configuration level of the CLI.
2. Save the activation key license file sent by A10 Networks onto a server that can be locally accessed by
your appliance over the network.
3. Enter the following command to install the license:
import license file-name url
The file-name is the name of the activation key license file received from A10 Networks. The url specifies
the file transfer protocol, username (if required), and directory path.
You can enter the entire URL on the command line or press Enter to display a prompt for each part of the
URL. If you enter the entire URL and a password is required, you will still be prompted for the password.
The available options and their individual parameters are:
• tftp://host/file
• ftp://[user@]host[:port]/file
• scp://[user@]host/file
• sftp://[user@]host/file
Note: Reboot ACOS after verification to ensure full functionality of ACOS features.
CLI Example
The following commands log onto the CLI, access the Privileged EXEC level, and display the license Host ID:
vThunder>enable
Password:******** <blank by default>
vThunder#show license uid
5172DE29D49EE3C101C7A0CD54FB8A0B6EC92CEE
After closing your existing CLI session, open a new CLI session. The following command verifies the activa-
tion key license installation:
vThunder#show license
Feature Installed: bandwidth
: 200 Mbps
Version: 1.01
Exp date: permanent
Host ID: 5172DG29E49EE3C102C7A0CD54FB8A0B6EC92CEE
1. Navigate to System >> Settings, click on the Licensing tab, then proceed to step 2.
b. Copy/Paste – Copy the text of the activation key license and paste it into the blank field. Then, click
Submit.
3. Click Submit.
For more information on common usage for an URL Classification License, see the “SSLi Web Categories
Bypass” section in the SSL Insight Configuration Guide.
1. Configure your ACOS device with a valid ip route and domain name server (DNS).
An example configuration is provided below. Use the show run ip command to verify your configura-
tion.
ACOS(config)#ip route 0.0.0.0 /0 192.168.200.1
ACOS(config)#ip dns primary 192.168.1.100
ACOS(config)#
ACOS(config)#show run ip
!Section configuration: 69 bytes
!
ip route 0.0.0.0 /0 192.168.200.1
!
ip dns primary 192.168.1.100
Take the following step to confirm connection of the management port interface with the
internet:
ACOS(config)#ping 8.8.8.8 use-mgmt-port
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=56 time=9.26 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=56 time=9.19 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=56 time=9.17 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=56 time=9.19 ms
64 bytes from 8.8.8.8: icmp_seq=5 ttl=56 time=9.23 ms
To confirm DNS is working, take the step shown to check if pinging glm.a10networks.com directs the
ping to amazonaws.com.
ACOS(config)#ping glm.a10networks.com use-mgmt-port
PING elb050911-1708050023.us-east-1.elb.amazonaws.com (54.225.155.192) 56(84)
bytes of data.
2. Ensure that the ACOS device has access to the following URLs through the management port interface.
• https://glm.a10networks.com/
• database.brightcloud.com
• service.brightcloud.com
3. If not already set, use the CLI clock command to configure the correct time and date, or configure it
through the GUI from System>>Settings>>Time.
6. Enter the web-category sub-command mode by entering web-category, and configure the use of the
management port for communication with the BrightCloud servers using the use-mgmt-port CLI com-
mand. Finally, enter the CLI command exit, to return to the global configuration mode.
ACOS(config)#web-category
ACOS(config-web-category)#use-mgmt-port
ACOS(config-web-category)#exit
ACOS(config)#
7. Import your URL Classification license file using the CLI command at the global configuration mode
level. The file-name is the name of the URL Classification license file.
import web-category-license file-name
The following example shows the output when the URL Classification license file has been imported.
ACOS(config)#import web-category-license test.json use-mgmt-port
scp://[email protected]/home/example/lic_test/test_URL_C.json
Password []?
Done.
The following output example shows a relevant line (highlighted in blue) of a successful URL Classification
license installation.
The URL Classification license must first be enabled in order to utilize the database. Use the enable CLI
command from the web-category configuration mode to enable web-category functionality.
ACOS(config)#web-category
ACOS(config-web-category)#
ACOS(config-web-category)#enable
The URL Classification database installation can be verified by using the following show web-category
database CLI command. An example output is provided as follows:
1. From the Licenses page, click on the license you wish to give authorization access to.
2. On the License Overview page, click on Authorizations followed by clicking on Manage Users.
3. On the Manage Authorized Users page (Figure 10), in the Authorized Users field, enter the email
address of the user you wish to give license access to.
4. (Optional) To add more users, click on Add New User to generate another Authorized Users field and
repeat step 3.
5. When done, click Update License.
On the New User page, fill out the following information for the new user of this account:
An email will be sent to the user with a link to confirm this new account.
On the Edit User page, make any changes to update your profile, and click Update User to finish.
To revoke the license for migration, you will need to send a Return a Return Merchandise Authorization
(RMA) request through GLM (See “Return Merchandise Authorization Requests” on page 31.) where A10 Net-
works will review and take action on the RMA request. After you have confirmed that the RMA Request has
been approved, the existing license may be migrated onto another appliance.
NOTE: When submitting the RMA request for license migration, please make sure
the following information is included in the Reason for RMA Request field:
If you experience any further issues after your license has been revoked, please contact A10’s Technical Assis-
tance center (TAC) or your local sales representative.
To check the status of your URL Classification License, use the following command
The following is a sample output of what appears when running the command, highlighting the pertinent
section related to license renewal:
The status of your license and the expiry date appears, along with grace period information and your UUID.
When contacting your local sales representative, you will need to provide the UUID of your ACOS device
which can be obtained by running the show web-category license command. Based upon whether your
utilization of a URL Classification License is online or offline, you will need to take one of the following steps
to proceed with renewal.:
Contact your local sales representative to renew your license. Once your sales representative has ful-
filled your order, your license will be updated upon its next connection with GLM. Should you wish to
update your URL Classification License immediately after fulfillment of the order, disable then re-
enable the web-category by taking the following steps from the global configuration level:
ACOS(config)#web-category
ACOS(config-web-category)# no enable
ACOS(config-web-category)# enable
Note: Updating your URL Classification License immediately upon fulfillment of the renewal order is
strongly recommended if the grace period remaining is less than 24 hours.
When your sales representative has processed your order, a license file will be provided to you. Once
the license file has been obtained, follow the steps in URL Classification License Installation on
page 23 to update your URL Classification License. After installation is complete, make sure to enable
your device by following the instructions in Activating the URL Classification Database on page 26.
• Resource Downloads
To locate your billing serial number, take the following steps from the Licensing page:
1. Click on the “License” of the appliance for which you wish to obtain technical support.
2. On the License Overview page, click on Billing Serial Number.
The information for the Billing Serial Number is displayed here as shown in Figure 11.
3. Incorrect product received. (Examples include a product with the wrong bandwidth, wrong aGalaxy
device, or an incorrect URL class subscription.)
4. Transfer of a vThunder license.
To send a Return Merchandise Authorization (RMA) request, on the Overview page of the License selected,
click Request RMA. On the New RMA Request page, in the Reason For RMA Request field, enter the reason for
the request and click Agree.
NOTE: An RMA requests on GLM requires that the appliance is activated. You must
also agree to the terms to uninstall the existing license on the appliance.
If you are issuing an RMA request on a previously purchased vThunder which needs to be migrated, in the
Reason for RMA Request field, please provide the following information:
Resource Downloads
To access available vThunder or Local License Proxy resources, click on the “profile” icon and click on Down-
loads.