SysAdmin Lab 2

Initial Configuration
Version 4.1.0 (12/15/16)
Lab 2 Overview
This lab configures three devices identically except for host name and IP addresses:
• Device A1: configured exclusively through the CLI
• Device A2: configured primarily through the GUI
• Device A3: configured by applying a modified profile derived from the A1 device
Device configurations are identical except for host name and IP addresses. After
configuring the devices, you will view the configuration, verify interface status, check
connectivity to other network devices, and save the configuration.
These configurations are building blocks for more complex exercises: it is important that
you follow name conventions specified in these exercises. If you use a different convention,
be consistent throughout all lab exercises.
The last set of exercises demonstrate profile (startup-config) functionality and commands
that backup and restore device configurations.
Most listed commands do not include the privilege level necessary to execute them. You
should use the lowest privilege necessary to execute a command.
Lab 2 objectives include:
• Become familiar with the A10 CLI and GUI access methods
• Learn the distinction between data entry modes in each access method
• Perform basic network configuration tasks
• Verify network configuration and connectivity
• Perform basic troubleshooting tasks

Lab 2 Device Preparation

Prepare the devices for this lab by performing the appropriate instruction set.

Starting from fresh training lab environment

When starting the lab in a newly created training lab environment, proceed to the Basic
System Setup: CLI Command entry section.

Continuing from Lab1: Using the Console Port

When starting the lab after successfully completing Lab 1, proceed to the Basic System
Setup: CLI Command entry section.

Continuing from any other Starting Point

When starting this lab from any other starting point, prepare the devices by following the
instructions in Appendix A section Device Preparation: Lab 2 – Initial Configuration.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 2 of 17

Basic System Setup: CLI Command Entry (A1)
This section configures the ACOS device named A1, then verifies functionality and
connectivity of the configuration. Device parameters that are configured include:
• hostname: A1
• time zone: Pacific Time
• VLAN 100: Ethernet 1 (tagged); ve 100; IP address 100.0.0.1/24
• VLAN 200: Ethernet 2 (tagged); ve 200; IP address 200.0.0.1/24
• VLAN 300: Ethernet 3 (tagged); ve 300; IP address 3.0.0.1/24
• OSPF and BGP: configured for data flow through client and server side routers
Important: A virtual interface’s (ve) label is always identical to its assigned VLAN’s label.

Configuring the A1 Device

The A1 device is configured through the command line interface (CLI).
1. Open a bash shell and log into the device.
ssh admin@1.0.0.1 (password is a10)
(respond yes if queried to continue connecting)

IMPORTANT: If a device displays WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED,

remove known hosts from the remote desktop with this command, then log into the device.
rm /home/student/.ssh/known_hosts
The vThunder> prompt indicates the device is in user mode, where you monitor processes,
backup the system, and perform simple diagnostics.
2. View user mode commands by typing ? at the prompt.
3. Enter enable mode.
enable ([Enter] for password)
Enable mode is denoted by the vThunder# prompt.
4. View enable mode commands by typing ? at the vThunder# prompt.
If –MORE– appears the bottom of the screen, press the space bar to continue listing
commands. Press q to discontinue the listing and display the prompt.
5. Enter config mode.
config
Config mode is denoted by the vThunder(config)# prompt.
6. View all config mode commands by typing ? at the vThunder(config)# prompt.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 3 of 17

 When –MORE– appears the bottom of the screen, press the space bar to continue listing
commands. Press q to discontinue the listing and display the prompt.
The host name is configured by hostname, a config mode command.
7. Enter hostname, then type ? to display command options.
hostname ?
The option list CLI indicates text denoting the host name is required.
8. Repeat the command, entering the text A1, then press ? again.
hostname A1 ?
The <cr> text comprises the option list, indicating that the command is ready for entry
and no other options are available. When <cr> appears at the end of an option list, the
command is ready for entry but other options are available.
9. Press the Enter key to execute the command.
The prompt changes to A1(config)#. The device is configured to display the host name
in the prompt. This setting is edited with the terminal prompt command.
The time zone is configured by timezone. Selecting a preferred time zone is complicated by
the large number of available options.
10. Enter timezone ? to view command options.
timezone ?
11. Prune the list to American locations.
timezone America?
12. Select a Pacific time zone option by adding /L, then pressing the tab key.
timezone America/L<tab>
When the text unambiguously specifies a command, pressing the tab key auto-
completes the command.
13. Execute the command by pressing the Enter key.
timezone America/Los_Angeles
Configure the data interface VLANs (client side, server side, and device links) by assigning a
physical and virtual Ethernet interface (ve) to each VLAN.
14. Enter VLAN 100 configuration mode.
vlan 100

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 4 of 17

 The cursor changes to A1(config-vlan:100)#, indicating the CLI is in VLAN 100
configuration mode.
15. Assign a physical and virtual Ethernet interface to VLAN 100, then return to config
mode with the exit command.
tagged ethernet 1
router-interface ve 100
exit
16. Assign physical and virtual Ethernet interfaces to the other VLANs. Commands
accessed through a specific configuration mode are denoted by indenting them below
the mode-access command.
vlan 200
tagged ethernet 2
router-interface ve 200
exit
vlan 300
tagged ethernet 3
router-interface ve 300
exit
17. Assign IP addresses to the virtual interfaces.
interface ve 100
ip address 100.0.0.1 /24
exit
interface ve 200
ip address 200.0.0.1 /24
exit
interface ve 300
ip address 3.0.0.1 /24
exit
18. Enable the physical interfaces associated with the VLANs.
interface ethernet 1
enable
exit
interface ethernet 2
enable
exit
interface ethernet 3
enable
exit
19. Verify the operational state of the interfaces.
show interfaces brief
A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 5 of 17
 For each interface, verify the links are up and the VLAN and IP address settings. If any
interface is disabled, review your configuration.
20. Configure routing commands required to access client and server side devices.
router ospf 1
network 100.0.0.0 0.0.0.255 area 0
default-information originate
redistribute floating-ip
exit
router bgp 1
network 200.0.0.0/24
redistribute connected
redistribute ospf
redistribute floating-ip
neighbor 200.0.0.254 remote-as 1
exit
21. Verify connectivity to the client and servers.
ping 110.0.0.100
ping 210.0.0.11
22. Display the CLI timeout period.
show terminal
The output indicates CLI timeout period is 15 minutes. The device closes the CLI
session method when it does not detect activity over the specified period.
23. Set the CLI and GUI timeout periods to one hour. Verify the periods with show
commands.
terminal idle-timeout 60
web-service axapi-timeout-policy idle 60
Multi-config mode allows multiple admin accounts to simultaneously modify the
configuration through CLI and GUI sessions. Although useful in a classroom, multi-config
mode is undesirable in many production environments.
24. Enable multi-config mode.
multi-config enable
25. Save the configuration to a startup config profile named PR-CLASS.
write memory PR-CLASS (answer y to link “PR-CLASS” prompt)
This is the default location for storing configurations throughout the class. Linking PR-
CLASS when prompted configures the device to copy the PR-CLASS profile to running-
config when the device is reloaded.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 6 of 17

 Startup configuration profiles are described in greater detail later in this lab.

Viewing the A1 Configuration

These commands illustrate configuration display options.
26. Display the complete configuration.
show running-config
27. Display configuration sections that contain a specific element (interface).
show running-config | sec interface
HINT: Use up arrow to repeat previous command, then finish command with new text.
28. Display only lines that contain a specific element (interface).
show running-config | inc interface
29. Display all lines except those containing an exclamation point.
show running-config | exc !
30. Display sections that start with alphanumeric characters.
show running-config | sec ^[0-z]

Backup the Configuration

31. Back up the file system to the FTP server. Backup and restore operations are discussed
in detail later during the lab. (the following is a single line command)
backup system use-mgmt-port ftp://ftp@1.0.0.100/ConfigBackup/
Lab02_A1.tar.gz (Respond no when prompted to save configuration)

HINT: If the backup attempt fails, enter show log to diagnose the problem.

Continue with the Basic System Setup: GUI Configuration File (A2) section on the next
page.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 7 of 17

Basic System Setup: GUI Configuration (A2)
This section configures the second ACOS device, then verifies its functionality and
connectivity. Device parameters include:
• hostname: A2
• time zone: Pacific Time
• VLAN 100: Ethernet 1 (tagged); ve 100; IP address 100.0.0.2/24
• VLAN 200: Ethernet 2 (tagged); ve 200; IP address 200.0.0.2/24
• VLAN 300: Ethernet 3 (tagged); ve 300; IP address 3.0.0.2/24
• OSPF / BGP configured to facilitate client and server side router data flow.
The device is configured primarily through the graphical user interface (GUI). GUI
instructions are equivalent to the CLI commands that configure A1.

Accessing the Device through GUI

32. Open the GUI from a Chrome browser by clicking the A10-2 bookmark.
Alternatively, enter https://1.0.0.2 in the URL Address field.
Click the Advanced and Proceed to 1.0.0.2 (unsafe) text links. then enter admin / a10 as
the username / password.
The GUI contains two navigation bars, a location bar, and the component window:
• Navigation bars: provides access to configuration and status windows. Top bar options
triggers a drop-down menu with additional navigation options. The bottom bar
provides a third navigation parameter; available options depend on top bar selection.
• Location bar: Displays the navigation path to the current panel.
• Component window: accesses configuration parameters and status windows.

Configuring the A2 Device through the GUI

Host name and time zone are configured through System Settings pages.
33. Navigate to the Basic System panel.
System > Settings >>> DNS Opens Configure DNS panel
(https://1.0.0.2/gui/#/network/dns)
34. Configure the host name.
Hostname: A2
Click Update DNS panel popup: Hostname was successfully updated
35. Configure the time zone.
System > Settings >>> Time Opens Clock / NTP Servers / NTP Keys panel
(https://1.0.0.2/gui/#/system/settings/time/)

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 8 of 17

 Timezone (GMT-0800)Pacific Time(US & Canada)
Daylight savings time Enabled
Click OK panel popup: Time Settings applied
The VLAN panel displays configured VLANs, creates new VLANs, and accesses pages that
assign ID numbers and interfaces to a specified VLAN.
36. Navigate to the VLAN panel.
Network > VLAN Opens VLAN panel
(https://1.0.0.2/gui/#/network/vlan/?page=1&items=25)
37. Create and configure the client side VLAN (100).
Click Create Opens Create VLAN panel
VLAN ID 100
Create Virtual Interface select
Tagged Ethernet select 1
Click Create VLAN panel popup: VLAN was successfully created
GUI returns to VLAN panel, which displays the new VLAN. Click the Edit text link on the
right side of the panel to modify VLAN parameters.
38. Create and configure the server side VLAN (200) and device link VLAN (300).
Click Create Opens Create VLAN panel
VLAN ID 200
Create Virtual Interface select
Tagged Ethernet select 2
Click Create VLAN displays success popup. Returns to VLAN panel
Click Create Opens Create VLAN panel
VLAN ID 300
Create Virtual Interface select
Tagged Ethernet select 3
Click Create VLAN displays success popup. Returns to VLAN panel
39. Verify the VLANs are configured correctly on the VLAN panel.
The LAN Interface panel displays the device Ethernet interfaces. The interfaces are enabled
and their status is verified from this panel.
40. Enable the Ethernet interfaces.
Network > Interface >>> LAN Opens LAN panel
(https://1.0.0.2/gui/#/network/interface/lan/?page=1&items=25)
Select box left of status icon for e1
Select box left of status icon for e2
Select box left of status icon for e3
Click Enable button displays success popup
Verify Status icon for each interface is green.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 9 of 17

The Virtual Interface panel displays virtual interfaces created when configuring VLANs and
access pages that assign IP addresses to a specified interface.
41. Navigate to the Virtual Ethernets panel.
Network > Interface >>>Virtual Ethernets Opens Virtual Ethernets panel
(https://1.0.0.2/gui/#/network/interface/ve/?page=1&items=25)
Hint: If any of the virtual interface links do not appear as expected, inspect previously
configured VLAN pages.
42. Configure the virtual Ethernet (ve) interfaces and their IP addresses.
Click Edit text on 100 row Opens Virtual Ethernets panel
Click IP bar (below parameters) IP configuration section expands
IP Address 100.0.0.2 and 255.255.255.0
Click Add verify address appears in table
Click Update displays success popup. Returns to Virtual Ethernets panel
43. Verify that row 100 was configured with IP Address 100.0.0.2.
Hint: If the IP Address column for row 100 is blank, most likely the Add step was
skipped. Repeat the previous step.
44. Configure the remaing virtual Ethernet (ve) interfaces and their IP addresses.
Click Edit text on 200 row Opens Virtual Ethernets panel
Click IP bar IP configuration section expands
IP Address 200.0.0.2 and 255.255.255.0
Click Add verify address appears in table
Click Update displays success popup. Returns to Virtual Ethernets panel
Click Edit text on 300 row Opens Virtual Ethernets panel
Click IP bar (below parameters) IP configuration section expands
IP Address 3.0.0.2 and 255.255.255.0
Click Add verify address appears in table
Click Update displays success popup. Returns to Virtual Ethernets panel
45. Verify the Virtual Ethernet IP addresses and that they are enabled.
Network > Interface >Virtual Ethernets
Verify the Status icon for each Virtual Ethernet interface is green.
Verify Ifnum 100 IP address 100.0.0.2
Verify Ifnum 200 IP address 200.0.0.2
Verify Ifnum 300 IP address 3.0.0.2
46. Set the CLI timeout to 60 minutes.
System > Settings >>> Terminal Opens Terminal panel
(https://1.0.0.2/gui/#/system/settings/terminal/)
CLI Timeout 60

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 10 of 17

 Click OK
47. Set the GUI timeout to 60 minutes and enable multi-config mode.
System > Settings >>> Web Opens Web panel.
(https://1.0.0.2/gui/#/system/settings/web/)
AXAPI Timeout 60
Enable Multi-Config Mode select
Click OK
BGP and OSPF parameters are configurable only through the CLI. Enter the following CLI
commands through the CLI without closing the browser connection to the device.
Important: Do not close the GUI or exit the Config File panel while using the CLI.
48. Open an SSH connection to device A2 (1.0.0.2) and enter config mode.
show running-config | inc multi
49. Configure and enable dynamic routing. These commands are identical to those in the
CLI section. Either enter the commands manually or copy and paste them to the CLI.
router ospf 1
network 100.0.0.0 0.0.0.255 area 0
default-information originate
redistribute floating-ip
exit
router bgp 1
network 200.0.0.0/24
redistribute connected
redistribute ospf
redistribute floating-ip
neighbor 200.0.0.254 remote-as 1
exit
50. Verify connectivity to the client and servers.
ping 110.0.0.100
ping 210.0.0.11

View and Verify the Configuration

51. View the configuration and the state of the interfaces. For each interface, verify the
links are up and the VLAN and IP address settings are correct.
show running-config
show interface brief
52. Save the configuration to a startup config profile named PR-CLASS.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 11 of 17

 write memory PR-CLASS (answer y to link “PR-CLASS” prompt)
53. Return to the GUI and back up the file system to the FTP server.
System > Maintenance >>>Backup >> System Open System Backup panel
(https://1.0.0.2/gui/#/system/maintenance/backup/system/)
Use Management Port Enable
Backup to Remote
Protocol FTP
Host 1.0.0.100
Port 21
Location /ConfigBackup/Lab02_A2.tar.gz
User ftp
Password a10
Click Backup (displays Backup Successful message at top of panel)
54. Click Logout(Admin) in the banner to close the session.

Continue with the Basic System Setup: Using a Modified Configuration File (A3) section
on the next page.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 12 of 17

Basic System Setup: Using a Modified Configuration File (A3)
This section configures the third ACOS device by copying the A1 configuration to a text file,
modifying device specific parameters in that file, then using the file to configure the new
device. Device parameters that are configured include:
• hostname: A3
• time zone: Pacific Time
• VLAN 100: Ethernet 1 (tagged); ve 100; IP address 100.0.0.3/24
• VLAN 200: Ethernet 2 (tagged); ve 200; IP address 200.0.0.3/24
• VLAN 300: Ethernet 3 (tagged); ve 300; IP address 3.0.0.3/24
• OSPF / BGP configured to facilitate client and server side router data flow.

Creating the Configuration File

55. SSH into the A1 device.
56. Export the configuration to a text file (the following is a single command).
export running-config use-mgmt-port ftp://ftp@1.0.0.100/ConfigBackup/
A3-INIT.txt respond no when prompted to save configuration
57. Open the new file for editing with Notepad++.
From SRV folder (left side of desktop) open ftproot/ConfigBackup/ folder, right click
A3-INIT.txt, and select Open with Notepad++

58. Copy and replace all instances of A1 with A3

59. Copy and replace all instances of .0.0.1 with .0.0.3
60. Save and close the file.
61. Log out of A1.

Apply the Configuration File to the A3 Device

62. SSH into the A3 device (IP address 1.0.0.3) and enter Config mode.
63. Copy the new file to the device as a startup-config profile named PR-CLASS.
copy use-mgmt-port ftp://ftp@1.0.0.100/ConfigBackup/A3-INIT.txt PR-CLASS
respond no when prompted to save configuration
64. Verify the PR-CLASS profile lists the commands contained in the modified text file.
show startup-config profile PR-CLASS
65. Link the startup-config to the PR-CLASS profile, then reload the device.
link startup-config PR-CLASS
exit

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 13 of 17

 reload respond no when prompted to save configuration

View, Verify, and Backup the Configuration

66. SSH into the device
67. View the configuration and the state of the interfaces. For each interface, verify the
links are up and the VLAN and IP address settings are correct.
CLI copy commands may disable physical interfaces. Re-enable interfaces as required.
show running-config
show interface brief
68. Verify connectivity to the client (110.0.0.100) and servers (210.0.0.11 and 210.0.0.12).
69. Back up the file system to the FTP server (the following is a single line command).
backup system use-mgmt-port ftp://ftp@1.0.0.100/ConfigBackup/Lab02-
A3.tar.gz respond no when prompted to save configuration
Continue with the Configuration Exercises section on the next page.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 14 of 17

Configuration Exercises
Managing Configuration Files
The remainder of this lab illustrate the use of profiles, backups, and restores. The previous
exercises created device configuration profiles that this section uses. Configurations in
these exercises do not carry forward to the next lab.
When the device reboots or reloads, it uses the commands specified in a linked startup-
config profile. Initially, the device uses a default (unnamed) profile. In the first lab, the
configuration that contains only the IP address of the management interface. Earlier in this
lab, the configuration was saved in a profile named PR-CLASS; this profile was then linked
to the startup-config and thus provides commands to the device when it reloads.
70. Open a bash shell and SSH into A1 (1.0.0.1)
71. View the named profiles that were previously saved.
show startup-config all
The device displays the PR-CLASS profile that was previously saved. Note that the
default profile is not listed.
72. Display the profile the device uses as startup-config on the next reboot or reload.
show startup-config | inc Show
Important: The second show in the command must be capitalized.
These steps restores the startup-config link to the default profile. This profile only contains
the management interface IP address.
73. Link the default profile to startup-config.
link startup-config default
74. Reload the device. Do not save the configuration if prompted.
reload
75. SSH into A1 again.
The device reverts to the configuration that existed before you began this lab, as
indicated by the CLI prompt. Use show running-config to verify that the configuration
contains no other commands.
These steps restores the configuration that was created in this lab by using the PR-CLASS
profile.
76. Link the PR-CLASS profile to startup-config.
link startup-config PR-CLASS

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 15 of 17

77. Reload the device. Do not save the configuration if prompted.
reload
78. SSH into A1 again.
The complete configuration is restored, as indicated by the CLI prompt. Use show
running-config to verify the complete configuration is restored.

Backup and Restore

Backup files are stored as compressed files. A command that ends with a slash (/) stores
the file in the specified folder with an automatically generated filename. You can explicitly
name the file by specifying the target folder/filename and omitting the slash after the
filename. Backup filenames should end with .tar.gz extension.
79. Back up the file system to the FTP server twice from the CLI: once with a specified
filename and once with an automatically generated filename.
backup system use-mgmt-port
ftp://ftp@1.0.0.100/ConfigBackup/lab1.tar.gz (single command)
backup system use-mgmt-port ftp://ftp@1.0.0.100/ConfigBackup/
80. View the new files.
Open the SRV folder and select ftproot/ConfigBackup. Notice the difference in file
names.
81. Explore the file Lab02_A1.tar.gz (or whatever you called it back in the first section).
Click on the file “Lab02_A1.tar.gz”. This should open the file in 7-zip. Then double-click
on the item “Lab02_A1.tar”. Then double-click on the item “backup_system.tar”. Finally,
double-click on the folder item “a10data”.
82. In the archive open the folder etc and extract the files startup-config.pri and startup-
config.profile.
Click on the folder “etc” then drag the files “startup-config.pri” and “startup-
config.profile” to the Student_RD desktop.
83. Open the files in NotePad++.
In startup-config.pri you should see the configuration performed and saved in Lab 1,
namely the interface management ip address assignment.
In startup-config.profile you should see “primary=PR-CLASS”, which indicates that the
primary boot location will load the startup-config profile “PR-CLASS”.
84. In the archive, go up a directory level, then open the folder config. Extract the file PR-
CLASS.

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 16 of 17

85. Open the file PR-CLASS in NotePad++. Notice which ACOS version the config file was
created by.
86. Back in the SSH session, see what versions of ACOS are loaded on your A1 device
show bootimage
show version
87. Verify that the startup-config profile in the backup is compatible with ACOS versions
on the device.
If the versions match, they are compatible. If the software version is a slightly higher
version than the backup, then the backup is almost always compatible unless the
Release Notes document otherwise. A full compatibility matrix outside the scope of this
class.
88. Restore the system from backup files created after initial device configuration, then
reload the device to restore the configuration.
restore use-mgmt-port
ftp://ftp@1.0.0.100/ConfigBackup/Lab02_A1.tar.gz (single command)
89. Verify that the restore system will boot from the expected startup-config file.
show bootimage
show startup-config all
show startup-config | sec ^[0-z]
The “show bootimage” command should indicate that the system will boot from the
Hard Disk Primary location. The “show startup-config all” command should show that
the startup-config profile PR-CLASS is linked to the Primary startup location. The
“show startup-config” should display the configuration you created earlier in the lab
for A1.
90. Reload the system from the restored startup-config profile
exit (assuming you are still in config mode)
reload

A10 SysAdmin 4.1.0 (12/15/16) Lab 2: Initial Configuration Page 17 of 17