A10 Networks

This guide covers A10 devices running ACOS, including Thunder and legacy AX Series appliances.

Create a backup account

Create a dedicated administrator account named netwatch-backup on the device. ACOS supports per-admin privilege levels: assign read privilege, which is sufficient for QUARK to display the running configuration. You can create the account from the CLI's admin configuration context or in the web UI under the admin user settings.

If the device uses Application Delivery Partitions (ADPs), grant the account access to the shared partition (and any partitions whose configuration you want captured); an account scoped to a single private partition only sees that partition's configuration.

Enable SSH access

ACOS management services are enabled per interface. Ensure SSH management access is enabled on the interface QUARK will reach (the dedicated management port or a data interface with management enabled). ACOS lets you attach an ACL to management services — restrict SSH to the collector's IP address where possible.

Platform notes

• Read-privilege admins can run show commands, including displaying the running configuration, without enable-level access.
• If your security policy requires it, you can instead supply the enable password to QUARK, but a read-only admin is preferred.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.