Best Of
Re: Services Activated but I did not Activate them!
All my other USG services never got activated so not sure why they got activated unless its a new thing that they activate without you knowing now?

1
Re: Zyxel ax7501-b0 guest wifi problem
mMontana, yet didn't asked to ISP because wanted first understand if I'm doing something wrong in the settings.
tonygibbs16 tnx for the links, will read it better, but the Iphone 12 sees the 2.4 GHz guest network SSID and connects to it, just soon later comes the "no internet connections" warning under it. this when with same wifi is used with internet connection by the iphone 7. already tried to remove it and add it again or restarting also the 12 but not working yet.
and the other two regular wifi (2.4 and 5GHz) are successfully used with the Iphone 12, just the guest isn't.
for this I'm asking here

tonygibbs16 tnx for the links, will read it better, but the Iphone 12 sees the 2.4 GHz guest network SSID and connects to it, just soon later comes the "no internet connections" warning under it. this when with same wifi is used with internet connection by the iphone 7. already tried to remove it and add it again or restarting also the 12 but not working yet.
and the other two regular wifi (2.4 and 5GHz) are successfully used with the Iphone 12, just the guest isn't.
for this I'm asking here


1
Re: AMG1302-T11C - Username character set
Hi there
The system might not allow to use some special characters for avoiding attacks, it might be the reason you can't use "^".
On the other hand, this model is an old model and I believe it has EOL many years ago, there would no firmware enhancement anymore.
FYI
The system might not allow to use some special characters for avoiding attacks, it might be the reason you can't use "^".
On the other hand, this model is an old model and I believe it has EOL many years ago, there would no firmware enhancement anymore.
FYI

1
Re: Future Application Support
Hi @odifoke
Thanks for your feedback.
The Zyxel server will not stop the service for at least three years and this service is considered as our long term service.
Re: HTTPS virtual server - requests coming in on different ports?
SOLVED!
Ok, the port number thing was throwing me off. I looked at a different port forwarding that is working and the random ports are in the logs there too. So, that was a red herring.
The problem was I had To:LAN1 on an ATP500. I don't use many of these. I use a lot of the ATP100/200s. These have LAN1 predefined. On the ATP500 there are no default members in LAN1. However, LAN has the member physical ports of my LAN. Once I changed the Policy Control rule To:LAN it all worked.
Thanks,
-John
Ok, the port number thing was throwing me off. I looked at a different port forwarding that is working and the random ports are in the logs there too. So, that was a red herring.
The problem was I had To:LAN1 on an ATP500. I don't use many of these. I use a lot of the ATP100/200s. These have LAN1 predefined. On the ATP500 there are no default members in LAN1. However, LAN has the member physical ports of my LAN. Once I changed the Policy Control rule To:LAN it all worked.
Thanks,
-John
Re: NR7101
Hi Tony,
Thanks for your reply.
I have already tested with everything on auto. It did not make a real difference.
Is it possible that the router has a hardware problem? I think it has several antennas inside. What if one or more are not working properly? Is there a way to test that? The router arrived in a box that was slightly damaged. I guess it got dropped during transport. The major speed difference compared to my mobile phone could be explained by an antenna not receiving a proper signal.
Do you know a way to see which bands are used on an android phone? This ways I can compare the bands used by the router vs those on the phone.
Another thing that I can try is to downgrade the LTE module firmware to the previous version. Apparently there are some users that said that the latest version actually caused connection and speed problems.
Thanks,
Peter
Thanks for your reply.
I have already tested with everything on auto. It did not make a real difference.
Is it possible that the router has a hardware problem? I think it has several antennas inside. What if one or more are not working properly? Is there a way to test that? The router arrived in a box that was slightly damaged. I guess it got dropped during transport. The major speed difference compared to my mobile phone could be explained by an antenna not receiving a proper signal.
Do you know a way to see which bands are used on an android phone? This ways I can compare the bands used by the router vs those on the phone.
Another thing that I can try is to downgrade the LTE module firmware to the previous version. Apparently there are some users that said that the latest version actually caused connection and speed problems.
Thanks,
Peter
Re: NR2101 IP Pass-through
Good morning @martiko
Yes, I have some good news. I got an update from the Zyxel support that solved the issue for me.
The way NR2101 works is that it will bind the first device that connects after setting IP Pass-through in the settings UI. The binding seems permanent, even if you disable pass-through and enable it.
What solved the issue for me was to factory reset the device. Connect the client I wanted pass-through to work for, and with that client enable pass-through in the UI.
I hope this helps!
/A
Yes, I have some good news. I got an update from the Zyxel support that solved the issue for me.
The way NR2101 works is that it will bind the first device that connects after setting IP Pass-through in the settings UI. The binding seems permanent, even if you disable pass-through and enable it.
What solved the issue for me was to factory reset the device. Connect the client I wanted pass-through to work for, and with that client enable pass-through in the UI.
I hope this helps!
/A

1
USG FLEX 50W Not Following Allow Policy
I have a USG FLEX 50W (USG20W-VPN) running V5.32(ABAR.0) that was just installed in front of a PBX. Initially all went well. After installation, we could make calls in and out. Now, for some reason, it is dropping packets due to the default rule when it should not.
I pulled a packet capture and see the packets for a new call coming in to the WAN port, but not making it out the LAN port to the phone system. Upon searching the log, I see the packets are being dropped due to security policy. The original configuration has not changed, so why is it now deciding to drop these legitimate packets?
I even tried moving the policy rule for the inbound VoIP packets up to the top priority to see if that changed anything and it did not. The packets are still being dropped.
The policy rule enabled allowing the VoIP packets through is set from WAN to LAN1 with a source of the originating servers (our VoIP servers), the destination is the LAN1 card IP of the PBX, and the service is set to a service of 5060 (SIP). Everything else for the policy is default except for the name and description.
I ran the diagnostics in case the file is needed by ZyXEL to look deeper into this.
If someone has any bright ideas to kick it into gear, I'd like to hear them.
I pulled a packet capture and see the packets for a new call coming in to the WAN port, but not making it out the LAN port to the phone system. Upon searching the log, I see the packets are being dropped due to security policy. The original configuration has not changed, so why is it now deciding to drop these legitimate packets?
I even tried moving the policy rule for the inbound VoIP packets up to the top priority to see if that changed anything and it did not. The packets are still being dropped.
The policy rule enabled allowing the VoIP packets through is set from WAN to LAN1 with a source of the originating servers (our VoIP servers), the destination is the LAN1 card IP of the PBX, and the service is set to a service of 5060 (SIP). Everything else for the policy is default except for the name and description.
I ran the diagnostics in case the file is needed by ZyXEL to look deeper into this.
If someone has any bright ideas to kick it into gear, I'd like to hear them.

1
Re: USG FLEX 50W Not Following Allow Policy
I have also rebooted it to see if that works, but no. Still blocking for some unknown reason. It is like the original rule is not being seen in the table and the default rule is catching the packets.

1