Best Of
Re: Nebula tunnel gets rebuilt every 30 seconds
Hi Chris,
Seems to work now fine, thank you very much for the clarification. Have a wonderful weekend! :-)
Seems to work now fine, thank you very much for the clarification. Have a wonderful weekend! :-)

1
Re: Turn ON Respond to ICMP (PING) USG FLEX 700
I did get a reply fm ZyXEL TS. Here it is:
I'm under USG FLEX > Configure > Firewall > Security Policy here are the fields to fill in for ICMP protocol on the WAN ports
Name: PreFilled w SF_: SF_ICMP
Action: Allow
Application Patrol / Content Filtering Policy (PRO): As this is a PRO feature I suspect I could leave this BLANK Yes, BLANK
Protocol: ICMP
Source: Any
Destination: Device
Dst Port: Any
Schedule: Always
Description: Free text field
That turned on PING response on both WAN ports. It is recommended that you narrow down the Source from Any to specific IP addresses so you don't respond to any source that pings your IP.
I'm still looking for where this is all documented. I would rather read about it and try and learn it than contacting TS.
Hope this helps someone.
-stew
I'm under USG FLEX > Configure > Firewall > Security Policy here are the fields to fill in for ICMP protocol on the WAN ports
Name: PreFilled w SF_: SF_ICMP
Action: Allow
Application Patrol / Content Filtering Policy (PRO): As this is a PRO feature I suspect I could leave this BLANK Yes, BLANK
Protocol: ICMP
Source: Any
Destination: Device
Dst Port: Any
Schedule: Always
Description: Free text field
That turned on PING response on both WAN ports. It is recommended that you narrow down the Source from Any to specific IP addresses so you don't respond to any source that pings your IP.
I'm still looking for where this is all documented. I would rather read about it and try and learn it than contacting TS.
Hope this helps someone.
-stew

1
Re: unable to register my newly purchased device
Hi @prakash
You can login to Myzyxel.com portal on your browser first.
And then kick hyper link portal.myzyxel.com at Configuration > Licensing > Registration page.
Browser will redirect device registration page to you. (Serial number and MAC Address will auto field)
After clicking submit, device is able register to your account without problem.

You can login to Myzyxel.com portal on your browser first.
And then kick hyper link portal.myzyxel.com at Configuration > Licensing > Registration page.
Browser will redirect device registration page to you. (Serial number and MAC Address will auto field)
After clicking submit, device is able register to your account without problem.

Re: Samsung TV KS8000 cannot connect to NWA210AX while connects fine to NWA90AX
I want to thank Jay because he tried to find a solution for the issue.
Unfortunately issue still hasn't been resolved and I don't want to try any more. Issue was traced down to a point that KS8000 doesn't accept encrypted packets from NWA210AX after resuming from standby or even after reboot. KS8000 seems associated but doesn't receive the WPA2 encrypted packets, probably drops them. Unfortunately I can't be sure since I can't get root shell access to the TizenOS of the TV. When used without WPA2, TV works fine - but this is not a solution. I would pinpoint the problem to KS8000 if it had the same behaviour with NWA90AX, but it doesn't. Works fine with NWA90AX.
I spent double the money for NWA210AX compared to NWA90AX and I haven't enjoyed it. The KS8000 issue, combined with worse wifi signal reception from the clients on the same site, same position of installation, compared to NWA90AX, brought me to the point of not wanting to use NWA210AX any more. And I even spent money for the multi-gig XS1930-10 to have 2.5g connection for NWA210AX.
The TV is six years old, I will eventually replace it so this is not a really big issue. Wireless coverage on the other hand is.
According to specifications published by Zyxel, NWA210AX should be 1dB less power compared to NWA90AX @ 5GHz. 22dB + 6dB antenna = 28dB for NWA210AX. 25dB + 4dB antenna = 29dB for NWA90AX. While I experience more than 6db difference in several clients. Maybe my sample is problematic, I don't know.
I will open RMA for both the KS8000 and wifi coverage issues.
Unfortunately issue still hasn't been resolved and I don't want to try any more. Issue was traced down to a point that KS8000 doesn't accept encrypted packets from NWA210AX after resuming from standby or even after reboot. KS8000 seems associated but doesn't receive the WPA2 encrypted packets, probably drops them. Unfortunately I can't be sure since I can't get root shell access to the TizenOS of the TV. When used without WPA2, TV works fine - but this is not a solution. I would pinpoint the problem to KS8000 if it had the same behaviour with NWA90AX, but it doesn't. Works fine with NWA90AX.
I spent double the money for NWA210AX compared to NWA90AX and I haven't enjoyed it. The KS8000 issue, combined with worse wifi signal reception from the clients on the same site, same position of installation, compared to NWA90AX, brought me to the point of not wanting to use NWA210AX any more. And I even spent money for the multi-gig XS1930-10 to have 2.5g connection for NWA210AX.
The TV is six years old, I will eventually replace it so this is not a really big issue. Wireless coverage on the other hand is.
According to specifications published by Zyxel, NWA210AX should be 1dB less power compared to NWA90AX @ 5GHz. 22dB + 6dB antenna = 28dB for NWA210AX. 25dB + 4dB antenna = 29dB for NWA90AX. While I experience more than 6db difference in several clients. Maybe my sample is problematic, I don't know.
I will open RMA for both the KS8000 and wifi coverage issues.

1
Re: Attempt to login to USG100, Chrome reports ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Thanks Jeff, appreciate you checking out TLS versions on both. Who would have thought USG100 and USG20W would have differed with this - similar vintage original releases of both models back in the day.Zyxel_Jeff said:Hello @AWUSupport
The reason is their TLS version is different. The TLS version of the ZyWalll USG100 is V1 but the TLS version of the ZyWalll USG20W is V1.2. Once the browser doesn't support the TLS V1 connection and would show the below information.
Looks like Edge and IE mode only option as we both agreed on, appreciate you clarifying.
Re: NWA210AX - Secondary SSID - WPA2 PSK - intermittently fails auth
Hi @saqib_s
Thanks for your feedback. We've noticed that channels 1 and 2 are still experiencing noise issues. Can you let us know where your access points are currently located? We suggest placing them in the middle of the ceiling in areas where you often use 2.4 GHz devices. This will improve the performance of your wireless network. Furthermore, we can help you block channels 1 and 2 to optimize your 2.4 GHz usage.
Jay
Thanks for your feedback. We've noticed that channels 1 and 2 are still experiencing noise issues. Can you let us know where your access points are currently located? We suggest placing them in the middle of the ceiling in areas where you often use 2.4 GHz devices. This will improve the performance of your wireless network. Furthermore, we can help you block channels 1 and 2 to optimize your 2.4 GHz usage.
Jay
Re: Attempt to login to USG100, Chrome reports ERR_SSL_VERSION_OR_CIPHER_MISMATCH
The firmware is older than (redacted).
IMVHO only IE in compatibility mode could access to that.

1
Re: Attempt to login to USG100, Chrome reports ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Hi,
fw 3.30 AQQ.7 WK48 solve this issue
Fred
fw 3.30 AQQ.7 WK48 solve this issue
Fred

1