Best Of
Re: Public IP Whitelisting
We have hosted our application outside firewall, and we are trying to access that application but ATP is blocking that IP address. hence I need help to whitelist so that we can access that application within firewall.

1
Re: NR7101 Module Firmware Upgrade Fail
tonygibbs16 said:I hear your frustration. I am a user also.
Does the upgrade document available at https://www.dropbox.com/s/1bac0bz4anml5jx/How to Update Cellular Module Firmware Via WebGUI.PDF?dl=0 from https://support.zyxel.eu/hc/en-us/articles/4403365084818-5G-Devices-Advanced-Downloads-Firmwares-and-other-resources- help at all?
Kind regards Tony
Hi Tony,
Thank you for the input, I had not seen the first document before, whereas I used a shorter version ( https://support.zyxel.eu/hc/en-us/articles/4403365084818 ) of the second link you sent to find all the modem firmware and module firmware upgrade files that I used.
Having looked through the document, unfortunately it does not seem to provide additional info on the procedure, just a quick rundown of how to perform the module upgrade (interestingly, it does not mention anything about removing the sim-card during upgrade).

1
Re: NR7101 Module Firmware Upgrade Fail
I did not notice in your first post how old your module firmware actually is but......
Try this in the following order.
http://79.161.156.252/Update_RG502QEAAAR01A04-R11A01.zip
http://79.161.156.252/RG502R11A01-A02.zip
http://79.161.156.252/RG502QEAR11A02-A03.zip
http://79.161.156.252/RG502QEAAAR11A03M4G-RG502QEAAAR11A06M4G.zip
http://79.161.156.252/RG502QEAAAR11A06M4G-RG502QEAAAR11A07M4G.zip
Or download files from drive.......
https://drive.google.com/file/d/1-WaUguHtvpzx38WUfjNrga6B7DIoVx0Q/view?usp=sharing,
https://drive.google.com/file/d/11QwLnRthHlC5dXDcf3-nLkZ4gDO772M6/view?usp=sharing,
https://drive.google.com/file/d/1D0YhMSnZjkQay2vHfSK5aZxT6zHIJhmo/view?usp=sharing,
https://drive.google.com/file/d/1LxFOzjbk55U5yU-Zoh9RbpDi6GN3TmFq/view?usp=sharing,
https://drive.google.com/file/d/1_WCAb5K0xH7tmtLO74x0joYUo5NKrfBL/view?usp=sharing
Try this in the following order.
http://79.161.156.252/Update_RG502QEAAAR01A04-R11A01.zip
http://79.161.156.252/RG502R11A01-A02.zip
http://79.161.156.252/RG502QEAR11A02-A03.zip
http://79.161.156.252/RG502QEAAAR11A03M4G-RG502QEAAAR11A06M4G.zip
http://79.161.156.252/RG502QEAAAR11A06M4G-RG502QEAAAR11A07M4G.zip
Or download files from drive.......
https://drive.google.com/file/d/1-WaUguHtvpzx38WUfjNrga6B7DIoVx0Q/view?usp=sharing,
https://drive.google.com/file/d/11QwLnRthHlC5dXDcf3-nLkZ4gDO772M6/view?usp=sharing,
https://drive.google.com/file/d/1D0YhMSnZjkQay2vHfSK5aZxT6zHIJhmo/view?usp=sharing,
https://drive.google.com/file/d/1LxFOzjbk55U5yU-Zoh9RbpDi6GN3TmFq/view?usp=sharing,
https://drive.google.com/file/d/1_WCAb5K0xH7tmtLO74x0joYUo5NKrfBL/view?usp=sharing

1
Re: recommendation switch
Hi @mMontana
I will PM you the switch configuration for the DANTE network. If you have any comments, we can discuss them in the PM.
In addition, the guideline is under preparation. We will publish it on our website when it is ready.
Re: Send Magic Packet to Wake a Computer from a NAS326
As far as I know ffp has no WOL package. But most slacker sites are dead links now.
Sending a WOL packet is no rocket science. It's any ethernet packet which contains in it's payload 6 bytes FF FF FF FF FF FF, followed by 16 times the 48 bit (6 bytes) MAC address of the device-to-be-waked. In practise an UDP broadcast packet is used, send to port 0, 7 or 9, but that doesn't actually matter.
There are several implementations around, a shell script, a perl script and a python script. I didn't test any of them in ffp.
When you have the ffp build tools installed, you can also build a binary. Download ether-wake.c and compile it:
gcc -o ether-wake ether-wake.c

1
Re: My RADIUS Auth via local network does not work
Hi @baba
The fix is included in firmware version V6.50 which will be soon released.
Thank you
Regards,
Bella
Re: L2TP over IPSEC parameters for Windows 10 native client
Hi @valerio_vanni,
First, the configuration on your USG the phase 1 mode should be "Main" mode not "Aggressive mode".
Second, the Windows native L2TP/IPSec client using 3DES/SHA1/DH2 encryption by default.
https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/default-encryption-settings-for-l2tp-ipsec-vpn-client
If you want to change the encryption setting.
1. You need to use powershell command to create VPN connection,
Add-VpnConnection -Name "L2TPoverIPSecVPN" -ServerAddress <VPN_WAN_IP> -TunnelType "L2tp"
Set-VpnConnectionIPsecConfiguration -ConnectionName "L2TPoverIPSecVPN" -AuthenticationTransformConstants SHA196 -CipherTransformConstants AES128 -EncryptionMethod AES128 -IntegrityCheckMethod SHA1 -PfsGroup None -DHGroup Group2 -PassThru -Force
First, the configuration on your USG the phase 1 mode should be "Main" mode not "Aggressive mode".
Second, the Windows native L2TP/IPSec client using 3DES/SHA1/DH2 encryption by default.
https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/default-encryption-settings-for-l2tp-ipsec-vpn-client
If you want to change the encryption setting.
1. You need to use powershell command to create VPN connection,
Add-VpnConnection -Name "L2TPoverIPSecVPN" -ServerAddress <VPN_WAN_IP> -TunnelType "L2tp"
Set-VpnConnectionIPsecConfiguration -ConnectionName "L2TPoverIPSecVPN" -AuthenticationTransformConstants SHA196 -CipherTransformConstants AES128 -EncryptionMethod AES128 -IntegrityCheckMethod SHA1 -PfsGroup None -DHGroup Group2 -PassThru -Force
2. Then, on desktop screen, click on the Network icon in the bottom right hand corner. Right click and select "Open Network & Internet Settings".
3. Under the Advanced network settings section. Click "Change adapter options".
4. Select the VPN connection created. Right click and "select Properties". To edit the pre-share key and authentication method.
3. Under the Advanced network settings section. Click "Change adapter options".
4. Select the VPN connection created. Right click and "select Properties". To edit the pre-share key and authentication method.