-
Device Insight Status show Verifying
Question: What is the meaning of the "Verifying" status in Device Insight, and how does it relate to displaying device online/offline status in the DHCP list? Answer: Understanding the "Verifying" status in Device Insight and the availability of device status information requires looking at different functionalities.…
-
IKEv1 to IKEv2 VPN Conversion Limitations from FLEX to H series
Question: What are the limitations regarding converting IKEv1 VPN configurations to IKEv2 on a Zyxel USG FLEX 700H, especially when using a configuration converter? Answer: The direct conversion of IKEv1 VPN configurations to IKEv2 is not supported, and manual reconfiguration is required.
-
2FA Functionality with VPN Clients
Question: What is the process for using Two-Factor Authentication (2FA) with different VPN clients, especially when using OpenVPN? Answer: The way 2FA functionality is presented varies between the Zyxel VPN Client (SecuExtender) and other third-party VPN clients. * Root Cause: The automatic display of the 2FA…
-
WebGUI Access for User-Type Accounts on Zyxel H series
Question: What is the reason that 'user-type' accounts cannot log in to the WebGUI of new Zyxel security appliances, and how should port-opening scenarios based on user login be handled? Answer: On new generation H series , 'user-type' accounts are intentionally restricted from logging into the WebGUI. This is a design…
-
USG FLEX 700H DHCP Server: Issuing DHCP Option 24 for VOIP Equipment
USG FLEX 700H DHCP Server: Issuing DHCP Option 24 for VOIP Equipment As part of a recent POC (Proof of Concept) for VOIP integration, questions arose regarding the capability of the USG FLEX 700H DHCP server to issue DHCP option 24 to VOIP equipment. This functionality is crucial for VOIP devices to automatically retrieve…
-
How to redial the PPPoE interface using the command line?
Question: How do I redial the PPPoE interface using the command line? Answer: You can run the command cmd dial pppoe ge1_PPP to force a PPPoE redial. Replace ge1_PPP with the actual name of your PPPoE interface.
-
How to flush the content filter without power cycling the firewall?
Question: How do I flush the content filter without power cycling the firewall? Answer: You can flush the firewall's content filter cache using the CLI command cmd content-filter-cache-flush.
-
How to check the device's active sessions and supported session count?
Question: How do I check the device's active sessions and supported session count? Answer: You can obtain this information using the CLI command show conn status.
-
How to check the device's current date and time via serial console access?
Question: How do I check the device's current date and time via serial console access? Answer: You can check the current date and time using the CLI commands show date and show clock time.
-
How to check the backed-up configuration file via console access?
Question: How do I check the backed-up configuration file via console access? Answer: You can check the configuration file using the CLI command show dir config-file.
-
How to run a command to update NTP and obtain the correct date and time?
Question: How do I run a command to update NTP and obtain the correct date and time? Answer: You can run the CLI command cmd ntp update execute to update NTP, and check the result with the command cmd ntp update get-result.
-
Is there a way to quickly test external interface internet access using a command?
Question: Is there a way to quickly test external interface internet access using a command? Answer: Yes, you can check interface access by running the command cmd internet-check bind ge2. For example, if ge2 is an external interface, you can bind it to quickly verify internet access.
-
How to obtain the firewall interface's real-time throughput?
Question: How to obtain the firewall interface's real-time throughput? Answer: First, use the CLI command show interface to identify the interface name. Then, run the command show interface throughput name vlan60 to obtain the real-time throughput. To stop the command, press Ctrl + C.
-
How to flush the DNS cache on a FLEX H firewall?
Question: How do I flush the DNS cache on a FLEX H firewall? Answer: You can flush the firewall's DNS cache by issuing the command: cmd dns proxy clear-cache.
-
Why does the "file is reserved" error appear when uploading a configuration file in the setup wizard
Question: Why does the "file is reserved" error appear when uploading a backup configuration file in the setup wizard? Answer: The "file is reserved" error occurs because the uploaded configuration file is a system-reserved filename used internally by Zyxel firewalls for the current configuration. Uploading a file with the…
-
Which USB partition table mode support on Zyxel firewall?
USB storage devices support both MBR (Master Boot Record) and GPT (GUID Partition Table) modes. However, all Zyxel firewalls only support USB storage in MBR mode. Since the system reads only the first partition during boot-up, if multiple partitions exist on the USB storage device, it will result in a mounting failure.
-
Does the USG Flex H support site replicate and site move functions in the MSP service?
Question : Does the USG Flex H support site replicate and site move functions in the MSP service? Answer : Currently, MSP does not support the site replication and site move functions. These features are expected to be available in 2026.
-
How do I create a static ARP entry on USG FLEX H Series devices?
Question: How do I create a static ARP entry on USG FLEX H Series devices? Answer: Yes, it is possible to create a static ARP (Address Resolution Protocol) entry on the USG FLEX H series devices, similar to ZLD devices. Below are the steps to configure it: Access the device's CLI interface. Use the following command to…
-
How Can I Copy a Configuration Template for H Series in Nebula Control Center?
Question: How can I copy a configuration template for USG FLEX H Series in Nebula Control Center? Answer: At the time of writing (version 19.10), the ability to copy a complete configuration template to a new organization for the USG FLEX H Series in Nebula Control Center is not directly available as a configurable…
-
How can I check the e-mail notification status through the CLI on the USG Flex H?
Question : How can I check the e-mail notification status through the CLI on the USG Flex H? Answer : The user can use the CLI 'show notification status mail' to check the e-mail notification status. For instance, the user checks the e-mail notification status on the USG Flex 200HP. The CLI result: The GUI settings: