-
Why Did I Lose DHCP Hostnames After Firmware Upgrade?
Question: Why did I lose DHCP hostnames after upgrading my USG FLEX device to firmware version uOS 1.30? Answer: From firmware version uOS 1.30 onwards, DHCP hostnames must comply with RFC1123 rules, which require the following: * Hostnames cannot start with a hyphen (-). * They may only contain letters (A-Z, a-z), numbers…
-
Bridging SFP+ Ports on a Zyxel USG Flex 700H
This FAQ explains how to bridge the two SFP+ ports on a Zyxel USG Flex 700H firewall to create a single, aggregated link. # Background The Zyxel USG Flex 700H features two SFP+ ports that operate independently by default. This setup might not be ideal for scenarios requiring a single, high-bandwidth connection. By bridging…
-
How to add secondary IP address on interface?
Question: How to add secondary IP address on interface? Answer: You can add secondary IP address by CLI. For example, Add the secondary IP 10.214.48.61 on ge1 interface usgflex200h> edit running usgflex200h running config# vrf main interface ethernet ge1 ipv4 address 10.214.48.61/24 usgflex200h running config# save Note:…
-
How to check the nslookup result via CLI commands on USG Flex H models?
Scenario : The user may need to use CLI commands to check nslookup result for troubleshooting or maintenance purposes. This article will guide you on how to execute it. Answer : Please issue the CLI "cmd diagnostics nslookup domain-name-or-ip domain-name URL" to check the result. Refer to the below example : cmd…
-
How to monitor the MAC vendor from Device insight in the Zyxel USG Flex H?
Question: How to monitor the MAC vendor from Device insight in the Zyxel USG Flex H? Answer: Please navigate to "Network Status -> Device Insight". Add the column for MAC Vendor, You will find the manufacture of the NIC.
-
How to View the Client List on the USG Flex H
Question: Is there a client list in the new H GUI? I'm aware of the DHCP table, however that does not show all the devices on the LAN. Answer: Yes, you can see a full client list by enabling the 'Device Insight' feature. This feature provides information on devices that might not appear in the DHCP lease table. Steps to…
-
How to configure the UDP session timeout value on USG Flex H series models?
Scenario : Users may wish to configure the UDP session timeout value on USG Flex H series models for specific purposes such as VoIP-related traffic. This article will guide you on how to configure it. Answer : Please navigate to System > Advanced > System Parameters > UDP Timeout to adjust your desired value. Once you…
-
How to remove the NAT rule using CLI for USG Flex H series models?
Scenario : In this article How to check the NAT rule using CLI for USG Flex H series models? Users can use CLI to check the current NAT rules. Users may want to know how to remove the NAT rule using CLI. Answer : Please enter the CLI command "show config vrf main virtual-server rule" to check the current NAT rules on the…
-
How to check the NAT rule using CLI for USG Flex H series models?
Scenario : Users usually create NAT rules via the Web-GUI (as shown below). While troubleshooting NAT-related issues, users may use the CLI mode. This guide will show you how to check the NAT rules in CLI mode. Answer : Please enter the CLI command "show config vrf main virtual-server rule" to check the current NAT rules…
-
Ports cannot perfom Port Group with other ports
This is current limitiation: 1)Port 1 and Port 2 of the USG FLEX 500H and USG FLEX 700H cannot perfrom Port Group with other ports. 2)Port 13 and Port 14 of the USG FLEX 700H cannot perform Port Group with other ports. Find the detail in Release Note.
-
USG FLEX H Series - Session Control
USG FLEX H Series - Session Control Overview Session control is a feature designed to manage the number of concurrent sessions a client can initiate through the firewall. This is particularly useful for preventing clients from consuming excessive session resources, which can impact the performance and availability of…
-
USG FLEX H Series - DHCP Relay and DHCP Options
USG FLEX H Series - DHCP Relay and DHCP Options DHCP Relay Agent Overview In network environments, it’s sometimes necessary for DHCP clients to receive IP addresses from a DHCP server located on a different subnet. This is where the DHCP relay agent comes into play. The DHCP relay agent forwards DHCP requests from clients…
-
USG FLEX H Series - Dynamic DNS (DDNS)
USG FLEX H Series - Dynamic DNS (DDNS) Dynamic DNS (DDNS) is an essential feature for allowing remote access to servers behind your firewall, particularly when the IP address assigned by your ISP is dynamic and may change over time. The USG FLEX H Series firewalls have enhanced DDNS functionalities in firmware version 1.20…
-
USG FLEX H Series - Routing Enhancements
USG FLEX H Series - Routing Enhancements With the release of firmware version 1.20, the USG FLEX H Series introduces several significant enhancements to routing capabilities, particularly focusing on routing auto-disable and auto-recovery features. These enhancements aim to improve network reliability and ensure seamless…
-
How can I check DNS resolution using the CLI on USG Flex H series models?
Question : The users may want to know how to use CLI to check DNS resolution on the USG Flex H series models. This article will guide you on how to execute it. Answer : Please use the CLI command 'cmd diagnostics nslookup domain-name-or-ip domain-name' and enter the domain you wish to check. For example, if we want to…
-
USG FLEX H Series - Network Trunk Enhancements
USG FLEX H Series - Network Trunk Enhancements In firmware version 1.20, several enhancements have been made to the network trunk options for the USG FLEX H Series. These enhancements include new WAN load balancing algorithms and improved load balancing criteria, offering more flexibility and control over network traffic…
-
How to add existing DHCP IP to reserved IP from Web-GUI in USG Flex H series devices?
Scenario : Users can easily reserve an existing DHCP IP from the Web-GUI. Answer : Please navigate to Network Status > DHCP Table > Current DHCP List > to check the DHCP client that you wish to reserve and click "Reserved". The DHCP client's status will then change to "Reserved," indicating that the DHCP IP has been…
-
How to add reserved IP
Scenario: You would add static DHCP for certain client. Workaround: 1)Network Status → DHCP Table and click Add. System add a Reserved address within Host Name "host_{IP}" 2)Also used CLI to define your customize Host Name #vrf main dhcp server {subnet} host {your hostname} {MAC_Addr} {IP} For example: #vrf main dhcp…
-
How to add DHCP option 121 by CLI
Symptom: You would add user-defined DHCP option 121 Workaround: You can add by CLI. For example, Dst:1.1.1.0/24 Gateway: 192.168.1.2 . 1)Write as RFC format : 24.1.1.1.192.168.1.2 2)Translate to Hex 18:01:01:01:C0:A8:01:02 3) usgflex200h running#vrf main dhcp server subnet <your subnet> user-defined <uint8> hex-string…
-
How to setup UDP session timeout by CLI
We currently do not have a GUI to set these parameters, please refer to the CLI The GUI will be found in 1.20 200h>edit running 200h running config#system network-stack conntrack udp-timeout-stream <seconds> ; You can find some paremeter which you want after system network-stack conntrack ; udp-timeout-stream equal…