-
How to capture packets for a specific port number via CLI on the USG FLEX H model?
Question : How to capture packets for a specific port number via CLI on the USG FLEX H model? Answer : The user can use the CLI command traffic-capture interface <interface-name> filter 'port <number>' to capture packets for a specific port number. For instance, the user can use the CLI command show interface to list the…
-
How to set different parameter for WAN trunk?
Scenario: I have 1000 M for WAN 1 and 500 M for WAN 2. How should I set WAN trunk to make WAN 1 have more traffic? Setting concept: Weight Round Robin parameter will define the ratio of transmit session in the next round. Configuration: Please navigate to Menu > Networking > Interface > trunk tab. Create a user-defined…
-
[USG FLEX H]Why can't I resolve other A records in my domain?
Question: Why can't I resolve other A records in my domain? For example: you have DNS record with Domain "zyxel.com" And you can't resolve "www.zyxel.com" or "nebula.zyxel.com" afterwards Solution: This is normal behavior, when you have zyxel.com domain, it will act as NS for zyxel.com. So every requests of "*.zyxel.com*"…
-
Where can we configure the firewall interface egress limitation?
Question: Where can we configure the firewall interface egress limitation? Answer: This feature is not supported at the moment, but it will be implemented in the future.
-
[USG FLEX H]Intranet traffic have issue need to disable secure-policy as workaround.
Symptom: There's an access issue between LANs or VLANs; ping and UDP traffic is working, only TCP have problem. Solution: Typically, this is because the connection did not establish on Firewall. The SYN-ACK reply isn't being observed on the firewall interface. We can't disable this mechanism. This behavior is unusual for…
-
[USG FLEX H] How to setup active WAN interface and backup interface for dual wan?
Please navigate to Menu > Networking > Interface > trunk tab. Create a user-defined trunk profile by clicking the add button. Enter the profile's name, choose algorithm "Weighted Round Robin", add your WAN interfaces, change the main interface to active mode. And then click apply. Change the default WANT trunk option from…
-
Can the USG FLEX H model support bandwidth management for P2P applications?
Question : Can the USG FLEX H model support bandwidth management for P2P applications? Answer : Yes, the user can navigate to Network > BWM, select the service type as "Application Group", choose a P2P application such as BitTorrent, and set download and upload bandwidth limits for specific incoming and outgoing interfaces.
-
[USG FLEX H]Can I setup VLAN to individual port?
Some of user might require to set specific VLAN to specific ports. USG FLEX H supports this requirement. Please ensure the ports you want to assign VLAN are ethernet interface member. You can let each ports has its own ethernet interface. Setup VLANs and assign to individaul ports. Reference: You can set "Address…
-
How to setup VLAN on USG FLEX H?
Please reference this video: https://jam.dev/c/da53b786-3982-4183-9916-3e61fedd7b78
-
Which ports are 2.5 Gbps Ethernet Port on USG FLEX 200H
Question: Which ports are 2.5 Gbps Ethernet Port on USG FLEX 200H? Answer: The 2.5 Gbps Multi-Gigabit Ethernet Ports on USGFLEX 200H are P1 and P2.
-
How to set up LAG interface on USG FLEX H Firewall?
Question: How to set up LAG interface on USG FLEX H? Answer: A Link Aggregation Group (LAG) combines multiple Ethernet ports into a single logical link, LAG interface, between network devices. It helps to increase bandwidth and provide link redundancy. The LAG interface of Zyxel USG FLEX H firewalls combines multiple…
-
Is it possible to test internet speed of wan on H Series?
Question: Is it possible to test internet speed of wan on H Series? Answer: No, We currently didn't integrate speedtest
-
Ping works fine, but can't access internet
Symptom: I can ping outside, but I can't access internet. Checking: 1)Please check you have correct secure policy, especailly the zone assign of interface. 2)Please check the Firewall DNS is correct.
-
Is it possible to configure DSCP parameters in routing on H series?
Question: Is it possible to configure DSCP parameters in routing on H series? Answer: Yes, please go to local web GUI > Network > Routing > Policy Route, and create a policy route rule. You can select the Criteria of your DSCP Code as any, default, or any DSCP values, and configure the DSCP Marking. If you select a DSCP…
-
Can I configure multiple VLANs on one port on USG FLEX H?
Question: Can I configure multiple VLANs on one port on USG FLEX H? Answer: Yes, it's allowed to configure more than one VLANs on one port.
-
How can the SFP ports on USG Flex 700H be set to 10G?
How can the SFP ports on USG Flex 700H be set to 10G? For the USG Flex 700H model, the SFP ports (P13/14) are pre-configured to operate at a fixed speed of 10G. There is no option to modify the negotiation settings to other speeds.
-
How to Add Secondary IPs When Primary IP is DHCP on H series Firewalls?
Currently, in H series, to add secondary IPs the interface must be static type Please following the workaround for this DHCP scenario: Workaround: If you want to use the secondary IP which ISP give for Virtual Server. Please setup the IP as External IP in Virtual Server
-
How do I check the online clients for the USG Flex H on Nebula?
Question : How do I check the online clients for the USG Flex H on Nebula? Answer : The user can navigate to Site-wide > Clients to check the online clients. The feature has been supported since firmware version V1.32, so the device needs to be updated to V1.32 or a later version.
-
How to configure static route on USG FLEX H on Nebula?
In enterprise or advanced SMB (Small and Medium Business) network environments, it's common to deploy a Layer 3 switch within the LAN to handle internal routing between VLANs. To ensure proper communication between these internal VLANs and external networks (such as the internet or remote sites), a static route must be…
-
How to configure NAT on USG FLEX H on Nebula?
Here is an example of allowing access to the internal server behind USGFLEX H device with network address translation (NAT). Internet users can access the server directly by it's public IP address and a NAT rule will forward traffic from the internet to the local server in the intranet. Here is an example that the internet…