-
How to add "Static ARP" in arp-table to fulfill WoL scansion ?
Question: I would like to setup WoL over VPN tunnel to wake up PC from peer firewall. But there is no ARP record in firewall so WoL can not work even traffic arrived to peer firewall. How t add "Static ARP" in firewall? Answer: > edit running # / vrf main interface ethernet ge3 ipv4 neighbor 192.168.168.100…
-
What are the failed and successful log messages of the Connectivity Check?
Question : This article explains the meaning of 'Check Fail Tolerance' in the Connectivity Check. It shows that if the device reaches the specified number of consecutive failures, the firewall will stop routing through the GE interface. What do the failed and successful log messages of the Connectivity Check look like,…
-
What is the meaning of 'Check Fail Tolerance' in the Connectivity Check?
Question : What is the meaning of 'Check Fail Tolerance' in the Connectivity Check? Answer : It means that if the device reaches the specified number of consecutive failures, the firewall will stop routing through this GE interface. As shown below, the firewall performed five connectivity check failures and then stopped…
-
How can I add a static DHCP IP from the GUI on the USG Flex H model?
Question : How can I add a static DHCP IP from the GUI on the USG Flex H model? Answer : The user can navigate to Network Status > DHCP Table, select the interface, and add a static DHCP IP entry. Once the static DHCP IP entry is created successfully, its status will show as Reserved.
-
How to capture packets for a specific port number via CLI on the USG FLEX H model?
Question : How to capture packets for a specific port number via CLI on the USG FLEX H model? Answer : The user can use the CLI command traffic-capture interface <interface-name> filter 'port <number>' to capture packets for a specific port number. For instance, the user can use the CLI command show interface to list the…
-
How to set different parameter for WAN trunk?
Scenario: I have 1000 M for WAN 1 and 500 M for WAN 2. How should I set WAN trunk to make WAN 1 have more traffic? Setting concept: Weight Round Robin parameter will define the ratio of transmit session in the next round. Configuration: Please navigate to Menu > Networking > Interface > trunk tab. Create a user-defined…
-
[USG FLEX H]Why can't I resolve other A records in my domain?
Question: Why can't I resolve other A records in my domain? For example: you have DNS record with Domain "zyxel.com" And you can't resolve "www.zyxel.com" or "nebula.zyxel.com" afterwards Solution: This is normal behavior, when you have zyxel.com domain, it will act as NS for zyxel.com. So every requests of "*.zyxel.com*"…
-
Where can we configure the firewall interface egress limitation?
Question: Where can we configure the firewall interface egress limitation? Answer: This feature is not supported at the moment, but it will be implemented in the future.
-
[USG FLEX H]Intranet traffic have issue need to disable secure-policy as workaround.
Symptom: There's an access issue between LANs or VLANs; ping and UDP traffic is working, only TCP have problem. Solution: Typically, this is because the connection did not establish on Firewall. The SYN-ACK reply isn't being observed on the firewall interface. We can't disable this mechanism. This behavior is unusual for…
-
[USG FLEX H] How to setup active WAN interface and backup interface for dual wan?
Please navigate to Menu > Networking > Interface > trunk tab. Create a user-defined trunk profile by clicking the add button. Enter the profile's name, choose algorithm "Weighted Round Robin", add your WAN interfaces, change the main interface to active mode. And then click apply. Change the default WANT trunk option from…
-
Can the USG FLEX H model support bandwidth management for P2P applications?
Question : Can the USG FLEX H model support bandwidth management for P2P applications? Answer : Yes, the user can navigate to Network > BWM, select the service type as "Application Group", choose a P2P application such as BitTorrent, and set download and upload bandwidth limits for specific incoming and outgoing interfaces.
-
[USG FLEX H]Can I setup VLAN to individual port?
Some of user might require to set specific VLAN to specific ports. USG FLEX H supports this requirement. Please ensure the ports you want to assign VLAN are ethernet interface member. You can let each ports has its own ethernet interface. Setup VLANs and assign to individaul ports. Reference: You can set "Address…
-
How to setup VLAN on USG FLEX H?
Please reference this video: https://jam.dev/c/da53b786-3982-4183-9916-3e61fedd7b78
-
Which ports are 2.5 Gbps Ethernet Port on USG FLEX 200H
Question: Which ports are 2.5 Gbps Ethernet Port on USG FLEX 200H? Answer: The 2.5 Gbps Multi-Gigabit Ethernet Ports on USGFLEX 200H are P1 and P2.
-
How to set up LAG interface on USG FLEX H Firewall?
Question: How to set up LAG interface on USG FLEX H? Answer: A Link Aggregation Group (LAG) combines multiple Ethernet ports into a single logical link, LAG interface, between network devices. It helps to increase bandwidth and provide link redundancy. The LAG interface of Zyxel USG FLEX H firewalls combines multiple…
-
Is it possible to test internet speed of wan on H Series?
Question: Is it possible to test internet speed of wan on H Series? Answer: No, We currently didn't integrate speedtest
-
Ping works fine, but can't access internet
Symptom: I can ping outside, but I can't access internet. Checking: 1)Please check you have correct secure policy, especailly the zone assign of interface. 2)Please check the Firewall DNS is correct.
-
Is it possible to configure DSCP parameters in routing on H series?
Question: Is it possible to configure DSCP parameters in routing on H series? Answer: Yes, please go to local web GUI > Network > Routing > Policy Route, and create a policy route rule. You can select the Criteria of your DSCP Code as any, default, or any DSCP values, and configure the DSCP Marking. If you select a DSCP…
-
Can I configure multiple VLANs on one port on USG FLEX H?
Question: Can I configure multiple VLANs on one port on USG FLEX H? Answer: Yes, it's allowed to configure more than one VLANs on one port.
-
How can the SFP ports on USG Flex 700H be set to 10G?
How can the SFP ports on USG Flex 700H be set to 10G? For the USG Flex 700H model, the SFP ports (P13/14) are pre-configured to operate at a fixed speed of 10G. There is no option to modify the negotiation settings to other speeds.