-
How can I check the End-of-Life (EOL) information for Zyxel products?
Question How can I check the End-of-Life (EOL) information for Zyxel products? Answer The information can be found at .
-
How to clear the ARP table in Firewall?
Question How do we clear the firewall's ARP table to troubleshoot layer 2 issues? Answer Show ARP table Router(config)# show arp-table Clear ARP table Router(config)# arp-table flush
-
How to recover/regenerate the device's default certificate using the CLI?
Question After checking, it appears that the firewall's default certificate is corrupted, and I am unable to log in to the device's web GUI. How can I recover/regenerate the device's default certificate using the CLI? Answer We can connect to device using SSH, and type CLI Router> debug _ca regenerate to generate new…
-
How to configure LAN3 zone on USG20(W) and USG Flex 50(W) models?
Scenario: Because USG20(W) and USG Flex 50(W) don't have LAN3 zone by default. I the user wants to add a LAN3 zone to manage the LAN clients more flexibly how to deploy it? Answer: If the customer would like to use P3 for the LAN3 zone with IP 192.168.66.1 and DHCP server, please refer to the below steps: Configuration >…
-
How to disable DHCP settings and set the LAN2 port as a locally managed port?
Scenario : This article will guide you on how to disable DHCP settings and set the LAN port as a locally managed port for better security for you. Answer : For example, if the user wants to restrict administrator access to only lan2 for firewall management, they should navigate to Configuration > Networks > Interface >…
-
How to configure a VLAN interface with DHCP server in on-premise mode firewall?
Scenario : The user may wish to configure a VLAN interface with a DHCP server. This article will guide you on how to deploy a VLAN interface with VLAN ID 10 and a DHCP server. Answer : Please navigate to Configuration > Network > Interface > VLAN > Add a VLAN interface and configure Interface Properties, IP Address…
-
How to flush DNS cache in firewall?
Question: How do we flush DNS cache in firewall if we would like to troubleshoot DNS issue. Answer: We can enter CLI Router> ip dns server cache-flush to clear firewall DNS cache.
-
How to remove all DHCP binding entries at once via CLI?
Question Normally, we can remove the DHCP binding entry by Router# clear ip dhcp binding x.x.x.x But how can we remove all DHCP binding entries at once? Answer To remove all DHCP binding entries, please input Router# clear ip dhcp binding *
-
What can I do when SecuReporter upload fail?
Question Some users may encounter a problem that SecuReporter cannot show the statistics data and logs, meanwhile the device event log shows [SecuReporter] Upload fail [SecuReporter] Upload fail when https post. Server response:400/40003/The request is expired Answer It could be caused by the date/time not corresponding to…
-
How to configure mail server by Web-GUI and CLIs ?
Question : How to configure mail server by Web-GUI and CLIs ? Answer : Please navigate to Configuration > Notification > Mail Server to configure mail server by local Web-GUI. Additionally, you can configure the relevant parameters by CLIs as well. Router# configure terminal Router(config)# mail-server…
-
How to flush connection by CLI
Scenario: You'd like to flush all connection Command: Router# debug conntrack flush
-
How to force-logout users
Scenario: You'd like to force-logout users who log in to firewall Command: Router> configure terminal Router(config)# users force-logout user <user name>
-
If the WAN port is down, can the user still log in to the device using a 2FA code?
Scenario & Question: Sometimes we might encounter a situation where the WAN port is down, resulting in no internet connectivity due to unexpected reasons. In this scenario, can the user still log in to the device using a 2FA code? Answer: Yes, the user can still utilize the Google Authenticator code or backup codes to…
-
How to restrict SSH login?
Question : There are many internet suspicious attacks on the internet including unauthorized SSH login. This article will guide how to prevent it. Answer : You can add a a security policy to enable remote SSH access to your firewall from specific IP addresses (such as WAN IP, Geo-IP, etc.), as shown below: Once a…
-
What happens after enabling IP/MAC Binding and DHCP Enforcement?
Question: What does the option "enable IP/MAC Binding and DHCP Enforcement" means? Answer: After enabling this option, the following types of hosts will be blocked Host with Static IP but MAC address is not in the static DHCP table Host with DHCP IP but not get the IP address from this firewall
-
What's the difference between the admin account and limited-admin user account?
Question: What is the difference between the privileges of admin and limited-admin? Answer: Admin: Change the configuration (Console, Telnet, SSH, WWW, FTP) Limited-Admin: Only look at the configuration and able to run the diagnostic features. (Console, Telnet, SSH, WWW)
-
What can I do when I get locked out due to activating "Authenticate Client Certificates"?
Question: Some users may encounter a problem that after enabling Authenticate Client Certificates, the web GUI login page is not available. What can we do when we're in this scenario? Answer: We can use CLI command to disable it. Router# configure terminal Router(config)# no ip http secure-server auth-client For how to use…
-
How to clear ARP table, or remove a specific ARP entry?
Question: How to clear the ARP-Table or remove a specific ARP entry? Answer: You can use CLI command to clear the ARP table Router# Router# configure terminal Router(config)# arp-table flush For a specific ARP entry Router(config)# show arp-table Address HWtype HWaddress Flags Mask Iface 192.168.1.33 ether…
-
How to unlock the user who has been locked out due to multiple login failures?
Question: When there is a user gets locked out because he attempt to log in and failed multiple times? Answer: The user is blocked by User IP Lockout Settings, which means the IP address of the user would be blocked if fails 6 times The admin account can unlock the user's IP address by CLI command. First, check the IP…
-
Why is there a “Session Limit Maximum sessions per host (1000) exceeded” message in the Monitor Log?
Background and Scenario: We have noticed that some users reported seeing multiple instances of "Session Limit Maximum sessions per host (1000) exceeded" in the Monitor Log. Answer: The log message means the host has reached our default session limit of 1000. To avoid this, please increase the session limit number or set it…