-
USG 110, remote install printer (autodiscover problem)
Hello, has anyone solved the problem of remote printer/copier installation - when connecting via SecuExtender is not found device installation program (autodiscover)? I can manually add the printer and add IP adress printer. I enabled ports on the firewall: according to table 3 here https://www.cups.org/doc/firewalls.html…
-
My USG210 reboots automatically
hi, I'm a Zyxel partner, and one of my clients has a USG210 running ver 4.73(AAPI.1) He says that the USG210 sometimes reboots by itself and disconnects all users from the Internet. What could be the reason and to fix it? Regards Issam
-
Site-to-Site connection via Point-to-point wifi
Hi all, i've two Zyxel USG Flex 200 and two Mikrotik Cube 60Pro ac on Site A and B. What's the best way to realize a site to site connection via point-to-point wifi? Site A and Site B have both several VLANs that should be accessed from the other site by security policy rules. The Mikrotik Cube 60Pro's are in bridge mode…
-
How Do I convert a port to WAN2 in USG100Flex
I need to connect 2 Wans, How can I convert a lan port to WAN?…, thanks
-
GEO IP update error (firmware V5.37(ABFW.0)
Hello. Can't update GEO IP database on ATP 200 with firmware V5.37(ABFW.0). Latest Version: 20230728 Current Version: 20230721 When press "Update" - get error "Geo-IP country database version 20230728 download has failed. (failed) at Mon Jul 31 10:28:49 2023" Help, please.
-
How do I apply policies to active directory groups
I already connect the AD with Zyxel USG100flex, my VPN work OK with AD users, but I am trying with policies (web filter and application control) to groups of the AD but it does not work, if you can help me, thanks, (sorry for my english, I speak spanish)
-
USG310 - Name Resolution on LAN via VLAN
Morning All, I'm rather new to vlans, so I'll appreciate your patience. I have the following scenario: USG310 Aruba 1930 switch I'm setting up vlans in a lab environment, and testing before I deploy to where it needs to go. For now I have just one vlan10. vlan1 and vlan10 machines can see each other (which is great) but…
-
VPN with TAP question
Hi all I am about to attempt and setup a client to site VPN which will utilize a TAP interface to allow devices connected to the Site B (client) - ideally on only ONE of the ethernet ports using a VLAN - router to be accessible (on the same subnet) from the Site A router and receive an IP address from the Site A router.…
-
USG310 Won't Shut Down Through Web UI
I tried 2 times. This is what happens: Click the Shutdown button The SYS LED starts blinking and clients are disconnected from the Internet After about 5 to 6 minutes the SYS LED is solid again and the clients sre again able to connect to the Internet In the end, the Shutdown process ends up being a Reboot process. In the…
-
New Nebula Cloud Monitor Mode = (Sort of) Excellent!!!!
Huge shout out to Zyxel for the new Nebula hybrid/cloud monitor mode that dropped in v5.37! We never could find our way to Nebula Mode because too much stuff was missing compared to on-prem configuration. But we really missed the ability to centrally monitor and manage the many gateways we have out there with clients. This…
-
atp700 boot problem
Hi all, i have a problem with ATP700 after programmed restart , led power is green but sys led is off, i try to connect via RS232 with putty/teraterm but no result, the device is not responding i could not change boot partition, i don't see any boot string in teraterm. any idea?
-
Help getting vlan working
I have a USG Flex500, firmware V5.37(ABUJ.0) in native mode and I am unable to get a basic VLAN to functioning correctly. I've read countless articles, and watched multiple Zyxel videos, but still can't seem make it work. The USG500 is connected to a TP Link SG1024DE smart switch. I have tested the switch by putting…
-
How Do I do to connect a server at DMZ and post it with an public IP
I configured my dmz sub net 10.10.10.0/255.255.255.0 the dmz ip is 10.10.10.1 i have connected a server 10.10.10.2 i have tested some routes and they have worked…., but I need to assign a Public IP to the server and access it from out of the office, includding ports as: ftp, rdp, http, y sql, Please if you can help me,…
-
Multi Subnet and VPN
a customer of mine has a new USG50. connected via VPN IP SEC to headquarters. It has two subnets 192.1.40.0/24 192.168.36.0/24 I can't set that all traffic from the 192.168.36.0/24 subnet must not pass through the vpn I'm a novice technician thank you all for the support
-
Port clone
Good morning ATP800 How do I set one port to be a clone of another? I'm a novice technician thank you all for the support
-
Service License refresh sometimes use AUTO DNS
VPN300 V5.37(ABFC.0) In DNS forwarder I have * 192.168.53.12 VLAN53 * 192.168.53.4 VLAN53 And AUTO default that I don't want to use and have blocked then upstream with a switch When you do a Service License refresh it will sometime use AUTO and will fail refresh it again then it works This problem could be solved by this…
-
Follow up on zyxel vpn tutorial - and soft ether vpn server
Hello guys, To sum things up quick, i followed these tutorials: https://support.zyxel.eu/hc/en-us/articles/360001390914 https://support.zyxel.eu/hc/en-us/articles/360000706899 And i get stuck with windows 10 stating that the remote server doesn't respond. On the zywall log all i see is "Security Policy ControlMatch default…
-
Zyxel Usg 1000 - Trunk / VPN
We have a Zyxel usg 1000. I understand it's old, but it works. We have recently purchased some Flex 200 devices, but not implemented yet. My question: We have two internet providers, Comcast and ATT Fiber. Currently we have a single ipsec vpn configured between the remote office and the primary office…using the Comcast Wan…
-
ZYXEL USG FLEX 200 - ENABLE PING BETWEEN LAN 1 AND LAN 2
Hello, I have a ZYXEL USG FLEX 200 with two LAN : LAN1 : 172.17.30.0 /24 LAN2 : 172.18.30.0 /24 I can't ping LAN 2 from LAN 1 and LAN 1 from LAN 2, I tried to add Policy Control from LAN 1 to LAN 2 and LAN 2 to LAN 1. I also add a policy route from LAN 1 to LAN 2 with a SNAT on outgoing-interface. I tried to put static…
-
Gateway confusion between two IPSec Gateways
USG40, Firmware 4.73. One internet connection FTTC, static IP address 9 IPSec gateways configured, 2 IKEv2. 7 IKEv1. Gateway 8 is the one used for IPSec client with license; aggressive negotiation, lifetime SA 86400. Gateway 9 is configured as "site to site with dynamic peer"; aggressive negotiation SA lifetime 3600 sec;…
