-
Concerning logs after updating firmware on ATP500 in HA config
I just updated firmware to 5.37(ABFU.2) in HA config. After the firmware applied to the standby router and took the primary role, the passive router was updated. After reboot, it finally finished syncing and says success. But the logs show the following. Do I need to manually fix the startup config on the "passive"…
-
IPSec disconnected after lifetime, takes about two minutes to reconnect
I am having an issue where Zyxel initiated IPSec tunnel is periodically disconnected after lifetime period and gets reconnected after about 2 minutes of disruption. What can I do to have the tunnel stable? Logs: 2024-04-10 14:55:48 The cookie pair is : 0xd3a7316a7d603621 / 0x5d9704e0306922fd [count=4] 2024-04-10 14:55:48…
-
SYS led flashing
Good morning, a few days ago there was a blackout and since then the SYS led is flashing in my USG100, while the Ethernet ports leds are all off. When I connect to the console with PuTTY only this message appears, repeated endlessly: FLASH: AMD 16M FLASH: AMD 16M FLASH: AMD 16M You can help me?
-
Ipsec L2L unstable
USG Flex 50 (latest firmware) behind NAT as initiator, stronswan on the other side of the tunnel (also behind NAT, with 500 and 4500 ports redirected). Tunnel is working fine, but I got random disconnects after several hours sometimes even a day or two, it disconnects and only way how to bring the tunnel back is to reboot…
-
usg flex standalone cloud monitoring
hi everyone Since I have many usgflex firewalls in standalone and after having read about the monitoring mode, can you clarify for me which functions are lost by bringing the firewalls to monitoring on nebula, if the existing standalone configuration is lost or there are problems on the end customer side and perhaps…
-
S2S VPNs star topology
Hello! I am thinking of setup VPN connection betwee main office B and branches A and C basing on site to site VPN ikev1 or ikev2. If I use VPN wizard on ATP500 there is to be defined Local_IP and Remote_IP for each tunnel. Would it be enough or I have to put some static routes like: desired network available via next hop…
-
SSL VPN connects successfully but then immediately disconnects
Hi I'm having a problem with a new laptop that cannot sustain a SSL VPN connection using the SecuExtender 4.0.5 client to a USG 40. The laptop is running Windows 11 Pro but I have another two laptops running Windows 11 Pro and the SecuExtender 4.0.5 client which are working without issue. Looking at the log entries, see…
-
Apple, Airplay 2 configuration help
Is there an article on how to configure the USG for apple/Airplay 2 services? Whcih ports etc.
-
VPN, disconnect after a few minutes
Hello, At our company, we utilize Zyxel VPN. Recently, we acquired a new laptop and proceeded to install the Secure Extended 4.0.2.0 version designed for Windows. Subsequently, we attempted to connect using an existing user account. However, upon initial connection, the VPN promptly disconnects. We endeavored to find…
-
Can't get DDNS Certificate to work with SecuExtender VPN Client
USG FLEX 200 V5.37(ABUI.2) SecuExtender VPN Client_IPSec_SSL_VPN_7.7.40.019 I have a Certificate for something.ddns.net and for testing point at 192.168.255.237 logs show it built but then disconnects But if I make a self-signed Certificate it works If I drop the encryption for windows default that can be changed Phase 1…
-
USG40 and DynDNS
Hi! I've a DynDNS account with an FTP domain directed to a Zyxel USG40 firewall. Behind the firewall there is two Synology Diskstations with each fixed IP in Interface "lan1", provided by DHCP from the USG40. I can't get the USG40 to update DDNS without a "Fail" each time, seems to be no matter the settings. Account at…
-
USG110 iptv setup
Please i have usg110 and i am using it for iptv from my internal tuner gateway and at the same time to hook it up with my isp for internet .can some help me with configuration. Do i need to create 2 vlan for the iptv and the internet , say vlan10 for iptv and vlan 4 for the internet? Please i am novice and need help
-
Zyxel ATP500 L2TP VPN connection unavailable
Hello! I am trying to setup L2TPIPSEC VPN client to site. I added VPN gate and added VPN Conection with UNchecked "Enabled mode config" Anyway I do not see available VPN connection in L2TP VPN page in VPN Connection: None Whats wrong? Enabled mode config is desabled thx
-
Marco Pagnotelli
Hello everyone, I have a Zyxel USG60 that needs to connect clients to an external https server (cloud). The server gives me a timeout error. doing the same without firewall I have no errors. I would like to know how I can open a channel to the server's IP address for port 443, maintaining the current firewall rules. Thank…
-
notification new firmware
Is there a way to get a (mail) notification when a new firmware is released?
-
Firmware Update 2.20(AQU.6)C0 for ZyWall USG 200
Hi, I'm trying to learn about Firewalls & found a ZyWall USG 200. I'm trying to find the firmware update 2.20(AQU.6)C0. However, since the product has passed the EOL, I cannot find this. I know this device is very old & has passed eol, also, I'm not going to use it long term, but just to explore the features & get myself…
-
seems no matter what I do the custom websites options seems not to work?
I tried for a few days to get the custom Service working with absolutely zero success. I am trying to block all access to this domain, period, as we are getting a lot of phishing and spam from this domain. Sample URL, that im trying to block…
-
Access network printer & more
Hello, so I have been struggling to add a printer to my network without success. I have a relatively large home network. From my provider I have first a GS1350 Switch and a CPL network. From the GS1350 I have then a GS1900 switch for another part of the house. At the end different wifi network (either CPL or GS…
-
Network
I can't log in to my network it doesn't show
-
USG60 - IPSEC VPN failing at Phase 1, even though proposal seems to match?
Good morning All. I had a IPSEC/L2TP VPN set up on my USG60, this was working correctly with Windows 10 clients. When it was not required last year it was disabled in the GUI. Now it does not want to work when re-enabled, and I can't see exactly why. I have attempted to remove and recreate the various parts, but this did…