-
It has been over year of this issue
And I I'm on the edge of losing it! Routing Zywall out a given interface when you have other WAN In my care my main virgin media and EE 5G and O2 G4 as backup Still in talks with Salim about this. Here is what we know if you don't do routing of Zywall all works fine if you set the default trunk to just one interface with…
-
synchronisation between flex 50h and nebula not consistent
I notice the configuration between nebula and de flex 50hp is not consistent. i try config override, but the config from the firewall is not transferred to nebula. but this is absolutely not the case! while in my firewall zones are configured
-
Issue with USG Flex 100H
Hi all, Unfortunately Im not sure what changes were made before this issue (The remote team who made the changes arent being helpful) but I believe it was changes to the IPsec VPN settings. For some reason this caused the firewall to go offline I was also unable to login to the local interface. We restored a backup that…
-
Every FQDN had its Expire cache by TTL disabled?
USG FLEX 700H V1.36(ABZI.0) Some how over 400 FQDN had its Expire cache by TTL to disable so I'm thinking something nebula changed it? Not that this is a problem its just I should be the one to change it. So a backup config I have a copy the FQDN TTL back in so like this is a snippet when it was fine / object…
-
IPSec VPN problem on USG Flex 700h with two remote sites
Hi! I have tried to trace a problem why two remote sites can't connect to 700h at the same time. I have on "VPN/IPSec VPN/Site to Site VPN" -page two different profiles for these remote sites. 700h has static WAN ip and remote sites has a dynamic WAN ip's. Both remote sites will work just fine but only one at the time. I…
-
Is H-series stable for basic tasks?
Hi, We are considering switching from old USG60s to new FLEX200HPs. However, I've been monitoring these forums for the past year and let's be frank, the H-series is not yet production-ready for all use cases. So I would like to ask users who have been using the H-series, if it is stable for basic firewall and routing…
-
USG FLEX H: Multiple DNS servers for Domain Zone Forwarder
Hi, I have configured Domain Zone Forwarder for internal domain. Is there a way to add more then one DNS server to have redundancy. Is there a syntax to add more then onw server for same forwarded domain?
-
FLEX 200H - loss of 2.5GB
I converted from a FLEX 500 to the FLEX 200H to gain the 2.5Gb network speed needed. I've had many issues with the 200H talking to the XMG1915 which drives the WBE530 APs. Nothing I've found allows for VPNs across this network - only LAN1 works. Additionally, the FLEX 200H lost the 2.5Gh option on all LAN ports (3-8) post…
-
Multiple VPN Tunnels Site2Site (working) but no connection to PC's
I have established 3 Sites with direct Site2Site VPN Tunnels. They work but it's not (only partially) possible to connect to specific PC's via Remote Desktop (RDP) nor ping them.Some of the connections work though.. Here is the situation: Site 1: Uses WAN from a Bridged Modem and has the public fixed IP, Site 2 and 3 are…
-
Random latency handling delays on FLEX H at low bandwidth
USG FLEX 700H V1.36(ABZI.0) So I know this to be the case with some testing I have done with BQM by thinkbroadband.com and StarTrinity CST by FLEX 700H vs FLEX 200 (non H) With any luck this can be fixed by firmware and is not a hardware limitation? My understanding of FLEX H is the sessions get put on fast path CPU if…
-
Zyxel USG700 zabbix monitoring
Dear All! I want to monitor my new usg in zabbix, i saw that mib are available for it, but for zabbix i didnt found a proper way to install them, if i try to import then i get an error. Do you have some trick to do this? Thank you for your help! bolvar
-
Geo Filter - access for only certain countries
If I want only one country to access from WAN to ZyWALL/Intranet. How can I make this simple? I know I could exclude all other countries and continents, but is this the only way? A simple one were better. 😅 Thanks!
-
Flex H - Camtive portal
We verified a configuration that the customer requested, which was to define only certain PCs on the LAN that would be restricted via captive portal. We contacted Zyxel support, and they confirmed that, as with the ATP series, it's not possible to specify an IP range excluded from the captive portal feature managed on the…
-
References of Network Interface
Observed likely a bug. If I have an (ethernet or vlan) interface used as Interface filter criteria in Diagnostic - Packet capture and then it is removed from the criteria list, Reference (under Interfaces view) is still shows it under packet capture until reboot.
-
Redirection Issue on Prestashop with USG Flex 500H
Hello, When connected through a USG Flex 500H, I am experiencing an issue on our Prestashop e-commerce site: whenever I switch tabs (Home, Invoices, Orders, etc.), I am automatically redirected to the login page. Please note: The administration page loads correctly without any errors. The issue persists even after…
-
2fa support with AD
Goodmornig, it's possible to configure 2fa with Active directory authentication? Thanks
-
H series router user logins not working
We are not able to configure security policies on the H series routers to allow 'user authenticated port forwarding' where a user is required to log into the router to enable a security policy from his 'login ip address'. Currently the H series routers says 'login denied' when a 'user' tries to log in. When will this…
-
FLEX 700h and VLAN
Hello there, Setting up fresh Flex700H and stuck with VLAN basics. Just have added a new VLAN IF (physical interface is added automatically under general section). Below are screenshots from Network Status - Interface and Network - Interface section. Why the first screenshot does not show port member as it is setup on the…
-
USG 500H Import DHCP
Upgrading from an older ATP200 to a new USG 500H and hoping to import the DHCP reservations from the ATP200 instead of having to type them all manually. I found an older post with a link to a tool that doesn't apply to the new device/firmware. Is there any way to import DHCP reservations on the 500H?
-
Flex 100H V1.36 Remote VPN With 2FA Support
Hi, We have a Flex 100H FW V1.36. We are wanting to setup remote users to have access to our network using VPN through the Flex Do we have to buy the Secuextender client to be able to use 2FA/MFA with the connection or can you use other clients that are FOC i.e. Open VPN etc. Many thanks for any advice.