-
USG FLEX 200H - Import Certificates is broken. ( Error code: 11 )
USG FLEX 200H, firmware V1.21(ABWV.0)ITS-24WK35-m5760 When I try to import certificate the following error occurs: This error message happens for all accepted formats I tried to import. PEM (Base-64) encoded X.509 Binary PKCS#7 PEM (Base-64) encoded PKCS#7 Binary PKCS#12 Did not try Binary X.509…
-
DNS and site to site Policy-based Zywall replies
USG FLEX 200H V1.21(ABWV.0)ITS-24WK35-0813-240800592 So here is a quick show of the problem with Policy-based site to site with DNS FLEX200H local 192.168.138.0/28 remote 192.168.144.0/24 USG40 192.168.144.0/24 >192.168.255.243 > FLEX200H 192.168.255.235 > 192.168.138.2 When a IP from 192.168.144.0/24 send dns to…
-
A success in moving from Zywall 110 to the new FLEX200H
So their where some changes I had to do to get here but seems to be up and running with real DMZ type 2.1 working well it has some advantages and disadvantages over type 1. I did find a problem of NAT port the SYN, ACK not being sent out due the truck not having the interface but due to problem adding it to the trunk I…
-
Connectivity Check limitation
USG FLEX 200H V1.21(ABWV.0)ITS-24WK35-0813-240800592 in other models you can have the routeing Connectivity Check ping local interface IP subnet without a gateway and External or Internal but on the FLEX H you can only ping if the interface has a gateway and External. can this be changed thanks
-
Why did you do this to virtual interface
USG FLEX 200H V1.21(ABWV.0)ITS-24WK35-0813-240800592 So back when I was testing before V1.2 it was fine I could do: 0 running config# vrf main interface ethernet ge2 ipv4 address 192.168.254.1/29 0 running config#! Commit but now you added this ERROR: [LY] / vrf main interface ethernet ge2 ipv4: Must condition…
-
EBL USG FLEX - whether it works properly
Hello, EBL in the H series has a problem with long txt files, I received new firmware, I'm testing it and I'm wondering if EBL should really work like that. After connecting the list, I hoped that the IP addresses from the list would be blocked similarly to security rules, and it works as follows: it passes the address…
-
USG FLEX 200H Error Code: [ID:20001]
Out of nowhere after login. Needed reboot.
-
AD Server Authentication fail on the USG Flex 500H if domain name start with a number
ZYXEL usg Flex 500H Firmware V1.21(ABZH.0) | 2024-07-11 06:36:27 i try to join my domain in user authentication / aaa server / ad server summary. Configuration validation check passed with ok but when i try to join AD Domain i can't because my domain name start with a number (!?!?!) my domain is perfectly working and i…
-
Admin interface protected by OTP not working after few hours/days
Hi, I have activate Two-factor Authentication for Admin access on my Flex200H (firmware v1.21(ABWV.0). It's working fine, but after few hours or days, when I connect OTP was not asked. If I disable/enable admin Access, OTP was asked again but for few times… This problem exist in previous firmware too. Best regards Luc
-
USG FLEX 200H DHCP reserved IP edit error (bug)
USG FLEX 200H, firmware V1.21(ABWV.0) Network Status → DHCP Table When I try to edit reserved IP entry I get the warning: This IP address is not included in the DHCP pool. This happens when editing any field, that is Host Name, IP Address, MAC Address and Description. The workaround is to remove the reserved IP (Unreserve)…
-
Best Practices
Hello Zyxel Team, I would like to ask for your recommendations and best practices for our network. We are currently still utilizing our VPN50 firewall router behind our ISP’s basic router, with a 500 Mbps fiber subscription. Our network has 60 network devices including 30 IP cameras, NVRs, Zyxel managed and unmanaged…
-
OpenVPN, can we combine password+otp in same question ?
Hello, My customers use OpenVPN with Flex H and OTP to connect on remote system. It's working fine, but it is tricky to use. For customer it is very complicate to open web page to send OTP value especially from a mobile device. Is it possible to add OTP value with password ? like this password + otp value P.S. We choose…
-
more than one vpn profile in ios?
Hello all, Hello, I operate several USG flex 200hp at different locations. Manually setting up multiple VPN connections in MacOS was no problem. Manually setting up in IOS doesn't work, only via the .mobileconfig. However, the second import of a .mobileconfig deletes the VPN connection of the first. How can I set up…
-
Trunk and remote access VPN issue
USG FLEX 200H V1.21(ABWV.0)ITS-24WK35-0813-240800592 So bit of a problem for my setup to work WAN2 must not be in the User-Defined Trunk but when its not in the trunk then remote access VPN does not work In other words not having WAN in trunk works better but for VPN to work WAN must be in trunk So can you get VPN to work…
-
OpenVPN use client certificate
Hello, is it possible to use client certificate with OpenVPN for better security ? Best regards Luc
-
new release and HA support
hello when is it supposed to have a new firmware release, enhancing the configuration interface (now very poor compared to the USG/ATP series) and supporting HA as well ? regards Paolo
-
usg flex 700H
external port P2 gest stuck after power off/on. We have tu unplug/plug the cable on P2 to get it working again. since this port is the 'wan port' for us, the customer can't access Internet without a manual action on premise. Very disappointing
-
Is Remote Syslog Server stopping for anyone else? (USG Flex 200 H)
Hi everyone. I seem to be experiencing an issue and wanted to ask if anyone was experiencing the same thing or has ever run into this. I am using the USG Flex 200H device and am trying to reroute its logs to a logging server via Syslog. For some reason, the flow of logs to the remote server will stop randomly after 2-24…
-
Help with setup testing of type 2 real DMZ
I have found a type 3 setup of real DMZ that works fine has made me happy but means more hardware to setup but wanted to see if this type 2 could be made to work better So its looking like my 1st type real DMZ will no longer be supported on newer models (which I might be wrong but thats what I think) due to its…
-
NAT ports over a bridge
Things I really want want the new H models to do that say my USG40 can do which is to change port coming in to the bridge to map to others. I hope this will be possible in updates to come