-
Trouble with Virtual Server NAT problems
USG FLEX 200H V1.20(ABWV.0)ITS-m4447 USG60W WAN link to internet LAN2 192.168.254.9 255.255.255.248 NAT rules for port 80 and 443 to 192.168.254.10 Flex200H ge3 WAN3 DHCP 192.168.254.10 / 255.255.255.248 ge4 VLAN47 192.168.255.39 / 255.255.255.240 two Virtual Server NAT at rule number 22 and 23 test server on VLAN47…
-
Captured Packets showing part or tunnel traffic and double packet
USG FLEX200HV1.21(ABWV.0) Ge3 WAN3 192.168.254.10/255.255.255.248 Captured Packets on Flex H shows double packets on some packets on the receive and a ping down a tunnel is shown in the capturer that shouldn't be seem and USG60W 192.168.254.9 did not send it out of the tunnel just that the Flex H Packet Captured shows it…
-
USG FLEX 500H VLAN CONFIGURACION
Hola, requiero configurar 10 VLANs y que tengan acceso a Internet y que se pueda reservar la MAC y crear un pool de DHCP.
-
USG Flex 200H - Traffic from LAN1 to LAN2 issue
Hi. I have a Zywall USG Flex 200H. Scenario I try to achieve is to communicate from one internal LAN to another Internal LAN with Inter-zone traffic. I have created my own LAN's and added members to these. Called them LAN1 and LAN2. I want to communicate from LAN1 to LAN2 and vice versa. I have two computers with no FW…
-
Certificate site to site not working?
USG FLEX 200H V1.21(ABWV.0) So I have non H Flex200 with USG60W working with Certificate site to site but can't seem to get USG60W with Flex200H working: USG60W is set with Phase 1 Certificate zyxel-router4.ddns.net and have imported zyxel-router7.ddns.net to trusted Certificate Flex200H is set with Phase 1 Certificate…
-
VTI bootup causes VLAN to fail
USG FLEX200H V1.21(ABWV.0) P4 VLAN47192.168.255.39 255.255.255.240 VTI Route-based IP 192.168.254.9 Pre-Shared Key 12345678 Phase 1 AES128 SH256 DH2 Phase 2 AES128 SH1 DH2 VTI IP 192.168.255.42 255.255.255.240 Nailed-up On bootup clients onVLAN47 have no internet ping to 1.1.1.1 fails workaround go to network > interface >…
-
Assistance with Guest SSID and VLAN Configuration
I am using a Zyxel USG110 and have two Zyxel Access Points (APs) connected directly to the same LAN1 network (ports 4 and 5). The current configuration includes a Wi-Fi network with an SSID that uses the LAN1 IP subnet. I would like to create an additional guest SSID and assign VLAN10 to it. The intended network setup is…
-
Site to site Route-based and Policy-based to same IP link issue
USG FLEX200HV1.21(ABWV.0) setup is USG60W LAN2 192.168.254.9 255.255.255.248 Gwtoflex200H_local2 Site-to-site with Dynamic Peer Pre-Shared Key 123456789 Phase 1 AES128 SH1 DH2 local policy192.168.252.0/23 remote policy192.168.255.64/28 Phase 2 AES128 SH1 DH2 VTI_test IP 192.168.254.10 Pre-Shared Key 12345678 Phase 1 AES128…
-
Speeded up SA Life Time site to site local test tunnel drops does not reconnect
USG FLEX 200H V1.10(ABWV.1) FLEX200H custom IKEv2 Interface ge3 WAN3 Peer Gateway Address 192.168.254.9 Pre-Shared Key Phase 1 Settings SA Life Time 300 AES128 SH1 DH2 Phase 2 Settings Initiation Nailed-up local 192.168.255.32/28 remote 192.168.252.0/23 SA Life Time 180 AES128 SH1 DH2 To speed up the problem I changed…
-
Domain Zone Forwarders not working
Has anyone use Domain Zone Forwarders on the Flex H range to direct specific requests to different DNS servers? I have had to open a ticket as it doesnt appear to be working on my FLEX 700H when directing DNS requests for the nhs.uk domain to a DNS server accessible via an IPSEC VPN. My static routes are in and working as…
-
USG FLEX 500H crashes every 24-48 hours
I have purhased a ZyXEL USG FLEX 500H for a client of mine to replace a set of routers/firewalls for 2 ISPs with static IP address blocks each. Everything worked fine for about 2 months. We applied some changes to the firewall rules to cleanup the network setup causing the firewall to crash randomly every 24 to 48 hour…
-
200H, very slow IPSec VPN remote access
USG FLEX 200H, firmware V1.20(ABWV.0) In theory, IKEv2 IPSec VPN should be faster, but on 200H it's only a third of throughput of SSL VPN. That's with AES256 and SHA256 for both phases. If I increase SHA to 384 or even 512 and modp to 3072 it comes to a halt. Everything will time out. It seems like hardware-accelerated…
-
Log shows incorrect interface for site to site traffic wrong policy allows the traffic
USG FLEX 200H V1.10(ABWV.1) In my setup I have USG60W VLAN4093 192.168.252.0/23 with tunnel FLEX200H Ge3 192.168.254.10/29 as WAN to LAN2 192.168.254.9/29 on USG60W VLAN47 on FLEX200H 192.168.255.32/28 site to site in zone IPSec_VPN when I ping 192.168.255.40 from 192.168.253.1 log show 192.168.253.1 coming from Ge3 when…
-
DDNS in V1.20 for 2024-04-18 14:10:29 problems
I'm sure DDNS was working fine in V1.20 2024-04-15 So I have three WAN's VLAN443, WAN2 and WAN3 if all three are on line WAN2 tries to DDNS sends a SYN gets a SYN ACK then it RST it but if I remove WAN3 then DDNS for WAN2 works It will work on a reboot then if you disable/enable the DDNS for WAN2 shows fail until you uplug…
-
Remove an Static IP entry on a LAN interface gives error
If I try to remove an Static IP entry on a LAN interface I get: CLI Number: 17 Error Number: -4005 Error Message: 'DHCP pool does not exist.' Everything I try to do to resolve this, does not solve the problem. There are entries in de the tables that work! Can you help?
-
Quick fix for remote access VPN
At some point it be like current models where you can have many remote access VPN but for now just one. So this setting in FLEX200H is like this in FLEX200 Problem is that setting in FLEX200H is used for the config for where the client connects too which can be wrong and also how the Certificate is made So to fix this…
-
Unable to Establish VPN Connection
I was recently setting up a VPN, and it turns out that when I used the wizard tool, it didn't work when executing the .bat file; it basically didn't establish a connection. I believe the problem is that the USG Flex 100 is not directly connected to the internet but to a router. Can anyone advise me on which ports or…
-
VPN by Domain Name not working for remote access VPN
USG FLEX 200H V1.20(ABWV.0)ITS-m4447 Domain Name / IP for Domain Name like dnsip11.ddns.net that points to 192.168.255.235 not working when PC on the same LAN but if I use IP or interface it works for downloading the configuration get “policy match error” when using dnsip11.ddns.net when I tested this on V1.10 it I'm sure…
-
How can I get RMA Shipping Labels to return an USG Flex Series?
Per support case 427327, Zyxel has requested the RMA of a malfunctioning USG Flex Series. How do I send this to Zyxel?
-
How to separate networks on USG FLEX 500H to isolate the server from the local network
Hi everyone, I recently purchased a USG FLEX 500H and I'm trying to configure my network to separate the Nextcloud server from the local network where all the PCs are connected. I want to enhance security by isolating the server from the rest of the network. Currently, the Nextcloud server is installed via snap. I have a…