-
Ping over VTI Destination unreachable over time
USGFLEX200HV1.21(ABWV.0) Setup is USG60W LAN2 192.168.254.9 255.255.255.248 VLAN 55 192.168.55.1 255.255.255.0 VTI_test IP 192.168.254.10 Pre-Shared Key 12345678 Phase 1 AES128 SH256 DH2 SA Life Time 300 Phase 2 AES128 SH1 DH2 SA Life Time 180 VTI IP 192.168.255.43 255.255.255.240 FLEX200H Ge3 WAN3 192.168.254.10…
-
How does the H Series handle ADP?
I have an USG FLEX 100 running at a customer location that logs about 35 ADP alerts per day. I installed a 200H at a different customer location and enabled DoS Prevention w/ the default DOS_PREVENTION_PROFILE. The 200H generates no alerts and if I look at Log/Events, the DoS Prevention log is empty. Both of these…
-
SSL VPN via SecuExtender v7.7
Hello, It seems with this box (Flex 500H) they want us to use their Nebula cloud. I would rather keep this a standalone box and I can't even get out of the gate! The firewall seems configured (except the security policy where I locked myself out of the box three times now trying to set a security policy) and the client…
-
Interface disable longer then lease will then not when re-enable work
USG FLEX 200H V1.21(ABWV.0) P3 config as a WAN set to DHCP connected to DHCP server with a lease for 3 minutes. When you disable P3 WAN for 5 minutes then re-enable the WAN does not work. Workaround unplug the Ethernet and back in or change port Negotiate to trigger and DHCP restart.
-
are there IKEv2 problems with the USG Flex 100H router?
I have a system of 2 USG Flex 100H, 1 VPN100, 1 x USG40 and 1 USG Flex 200. To get IPSec VPN to all routers I had to reconfigure to IKEv1. I need SSL VPN to the Flex100H's and it works to 1, and not to the other. What coult get wrong, In the log I see that the public IP address is blocked through the default rule despite…
-
When will IPv6 be supported?
IPv6 should be standard for a flagship appliance like the USG Flex H Series. And I mean not just 6-to-4 translation but full support. When can we expect this feature to be added to the devices?
-
VPN IP from internal LAN range
I need to setup remote access IPSEC for some users, but I need them to get an IP address on the internal LAN range so it routes traffic correctly down a VPN connection. Is this possible?
-
Static IP adrress reservation on USGFLEX 200H
Hi there, on the new 200H, i cannot find any option to make a static IP reservation same as on the former models/software. In firmeware 5.x you could select the network interface, give it an DHCP address range and confige static IUP adresses, which could be out of the DHCP range. Than activate the setting "Enable IP/MAC…
-
Out of memory Zyxel Flex 700H
Good morning, I wanted to ask why lately the Zyxel Flex 700H device runs out of memory in a very short time, the problem is that when it reaches 98% or 99% the device freezes and you have to restart it manually, it is totally inefficient to restart the device daily. I hope for your prompt help. Greetings.
-
SSL Inspection not running well
USG FLEX 200H V1.21(ABWV.0) Only some sites run well many others load slowly or not at all
-
USG FLEX 100H crashing/freezing problem
I have been using USG FLEX 100 H. It has been crashing/freezing every 3-4 days. I cannot reach/ping the firewall. DHCP stops running and wont assign any ip s. Only restarts solves the problem. I have the latest firmware. Can you please help me to solve this huge problem. Thanks
-
ssh access to usgflex700H
So far we have always accessed the USG/ATP series UTM using the php (8.2) function ssh2_connect($firewallIP, $port, $callbacks); By doing the same with USGFLEX700H we can't connect and get this error: "ssh2_connect(): Error starting up SSH connection(-5): Unable to exchange encryption keys"
-
Trouble with Virtual Server NAT problems
USG FLEX 200H V1.20(ABWV.0)ITS-m4447 USG60W WAN link to internet LAN2 192.168.254.9 255.255.255.248 NAT rules for port 80 and 443 to 192.168.254.10 Flex200H ge3 WAN3 DHCP 192.168.254.10 / 255.255.255.248 ge4 VLAN47 192.168.255.39 / 255.255.255.240 two Virtual Server NAT at rule number 22 and 23 test server on VLAN47…
-
Captured Packets showing part or tunnel traffic and double packet
USG FLEX200HV1.21(ABWV.0) Ge3 WAN3 192.168.254.10/255.255.255.248 Captured Packets on Flex H shows double packets on some packets on the receive and a ping down a tunnel is shown in the capturer that shouldn't be seem and USG60W 192.168.254.9 did not send it out of the tunnel just that the Flex H Packet Captured shows it…
-
USG FLEX 500H VLAN CONFIGURACION
Hola, requiero configurar 10 VLANs y que tengan acceso a Internet y que se pueda reservar la MAC y crear un pool de DHCP.
-
USG Flex 200H - Traffic from LAN1 to LAN2 issue
Hi. I have a Zywall USG Flex 200H. Scenario I try to achieve is to communicate from one internal LAN to another Internal LAN with Inter-zone traffic. I have created my own LAN's and added members to these. Called them LAN1 and LAN2. I want to communicate from LAN1 to LAN2 and vice versa. I have two computers with no FW…
-
Certificate site to site not working?
USG FLEX 200H V1.21(ABWV.0) So I have non H Flex200 with USG60W working with Certificate site to site but can't seem to get USG60W with Flex200H working: USG60W is set with Phase 1 Certificate zyxel-router4.ddns.net and have imported zyxel-router7.ddns.net to trusted Certificate Flex200H is set with Phase 1 Certificate…
-
VTI bootup causes VLAN to fail
USG FLEX200H V1.21(ABWV.0) P4 VLAN47192.168.255.39 255.255.255.240 VTI Route-based IP 192.168.254.9 Pre-Shared Key 12345678 Phase 1 AES128 SH256 DH2 Phase 2 AES128 SH1 DH2 VTI IP 192.168.255.42 255.255.255.240 Nailed-up On bootup clients onVLAN47 have no internet ping to 1.1.1.1 fails workaround go to network > interface >…
-
Assistance with Guest SSID and VLAN Configuration
I am using a Zyxel USG110 and have two Zyxel Access Points (APs) connected directly to the same LAN1 network (ports 4 and 5). The current configuration includes a Wi-Fi network with an SSID that uses the LAN1 IP subnet. I would like to create an additional guest SSID and assign VLAN10 to it. The intended network setup is…
-
Site to site Route-based and Policy-based to same IP link issue
USG FLEX200HV1.21(ABWV.0) setup is USG60W LAN2 192.168.254.9 255.255.255.248 Gwtoflex200H_local2 Site-to-site with Dynamic Peer Pre-Shared Key 123456789 Phase 1 AES128 SH1 DH2 local policy192.168.252.0/23 remote policy192.168.255.64/28 Phase 2 AES128 SH1 DH2 VTI_test IP 192.168.254.10 Pre-Shared Key 12345678 Phase 1 AES128…