I locked myself out

Yesterday I wanted to disable the remote access to the WebGUI from the internet. 
However, I disabled Management Access with port 443 and locked myself out.
Therefore, I have no access to my ZyWall 110.

Unfortunately, SSH is not allowed and I know only 1 possible options to regain access:

- reset the ZyWall and restore a backup

Are there other possibilities? Can I enable SSH or Management Access (port 443) over the console port? 

Accepted Solution

  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    25 Answers First Comment Friend Collector
    edited August 2021 Answer ✓
    Hi @HaPeKa,

    If you want to enable SSH please execute this command over the RS-232 console terminal:
    Router(config)# ip ssh server

    If you want to enable HTTP and HTTPS servers please execute these commands over the 
    RS-232 console terminal:
    Router(config)# ip http secure-server
    Router(config)# ip http server

    How did you disable the remote access to the WebGUI from the internet?
    If you disabled port 443 in Policy Control Rule from WAN to ZyWALL, then you can try this command to disable Firewall function:
    Router(config)# no firewall activate


All Replies

  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    25 Answers First Comment Friend Collector
    edited August 2021 Answer ✓
    Hi @HaPeKa,

    If you want to enable SSH please execute this command over the RS-232 console terminal:
    Router(config)# ip ssh server

    If you want to enable HTTP and HTTPS servers please execute these commands over the 
    RS-232 console terminal:
    Router(config)# ip http secure-server
    Router(config)# ip http server

    How did you disable the remote access to the WebGUI from the internet?
    If you disabled port 443 in Policy Control Rule from WAN to ZyWALL, then you can try this command to disable Firewall function:
    Router(config)# no firewall activate


  • HaPeKa
    HaPeKa Posts: 5
    Thank you, I'll reconfigure  http secure-server as you advised!

  • HaPeKa
    HaPeKa Posts: 5
    hmm, my usual login does not work on the console port. 
    and I'm shure about my username / password, I used it regularly.

    I guess, there's no other way than reset the ZyWall 110 
  • HaPeKa
    HaPeKa Posts: 5
    after a restart I could login without any issues.

    with the commands above I get an error:

    Router> configure
    % (after 'configure'): Parse error
    retval = -1
    ERROR: Parse error/command not found!
    Router> ip http secure-server
    % (after 'ip'): Parse error
    retval = -1
    ERROR: Parse error/command not found!
    Router> ip http secure-server
    % (after 'ip'): Parse error
    retval = -1
    ERROR: Parse error/command not found!

    I go and read the manual to find out, how to set the ZyWall in config mode
  • HaPeKa
    HaPeKa Posts: 5
    Okay, problem solved ... first config terminal, then ip http secure-server and I can access the system on the GUI again.

    Thanks for your help!

Security Highlight