no acces ugs20

Options
baudetd
baudetd Posts: 40  Freshman Member
First Anniversary 10 Comments

Hello


I have 2 UGS20 routers.


since there is a certificate problem, I go through the internet explorer browser

but I can't access one of them even with internet explorer

message INET_E_DOWNLOAD_FAILURE


I can't log in using SSH either.


I think that the 2 boxes do not have the same firmware


do you have another tool to do this?

Best Answers

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,066  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited December 2022 Answer ✓
    Options
    Hi @baudetd

    It seems you enable the feature on the path Configuration > System > WWW > Service ControlAuthenticate Client Certificates and your PC has not imported a trusted certificate yet, so you cannot login the device.


    Please connect your PC(with Tera Term or PuTTY, the baud rate is 115200) and device with the console serial cable. Then login to the device and enter the below CLIs to disable this feature.
    Router > configure terminal
    Router(config)# no ip http secure-server auth-client

    Here are some users who encountered the same problem(link1, link2). 

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,066  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options
    Hi @baudetd

    Is it possible to check with the serial console if authentication is enabled?
    Yes.

     Is it possible to do this over ssh?
     Yes.





All Replies

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,066  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited December 2022 Answer ✓
    Options
    Hi @baudetd

    It seems you enable the feature on the path Configuration > System > WWW > Service ControlAuthenticate Client Certificates and your PC has not imported a trusted certificate yet, so you cannot login the device.


    Please connect your PC(with Tera Term or PuTTY, the baud rate is 115200) and device with the console serial cable. Then login to the device and enter the below CLIs to disable this feature.
    Router > configure terminal
    Router(config)# no ip http secure-server auth-client

    Here are some users who encountered the same problem(link1, link2). 

  • baudetd
    baudetd Posts: 40  Freshman Member
    First Anniversary 10 Comments
    Options
    hello


    thanks for the reponse 


    it's surprising that it's activated because I'm the only one to connect to it and I was still accessing the interface a few weeks ago


    Is it possible to check with the serial console if authentication is enabled?



     Is it possible to do this over ssh?
  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,066  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options
    Hi @baudetd

    Is it possible to check with the serial console if authentication is enabled?
    Yes.

     Is it possible to do this over ssh?
     Yes.





  • baudetd
    baudetd Posts: 40  Freshman Member
    First Anniversary 10 Comments
    Options
    I connected in serial but I can't log it because it asks me for a user name and password,
    my credentials are not working
    
    
    same in ssh
    
    
    However, here is the message I get when I log in
    
    
    
    
    
    ALERT!!image filesystem usage: 99%12K    
    /rw/lost+found1.0K   
    /rw/etc_writable/budget100K   
    /rw/etc_writable/zyxel/conf101K   
    /rw/etc_writable/zyxel4.0K   
    /rw/etc_writable/hwclock_log833K   
    /rw/etc_writable55M     /rw55M     /rw
    
    
  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,066  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Hi @baudetd

    You could refer to this link to see how to restore your previous configuration if you forget the login password. Thanks.

  • baudetd
    baudetd Posts: 40  Freshman Member
    First Anniversary 10 Comments
    Options
    Hello

    I was finally able to access the interface of the USG 20 router
    I was able to update the firmware
    firmware download from website (released date: 2016-11-22)







    however, I did not find the latest firmware
    because I have another router that already has the latest version
    (released date: 2016-11-30)


    I found this link which allows to download the *.bin file
    but it doesn't work


    thanks

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,066  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Hi @baudetd

    Please refer to this download link then unzip the .zip file to the .bin file and upload the .bin file to your ZyWall USG20 it should be OK, thanks. 

Security Highlight