USG FLEX H Series - Configuration File

Zyxel_Richard

USG FLEX H Series - Configuration File

Overview

Managing configuration files is crucial for the effective operation and maintenance of the USG FLEX H Series firewalls. This guide provides a detailed explanation of how the firewall handles configuration files, error management, and new enhancements introduced in version 1.20.

Configuration File Management

Sequence of Applying Configuration Files

When the firewall powers on, it follows a specific sequence to apply configuration files:

• Startup Config: This is the default configuration file used by the firewall. It contains the last applied settings.
• Last Good Config: If the startup config fails due to errors or unsupported configurations, the firewall reverts to this file.
• System Default Config: If both the startup and last good configs fail, the firewall will revert to its default settings (e.g., LAN IP is 192.168.168.1).

Error Handling

When applying a configuration file, the firewall generates error messages if it encounters unsupported commands or incorrect configurations.

• Apply Config Fails: This message appears if there are issues with the configuration file.
• Event Logs: Detailed error messages, including line numbers, are logged for troubleshooting.

Stage 1 and Stage 2 Errors

• Stage 1 Error: Occurs due to wrong CLI formats, such as invalid syntax or typos.
• Example: GE1 enable true (missing "d" in "enabled").
• Stage 2 Error: Occurs due to missing required settings or non-existent objects.
• Example: Referencing an object that doesn't exist in the configuration file.

New Features and Enhancements in Version 1.20

Test Configuration Option

• Administrators can use the test option to validate a new configuration file before applying it. This helps ensure the configuration is error-free and ready for deployment.

Debug Log File

• If errors occur during the application of a configuration file, a debug log file is created. This file can be accessed via FTP and downloaded for troubleshooting.

File Header in Configuration Files

• Version 1.20 introduces a file header in configuration files, providing details such as file type, model name, date, and firmware version. This helps ensure compatibility when applying configurations.

USB Configuration Management

• Administrators can copy configuration files to a USB storage device using the CLI command. This facilitates easy backup and restoration.

Practical Steps

Testing and Applying Configurations

• Go to the web GUI or CLI.
• Use the test option to validate the configuration file.
• Review any errors in the event logs.

Accessing Debug Logs

• Connect to FTP
• Use the command: ftp <firewall_ip>
• Navigate to the /tmp directory.
• Download the apply-config-error file for detailed error analysis.

Managing Configuration Files via USB

• Connect to CLI
• Use the command: CMD config apply startup to USB

Conclusion

The enhancements in version 1.20 significantly improve the configuration management process for the USG FLEX H Series firewalls. By understanding how to handle configuration files, manage errors, and utilize new features, administrators can ensure their firewalls operate efficiently and securely.