SFP P1 port does not work Link Down

AndrewT

Hello, i have exactly the same issue as described here

https://community.zyxel.com/en/discussion/11102/sfp-p1-port-does-not-work-lind-down

But device is Zyxel VPN50 (V5.37(ABHL.2) firmware) with ZyXEL SFP-1000T 1000Mbit / s SFP network transceiver module. Is it possible to get it work?

Zyxel_Judy

Hi @AndrewT ,

Thank you for your remote information.

After analyzing the DHCP packets, we found that the VPN50's SFP port is sending DHCP requests, but no DHCP ACK packets are being received. Please check the network environment, such as replacing the current SFP module with another Zyxel SFP-1000T, verifying the DHCP server, or setting the interface corresponding to the SFP port to a static IP.

Additionally, since the VPN50 has reached the end of firmware support, if the issue persists, you may want to consider upgrading to our ATP, USG FLEX, or USG FLEX H series, which also feature SFP ports.

Next-Gen Firewall | Zyxel Networks

Zyxel_Judy

Hi @AndrewT ,

It could be related to device boot module. Can you take a screenshot of boot module version and sent me via private message.

How to check boot module:
Router# psm
Router(psm)# atsh

AndrewT

https://community.zyxel.com/en/discussion/comment/69748#Comment_69748

Hello, here is psm atsh (also sent via PM)

Username: admin
Password:
Router# psm
Router(psm)# atsh
Kernel Version : V3.10.87 | 2024-01-20 04:04:11
ZLD Version : V5.37(ABHL.2) | 2024-01-20 04:37:52
BootModule Version : V1.13 | Feb 16 2017 10:06:38
Vendor Name : Zyxel Communications Corp.
Product Model : VPN50
System Type : 10
First MAC Address : xxxxxxxxxxxx
Last MAC Address : xxxxxxxxxxxx
MAC Quantity : 6
Default Country Code : E6
Boot Module Debug Flag : 00
Serial Number : S182L24103031
Baud Rate : 115200 bps
BM Checksum : AEB71266
Core Checksum : 8298DF31
Conf Checksum : C71E9516
SNMP MIB level & OID : 060102030405060708091011121314151617181920
Main Feature Bit : 00
Other Feature Bits :
3A E1 00 00 00 00 00 00-00 00 00 00 00 00 00 00
06 00 00 00 00 00 00 00-00 00 00 00 00 00
Router(psm)#
Router#

Zyxel_Judy

Hi @AndrewT ,

We've tested the following configuration on our end:

• VPN50 (boot module 1.13)
• Connected to ZyXEL SFP-1000T
• DHCP provided by other firewalls
• Port 1 successfully obtains an IP address

With this setup, we were unable to reproduce the issue you reported.

To help us investigate further:

Please check your private messages for instructions and share remote access information, so we can examine your specific configuration.

Please note: The VPN50 has reached its End of Life (EOL) for firmware development. While we can't provide new firmware updates, we'll explore potential configuration recommendations or workaround solutions for your situation.

Zyxel_Judy

Hi @AndrewT ,

Thank you for your remote information.

After analyzing the DHCP packets, we found that the VPN50's SFP port is sending DHCP requests, but no DHCP ACK packets are being received. Please check the network environment, such as replacing the current SFP module with another Zyxel SFP-1000T, verifying the DHCP server, or setting the interface corresponding to the SFP port to a static IP.

Additionally, since the VPN50 has reached the end of firmware support, if the issue persists, you may want to consider upgrading to our ATP, USG FLEX, or USG FLEX H series, which also feature SFP ports.

Next-Gen Firewall | Zyxel Networks