GS1900 V2.90(*.0) Firmware DNS not registering IP address issue

ASGR

Hello Community / Tech Support…

I have some GS1900-8 and a GS1900-10HP.

I recently installed the firmware update V2.90(*.0) for both switches but the SNTP server fails to update the time stating that I'm having DNS issues. On checking SYSTEM→IP→DNS 1 is set to 0.0.0.0!

I reverted to the previous firmware V2.80(*.1) all addresses are registered as expected. It may seem insignificant but all the logs will have the wrong time.

I'll revert back to V2.80(*.1) for now until advised otherwise.

Regards,

A.

Zyxel_Judy

Hi @ASGR ,

Thank you for your feedback. We have confirmed this issue and developed a solution. Please check your Community inbox for the details.

Zyxel_Judy

Hi users,

For your convenience, we've provided a link below to download the GS1900 custom firmware that fixes the NTP time update issue.

https://bit.ly/4hIYtKj

This fix will be included in the next official firmware release. Please follow Switch News & Releases to stay informed about bug fixes, new features, and enhancements.

News and Release - Zyxel Community

Zyxel_Judy

Hi @ASGR ,

Thank you for your feedback. We have confirmed this issue and developed a solution. Please check your Community inbox for the details.

TiggerLAS

I can confirm this behavior on both the GS1900-8HP (Serial number starting S1), and the GS1900-16.

Rolled back to previous firmware for the time being.

MSprecher

Could you please send me the solution for GS1900-8HP and GS1900-8 as well?

coderjoe

I am seeing this on all of my GS1900 series switches with serial numbers starting with S2.
Could I also get the fix? Most important for my deployments are the GS1900-8, GS-1900-8HP, and GS1900-24E.

Alternatively I can wait for an official firmware update if I can get an ETA on when this will be fixed.
We are very excited about the ECDSA cert upload support.

Zyxel_Judy

Hi @MSprecher , @coderjoe ,

The date code firmware have been sent to your Community inbox. Please check and download them.

Zyxel_Judy

Hi @TiggerLAS ,

Please let us know if you need firmware version 2.90P0, which includes the solution for the NTP issue.

MSprecher

Worked perfectly. NTP-problem solved on GS1900-8 and on GS1900-8HP.

Thank you very much!

Matthias

aZuL2001

Where can i find that firmware?
Have the same issue :(

aZuL2001

https://community.zyxel.com/en/discussion/comment/72743#Comment_72743

Same issue on a S162L4400…. serial number GS1900-8HP, rev B1

coderjoe

This date code firmware introduces a reduction in functionality.

The switches throw the following error when uploading my existing certs.

"Import failed. The certification supports RSA up to 2048 bits or ECDSA up to 256 bits."

I've been using 4096 bit certificates on these switches for over a year no without issue until this firmware.

In addition, ECDSA 256bit certs are not high enough as the certs being issued to me if I request ECDSA certs are ECDSA 384 bit certs, I do not have the option to be issued 256bit certs.

I have had to downgrade to the previous version (2.80) to re-enable RSA 4096 bit certificates. Please consider re-enabling RSA-4096 and allowing ECDSA 384 bit certs as your ECDASA max.

Screenshot with a test 4096 cert on the previous 2.80 firmware. Please note that though I am using LetsEncrypt to generate this test certificate, the corporate CAs that I am working with will not issue me 2048 certs as they consider them insecure now.

Screenshot of switch version using 4096 bit certs: