USG Flex 200 on Sunrise 2.5Gbit/s Internetconnection

Xydocq

First of all, I know that the USG Flex 200 isn't capable to benefit from 2.5Gbit/s connection on the WAN port.

My problem isn't related to the speed of the connection, it is related to the behaviour of certain devices on my network.

Before using Zyxel devices on my network I was using an ASUS Wifi-Mesh Router. It was plugged in to my ISP's Router. The router was set to act on "Bridge Mode" (Modem Mode). Everything worked fine for me. The connection was stable and all devices behaved like they should. So prior to the upgrade of my internet connection I switched to Zyxel. First I was using an USG Flex 100v2, with a GS1915-24E and 2 NWA130BE. One of the AP's what set to act as local bridge. It's an old building and running wires isn't really an option. I also switched to Zyxel on my business. I used a USG Flex 50 on that site. So after the upgrade of the connection, I thought I would replace the Flex 100 with a Flex 200 and move the Flex 100 to the firm. This all went smooth and was a fun thing to do.

Now to my problem. When I was starting to use Zyxel, TV-Boxes showed some weird behaviour. When switching channels it took them up to 5 seconds to show anything on the screen. Playing a stream caused buffering and the TV-Boxes showed that my network was congested. Every diagnosis showed all is working fine. The results I got from the tests were always, good, fast and all was green.

I went to the forum of my ISP to seek some help. The only solution they came up with: "Get rid of this trash…. blablabla"

So I did try to fix it myself and while most is now working well, I am unhappy with how it had to be accomplished.

The router of my ISP is now set to act in "router mode". The USG Flex 200 is connected as DMZ (static IP, all ports forwarded to it) The router of my ISP also offers WiFi, so it got activated. The TV-Boxes are now connecting to the WLAN provided thru the ISP router. As I said most is working well, TV-Boxes now change channels within a second, no buffering and no complaining about the network. But it bugs me.

I want everything to work behind the USG Flex 200 and be protected!

I did connect a TV-Box to the NWA130BE after changing to router-mode on my ISP router. It was the same as before.

So now I ask myself. What is wrong with my settings on the Zyxel devices? Is there anything I can do to make it work the way I want it to work?

At my Firm I have no issues. Everything works the way it's supposed to be.

So anyone with an idea of what could be going on, please help.

Zyxel_Melen

Hi @Xydocq,

So your current topology is ISP router —(routing)— USG FLEX 200 —- TV box. The issue symptom is that changing TV channels will take up to 5 seconds to display and playing a stream caused buffering and the TV-Boxes showed that my network was congested.

May I know if your FLEX 200 is in Nebula mode or on-premise mode? Did you enable any UTM/security services?

Please share these information first and I will help to check what we can help to improve it.

Zyxel_Melen

Hi @Xydocq,

So your current topology is ISP router —(routing)— USG FLEX 200 —- TV box. The issue symptom is that changing TV channels will take up to 5 seconds to display and playing a stream caused buffering and the TV-Boxes showed that my network was congested.

May I know if your FLEX 200 is in Nebula mode or on-premise mode? Did you enable any UTM/security services?

Please share these information first and I will help to check what we can help to improve it.

Xydocq

hello @Zyxel_Melen

The current setup is ISP router - TV-Box (on WLAN), ISP router - USG Flex 200 (DMZ, static IP on WAN1)

The setup not working well was: ISP router (modem mode) - USG Flex 200 (DHCP, public IP on WAN1) - GS1915-24E - NWA130BE - TV-Box

UTM features where all turned off for testing, it had the same result.

Currently UTM Settings are:

• Content Filter off
• Application Patrol no profiles defined
• IP Exeption none
• DNS Threat Filter off
• URL Threat Filter on
• IP Reputation off
• Anti-Malware Enabled (Express mode)
• Sandboxing off
• IPS Enabled
• External Block List off

Depending on what devices I use internet-speedtests show results between 650 and 950Mbit/s

If I test directly on the ISP router on the 2.5Gbit/s port I get a max speed of 1.7Gbit/s Pings are between 12 and 20ms.

Zyxel_Melen

Hi @Xydocq,

Is your TV-BOX a wireless client?

Xydocq

Yes it is.

In total I have 2 TV-Boxes and 2 SmartTVs all of them are affected and show the same behaviour.

Zyxel_Melen

Hi @Xydocq,

Thanks for your confirmation.

May I know what mode are you using? Nebula mode or standalone? We would like to check some information, so is it possible that we can have a remote access to your devices?

Xydocq

I use NCC

The Information were already given to the support-team.

@Zyxel_Judy is working on another issue on the Main site, The USG Flex 200 is on the Branch site.

Xydocq

hello @Zyxel_Melen

I guess you can close this case.

I know how things were when I had the Asus Mesh Router installed. So I moved one back to connect it again and see how things would be.

I started with with connecting it to the ISP router. Things were like they used to be. No buffering, channels came up quik, very smooth.

I then connected it to the GS1915-24E. The result was disapointing. Buffering again on the TV and channels took 5 seconds to come up. I also tried to connect it to the USG directly. Same outcome.

Then I tought, maybe there is an UTM service causing this. So I turned off one after the other to see what will change. I am pretty sure I did that in the past, but then I guess I'm getting old and tend to forget some things. Maybe I was just focusing on the download speed and never checked the TV's while doing it the first time.

Finaly when I turned URL Threat Filter off. All delay and hassle disapeared. Channels changed quik again and no buffering. It just works how it is supposed to work.

I then tried the connection on the NWA130BE. It didn't change a thing. So I can say, it's not hardware related.

Now I have another question, is it possible to exclude a certain VLAN from running thru URL Threat Filter or does it need to be turned off? I see there is an Allow List, but there's no way for me to know what URL the TV-Boxes connect to. Or is there a way? I don't know.

So thank you for your kind support and the time invested.

Maybe you have a little hint on the new problem?

Zyxel_Melen

Hi @Xydocq,

Thanks for your feedback!

About the new question, I recommend you use the IP Exception feature to exclude your TV BOX.

Xydocq

thank you, I'll try that later today

I did try the IP Exception, runs perfectly now. thanks again @Zyxel_Melen