XGS1210-12 not able to connect on web gui

Melvira

Hello everyone,

I just bought the XGS1210-12 switch except that I have no access to the web interface.
I've reset it (several times... manually or via the ZON app)

I've also set a static ip but nothing works.

I noticed that when I installed it on my lab, it blocked ALL access to the web interfaces.

The ping goes through fine to reach the switch (currently connected to my pc directly) but it's really the impossibility of connecting to the web interface that means I can't even manage it or even access my lab via the web interface, which really causes me a lot of problems.

Did anyone have an idea ?

Thanks ^^

Zyxel_Melen

Hi @Melvira,

Please follow the quick start guide to access this device.

XGS1210-12_QSG_20200310_v03.6

If you have followed it but can't access it, please help check the device label, front panel, or sticker to see if it is XGS1210-12. This is because a similar model, XGS1010-12, is an unmanaged switch with similar hardware specs.

XGS1010-12 - 12-Port Unmanaged Multi-Gigabit Switch with 2-Port 2.5G and 2-Port 10G SFP+ - Product Photos | Zyxel Networks

Melvira

Hello,

I indeed followed the guide but it doesn't work.
It's a Zyxel XGS1210-12 based on the label on the front.

What's worrying is that the switch blocks all web interfaces from a lab.
Proxmox refuses to connect to its web gui, for example, if the server is connected to the switch.

Is this a firmware problem?

Thanks in advance

Melvira

Back here

FYI the tests that I made :

Port scan results:
<nmap -p- 192.168.1.3
Starting Nmap 7.95 ( https://nmap.org ) at 2025-02-12 21:32 Paris, Madrid
Nmap scan report for 192.168.1.3
Host is up (0.0016s latency).
Not shown: 65533 closed tcp ports (reset)
PORT STATE SERVICE
80/tcp open http
443/tcp open https
MAC Address: F4:4D:5C:81:17:48 (Zyxel Communications)

Nmap done: 1 IP address (1 host up) scanned in 42.88 seconds>
The switch responds on ports 80 (HTTP) and 443 (HTTPS), but does not serve any page

HTTP & HTTPS request via curl:
<curl -v http://192.168.1.3

• Trying 192.168.1.3:80...
• Connected to 192.168.1.3 (192.168.1.3) port 80

GET / HTTP/1.1
Host: 192.168.1.3
User-Agent: curl/8.9.1
Accept:

/

• Request completely sent off>

<curl -v https://192.168.1.3

• Trying 192.168.1.3:443...
• Connected to 192.168.1.3 (192.168.1.3) port 443
• schannel: disabled automatic use of client certificate
• schannel: using IP address, SNI is not supported by OS.
• ALPN: curl offers http/1.1
• schannel: next InitializeSecurityContext failed: SEC_E_ILLEGAL_MESSAGE (0x80090326) - This error usually occurs when a fatal SSL/TLS alert is received (e.g. handshake failed). More detail may be available in the Windows System event log.
• closing connection #0
  curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_ILLEGAL_MESSAGE (0x80090326) - This error usually occurs when a fatal SSL/TLS alert is received (e.g. handshake failed). More detail may be available in the Windows System event log.>

Trying with brave, firefox and IE, via HTTP and HTTPS : KO
Trying in priv nav : KO
Trying to reset the switch manualy (~30sec on reset button on front pannel) then upgrade the firmware (both online/local) : can't it says there is an error "fail to update firmware {error}"

Could you provide a method to recover the web gui or a way to manually reflash the firmware ?

Thanks in advance ^^

Zyxel_Melen

Hi @Melvira,

Could you help to record a video when you access the switch so we can identify this issue and provide you with the solution? Also, could you share the version of the browser you're using?

Melvira

Hello Melen,

I have already provided a detailed diagnosis with all the tests performed (Nmap, curl, attempts via different browsers and in private browsing, hardware reset, firmware update failure, etc.). The issue is not with the browser or the way I connect to the switch (locally or remotely).

Running a curl command returns no results when it should display the HTML of the web GUI, indicating that the switch is faulty.

Could you clarify what exactly you need a video of? Do you want me to record myself connecting the switch directly to my local PC via Ethernet, ensuring it's on the same network, and attempting to access the web GUI—only to demonstrate that it is completely unresponsive? Because the curl command in Windows CMD already confirms this issue.

Do you want also a video that proves that I can't downgrade/upgrade the firmware since there is an error in ZON utility?

I can't help but feel like my question is being sidestepped, despite providing clear diagnostics that demonstrate a technical understanding of the issue. I would really appreciate a direct response regarding whether a forced firmware reflash is possible or if this is indeed a hardware defect requiring a replacement.

Zyxel_Melen

Hi @Melvira,

I'm not sidestepping your question. I asked for the video because we don't know the status of when you access the switch. We used to collect a video to investigate the GUI issue. But please forget about it. I will send you a private message to compare your curl HTTP test with mine.

Zyxel_Melen

Hi @Melvira,

After comparing the difference between your curl result and mine, our engineer wants to clarify:

1. Could you help to check the ARP table when you ping or access 192.168.1.3? What is the MAC address of this IP?
2. May I know the serial number of your XGS1210-12? We want to clarify it is brand new switch or a second hand.

Thanks!