NebulaFlex Switch XGS2220 Series - V5.00 Patch 0 Firmware Release

Zyxel_Melen · July 26

Zyxel Switch XGS2220 Series Release Note

July 2025

ZyNOS Firmware Version on all models

(Click Hyperlink to download the firmware directly)

Zyxel XGS2220-30 - V5.00(ABXN.0)C0

Zyxel XGS2220-30HP - V5.00(ABXO.0)C0

Zyxel XGS2220-30F - V5.00(ABYE.0)C0

Zyxel XGS2220-54 - V5.00(ABXP.0)C0

Zyxel XGS2220-54HP - V5.00(ABXQ.0)C0

Zyxel XGS2220-54FP - V5.00(ACCE.0)C0

New Feature and Enhancements

1. [Standalone] Firmware upgrade includes checksum verification from v5.00. Downgrade to v4.80 will fail.

2. [Standalone, Nebula] Enlarged the L3 forwarding table to support up to 2K IPv4 and 2K IPv6 entries.

3. [Standalone] Support Policy based route for IPv4.

4. [Standalone, Nebula] Remote management offers support for IPv6.

5. [Standalone, Nebula] Support public key authentication for SSH.

6. [Standalone, Nebula] The admin account can be changed, providing flexibility and security to the network management system.

7. [Standalone, Nebula] The login page will automatically redirect from HTTP to HTTPS to enhance network security.

8. [Standalone, Nebula] Improve 802.1x and MAC authentication support to identify the Termination-action and port number attribute.

9. [Standalone, Nebula] Prevent page refresh when clicking the cancel button in pop- up messages on the dashboard.

10. [Standalone] Enhanced search bar with improved keyword searching capabilities.

11. [Standalone, Nebula] Automatic detection of media type for Zyxel Transceivers and DAC cables

12. [Standalone, Nebula] Allow SSH and CLI commands to be combined and display the command result directly.

13. [Standalone, Nebula] Improve Dashboard's port link speed color display to enhance user experience and intuitiveness.

14. [Standalone, Nebula] Clicking on the port icon in the dashboard now redirects to the Port Settings page, providing quicker access to configuration options and improving usability.

15. [Standalone, Nebula] Enhance security by forcing users to change the password after first login.

16. [Standalone, Nebula] Enhance security by supporting the ECDSA algorithm in SSH

17. [Standalone] Optimize Networked AV mode for Dante and AES67 scenarios to improve audio/video performance and quality.

18. [Standalone] The IGMP General Querier Timer parameters are now adjustable.

19. [Standalone, Nebula] Disable Telnet feature by default setting.

20. [Nebula] Unlock local web GUI for cloud mode.

21. [Standalone, Nebula] Web Support Re-Generate SSH Public Key 2048bit for RSA

22. [Standalone, Nebula] Expand NTP servers from 1 to 3.

23. [Nebula] Enhance the cloud auto recovery mechanism to prevent the device from being locked when the connection is unstable.

24. [Standalone] Support password complexity for user/SNMP account and enable mod, with default setting is disable

25. [Standalone, Nebula] Enable password encryption by default to enhance security.

26. [Standalone, Nebula] Support user IP lockout functionality after a certain number of failed login attempts.

27. [Standalone] Add new system log for changes in service access control configuration.

28. [Standalone] Support event log and SNMP trap functionality to generate alerts when system logs reached 90% of thresholds.

29. [Standalone] Limit login accounts with privileges 0 to 2 only to display basic system information on web GUI.

30. [Standalone] Support interactive password command for masking password in CLI when you creating account.

31. [Standalone, Nebula] The SSH key (Fingerprint values) needs to be regenerable, and it should be different each time.

32. [Nebula] Support port Profile.

33. [Nebula] When configure existence management IP address, a warning message will alert for preventing IP conflict.

34. [Nebula] In Cloud mode, SNMP supports the get operation for Zyxel private MIB information, "set" and "trap" are not supported.

Bug Fix

C=Cloud mode, S=Standalone mode

Bug fix	C	S
1. [Remote SSH] After NCC remote ssh to device and wait 15 min, device will happen crash.	V	-
2. The switch’s actual configuration is inconsistent with NCC when configure the IP interface with DHCP Relay enable.	V	-
3. [eITS# 240800369] Switch crash when displaying the MAC address.	V	V
4. [eITS #240801076] Using SNMPwalk to query the Q- Bridge MIB will return incorrect values when voice VLAN is enabled on the device.	V	V
5. [eITS# 241000636]Fixed an issue where ICMP packets were dropped when over 100 packets within one second.	V	V
6. [eITS #241200595] Fixed high CPU usage triggered by client switching between trunk interfaces.	V	V
7. [eITS# 250302215] Fixed an issue where IPv6 table collisions occurred easily.	-	V
8. [eITS #250601084] Fixed hang when use CLI show tech-support.	V	V
9. [eITS #250302409] Fixed the device sometimes fail to connect with Nebula server.	V	-
10. [eITS# 250400057] Fixed an issue in stack mode where PoE device plug/unplug logs incorrectly showed the port name of a different slot.	V	V
11. [eITS# 250301208] Fixed an issue in stack mode where BT PoE devices connected to the backup or linecard switch were incorrectly classified, resulting in insufficient power delivery.	V	V
12. [eITS# 250400091] Fixed that truncated DNS packets cannot be process to cause DNS parsing failed.	V	-
13. [eITS #240500205, 250400378] Switch hang when click Bug fix Nebula Standalone PD "Reset" via Neighbor page for Ubiquiti Access point.	-	V
14. [eITS# 250500422]Fixed an issue where the switch detected an IPv6 address as moving between ports, causing the switch to hang.	V	V
15. [eITS# 250500580] Fixed an issue where enabling IPv6 MLD caused the switch to drop packets with TCP source numbers in the ranges 33280–34047 and 36608–36863	-	V

Please refer to the Download Link for more details.