ZyWALL USG20W-VPN - Firmware V5.41(ABAR.0)

AirV68

Hello,

After upgrading to firmware V5.41(ABAR.0), VLAN-connected devices gradually lost connectivity. The main LAN remained functional.

Restoring a backup configuration made before the firmware upgrade immediately restored all VLAN and DHCP functions.

Firmware V5.41(ABAR.0) appears to break DHCP/VLAN bindings or interface-zone associations during upgrade, causing VLAN clients to lose connectivity progressively as DHCP leases expire.

Can you please confirm and help?

Thanks,

AirV68

PeterUK

Well I don't use DHCP much in my network but when you upgrade firmware I believe all DHCP clients when you have "Enable IP/MAC Binding and DHCP Enforcement" the USG knows nothing on reboot and so clients must DHCP before being allowed which if clients are connected to a switch they stay on the lease they were given but not allowed by USG until they DHCP.

You can solve this by rebooting the switch or set a low lease time like 3 minutes.

On V4.73 there was "Enable IP/MAC Binding" which meant the USG would allow clients that it did not know to connect without needing to DHCP but in V5.?? (not sure when the change happened) its "Enable IP/MAC Binding and DHCP Enforcement" as said above.

PeterUK

Also you want to disable IP Auto configuration on windows

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

32bit DWORD

IPAutoconfigurationEnabled = 0