How to pre-config USG FLEX H on Nebula before it is online

Options
Zyxel_Stanley
Zyxel_Stanley Posts: 1,436 image  Zyxel Employee
100 Answers 1000 Comments Friend Collector Eighth Anniversary
edited February 11 in Other Topics

Starting from firmware uOS1.35, Zyxel’s USG FLEX H series supports remote pre-configuration directly from Nebula—even before the device is powered on. To use this feature, make sure your device is running the required firmware:

  • Newly purchased units must complete the initial setup wizard to keep the firmware up to date.
  • Existing deployed units must also be upgraded to uOS1.35 and then reset to factory default by holding the reset button for 30 seconds.

This new capability is especially valuable for MSPs and IT admins who manage multi-site deployments or need to streamline installation at remote locations. Here's how it works:

Here’s how you can set it up step by step: 👇

  1. Creates the organization and site
    Log in to Nebula Control Center using your Zyxel account
    1. Click Create Organization
       image.png
    2. Enter names for the organization and site, then click Next image.png
  2. Skip the device and license for now
    1. Click Next to skip adding a device at this stage
      image.png
    2. Click Next to skip the license info as well
      image.png
    3. Click Go to Nebula Dashboard.
       image.png
  3. Pre-configure your firewall
    1. On the Nebula Dashboard, go to Configure> Firewall
      image.png
    2. Select the model you'll be deploying (e.g., USG FLEX 700H), then click OK to proceed.
      image.png
      💡 Note: If the deployment site does not use DHCP, you’ll still need to configure WAN settings directly via the device GUI later.
    3. You can now perform the full configuration—set up policies, interfaces, objects, and more.
      image.png image.png
  4. Add your device to Nebula
    Once your pre-config is done:
    1. Go to Devices > Add Devices
       image.png
    2. Enter your device’s MAC address, Serial Number, and Name. Click Next.
       image.png
    3. If a newer firmware version is available, Nebula will offer to upgrade the device automatically during registration. Select Yes to apply the upgrade, or No to skip. Then click Finish.
       image.png

Connect physical cable to your firewall and make sure Internet connection is available.
And you’ll see your device appear in the Dashboard—fully set up and ready for deployment.

image.png

💡 Note: The firewall will apply the configuration from NCC server. It will takes around 5~15 mins for wait configuration deploy. Do not change any settings by local WebGUI before applying configuration completely.

If configuration deploy successfully, you can check "Configuration Status" shows as UP to date.

image.png

Categories

EnglishTiếng ViệtРусскийไทย中文（台灣）