upload last good config

damianodec

hi,

I have reset my usg40 and nou I'd like to upload last good config (copied about one week ago and named mygoodconfig.conf).

In configuration, file in browse upload, insert mygoodconfig.conf and then upload button, then I can see my file in list above, I click on it and then click on APPLY button, a window show me "please wait" whit time and nothing... after 20 minutes there is still the same window with the same message with the time passed.

Any help?

thanks

Zyxel_Emily

Hi @damianodec,

If you configure VPN gateway and VPN connection on IPSec VPN client manually, you don't have to allow HTTPS(port 443) in the security policy rule "From WAN to ZyWALL". Just use the default security policy rules.

If you use VPN provisioning to get the VPN profile from the USG (IPSec VPN client > Configuration > Get from Server), you have to allow HTTPS (port 443) in the security policy rule "From WAN to ZyWALL" when getting the parameters from server. After the VPN provisioning is completed, you can open the tunnel without allowing HTTPS (port 443) in the security policy rule "From WAN to ZyWALL".

mMontana

Which browser are you using?

Are you using windows with Antivirus on browser enabled?

Do the name file has some spaces?

damianodec

Thank for your help.

browser Chrome;
no spaces in filename;
antivirus, I’ll have to check

Blabababa

What if you clear the browser cache and re-login? See if the settings are applied successfully?

Zyxel_Emily

Hi @damianodec,

Can you share mygoodconfig.conf with me in private message?

What is the firmware version on the running partition now?

damianodec

hi,

it works, I uploded by Firefox!

Just another question:

I'd like open a IPSEC VPN and connect to USG by Zywall ipsec VPN Client.

This client, in authentication form, ask me gateway address (my pubblic IP) and port 443.

Have I to open this port in usg40 for its local ip ?

thanks.

Zyxel_Emily

Hi @damianodec,

If you configure VPN gateway and VPN connection on IPSec VPN client manually, you don't have to allow HTTPS(port 443) in the security policy rule "From WAN to ZyWALL". Just use the default security policy rules.

If you use VPN provisioning to get the VPN profile from the USG (IPSec VPN client > Configuration > Get from Server), you have to allow HTTPS (port 443) in the security policy rule "From WAN to ZyWALL" when getting the parameters from server. After the VPN provisioning is completed, you can open the tunnel without allowing HTTPS (port 443) in the security policy rule "From WAN to ZyWALL".