I locked myself out

Options
HaPeKa
HaPeKa Posts: 5
in Security
Yesterday I wanted to disable the remote access to the WebGUI from the internet. 
However, I disabled Management Access with port 443 and locked myself out.
Therefore, I have no access to my ZyWall 110.

Unfortunately, SSH is not allowed and I know only 1 possible options to regain access:

- reset the ZyWall and restore a backup

Are there other possibilities? Can I enable SSH or Management Access (port 443) over the console port? 

Accepted Solution

  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    Friend Collector First Answer First Comment
    edited August 2021 Answer ✓
    Options
    Hi @HaPeKa,

    If you want to enable SSH please execute this command over the RS-232 console terminal:
    Router(config)# ip ssh server

    If you want to enable HTTP and HTTPS servers please execute these commands over the     RS-232 console terminal:
    Router(config)# ip http secure-server
     Router(config)# ip http server

    How did you disable the remote access to the WebGUI from the internet?
    If you disabled port 443 in Policy Control Rule from WAN to ZyWALL, then you can try this command to disable Firewall function:
    Router(config)# no firewall activate


All Replies

  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    Friend Collector First Answer First Comment
    edited August 2021 Answer ✓
    Options
    Hi @HaPeKa,

    If you want to enable SSH please execute this command over the RS-232 console terminal:
    Router(config)# ip ssh server

    If you want to enable HTTP and HTTPS servers please execute these commands over the     RS-232 console terminal:
    Router(config)# ip http secure-server
     Router(config)# ip http server

    How did you disable the remote access to the WebGUI from the internet?
    If you disabled port 443 in Policy Control Rule from WAN to ZyWALL, then you can try this command to disable Firewall function:
    Router(config)# no firewall activate


  • HaPeKa
    HaPeKa Posts: 5
    Options
    Thank you, I'll reconfigure  http secure-server as you advised!

  • HaPeKa
    HaPeKa Posts: 5
    Options
    hmm, my usual login does not work on the console port. 
    and I'm shure about my username / password, I used it regularly.

    I guess, there's no other way than reset the ZyWall 110 
  • HaPeKa
    HaPeKa Posts: 5
    Options
    after a restart I could login without any issues.

    with the commands above I get an error:

    Router> configure
    % (after 'configure'): Parse error
    retval = -1
    ERROR: Parse error/command not found!
    Router> ip http secure-server
    % (after 'ip'): Parse error
    retval = -1
    ERROR: Parse error/command not found!
    Router> ip http secure-server
    % (after 'ip'): Parse error
    retval = -1
    ERROR: Parse error/command not found!

    I go and read the manual to find out, how to set the ZyWall in config mode
  • HaPeKa
    HaPeKa Posts: 5
    Options
    Okay, problem solved ... first config terminal, then ip http secure-server and I can access the system on the GUI again.

    Thanks for your help!

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）