Zyxel USG 110 - WEB ACCESS

DenisPereira
DenisPereira Posts: 8
First Comment Friend Collector Second Anniversary
in Security
Hello,

I have change the default policy of my Zyxel USG 110 to Deny, and since then i am not able to do login in the zyxel.

Any Idea how to get access to him?

I have made an update of firmware from 4.60 to 4.70, and i have a backup of my settings with version 4.60, i will be able to reset and put my Backup of version 4.60?

Best Regards,

Accepted Solution

  • DenisPereira
    DenisPereira Posts: 8
    First Comment Friend Collector Second Anniversary
    Answer ✓
    It's Solved.

    I have used the follow command:

    Router> configure terminal

    Router(config)# no firewall activate

All Replies

  • WJS
    WJS Posts: 95
    5 Answers First Comment Friend Collector First Anniversary
     Ally Member

    Hi

    Hope you can access via console port

    #enable

    #configure terminal

    #show secure-policy

    Search the rule that cause you can’t access


    For example rule1

    Disable it

    #no secure-policy 1





  • alexey
    alexey Posts: 188
    First Comment Friend Collector Fifth Anniversary
     Master Member
    edited November 2021
    Hi @DenisPereira

    Yes, you can apply old conf backup file from old fw, if you apply it with option "Ignore errors and finish applying the configuration file"

    But if you have access to device via console, you can log to it and disable firewall
    # configure terminal
    # no secure-policy activate
    After that you will can log via web, change default policy and activate firewall again. 

  • USG_User
    USG_User Posts: 365
    5 Answers First Comment Friend Collector Fifth Anniversary
     Master Member
    edited November 2021
    If you have access again you should create a rule for admin access before settig the default policy to DENY.
    Additionally to protect your admin account, you should change the access port to another port than a well-known port number.
    Further you should allow the access to admin account from local zone only. Therefore you could deny the access from other zones like WAN, DMZ, etc. at SYSTEM > WWW > Admin Service Control.

    But anoher questions ... Where you've downloaded the v4.70 from? Our latest revision is v4.65 AAPH.1 WK32.
  • DenisPereira
    DenisPereira Posts: 8
    First Comment Friend Collector Second Anniversary
    WJS said:

    Hi

    Hope you can access via console port

    #enable

    #configure terminal

    #show secure-policy

    Search the rule that cause you can’t access


    For example rule1

    Disable it

    #no secure-policy 1






    Yes i am able to connect via Console, when i run this command the rule is not listed here. the rule i have change is the last without a number it's like the default "rule"
  • DenisPereira
    DenisPereira Posts: 8
    First Comment Friend Collector Second Anniversary
    alexey said:
    Hi @DenisPereira

    Yes, you can apply old conf backup file from old fw, if you apply it with option "Ignore errors and finish applying the configuration file"

    But if you have access to device via console, you can log to it and disable firewall
    # configure terminal
    # no secure-policy activate
    After that you will can log via web, change default policy and activate firewall again. 

    i have tried this, but the command "no secure-policy activate" is not recognized
  • USG_User
    USG_User Posts: 365
    5 Answers First Comment Friend Collector Fifth Anniversary
     Master Member
    The command for Default-Rule reads:
    secure-policy default-rule action  {allow | deny | reject}

    Try to "allow" it again fo getting back access.

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）