USG 20VPN web interface Blocked

Pedro_Brito
Pedro_Brito Posts: 5
First Comment Friend Collector
in Security 
I put an additional port on the NAT and the connection to the router dropped, at the moment I can't access the router through the browser, I've already restarted the router and the problem remains, any tips to access the router and convert what was done in the NAT?

Accepted Solution

All Replies

  • Zyxel_James
    Zyxel_James Posts: 718  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
    edited March 2023

    Hello @Pedro_Brito
    You can connect to the console port and access the device by SSH or Telnet, then use the CLI commands.

    command cli interface.png

    Router#show logging entries keyword nat
    This command will show the logs related to NAT, maybe you can see the logs about the change of NAT settings. Please note that the log may be washed if there are much newer logs.

    Router# show ip virtual-server
    This command will show all the virtual server profiles, and find the profile name of the rule you edit.

    Router# configure terminal
    Router(config)# ip virtual-server deactivate <profile_name>
    This command will disable the specific virtual server profile

    Please refer to the CLI guide if you want to edit the virtual server profile settings by CLI.

    https://download.zyxel.com/USG20-VPN/cli_reference_guide/USG20-VPN_5.35.pdf

  • Pedro_Brito
    Pedro_Brito Posts: 5
    First Comment Friend Collector
    https://community.zyxel.com/en/discussion/comment/49436#Comment_49436

    Thanks, i will try but something tells me I'm going to have to reset the router.....:(

                            
    
                        
        
                        
    
                
    
            
    
        
    • 
                
  • 
            
    

                                                                
    
                    mMontana                    
                        
    
                        
                                mMontana
                        

                        
                            Posts: 1,426   Guru Member
    
         
            Zyxel Certified Network Administrator - Security
         
         
            Zyxel Certified Network Administrator - Switch
         
         
            50 Answers
         
         
            1000 Comments
         
                                
                    
    
                    
    
                        
                                                   
                                                                    
    
                    
                                                
    
                                                    
    
                                    
    
                
    
                    
    
                        
    
                            
    @Pedro_Brito USG20-VPN have in the box the cable for console access. Consider this as opportunity to revert/disable your NAT setup. Won't be fast & easy, but might save you to reconfigure the whole device.
                            
    
                        
        
                        
    
                
    
            
    
        
    • 
                
  • 
            
    

                                                                
    
                    Pedro_Brito                    
                        
    
                        
                                Pedro_Brito
                        

                        
                            Posts: 5
    
         
            First Comment
         
         
            Friend Collector
         
                                
                    
    
                    
    
                        
                                                   
                                                                    
    
                    
                                                
    
                                                    
    
                                    
    
                
    
                    
    
                        
    
                            
    Does anyone know the command to disable NAT?

                            
    
                        
        
                        
    
                
    
            
    
        
    • 
                
  • 
            
    

                                                                
    
                    Zyxel_James                    
                        
    
                        
                                Zyxel_James
                        

                        
                            Posts: 718   Zyxel Employee
    
         
            Zyxel Certified Network Administrator - Security
         
         
            Zyxel Certified Network Administrator - Nebula
         
         
            Zyxel Certified Sales Associate
         
         
            100 Answers
         
                                
                    
    
                    
    
                        
                                                   
                                                 Answer ✓                     
    
                    
                                                
    
                                                    
    
                                    
    
                
    
                    
    
                        
    
                            
    
    
        https://community.zyxel.com/en/discussion/comment/49464#Comment_49464
    

    

    @Pedro_Brito 
    As I mentioned, the CLI command can show the NAT profile and disable it.
    Router# show ip virtual-server
    
This command will show all the virtual server profiles, and find the profile name of the rule you edit.
    Router# configure terminal
    Router(config)# ip virtual-server deactivate <profile_name>
    
This command will disable the specific virtual server profile
                            
    
                        
        
                        
    
                
    
            
    
        
    • 
                
  • 
            
    

                                                                
    
                    Pedro_Brito                    
                        
    
                        
                                Pedro_Brito
                        

                        
                            Posts: 5
    
         
            First Comment
         
         
            Friend Collector
         
                                
                    
    
                    
    
                        
                                                   
                                                                    
    
                    
                                                
    
                                                    
    
                                    
    
                
    
                    
    
                        
    
                            
    
    
        https://community.zyxel.com/en/discussion/comment/49469#Comment_49469
    

    

    Problem solved, thanks Zyxel_James for the tips, saved me a few hours of router reconfiguration :)

                            
    
                        
        
                        
    
                
    
            
    
        
    • 
                    

            
    

                                                                    

                                

                                
                                

                                    

                                        

                                    

                                    


    
    
    


        
Categories

        
    




    
Security Help Center

            
    



    
 
                                

                                

                            

                            
                        

                    

                

            

        

    

    
EnglishTiếng ViệtРусскийไทย中文（台灣）