SFP P1 port does not work Link Down

AndrewT
AndrewT Posts: 3  Freshman Member
First Comment Friend Collector
in Security

Hello, i have exactly the same issue as described here

https://community.zyxel.com/en/discussion/11102/sfp-p1-port-does-not-work-lind-down

But device is Zyxel VPN50 (V5.37(ABHL.2) firmware) with ZyXEL SFP-1000T 1000Mbit / s SFP network transceiver module. Is it possible to get it work?

Accepted Solution

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,627  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @AndrewT ,

    Thank you for your remote information.


    After analyzing the DHCP packets, we found that the VPN50's SFP port is sending DHCP requests, but no DHCP ACK packets are being received. Please check the network environment, such as replacing the current SFP module with another Zyxel SFP-1000T, verifying the DHCP server, or setting the interface corresponding to the SFP port to a static IP.

    Additionally, since the VPN50 has reached the end of firmware support, if the issue persists, you may want to consider upgrading to our ATP, USG FLEX, or USG FLEX H series, which also feature SFP ports.

    Next-Gen Firewall | Zyxel Networks

    Judy

    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,627  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @AndrewT ,

    It could be related to device boot module. Can you take a screenshot of boot module version and sent me via private message.

    How to check boot module:
    Router# psm
    Router(psm)# atsh

    Judy

    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

  • AndrewT
    AndrewT Posts: 3  Freshman Member
    First Comment Friend Collector
    https://community.zyxel.com/en/discussion/comment/69748#Comment_69748

    Hello, here is psm atsh (also sent via PM)

    Username: admin
    Password:
    Router# psm
    Router(psm)# atsh
    Kernel Version : V3.10.87 | 2024-01-20 04:04:11
    ZLD Version : V5.37(ABHL.2) | 2024-01-20 04:37:52
    BootModule Version : V1.13 | Feb 16 2017 10:06:38
    Vendor Name : Zyxel Communications Corp.
    Product Model : VPN50
    System Type : 10
    First MAC Address : xxxxxxxxxxxx
    Last MAC Address : xxxxxxxxxxxx
    MAC Quantity : 6
    Default Country Code : E6
    Boot Module Debug Flag : 00
    Serial Number : S182L24103031
    Baud Rate : 115200 bps
    BM Checksum : AEB71266
    Core Checksum : 8298DF31
    Conf Checksum : C71E9516
    SNMP MIB level & OID : 060102030405060708091011121314151617181920
    Main Feature Bit : 00
    Other Feature Bits :
    3A E1 00 00 00 00 00 00-00 00 00 00 00 00 00 00
    06 00 00 00 00 00 00 00-00 00 00 00 00 00
    Router(psm)#
    Router#

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,627  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @AndrewT ,

    We've tested the following configuration on our end:

    • VPN50 (boot module 1.13)
    • Connected to ZyXEL SFP-1000T
    • DHCP provided by other firewalls
    • Port 1 successfully obtains an IP address

    With this setup, we were unable to reproduce the issue you reported.

    To help us investigate further:

    Please check your private messages for instructions and share remote access information, so we can examine your specific configuration.

    Please note: The VPN50 has reached its End of Life (EOL) for firmware development. While we can't provide new firmware updates, we'll explore potential configuration recommendations or workaround solutions for your situation.

    Judy

    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,627  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @AndrewT ,

    Thank you for your remote information.


    After analyzing the DHCP packets, we found that the VPN50's SFP port is sending DHCP requests, but no DHCP ACK packets are being received. Please check the network environment, such as replacing the current SFP module with another Zyxel SFP-1000T, verifying the DHCP server, or setting the interface corresponding to the SFP port to a static IP.

    Additionally, since the VPN50 has reached the end of firmware support, if the issue persists, you may want to consider upgrading to our ATP, USG FLEX, or USG FLEX H series, which also feature SFP ports.

    Next-Gen Firewall | Zyxel Networks

    Judy

    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）