Fallback to lastgood configuration

Options
nielsscheldeman
nielsscheldeman Posts: 89 image  Ally Member
First Comment Friend Collector Third Anniversary
edited December 2025 in Security

I have a problem with a ZyXEL FLEX 200 that has been moved to a new physical location. Everytime it reboots, the boot status goes back to "Fallback to lastgood configuration"

I seem to have solved it now by removing an old L2TP_VPN Connection which isn't in use anymore.

It mentioned something about can't crypto… for that VPN in the logfile. But how is that possible that it gets into the config file if it is not able to work?

There was 1 L2TP VPN connection and I added an extra IKEv2 Gateway with 2 VPN tunnels on that gateway. 2 Tunnels because 2 VLAN's that had to be connected with 1 on other site.

I still have the "corrupted" configfile if I have to look something up on it.

Firmware = V5.41(ABUI.0)

Also in old site I had a PPPoE account with filled in username, it gave an error also on that in logfile(but I don't need it filled in anymore). I filled now fake user in, but can't remove it? Ok Button grays out

image.png

Accepted Solution

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,367 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓

    Update

    The issue is because the L2TP config has a non-existent address object, which can't be replicated in the latest firmware version.

    Zyxel Melen


All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,367 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @nielsscheldeman

    I will send you a private to get the config file.

    About the pppoe account, this seems like is a default account. The default account is not able to removed. I suggest loading a config file that remove the username & password of this ISP account object. 

    !
    
account pppoe WAN_PPPoE_ACCOUNT
    
!
    Zyxel Melen


  • Zyxel_Melen
    Zyxel_Melen Posts: 4,367 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓

    Update

    The issue is because the L2TP config has a non-existent address object, which can't be replicated in the latest firmware version.

    Zyxel Melen


Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）