DeanH  Freshman Member

Hello Zyxel_Jeff, Thank you for your response. That is what I needed. For some reason, that didn't show up in my search.

Agreed with the others, use virtual server. Also, uncheck NAT loopback. I've had some issues with that being checked before - not sure why - so I always uncheck it now.

That's great news!

Do you have an on premise system that connects to the server, or just a phone that connects to a server in the cloud? Do you see any entries in the log showing a blocked connection attempt from the phone provider? That is found at Monitor > Log. Clear the log first, then make a call and see if it shows in the log as a…

Ok. I don't have any of those, but if it was the USG FLEX 50W (USG20W-VPN), we have a bunch (approximately 100 or so) in the field and they are working fine for our VoIP services after upgrading.

Just to clarify, are you using a USG20-VPN or a USG20W-VPN model? As of firmware version 5.20 this changed to USG FLEX 50 or USG FLEX 50W, respectively.

Finally figured it out. I forgot that on the security policy, it wants to see the LAN1 port, not the WAN port as the Service. That is so confusing since I am used to a WAN rule utilizing WAN components (IP/ports), not LAN components (IP/ports).

I ended up removing the rule completely and rebuilding it again. It is now working. However, I found another rule that is for management access to the PBX that is also blocking the packets. On this one, I changed the service object from a specific port on the external side to match with the same port on the LAN1 side…

I have also rebooted it to see if that works, but no. Still blocking for some unknown reason. It is like the original rule is not being seen in the table and the default rule is catching the packets.

Hello all, PeterUK, thank you for that. I will keep that in mind if I get into that kind of jam. I have configs from older firmware versions just in case I need to figure out what it was versus what it now needs to be. Each time a new firmware comes out, I save a new version of the base config to make it easier. mMontana,…

mMontana is correct, I'm referring to brand new devices right out of the box. So, there is no issue going from 4.33 to 5.31 in one shot on a brand spanking new device? I'll try that on my next one and let y'all know. We ship out a couple a week, so it won't be long. Now, on one that is live and behind on firmware (you know…

Zyxel_Cooldia, thank you for your reply. That is what I thought.

Hello Zyxel_Cooldia, Thank you for your suggestion. I will try that next time. The problem on this one is that the customer rebooted it before calling us, so it reset whatever was occurring and cleared it before we got to look at it. Is there a way to run those commands and dump them to a file for long term storage for a…

Where is this fastforward feature located?

Zyxel_Jeff, Thank you for the data. I had the external (WAN) port in the security rule instead of the internal (LAN) port. I swap from firewall to firewall throughout the day and I sometimes forget which ones want the external port and which want the internal port in the access rules/security policies. Admittedly, it is a…