FrankLauer  Freshman Member

That's normally what I do on a first step, connecting the laptop with 192.168.1.10 to a Zyxel device for setup. With this setting I attach 3 files: CLI messages while booting Network capture while booting Network capture while sending a ping from NXC to laptop (192.168.1.1 to 192.168.1.10) with ICMP response. And a ping…

Here it is:

I'm in an own 192.168.1.0/24 network only for setting up zyxel devices. My PC is 192.168.1.10 and the gateway 192.168.1.2. When I ping on the NXC2500 CLI (connected by serial cable) I can ping PC and gateway successful. Looking with Wireshark I can see the ICMP traffic from 192.168.1.1 to 192.168.1.10. But if I ping from…

Thank you for your answers. But I think it was my fault because I bought 2pcs of the same SPF module instead in pairs. BiDi-transceivers needs to be used in corresponding pairs.

Any news about this feature?

Thanks, that worked for me. And with a FTP client like FileZilla it also easy to upgrade a lot of APs in short time by FTP.

Thank you for response. However the check I made already before. At the moment I have these results: USG210: V6.40 Patch 6 Success, 2023-04-18 17:51:06 FW for WAC6103D-I Local / V6.28(AAXH.0) NXC2500: V6.30 Patch 4-6.45 Patch 0 / Success, 2023-04-18 17:51:47 FW for WAC6103D-I Local / V6.25(AAXH.8) Pressing the button…

For some unknown reasons objects created by the 'wizard' are not editable in the web interface. I changed that as follows:1. Download the configuration file to a PC2. Change the names manually by removing the prefix 'Wiz_' 3. Upload the config file. After that the entries can be edited in the Web GUI.

Thank you for answer. The 802.11k/v feature I had already enabled but the RSSI threshold is new for me. I need some experience to handle this option, but it's interesting. Do you plan to make band steering available in the web interface in a future firmware? Or can it be enable in the CLI or config file? Because my clients…

Just wanted to note what I had discussed with support by mail: The USG is syncing the conf files exactly at the point when you upload a firmware to a slot. If you don't restart the new firmware in the new slot immediately you will lost the changes between upload and restart. In my case I have done the restart some days…

Thank you both for answering. As far I see the problem as follows: On Dec 12th I upgraded the firmware. Before I made a custom backup of the last config file of FW 4.65 to my local disk. This is the header of the file: ! saved at 2021-12-12 02:03:06 ! model: USG210 ! firmware version: 4.65(AAPI.1) After upgrade in slot 2…

Hast du vor der FTP-Sicherheitsregel noch eine andere Regel mit Deny oder Reject, welche den Zugriff vorher verweigert?Die Reihenfolge der Regeln ist wichtig. Ausserdem kann etwas nicht stimmen, wenn das USG-Log "Match default rule, DROP" mit der Destination 192.168.9.102:21 meldet. Nach deinen Angaben ist 192.168.9.102…

Sicherheitshalber auch mal schauen, ob der TV überhaupt eine IP-, Gateway- und DNS-Adresse per DHCP bekommen hat.

Do you plan to support RDNSS for advertising DNS servers by neighbor discovery in router advertisements as described in RFC6106 ? https://tools.ietf.org/html/rfc6106 Here's an example of Cisco:configure terminalinterface lan1ipv6 nd ra dns server 2000::1 1000 sequence 0…

Default behaviour of the USG is to deny more or less all incoming connections with the last security rule any to any, any protocoll = deny. But security rules must be activated and this default rule must be set to deny action. If you still have unwanted incoming traffic disable some 'allow' rules you may have. (Careful…