FrankLauer  Freshman Member

Today I installed the firmware V4.62(AAPI.0)ITS-WK02-r98140 and as far as I can see, it's fixed. Thank you very much.

I managed to upgrade today to 4.62(AAPI.0) on the USG210.But still no difference. Mail log:128 2021-02-21 09:38:22 2001:16b8:xxxx:1600:c29:2e06:db05:8d60: 2a01:xxxx:xxxx:9a50::65:443 alert secure-policy ACCESS BLOCK Match default rule, DROP - On the first IPv6 address the port is missing because the string size is limited.…

Any news on that? In that time we are living now plain passwords in backup files really should be avoided.

Please open a support ticket. The IPv4 addresses are also fully visible. In a security device GDPR shouldn't have priority. Common practice is to offer a setting which allows different options to save addresses (hidden,limited,full). But as I just added in above comment, in traffic log (on USB stick) I miss IPv6 traffic at…

Thanks for reply, but the question was how to show the full IPv6 addresses in logs.In log mails they are cut, on USB stick they are hidden (blank) at all. Additionally I saw today that in the traffic log files the IPv6 traffic is missing at all.

Well, this forum doesn't let me insert plain text very well. Here again the log lines from mail and USB stick. 1 2021-02-08 09:26:58 2a01:****:****:9a50:61 2600:****:5306:7300:: warn sessions-limit ACCESS BLOCK 2021-02-08 09:26:58, , , warn ,sessions-limit ,ACCESS BLOCK , vlan50 , , , Maximum sessions per host6 (2000) was…

Hi,für mich die beste Anleitung war diese hier:https://www.dslreports.com/forum/r31455551-Enabling-IPv6-on-your-Zyxel-Zywall-device (Aber sei gewarnt, ich hab Monate gebraucht bis alles wirklich einwandfrei funktioniert hat.)

Update: I tried today another form of update with USB stick. And after different tries and resets and reboots the firmware upgrade magically happens ;) It's strange because it was always the same bin file. However now I'm on 4.35. It's done :)

The additional WAN1 address looks not correct to me, but maybe needs some investigation later. But for the first step your USG seems to be connected to IPv6 because you can ping it in the diagnose console. For testing some additional steps: Use the latest firmware or at least a newer one. To make things easer for testing…

The DHCP log is maybe empty because it logs often on errors (deny rules) only. You would have to set the log to log the 'allow' rules too. However in such cases I trust only a traffic analysis with Wireshark. For example you could collect the traffic on the USG for LAN1 while rebooting your computer. Than download this…

What should I say. From starting to implement IPv6 in our company till I had a first sucess I needed 3 months! And yes, network engineering can be an academic job. But I think you are quite close to success. Positively seeing you got in these 4 days different things working. Your WAN interface looks fine. Both of your LAN…

Well, it looks correct and exactly what I have on my USG110 and than the device fills out the Address field automatically. Check if you still got a prefix delegation when you check this under 'object->dhcp6' Reboot the USG If it doesn't help here's another idea: Because I got a /56 delegation I have a prefix something like…

Ok, WAN looks fine now :-) Now try suffixes ::0:0:0:1/64 for LAN1 and ::1:0:0:0:1/64 for LAN2 (IPv6 Address Assignement) and suffixes ::0/64 for LAN1 and ::1/64 for LAN2 for Router Advertisment This should result in: 2a00:79c0:759:4afc::1/64 for LAN1 Interface and 2a00:79c0:759:4afd::1/64 for LAN2 interface. And the…

This forum sucks! I posted the answer 4 times and it always got lost after a while. I give up. Sent a PM