Zyxel_Albert  Zyxel Employee

My one last try. Based on your ACL solution, select 'discard the packet' for 'forwarding action' in the policy and keep the rest setting as you've done. It should block ARP packet between end device but forward to the GW. Try to see if it meets what you needs.

"ACL" always precedes "ARP inspection". "Port isolation" is an alternative to "ACL" which will block ARP packet between end devices but forward to VPN300. By doing so, you can enable "ARP inspection/IPSG" at the same time which protect your network against ARP spoofing.

Hi @MichaelB XGS1930 is a web-managed switch. It only supports web configuration. The CLI only allow you to use the "show" command to check switch statistics and table, like: show running-config, show mac address-table all, show interfaces status, etc... Reminder: You may use "show ?" to display all commands which can be…

Hi @new_switch, XGS2210 doesn't support DHCP server. If you are looking for a switch that can be a DHCP server, please consider XGS4600. If you just need to dynamically assign IP to different VLANs you can use DHCP relay with XGS2210. Best Regards

Hi @Saevik, "Is this bad for safety", it depends on whether malicious event exist and your network scale. More device will decrease your network performance. "Flood of Internet to both VLANs" means if you configure like you posted, VLAN 2 = Internet, VLAN 3 = PC 1, VLAN 4 = PC 2. If PC1 visit a website, PC2 will receive…

Hi @Saevik, Yes, my suggestion is to connect two cables from your router to switch. The link you posted is not an official answer. By doing that way all the traffic from internet will flood to both PC1 and PC2. It is not real segregated. It's highly not recommended.

Hi @Saevik, Normally you can't configure multiple VLANs on switch if your router doesn't support VLAN. The client under VLAN 2 will not get DHCP IP and not able to access internet. Here is a workaround. Keep your port 1 setting and connect another port, for example port 2, to your router. Set port 2 as Trunk port with…

Hi @Carlo, You need Nebula MSP Pack License to manage multiple organizations. Please refer https://www.zyxel.com/products_services/NCC-Nebula-Control-Center/subscribe-nebula. 

Hi @optical10, When you create a LAG with 2 ports and connect those 2 ports to another device which supports LAG, you've got the bandwidth doubled. The link status on web page doesn't add up the bandwidth but display the link speed of LAG members(each LAG members is the same). That's why you always see 1G, 2.5G. We are…

Hi @grnerd, Only if the source switch and the destination switch are same model(not same series) it should work. If you've checked the model and still not work on your site please contact local support. Will need some org. information to check the problem.

@Saevik, Actually, using cloud mode is much easier than you think. Select trunk for the port connecting to other network device, such as gateway, access point, another switch...etc. Select access for the port connecting to end device, such as PC, IP phone, IPTV, IP camera, printer...etc. The system will do the rest for you…

Hi @NetworkTotalIT, GS2210 does support SNMP and CLI. Please make sure your monitor system can reach the switches, you can try to ping the switches to see if they are reachable, and make sure the community is matched. Also you should check the switches if there is ACL or remote management setting block the Auvik system. If…

Hi @Zippygiraffe Welcome to Zyxel forum. Because switch has no dedicated uplink port, it needs to be configured manually. You can change PVID of the port connected to DHCP server to 99, thus switch will request IP without tagged. Wish you have a wonderful day.

Hi @Waishon, Thanks for your advisement, we will look into your case. Our original design is for the users who have one RADIUS server in the environment to make it simple. Will let you know if we have any update on this feature. Thanks and your feedback means lot to us

Hi @flottmedia We are moving to next generation hardware design, so XS1920 will not support Nebula control. Hi @林追追 New product detail is not ready to publish on internet, I will let you know when the time is ripe. Best Regards