mMontana  Guru Member

Rule of thumb about security policy rules.98% of the times the author write it wrong. I did that too, so many times :)

@zyxel_jeff and @Zyxel_Jerry only ZLD 5.xx firmwares are affected? This issue will lead to WK/Lab Firmware or an official release?


If your 4G-AC68U Asus 4G router supports several LAN interfaces and vLANs, you need to buy managed and vLAN capable switches. And reconfigure nwa1123-ac pro to serve your SSID on the right vLAN bridged to your network, and the guest SSID on the right vLAN bridged to the secondary (and guest) network created from your…

Is this a francy wording for "saving production costs"? Or for "unavailability of SFP ports"?

Thanks for the explaination. :) APs will be update to latest firmware when the controller (VPN50) will receive updated firmware for that specific model. The check and download of newer firmwares might be manual or automatic. Personally on USG40 I'd used only in manual way. With this sequence on USG40 i check for newer…

I'm sorry... "Stand alone Firewall controlled APs" means "APs managed via firewall only" Am I right?

Sorry for late response.So.If I have 350 Site-to-site active tunnels, i cannot have more than 150 IPSEC and L2TP client-to-Zyxel connections?

UPAny useful hints?

I personally hope that for few months for catastrophic security flaws Zyxel will consider another bugfix release.Then I think to Zyxel supposed needs for revenues and sell hardware & licens SAAS VPN Client & Nebula fees.... and here goes gravity.

You can create users also outside this specific section of interface...

Did you already tried to replace the LAN cable between GS-1100-16 and the router?

AFAIK it should. But "their mobile devices", if are Android or iOS devices, won't work with SSL VPN, due to a not-standard OpenVPN implementation used on this feature.

Starts smelling like some software snafu...

So you need to put another one between your infrastructure and the ISP router.

Ok. Switches and Subnets. Interesting. As testing purpouse, can you selectively cut-out for testing switches and/or subnets? Simply: without a MacAddress expressed, find the culprit migth be like playing darts blinded, but progressively excluding subnets and switches form the dialogue with the ATP500, you might have a…