mMontana  Master Member

You should look for WK48 firmware. And enable strong cyphers.

Moreover, other AP still waiting for Deep frag patched firmwares... :s

Is any of the subnets you're using for LAN1 of HQ and Branch are used in other settings?You can check into the objects of the firewall.

Same firmware, same behavior on USG20-VPN and USG20W-VPN.


 I'm... sorry and confused about this arrangement. I mean. Entering medical data, over a wireless connection?I'm expecting a encrypted protected wireless connection between the device and the AP, and also a encryption of the connection between client and server but... still leaves more failures than pleasant for this…

It depends on how it's implemented. And it's... ISP game, you have to deal to what they say.Anyway. Assuming ...* 192.168.249.0/24 is the subnet of your next Livebox Pro 5, you have to triple check that is not used in any of the networks of the sites, LAN or IPSEC side.... * 192.168.249.1 is the IP address of the LiveBox…


The easy and fast solution is... contact a skilled network technician and provide him any information he/she asks. And pay he/she nicely. The cheap solution is.. start to provide a bit more information. It's not "easy", but sometimes works.

Did you asked you provider if you're using PPPoE or something else?

Can you test the same AP:* in a different port switch * with a power supplier not into a PoE port * with a different PoE deliverer IMVHO could be a AP issue..

PoE or Power supply for the AP?If the second, try to change the power supply.If the first, check the PoE budget status of your switch.

IMVHO I don't know if these routes make sense...Destination cannot be the WAN2IP, destination should be the ip addresses of your SIP providers.Because PABX 201 and 203 should look for the IP/IPs of the SIP provider (currently unprovided) and USG110 should route these requests to WAN2 as Next Hop. Maybe even only for... SIP…

Thanks @CHS, i had the same impression. But I'd love a statement from Zyxel representatives.

I home that soon some of representative could show up and support more. My "fear" was the use of the content filtering (and quite a load of traffic) but it was only my personal assumption. IDK the function of the process qmi-proxy, looking for a search over Internet didn't provide any useful hint/explanation.

330BDQ.9 is quite old... 6 years AFAIK. WK48 is a bit more fresh, but not so much.

Are you using any of the value added licenses from Zyxel? (policy compliance, Antivirus, Antispam, Content filtering)