mrwee  Freshman Member

Hi Jeff, Thank you for the info. Since USG110 is out-of-service my assumption is that it will not be "fixed".

Configuration Provisioning has been activated, but I've only enabled IKEv2, not L2TP.

@Zyxel_Jeff Thanks for your reply. It seems like my use-case doesn't require USG to support DNSSEC, but I assume other scenarios would, so it would probably be wise feature to implement.

My PC uses USG for DNS, which in turn uses my ISP's DNS servers. So I assume they support it. Also our domain is DNSSEC enabled, so incoming traffic is also good to go. So right now, it seems to work both ways. Just need to get my head around DANE :)

"Yes, your DNS resolver validates DNSSEC signatures" Assume that it should work for the mailserver as well then ::smiley:

Hi @Zyxel_Charlie ...And this brings me back to somewhat fragmented documentation. I (and hopefully others) would appreciate a complete "remote worker" manual, covering all these scenarios in one guide. If all was covered in one, it would probably also minimize the error risk in merging multiple configuration suggestions ;)

Sry, I can see that it wasn't that clear. I'm looking for enabling what I think should be (Not an VPN expert):L2TP/IPsec with IKE2 (Assume it's the most secure encryption) for e.g. iOS +Android + w10 / Zyxel VPN Client SSL/SecuExtender when L2TP/IPsec is blocked/doesn't work. The lack of virtual wan interface, surely…

@Zyxel_Stanley Thought there were some kind of limitation. Can't get VPN to work, but I'll dig some more.

@PeterUK Not even for L2TP/IPsec "terminating" on the router?

@Zyxel_StanleyHaving 8 WAN IP addresses, I assume a physical or virtual WAN interface must exist? Seems like I can only define 4 virtual WAN addresses in additionl to wan1

Thx Guys. I think I'll try the NAT approach, since the redirect function only support HTTP / SMTP (for some reason)

I just ran a couple of tests using https://www.speedtest.net/, and see little difference from V4.64(AAPH.0) to V4.65(AAPH.0). I'm maxxing out my USG110 at around 500-800Mbit down / 500Mbit up (Varies from test to test). No UTM service is active.

My USG110 on 4.65 has rebooted twice today. Have sent PM with diag files

Had a reboot on my updated USG110 today. Do I have to connect a console cable for setting up the console log?

Have not seen any reboots yet, but it’s too soon to conclude that the problem is fixed. Will require some weeks. Luckly the router is monitored, so I’ll know for sure if it happens