parnassus  Freshman Member

IMHO - if I understood you correctly (that was explained in another thread) - the whole concept would be rephrased a little better because your statement "Making sure you update the firmware: 430AAPJ0C0 on the same partition, so the "configuration" will be kept after firmware upgraded." looks unclear to me: each Firmware…

Following some guides found on Internet is probably not a very good starting point: why not simply start with official ZyXEL KB Articles as foundation for your configurations? it's the path I personally prefer. As example: * ZyXEL IPSec VPN Site to Site (Static IP Public addresses) KB Article * ZyXEL VTI VPN Site to Site…

Thanks Fabio, months ago ZyXEL Support (Italy) confirmed that Link Sticking was enabled and hardcoded into 4.x ZyOS series with a pre-set value of 300 seconds: I remember that on ZyOS 3.x Link Sticking configuration (enable/disable) and its settings were exposed to Web GUI...I was under the impression that ZyXEL on newer…

Hello Fabio, with regard to the "link sticking" bug (particularly nasty on Dual WAN setups)...is it true that link sticking management on Dual WAN setups was really reintroduced with 4.30 (somebody told me that 4.25 Patch 1 should be the version with Link Sticking reintroduced)? I have an USG60 with Dual WAN but I see no…

@PeterU: ...your ZyXEL Firewall is exactly a ZyXEL ZyWALL 110 (nor a USG110 neither a USG60W as the OP reported in this thread)...and, looking at the log you provided, it looks like your ZyWALL 110 is - still (!) - runnning on a old Firmware Version 4.15(AAAA.2) built on March 2016! Firmware versions for ZyXEL ZyWALL 110…

@Zyxel_Charlie thanks for the insight...so, if I understood you correctly, each Firmware partition (Running and Standby) owns its set of separated configuration files on a separated flash's memory space? I initially deleted those ones: * 420AAKY2ITS-WK11-r76589-2017-07-27-12-53-49.conf (last modified on July 2017) *…

I successfully performed the update on a USG60 with one NWA5121-NI, new AP Firmware was available after check when the USG60 was already running on 4.30 (before, USG60 on 4.25 Patch 1, the NWA5121-NI ran on Firmware 4.22 Patch 1): applying for the AP Firmware update was a matter of seconds, from Cloud the USG60 downloaded…

Thanks Christian. My configuration is simpler than your one but the fact that three sites could be concurrently affected doesn't make it easier to manage in case of any form of update failure (I mean: an USG can boot correctly into new 4.30 but then, if the configuration shows issues - at any level - that will mean that I…

Interesting issue...I too have an USG60, it is still running 4.25 Patch 1 and it controls a NWA-5121NI...so, reading what you wrote, I'll wait an answer before considering to update to newly released 4.30. Have you found (or somebody from ZyXEL advised you with) a workaround or your issue is still valid?

Hello, reading this thread I am - for the very first time - a little bit scared to deploy Firmware update from 4.25 Patch 1 to 4.30 (no matter if using a Local or Cloud Firmware update approach) so my question: is it safe to proceed or not [*]? I have three sites (USG110, USG40 and USG60) all deployed with 4.25 Patch 1…

Hello @Horia, don't know if I come late...just to be clear: there was (is) ZyXEL USG20 and USG20W (Firmware 3.30, not updated anymore...practically EoL) and current ZyXEL USG20-VPN and USG20W-VPN that are currently developed (with 4.x Firmware and other performances)...that's to say that they have similar names - USG20 or…

Clearly above I referenced about old ZyXEL ZyWALL USG20 and not the actual ZyXEL USG20-VPN (which is another model).

Also consider that ZyXEL USG40 and ZyXEL USG60 (with latest 4.25 Firmware) provide up to 5 (free) SSL VPN concurrent connections so if you don't want to purchase the ZyXEL VPN Client (application) - one for any supported device (Apple/Microsoft) you're going to use to connect to your Firewall - you can use supported Web…