tesagig  Ally Member

thanks. I don't have any service that need to connect to USG, other than when I travel; e.g. for security video. Maybe VPN soon. So, my thinking was to lock down problem countries that I don't travel to. e.g. Most of Asia, Russia, ....

Got a 100 flex and I used the converter. Work great. Except, the WAN connection. But I used wizard to sort out. However, I have some questions: 1.) Do I need to enable IP/MAC binding on my ISP (xfinity) interface?2.) anti-malware: what is recommend, express or stream mode?3.) is there an easier way to select geo fencing…

thanks. Can I copy my USG40 config to the USG FLex 100?

thanks for sharing this. So, I am limited with the USG40 to a 100Mbps subscription +/-. What device would allow 300Mps?

What is the expected throughput for a USG40 with app features on (virus, IDP,..)?I had 100Mbs service and measured on avg 104Mbps. Upgrades to 300Mbs and getting avg 111Mbs

thank you! assuming there is no additional security risk?

I tried this. But IP is kept. I did some research on this and clients typically don't give up IP like this. Actually, some people have to go though great lengths to change IP (i.e. switch to static and then switch back) . In any case I woudl not expect to get the error after upgrading USG firmware.

clients kept IP and DHCP server (on USG) is not giving out new IP to client or is not recording existing IP-MAC binding on the network.

Seems like the clients want to check for existing MAC-IP binding, and USG is rejecting because it forgot but does not force a new IP?

Yes, I did configure IP/MAC binding.At least some clients were unable to obtain IP address. Only after reboot.

thanks. I know there lots of ports ranges. I was hoping that Zyxel had a predefined rule. BTW. What are applications used for?