gb5102  Freshman Member

It is a Windows bug. If you connect using the 'legacy' vpn client built into Windows it will work. Type 'rasphone' (no quotes) into the Windows search box and connect via that interface. Be sure to reboot first to clear out any 'stuck' VPN connections.

@SistemaDaRidereI believe qmi-proxy is related to LTE interface. Do you have a LTE/cellular modem attached to the USG?

It appears the firmware image is corrupted, you will likely need to perform a firmware recovery via the serial console. It could also mean the flash memory chip in the device has failed, but I would try the recovery first. See "Appendix 3. Firmware Recovery" in the following…

@My_IT_Hurts To me this sounds like it could be an issue with the MTU size set on the Zywall interface connected to the LTE modem. You can try setting a lower MTU on the LTE interface, I would try setting it down to 1300 and see if it makes any difference. If it helps, you can use the following method to determine the…

@enpingado Add a 2nd rule below the first one you created:From: AnyTo: ZyWALL Source: russiaAction: Deny/log Reboot is not required for new rules to take effect.

You should be able to create a bridge interface on USG200 to bridge lan2 and vlan10 interfaces.You would remove the IP(0.0.0.0)/subnet(0.0.0.0)/dhcp/etc 'layer 3' settings from lan2 and bridge interfaces. Then you should be able to access vlan10 devices/subnet via any ports assigned to lan2 interface.

I agree with PeterUK, check if the switch has a default gateway and DNS servers configured

@Brian1 I doubt it is a firewall issue if your PC is on the same subnet as the printer. Assuming you are using Windows, my guess is the printer is being auto-added using a WSD printer port which in my experience is notoriously unreliable. Can you try to remove and re-add it again by IP address? In Settings('modern' control…

@vlad_k Yes this is possible.You would create an FQDN address object for the specific website which you can then use in a policy route rule to tell the router use VPN tunnel for that website. Example policy route rule: Incoming: anySource: anyDestination: [FQDN_address_object]Next-Hop: [VPN_Tunnel]

@vkv A couple of suggestions: -BWM can add some overhead, you can likely increase performance by disabling BWM if you are not using it.-Content filter can also decrease performance, try to disable(if enabled) and see if there is any improvement.

@@Zyxel_Can Are you saying the known issues with DH16/17/18 are fixed in current firmware versions?Because this issue is still listed under "Known Issues" section in v4.65 release notes for Zywall 110.

@Ranbir08 That document appears to say that your firewall needs to allow *OUTGOING* connections to simsgateway.cloudapp.net on the specified ports. From: LANTo: WAN Unless you are restricting outgoing connections, you should not need to do anything.

It appears you already figured out your issue, but I just wanted to point out that DH groups 16 thru 18 have known issues, I believe it started in v4.39.From firmware release notes:IKE v2 Proposal mix not working (DH16, DH17, DH18)

Firewall rule should look like:FROM: WANTO: any (or whatever zone contains the 'receiving machine') SOURCE: <WEBSERVER_IP>DEST: 192.168.1.234SERVICE: <PORT 22022>ACTION: allow

@Blabababa Yes that is what I was after, no clue how I missed it!Thanks!!