mMontana  Guru Member

Maybe AutoDiscover works only on the same subnet?

Configuration → Port → Port Role. Row 1: LAN1 Row 2: LAN2 Row 3: DMZ Row 4: WAN

FYI: phase 1 Old proposals Current proposals Phase 2 Old proposals Current proposal. I'm amazed how 3DES is deprecated while still massively used as default. I re-created the VPN using the wizard and the data i need. With the same L2TP Script I used for Microsoft Windows works anyway. One more question: wan interface used…

L2TP connection was realized on USG60W, ZLD 4.x firmware, not using the procedure, so proposal were the defaults for that generation of product with the wizard; log confirms that the issue seem the password and/or the username. Current L2TP setup is not recognized from the procedure, i will follow the new wizard as…

I changed the negotiation parameters for the specific site-to-site tunnel. Then the IKEv1 tunnel from client worked without issues.

I had to manually the configuration from USG20 to USG 50 flex, due to lack of 3.0 to 4.0 converter working. At least, this time I had none of the issues about the trial time wasted after using the converted configuration.

IMVHO the default iP address for Zyxel switches should be 192.168.1.2. For APs, 192.168.1.3.

@StefanZ AFAIK your case is quite different than mine. Then the only suggestion i can tell you that any IKEv1 or v2 tunnel listens only on ONE interface. If your current gateway is listening on WAN1, it won't listen at the same time on WAN2.

Many other brands of switches do the same thing IMVHO they do it wrong. Many other brands instead use a "not so used" default ip address (like 192.168.10.10, or 192.168.9.2, or 192.168.1.2) Sometimes most diffused behaviour do not make so much sense to everyone… Check on fly eating habits, which are different from others…

I'm sorry, but i can't consider ZON as an useful tool for managing network devices. When (not if) the producer of network device will stop support/update/product support of the Android/iOS app, i will not be able to configure devices. Long live Telnet, SSH, Web Browsers and thanks for the test. 192.168.1.1 is the wrong…

As I wrote before, i don't wanna know if trying. Therefore I'm asking.

Thanks for providing this security advisory. Why took 3 months before releasing the firmware? Release note are date 2nd of march, 2023, security advisory is dated 6th of june 2023.

Thanks both for keeping updated db also for 4.x devices and providing an ETA.

Thanks to point me to your experience, @markod

I'll try to rephrase it, @Zyxel_Melen I buy a GS1915 series switch. I use it into a 192.168.1.0/24 network without DHCP server active. In this network 192.168.1.1 is the main gateway. I connect ALL the devices to this switch. What will happen? Will it block the connection to the gateway? I know that "block" is improper,…