spallared  Freshman Member

I found that the error about the Phase 2 was related to the Encapsulation, was "transport" but need "Tunnel". Now phase 2 seems to be ok but i obtain a Auth Fail! error, certificates are ok (self signed, created with zyxel and configured on my android phone both for CA and Server). I tried both AD user and local zyxel user…

I configured the local policy as suggested but i still get "Phase 2 Local Policy Mismatch" 15/01/2025 12:05 info IKE [SA] : No proposal chosen 15/01/2025 12:05 info IKE The cookie pair is : 0x30a964cb0377b9e4 / 0x33283ea1e534379d 15/01/2025 12:05 info IKE [ID] : Tunnel [ARTE_VPN_IKEv2] Phase 2 Local policy mismatch…

After trying lot of different options now i obtain a Phase 2 Local policy mismatch. The router is behind a firewall and it has already a configured L2TP vpn up and running with no problem IKE IKE SA [ARTE_VPN_IKEv2] is disconnected IKE The cookie pair is : 0x86c374adec9e2cc2 / 0x3d332d23f9dbbe74 IKE [SA] : No proposal…

As i suppose there is some firewall set up from my internet provider that blocks the queries to the category filter of my firewall is it possible to know the addresses/urls and port that my usg310 contact to categorize urls? This would allow me to check if the problem is is in my provider and, in that case, ask it to open…

Unfortunately yes, i'm still having this problem. I'm checking with my internet provider if there are rules that forbid my USG to reach zyxel category server, does anyone know the address(es) or URLs of Zyxel's category server?

Thank you Jeff!

Hello, actually i'm running firmware: V4.60(AAPJ.0)ITS-2020-11-09-201100266D Regards Luca

Hello @Zyxel_Charlie, this afternoon i updated the usg310 with the firmware you sent me and so far everything is fine. It's about 4 hours it's running fine (while before it began rebooting in less than two minutes). Thank you, i'll keep you updated. Luca

@Zyxel_Charlie, i opened the two firmware files ("standard" 4.31 and the patched 4.31 that was able to fix the reboot issue) and found that they differs for the kernel image and the modem manager (see attached images, in each image in the upper part there is the standard firmware, down the patched one).

@Zyxel_Charlie, with cf and ap enabled the router reboots in less than one minute (and with less than 20 users connected), without it lasts for a couple of hours before rebooting. Any chance that this issue can be related to what happened to me with upgrade from 4.25 to 4.31 in 2018? The sympthoms seems really the same,…

@Zyxel_Charlie Today i was able to test the new firmware 4.38 and collect the serial console log (for your information, the 4.35 version crashes in the same way). Looking at the console i found the error "Unable to handle kernel paging request at virtual address 0000000000000000..." that is the exact replica of the error…

@Zyxel_Charlie, thanks for your reply. I'll try to provide you the console output as soon as possible, as you can imagine it's not so easy because i've to reboot the router multiple times and, expecially in these days with a lot of users connected from home, it's quite tricky to find when i can do it. About the other…

Hi @Zyxel_Cooldia, thanks for your reply. I'll do that right now... Luca

Hello @Johan and thank you for replying. I just sent you the log as private message. This morning i made some other test and the result are quite strange. Yesterday i left enabled Content Filter for HTTP connections and the router ran for 24h without rebooting. This morning i tried to enable HTTPS and as soon as i applied…