Hey
I use the USG 300 only Private in my Home not for any Business. I got it some years before on a Zyxel Tech Day....
Tomorrow (in ~18h) :( my friends family is comming and need wifi...
So i need to use my Proxy to block all bad sites. Now it work when someone but the Proxy Adress in the Device.
The Range for Guest are 192.168.2 - 30
30 - 50 are for device who need no internet (Switch,...)
and +50 for other.
So i try everythink i know to redirect all HTTP on Port 80 to 192.168.1.55:3128 but nothing work....
So pls if anyone have a idea how i can do it?!
↧
USG 300 -> Proxy
↧
SSL VPN Trouble with 110
Hello.
I have bought USG 110 for SSL VPN connection into my office. So I would like to ask, if is there some limitation in this connection? Because I set up Web SSL VPN a tried to allow some RPD connection through web site - perfect, after that I set up my web site and it doesn't work. I saw only blank page. Is Zyxel proxy able to send active web pages to you?
Next I tied to set up full tunnel mode. Testing by ping was OK and working on IP was OK too. I saw my web server and so on, but DNS did not translate. I tried so set up DNS on USG and second DNS on the server. Nothing worked.
Thank you very much if you send my some clue about my mistakes.
↧
↧
Use alternate public IP for LAN2 subnet
USG100 with a .240 subnet on the WAN interface. Would like devices on the LAN2 internal interface to use a public IP other than the one assigned to WAN1.
What is the best way to accomplish this?
↧
Subnet help with VMG8324
Hello all, I was hoping is anyone familiar with the Zyxel VMG8324 series and how to put a device on a different subnet ?
I have one of these (branded as Eircom F1000) and it is very frustrating as Zyxel have a set up I am not familiar with and the manual does a very poor job at trying to explain anything. The main DHCP network IP works on 192.168.10.1 and want to put a specific device on 192.168.20.2 and this device is plugged into the ethernet port 2 on the router.
I have figured out that the Zyxel uses the interface group section (somehow) and this is what creates a second group you can assign the subnet to via the home networking section. However I cannot make any sense of the interface group section or what options to pick.
Here is whats in the section to start with
Group Name=Default
WAN Interface=ptm0.1,pppo3G0,eth4.1
LAN Interfaces=LAN1,LAN2,LAN3,LAN4
Anyone used one of these before ?
Thanks.
↧
New ZyWALL/USG Firmware 4.13(AAxx.0) released
To me the most important (security) fixes are:
[5] (freak)
[6] (logjam)
[7] (HTTP authentication)
[31] (pure switch during boot)
From the ZyWALL 110 release notes:
Features: V4.13(AAAA.0)C0
Modifications in V4.13(AAAA.0)C0 - 2015/07/30
1. [ENHANCEMENT]
Management Feature Enhancement:
1. Support CloudCNM, a cloud-based network management system. 4.13 CloudCNM
feature support includes:
- Batch import of managed devices at one time using one CSV file
- See an overview of all managed devices and system information in one place
- Monitor and manage devices
- Install firmware to multiple devices of the same model at one time
- Backup and restore device configuration
- View the location of managed devices on a map
- Receive notification for events and alarms, such as when a device goes down
- Graphically monitor individual devices and see related statistics
- Directly access a device for remote configuration
- Create four types of administrators with different privileges
- Perform Site-to-Site, Hub & Spoke, Fully-meshed and Remote Access VPN provisioning.
2. Support Russian Language
3. VPN MIB Support: eITS#150317956
SNMP VPN status MIBs.
The VPN status MIB is a MIB table containing the following information:
- Connection name
- VPN gateway
- IP version
- Active status
- Connected status.
Followings are the example of snmpwalk for the added MIBs;
VPN status MIB table:
- 1.3.6.1.4.1.890.1.6.22.2.4.1.1.1 = INTEGER: 1 --> table index
- 1.3.6.1.4.1.890.1.6.22.2.4.1.1.2 = INTEGER: 2
- 1.3.6.1.4.1.890.1.6.22.2.4.1.1.3 = INTEGER: 3
- 1.3.6.1.4.1.890.1.6.22.2.4.1.2.1 = STRING: "vpnconn1" --> name
- 1.3.6.1.4.1.890.1.6.22.2.4.1.2.2 = STRING: "vpnconn2"
- 1.3.6.1.4.1.890.1.6.22.2.4.1.2.3 = STRING: "vpn6conn1"
- 1.3.6.1.4.1.890.1.6.22.2.4.1.3.1 = STRING: "usg110_1" --> gateway
- 1.3.6.1.4.1.890.1.6.22.2.4.1.3.2 = STRING: "usg110_1"
- 1.3.6.1.4.1.890.1.6.22.2.4.1.3.3 = STRING: "vpn6_1"
- 1.3.6.1.4.1.890.1.6.22.2.4.1.4.1 = STRING: "IPv4" --> IP version
- 1.3.6.1.4.1.890.1.6.22.2.4.1.4.2 = STRING: "IPv4"
- 1.3.6.1.4.1.890.1.6.22.2.4.1.4.3 = STRING: "IPv6"
- 1.3.6.1.4.1.890.1.6.22.2.4.1.5.1 = INTEGER: 0 --> active status
- 1.3.6.1.4.1.890.1.6.22.2.4.1.5.2 = INTEGER: 1
- 1.3.6.1.4.1.890.1.6.22.2.4.1.5.3 = INTEGER: 1
- 1.3.6.1.4.1.890.1.6.22.2.4.1.6.1 = INTEGER: 0 --> connected status
- 1.3.6.1.4.1.890.1.6.22.2.4.1.6.2 = INTEGER: 0
- 1.3.6.1.4.1.890.1.6.22.2.4.1.6.3 = INTEGER: 0
VPN connection counter MIBs.
The VPN connection counter MIB is a MIB group containing:
- Total VPN connection configured
- Number of activated connection
- Number of connected connection
- Number of disconnected connection
Followings are the example of snmpwalk for the added MIBs;
VPN connection counters:
- 1.3.6.1.4.1.890.1.6.22.2.5.1.0 = Counter32: 3 --> Total connection configured
- 1.3.6.1.4.1.890.1.6.22.2.5.2.0 = Counter32: 2 --> Number of active connection
- 1.3.6.1.4.1.890.1.6.22.2.5.3.0 = Counter32: 0 --> Number of connected connection
- 1.3.6.1.4.1.890.1.6.22.2.5.4.0 = Counter32: 2 --> Number of disconnected connection
MIB table for VPN SA monitor
The new OID is 1.3.6.1.4.1.890.1.6.22.2.6.
The MIB table contains the following columns:
- 1.3.6.1.4.1.890.1.6.22.2.6.1.1 --> VPN connection index
- 1.3.6.1.4.1.890.1.6.22.2.6.1.2 --> VPN connection name
- 1.3.6.1.4.1.890.1.6.22.2.6.1.3 --> VPN connection policy
- 1.3.6.1.4.1.890.1.6.22.2.6.1.4 --> VPN connection uptime
- 1.3.6.1.4.1.890.1.6.22.2.6.1.5 --> VPN connection timeout
- 1.3.6.1.4.1.890.1.6.22.2.6.1.6 --> Number of in-bound packets for the connection
- 1.3.6.1.4.1.890.1.6.22.2.6.1.7 --> Number of in-bound octets for the connection
- 1.3.6.1.4.1.890.1.6.22.2.6.1.8 --> Number of out-bound packets for the connection
- 1.3.6.1.4.1.890.1.6.22.2.6.1.9 --> Number of out-bound octets for the connection
4. Support license refresh immediately while device-ha backup device become active.
5. Add pre-defined configuration (or pre-defined UTM profile) by default.
2. [ENHANCEMENT]
Connectivity Feature Enhancement:
1. Support RPS(Receive Packet Steering) to ensure that packets for the same stream of data are sent to the same CPU, which could help to increase performance in a congest(low bandwidth or high latency) network environment, eITS# 150200442,
150200636.
2. We enlarge static DHCP host pool from 512 to 1024 for ZyWALL 110, USG1100, and USG1900, eITS# 150100773
3. Adjust Spec for SSLVPN Connections
Model - Default SSLVPN Connections - Maximum SSLVPN Connections
USG40/40W - 5 - 15
USG60/60W - 5 - 20
USG110 - 25 - 150
USG210 - 35 - 150
USG310 - 50 - 150
USG1100 - 250 - 500
USG1900 - 250 - 750
ZyWALL 110 - 25 - 150
ZyWALL 310 - 50 - 150
ZyWALL 1100 - 250 - 500
3. [ENHANCEMENT]
Security Feature Enhancement:
1. ADP engine and IDP engine upgrade to support more social networking application behavior, such as FACEBOOK like, FACEBOOK share
etc.
4. [ENHANCEMENT] eITS#150200756
UDP session timeout value can be configured up to 28800 seconds.
5. [ENHANCEMENT]
Patches for CVE-2015-0204, FREAK: OpenSSL vulnerability.
6. [ENHANCEMENT]
Patches for CVE-2015-4000, Logjam: TLS vulnerabilities (CVE-2015-4000).
7. [ENHANCEMENT]
Patches for vulnerability of HTTP authentication module which may cause USG behave as an open proxy to proxy HTTP request from external clients to internal servers.
8. [BUG FIX] eITS#150317956
[OID]OID formats are different between USG40W and USG1900.
[Condition]
MIBs...1.3.6.1.4.1.890.1.15.3.1.6.0.....
USG40W: V4.11(AALB.0)/1.01 | Aug 28 2013 14:19:07/2015-03-13 06:53:46
USG1900: V4.11(AAPL.0)/1.10/2015-03-13 01:27:44
9. [BUG FIX] eITS#150301008
DNS Security configuration can't change.
[Condition]
1. Go to Configuration > System > DNS > Click Show Advanced Settings > Security Option Control > Edit default profile e.g. Query Recursion deny > Click OK button
2. You will find the OK button no function.
10. [BUG FIX] eITS#150300062
If adding radius server into auth. method, L2TP cannot be established successfully.
[Condition]
1. Go to Configuration > Object > AAA Server > RADIUS.
2. Set Server address: R1.domain.tw
3. Set Backup Server address: R2.domain.tw (PS. R1.domain.tw and R2.domain.tw need result same ip address)
4. Radiusd daemon couldn't bring on fail.
11. [BUG FIX] eITS#150300789
Combo-box show field is in wrong location.
[Condition]
1. In the settings of WLAN-interface, the input fields "802.11 band" and "Channel" are incorrectly positioned.
2. The problem occurs only in the browser IE 11
12. [BUG FIX] eITS#150300851
Limited admin user fails to view click diagnostic page
[Condition]
1. Add a limited admin account
2. Login by limited admin
3. Go to Maintenance > Diagnostic
4. You will find USG GUI no response
13. [BUG FIX] eITS#150300910
DHCP Relay may not work in Device HA environment.
[Condition]
When master device change status from fault state to active state, the DHCP relay function may not work.
14. [BUG FIX] eITS#150400012, 150200484, 150500302, 150600123, 150301005, 150501020,
150301061
In some cases, apply configuration will fail and cause zyshd dead. This may occur during the firmware upgrade progress or manually apply configuration.
15. [BUG FIX] eITS#150400115
[SSO][Authentication] Without SSO enabled, user can be correctly authenticated and associated with the AD-group "Internet Users". However, with SSO enabled, the user from the AD-group "Internet Users" always appears only in the group of "ext-user (ad-users)".
16. [BUG FIX] eITS#150301062
VLAN Packets can still be sent out even the base interface is disabled.
17. [BUG FIX] eITS#150300850
Configure many static DHCP address up to maximum, the CLI command may not correctly be configured and cause incomplete entry error each time DUT reboot.
18. [BUG FIX] eITS#150401185
In USG310, 1100, 1900, ZyWALL 310, 1100, it will show error message when configuring the port negotiation type on port 8.
19. [BUG FIX] eITS#150400882
When trying to sort the table (Hits) of "Top 5 Viruses" and "Top 5 Intrusions" in Dashboard by descending/ascending, sorting is only by the first digit.
20. [BUG FIX] eITS#150500769
Unable to edit application object page if it contains , character.
21. [BUG FIX] eITS#150300799, 150400336, 150401001, 150401067, 150401143, 150200666
SSO does not work correctly sometimes.
22. [BUG FIX] eITS#150300240
Unable to open IDP signature name to see the description in MONITOR > UTM Statistics > IDP
23. [BUG FIX] eITS#150200331
Fix unexpected reboot related to packet processing.
24. [BUG FIX] eITS#140900194, 150600194
In some cases, user cannot get mails from external mail server through USG.
25. [BUG FIX] eITS#150200355
When we set speed on port1, the traffic doesn't work and show some abnormal message.
26. [BUG FIX] eITS#150600082
The CF report in monitoring page and report server record not match.
27. [BUG FIX] eITS#150600688
In some cases, DUT will crash when trying to establish L2TP.
28. [BUG FIX] eITS#150501015
In some cases, enable connectivity check in policy route rules may cause zyshd daemon dead.
29. [BUG FIX] eITS#150600137
In some cases, AV signature cannot be successfully updated.
30. [BUG FIX] eITS#150700094
Self-Signed DSA certificate can be created but cannot show on the GUI.
31. [BUG FIX] eITS#150300324
In USG110, USG210 and ZyWALL 110, DUT will become pure switch in a short period during booting process. When external AP and USG reboot at the same time, there might have possibility that AP will acquire IP address from outer DHCP server instead of DUT LAN DHCP server.
32. [BUG FIX] eITS#150600585
Wrong German translation, Intra-BSS-Verkehr aktivieren should be corrected to Intra-BSS-Verkehr blockieren
33. [BUG FIX] eITS#150200663, 150500327
Some mails with attached files transferred from WAN to LAN cannot be received while Anti-Spam enabled.
34. [BUG FIX] eITS#150100252
TFTP over IPsec cannot work well in the following topology.
TFTP Server---------USG40/60=======VPN tunnel========USG20------TFTP Client
35. [BUG FIX] eITS#150100898
After Device HA fallback to Master, IP on VLAN interface become 0.0.0.0.
36. [BUG FIX] eITS# 150500371
3G dongle E372 cannot work well in ZLD 4.11 Firmware.
37. [BUG FIX] eITS# 150200205
Some session will hit wrong BWM rules with application service type and application object is not any.
38. [BUG FIX] eITS# 150200080
ZyXEL VPN Client cannot establish VPN tunnel when using DUT default certificate to do IKE authentication.
↧
↧
airprint
My Zyxel 20W has LAN1 and Wlan set up. Both function well. The Wlan connections include several Ipads, which uses Airprint for printing. My Brother 8850 All in One, which supports Airprint, is connected via ethernet to the 20W. The Ipads on the Wlan do not see this printer, I am guessing it has to do with it not being broadcast from LAN1 to Wlan. Is there any setup on the 20W that would allow Airprint to function on the Wlan?
↧
Zyxel Info Video
I had a quick boo on these and they could be quite useful for some.
It doesn't go too deep but helps explain many basics.
https://www.youtube.com/playlist?list=PL4shE4BIxj6FtzgB7LiKcW4l4oqC4C00S
↧
Should I upgrade my USG50?
At the end of this year it will be five years since I first put my USG50 into service, and even though it continues to work very well, I'm considering getting something newer simply because the hardware is getting old and I suspect ZyXEL will stop providing firmware updates in the near future (if not already). I realize that we've discussed some negatives like firmware quality issues here, but this USG50 has been a very reliable part of my SOHO network for a long time. Basically, it has been incredibly solid and the only time I have to reboot the thing is for power outages and firmware upgrades (current uptime is about 6 months since I installed firmware 3.30(BDS.7).
The obvious choice for an upgrade would be a USG60. I'm familiar with the architecture, it has the capacity to handle future internet speed increases, it's small, fanless/silent, low power, rack-mountable, and I can apparently even convert my USG50 configuration file to work with it (http://www.zyxel.com/us/en/promotions/USG-Configuration-Converter-20130829-760081.shtml). That being said, I am willing to consider other solutions if they are a better option.
My main criteria:
-handle 2 WAN connections (150 Mbps cable & 3 Mbps DSL) in some sort of a failover mode
-support a SOHO environment for small business needs (reliable, heavy VPN usage) and residential needs (gaming, video streaming, etc.)
-stable with good performance (i.e. months of uptime)
-small, rack-mountable, fanless, quiet
-UTM functionality is not important
-cost is a factor, but even the USG60 is not cheap ($372 USD at amazon.com)
-ideally support IPSEC/SSL VPN functionality
-periodic firmware updates to address security, performance, and functionality enhancements (preferably without a paid subscription)
I originally replaced an old Xincom for the same reasons years ago and first tried pfSense for a few months. While the software was very good, I was never able to cobble together hardware that met the above criteria. I ended up with the USG50 and have been happy with it for 5 years now. It looks like I can get the USG60-NB hardware-only for about $372 at amazon and about $360 after 12% coupon at overstock.com. That seems a bit pricey to me, but I would be willing to pay that for five more years of rock solid performance.
That being said, is there anything else I should be looking at?
Thanks!
↧
Zywall and IP camera
Hello everybody !
I have an easy problem for you guys, and it's driving me nuts !
I have a pretty complete network connected to a Zywall USG 60. I have already configured multiple Wan IPs, multiple NAT rules and multiple firewall rules... but I am stuck with this basic problem :
I have a IP camera on lan1 with address 192.168.4.10. I have a Synology NAS on the DMZ with the address 192.168.3.4. I am trying to connect the two together.
I have created the following firewall rule : From DMZ, to LAN1, any IPV4 source (I could set it to DMZ-Subnet or even the IP of my Synology), IPV4 Destination is the IP camera, accepting any services. So for example, from a server also in the DMZ, I can ping my IP camera and I can open IE and stream the video by typing http://192.168.4.10. But the Synology still cannot connect to it ! If I disable the policy control, it works ! So my rule above is not working for the sinology, but it working for my other machines on the same subnet. I'm going nuts.
I am really stuck and would really appreciate your help.
Stephane
↧
↧
USG 50 USB Ports for Apple Time Machine
I would like to plug an external hard drive into one of my Zyxel USG 50's two USB ports to use as a Time Machine back up for my Apple iMac.
When I plug the external hard drive into the USG 50, my iMac cannot find the hard drive. I have enabled USB storage through the Zyxel portal. The external hard drive is formatted as HFS+, as that is Apple's standard. I have not been able to verify if Zyxel supports HFS+, at least for the USG 50, but I did see that some of the media servers support HFS+
Can I make this work?
Thanks in advance!
↧
USG 110 - Port Forwarding Problems - Please Help
Hi,
I have a Mac Mini running OS X Server that I am in the process of setting up. There are a whole bunch of ports that need to be opened for various services.
I have read various documentation and watched numerous videos on setting up the NAT and firewall rules on this device. I've done everything as instructed but none of the ports are opening. I've tried various port checker websites. Not sure what I am doing wrong but I've a feeling it has something to do with the firewall rules. I still have all the default firewall rules in place using firmware version 4.13. Then I have just added my firewall rule which has placed itself at priority 1.
The ports I am trying to open are as follows:
Server Administration: TCP Ports 311 & 625
Screen Sharing: TCP & UDP Ports 5900 & 3283
File Sharing: TCP Ports 139 & 548
Profile Manager: TCP Ports 80, 443, & 1640
Messages: TCP Ports 5222, 5223, 5060, 5269, 7777 UDP Ports 16384-16388
VPN: TCP Port 1723 UDP Ports 500, 1701, & 4500
Websites: TCP Ports 80 & 443
Open Directory: TCP & UDP Ports 636 & 389
FTP: TCP 20 & 21
SSH: TCP 22
AFP: TCP 548
For each item here I have created a service object. If there is more than one service object for an item then I have created a service group object for those services. Then I have made an overall ALL SERVER PORTS group object and added the various service/service group objects to it. This ALL SERVER PORTS is what I am using in my single firewall rule.
The firewall rule is as follows:
Enable: Yes
Name: SERVER
From: WAN
To: LAN1
Source: WAN1_IP (Address object pointing to the interface IP on wan1_ppp)
Destination: SERVER (Address object pointing to host IP address on local network)
Service: ALL_SERVER_PORTS
User: Any
Schedule: None
Action: Allow
Log matched traffic: No
This rule is at priority position 1 on the rule list.
Then I have a NAT rule which is as follows:
Enable: Yes
Name: SERVER
Classification: Virtual Server
Incoming Interface: wan1_ppp
Original IP: WAN1_IP
Mapped IP: SERVER
Port Mapping Type: Service Group
Original Service: ALL_SERVER_PORTS
Mapped Service: ALL_SERVER_PORTS
Enable NAT Loopback: No
This is my only NAT rule.
From what I have read online or watched in videos, this should all be correct. But the ports aren't opening and my services on my server are not working as a result.
Any help would be greatly appreciated.
Damien
↧
USG 50 How to make a L2TP/IPSec server?
Im trying to make a L2TP/IPSec server with a Pre shared key that my clients can connect to remotely access our LAN on a USG 50
The thing is that I have no idea why Zyxel make this so difficult to do. Really should be as simple as possible.
Im seeing I cant integrate my Active Directory users so I guess Ill have to manually make users...
I disabled my firewall on the ZyXEL to see if it is a firewall issue but no. The logs show me that the client arrives but it never connects.
Something simple so I can configure this?
↧
Trafic shaping for site-to-site IPSec VPN (Zyxel USG 100 to Cisco PIX 501)
Hello to everyone,
I have successfully managed to connect these two devices, thou it has been admittedly much harder on the PIX side.
However, I'm facing an issue due to the asymmetric connection. The side with USG 100 has a 50/50 MB/s but the PIX side has 8/2 MB/s (D/U). Since the PIX 501 is limited to the Software versions 6.3(4), it does not contain any traffic shaping possibilities I have to shape it on the Zyxel USG 100's side.
I have found out in configuration/routing where I have configuration for the packets tunnel to have an advanced property BMW. However, when I tried it did not influence the speed. Is this the proper way to do it? What do I need to switch on to have the traffic shaped? Are there any examples for this IPSec VPN asymmetry shaping?
Thank you.
↧
↧
USG40 contacting MyZyxel.com? Why?
After the new firmware update I notice once a day in logs the following entry in the accompanying image. Why is this trying to contact Zyxel everyday?
↧
ZyXel USG40 - Multiple IP Ranges for L2TP VPN
Hello Everybody,
I successfully set up IPSec/L2TP Configuration with the Help of Brano's Configuration Tutorial as well as the integrated Wizard for Creating VPN Connections (Client to Site).
I am now wondering if it is possible to add a second VPN connection for different users.
The overall goal is to have:
- One VPN connection that can be accessed by Active Directory users, which will be in a IP Range that is able to access the whole internal network
- One VPN connection that can be accessed by locally created (or maybe a different AD group?) users, that have only access to a certain server/IP (or IP Range).
Is this even possible?
Another side question, what I did not understand yet: The users, that are allowed to connect, are defined in L2TP, right? So when keeping L2TP disabled, but with a set up IPSec Connection/Gateway (Pre shared key), is it possible to connect from the outside with no username/password? I do not want "anonymous" connects with pre-shared key only and I am uncertain if this might be possible somehow.
Best regards,
Mario
↧
Meter Internet usage with USG?
Have an application where I need to cut off Internet access for a network segment (or subnet/range) each day after a pre-set amount of throughput/usage.
I know the USG routes will measure traffic through an interface, but I can't find a way to disable/cut it off after it hits a preset limit. For example: LAN1 gets 1GB combined upload/download per 24 hour period, from midnight to 11:59:59. After the limit is hit, the router cuts off connectivity until the reset at midnight.
Ideas?
↧
ZyWALL 5 - Proxy DNS
I've noticed that ZW5 Proxy DNS never replies for DNS resolution requests from local computers.
What is wrong with its configuration?
Current settings:
Advanced | DNS | DHCP | DNS Servers Assigned by DHCP
First DNS Server = DNS Relay
Advanced | DNS | System | Name Server Record
[att=1]
ZyWALL 5: Firmware Version V4.04(XD.9) | 01/26/2011
Debugging done using Acrylic DNS Proxy installed on one of my computes.
--
Keep it simple, it'll become complex by itself...
↧
↧
home network setup configuration issue - ASUS router with Zywall usg20w
My setup is as follows. i have Timewarner cable Zyxel modem then connected to that is ASUS wireless router RT-AC68P setup to handle as first router. i have my xbox's x 3 connected to this router and PS 3 because of the UPNP because zywall does not have UPNP. then the zywall is connected to LAn port on the asus from its LAN1 port ( wan port on zywall not being used). then from port 2 on the zywall is connected to a Cisco gigabit switch with desktop pc's and other devices such as dlink camera ( i want to secure that cam as much as possible).
the actual configuration is not working as i planned.
network config:
Asus router handles DHCP requests with 25 address pool.
ASUs router address is 192.168.1.1 and the Zywall i setup on LAN1 setup as 192.168.1.3 or 2 i think then i set the DHCP pool to start from 192.168.1.3. Dhcp is turned off on the Zywall LAN1 configuration.
the issue i am having is connecting to the GUI interface of the zywall via ip address form my desktop that is connceted to the switch that is connnected to the Zywall? cant figure this out. I can connect to the ASUS router no problme via ip address but not the Zywall. i only connect to the zywall when i disable the desktop ethernet card and turn on the other ethernet card i have installed on desktop in which case that port gets a dhcp address from the zywall hence why i can login via this adapter on the desktop.
the other thing is should i disable the firewall on the ASUS router and just use the Zywall for all of the devices connected to zywall
do i have the cables connected properly from the ASUS router to the zywall, the zywall is not handling the ISP handshake so i would not think so.
also i setup bridge mode on the zywall including members of the WAN1, LAN1 and WLAN1 so the i can see computers from the WLAN1 to LAN1 i think the WAN1 should be taken out?
If anyone assist with a breakdown of how I should configure this setup greatly appreciated.
↧
USG40W open outgoing ports
I am new to this router, and I have been all ove rthe web for several day snow but cannot figure it out. How do I open outgoing ports? I want to open ports 443 and 9003 for TCP.
↧
ZyXEL NWA1100-N Firmware Recovery
NWA1100-N failed and I need to perform firmware recovery via internal Serial Port. U-Boot works OK.
----------------------------------------------------------
U-Boot 1.1.4 (Jan 11 2011 - 18:46:16)
PB93 (ar7241 - Virian) U-boot
DRAM:
sri
#### TAP VALUE 1 = 0x2, 2 = 0x2 [0x75555155: 0x55777577]
64 MB
id read 0x100000ff
flash size 8MB, sector count = 128
In: serial
Out: serial
Err: serial
Net: ag7240_enet_initialize...
No valid address in Flash. Using fixed address
eth0: 00:03:7f:09:0b:ad
ATHRF1E: Port 0, Negotiation timeout
eth0
----------------------------------------------------------
Does anybody know parameters for three below U-Boot commands?
# Get an image from tftpserver
ar7240> tftp
# Erase flash memory
ar7240> erase
# Write the image to flash memory
cp.b
Firmware file: 1.00(UJG.4)C0.img 5,818,617 bytes
Any help would be appreciated.
Regards,
Jerzy
↧