dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
7969
share rss forum feed


Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON
kudos:11
reply to meowBB

Re: USGs firmwares

One last thing, watch the boot process via RS232 console. If there are errors, they're dumped here and will give you valuable hints what went wrong.


meowBB

join:2002-01-21
Hayward, CA
The L2TP works with iOS now.

The symptom:
1. Upgraded from 2.2AQU6 to v3 (config file is translated by the firmware upgrade process)
2. L2TP using iOS (iPhone for my case) will authenticate but the connection will get disconnected right the way.

The cause:
The L2TP password (not the "shared secret") is messed up by the v3 upgrade config translation. After I re-typed the password in the USG gui and applied the changes, the iOS L2TP works beautifully.


superataru

join:2004-12-07
Kearny, NJ
reply to superataru
Finally i solved for my HQ USG100s. The only 2 units with problems (our customers' devices upgraded fine...).
I had back cutomized .conf files, from my original one, from Taiwan.
Anyway i had to make from the beginning:

- SSL-VPNs (once authenticated from AAA Radius ... device turned roaming users to UserAware ...);
- Application Patrol Rules (they where at basic setup configuration).

One problem is still unsolved: sometimes, device, provides duplicate ip addresses to different secuExtender nics.
I have to force the logout for all 5 users to workaround the trouble.

Until it won't be solved i will not buy 5->25 SSL licences.

CYA


SuperTechie

@comcastbusiness.net
Superataru,

I had the duplicate IP problem for the SSL VPN secuExtender also. I solved it by creating a pool of IP addresses separate from normal DHCP (Config-Object-Address), but still on the same subnet of course. I then used this pool for use with the SSL VPN (In VPN config, Assign IP Pool, select pool of addresses created).

I'm not sure if this setup is by design or a bug, but the steps above work.

logman

join:2012-02-22

1 recommendation

reply to superataru
Whee new ZYWALL USG 20W_3.00(BDR.1)C0.zip firmware


Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON
kudos:11

1 edit
Thanks for the info.

There's only one fix in the .1 patch for USG50

quote:
[BUGFIX] SPR:120213426
Symptom:
ZyWALL 3.00 USG [coredumpApp] radiusd daemon dead!!



Gork
Ou812ic

join:2001-10-06
Bountiful, UT

2 edits
Not yet available via the US web site. (I'm sure it is via ftp but I didn't check.) Does the fact they released an update so quickly signify it is an important update to apply? Even with only the single fix?

EDIT:
After checking the ftp site I see the PDF document included with the download also indicates:

quote:
[BUGFIX] SPR:120221266
Symptom:
USG20/20W SIP ALG cannot work.

whisper1

join:2007-11-28
Schomberg, ON
[BUGFIX] SPR:120221266
Symptom:
USG20/20W SIP ALG cannot work.

I think this has just fixed an issue I have been having with SIP.

W.


Gork
Ou812ic

join:2001-10-06
Bountiful, UT
reply to Gork
fwiw It's available via the US web site now.


superataru

join:2004-12-07
Kearny, NJ
... USG50 to 3.00BDS1 ... mumble mumble...


Gork
Ou812ic

join:2001-10-06
Bountiful, UT
reply to logman
Took the bait, unsurprisingly enough, no apparent problems on my 20W.

jasonemmg

join:2012-04-10
Westbury, NY
reply to superataru
I have tried following links to download the latest firmware for the
USG 100.

Why can I not open any of the links using FF,IE or Filezilla?

Jason


Gork
Ou812ic

join:2001-10-06
Bountiful, UT
Were you trying to follow the ftp links? If so, try their downloads web site. For US it's at:
»us.zyxel.com/Support/Download-Library.aspx

jasonemmg

join:2012-04-10
Westbury, NY
reply to jasonemmg
Maybe its my browser settings. I cannot download the updated firmware using Firefox or IE..