Topic 'USGs firmwares' in forum 'ZyXEL' - dslreports.com

Re: USGs firmwares

Wed, 11 Apr 2012 12:43:38 EDT

jasonemmg posted : Maybe its my browser settings. I cannot download the updated firmware using Firefox or IE..

Re: USGs firmwares

Wed, 11 Apr 2012 01:09:03 EDT

Gork posted : Were you trying to follow the ftp links? If so, try their downloads web site. For US it's at:
»us.zyxel.com/Support/Download-Library.aspx

Re: USGs firmwares

Tue, 10 Apr 2012 11:40:38 EDT

jasonemmg posted : I have tried following links to download the latest firmware for the
USG 100.

Why can I not open any of the links using FF,IE or Filezilla?

Jason

Re: USGs firmwares

Thu, 29 Mar 2012 09:37:09 EDT

Gork posted : Took the bait, unsurprisingly enough, no apparent problems on my 20W.

Re: USGs firmwares

Wed, 28 Mar 2012 08:54:43 EDT

superataru posted : ... USG50 to 3.00BDS1 ... mumble mumble...

Re: USGs firmwares

Wed, 28 Mar 2012 08:31:11 EDT

Gork posted : fwiw It's available via the US web site now.

Re: USGs firmwares

Tue, 27 Mar 2012 10:15:04 EDT

whisper1 posted : [BUGFIX] SPR:120221266
Symptom:
USG20/20W SIP ALG cannot work.

I think this has just fixed an issue I have been having with SIP.

W.

Re: USGs firmwares

Tue, 27 Mar 2012 05:40:46 EDT

Gork posted : Not yet available via the US web site. (I'm sure it is via ftp but I didn't check.) Does the fact they released an update so quickly signify it is an important update to apply? Even with only the single fix?

EDIT:
After checking the ftp site I see the PDF document included with the download also indicates:

quote:
[BUGFIX] SPR:120221266
Symptom:
USG20/20W SIP ALG cannot work.

Re: USGs firmwares

Mon, 26 Mar 2012 21:24:38 EDT

Brano posted : Thanks for the info.

There's only one fix in the .1 patch for USG50

quote:
[BUGFIX] SPR:120213426
Symptom:
ZyWALL 3.00 USG [coredumpApp] radiusd daemon dead!!

Re: USGs firmwares

Mon, 26 Mar 2012 11:07:20 EDT

logman posted : Whee new ZYWALL USG 20W_3.00(BDR.1)C0.zip firmware

Re: USGs firmwares

Mon, 26 Mar 2012 10:48:26 EDT

anon posted : Superataru,

I had the duplicate IP problem for the SSL VPN secuExtender also. I solved it by creating a pool of IP addresses separate from normal DHCP (Config-Object-Address), but still on the same subnet of course. I then used this pool for use with the SSL VPN (In VPN config, Assign IP Pool, select pool of addresses created).

I'm not sure if this setup is by design or a bug, but the steps above work.

Re: USGs firmwares

Sun, 25 Mar 2012 05:56:10 EDT

superataru posted : Finally i solved for my HQ USG100s. The only 2 units with problems (our customers' devices upgraded fine...).
I had back cutomized .conf files, from my original one, from Taiwan.
Anyway i had to make from the beginning:

- SSL-VPNs (once authenticated from AAA Radius ... device turned roaming users to UserAware ...);
- Application Patrol Rules (they where at basic setup configuration).

One problem is still unsolved: sometimes, device, provides duplicate ip addresses to different secuExtender nics.
I have to force the logout for all 5 users to workaround the trouble. :mad: :mad: :mad: :mad:

Until it won't be solved i will not buy 5->25 SSL licences.

CYA

Re: USGs firmwares

Mon, 05 Mar 2012 19:04:59 EDT

meowBB posted : The L2TP works with iOS now.

The symptom:
1. Upgraded from 2.2AQU6 to v3 (config file is translated by the firmware upgrade process)
2. L2TP using iOS (iPhone for my case) will authenticate but the connection will get disconnected right the way.

The cause:
The L2TP password (not the "shared secret") is messed up by the v3 upgrade config translation. After I re-typed the password in the USG gui and applied the changes, the iOS L2TP works beautifully.

Re: USGs firmwares

Mon, 05 Mar 2012 14:04:46 EDT

Brano posted : One last thing, watch the boot process via RS232 console. If there are errors, they're dumped here and will give you valuable hints what went wrong.

Re: USGs firmwares

Mon, 05 Mar 2012 14:01:26 EDT

meowBB posted : Thanks for the suggestion and I will try it out tonight. Yes, you are right, the most time consuming part is the DHCP reservations. I will try the cut and paste.

Re: USGs firmwares

Mon, 05 Mar 2012 13:55:53 EDT

Brano posted : My 2 cents on all broken upgrades mentioned here:
Yes, the upgrade went wrong and your unit is malfunctioning ... bad job ZyXel on the upgrade routines. Yes, it's PITA.
However, in my personal experience the new FW usually works and rarely breaks something, if you experience issues after upgrade and want to move to new FW anyway reset to defaults and reconfigure manually from scratch ... again yes, it's PITA but 99% of the time this works. With USG you can significantly simplify this as the config is text file and you can cut it to smaller portions so you don't have to do everything by hand from scratch i.e. DHCP reservations can be curved out to separate .conf file and then easily applied (thus merged with your new config). Once completely done make sure you backup your config to separate file so you can revert to it later (use the Copy function in the USG file manager).

Re: USGs firmwares

Mon, 05 Mar 2012 13:48:16 EDT

meowBB posted : Thanks for the info. I compared them too and they are identical. But I can't use this version as LT2P vpn is broken with iOS.

Re: USGs firmwares

Mon, 05 Mar 2012 13:01:15 EDT

superataru posted : Hot water ... burns ... :-)
When i made post, there were only those 3 versions.
Bye.

Re: USGs firmwares

Mon, 05 Mar 2012 12:59:54 EDT

superataru posted : Hi all.
Actually two USG50 updated without problems.
No USG100 updated till ZYXEL will test some problems i got with my own HQ's USGs ..
Always a crash. I went back to 2.20 AQQ.6.
Also loaded default kernel for 2.20AQQ.6 and had an other update ...
From console, one of these ..

---------------------------
FLASH: AMD 16M
BootModule Version: V1.12 | 11/17/2009 18:05:22
DRAM: Size = 256 Mbytes

Kernel Version: V2.6.25.4 | 2012-02-11 02:59:16
ZLD Version: V3.00(AQQ.0) | 2012-02-17 18:19:12

Press any key to enter debug mode within 1 seconds.
.....................
Start to check file system...
/dev/hda2: 48/18216 files (2.1% non-contiguous), 53396/72704 blocks
/dev/hda3: 120/43296 files (10.0% non-contiguous), 50471/173056 blocks
Done

INIT: version 2.86 booting
Setting the System Clock using the Hardware Clock as reference...System Clock set. Local time: Thu Mar 1 13:55:23 GMT 2012
INIT: Entering runlevel: 3

Starting zylog daemon: zylogd zylog starts.
Starting syslog-ng.
Starting ZLD Wrapper Daemon....
Starting uam daemon.
Starting App. Patrol Daemon.
Starting periodic command scheduler: cron.
Start ZyWALL system daemon....

---------------------------------------------

mmmm
........
Got LINK_CHANGE
Port [2] Copper is up --> Group [2] is up
.........................................

..................................................

..................................................

.
Applying system configuration file, please wait...

..............................[coredumpApp] zyshd daemon dead - core dumped!(2012-03-01-15-00-19-3.00-AQQ.0-)
zysh daemon is terminated at Thu Mar 1 15:00:20 2012
by signal: Aborted
command function history:
0x10240f68 argc:7 args:thunder rule append 1 access drop
0x10240f68 argc:6 args:thunder rule append 1 log
0x10240f68 argc:6 args:thunder rule append 1 exit

----------------------------------------------------

Re: USGs firmwares

Mon, 05 Mar 2012 09:49:01 EDT

anon posted : More V.3's are up on the ftp2 site -- USG200 is here:
»ftp://ftp2.zyxel.com/ZYWALL_USG_200/firmware/

I upgraded a USG200 overnight and had no trouble with site to site VPN's reestablishing their links, etc. Very smooth upgrade.

Re: USGs firmwares

Mon, 05 Mar 2012 07:52:50 EDT

Brano posted :

said by meowBB:

said by Brano:

Few posts above, get it from our Hungarian ZyXEL friends »www.zyxel.hu/download/zld3/

But is it official release version?

I've compared the bin files from the Hungarian and US sites and they're are identical.

Re: USGs firmwares

Sun, 04 Mar 2012 10:59:09 EDT

kacompton posted : Thanks

Re: USGs firmwares

Sun, 04 Mar 2012 10:57:34 EDT

Otto58 posted : I would try the right USG20W firmware:

»ftp://ftp2.zyxel.com/ZYWALL_USG_20W/firmware/

Re: USGs firmwares

Sun, 04 Mar 2012 10:54:12 EDT

kacompton posted : Will this USG 20 firmware work on a USG 20 W the one with wireless built in?

Re: USGs firmwares

Sun, 04 Mar 2012 10:13:42 EDT

Otto58 posted : We in Germany need IGMP v3 for IP-TV with our Telekom.

If You will use VDSL, You get a simple Modem-Router-Switch from the Telekom. At the Switch You connect the Telekom-MediaReceiver and the rest of your LAN. This simple Modem-Router-Switch is able to deal with Multicast and IGMP v3.

I use the Modem-Router-Switch only as Modem and the Router-Switch is a USG20 just to have a little bit more fun and some more capabilities.

Sometime I must change to IP-TV, because it will have more HD-TV as cable TV. I hope this is not the end of the fun with my USG20 (without IGMP v3).

Some people put expensive Switch in the LAN to solve this problem (I have read!), other hope the USG will have IGMP v3 sometime and other hope Telekom offers IPv6 in the near future.

Re: USGs firmwares

Sun, 04 Mar 2012 08:54:50 EDT

Brano posted : This is expected with 3.0 to 2.2 downgrade. Passwords in 2.2 and below are stored as plaintext in conf file however they are encrypted in 3.0. Thus when you downgrade you have to re-apply your 2.20 config.
Otherwise the unit grabs the hashed password and sends it to ISP (I guess).

I'm curious, what you need IGMP v3 for?

Re: USGs firmwares

Sun, 04 Mar 2012 00:33:26 EDT

Otto58 posted : "Yes, with USG it's very easy to revert back to any saved config."???

Yes, if You have the right browser / operating system combination (Windows 8 / Firefox is ok) or one operating system and more browsers.
If You use PPPoE, it is very important to cut the WAN cable, because during the downgrade (3.00 -> 2.21) the login password may be destroyed. The downgraded router tryes to login and the provider locks You out.

And please let Zyxel know, that I need IGMP v3.

Re: USGs firmwares

Sat, 03 Mar 2012 22:50:09 EDT

claykin posted : Who is on the Zyxel beta team that can let them know they need to wake up and smell the x64 coffee?

EPS is a good feature but is otherwise rendered useless for anyone operating with reasonably current hardware.

Re: USGs firmwares

Sat, 03 Mar 2012 17:16:08 EDT

Brano posted : Yeah, I've telnet off to. RS232 console is the fall back if everything else fails.

Re: USGs firmwares

Sat, 03 Mar 2012 16:25:05 EDT

Anav posted : Why telnet, which I have turned off incase stray dogs come into my house with a console cable ;-P

Re: USGs firmwares

Sat, 03 Mar 2012 11:38:26 EDT

Brano posted : Yes, with USG it's very easy to revert back to any saved config.
I have multiple 2.2 and 3.0 configs saved.
If anything goes wrong let's say you want to downgrade from 3.0 to 2.2 (assuming you have 2.2 config saved) just flash 2.2 firmware, reset the unit to defaults, login via telnet or console and apply your saved config

Router(config)# apply /conf/startup-config-backup-220.conf

Re: USGs firmwares

Sat, 03 Mar 2012 10:09:46 EDT

Anav posted : Glad I did a last known config save before upgrading.

Re: USGs firmwares

Sat, 03 Mar 2012 02:01:08 EDT

meowBB posted : LT2P for iOS stopped working after upgrading to v3 (USG200). It will authenticate then disconnect right the way. The web interface will hang after few LT2P connection using iOS. :(

Reverted back to 2.2.

Re: USGs firmwares

Fri, 02 Mar 2012 23:35:46 EDT

SlickEnW posted : Um I just put this on my USG20 and don't like what I see. Will probably hold off on my USG50 for a while maybe just ditch it and get a sonic wall. This is on safari.

wtf coffee break?

Re: USGs firmwares

Fri, 02 Mar 2012 21:10:25 EDT

Brano posted : Seems to be

quote:
3.00(AQU.0) / 2012-02-17 16:50:38

You can always compare the .bin files once it shows on US ftp servers.

I would not worry that this is some kind of fake, USG firmwares are zipped with very strong password. The zld_fsextract update command then verifies the zip and unzips is before applying the update. For somebody to fake the firmware they must know how to generate the proper password (each update has different password) ... just watch console output during update if you're curious.

Re: USGs firmwares

Fri, 02 Mar 2012 21:01:25 EDT

meowBB posted :

said by Brano:

Few posts above, get it from our Hungarian ZyXEL friends »www.zyxel.hu/download/zld3/

But is it official release version?

Re: USGs firmwares

Fri, 02 Mar 2012 20:42:12 EDT

Brano posted : Few posts above, get it from our Hungarian ZyXEL friends »www.zyxel.hu/download/zld3/

Re: USGs firmwares

Fri, 02 Mar 2012 19:42:00 EDT

meowBB posted :

said by Brano:

I've just upgraded my USG200 and everything seems to be working after 5 minutes ...hoping it will stay this way ;)

I don't see the the v3 firmware for USG200 in the ftp site.
»ftp://ftp2.zyxel.com/ZYWALL_USG_200/firmware/

Are you using the beta?

Re: USGs firmwares

Fri, 02 Mar 2012 19:08:07 EDT

Zemplar posted : Another USG 20W upgraded w/o any observed issues. Time will tell how useful IPv6 support will be (enabled manually).

Re: USGs firmwares

Fri, 02 Mar 2012 17:12:58 EDT

Brano posted :

said by polarisdb:

said by claykin:

Anyone know if the Endpoint Security (EPS) check now supports checking x64 Windows OS? In V2.x of Zynos x64 OS would walk right by the security check.

It doesn't sound like it according to the release notes:

EPS (Endpoint Security)
1. [SPR: 090805245]
[Symptom] PC OS is 64 bits. EPS always fail when checking Firewall, Anti-virus and Windows auto update.
We current not support EPS on Windows 64bit Operation System.

Yeah, this day and age this really sucks.

Re: USGs firmwares

Fri, 02 Mar 2012 15:38:06 EDT

Brano posted : I've just upgraded my USG200 and everything seems to be working after 5 minutes ...hoping it will stay this way ;)

Re: USGs firmwares

Thu, 01 Mar 2012 17:55:44 EDT

stefaanE posted :

said by Anav:

Upgraded USG100, no issues thus far.

Did the same, running without issues for more than a day now. I enabled IPv6, but my ISP seems to support IPv6 only only their own router (Fritzbox).

Stefaan
--
"Technically, Windows is an 'operating system,' which means that it supplies your computer with the basic commands that it needs to suddenly, with no warning whatsoever, stop operating." -Dave Barry

Re: USGs firmwares

Wed, 29 Feb 2012 16:48:07 EDT

polarisdb posted :

said by polarisdb:

Just bit the bullet and had a clean upgrade of my USG 50 from 2.21 (BDS.5) to 3.0. I haven't tested any of the VPN stuff out, but basic functionality and WAN failover seem to be working just fine.

VNC, RDP, and a URL application are all working fine with the SSL VPN for me. My remote access IPSEC VPN connected with no issues using the Shrewsoft client, but I'm not able to ping or ssh to LAN1 addresses anymore but VNC was working fine. I wonder if my policy route that worked with 2.2 isn't 3.0 friendly? I don't have a site-to-site setup, so I can't confirm the bug that others have been seeing.

Re: USGs firmwares

Tue, 28 Feb 2012 10:25:02 EDT

Gork posted : lol And second requested 3.01 feature - update dydns every 28 days so free accounts aren't closed every month.

Re: USGs firmwares

Tue, 28 Feb 2012 07:38:56 EDT

polarisdb posted :

said by Anav:

First requested 3.01 feature, make NEVER an option for the nag screen LOL. Upgraded USG100, no issues thus far.

It would be nice even if that could be toggled off at the CLI.

Re: USGs firmwares

Tue, 28 Feb 2012 07:22:32 EDT

Anav posted : First requested 3.01 feature, make NEVER an option for the nag screen LOL. Upgraded USG100, no issues thus far.

Re: USGs firmwares

Tue, 28 Feb 2012 01:33:10 EDT

Gork posted :

said by claykin:

Am I the only one that believes EPS is worthless without 64 bit OS support?

Well, not necessarily worthless I'd think - but certainly shows a lack of understanding or caring about the direction the market is going.

I took the plunge and upgraded the f/w on my 20W. No issues so far, other than some weird GUI issues I attribute to IE caching problems. I've ironed those out now, I think.

said by JimThePCGuy:

Looks like I will be receiving nag screens on those subscription services I never signed up for.

Yeah, boo! :(

Re: USGs firmwares

Tue, 28 Feb 2012 00:02:23 EDT

claykin posted : Am I the only one that believes EPS is worthless without 64 bit OS support? How many people live in an entire 32 bit world and have only 32 bit guests visiting and connecting to their LAN?

said by polarisdb:

said by claykin:

Anyone know if the Endpoint Security (EPS) check now supports checking x64 Windows OS? In V2.x of Zynos x64 OS would walk right by the security check.

Re: USGs firmwares

Mon, 27 Feb 2012 12:11:07 EDT

polarisdb posted : Just bit the bullet and had a clean upgrade of my USG 50 from 2.21 (BDS.5) to 3.0. I haven't tested any of the VPN stuff out, but basic functionality and WAN failover seem to be working just fine.

Re: USGs firmwares

Mon, 27 Feb 2012 10:27:03 EDT

ZyXEL30 posted : Hi agian if someone want to see the new ZyXEL firmware for USG - ZLD 3.0. just look look this link: »www.zyxel.hu/download/zld3/