Best Of
USG Flex - ALL. Username limit too short and \ character restriction.
Using L2TP VPN on Flex 200 (situation is the same with all Flex and previous USG range). We specifically DO NOT want to use RADIUS as not all VPN users are allowed to "see" AD - e.g. remote monitoring of CCTV or engineering machine monitoring/management.
Take the (fictitious)example of:
On prem AD and Exchange server, email domain name "@coilwindingtech.co.uk"
AD domain is UK1.coilwindingtech.co.uk, a user logon name (UPN) is christopher.rushland@coilwindingtech.co.uk or uk1\christopher.rushland
We cannot use either of those user names in Flex as Flex has a maximum of 31 characters in the user name and also does not support use of a backslash in the username, so we have had to set a different user name or truncate it.
Why this is a problem: The user connects the L2TP VPN successfully, then launches Outlook (2019 - which has all been set up and working whilst his laptop was in the works office). By default, Microsoft (Outlook) now attempts to authenticate to Exchange using the credentials that were used to connect the VPN instead of using the correct credentials that should have been cashed. User does not notice the name entered on the Outlook credential prompt so just types the password he knows is correct, but Outlook still refuses to connect, so he types the password once more and this time, his AD account is locked due to the account lockout threshold (needed security). There is a fix for this which is to edit the rasphone entry on the laptop and tell it not to use the VPN credentials for authentication to any other app.
(Quote: Go to %username%\AppData\Roaming\Microsoft\Network\Connections\PbkOpen file rasphone.pbk with notepadChange value of "UseRasCredentials" 1 to 0)
Easy enough when you have just a few remote users, but when you have many, it becomes a problem.
I suggest (and request) the proper fix would be (since Microsoft won't change their coding) to increase USG Flex user name limit to 48 or 64 characters and/or allow the use of the backslash character in usernames. Then user's AD user name can be used for their Flex user name too (where appropriate) and the problem will go away.
Thoughts anyone?
Re: NWA130BE - Country Code Change
Hi @Arnette99
The default country code displayed with the psm atsh
command corresponds to the device standard. For instance, "FF" represents the US standard, while "E1" denotes the European standard.
However, the radio country code broadcasted due to the 802.11d feature is tied to the radio country setting configured in Nebula CC > Site-wide > Configure > Access Points > Radio settings. For instance, if you set the country to Canada, upon capturing wireless packets, you should observe the country code "CA" information being transmitted.
Re: NBG7510 running V1.00 (ABZY.6)C0 not showing all my devices anymore. Why?
Hi @tonygibbs16
Could you send us the configuration file and the login password in private messgae, we would like to check if there is any difference of the configuration.
Re: Why is the forum not showing the correct badges for customers and Zyxel employees?
Hi @tonygibbs16
Thank you for bringing this to our attention!
I agree with your point that it’s important for others to have accurate information, especially regarding the poster's tenure and contributions to the community.
Upon investigation, we've identified that while badges are correctly assigned and displayed on the user profile page, there seems to be a glitch in how they appear on the post or comment interface. Currently, it only reflects the first four badges acquired by the user.
Rest assured, we've escalated this issue to the relevant team to explore the possibility of enhancing the system to display the latest four badges acquired by users.
We'll keep you updated on any progress made in resolving this matter. Thank you once again for your patience and understanding.
Re: Android devices cannot connect to the WiFi
Hi @Aurélien ,
If other clients are successfully connecting to the SSID but Android devices are having trouble, please consult this article for troubleshooting guidance.
Re: Firmware Update VMG3006-D70A Problem
It's not the browser's fault.
Tested with: Chrome, Firefox, Waterfox, Edge.