USG60 rebooting with WK30 fall back to LastGood

Options
mMontana
mMontana Posts: 1,300  Guru Member
First Anniversary 10 Comments Friend Collector First Answer
edited April 2021 in Security

USG60, 4.33 as standby firmware, 4.33 WK30 as default.

I edited the configuration:

  • Added a group of services
  • Changed a description of user3
  • Changed password of a user2
  • Changed groups for user1 and user2
  • Used a group of services for a Security policy

If i reboot with this "modified" configuration, the Firewall falls back to last good. Every time.

Now i rebooted on 4.33 for edit the configuration and try a reboot

Accepted Solution

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Sorry for the delay. After the issues for upgrade a couple of devices, I waited to visit premises of USG60.

    @Zyxel_Cooldia corrected the USG60 configuration for me about 5 weeks ago, and it run quite smoothly on 4.33WK30 until yesterday.

    I rebooted to standby 4.33 firmware, which went good. Then upgraded WK30 manualy to 4.35 quite flawlessly.

    And now: case solved.

All Replies

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    I forgot also the update/add of a IkeV2 gateway...

    After rebooting on 4.33, edit the configuration, added a Ikev2 gateway. Then rebooted on 4.33, without any issue.

    Rebooting to 4.33WK30, Ikev2 gateway disappeared.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Which failed blatantly.

    After editing the configuration, reboot on 4.33 (finding the correct configuration updated), the next reboot on 4.33 WK30 wiped all my edits. This is quite bad...

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,450  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @mMontana ,

    Can you send me your configuration file via private message? Let me have a quick test on your configuration file.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Done.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Any news?

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Problem is completely unrelated with the firmware. Configuration seems to have two or more malformed objects (IPSec Gateway, user) which are "trippin" the firewall during the reboot.

    I'll double check the setup for reboot test ASAIC.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Sorry for the delay. After the issues for upgrade a couple of devices, I waited to visit premises of USG60.

    @Zyxel_Cooldia corrected the USG60 configuration for me about 5 weeks ago, and it run quite smoothly on 4.33WK30 until yesterday.

    I rebooted to standby 4.33 firmware, which went good. Then upgraded WK30 manualy to 4.35 quite flawlessly.

    And now: case solved.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）