Zyxel USG FLEX H [Firewall] - Bootup Status Introduction on USG FLEX H Series Firewall

Comprehending the bootup status and configuration application process of USG FLEX H Series firewalls is critical for effective troubleshooting and maintenance. This guide offers a comprehensive overview of the bootup sequence, symbols used during the process, and methods to interpret various status indicators. 

Bootup Sequence

When you turn on a USG FLEX H Series firewall, it goes through a set sequence to set up its configuration files. This sequence helps identify and fix any problems that might come up during startup. The status of the configuration download can also be checked in the web interface of the device, provided that you have access to the web interface of the device. 

Symbols displayed when connected via  Console cable

When you connect to the firewall using a console cable, you'll see symbols that show the progress and status of the startup:

• Start Applying Startup Config (•): Shows the firewall is applying the startup settings.
• Start Applying Last Good Config (@): Shows it's applying the last known good settings.
• Start Applying System Default Config (*): Shows it's using the default settings.
• Success ($): Means the settings were applied successfully.
• Failure (X): Means there was a problem applying the settings.

Startup Status on the Dashboard

The main dashboard of the firewall shows a visual of how the setup is going. Here's how to understand what you see:

• OK Sign: Everything started up and the settings are good.
• Warning Sign: There was a problem during startup.

More Details If you hover over these signs on the dashboard, you'll get more information:

• Boot Success: The settings were applied correctly.
• Firmware Update Success: The settings were applied correctly after updating the firmware.
• User Rebooted: The user restarted the firewall.

Warning Messages

In case of issues, the following warning messages may appear:

• Fallback to Last Good Configuration: The firewall went back to the last good settings because the startup settings had a problem.
• Fallback to Last Good Configuration After Firmware Update: The firewall went back to the last good settings after a firmware update.
• Error Fallback to System Default Configuration: The firewall went back to the default settings because there were problems with the startup and last good settings.
• Error Fallback to System Default Configuration After Firmware Update: The firewall went back to the default settings after a firmware update because of configuration problems.

System Information Screen via WebGUI

The System Information screen displays the Zyxel Device system and model name, serial number, MAC address and firmware version as shown in the figure below.

This field displays details about the Zyxel Device’s startup state.

OK - Boot success: The Zyxel Device has started up successfully.

OK - Firmware update at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device last updated the firmware successfully.

OK - Factory default at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device was last reset to the factory default settings and rebooted successfully.

OK - User reboot at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device last rebooted successfully.

OK - Reset default configuration at yyyy/mm/dd hh:mm: This occurs when the Zyxel Device starts for the first time or you reset the Zyxel Device to the factory default settings.

OK - System recovery at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device last underwent system recovery and rebooted successfully.

OK - Apply configuration xxxx.conf at at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device last applied the configuration file and rebooted successfully.

OK - Switch to (1st|2nd) partition at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device last rebooted using firmware in the backup partition.

OK - Reset admin password at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device reset the admin password using the “atkz-g” command and rebooted successfully.

WARN - Fallback to lastgood configuration: The Zyxel Device was unable to apply the startup-config.conf configuration file and fell back to the lastgood.conf configuration file. See Section 28.1.3 on page 432 for more information on configuration file flow at restart.

WARN - Fallback to lastgood configuration after firmware update at yyyy/mm/dd hh:mm: This displays the date and time when the Zyxel Device was last unable to apply the startup-config.conf configuration file after firmware update and fell back to the lastgood.conf configuration file. See Section 28.1.3 on page 432 for more information on configuration file flow at restart.

ERROR - Fallback to system default configuration: The Zyxel Device was unable to apply the lastgood.conf configuration file and fell back to the system default configuration file (system-default.conf). See Section 28.1.3 on page 432 for more information on configuration file flow at restart.

ERROR - Fallback to system default configuration after firmware update at yyyy/mm/ dd hh:mm: This displays the date and time when the Zyxel Device was unable to apply the lastgood.conf configuration file after the firmware update and fell back to the system default configuration file (system-default.conf). See Section 28.1.3 on page 432 for more information on configuration file flow at restart.

Troubleshooting

Console Output

If there's a problem starting up, connect a console cable to see what's happening in real-time. This helps figure out which settings are causing problems.

Event Logs

Check the event logs to find detailed error messages. They'll show where the problems are with the settings.

Using the Test Option

Before you use new settings, test them in the web interface or command line. This makes sure there aren't any mistakes before you start using them.

Configuration File Header

Make sure the configuration file matches your firewall's model and firmware version. This stops problems when you use settings from one firewall on another or change the firmware.

Conclusion

Understanding how the USG FLEX H Series firewalls start-up and apply settings is important for keeping them working well. Follow these steps to fix any problems and make sure your firewall runs smoothly.