ZyXEL Communications ZyWALL 1050 Release Note page 24

www.zyxel.com
TFTP client ＜=＞ ZyWALL ＜== IPSec Tunnel ==＞ ZyWALL ＜=＞ TFTP server
1. TFTP client try to get the file from TFTP server
2. But there are many"rule not found" logs at ZyWALL and TFTP client cannot get the file
finally.
This is caused by the TFTP ALG, which doesn't specify the expected direction.
20. [BUG FIX] SPR ID: 080123157
Symptom:
The retransmission of DPD is not compatible with ZyNOS ZyWALL
Condition:
When ZLD ZyWALL re-transmits R-U-THERE to ZyNOS ZyWALL, the ZyNOS
ZyWALL will treat the packet as replay packet, because the sequence number is the same
as previous replied packet.
Test procedure:
PC1 (192.168.1.33) ＜-＞ZLD ZyWALL ==== tunnel === ZW70 (192.168.10.0/24)
1. ZLD ZyWALL build a tunnel with zw70 first
2. Try to drop to IKE packet from ZW70
3. PC1 try to generate packet to unknown host behind zw70, to try the DPD at ZLD
ZyWALL
4. ZLD ZyWALL will try to send DPD packet, and zw70 will only reply the first R-U-
THERE, treat the transmit packet as reply packets (can discover on the logs on zw70)
21. [BUG FIX] SPR ID: 080411551
Symptom:
Cannot apply system default configuration successfully
Condition:
1. Apply system-default configuration fail
2. The log show in the following"
alert
ERROR: #configure terminal isakmp policy Default_L2TP_VPN_GW exit, System
fatal error. Cannot reload Crypto map configuration.
3. To reproduce it, just use CLI command to create isakmp policy rule, it can show the
same message below.
22. [BUG FIX] SPR ID: 080331670
Symptom:
Passive FTP may not work under IDP
file-manage Apply Config
24/142