Firmware Recovery Process on USG/ATP/VPN-Firewalls

In some rare situations (symptom as following), ZyWALL/USG might not boot up
successfully after firmware upgrade. The following procedures are the steps to
recover firmware to normal conditions. Please connect the console cable to
ZyWALL/USG.

1. Symptoms

• Booting success but device show error message

“can’t get kernel image”

while device boot.

• Device reboots infinitely

• Nothing displays after

“Press any key to enter debug mode within 3 seconds.” 

for more than1 minute.

• Startup message displays

"Invalid Recovery Image”.

The message here could be

“Invalid Firmware”
“Invalid Recovery Image”

2. Recovery Steps

• Press any key to enter debug mode

• Enter

atkz –f –l 192.168.1.1 

to configure FTP server IP address

• Enter below command to bring up the FTP server on port 1:

 atgof 

• The following information shows the FTP service is up and ready to receive firmware

• You will use FTP to upload the firmware package. Keep the console session open in order to see when the firmware update finishes.
• Set your computer to use a static IP address from 192.168.1.2 ~ 192.168.1.254
• No matter how you have configured the ZyWALL/USG’s IP addresses, your computer must use a static IP address in this range to recover the firmware.
• Connect your computer to the ZyWALL/USG’s port 1 (the only port that you can use for recovering the firmware).
• Use an FTP client on your computer to connect to the ZyWALL/USG. This example uses the FTP command in the Windows command prompt. The ZyWALL/USG’s FTP server IP address for firmware recovery is 192.168.1.1
• Log in without the user name (just press enter).
• Set the transfer mode to binary. Use “bin” (or just “bi” in the Windows command prompt).
• Transfer the firmware file from your computer to the ZyWALL/USG (the
  command is “put 310AAAC0C0.bin” in the Windows command prompt - 310AAAC0C0.bin is to be replaced with the filename of your file).

• Wait for the file transfer to complete.

• The console session displays

“Firmware received” 

after the FTP file transfer is
complete. Then you need to wait while the ZyWALL/USG recovers the
firmware (this may take up to 4 minutes).

• The message here might be

“ZLD-current received” = “Firmware received”.

• The console session displays

“done” 

when the firmware recovery is
complete. Then the ZyWALL/USG automatically restarts.

• The username prompt displays after the ZyWALL/USG starts up successfully.
The firmware recovery process is now complete and the ZyWALL/USG is
ready to use.

If the process is done several times, but the problem
remains, please collect all the console logs and send to ZyXEL/USG for further
analysis.

Please Note:
If one of the following messages appears on the console, the process must
be performed again:

./bin/sh: /etc/zyxel/conf/ZLDconfig: No such file

Error: no system default configuration file, system configuration stop!!