Zyxel Switches, USG FLEX Firewalls & Nebula Support Hub
Zyxel supplies popular multi-gigabit switches (such as the XGS1210-12 and XGS1250-12), GS1900 / GS1920 smart managed switches, NWA-series WiFi 6/6E/7 access points, and USG FLEX / ATP business firewalls. Critical Security Requirement: If you operate a Zyxel USG FLEX, ATP, or VPN firewall, keep automatic cloud firmware updates enabled and never expose HTTPS/SSH administrative login to the public WAN interface without strict source IP allowlisting.
Zyxel Quick Reference & Official Support Links
| Resource / Setting | Verified Zyxel Specification |
|---|---|
| Default Gateway IP | 192.168.1.1 |
| Local Login URL / Host | https://192.168.1.1 or https://nebula.zyxel.com |
| Default Admin Credentials | Username: admin | Password: 1234 (or unique password printed on back/bottom label) |
| Management App / Software | Zyxel Nebula Mobile / Cloud Portal & Local Web Configurator (ZON Utility) |
| Official Firmware Downloads | https://www.zyxel.com/us/en-us/support/download-library ↗ |
| Official Product Support & Manuals | https://support.zyxel.eu/ ↗ |
| Security Advisories & CVE Bulletins | https://www.zyxel.com/global/en/support/security-advisories ↗ |
Popular Zyxel Models & Hardware Specifications
| Model Name | Category | Key Networking Specs | Best Use Case |
|---|---|---|---|
| XGS1250-12 / XGS1210-12 | 12-Port Web Managed Multi-Gig Switch | 8x 1GbE + 3x Multi-Gig (1G/2.5G/5G/10G RJ45) + 1x 10G SFP+, VLAN & QoS | Connecting 10G NAS + 2.5G PCs + 1G devices in one switch |
| GS1900-8HP / GS1900-10HP | Fanless Smart Managed PoE+ Switch | 8x 1GbE PoE+ (70W/77W budget) + 2x 1G SFP uplinks (10HP), 802.1Q VLAN | Silent small office PoE switching for APs & cameras |
| NWA50AX Pro / NWA130BE | Standalone or Nebula WiFi 6 / 7 AP | 2.5GbE PoE+ uplink, supports standalone local web GUI or free Nebula Cloud | Small office ceiling WiFi without a dedicated controller |
| USG FLEX 100H / 200H | uOS Next-Gen SMB Firewall | 2.5GbE WAN/LAN ports, WireGuard/IPSec/SSL VPN, Stateful Firewall & VLANs | Branch office perimeter firewall & site-to-site VPN |
How to Update Zyxel Firmware Safely
- Visit the Zyxel Download Library (zyxel.com/us/en-us/support/download-library) and enter your exact switch, AP, or firewall model.
- Log in to the local web configurator at https://192.168.1.1 (or use the Zyxel ZON Utility to discover the device's DHCP IP).
- On GS1900/XGS switches, upload the .bin firmware to the Backup Image slot under Maintenance > Firmware Upgrade, then activate and reboot.
- On USG FLEX firewalls, go to Maintenance > File Manager > Firmware Package and run the cloud check or manual upload.
Zyxel Frequently Asked Questions
Can Zyxel NWA50AX or NWA130BE access points work without Nebula Cloud?
Yes. Zyxel NWA-series access points are Flex-managed—you can configure them 100% locally through their built-in web GUI at their LAN IP address without registering for Nebula Cloud.
How do I find the IP address of a Zyxel switch after it grabs a DHCP lease?
Check your router's DHCP client table, or run the free Zyxel One Network (ZON) Utility on Windows to discover all Zyxel switches, APs, and firewalls on Layer 2.
How do I harden a Zyxel USG FLEX firewall?
Disable WAN-to-Device HTTPS/SSH administration (or restrict it to specific static IPs), enforce 2FA for VPN users, and subscribe to Zyxel Security Advisories for zero-day hotfixes.