ZyXEL router error message

Posted on 2014-08-17
Last Modified: 2014-08-20
My (old) ZyWall 2 router/firewall is giving error message that I haven't been able to find the source for. It is configured as a plain router (static wan IP), DHCP server on the LAN side, and what is called Full Feature NAT. Everything seems to work well, but many times every day there are error messages (alerts) saying:

No. Time                  Source IP              Destination IP         Note
  1|08/17/2014 11:37:17  |                      |                      |
    Discard packet, the vlan tag is undefined. vlanTag=7
End of Alert

I have no equipment on the LAN side using VLAN. WAN side is having an official IP address (part of my network). Since the alert doesn't indicate any source or destination address, it seems difficult to debug.

Is there a way to find what is causing these alerts?
Question by:omberli
    LVL 10

    Assisted Solution

    Hi Omberli,

    If your able, you might want to sniff the traffic using wireshark.

    If there is any 'junk' on the line, you should be able to capture that.
    You could be dealing with malformed packets. Additional packet headers like media address might help you sort this problem.

    If all is working as planned, than the alternative is to accept the error.

    LVL 25

    Accepted Solution

    you can also run the trace on the zywall itself ( )

    but you probably should not care that much. you may have a misconfigured switch, or more likely your provider has. you should be able to determine which by first finding out which interface receives the packet.

    Author Closing Comment

    Tried Wireshark, but it didn't find anything (connected it directly to a router port to avoid any switches to make problems). Also tried the console commands on the ZyWALL, but none of the command worked. All of them gave an ERROR as response.

    Seems like I end up just ignoring these alerts. Thanks anyway!
    LVL 25

    Expert Comment

    wireshark on the zyxel would only work assuming you set up the port as a copy of another port's traffic which i'm not even sure is feasible on the router

    if you want to run a trace on the fw, the zyxel kb shows a set of different and simpler commands.!viewDetail.action?articleOid=013652&lang=EN

    ... but it is very likely that you actually can ignore the error

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Scale it in WD Gold

    With up to ten times the workload capacity of desktop drives, WD Gold hard drives employ advanced technology to deliver among the best in reliability, capacity, power efficiency and performance.

    Suggested Solutions

    This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
    Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
    Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now