Zyxel AX7501 with XGSPON SFP+, VLAN 10
Product ratings
Pros
Cons
21 reviews
A security nightmare: DO NOT BUY - DO NOT USE
Getting a new firmware is difficult if not impossible
https://www.opencve.io/cve
Zyxel portal is a nightmare, AX7501-B0 return ZERO results
try https://www.zyxel.com/support...
Asked in official forums:
"For the new firmware, it may depends on your supplier.
If your AX7501-B0 comes from ISP, you may need to check with your ISP for new firmware version."
Found a security advisory by PURE luck in google, yes I have the wrong one V5.15(ABPC.0)C0 (default)
https://support.zyxel.eu/hc...
And again NO EASY way to get access to the firmware.
Would have been acceptable in year 2000, not any more in 2022. Having 10GB is not worth the security risk.
Huge Firmware mess:
Your ISP customize the image (why, how, where is the protocol) so
* you buy at digitec or elsewhere -> you can contact xyzel and hope they will help you
* you got the router from swisscom, salt, and co -> you have to use another customized firmware from your provider -> security wise a nightmare as well
* you got the router from init7 -> youre lucky you can apply C0 (aka default Zyxel firmware)
Getting new firmware (all are OUTDATED)
Swisscom: ftp://zyxel@ftp.zyxel.ch/AX7501-B0/OBM/V517ABPC1C0.bin
Init7: https://nextcloud.init7.net/s... (Passwort: ANbrM7BLG5)
2023.4
Latest firmware V517ABPC3D0 solved some issues but behind the scene still contains
* Samba daemon 3.6.25 End of life since 2015
* Linux kernel 4.1.52 end of life 2018
* OpenSSL 1.1.1 is EOL in sept 2023, will they update before?
and a LOT more outdated software
* Will never run OpenWrt, it use Broadcom see https://forum.openwrt.org/t... but run in fact behind the scene a butchered OpenWrt 14.03 with magical Broadcom binaries.
* Mac mini has issues with 5GHz, Apple TV 4K is also struggling. Use only 2.4GHz but will dump router & go back to 1gb
Pro
- none
Contra
- a challenge to update firmware: ISP also modify firmware
- no firmware auto update or alerts
- interface is difficult to use (even after 21 years in IT)
- Instable wifi 5GHz
- Zyxel should not be allowed to sell any network devices
- SBOM of Xyzel not public. The State of Software Bill of Materials show lot of packages outdated....
- ZYXEL don't take security seriously
- firmware: no SHASUM, untrusted FTP, images not signed
- Can not switch off status led
- Magical binary to update??
- you can ask ZYXEL for the firmware source code, no response
- use butchered OpenWrt version 14.03 not 22.03
Top router - Slight start-up difficulties :D
The device really offers everything you could want.
Unfortunately, it is not enough alone that the router is set to the VLAN 10.
To connect successfully (Swisscom private fiber), the following options must be set under "Network Settings -> Broadband -> 1 GPON": (see screenshot)
You should deactivate the option "Network Settings -> Wireless -> MESH" if you don't need it, so you can separate WLAN 2,4 and 5 GHz. It is poorly documented.
Useful links:
Manual: https://download.zyxel.com/AX7501-B0...
Firmware (as of 27.09.20 outdated): https://www.zyxel.ch/de...
Firmware FTP (as of 27.09.20 Firmware missing. Documents only): ftp://ftp.zyxel.com/AX7501-B0/Pro
- SPI Firewall for IPv4 & IPv6
- Device comes with newer firmware than Zyxel offers
- GPON SPF+ already included
- Dynamic DNS update via URL
- Unlimited sessions in the web interface at the same time
- System logs can be activated and viewed
- Up to 3 guest WLANs with 2 different operating modes
Contra
- Webinterface currently only in English
- "Only" 32 firewall rules possible (NAT unlimited)
- MESH is active by default
After teething problems....
Swisscom advertises internet "up to 10 Gbit/s". I then called Swisscom and asked what you supply for a router.... Because I have a high-end mainboard with 10 GBit/s connection and also the whole house installation / cable to it accordingly. Unfortunately, Swisscom but can not deliver a 10 GBit / s router only max 2.5!!! On the Internet site is indeed quite clearly "No foreign router", but then on request by e-mail "You can try it".... (Are only 400 Stutz!)... I then ordered the router and configured accordingly... The configuration was not "quite clear", because there are 1 million screenshots, but all are somewhere minimally different... But still had no internet!
I then called Swisscom and tried to explain to them that they have to provision my router (YOU HAVE TO CALL AND GIVE THEM THE MAC ADDRESS, OTHERWISE IT DOES NOT WORK!!!)... In any case, 2x had one on the line, who probably thought I was insane and connected me to the Swisscom Myservice (for border debiles). (But there work more priests and "Gspürschmi-Fühlschmi" than technicians - accordingly they could not help.........)
At the third try I had a VERY competent employee from Swisscom, who immediately threw out the original Swisscom router and provided the new router..... After 10 min the thing was eaten.
Now have about 7.5 - 8 GBIT / s up & download.
Performance Top.
Oh yeah... And although (if you google and research a bit) I was apparently not the only one with "provisioning problems", neither the Zyxel support nor Studerus can really help you... And with Swisscom it's either luck or bad luck. Either you say "no foreign routers", or you don't know at all what is meant by provisioning, oooooor you are lucky ;)
So as a tip just call a few times... :-)Pro
- Runs like a pig
Contra
- Setup with Swisscom disaster
Works with 2.5 and 10 Gbit/s fiber connections and is easy to use
The Zyxel AX7501-B0 was included in the fiber subscription. The selection of routers with 10 Gbit/s does not seem to be too large. Setting up the router was pretty easy. The web interface for the settings is quite clear. There are not many setting options. The standard options are of course included. The WLAN line can be reduced to 20%. The web interface is probably optimized for use with the smartphone. There is only one menu button with several submenus. So for each setting you have to click again on the menu button and then on the submenu. I find quite cumbersome. As a normal user with little knowledge (as I am one) makes that probably not much.
A big disadvantage I see is that the router does not support DECT. But there are two analogue ports for telephones. Who has an appropriate phone, this can also connect via Ethernet. PoE has the router unfortunately not.
One of the Ethernet ports has 10 Gbps. This is where you connect your PC to use the full power of the fiber optic line. There are also four Ethernet ports with 1 Gbit/s.
There's a button to turn the WLAN on and off, and also a button for WPS. There is also a power button on the back, so you don't always have to pull out the power adapter when you want to turn off the router.
The LEDs shine quite brightly and sometimes flash constantly. Since I live in a 1-room apartment, this bothers me at night. But with a small strip of cardboard is quickly fixed and you can see the LEDs even during the day when it is not very bright in the room.Pro
- 10-Gbit/s
- Easy to use
- 5 Lan ports (1x 10-Gbit, 4x 1-Gbit)
Contra
- Rudimentary web interface, few setting options
- no DECT
- no PoE
- very bright LEDs
Top!
Super device once it is up and running! Got it set up for a Swisscom fiber network and took a screenshot of the settings. (Settings can be found under Network Settings - Broadband) when editing the existing entry.
Pro
- Price / Performance
Contra
- Setup
Works with Wingo 10Gbit/s subscription / latest firmware received
Have solved the 10Gbit/s subscription at Wingo and bought this router. Worked for me "plug & play". Except for entering the NSN number, which Wingo gave me on support request, I did not have to enter / adjust anything.
In addition, I received the access data for the latest firmware on support request via the Zyxel website (download via Zyxel FTP server). Just write that your provider does not do IT support and does not provide you with the latest firmware. A bit cumbersome, but it works. So the router can also be kept up-to-date.
There is a 1 star deduction for the missing VPN and because the WLAN connection with my business Lenovo ThinkPad is not quite as stable. With the Apple devices (laptops, iPhone) and the Windows homebrew, however, the WLAN works smoothly.
6 out of 21 reviews
How do ratings
work?