ZyXEL Communications Prestige 2602HWL-D3A Support Manual Download Page 133

Page: 133 / 237

Prestige 2602HWL-D3A Support Notes

133

Each field's detail description of the page is listed below.

Label

Description

SIP Account

This read-only field displays the number of the SIP account that you are
configuring. The changes that you save in this page affect the Prestige’s

settings with the SIP account displayed here..

Summary of Contents for Prestige 2602HWL-D3A

Page 1: ...Prestige 2602HWL D3A Support Notes Version 3 40 Oct 2007...

Page 2: ...Call Scheduling 78 Using IP Multicast 83 Using Prestige traffic redirect 85 Using Universal Plug n Play UPnP 87 WIRELESS APPLICATION NOTES 93 Infrastructure mode 93 Wireless MAC address filtering 98 W...

Page 3: ...What is the default LAN IP address and Password Moreover how do I change it 171 How do I upload the ZyNOS firmware code via embeded web configurator 171 How do I upgrade backup the ZyNOS firmware by u...

Page 4: ...s the Prestige support 177 How do I used the reset button more over what field of parameter will be reset by reset button 177 What network interface does the new Prestige series support 178 How does t...

Page 5: ...to use SIP 186 Unable to register with the SIP server 187 I can register but can not establish a call 187 I can make a call but the voice only goes one way not bothway 187 I can receive a call but th...

Page 6: ...ols are supported by Prestige 198 What types of encryption does Prestige VPN support 198 What types of authentication does Prestige VPN support 198 I am planning my Prestige to Prestige VPN configurat...

Page 7: ...alls 206 What are potential factors that may causes interference among WLAN products 206 What s the difference between a WLAN and a WWAN 207 What is Ad Hoc mode 207 What is Infrastructure mode 207 How...

Page 8: ...required 211 What is AAA 211 What is RADIUS 211 What is WPA 211 What is WPA PSK 212 TROUBLE SHOOTING 212 USING EMBEDDED PACKET TRACE 212 DEBUG PPPOE CONNECTION 226 CLI COMMAND LIST 237 Application Not...

Page 9: ...you only have one PC connect the PC s Ethernet adapter to the Prestige s LAN port with a crossover red one Ethernet cable If you have more than one PC both the PC s Ethernet adapters and the Prestige...

Page 10: ...isable DNS Click OK to save and close the TCP IP properties window Click OK to close the Network window You will be prompted to insert your Windows CD or disk When the drivers are updated you will be...

Page 11: ...2602HWL D3A Support Notes All contents copyright c 2007 ZyXEL Communications Corporation 11 3 Configure Prestige for Internet access by using WIZARD SETUP The Web screen shown below takes PPPoE as the...

Page 12: ...tions Corporation 12 Setup the Prestige as a DHCP Relay What is DHCP Relay DHCP stands for Dynamic Host Configuration Protocol In addition to the DHCP server feature the P2602 supports the DHCP relay...

Page 13: ...Setup the Prestige as a DHCP Client 1 Toggle the DHCP to Relay in menu 3 2 and enter the IP address of the DHCP server in the Relay Server Address field Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP...

Page 14: ...le machine to the outside world A service is identified by the port number Also since you need to specify the IP address of a server in the Prestige a server must have a fixed IP address and not be a...

Page 15: ...using the Prestige s WAN IP address which can be obtained from menu 24 1 For example Configuring an internal Web server for outside access Menu 15 2 NAT Server Setup Rule Start Port No End Port No IP...

Page 16: ...he Windows NT Server 4 0 Remote Access Server Windows Dial Up Networking uses the Internet standard Point to Point PPP to provide a secure optimized multiple protocol network connection over dial up t...

Page 17: ...ection with a remote private network in the Prestige SUA case In ZyNOS all PPTP packets can be forwarded to the internal PPTP Server WinNT server behind SUA The port number of the PPTP has to be enter...

Page 18: ...u need to connect Prestige router to your ISP first Enter the IP address of the PPTP server WinNT server and the port number for PPTP as shown below Menu 15 2 NAT Server Setup Used for SUA Only Rule S...

Page 19: ...a VPN connection from the Win9x client to the NT server you need to know the exact Internet IP address that the ISP assigns to Prestige router in SUA mode and enter this IP address in the VPN dial up...

Page 20: ...y the Prestige thus preventing intruders from probing your network The SUA feature that the Prestige supports previously operates by mapping the private IP addresses to a global IP address It is only...

Page 21: ...s Single User Account feature that previous ZyNOS routers supported the SUA only option in today s routers 4 Many to Many Overload In Many to Many Overload mode the Prestige maps the multiple ILA to...

Page 22: ...Server The Prestige now has Full Feature NAT support to map global IP addresses to local IP addresses of clients or servers With multiple global IP addresses multiple severs of the same type e g FTP...

Page 23: ...e MBS 0 My Login cso zyxel My Password Idle Timeout sec 0 IP Address Assignment Dynamic IP Address N A Network Address Translation Full Feature Address Mapping Set 1 Press ENTER to Confirm or ESC to C...

Page 24: ...apping Sets and NAT Server Sets Use the Address Mapping Sets menus and submenus to create the mapping table used to assign global addresses to LAN clients Each remote node must specify which NAT Addre...

Page 25: ...Let s first look at Option 255 Option 255 is equivalent to SUA in previous ZyXEL routers The fields in this menu cannot be changed Entering 255 brings up this screen Menu 15 1 1 Address Mapping Rules...

Page 26: ...starting local IP address ILA If the rule is for all local IPs then the Start IP is 0 0 0 0 and the End IP is 255 255 255 255 255 255 255 255 Global Start IP This is the starting global IP address IG...

Page 27: ...rt a new rule before the rule selected The rule after the selected rule will then be moved down by one rule Delete means to delete the selected rule and then all the rules after the selected one will...

Page 28: ...Many No Overload Server Local IP Start This is the starting local IP address ILA 0 0 0 0 End This is the ending local IP address ILA If the rule is for all local IPs then put the Start IP as 0 0 0 0...

Page 29: ...ify for port 80 Web the server at IP address 192 168 1 36 and for port 21 FTP another at IP address 192 168 1 33 Please note that a server can support more than one service e g a server can provide bo...

Page 30: ...0 0 0 0 Press ENTER to Confirm or ESC to Cancel The most often used port numbers are shown in the following table Please refer RFC 1700 for further information about port numbers Service Port Number F...

Page 31: ...yISP Encapsulation PPPoE Multiplexing LLC based VPI 0 VCI 33 ATM QoS Type UBR Peak Cell Rate PCR 0 Sustain Cell Rate SCR 0 Maximum Burst Size MBS 0 My Login cso zyxel My Password Idle Timeout sec 0 IP...

Page 32: ...pre configured to handle this case 2 Internet Access with an Internal Server In this case we do exactly as above use the convenient pre configured SUA Only set and also go to Menu 15 2 NAT Server Set...

Page 33: ...have two very busy internal FTP servers and also an internal general server for the web and mail In this case we want to assign the 3 IGAs by the following way using 4 NAT rules 5 Rule 1 One to One t...

Page 34: ...Login cso zyxel My Password Retype to Confirm Idle Timeout 100 IP Address Assignment Static IP Address IGA3 IP Subnet Mask N A Gateway IP Address N A Network Address Translation Full Feature Press EN...

Page 35: ...Selecting One to One type to map the FTP Server 2 with ILA2 192 168 1 11 to IGA2 Menu 15 1 1 2 Rule 2 Type One to One Local IP Start 192 168 1 11 End N A Global IP Start Enter IGA2 End N A Press ENTE...

Page 36: ...IGA3 Menu 15 1 1 4 Rule 4 Type Server Local IP Start N A End N A Global IP Start Enter IGA3 End N A Press ENTER to Confirm or ESC to Cancel When we have configured all four rules Menu 15 1 1 should lo...

Page 37: ...er from Menu 15 2 NAT Server Setup not Set 1 Set 1 is used for SUA Only case Menu 15 2 NAT Server Setup Rule Start Port No End Port No IP Address 1 Default Default 0 0 0 0 2 80 80 192 168 1 20 3 25 25...

Page 38: ...NAT mapping types thus each user login to the server using a unique global IP address The following figure illustrates this One rule configured for using Many to Many No Overload mapping type is shown...

Page 39: ...A Global IP Start Enter IGA1 End N A Press ENTER to Confirm or ESC to Cancel Menu 15 1 1 2 Rule 2 Type One to One Local IP Start 192 168 1 11 End N A Global IP Start Enter IGA2 End N A Press ENTER to...

Page 40: ...multiple type of NAT mapping rules SUA One to One Many to One Many to Many overload Many One to One Server The following table summarizes these types NAT Type IP Mapping One to One ILA1 IGA1 Many to...

Page 41: ...ture The Prestige allows you to configure up to twelve filter sets with six rules in each set for a total of 72 filter rules in the system You can apply up to four filter sets to a particular port to...

Page 42: ...on 42 Filter Types and SUA Conceptually there are two categories of filter rules device and protocol The Generic filter rules belong to the device category they act on the raw data from to LAN and WAN...

Page 43: ...all and output filter sets If SUA is enabled SUA converts the source IP address from 192 168 1 33 to 203 205 115 6 and port number from 1023 to 4034 WAN device output and call filter sets The sequence...

Page 44: ...Generic Filter Rule Filter 1 1 Filter Type Generic Filter Rule Active Yes Offset 0 Length 0 Mask N A Value N A More No Log None Action Matched Check Next Rule Action Not Matched Check Next Rule Menu 2...

Page 45: ...and protocol filter categories two new menus Menu 11 5 and Menu 13 1 have been added as well as some changes made to the Menu 3 1 Menu 11 1 and Menu 13 The new fields are shown below Menu 3 1 Menu 3...

Page 46: ...device filter set to the protocol filters field Even though SMT will prevent the inconsistency from being entered in ZyNOS it is unable to resolve the intermixing problems existing in the filter sets...

Page 47: ...ing this filter below o Create a filter set in Menu 21 e g set 1 o Create three filter rules in Menu 21 1 1 Menu 21 1 2 Menu 21 1 3 Rule 1 block the HTTP packet TCP 06 protocol with port number 80 Rul...

Page 48: ...ion IP Addr 0 0 0 0 IP Mask 0 0 0 0 Port 80 Port Comp Equal Source IP Addr 0 0 0 0 IP Mask 0 0 0 0 Port Port Comp None TCP Estab No More No Log None Action Matched Drop Action Not Matched Check Next R...

Page 49: ...Rule 3 for c DNS packet UDP 17 Port number 53 Menu 21 1 2 TCP IP Filter Rule Filter 1 2 Filter Type TCP IP Filter Rule Active Yes IP Protocol 17 IP Source Route No Destination IP Addr 0 0 0 0 IP Mask...

Page 50: ...put Protocol Filter Set in the remote node setup A filter for blocking a specific client Configuration 1 Create a filter set in Menu 21 e g set 1 Menu 21 Filter Set Configuration Filter Filter Set Com...

Page 51: ...CP Estab N A More No Log None Action Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel Key Settings Source IP addr Enter the client IP in this field IP Mask here the IP m...

Page 52: ...w on Now a client on the LAN is trying to ping Prestige ras sys trcp sw off ras sys trcp disp TIME 37c060 enet0 RECV len 74 call 0 0000 00 a0 c5 01 23 45 00 80 c8 4c ea 63 08 00 45 00 0010 00 3c eb 0c...

Page 53: ...r 1280 Optional Data 32 bytes Configurations From the above first trace we know a client is trying to ping request the Prestige router And from the second trace we know the Prestige router will send a...

Page 54: ...starts at 7th octets we need to skip the first octets of the destination MAC address Length in bytes Set to 6 since MAC address has 6 octets Mask in hexadecimal Specify the value that the Prestige wil...

Page 55: ...e also Generic Filter Rule but not others Because the Generic and TCPIP IPX filter rules must be in different filter sets Menu 21 1 2 Generic Filter Rule Filter 1 2 Filter Type Generic Filter Rule Act...

Page 56: ...d 2 rules respectively based on the following packets in SMT menu 21 Filter Set 1 o Rule 1 Destination port number 137 with protocol number 6 TCP o Rule 2 Destination port number 137 with protocol num...

Page 57: ...re 1 Edit Comments Press ENTER to Confirm or ESC to Cancel Configure the first filter set NetBIOS_WAN by selecting the Filter Set number 1 Rule 1 Destination port number 137 with protocol number 6 TCP...

Page 58: ...e Yes IP Protocol 17 IP Source Route No Destination IP Addr 0 0 0 0 IP Mask 0 0 0 0 Port 137 Port Comp Equal Source IP Addr 0 0 0 0 IP Mask 0 0 0 0 Port 0 Port Comp None TCP Estab N A More No Log None...

Page 59: ...CP Estab No More No Log None Action Matched Drop Action Not Matched Check Next Rule Press ENTER to Confirm or ESC to Cancel Rule 4 Destination port number 138 with protocol number 17 UDP Menu 21 1 4 T...

Page 60: ...5 TCP IP Filter Rule Filter 1 5 Filter Type TCP IP Filter Rule Active Yes IP Protocol 6 IP Source Route No Destination IP Addr 0 0 0 0 IP Mask 0 0 0 0 Port 139 Port Comp Equal Source IP Addr 0 0 0 0...

Page 61: ...o Log None Action Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel After the first filter set is finished you will get the complete rules summary as below Menu 21 2 Filt...

Page 62: ...er 6 TCP Menu 21 2 1 TCP IP Filter Rule Filter 2 1 Filter Type TCP IP Filter Rule Active Yes IP Protocol 6 IP Source Route No Destination IP Addr 0 0 0 0 IP Mask 0 0 0 0 Port 53 Port Comp Equal Source...

Page 63: ...ion Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel 1 After the first filter set is finished you will get the complete rules summary as below Menu 21 2 Filter Rules Sum...

Page 64: ...xel com tw regardless of the WAN IP of the Prestige When the ISP assigns the Prestige a new IP the Prestige must inform the DDNS server the change of this IP so that the server can update its IP to DN...

Page 65: ...Service Provider WWW DynDNS ORG Active Yes Host the local server s host name EMAIL USER Password Enable Wildcard No Key Settings for using DDNS function Option Description Service Provider Enter the...

Page 66: ...ion The operations allowed are Get GetNext Set and Trap These functions operates on variables that exist in network nodes Examples of variables include statistic counters node port status and so on Al...

Page 67: ...NMS and managed devices can be any of four different types of commands 6 Reads Read is used to monitor the managed devices NMSs read variables that are maintained by the devices 7 Writes Write is used...

Page 68: ...ariable from a table or list within an agent In SNMPv1 when a NMS wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series of GetNext operations Set Al...

Page 69: ...h a particular object variable Variable bindings Associates particular object with their value 3 ZyXEL SNMP Implementation ZyXEL currently includes SNMP support in some Prestige routers It is implemen...

Page 70: ...port number The port number is its interface index under the interface group authenticationFailure defined in RFC 1215 When receiving any SNMP get or set requirement with wrong community this trap is...

Page 71: ...Configure the Prestige for SNMP The SNMP related settings in Prestige are configured in menu 22 SNMP Configuration The following steps describe a simple setup procedure for configuring all SNMP settin...

Page 72: ...he NMS The default is public Trusted Host Enter the IP address of the NMS The Prestige will only respond to SNMP messages coming from this IP address If 0 0 0 0 is entered the Prestige will respond to...

Page 73: ...log conf by adding the following line at the end of the etc syslog conf file local1 var log zyxel log Where var log zyxel log is the full path of the log file 3 Restart syslogd CDR log call messages F...

Page 74: ...rver Example Jul 19 11 28 39 192 168 102 2 ZyXEL Communications Corp Packet Trigger Protocol 1 Data 4500003c100100001f010004c0a86614ca849a7b08004a5c020001006162636465666768696a6b6c6d6e6f7071727374 Jul...

Page 75: ...P IPXCP Example Jul 19 11 43 25 192 168 1 1 ZyXEL Communications Corp ppp LCP Starting Jul 19 11 43 29 192 168 1 1 ZyXEL Communications Corp ppp IPCP Starting Jul 19 11 43 34 192 168 1 1 ZyXEL Communi...

Page 76: ...etwork can be configured in menu 3 2 as usual The second and third networks that we call IP Alias 1 and IP Alias 2 can be configured in menu 3 2 1 IP Alias Setup There are three internal virtual LAN i...

Page 77: ...Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP Server Client IP Pool Starting Address 192 168 1 33 Size of Client IP Pool 32 Primary DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Remote DHCP Server...

Page 78: ...Direction None Version RIP 1 Incoming protocol filters Outgoing protocol filters IP Alias 2 Yes IP Address 192 168 3 1 IP Subnet Mask 255 255 255 0 RIP Direction None Version RIP 1 Incoming protocol...

Page 79: ...Down Enable Dial On Demand or Disable Dial On Demand on specified date and time SMT Menu for Call Scheduling 1 Edit the Schedule sets in menu 26 Prestige 2602HWL 61C Main Menu Getting Started Advance...

Page 80: ...e 1 Edit Name ZyXEL Press ENTER to Confirm or ESC to Cancel 3 The Menu 26 1 Schedule Set Setup is as follows Menu 26 1 Schedule Set Setup Active Yes Start Date yyyy mm dd 2004 01 01 How Often Once Onc...

Page 81: ...mand The remote node accepts Dial on demand during this period Disable Dial On Demand The remote node denies any demand dial during the period For the existing connected nodes it will be dropped after...

Page 82: ...in boot time Time service is implemented by the Daytime protocol RFC 867 Time protocol RFC 868 and NTP protocol RFC 1305 You have to assign an IP address of a time server and then the Prestige will ge...

Page 83: ...protocol used to support multicast groups The latest version is version 2 see RFC2236 IP hosts use IGMP to report their multicast group membership to any immediate neighbor multicast routers so the mu...

Page 84: ...n Prestige s remote node in menu 11 3 Menu 11 3 Remote Node Network Layer Options IP Options Bridge Options IP Address Assignment Dynamic Ethernet Addr Timeout min N A Rem IP Addr 0 0 0 0 Rem Subnet M...

Page 85: ...xiliary backup of your WAN connection Once Prestige detects it s WAN connectivity is broken Prestige will try to forward outgoing traffic to backup gateway that users specify in traffic redirect confi...

Page 86: ...e Prestige periodically pings the addresses configured here and uses the other WAN backup connection if configured if there is no response Fail Tolerance Type the number of times 2 recommended that yo...

Page 87: ...your backup gateway in dotted decimal notation The Prestige automatically forwards traffic to this IP address if the Prestige s Internet connection terminates Back Click Back to return to the previous...

Page 88: ...eir URLs and device descriptions UPnP Operations Addressing UPnPv1 devices MAY support IPv4 IPv6 or both For IPv4 each device should have DHCP client when the device gets connected to the network it w...

Page 89: ...on exploiting UPnP so we take Microsoft MSN application as an example in this support note You can learn how MSN benefit from NAT traversal feature in UPnP in this application note In the diagram supp...

Page 90: ...first check box enables UPnP function in this device The second check box allows users application to change configuration in this device For instance if you enable this item then user s MSN applicati...

Page 91: ...A Support Notes All contents copyright c 2007 ZyXEL Communications Corporation 91 3 Start a Video conversation with one online user 4 On the opposite side your partner selects Accept to accept your co...

Page 92: ...Prestige 2602HWL D3A Support Notes All contents copyright c 2007 ZyXEL Communications Corporation 92 5 Finally your video conversation is achieved...

Page 93: ...astructure mode What is Infrastructure mode Infrastructure mode sometimes referred to as Access Point mode is an operating mode of an 802 11b Wi Fi client unit In infrastructure mode the client unit c...

Page 94: ...ure mode of your Prestige wireless VoIP IAD please follow the steps below 1 From the SMT main menu enter 3 to display Menu 3 LAN Setup 2 Enter 5 to display Menu 3 5 Wireless LAN Setup Menu 3 5 Wireles...

Page 95: ...e Configuration Wireless Access Point to Infrastructure mode using Web configurator To configure Infrastructure mode of your Prestige wireless VoIP IAD please follow the steps below 1 From the web con...

Page 96: ...NIC card please follow the following steps 1 Double click on the utility icon in your windows task bar the utility will pop up on your windows screen 2 Select configuration tab 3 Select Infrastructur...

Page 97: ...Prestige 2602HWL D3A Support Notes All contents copyright c 2007 ZyXEL Communications Corporation 97 5 Double click on the AP you want to associated with...

Page 98: ...of control layer in that only stations with registered MAC addresses can connect This approach requires that the list of MAC addresses be configured 2 ZyXEL MAC Filter Implementation ZyXEL s MAC Filt...

Page 99: ...00 00 00 00 4 00 00 00 00 00 00 16 00 00 00 00 00 00 28 00 00 00 00 00 00 5 00 00 00 00 00 00 17 00 00 00 00 00 00 29 00 00 00 00 00 00 6 00 00 00 00 00 00 18 00 00 00 00 00 00 30 00 00 00 00 00 00 7...

Page 100: ...wser login AP by giving the LAN IP address of AP in URL field Default LAN IP is 192 168 1 1 default password to login web configurator is 1234 2 Click Network and click Wireless LAN tab on the left 3...

Page 101: ...an integrity check is used to ensure that packages are not modified during the transition The standard does not discuss how the shared key is established In practice most installations use a single k...

Page 102: ...o 4 WEP keys simultaneously You need to specify one of the 4 keys as default Key for data encryption To set up the Access Point you will need to set the one of the following parameters o 64 bit WEP ke...

Page 103: ...ed to encrypt wireless data transmission For example 3 5 Wireless LAN Setup ESSID Wireless Hide ESSID No Channel ID CH07 2442MHz RTS Threshold 2432 Frag Threshold 2432 WEP 64 bit WEP Default Key 3 Key...

Page 104: ...or example if access point uses Key 3 to encrypt data then station will use Key 3 to decrypt data So the Key 3 of station has to equal to the Key 3 of access point Though access point use Key 3 as def...

Page 105: ...ettings Enter exactly 5 13 or 29 characters to match the security strength 40 64bit 128 bit 256 nit respectively Setting up the Station 1 Double click on the utility icon in your windows task bar or r...

Page 106: ...icon doesn t exist in your task bar click Start Programs IEEE802 11b WLAN Card IEEE802 11b WLAN Card 2 Select the Encryption tab Select encryption type corresponds with access point Set up 4 Keys whic...

Page 107: ...Prestige 2602HWL D3A Support Notes All contents copyright c 2007 ZyXEL Communications Corporation 107...

Page 108: ...Key4 456789ABCD Configuring 802 1x IEEE 802 1x Introduction IEEE 802 1x port based authentication is desired to prevent unauthorized devices clients from gaining access to the network As LANs extend...

Page 109: ...cator controls the physical access to the network based on the authentication status of the client The authenticator acts as an intermediary proxy between the client and the authentication server i e...

Page 110: ...Control The port state determines whether or not the supplicant Wireless Client is granted access to the network behind Wireless AP There are two authentication port state on the AP authorized state...

Page 111: ...sts the identity of the client and begins relaying authentication messages between supplicant and the authentication server Each supplicant attempting to access the network is uniquely identified by t...

Page 112: ...ends an EAP request identity frame to the 802 1x client to request its identity typically the authenticator sends an initial identity request frame followed by one or more requests for authentication...

Page 113: ...ZyXEL Communications Corporation 113 The EAPOL packet contains the following fields protocol version packet type packet body length and packet body Most of the fields are obvious The packet type can...

Page 114: ...x session EAPOL Key This is used for TLS authentication method The Wireless AP uses this packet to send the calculated WEP key to the supplicant after TLS negotiation has completed between the supplic...

Page 115: ...Idle Timeout in second N A Key Management Protocol N A Dynamic WEP Key Exchange N A PSK N A WPA Mixed Mode N A Data Privacy for Broadcast Multicast packets N A WPA Broadcast Multicast Key Update Timer...

Page 116: ...users to login to the Wireless AP simultaneously When you use internal authentication server ZyXEL wireless AP is acted as Authenticator and Authentication Server By storing wireless 802 1x client pr...

Page 117: ...r 2 Type a number and press Enter to edit the wireless 802 1x client profile Menu 14 1 Edit Dial in User User Name ZyXEL Active Yes Password Press ENTER to Confirm or ESC to Cancel Key settings Option...

Page 118: ...and decapsulating the Extensible Authentication Protocol EAP frames and interacting with the authentication server When the authenticator receives EAPOL frames and relays them to the authentication s...

Page 119: ...ized The specific exchange of EAP frames depends on the authentication method being used The figure below shows a message exchange initiated by the client using the MD5 Challenge authentication method...

Page 120: ...thentication is 1812 You need not change this value unless your network administrator instructs you to do so Shared Secret Specify a password up to 31 characters as the key to be shared between extern...

Page 121: ...rent degree of attenuation This will cause the RF coverage pattern be irregular and hard to predict Site survey can help us overcome these problem and even provide us a map of RF coverage of the facil...

Page 122: ...gram with all information you gathered in the preparation phase Now you are ready to make the survey 2 Install an access point at the preliminary location 3 User a notebook with wireless client instal...

Page 123: ...the access point installation spot if wireless service is required from corner of the room 6 Repeat step 1 5 and now you should be able to mark an RF coverage area as illustrated in above picutre 7 Y...

Page 124: ...For more information please refer to roaming at PSTN Lifeline Application Notes Usage of PSTN Lifeline By using the PSTN lifeline function you can make and receive regular PSTN phone calls in coexist...

Page 125: ...s you how to configure lifeline under P2602HWL D3A WEB GUI Lifeline configuration To configure lifeline in P2602HWL D3A click on VoIP PSTN Line to display the following screen You can specify a prefix...

Page 126: ...our local emergency services such as Police Dept Fire Dept Emergency Medical services phone number in this field Thus in any cases these unit can be reach in case of emergency by dialing their number...

Page 127: ...SL line 4 Connect the splitter jack where it label Line to ADSL line from the ISP Figure 2 Splitterless type 1 The P2602HWL D3A includes a DSL cable and a RJ 11 cable Connect the DSL cable to the DSL...

Page 128: ...f voice and multimedia sessions over the Internet SIP signaling is separate from the media for which it handles sessions The media that is exchanged during the session can use a different path from th...

Page 129: ...ITSP provided to you Step 6 If you wish to send caller ID check the check box in the Caller ID category if you do not wish to send out caller ID leave the check box uncheck Step 7 Click on Apply to sa...

Page 130: ...nter the port from the SIP Server Port field again here SIP Service Domain A SIP service domain is the domain name that comes after the symbol in a full SIP URI Enter the SIP service domain name in th...

Page 131: ...tion to connect to the Prestige by entering the Management IP address of the Prestige The default management IP of Prestige is 192 168 1 1 Step 2 Enter the administrator password appear on the page of...

Page 132: ...VAD to reduce the bandwidth that a call uses The Prestige will generate and send comfort noise when you are not talking Dialing Interval When you are dialing a telephone number the Prestige waits this...

Page 133: ...ration 133 Each field s detail description of the page is listed below Label Description SIP Account This read only field displays the number of the SIP account that you are configuring The changes th...

Page 134: ...time that the Prestige will allow a SIP session to remain idle without traffic before dropping it Min SE When two SIP devices negotiate a SIP session they must negotiate a common expiration time for...

Page 135: ...ssaging system that supports this feature Expiration Time Use this field to set how long the SIP server should continue providing the message waiting service after receiving a SIP SUBSCRIBE message fr...

Page 136: ...ck on login The default is 1234 Step 3 On the left column click on VoIP Phone Book Speed Dial to bring you to Speed Dial page to enter speed dial configuration page Step 4 Select the entry number you...

Page 137: ...speed dial entry displays in the Speed Dial Phone Book section of the screen Speed Dial Phone Book This section of the screen displays the currently saved speed dial entries You can configure up to 1...

Page 138: ...e Region to display the following screen Use this screen to configure VoIP Common Settings Label Description Region Settings Use the drop down list box to select the country where your Prestige is loc...

Page 139: ...ementary phone services American mode See your User s Guide for supplementary phone service details To take full advantage of the supplementary phone services available though the Prestige s phone por...

Page 140: ...nd gateway must also be set up to use VLAN tags Some switches also give priority to voice traffic based on its VLAN tag Type the VLAN ID VID from 1 to 4095 for the Prestige to add to voice Ethernet fr...

Page 141: ...onfigure Busy Forward to Number Enable this feature to have the Prestige forward incoming calls to the number that you configure when your SIP account has a call connected No Answer Forward to Number...

Page 142: ...re to have the Prestige forward incoming calls to the number that you configure when the phone s connected to the phone port s is busy With call waiting a second call is only forwarded after being rej...

Page 143: ...alls from the number specified in the Incoming Call Number field to the number in the Forward to Number field when the No Answer Waiting Time period expires whether or not the no answer feature is ena...

Page 144: ...s a second call to your telephone number you will hear a call waiting tone Scenario A calls B and start conversation C calls A In this scenario there are 3 kinds of action available The call flow grap...

Page 145: ...Support Notes All contents copyright c 2007 ZyXEL Communications Corporation 145 Scenario 2 If A presses flash key 1 A will disconnect B and answer C Scenario 3 If A presses flash key 2 A will put B...

Page 146: ...llow the steps below Step 1 A is on the phone talking with C A press the flash key to put the caller on hold and get a dial tone Step 2 Dial B phone number directly to make another call Step 3 When th...

Page 147: ...fer an incoming call that you have answered to another phone Note The primary call between user A and user B must be answered before transfer can be initiated Three kinds of call transfer service avai...

Page 148: ...eps below Step 1 A flash B MOH Music On Hold Step 2 A dial 98 C s number Step 3 A hears the ring back tone Step 4 A on hook Step 5 C rings B hear the ring back tone Step 6 C off hook B and C start con...

Page 149: ...al 98 C s Number Step 3 C rings A hears the ring back tone Step 4 C off hook A and C start conversation Step 5 A on hook Step 6 B and C start conversation Application scenario 3 Attendant Transfer A d...

Page 150: ...ars the ring back tone Step 4 C off hook A and C start Conversation Step 5 A flash 98 Step 6 B and C start conversation A hears the busy tone Internal Call This feature is ZyXEL s proprietary implemen...

Page 151: ...u are on an active call at your phone you can park the call by press 97 park number Someone on another phone in the system can then dial the call park number to pick up the call Note The caller must s...

Page 152: ...nfiguration Press 97 park number to park the call Press 97 park number to pick up the call Call Park Call Flow When a call has been established between A and the caller To Call Park the call please fo...

Page 153: ...to input 97 and the park number In the graph below user B presses 97 park number 5000 to pick up the call Call Return With call return you can place a call to the last number that called you either an...

Page 154: ...either on the number that calls you or from where the call originates SIP PSTN or internal Use this feature to let you know where a call comes from before you answer it Application Scenario 1 Ring Se...

Page 155: ...Prestige 2602HWL D3A Support Notes All contents copyright c 2007 ZyXEL Communications Corporation 155 Each filed is described in the following table...

Page 156: ...ND This feature allows you to set your phone not to ring when someone calls you You can set each phone independently using its keypad or configure global setting for all phones using the command line...

Page 157: ...ure Hot Line Auto Dial easily on web GUI VoIP Phone Analog Phone Advanced Or by CLI command setting The CLI commands below are used to configure the Hot Line voice config fxs autodial enable Enable Ho...

Page 158: ...r reserve key to put a call on hold the peer side B will receive INVITE packet with zero IP address in SDP to inform there is no need to send RTP out any more RFC2543 or change the attribute field in...

Page 159: ...ternet Make a PSTN call to the ZyXEL Device and it forwards the call to any SIP based VoIP phone Save on long distance calls The ZyXEL Device creates a VoIP link which can be used to connect to a PSTN...

Page 160: ...XO to SIP Hop on and hop off with Auto Attendant FXO to FXO Trunking Peer to Peer User X uses phone 1 SIP number 33333 making a call to the ZyXEL Device A via VoIP A forwards the call to a User Y PSTN...

Page 161: ...phone 1 phone 3 will ring Configuration details Note In order for remote device to forward calls an outgoing authentication account must match an incoming authentication account s username and passwo...

Page 162: ...ce B Step 1 Choose Activate Trunking in P2602HWL D3A web GUI VoIP Trunking General then click the Apply button Step 2 In P2602HWL D3A web GUI VoIP Trunking Peer Call Set Outgoing Authentication accoun...

Page 163: ...l contents copyright c 2007 ZyXEL Communications Corporation 163 Step 3 In P2602HWL D3A web GUI VoIP Phone Book Speed Dial Choose 01 input number 103 name 103 choose Non Proxy in Type and input IP 172...

Page 164: ...o P2602HWL D3A phone 1 port Phone 2 number 22222 Phone 3 number 103 it is a PTSN phone In this graph User X uses Phone 1 33333 dials SIP phone 2 22222 and hears an alert tone then dials user Y PSTN ph...

Page 165: ...rporation 165 On Device B No special configuration needed Trunking FXO to SIP User Y uses PSTN phone 103 to make a call to the ZyXEL Device A FXO 101 Device A connects B over IP network Application Sc...

Page 166: ...FXO number 101 after hears the alter tone then dials User X SIP phone number 33333 and inputs password 123456 and user X SIP phone 33333 will ring Configuration details On Device A Step 1 Choose Acti...

Page 167: ...is P2602HWL D3A WAN IP 172 25 24 131 SIP 2 number 22222 Life line phone number 101 Device B is P2602HWL D3A SIP1 number 33333 Life line phone number 201 Phone 1 number 203 it is a PSTN phone Phone 2...

Page 168: ...eral Step 2 Set Auto Attendant Timeout 10 sec Dialing Interval 3 sec on P2602HWL D3A web GUI VoIP Trunking General Step 3 Choose Active Auto Attendant Authentication and set password 123456 on P2602HW...

Page 169: ...on Step 2 Set an Outgoing Authentication account It consists of the IP address of a remote peer device the port number to communicate over as well as a username and password to use for authentication...

Page 170: ...tton Set Outgoing Authentication account 1 name Test username 103 and password 1234 peer IP 172 25 24 131 peer port 5060 then click the Apply button FAQ ZyNOS FAQ What is ZyNOS ZyNOS is ZyXEL s propri...

Page 171: ...on to save the change How do I upload the ZyNOS firmware code via embeded web configurator The procedure for uploading ZyNOS via embeded web configurator is as follows a Log on into the web configurat...

Page 172: ...left menu c Press Configuration tab d Press Backup button a pop up windows will ask you where to store the back up romfile e Press Save file and browse to where you want the file be save f Press Save...

Page 173: ...he appropriate header checksums and forwards the packet to the Internet as if it is originated from Prestige using the IP address assigned by ISP When reply packets from the external Internet are rece...

Page 174: ...he device filter group TCP IP and IPX filters belong to the protocol filter group Why can t I configure device filters or protocol filters In ZyNOS you can not mix different filter groups in the same...

Page 175: ...Point to Point Protocol over Ethernet that is an IETF draft standard specifying how a computer interacts with a broadband modem i e xDSL cable wireless etc to achieve access to the high speed data net...

Page 176: ...work interface does the Prestige support The Prestige supports 10 100M Ethernet to connect to the LAN computer or hub switch and 10 100M ADSL interface to the ISP What can we do with Prestige Browse t...

Page 177: ...been assigned the proper access right Is it possible to access a server running behind SUA from the outside Internet If possible how Yes it is possible because Prestige delivers the packet to the loc...

Page 178: ...e network then how big a pipe there is at the head end to the rest of the Internet Different models of PCs and Macs are able to handle IP traffic at varying speeds Very few can handle it at 30 Mbps Et...

Page 179: ...web server and a telnet server on your local network and make them accessible to the outside world If you do not define any servers NAT offers the additional benefit of firewall protection In such ca...

Page 180: ...e ILA to one IGA This is equivalent to SUA i e PAT port address translation ZyXEL s Single User Account feature that previous ZyNOS routers supported the SUA only option in today s routers 3 Many to M...

Page 181: ...enu 15 1 is a convenient pre configured read only Many to One mapping set sufficient for most purposes and helpful to people already familiar with SUA in previous ZyNOS versions What is BOOTP DHCP BOO...

Page 182: ...ou apply the DNS from and update the WAN IP to What is DDNS wildcard Some DDNS servers support the wildcard feature which allows the hostname yourhost dyndns org to be aliased to the same IP address a...

Page 183: ...adapter It allows you to send voice signals over the Internet or VoIP of IP via SIP protocol which is an internationally recongnized standard for VoIP Technology The main difference between P2602HW a...

Page 184: ...the voice analog signal to digital than transmit it and on the receiver end it will also need an analog to digital converter to covert the digital signal back to analog to the person being called can...

Page 185: ...nteroperate with one another In interoperability between the two the industry is making slow but sure progress Interoperability must first happen between vendor implementations of the same protocol SI...

Page 186: ...specific country If for special reason this setting needed to be changed It can be modify through device CI command through telnet For the command please refer to the CI command list in the firmware...

Page 187: ...ted problem If you have an NAT router before it we suggest to use a VoIP ATA VoIP Analog Telephone Adapter such as Prestige ATA series If the problem is a firewall before it Please check with the fire...

Page 188: ...ntrol policy between two networks It may also be defined as a mechanism used to protect a trusted network from an untrusted network The firewall can be thought of two mechanisms One to block the traff...

Page 189: ...e Prestige 1 The Prestige s firewall inspects packets contents and IP headers It is applicable to all protocols that understands data in the packet is intended for other layers from network layer up t...

Page 190: ...ystem Systems may crash hang or reboot What is Teardrop attack Teardrop attack exploits weakness in the reassemble of the IP packet fragments As data is transmitted through a network IP packets are of...

Page 191: ...sulting ICMP traffic will not only clog up the intermediary network but will also congest the network of the spoofed source IP address known as the victim network This flood of broadcast traffic consu...

Page 192: ...that claim to be from the inside Allow everything that is not spoofing us Filter rule setup Filter type TCP IP Filter Rule Active Yes Source IP Addr a b c d Source IP Mask w x y z Action Matched Drop...

Page 193: ...keywords are supported IPSec FAQ What is VPN A VPN gives users a secure link to access corporate network over the Internet or other public or private networks without the expense of lease lines A sec...

Page 194: ...for VPNs They are Point to Point Tunneling Protocol PPTP Layer 2 Tunneling Protocol L2TP and Internet Protocol Security IPSec What is PPTP PPTP is a tunneling protocol defined by the PPTP forum that a...

Page 195: ...upper layer protocols of an IP payload Transport mode is mainly for an IP host to protect the data generated locally while tunnel mode is for security gateway to provide IPSec service for other machin...

Page 196: ...ecure than manual key because IKE negotiation can generate new keys and SPIs randomly for the VPN connection What is Phase 1 ID for In IKE phase 1 negotiation IP address of remote peer is treated as a...

Page 197: ...amic IP address you may need to configure ID for the one with dynamic IP address And in this case Aggressive mode is recommended to be applied in phase 1 negotiation Is my Prestige ready for IPSec VPN...

Page 198: ...cryption can be used with or without authentication integrity Similarly one could use authentication integrity with or without confidentiality I am planning my Prestige to Prestige VPN configuration W...

Page 199: ...ed side in order to update its dynamic IP to the fixed side However if both gateways use dynamic IP addresses it is no way to establish VPN connection at all What VPN gateway that has been tested with...

Page 200: ...y behind NAT ESP tunnel mode NAT in Transport mode None The NAT router must support IPSec pass through For example for Prestige SUA NAT routers IPSec pass through is supported since ZyNOS 3 21 The def...

Page 201: ...otes All contents copyright c 2007 ZyXEL Communications Corporation 201 If I have NAT router between two VPN gateways and I would like to use IP type as Phase 1 ID what should I know We presume your e...

Page 202: ...cycle packet triggering is still necessary to make the tunnel up Single Range Subnet which types of IP address do Prestige 10 10II 10W 50 100 support in VPN IPSec The mentioned Prestige series support...

Page 203: ...Typical bit rates are 11Mbps and 54Mbps although in practice data throughput is half of this Wireless LANs can be formed simply by equipping PC s with wireless NICs If connectivity to a wired LAN is r...

Page 204: ...is relative high because the equipment cost including access point and PCMCIA Wireless LAN card is higher than hubs and CAT 5 cables Where can you find wireless 802 11 networks Airports hotels and ev...

Page 205: ...possible by combining channels Due to higher frequency range is less than lower frequency systems i e 802 11b and 802 11g and can increase the cost of the overall solution because a greater number of...

Page 206: ...11b and Bluetooth devices occupy the same2 4 to 2 483 GHz unlicensed frequency range the same band But a Bluetooth device would not interfere with other 802 11 devices much more than another 802 11 d...

Page 207: ...d on usage Specialized applications are characteristically designed around short burst messaging What is Ad Hoc mode A wireless network consists of a number of stations without access points Without u...

Page 208: ...signed for 2 4GHz or 5GHz operation WLAN NICs often include an internal antenna which may provide sufficient reception Why the 2 4 Ghz Frequency range This frequency range has been set aside by the FC...

Page 209: ...ncryption key lengths Note WEP has shown to have fundamental flaws in its key generation processing What is the difference between 40 bit and 64 bit WEP 40 bit WEP 64 bit WEP are the same encryption l...

Page 210: ...mate traffic Many of the sniffer tools for Ethernet are based on capturing the first part of the connection session where the data would typically include the username and password An intruder can mas...

Page 211: ...ort The authentication process begins when the link state of the port transitions from down to up or when an EAPOL start frame is received The switch requests the identity of the client and begins rel...

Page 212: ...estige packet trace records and analyzes packets running on LAN and WAN interfaces It is designed for users with technical backgrounds who are interested in the details of the packet flow on LAN or WA...

Page 213: ...s trcp sw on Prestige sys trcl sw on Prestige sys trcd brief 0 11880 160 ENET0 R 0062 TCP 192 168 1 2 1108 192 31 7 130 80 1 11883 100 ENET0 R 0062 TCP 192 168 1 2 1108 192 31 7 130 80 2 11883 330 ENE...

Page 214: ...B 13067 Flags 0x02 Fragment Offset 0x00 Time to Live 0x80 128 Protocol 0x06 TCP Header Checksum 0x3E71 15985 Source IP 0xC0A80102 192 168 1 2 Destination IP 0xC01F0782 192 31 7 130 TCP Header Source P...

Page 215: ...A0C5921311 Network Type 0x0800 TCP IP IP Header IP Version 4 Header Length 20 Type of Service 0x00 0 Total Length 0x002C 44 Idetification 0x57F3 22515 Flags 0x02 Fragment Offset 0x00 Time to Live 0xED...

Page 216: ...31 7 130 80 Ethernet Header Destination MAC Addr 00A0C5921311 Source MAC Addr 0080C84CEA63 Network Type 0x0800 TCP IP IP Header IP Version 4 Header Length 20 Type of Service 0x00 0 Total Length 0x0028...

Page 217: ...4 Display the brief trace online by entering sys trcd brief or 1 5 Display the detailed trace online by entering sys trcd parse Example Prestige sys trcp channel enet0 none Prestige sys trcp channel...

Page 218: ...n 0xB139 45369 Flags 0x02 Fragment Offset 0x00 Time to Live 0xEE 238 Protocol 0x06 TCP Header Checksum 0xA9AB 43435 Source IP 0xC01F0782 192 31 7 130 Destination IP 0xCA849B61 202 132 155 97 TCP Heade...

Page 219: ...0001 LAN Frame ENET1 XMIT Size 54 54 Time 12387 490 sec Frame Type TCP 202 132 155 97 10270 192 31 7 130 80 Ethernet Header Destination MAC Addr 00A0C5012345 Source MAC Addr 00A0C5921312 Network Type...

Page 220: ...e 54 54 Time 12387 490 sec Frame Type TCP 202 132 155 97 10270 192 31 7 130 80 Ethernet Header Destination MAC Addr 00A0C5012345 Source MAC Addr 00A0C5921312 Network Type 0x0800 TCP IP IP Header IP Ve...

Page 221: ...LAN packet 2 Trace WAN packet 1 Trace LAN packet 1 1 Disable to capture the WAN packet by entering sys trcp channel enet1 none 1 2 Enable to capture the LAN packet by entering sys trcp channel enet0...

Page 222: ...2 31 7 130 80 192 168 1 2 1102 5 10856 030 ENET0 T 0058 TCP 192 31 7 130 80 192 168 1 2 1103 6 10856 040 ENET0 R 0060 TCP 192 168 1 2 1103 192 31 7 130 80 Prestige sys trcp parse 5 5 0005 LAN Frame EN...

Page 223: ...40 5F 60 12 P O _ 0030 FA F0 DC EF 00 00 02 04 05 B4 Prestige 2 Trace WAN packet 1 1 Disable to capture the LAN packet by entering sys trcp channel enet0 none 1 2 Enable to capture the WAN packet by...

Page 224: ...CP 204 217 0 2 80 202 132 155 97 10282 Prestige sys trcp parse 3 4 0003 LAN Frame ENET1 RECV Size 247 96 Time 12865 120 sec Frame Type TCP 204 217 0 2 80 202 132 155 97 10278 Ethernet Header Destinati...

Page 225: ...0 F0 06 6E 15 CC D9 00 02 CA 84 n 0020 9B 61 00 50 28 26 4D 71 3D 8A 00 C8 C0 15 50 18 a P Mq P 0030 22 38 AB 57 00 00 48 54 54 50 2F 31 2E 31 20 33 8 W HTTP 1 1 3 0040 30 34 20 4E 6F 74 20 4D 6F 64 6...

Page 226: ...th 357 Captured 42 0000 47 45 54 20 2F 70 69 63 74 75 72 65 73 2F 6D 61 GET pictures ma 0010 67 61 7A 69 6E 65 5F 6C 6F 67 6F 2F 62 65 73 74 gazine_logo best 0020 6F 66 74 69 6D 65 73 2E 67 69 oftimes...

Page 227: ...restige crashes and you can do nothing please send the above log back to us 6 If the Prestige crashes and you are able to enter commands please type atds in debug mode to dump the log and send the log...

Page 228: ...internet service name integrationisp service name bpa dev service name bpa sif service name telstrarna service name gpmsystems service name cmux service name launceston broadband service name vivanet...

Page 229: ...5bdc050 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ed 2b b f j n e5bdc060 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ed 2b b f j n e5bdc070 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ed 2b b f j n e5bdc0...

Page 230: ...pful for diagnostics if you have compatibility problems with your ISP or if you want to know the details of a packet for configuring a filter rule The format of the display is as following Packet 0 11...

Page 231: ...ET0 R 0062 TCP 192 168 1 2 1108 192 31 7 130 80 2 11883 330 ENET0 T 0058 TCP 192 31 7 130 80 192 168 1 2 1108 3 11883 340 ENET0 R 0060 TCP 192 168 1 2 1108 192 31 7 130 80 4 11883 340 ENET0 R 0339 TCP...

Page 232: ...0x0050 80 Sequence Number 0x00BD35A7 12391847 Ack Number 0x00000000 0 Header Length 28 Flags 0x02 S Window Size 0x2004 8192 Checksum 0xBEC3 48835 Urgent Ptr 0x0000 0 Options 0000 02 04 05 B4 01 01 04...

Page 233: ...80102 192 168 1 2 TCP Header Source Port 0x0050 80 Destination Port 0x045C 1116 Sequence Number 0x4AD3B57F 1255257471 Ack Number 0x00BD35A8 12391848 Header Length 24 Flags 0x12 A S Window Size 0xFAF0...

Page 234: ...tocol 0x06 TCP Header Checksum 0x3C79 15481 Source IP 0xC0A80102 192 168 1 2 Destination IP 0xC01F0782 192 31 7 130 TCP Header Source Port 0x045C 1116 Destination Port 0x0050 80 Sequence Number 0x00BD...

Page 235: ...tailed trace online by entering sys trcd parse Example ras sys trcp channel enet0 none ras sys trcp channel mpoa00 bothway ras sys trcp sw on ras sys trcl sw on ras sys trcd brief 0 12367 680 MPOA00 R...

Page 236: ...2HWL40 Checksum 0x3735 14133 Urgent Ptr 0x0000 0 TCP Data Length 1127 Captured 42 0000 DF 33 AF 62 58 37 52 3D 79 99 A5 3C 2B 59 E2 78 3 bX7R y Y x 0010 A7 98 8F 3F A9 09 E4 0F 26 14 9C 58 3E 95 3E E7...

Page 237: ...x to_index 2 Trace WAN packet 1 1 Disable the capture of the LAN packet by entering sys trcp channel enet0 none 1 2 Enable the capture of the WAN packet by entering sys trcp channel mpoa00 bothway 1 3...

Search results

Summary of Contents for Prestige 2602HWL-D3A

Reviews:

ZyXEL Communications Prestige 2602HWL-D3A, Support Manual, Page: 133 / 237

Search results

Summary of Contents for Prestige 2602HWL-D3A

Reviews: