Pepwave MAX User Manual Pepwave Products: MAX 700 / HD2 / HD2 IP67 / HD2 mini / HD4 / Transit / MAX Transit Mini / Max transit Mini / MAX-Transit-Mini / MAX Transit Mini LTE / Max Transit Mini LTE / MAX Transit Mini LTEA / Max Transit Mini LTEA / BR1 Classic / BR1 MK2 / BR1 Slim / BR1 ENT / MAX BR1 M2M / MAX BR1 Mini / Max BR1 Mini / MAX BR1 Mini LTE / MAX BR1 Mini LTEA / MAX-BR1-MINI-LTE-US / MAX-BR1-MINI-LTE-US-T / BR1 Pro LTE / BR1 IP55 / BR2 IP55 / On-The-Go / MAX HD2 / HD4 with MediaFast / SpeedFusion
Table of Contents Introduction and Scope 7 Glossary 8 Product Features Supported Network Features WAN LAN VPN Firewall Captive Portal Outbound Policy AP Controller QoS Other Supported Features 9 9 9 10 10 10 10 11 11 11 11 Pepwave MAX Mobile Router Overview MAX 700 MAX HD2 MAX HD2 IP67 MAX HD2 mini MAX Transit MAX Transit Mini MAX HD4 / HD2 and HD4 with MediaFast MAX BR1 Classic MAX BR1 MK2 MAX BR1 Slim MAX BR1 Mini MAX BR1 M2M MAX BR1 ENT MAX BR1 Pro LTE MAX Hotspot MAX BR1/2 IP55 MAX On-The-Go Speed
Drop-in Mode and LAN Bypass: Transparent Deployment QoS: Clearer VoIP Per-User Bandwidth Control High Availability via VRRP USB Modem and Android Tethering Built-In Remote User VPN Support SIM-card USSD support 40 41 41 42 42 43 43 Installation Preparation Constructing the Network Configuring the Network Environment 44 44 44 45 Mounting the Unit Wall Mount Car Mount IP67 Installation Guide 45 45 46 46 Connecting to the Web Admin Interface 46 Configuring the LAN Interface(s) Basic Settings Port Setti
Viewing MediaFast Statistics 95 Bandwidth Bonding SpeedFusionTM / PepVPN PepVPN The Pepwave Router Behind a NAT Router SpeedFusionTM Status 96 97 103 104 IPsec VPN IPsec VPN Settings 104 104 Outbound Policy Management Outbound Policy Custom Rules for Outbound Policy Algorithm: Weighted Balance Algorithm: Persistence Algorithm: Enforced Algorithm: Priority Algorithm: Overflow Algorithm: Least Used Algorithm: Lowest Latency Expert Mode 109 109 111 111 112 113 114 114 115 115 116 Inbound Access Port Fo
Application Blocking Web Blocking Customized Domains Exempted User Groups Exempted Subnets URL Logging OSPF & RIPv2 BGP 128 128 129 129 129 129 129 133 Remote User Access 135 Miscellaneous Settings High Availability PPTP Server Certificate Manager Service Forwarding SMTP Forwarding Web Proxy Forwarding DNS Forwarding Custom Service Forwarding Service Passthrough GPS Forwarding 137 137 141 143 143 144 145 145 145 145 147 AP Controller Wireless SSID Settings 147 148 152 AP Controller Status Info Acces
Schedule Email Notification Event Log SNMP InControl Configuration Feature Add-ons Reboot 171 172 174 175 178 178 179 179 Tools Ping Traceroute Test PepVPN Test Wake-on-LAN CLI (Command Line Interface Support) 180 180 180 181 182 182 Status Device GPS Data Active Sessions Client List WINS Client UPnP / NAT-PMP SpeedFusion Status Event Log Bandwidth Status Real-Time Hourly Daily Monthly 183 183 184 184 186 187 187 188 191 192 193 193 193 194 Appendix B: Declaration 198 https://www.peplink.
1 Introduction and Scope Pepwave routers provide link aggregation and load balancing across multiple WAN connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi, external WiMAX dongle, and satellite to be utilized to connect to the Internet. The MAX wireless SD-WAN router series has a wide range of products suitable for many different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are suitable for SMEs or branch offices.
2 Glossary The following terms, acronyms, and abbreviations are frequently used in this manual: Term Definition 3G 3rd generation standards for wireless communications (e.g., HSDPA) 4G 4th generation standards for wireless communications (e.g.
VPN 3 Virtual Private Network VRRP Virtual Router Redundancy Protocol WAN Wide Area Network WINS Windows Internet Name Service WLAN Wireless Local Area Network Product Features Pepwave routers enable all LAN users to share broadband Internet connections, and they provide advanced features to enhance Internet access. Our Max BR wireless routers support multiple SIM cards.
● tzo.com and DNS-O-Matic) Ping, DNS lookup, and HTTP-based health check 3.1.2 LAN ● ● ● ● ● ● Wi-Fi AP Ethernet LAN ports DHCP server on LAN Extended DHCP option support Static routing rules VLAN on LAN support 3.1.3 VPN ● ● ● ● ● ● ● ● ● ● ● PepVPN with SpeedFusionTM PepVPN performance analyzer X.
3.1.6 Outbound Policy ● ● ● ● Link load distribution per TCP/UDP service Persistent routing for specified source and/or destination IP addresses per TCP/UDP service Traffic prioritization and DSL optimization Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms 3.1.7 AP Controller ● ● Configure and manage Pepwave AP devices Review the status of connected APs 3.1.8 QoS ● ● ● ● 3.
● ● ● ● ● ● ● Active sessions Client list WINS client list * UPnP / NAT-PMP Real-time, hourly, daily, and monthly bandwidth usage reports and charts IPv6 support Support USB tethering on Android 2.2+ phones * Not supported on MAX Surf-On-The-Go, and BR1 variants https://www.peplink.
4 Pepwave MAX Mobile Router Overview 4.1 MAX 700 4.1.1 Panel Appearance 4.1.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready https://www.peplink.
Wi-Fi AP and Wi-Fi WAN Indicators Wi-Fi WAN Wi-Fi AP OFF Disconnected Blinking slowly Connecting to network Blinking Connected to network with traffic ON Connected to network without traffic OFF Disabled Blinking slowly Enabled but no client connected Blinking Connected to network with traffic ON Client(s) connected to wireless network LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 10 / 100/ 1000 Mbps Blinking Data is transferring OFF No data is being transferred or po
4.2 MAX HD2 4.2.1 Panel Appearance https://www.peplink.
4.2.
4.3 MAX HD2 IP67 4.3.1 Panel Appearance The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready https://www.peplink.
4.4 MAX HD2 mini 4.4.1 Panel Appearance 4.4.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready https://www.peplink.
Cellular WAN Indicators Cellular 1 / Cellular 2 OFF Disabled intermittent Blinking slowly Connecting to wireless network(s) Blinking Connected to wireless network(s) with traffic ON Connected to wireless network(s) without traffic LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 10 / 100 / 1000 Mbps Blinking Data is transferring OFF No data is being transferred or port is not connected Auto MDI/MDI-X ports https://www.peplink.
4.5 MAX Transit 4.5.1 Panel Appearance 4.5.
LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 10 / 100 / 1000 Mbps Blinking Data is transferring OFF No data is being transferred or port is not connected Auto MDI/MDI-X ports 4.6 MAX Transit Mini 4.6.1 Panel Appearance https://www.peplink.
4.6.
4.7 MAX HD4 / HD2 and HD4 with MediaFast 4.7.1 Panel Appearance 4.7.
LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 10 / 100 / 1000 Mbps Blinking Data is transferring OFF No data is being transferred or port is not connected Auto MDI/MDI-X ports 4.8 MAX BR1 Classic 4.8.1 Panel Appearance https://www.peplink.
4.8.
4.9 MAX BR1 MK2 4.9.1 Panel Appearance 4.9.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready https://www.peplink.
Wi-Fi Indicators Wi-Fi OFF Disabled intermittent Blinking slowly Connecting to wireless network(s) Blinking Connected to wireless network(s) with traffic ON Connected to wireless network(s) without traffic Cellular Indicators Cellular OFF Disabled or no SIM card inserted ON Connecting or connected to network(s) LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring OFF Port is not connect
4.10 MAX BR1 Slim 4.10.1 Panel Appearance 4.10.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready Wi-Fi Indicators Wi-Fi OFF Disabled intermittent Blinking slowly Connecting to wireless network(s) Blinking Connected to wireless network(s) with traffic ON Connected to wireless network(s) without traffic https://www.peplink.
Cellular Indicators Cellular OFF Disabled or no SIM card inserted ON Connecting or connected to network(s) LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring OFF Port is not connected Auto MDI/MDI-X ports https://www.peplink.
4.11 MAX BR1 Mini 4.11.1 Panel Appearance 4.11.2 LED Indicators Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready https://www.peplink.
Cellular Indicators Cellular OFF Disabled or no SIM card inserted ON Connecting or connected to network(s) LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring OFF Port is not connected Auto MDI/MDI-X ports 4.12 MAX BR1 M2M 4.12.1 Panel Appearance 4.12.2 LED Indicators https://www.peplink.
The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready Cellular Indicators Cellular OFF Disabled or no SIM card inserted ON Connecting or connected to network(s) LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring OFF Port is not connected Auto MDI/MDI-X ports https:
4.13 MAX BR1 ENT 4.13.1 Panel Appearance 4.13.
4.14 MAX BR1 Pro LTE 4.14.1 Panel Appearance 4.14.2 LED Indicators ● The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready Cellular Indicators Cellular OFF Disabled or no SIM card inserted ON Connecting or connected to network(s) https://www.peplink.
LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring OFF Port is not connected Auto MDI/MDI-X ports https://www.peplink.
4.15 MAX Hotspot 4.15.1 Panel Appearance 4.15.2 LED Indicators LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 10 / 100 / 1000 Mbps Blinking Data is transferring OFF No data is being transferred or port is not connected Auto MDI/MDI-X ports 4.16 MAX BR1/2 IP55 4.16.1 Panel Appearance https://www.peplink.
4.16.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF System initializing Red Booting up or busy Blinking red Boot up error Green Ready Wi-Fi Indicators Wi-Fi OFF Disabled Intermittent Blinking slowly Connecting to wireless network(s) Blinking Connected to wireless network(s) with traffic ON Connected to wireless network(s) without traffic https://www.peplink.
Cellular Indicators Cellular OFF Disabled or no SIM card inserted ON Connecting or connected to network(s) LAN and Ethernet WAN Ports Green LED Orange LED Port Type ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring OFF Port is not connected Auto MDI/MDI-X ports 4.17 MAX On-The-Go 4.17.1 Panel Appearance https://www.peplink.
4.17.
4.18 SpeedFusion Engine 4.18.1 Panel Appearance 5 Advanced Feature Summary 5.1 Drop-in Mode and LAN Bypass: Transparent Deployment As your organization grows, it needs more bandwidth. But modifying your network would require effort better spent elsewhere. In Drop-in Mode, you can conveniently install your Peplink router without making any changes to your network.
5.2 QoS: Clearer VoIP VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers can detect VoIP traffic and assign it the highest priority, giving you crystal-clear calls. 5.3 Per-User Bandwidth Control With per-user bandwidth control, you can define bandwidth control policies for up to 3 groups of users to prevent network congestion. Define groups by IP address and subnet, and set bandwidth limits for every user in the group. https://www.peplink.
5.4 High Availability via VRRP When your organization has a corporate requirement demanding the highest availability with no single point of failure, you can deploy two Peplink routers in High Availability mode. With High Availability mode, the second device will take over when needed. Compatible with: MAX 700, MAX HD2 (All variants), HD4 (All Variants) 5.5 USB Modem and Android Tethering For increased WAN diversity, plug in a USB LTE modem as backup.
5.6 Built-In Remote User VPN Support Use L2TP with IPsec to safely and conveniently connect remote clients to your private network. L2TP with IPsec is supported by most devices, but legacy devices can also connect using PPTP. Click here for full instructions on setting up L2TP with IPsec. 5.7 SIM-card USSD support Cellular-enabled routers can now use USSD to check their SIM card’s balance, process prepaid cards, and configure carrier-specific services.Click here for full instructions on using USSD.
6 Installation The following section details connecting Pepwave routers to your network. 6.1 Preparation Before installing your Pepwave router, please prepare the following as appropriate for your installation: ● ● ● 6.
The following figure schematically illustrates the resulting configuration: 6.3 Configuring the Network Environment To ensure that the Pepwave router works properly in the LAN environment and can access the Internet via WAN connections, please refer to the following setup procedures: ● LAN configuration For basic configuration, refer to Section 8, Connecting to the Web Admin Interface. For advanced configuration, go to Section 9, Configuring the LAN Interface(s).
7.2 Car Mount The Pepwave MAX700/HD2 can be mounted in a vehicle using the included mounting brackets. Place the mounting brackets by the two sides and screw them onto the device. 7.3 IP67 Installation Guide Installation instructions for IP67 devices can be found here: http://download.peplink.com/manual/IP67_Installation_Guide.pdf 8 Connecting to the Web Admin Interface 1. Start a web browser on a computer that is connected with the Pepwave router through the LAN. 2.
https://www.peplink.
The Dashboard shows current WAN, LAN, and Wi-Fi AP statuses. Here, you can change WAN connection priority and switch on/off the Wi-Fi AP. For further information on setting up these connections, please refer to Sections 8 and 9. Device Information displays details about the device, including model name, firmware version, and uptime. For further information, please refer to Section 22. Important Note Configuration changes (e.g. WAN, LAN, admin settings, etc.
9 Configuring the LAN Interface(s) 9.1 Basic Settings LAN interface settings are located at Network>LAN>Network Settings. Navigating to that page will result in the following dashboard: This represents the LAN interfaces that are active on your router (including VLAN). A grey “X” means that the VLAN is used in other settings and cannot be deleted. You can find which settings are using the VLAN by hovering over the grey “X”. Alternatively, a red “X” means that there are no settings using the VLAN.
Network Settings Name VLAN ID Inter-VLAN routing Captive Portal Enter a name for the LAN. Enter a number for your VLAN. Check this box to enable routing between virtual LANs. Check this box to turn on captive portals. Drop-in Mode Settings https://www.peplink.
Enable Drop-in mode eases the installation of Peplink routers on a live network between the existing firewall and router, such that no configuration changes are required on existing equipment. Check the box to enable the drop-in mode feature, if available on your model. WAN for Drop-In Select the WAN port to be used for drop-in mode. If WAN 1 with LAN Bypass is selected, the high availability feature will be disabled automatically.
The remote network of the selected PepVPN profiles will be bridged with this local PepVPN Profiles LAN, creating a Layer 2 PepVPN, they will be connected and operate like a single to Bridge LAN, and any broadcast or multicast packets will be sent over the VPN. Spanning Tree Protocol Override IP Address when bridge connected Click the box will enable STP for this layer 2 profile bridge.
DNS Servers This option allows you to input the DNS server addresses to be offered to DHCP clients. If Assign DNS server automatically is selected, the Pepwave router’s built-in DNS server address (i.e., LAN IP address) will be offered. WINS Server This option allows you to optionally specify a Windows Internet Name Service (WINS) server. You may choose to use the built-in WINS server or external WINS servers.
set, you may choose whether to advertise its speed to the peer device. Auto is selected by default. You can choose not to advertise the port speed if the port has difficulty negotiating with the peer device. Static Route Settings Static Route This table is for defining static routing rules for the LAN segment. A static route consists of the network address, subnet mask, and gateway address. The address and subnet mask values are in w.x.y.z format.
DNS Proxy Settings Enable To enable the DNS proxy feature, check this box, and then set up the feature at Network>LAN>DNS Proxy Settings. A DNS proxy server can be enabled to serve DNS requests originating from LAN/PPTP/SpeedFusionTM peers. Requests are forwarded to the DNS servers/resolvers defined for each WAN connection. DNS Caching This field is to enable DNS caching on the built-in DNS proxy server.
resolvers will be selected. If a SpeedFusionTM peer is selected, you may enter the VPN peer’s DNS resolver IP address(es). Queries will be forwarded to the selected connections’ resolvers. If all of the selected connections are down, queries will be forwarded to all resolvers on healthy WAN connections. A - Advanced feature, please click the button on the top right hand corner to activate. Finally, if needed, configure Bonjour forwarding, Apple’s zero configuration networking protocol.
IP Settings IP Address & Subnet Mask Enter the Pepwave router’s IP address and subnet mask values to be used on the LAN. Network Settings Name VLAN ID Inter-VLAN routing Captive Portal Enter a name for the LAN. Enter a number for your VLAN. Check this box to enable routing between virtual LANs. Check this box to turn on captive portals. DHCP Server Settings https://www.peplink.
DHCP Server When this setting is enabled, the Pepwave router’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP address via DHCP. The Pepwave router’s DHCP server can prevent IP address collisions on the LAN. To enable DHCP bridge relay, please click the IP Range & Subnet Mask Lease Time icon on this menu item. These settings allocate a range of IP address that will be assigned to LAN computers by the Pepwave router’s DHCP server.
display the settings. DHCP Relay Settings Enable Check this box to turn on DHCP relay. Click the icon to disable DHCP relay. Enter the IP addresses of one or two DHCP servers in the provided fields. The DHCP Server IP DHCP servers entered here will receive relayed DHCP requests from the LAN. For active-passive DHCP server configurations, enter active and passive DHCP server Address relay IP addresses in DHCP Server 1 and DHCP Server 2.
Captive Portal Settings Enable Check Enable and then, optionally, select the LANs/VLANs that will use the captive portal. Hostname To customize the portal’s form submission and redirection URL, enter a new URL in this field. To reset the URL to factory settings, click Default. Access Mode Click Open Access to allow clients to freely access your router. Click User Authentication to force your clients to authenticate before accessing your router. This authenticates your clients through a RADIUS server.
Fill in the necessary information to complete your connection to the server and enable authentication. Access Quota Set a time and data cap to each user’s Internet usage. Quota Reset Time This menu determines how your usage quota resets. Setting it to Daily will reset it at a specified time every day. Setting a number of minutes after quota reached establish a timer for each user that begins after the quota has been reached.
Portal Customization Logo Image Message Terms & Conditions Custom Landing Page Click the Choose File button to select a logo to use for the built-in portal. If you have any additional messages for your users, enter them in this field. If you would like to use your own set of terms and conditions, please enter them here. If left empty, the built-in portal will display the default terms and conditions. Fill in this field to redirect clients to an external URL.
releasing the mouse button. To disable a particular WAN connection, drag on the appropriate WAN by holding the left mouse button, move it the Disabled row, and drop it by releasing the mouse button. You can also set priorities on the Dashboard. Click the Details button in the corresponding row to modify the connection setting. Important Note Connection details will be changed and become effective immediately after clicking the Save and Apply button. 10.1 Ethernet WAN https://www.peplink.
Health Check Settings This field specifies the Health Check method to be used for this WAN connection. ● ● Health Check Method ● ● Disabled - The WAN connection is always considered to be up and will not be treated as down for any IP routing errors. PING - ICMP PING packets will be issued to test connectivity with configurable target IP addresses or host names. DNS Lookup - DNS lookups will be issued to test the connectivity with configurable target DNS server IP addresses.
Bandwidth Allowance Monitor Settings Bandwidth Allowance Monitor Check the box Enable to enable bandwidth usage monitoring on this WAN connection for each billing cycle. When this option is not enabled, bandwidth usage of each month is still being tracked but no action will be taken. If Email Notification is enabled, you will receive an email notification when usage hits 75% and 95% of the monthly allowance.
Dynamic DNS Settings This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: Dynamic DNS Service Provider ● ● ● ● ● changeip.com dyndns.org no-ip.org tzo.com DNS-O-Matic Select Disabled to disable this feature. See Section 9.5 for configuration details. 10.1.1 DHCP Connection There are four possible connection methods: 1. DHCP 2. Static IP 3. PPPoE 4.
network requires it. IP Address/ Subnet Mask/ Default Gateway This information is obtained from the ISP automatically. Hostname (Optional) If your service provider's DHCP server requires you to supply a hostname value upon acquiring an IP address, you may enter the value here. If your service provider does not provide you with the value, you can safely bypass this option. DNS Servers Each ISP may provide a set of DNS servers for DNS lookups.
Gateway DNS Servers Each ISP may provide a set of DNS servers for DNS lookups. This setting specifies the DNS (Domain Name System) servers to be used when a DNS lookup is routed through this connection. Selecting Obtain DNS server address automatically results in the DNS servers being assigned by the WAN DHCP server to be used for outbound DNS lookups over the connection. (The DNS servers are obtained along with the WAN IP address assigned from the DHCP server.
PPPoE User Name / Password Confirm PPPoE Password Enter the required information in these fields in order to connect via PPPoE to the ISP. The parameter values are determined by and can be obtained from the ISP. Verify your password by entering it again in this field. Service Name (Optional) Service name is provided by the ISP. Note: Leave this field blank unless it is provided by your ISP. IP Address (Optional) If your ISP provides a PPPoE IP address, enter it here.
L2TP Username / Password Enter the required information in these fields in order to connect via L2TP to your ISP. The parameter values are determined by and can be obtained from your ISP. Confirm L2TP Password Verify your password by entering it again in this field. Server IP Address / Host L2TP server address is a parameter which is provided by your ISP. Note: Leave this field blank unless it is provided by your ISP.
To access cellular WAN settings, click Network>WAN>Details. (Available on the Pepwave MAX BR1, HD2, and HD2 IP67 only) Cellular Status IMSI This is the International Mobile Subscriber Identity which uniquely identifies the SIM card. This is applicable to 3G modems only. MEID Some Pepwave routers support both HSPA and EV-DO. For Sprint or Verizon Wireless EV-DO users, a unique MEID identifier code (in hexadecimal format) is used by the carrier to associate the EV-DO device with the user.
WAN Connection Enter a name to represent this WAN connection. Name Operating Schedule Click the drop-down menu to apply a time schedule to this interface if needed. Auto: The subnet mask will be set automatically. Subnet Selection Routing Mode Force /31 Subnet: The subnet mask will be set as 255.255.255.254(/31), and the gateway IP address will be recalculated. This option allows you to select the routing method to be used in routing IP frames via the WAN connection.
Cellular Settings SIM Card Indicate which SIM card this cellular WAN will use. Only applies to cellular WAN with redundant SIM cards. Preferred SIM Card If both cards were enabled on the above field, then you can designate the priority of the SIM card slots here. 3G/2G This drop-down menu allows restricting cellular to particular band. Click the https://www.peplink.
button to enable the selection of specific bands. Authentication Choose from PAP Only or CHAP Only to use those authentication methods exclusively. Select Auto to automatically choose an authentication method. Data Roaming This checkbox enables data roaming on this particular SIM card. Please check your service provider’s data roaming policy before proceeding. This setting applies to 3G/EDGE/GPRS modems only. It does not apply to EVDO/EVDO Rev. A modems.
Independent from Backup WANs If this is checked, the connection will be working independent from other Backup WAN connections. Those in Backup Priority will ignore the status of this WAN connection, and will be used when none of the other higher priority connections are available. Standby State This option allows you to choose whether to remain connected or disconnected when this WAN connection is no longer in the highest priority and has entered the standby state.
Dynamic DNS Settings This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: ● ● ● ● ● Dynamic DNS Service Provider changeip.com dyndns.org no-ip.org tzo.com DNS-O-Matic Select Disabled to disable this feature. See Section 9.5 for configuration details. MTU MTU This field is for specifying the Maximum Transmission Unit value of the WAN connection. An excessive MTU value can cause file downloads stall shortly after connected.
Operating Schedule Click the drop-down menu to apply a time schedule to this interface. If this is checked, the connection will be working independent from other Backup Independent from WAN connections. Those in Backup Priority will ignore the status of this WAN connection, and will be used when none of the other higher priority connections Backup WANs are available. Standby State This setting specifies the state of the WAN connection while in standby.
Data Rate Selecting Auto will enable the router to automatically determine the best data rate, while manually selecting a rate will force devices to connect using the fixed rate. Output Power If you are setting up a network with many Wi-Fi devices in close proximity, then you can configure the output power here. Click the “boost” button for additional power. However, with that option ticked, output power may exceed local regulatory limits. Roaming Checking this box will enable Wi-Fi roaming.
Monthly Allowance This field is for defining the maximum bandwidth usage allowed for the WAN connection each month. Health Check Settings Method This setting specifies the health check method for the WAN connection. This value can be configured as Disabled, PING, DNS Lookup, or HTTP. The default method is DNS Lookup. For mobile Internet connections, the value of Method can be configured as Disabled or SmartCheck.
Health Check Method: DNS Lookup DNS lookups will be issued to test connectivity with target DNS servers. The connection will be treated as up if DNS responses are received from one or both of the servers, regardless of whether the result was positive or negative. Health Check DNS Servers This field allows you to specify two DNS hosts’ IP addresses with which connectivity is to be tested via DNS Lookup.
Other Health Check Settings Timeout This setting specifies the timeout in seconds for ping/DNS lookup requests. The default timeout is 5 seconds. Health Check Interval This setting specifies the time interval in seconds between ping or DNS lookup requests. The default health check interval is 5 seconds. Health Check Retries This setting specifies the number of consecutive ping/DNS lookup timeouts after which the Peplink Balance will treat the corresponding WAN connection as down.
Service Provider User ID / User / Email This setting specifies the dynamic DNS service provider to be used for the WAN. Supported providers are: ● changeip.com ● dyndns.org ● no-ip.org ● tzo.com ● DNS-O-Matic Select Disabled to disable this feature. This setting specifies the registered user name for the dynamic DNS service. Password / Pass / TZO Key This setting specifies the password for the dynamic DNS service. Update All Hosts Check this box to automatically update all hosts.
Wi-Fi Connection Profile Settings Type Network Name (SSID) Select whether the network will connect automatically or manually. Enter a name to represent this Wi-Fi connection. This option allows you to select which security policy is used for this wireless network. Available options: ● Open ● WEP ● WPA/WPA2 – Personal ● WPA/WPA2 – Enterprise Security https://www.peplink.
10.4 WAN Health Check To ensure traffic is routed to healthy WAN connections only, the Pepwave router can periodically check the health of each WAN connection. The health check settings for each WAN connection can be independently configured via Network>WAN>Details. Health Check Settings Method This setting specifies the health check method for the WAN connection. This value can be configured as Disabled, PING, DNS Lookup, or HTTP. The default method is DNS Lookup.
Health Check DNS Servers This field allows you to specify two DNS hosts’ IP addresses with which connectivity is to be tested via DNS lookup. If Use first two DNS servers as Health Check DNS Servers is checked, the first two DNS servers will be the DNS lookup targets for checking a connection's health. If the box is not checked, Host 1 must be filled, while a value for Host 2 is optional.
Timeout This setting specifies the timeout in seconds for ping/DNS lookup requests. The default timeout is 5 seconds. Health Check Interval This setting specifies the time interval in seconds between ping or DNS lookup requests. The default health check interval is 5 seconds. Health Check Retries This setting specifies the number of consecutive ping/DNS lookup timeouts after which the Pepwave router will treat the corresponding WAN connection as down. Default health retries is set to 3.
The settings for dynamic DNS service provider(s) and the association of hostname(s) are configured via Network>WAN>Details>Dynamic DNS Service Provider/Dynamic DNS Settings. Dynamic DNS Settings Dynamic DNS This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: ● changeip.com ● dyndns.org ● no-ip.org ● tzo.com ● DNS-O-Matic ● Others… Support custom Dynamic DNS servers by entering its URL.
11 Advanced Wi-Fi Settings Wi-Fi settings can be configured at Advanced>Wi-Fi Settings (or AP>Settings on some models). Note that menus displayed can vary by model. AP Settings SSID You can select the wireless networks for 2.4 GHz or 5 GHz seperately for each SSID. Operating Country This drop-down menu specifies the national/regional regulations which the WiFi radio should follow.
AP Settings (part 2) Protocol This option allows you to specify whether 802.11b and/or 802.11g client association requests will be accepted. Available options are 802.11ng and 802.11na. By default, 802.11ng is selected. Channel Width Available options are 20 MHz, 40 MHz, and Auto (20/40 MHz) . Default is Auto (20/40 MHz), which allows both widths to be used simultaneously. Channel This option allows you to select which 802.11 RF channel will be utilized. Channel 1 (2.412 GHz) is selected by default.
Advanced AP Settings This field specifies the VLAN ID to tag to management traffic, such as communication traffic between the AP and the AP Controller. The value is zero Management VLAN by default, which means that no VLAN tagging will be applied. ID NOTE: Change this value with caution as alterations may result in loss of connection to the AP Controller. Operating Schedule Choose from the schedules that you have defined in System>Schedule.
Slot Time A This field is for specifying the unit wait time before transmitting a packet. By default, this field is set to 9 µs. ACK Timeout A This field is for setting the wait time to receive an acknowledgement packet before performing a retransmission. By default, this field is set to 48 µs. Frame Aggregation This option allows you to enable frame aggregation to increase transmission A A throughput. - Advanced feature, please click the https://www.peplink.
Web Administration Settings Enable Web Access Protocol Ticking this box enables web admin access for APs located on the WAN. Determines whether the web admin portal can be accessed through HTTP or HTTPS Management Port Determines the port at which the management UI can be accessed. Admin Username Determines the username to be used for logging into the web admin portal Admin Password Determines the password for the web admin portal on external AP.
12 MediaFast Configuration MediaFast settings can be configured from the Network menu. 12.1 Setting Up MediaFast Content Caching To access MediaFast content caching settings, select Advanced>Cache Control Cache Control Settings Domain Choose to Cache on all domains, or enter domain names and then choose either Cache the specified domains only or Do not cache the specified domains. Source IP Subnet This setting allows caching to be applied to the user-specified IP subnets.
12.2 Scheduling Content Prefetching Content prefetching allows you to download content on a schedule that you define, which can help to preserve network bandwidth during busy times and keep costs down. To access MediaFast content prefetching settings, select Advanced >Prefetch Schedule. Prefetch Schedule Settings Name This field displays the name given to the scheduled download. Status Check the status of your scheduled download here.
To delete a scheduled download, click . Click to begin creating a new scheduled download. Clicking the button will cause the following screen to appear: New Schedule Simply provide the requested information to create your schedule. To clear all cached content, click this button. Note that this action cannot be Clear Web Cache undone. Clear Statistics To clear all prefetch and status page statistics, click this button. 12.
13 Bandwidth Bonding SpeedFusionTM / PepVPN https://www.peplink.
Pepwave bandwidth bonding SpeedFusionTM is our patented technology that enables our SDWAN routers to bond multiple Internet connections to increase site-to-site bandwidth and reliability. SpeedFusion functionality securely connects your Pepwave router to another Pepwave or Peplink device (Peplink Balance 210/310/380/580/710/1350 only). Data, voice, or video communications between these locations are kept confidential across the public Internet.
The local LAN subnet and subnets behind the LAN (defined under Static Route on the LAN settings page) will be advertised to the VPN. All VPN members (branch offices and headquarters) will be able to route to local subnets. Note that all LAN subnets and the subnets behind them must be unique. Otherwise, VPN members will not be able to access each other. All data can be routed over the VPN using the 256-bit AES encryption standard.
Active Encryption Authentication Remote ID / Pre-shared Key When this box is checked, this VPN connection profile will be enabled. Otherwise, it will be disabled. By default, VPN traffic is encrypted with 256-bit AES. If Off is selected on both sides of a VPN connection, no encryption will be applied. Select from By Remote ID Only, Preshared Key, or X.509 to specify the method the Peplink Balance will use to authenticate peers.
data. If Default is selected, UDP port 4500 will be used. Port 32015 will be used if the remote unit uses Firmware prior to version 5.4 or if port 4500 is unavailable. If Custom is selected, enter an outgoing port number from 1 to 65535. Define maximum download and upload speed to each individual peer. This Bandwidth Limit functionality requires the peer to use PepVPN version 4.0.0 or above. Cost Define path cost for this profile.
Send All Traffic To This feature allows you to redirect all traffic to a specified PepVPN connection. Click the select your connection and the following menu will appear: button to You could also specify a DNS server to resolve incoming DNS requests. Click the checkbox next to Backup Site to designate a backup SpeedFusion profile that will take over, should the main PepVPN connection fail.
PepVPN Settings To designate a custom handshake port (TCP), click the custom radio button and Handshake PortA enter the port number you wish to designate. Backward Compatibility Link Failure Detection Time A Determine the level of backward compatibility needed for PepVPN tunnels. The use of the Latest setting is recommended as it will improve the performance and resilience of SpeedFusion connections. The bonded VPN can detect routing failures on the path between two sites over each WAN connection.
http://youtu.be/TLQgdpPSY88 13.2 The Pepwave Router Behind a NAT Router Pepwave routers support establishing SpeedFusionTM over WAN connections which are behind a NAT (network address translation) router. To enable a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to inbound port-forward TCP port 32015 to the Pepwave router.
public IP addresses (i.e., 212.1.1.1, 212.2.2.2, and 212.3.3.3), and the field in Router A can be left blank. The two NAT routers on WAN1 and WAN3 connected to Router A should inbound port-forward TCP port 32015 to Router A so that all WANs will be utilized in establishing the VPN. 13.3 SpeedFusionTM Status SpeedFusionTM status is shown in the Dashboard. The connection status of each connection profile is shown as below.
To configure IPsec VPN on Pepwave devices that support it, navigate to Advanced>IPsec VPN. A NAT-Traversal option and list of defined IPsec VPN profiles will be shown. NAT-Traversal should be enabled if your system is behind a NAT router. Click the New Profile button to create new IPsec VPN profiles that make VPN connections to remote Pepwave, Cisco, or Juniper routers via available WAN connections. To edit any of the profiles, click on its associated connection name in the leftmost column. https://www.
https://www.peplink.
IPsec VPN Settings Name This field is for specifying a local name to represent this connection profile. Active When this box is checked, this IPsec VPN connection profile will be enabled. Otherwise, it will be disabled. Connect Upon Check this box and select a WAN to connect to this VPN automatically when the Disconnection specified WAN is disconnected. of Remote Gateway IP Enter the remote peer’s public IP address. For Aggressive Mode, this is Address / Host optional.
Force UDP For forced UDP encapsulation regardless of NAT-traversal, tick this checkbox. Encapsulation This defines the peer authentication pre-shared key used to authenticate this Pre-shared Key VPN connection. The connection will be up only if the pre-shared keys on each side match. Remote Available only when X.509 Certificate is chosen as the Authentication method, Certificate (pem this field allows you to paste a valid X.509 certificate. encoded) Local ID In Main Mode, this field can be left blank.
WAN Connection Priority WAN Connection Select the appropriate WAN connection from the drop-down menu. 15 Outbound Policy Management Pepwave routers can flexibly manage and load balance outbound traffic among WAN connections. Important Note Outbound policy is applied only when more than one WAN connection is active. The settings for managing and load balancing outbound traffic are located at Advanced>Outbound Policy or Advanced>PepVPN, depending on the model. 15.
There are three main selections for the outbound traffic policy: ● High Application Compatibility ● Normal Application Compatibility ● Custom Note that some Pepwave routers provide only the Send All Traffic To setting here. See Section 12.1 for details. Outbound Policy Settings Outbound traffic from a source LAN device is routed through the same WAN High Application connection regardless of the destination Internet IP address and protocol.
http://youtu.be/rKH4AS_bQnE 15.2 Custom Rules for Outbound Policy Click in the Outbound Policy form. Choose Custom and press the Save button. 15.2.1 Algorithm: Weighted Balance This setting specifies the ratio of WAN connection usage to be applied on the specified IP protocol and port. This setting is applicable only when Algorithm is set to Weighted Balance. https://www.peplink.
The amount of matching traffic that is distributed to a WAN connection is proportional to the weight of the WAN connection relative to the total weight. Use the sliders to change each WAN’s weight. For example, with the following weight settings: ● Ethernet WAN1: 10 ● Ethernet WAN2: 10 ● Wi-Fi WAN: 10 ● Cellular 1: 10 ● Cellular 2: 10 ● USB: 10 Total weight is 60 = (10 +10 + 10 + 10 + 10 + 10). Matching traffic distributed to Ethernet WAN1 is 16.7% = (10 / 60 x 100%.
In general, different Internet IP addresses represent different computers. The security concern is that an IP address change during a session may be the result of an unauthorized intrusion attempt. Therefore, to prevent damages from the potential intrusion, the session is terminated upon the detection of an IP address change. Pepwave routers can be configured to distribute data traffic across multiple WAN connections.
Matching traffic will be routed through the specified WAN connection, regardless of the health check status of the WAN connection. Starting from Firmware 5.2, outbound traffic can be enforced to go through a specified SpeedFusionTM connection. 15.2.4 Algorithm: Priority This setting specifies the priority of the WAN connections used to route the specified network service. The highest priority WAN connection available will always be used for routing the specified type of traffic.
