User's Manual

https://www.peplink.com 59 Copyright @ 2019 Peplink
these locations are kept safe and confidential across the public Internet.
IPsec VPN on the Peplink Balance is specially designed for multi-WAN environments. For instance, if a
user sets up multiple IPsec profiles for his multi-WAN environment and WAN1 is connected and healthy,
IPsec traffic will go through this link. However, should unforeseen problems (e.g.,unplugged cables or ISP
problems) cause WAN1 to go down, our IPsec implementation will make use of WAN2 and WAN3 for
failover.
Peplink also published a whitepaper about Speedfusion which can be downloaded from the following url:
http://download.peplink.com/resources/whitepaper-speedfusion-and-best-practices-2019.pdf
7.3.2 IPsec VPN
All Peplink products can make multiple IPsec VPN connections with Peplink routers, as well as Cisco and
Juniper routers.
Note that all LAN subnets and the subnets behind them must be unique. Otherwise, VPN members will
not be able to access each other.
All data can be routed over the VPN with a selection of encryption standards, such as 3DES, AES-128,
and AES-256.
To configure, navigate to Network>Interfaces>IPsec VPN.
A NAT-Traversal option and list of defined IPsec VPN profiles will be shown.
NAT-Traversal should be enabled if your system is behind a NAT router.
Click the New Profile button to create new IPsec VPN profiles that make VPN connections to remote
Peplink Balance, Cisco, or Juniper Routers via available WAN connections. To edit any of the profiles,
click on its associated connection name in the leftmost column.