3 PRODUCT FEATURES ......................7 .................7 UPPORTED ETWORK EATURES ..................9 THER UPPORTED EATURES 4 PEPWAVE MAX MOBILE ROUTER OVERVIEW ..............10 MAX 700 ......................10 MAX HD2 ......................12 MAX HD2 IP67 ....................14 MAX HD2 .....................15 MINI MAX HD4 ......................17 MAX BR1 ......................18 MAX BR1/2 IP55 ....................23...
Wi-Fi, external WiMAX dongle, and satellite to be utilized to connect to the Internet. This manual covers setting up Pepwave routers and provides an introduction to their features and usage. Tips Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction! http://youtu.be/UCkVQThLKO4 http://www.pepwave.com Copyright @ 2015 Pepwave...
Pepwave MAX and Surf User Manual Glossary The following terms, acronyms, and abbreviations are frequently used in this manual: Term Definition 3rd Generation standards for wireless communications 4th Generation standards for wireless communications DHCP Dynamic Host Configuration Protocol Domain Name System...
Pepwave MAX and Surf User Manual Product Features Pepwave routers enable all LAN users to share broadband Internet connections, and they provide advanced features to enhance Internet access. Below is a list of supported features on Pepwave routers. Features vary by model. For more information, please see peplink.com/products.
Page 8
Pepwave MAX and Surf User Manual Bandwidth bonding and failover among selected WAN connections IPsec VPN for network-to-network connections (works with Cisco and Juniper only) Ability to route Internet traffic to a remote VPN peer Optional pre-shared key setting ...
Pepwave MAX and Surf User Manual Application prioritization for custom protocols and DSL/cable optimization Other Supported Features User-friendly web-based administration interface HTTP and HTTPS support for web admin interface Configurable web administration port and administrator password ...
Pepwave MAX and Surf User Manual Pepwave MAX Mobile Router Overview MAX 700 4.1.1 Panel Appearance http://www.pepwave.com Copyright @ 2015 Pepwave...
Page 11
Pepwave MAX and Surf User Manual 4.1.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error Green Ready Wi-Fi AP and Wi-Fi WAN Indicators...
Pepwave MAX and Surf User Manual MAX HD2 4.2.1 Panel Appearance http://www.pepwave.com Copyright @ 2015 Pepwave...
Page 13
Pepwave MAX and Surf User Manual 4.2.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error Green Ready Wi-Fi AP and Wi-Fi WAN Indicators...
Pepwave MAX and Surf User Manual MAX HD2 IP67 4.3.1 Panel Appearance The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error Green Ready http://www.pepwave.com Copyright @ 2015 Pepwave...
Pepwave MAX and Surf User Manual MAX HD2 mini 4.4.1 Panel Appearance http://www.pepwave.com Copyright @ 2015 Pepwave...
Page 16
Pepwave MAX and Surf User Manual 4.4.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error Green Ready Cellular WAN Indicators Disabled intermittent...
Pepwave MAX and Surf User Manual MAX HD4 4.5.1 Panel Appearance 4.5.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error Green Ready...
Pepwave MAX and Surf User Manual MAX BR1 4.6.1 Panel Appearance 4.6.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error Green Ready...
Page 19
Pepwave MAX and Surf User Manual Cellular Indicators Disabled or no SIM card inserted Cellular Connecting or connected to network(s) LAN and Ethernet WAN Ports 100 Mbps Green LED 10 Mbps Port is connected without traffic Orange LED Blinking Data is transferring...
Page 20
Pepwave MAX and Surf User Manual MAX BR1 Slim 4.7.1 Panel Appearance 4.7.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error Green...
Page 21
Pepwave MAX and Surf User Manual LAN and Ethernet WAN Ports 100 Mbps Green LED 10 Mbps Port is connected without traffic Orange LED Blinking Data is transferring Port is not connected Port Type Auto MDI/MDI-X ports http://www.pepwave.com...
Page 22
Pepwave MAX and Surf User Manual MAX BR1 ENT 4.8.1 Panel Appearance 4.8.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Boot up error...
Pepwave MAX and Surf User Manual MAX BR1/2 IP55 4.9.1 Panel Appearance 4.9.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Blinking Status Boot up error Green Ready http://www.pepwave.com...
Page 24
Pepwave MAX and Surf User Manual Wi-Fi Indicators Disabled Intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi Connected to wireless network(s) with traffic Blinking Connected to wireless network(s) without traffic Cellular Indicators Disabled or no SIM card inserted Cellular Connecting or connected to network(s)
Pepwave MAX and Surf User Manual 4.10 MAX On-The-Go 4.10.1 Panel Appearance 4.10.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Cellular Indicators Modem is not attached to the port Green Modem is attached to the port...
Pepwave MAX and Surf User Manual 4.11 Surf SOHO 4.11.1 Panel Appearance 4.11.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Wi-Fi and Status Indicators Disabled Intermittent Blinking Enabled but no client connected Wi-Fi Client(s) connected to wireless network...
Page 27
Pepwave MAX and Surf User Manual Blinking Data is transferring Orange LED No data is being transferred or port is not connected Port type Auto MDI/MDI-X ports Wi-Fi Signal No connection Signal strength Wi-Fi signal strength (low, medium, and high) http://www.pepwave.com...
Pepwave MAX and Surf User Manual Installation The following section details connecting Pepwave routers to your network. Preparation Before installing your Pepwave router, please prepare the following as appropriate for your installation: At least one Internet/WAN access account and/or Wi-Fi access information ...
At a high level, construct the network according to the following steps: With an Ethernet cable, connect a computer to one of the LAN ports on the Pepwave router. Repeat with different cables for up to 4 computers to be connected.
Pepwave MAX and Surf User Manual Configuring the Network Environment To ensure that the Pepwave router works properly in the LAN environment and can access the Internet via WAN connections, please refer to the following setup procedures: LAN configuration For basic configuration, refer to Section 7, Connecting to the Web Admin Interface.
The Pepwave MAX BR1 requires four screws for wall mounting. Car Mount The Pepwave MAX700/HD2 can be mounted in a vehicle using the included mounting brackets. Place the mounting brackets by the two sides and screw them onto the device.
Page 32
Pepwave MAX and Surf User Manual 1. Start a web browser on a computer that is connected with the Pepwave router through the LAN. 2. To connect to the router’s web admin interface, enter the following LAN IP address in the address field of the web browser: http://192.168.50.1...
Page 33
Pepwave MAX and Surf User Manual Important Note Configuration changes (e.g. WAN, LAN, admin settings, etc.) will take effect only after clicking the Save button at the bottom of each page. The Apply Changes button causes the changes to be saved and applied.
Basic Settings LAN interface settings are located at Network>LAN>Basic Settings. IP Settings IP Address The IP address and subnet mask of the Pepwave router on the LAN. Network Settings Name Enter a name for the LAN. Enter a number for your VLAN.
Page 35
Pepwave MAX and Surf User Manual http://www.pepwave.com Copyright @ 2015 Pepwave...
To connect to hosts on the LAN (email notification, remote syslog, etc.), the default gateway address will be used. The Pepwave router will listen for this IP address when LAN hosts access services provided by the Pepwave router (web admin access from the WAN, DNS proxy, etc.).
Page 37
DHCP Server each computer that is connected via LAN and configured to obtain an IP address via DHCP. The Pepwave router’s DHCP server can prevent IP address collision on the LAN. IP Range & These settings allocate a range of IP addresses that will be assigned to LAN computers by the Pepwave router’s DHCP server.
Pepwave MAX and Surf User Manual enter its value. For values that are in IP address list format, you can enter one IP address per line in the provided text area input control. Each option can be defined once only.
IP address. When looking up the host name from the Local DNS Records LAN to LAN IP of the Pepwave router, the corresponding IP address will be returned. Press to create a new record. Press to remove a record.
Page 40
Pepwave MAX and Surf User Manual protocol. Once VLAN configuration is complete, click Save to store your changes. Bonjour Forwarding Settings Enable Check this box to turn on Bonjour forwarding. Bonjour Choose Service and Client networks from the drop-down menus, and then click Service add the networks.
Page 41
The following settings are displayed when creating a new LAN or editing an existing LAN. IP Settings IP Address & Enter the Pepwave router’s IP address and subnet mask values to be used on the LAN. Subnet Mask Network Settings Name Enter a name for the LAN.
Page 42
Pepwave MAX and Surf User Manual DHCP Server Settings When this setting is enabled, the Pepwave router’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP address via DHCP. The Pepwave router’s DHCP server can prevent IP address collisions DHCP Server on the LAN.
Page 43
Pepwave MAX and Surf User Manual 22.3 To configure DHCP relay, first click the button found next to the DHCP Server option to display the settings. DHCP Relay Settings Enable Check this box to turn on DHCP relay. Click the icon to disable DHCP relay.
Pepwave MAX and Surf User Manual Captive Portal The captive portal serves as gateway that clients have to pass if they wish to access the internet using your router. To configure, navigate to Network>LAN>Captive Portal. Captive Portal Settings Check Enable and then, optionally, select the LANs/VLANs that will use the captive Enable portal.
Page 45
Networks to the listing. Here, you can choose between using the Pepwave router’s built-in captive portal and Splash Page redirecting clients to a URL you define. The Portal Customization menu has two options: .
Pepwave MAX and Surf User Manual Portal Customization Logo Click the Choose File button to select a logo to use for the built-in portal. Image Message If you have any additional messages for your users, enter them in this field.
Pepwave MAX and Surf User Manual Ethernet WAN From Network>WAN, choose a WAN connection and then click Details. WAN Port (Section 1) Connection Enter a name to represent this WAN connection. Name There are three possible connection methods for Ethernet WAN: •...
Page 48
Pepwave MAX and Surf User Manual WAN Port (Section 2) This setting specifies the standby state of the WAN connection. The available options are Standby State Remain connected and Disconnect. The default state is Remain Connected. Upstream This setting specifies the data bandwidth in the outbound direction from the LAN through the Bandwidth WAN interface.
This setting specifies port speed and duplex configurations of the WAN port. By default, Auto is selected and the appropriate data speed is automatically detected by the Pepwave Port Speed router. In the event of negotiation issues, the port speed can be manually specified. You can also choose whether or not to advertise the speed to the peer by selecting the Advertise Speed checkbox.
Page 50
Pepwave MAX and Surf User Manual WAN Port (Section 4) This setting should be configured based on the maximum payload size that the local system can handle. The MSS (maximum segment size) is computed from the MTU minus 40 bytes for TCP over IPv4.
Page 51
IPv6 clients on the LAN will acquire their IPv6, gateway, and DNS server addresses from it. IPv6 The device will also acquire an IPv6 address for performing ping/traceroute checks and accepting web admin accesses. Note: This feature is only available on the Pepwave MAX 700, HD2, and HD2 IP67. 9.1.1 DHCP Connection...
Pepwave MAX and Surf User Manual If your service provider's DHCP server requires you to supply a hostname value Hostname upon acquiring an IP address, you may enter the value here. If your service (Optional) provider does not provide you with the value, you can safely bypass this option.
Page 53
Pepwave MAX and Surf User Manual 9.1.3 PPPoE Connection This connection method is suitable if your ISP provides a login ID/password to connect via PPPoE. PPPoE Settings NAT allows substituting the real address in a packet with a mapped address that is Routing Mode routable on the destination network.
Page 54
Pepwave MAX and Surf User Manual connection into the DNS Server 1 and DNS Server 2 fields. 9.1.4 L2TP Connection L2TP has all the compatibility and convenience of PPTP with greater security. Combine this with IPsec for a good balance between ease of use and security.
This is the International Mobile Subscriber Identity which uniquely identifies the SIM card. This IMSI is applicable to 3G modems only. Some Pepwave routers support both HSPA and EV-DO. For Sprint or Verizon Wireless EV-DO MEID users, a unique MEID identifier code (in hexadecimal format) is used by the carrier to associate the EV-DO device with the user.
Pepwave MAX and Surf User Manual WAN Connection Settings Connection Enter a name to represent this WAN connection. Name Network Mode Users have to specify the network they are on accordingly. This option allows you to select the routing method to be used in routing IP frames via the Routing Mode WAN connection.
Page 57
Pepwave MAX and Surf User Manual Cellular Settings Network By default, the MAX router will automatically choose a network to connect to. If you wish to Selection use only certain networks, click the button beside the menu item. This drop-down menu allows restricting cellular to particular band. Click the...
Page 58
Pepwave MAX and Surf User Manual and recommended setting is Auto. APN / Login / When Auto is selected, the information in these fields will be filled automatically. Select Password / Custom to customize these parameters. The parameter values are determined by and can be SIM PIN obtained from the ISP.
Page 59
Pepwave MAX and Surf User Manual Health Check Settings This setting allows you to specify the health check method for the cellular connection. Available Heath Check options are Disabled, Ping, DNS Lookup, HTTP, and SmartCheck. The default method is Method DNS Lookup.
Pepwave MAX and Surf User Manual Wi-Fi WAN To access Wi-Fi WAN settings, click Network>WAN>Details. Wi-Fi Connection Settings WAN Connection Enter a name to represent this WAN connection. Name This setting specifies the state of the WAN connection while in standby. The available Standby State options are Remain Connected (hot standby) and Disconnect (cold standby).
Page 61
Pepwave MAX and Surf User Manual Roaming Checking this box will enable Wi-Fi roaming. Click the icon for additional options. Connect to This option is to specify whether the Wi-Fi WAN will connect to any open mode access Any Open points it finds.
Page 62
Pepwave MAX and Surf User Manual Disabled or SmartCheck. Health Check Disabled When Disabled is chosen in the Method field, the WAN connection will always be considered as up. The connection will NOT be treated as down in the event of IP routing errors.
Page 63
Pepwave MAX and Surf User Manual HTTP connections will be issued to test connectivity with configurable URLs and strings to match. WAN Settings>WAN Edit>Health Check Settings>URL1 The URL will be retrieved when performing an HTTP health check. When String to Match...
Page 64
Pepwave MAX and Surf User Manual Other Health Check Settings This setting specifies the timeout in seconds for ping/DNS lookup requests. The default Timeout timeout is 5 seconds. Health Check This setting specifies the time interval in seconds between ping or DNS lookup requests.
Page 65
Pepwave MAX and Surf User Manual TZO Key Update All Hosts Check this box to automatically update all hosts. This setting specifies a list of hostnames or domains to be associated with the public Hosts / Domain Internet IP address of the WAN connection.
Page 66
Pepwave MAX and Surf User Manual Wi-Fi Connection Profile Settings Type Select whether the network will connect automatically or manually. Network Name Enter a name to represent this Wi-Fi connection. (SSID) This option allows you to select which security policy is used for this wireless network.
Pepwave MAX and Surf User Manual WAN Health Check To ensure traffic is routed to healthy WAN connections only, the Pepwave router can periodically check the health of each WAN connection. The health check settings for each WAN connection can be independently configured via Network>WAN>Details.
Page 68
Automatic Public DNS Server Check on DNS Test Failure When the health check method is set to DNS Lookup and health checks fail, the Pepwave router will automatically perform DNS lookups on public DNS servers. If the tests are successful, the WAN may not be down, but rather the target DNS server malfunctioned.
Either upon a change in IP addresses or every 23 days without link reconnection, the Pepwave router will connect to the dynamic DNS service provider to perform an IP address update within the provider’s records. The settings for dynamic DNS service provider(s) and the association of hostname(s) are configured via Network>WAN>Details>Dynamic DNS Service Provider/Dynamic...
DNS host will automatically expire if the host record has not been updated for a long time. Therefore the Pepwave router performs an update every 23 days, even if a WAN’s IP address has not changed.
Pepwave MAX and Surf User Manual 10 Advanced Wi-Fi Settings Wi-Fi settings can be configured at Advanced>Wi-Fi Settings (or AP>Settings on some models). Note that menus displayed can vary by model. Wi-Fi Radio Settings This drop-down menu specifies the national/regional regulations which the Wi-Fi radio should follow.
Page 72
Pepwave MAX and Surf User Manual Advanced Wi-Fi AP settings can be displayed by clicking the on the top right-hand corner of the Wi-Fi AP Settings section, which can be found at AP>Settings. Other models will display a separate section called Wi-Fi AP Advanced Settings, which can be found at Advanced>Wi-Fi Settings.
Page 73
Pepwave MAX and Surf User Manual Wi-Fi WAN settings can be configured at Advanced>Wi-Fi Settings (or Advanced>Wi-Fi WAN or some models). Wi-Fi WAN Settings Available options are 20/40 MHz and 20 MHz. Default is 20/40 MHz, which allows both Channel Width widths to be used simultaneously.
Pepwave MAX and Surf User Manual 11 MediaFast Configuration MediaFast settings can be configured from the Network menu. 11.1 Setting Up MediaFast Content Caching To access MediaFast content caching settings, select Advanced>Cache Control. Cache Control Settings Choose to Cache on all domains, or enter domain names and then choose either Cache Domain the specified domains only or Do not cache the specified domains.
Pepwave MAX and Surf User Manual 11.2 Scheduling Content Prefetching Content prefetching allows you to download content on a schedule that you define, which can help to preserve network bandwidth during busy times and keep costs down. To access MediaFast content prefetching settings, select Advanced >Prefetch Schedule.
Pepwave MAX and Surf User Manual Clear Web To clear all cached content, click this button. Note that this action cannot be undone. Cache Clear Statistics To clear all prefetch and status page statistics, click this button. 11.3 Viewing MediaFast Statistics To get details on storage and bandwidth usage, select Status>MediaFast.
Pepwave routers can aggregate all WAN connections’ bandwidth for routing SpeedFusion traffic. Unless all the WAN connections of one site are down, Pepwave routers can keep the VPN up and running. VPN bandwidth bonding is supported in Firmware 5.1 or above. All available bandwidth will be utilized to establish the VPN tunnel, and all traffic will be load balanced at packet level across all links.
Page 78
New Profile button to create a new VPN profile (you may have to first save the displayed default profile in order to acesss the New Profile button). Each profile specifies the settings for making VPN connection with one remote Pepwave or Peplink device. Note that available settings vary by model.
Pepwave MAX and Surf User Manual VPN connection, no encryption will be applied. Select from By Remote ID Only, Preshared Key, or X.509 to specify the method the Authentication Peplink Balance will use to authenticate peers. When selecting By Remote ID Only, be sure to enter a unique peer ID number in the Remote ID field.
Page 80
Pepwave MAX and Surf User Manual To enable Layer 2 Bridging between PepVPN profiles, navigate to Network>LAN>Basic Settings>*LAN Profile Name* and refer to instructions in section 8.1 8.41 WAN Connection Priority If your device supports it, you can specify the priority of WAN connections to be used for making VPN connections.
Page 81
TCP port 32015 and UDP port 4500 for establishing VPN connections. If you have a firewall in front of your Pepwave devices, you will need to add firewall rules for these ports and protocols to allow inbound and outbound traffic to pass through the firewall.
Page 82
Pepwave MAX and Surf User Manual Want to know more about VPN sub-second session failover? Visit our YouTube Channel for a video tutorial! http://youtu.be/TLQgdpPSY88 http://www.pepwave.com Copyright @ 2015 Pepwave...
Pepwave MAX and Surf User Manual 12.2 The Pepwave Router Behind a NAT Router Pepwave routers support establishing SpeedFusion over WAN connections which are behind a NAT (network address translation) router. To enable a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to inbound port-forward TCP port 32015 to the Pepwave router.
Pepwave MAX and Surf User Manual 12.3 SpeedFusion Status SpeedFusion status is shown in the Dashboard. The connection status of each connection profile is shown as below. After clicking the Status button at the top right corner of the SpeedFusion table, you will be forwarded to Status>SpeedFusion...
Many Pepwave products can make multiple IPsec VPN connections with Peplink, Pepwave, Cisco, and Juniper routers. Note that all LAN subnets and the subnets behind them must be unique. Otherwise, VPN members will not be able to access each other.
Page 86
Pepwave MAX and Surf User Manual IPsec VPN Settings Name This field is for specifying a local name to represent this connection profile. When this box is checked, this IPsec VPN connection profile will be enabled. Otherwise, it Active will be disabled.
Page 87
Pepwave MAX and Surf User Manual To access your VPN, clients will need to authenticate by your choice of methods. Choose Authentication between the Preshared Key and X.509 Certificate methods of authentication. Choose Main Mode if both IPsec peers use static IP addresses. Choose Aggressive Mode Mode if one of the IPsec peers uses dynamic IP addresses.
Page 88
Pepwave MAX and Surf User Manual WAN Connection Priority WAN Connection Select the appropriate WAN connection from the drop-down menu. http://www.pepwave.com Copyright @ 2015 Pepwave...
Normal Application Compatibility Custom Note that some Pepwave routers provide only the Send All Traffic To setting here. See Section 12.1 for details. Outbound Policy Settings Outbound traffic from a source LAN device is routed through the same WAN connection High regardless of the destination Internet IP address and protocol.
Pepwave MAX and Surf User Manual Application highest application compatibility. Compatibility Outbound traffic from a source LAN device to the same destination Internet IP address will Normal be routed through the same WAN connection persistently, regardless of protocol. This Application...
Page 91
Please refer to the upcoming sections for the details on the available algorithms. To create a custom rule, click Add Rule at the bottom of the table. Note that some Pepwave routers display this button at Advanced>PepVPN>PepVPN Outbound Custom Rules. http://www.pepwave.com...
This setting specifies the name of the outbound traffic rule. This setting specifies whether the outbound traffic rule takes effect. When Enable is checked, the rule takes effect: traffic is matched and actions are taken by the Pepwave Enable router based on the other parameters of the rule. When Enable is unchecked, the rule does not take effect: the Pepwave router disregards the other parameters of the rule.
Page 93
Pepwave MAX and Surf User Manual This setting specifies the behavior of the Pepwave router for the custom rule. One of the following values can be selected (note that some Pepwave routers provide only some of these options): Weighted Balance ...
Page 94
Pepwave MAX and Surf User Manual 14.2.1 Algorithm: Weighted Balance This setting specifies the ratio of WAN connection usage to be applied on the specified IP protocol and port. This setting is applicable only when Algorithm is set to Weighted Balance.
Page 95
Therefore, to prevent damages from the potential intrusion, the session is terminated upon the detection of an IP address change. Pepwave routers can be configured to distribute data traffic across multiple WAN connections. Also, the Internet IP depends on the WAN connections over which communication actually takes place.
Page 96
Pepwave MAX and Surf User Manual 14.2.3 Algorithm: Enforced This setting specifies the WAN connection usage to be applied on the specified IP protocol and port. This setting is applicable only when Algorithm is set to Enforced. Matching traffic will be routed through the specified WAN connection, regardless of the health check status of the WAN connection.
Page 97
Pepwave MAX and Surf User Manual Drag and drop to specify the order of WAN connections to be used for routing traffic. Only the highest priority healthy connection that is not in full load will be used. 14.2.6 Algorithm: Least Used The traffic matching this rule will be routed through the healthy WAN connection that is selected in Connection and has the most available download bandwidth.
Page 98
Pepwave MAX and Surf User Manual available bandwidth. 14.2.8 Expert Mode Expert Mode is available on some Pepwave routers for use by advanced users. To enable the feature, click on the help icon and click turn on Expert Mode. In Expert Mode, a new special rule, SpeedFusion Routes, is displayed in the Custom Rules table.
The IP Protocol setting, along with the Port setting, specifies the protocol of the service as TCP, UDP, ICMP, or IP. Traffic that is received by the Pepwave router via the specified protocol at the specified port(s) is forwarded to the LAN hosts specified by the Servers setting. Please see below for details on the Port and Servers settings.
Page 100
Any Port, Single Port, Port Range, Port Map, and Range Mapping Any Port: all traffic that is received by the Pepwave router via the specified protocol is forwarded to the servers specified by the Servers setting. For example, with IP Protocol set to TCP, and Port set to Any Port, all TCP traffic is forwarded to the configured servers.
Page 101
Pepwave MAX and Surf User Manual 15.1.1 UPnP / NAT-PMP Settings UPnP and NAT-PMP are network protocols which allow a computer connected to the LAN port to automatically configure the router to allow parties on the WAN port to connect to itself. That way, the process of inbound port forwarding becomes automated.
Pepwave MAX and Surf User Manual 16 NAT Mappings NAT mappings allow IP address mapping of all inbound and outbound NAT’dt raffic to and from an internal client IP address. Settings to configure NAT mappings are located at Advanced>NAT Mappings.
Page 103
Pepwave MAX and Surf User Manual This setting specifies the WAN connections and corresponding WAN-specific Internet IP addresses on which the system should bind. Any access to the specified WAN connection(s) and IP address(es) will be forwarded to the LAN host. This option is only Inbound available when IP Address is selected in the LAN Client(s) field.
Pepwave MAX and Surf User Manual 17 QoS 17.1 User Groups LAN and PPTP clients can be categorized into three user groups: Manager, Staff, and Guest. This menu allows you to define rules and assign client IP addresses or subnets to a user group.
(set as 0). 17.3 Application 17.3.1 Application Prioritization On many Pepwave routers, you can choose whether to apply the same prioritization settings to all user groups or customize the settings for each group. ↑High,━...
Page 106
Action column to delete the custom application in the corresponding row. When Supported Applications is selected, the Pepwave router will inspect network traffic and prioritize the selected applications. Alternatively, you can select Custom Applications and define the application by providing the protocol, scope, port number, and DSCP value.
Internet) and the LAN side of the network. It can protect the local network from potential hacker attacks, access to offensive websites, and/or other inappropriate uses. The firewall functionality of Pepwave routers supports the selective filtering of data traffic in both directions: ...
Page 108
Pepwave MAX and Surf User Manual Click Add Rule to display the following screen: Inbound firewall settings are located at Advanced>Firewall>Access Rules>Inbound Firewall Rules. Click Add Rule to display the following screen: Rules are matched from top to bottom. If a connection matches any one of the upper rules, the matching process will stop.
If the traffic matches the specified protocol/IP/port, actions will be Enable taken by the Pepwave router based on the other parameters of the rule. If the box is not checked, the firewall rule does not take effect. The Pepwave router will disregard the other parameters of the rule.
Page 110
Pepwave MAX and Surf User Manual Aug 13 23:47:44 Denied CONN=Ethernet WAN SRC=20.3.2.1 DST=192.168.1.20 LEN=48 PROTO=TCP SPT=2260 DPT=80 • CONN: The connection where the log entry refers to • SRC: Source IP address • DST: Destination IP address • LEN: Packet length •...
Page 111
Internet. To turn on this feature, click , check the Enable check box, and press the Save button. When this feature is enabled, the Pepwave router will detect and prevent the following kinds of intrusions and denial-of-service attacks. • Port scan...
For example, If you enter foobar.*, www.foobar.com, www.foobar.co.jp, and foobar.co.uk will be blocked. Placing the wildcard in any other position is not supported. The Pepwave router will inspect and look for blocked domain names on all HTTP traffic. Secure web (HTTPS) traffic is not supported.
Page 113
Pepwave MAX and Surf User Manual OSPF This field determines the ID of the router. By default, this is specified as the LAN IP Router ID address. If you want to specify your own ID, enter it in the Custom field.
Page 114
Pepwave MAX and Surf User Manual To access RIPv2 settings, click RIPv2 Settings Choose an authentication method, if one is used, from this drop-down menu. Available Authentication options are MD5 and Text. Enter the authentication key next to the drop-down menu.
Pepwave MAX and Surf User Manual Remote User Access Settings Enable Click the checkbox to enable Remote User Access. Determine whether remote devices can connect to the Balance using L2TP with IPsec or VPN Type PPTP. For greater security, we recommend you connect using L2TP with IPsec.
LAN bypass port. In the diagram, the WAN ports of each Pepwave router connect to the router and to the modem. Both Pepwave routers connect to the same LAN switch via a LAN port.
Page 117
Interface for Slave Router High Availability Enable Checking this box specifies that the Pepwave router is part of a high availability configuration. This number identifies a pair of Pepwave routers operating in a high availability configuration. Group Number The two Pepwave routers in the pair must have the same Group Number value.
Page 118
Important Note For Pepwave routers in NAT mode, the virtual IP (VIP) should be set as the default gateway for all hosts on the LAN segment. For example, a firewall sitting behind the Pepwave router should set its default gateway as the virtual IP instead of the IP of the master router.
Pepwave MAX and Surf User Manual 18.6 PPTP Server Pepwave routers feature a built-in PPTP server, which enables remote computers to conveniently and securely access the local network. PPTP server settings are located at Advanced>Misc. Settings>PPTP Server. Check the box to enable PPTP server functionality. All connected PPTP sessions are displayed at Status>Client List.
This setting is for specifying the user database source for PPTP authentication. Three sources can be selected: Local User Accounts, LDAP Server, or RADIUS Server. Local User Accounts - User accounts are stored in the Pepwave router locally. You can add/modify/delete accounts in the User Accounts table.
Page 121
ISP’s e-mail server host name or IP address. Under SMTP Port, enter the TCP port number for each WAN. The Pepwave router will intercept SMTP connections. Choose a WAN port according to the outbound policy, and then forward the connection to the SMTP server if the chosen WAN has enabled forwarding.
Page 122
Pepwave MAX and Surf User Manual 18.8.2 Web Proxy Forwarding When this feature is enabled, the Pepwave router will intercept all outgoing connections destined for the proxy server specified in Web Proxy Interception Settings, choose a WAN connection with reference to the outbound policy, and then forward them to the specified web proxy server and port number.
Service passthrough settings can be found at Advanced>Misc. Settings>Service Passthrough. Some Internet services need to be specially handled in a multi-WAN environment. Pepwave routers can handle these services such that Internet applications do not notice being behind a multi-WAN router. Settings for service passthrough support are available here.
VPN traffic, check Route IPsec Site-to-Site VPN and choose the WAN connection to route the traffic to. 18.10 GPS Forwarding Using the GPS forwarding feature, some Pepwave routers can automatically send GPS reports to a specified server. To set up GPS forwarding, navigate to Advanced>GPS Forwarding.
Special Note Each Pepwave router can control a limited number of routers without additional cost. To manage more, a Full Edition license is required. Please contact your Authorized Reseller or the Peplink Sales Team for more information and pricing details.
Page 126
(i.e., packets that travel from the Wi-Fi segment through VLAN ID the Pepwave AP One unit to the Ethernet segment via the LAN port). The default value of this setting is 0, which means VLAN tagging is disabled (instead of tagged with zero).
VLAN, SSID, or subnet, which can enhance security. Traffic is passed to upper communication layer(s). By default, the setting is disabled. Band steering allows the Pepwave router to steer AP clients from the 2.4GHz band to the 5GHz band for better usage of bandwidth. To make steering mandatory, select Band Steering Enforce.
Page 128
Pepwave MAX and Surf User Manual When WPA/WPA2- Personal is configured, a shared key is used for data encryption and authentication. When using this configuration, the Shared Key option should be enabled. Key length must be between eight and 63 characters (inclusive). The security level of this method is known to be high.
AP Settings These buttons specify which wireless networks will use this AP profile. You can also select the frequencies at which each network will transmit. Please note that the Pepwave SSID router does not detect whether the AP is capable of transmitting at both frequencies.
Pepwave MAX and Surf User Manual This drop-down menu selects the 5 GHz 802.11 channel to be utilized. If Auto is set, the 5 GHz Channel system will perform channel scanning based on the scheduled time set and choose the most suitable channel automatically.
Page 131
Pepwave MAX and Surf User Manual Web Administration Settings Check the box to allow the Pepwave router to manage the web admin access information Enable of the AP. Web Access These buttons specify the web access protocol used for accessing the web admin of the AP.
Page 132
Pepwave MAX and Surf User Manual Navigating to AP>Settings on some Pepwave models displays a screen similar to the one shown below: Wi-Fi Radio Settings Operating This option sets the country whose regulations the Pepwave router follows. Country Wi-Fi Antenna Choose from the router's internal or optional external antennas, if so equipped.
Pepwave MAX and Surf User Manual selected. This option is for setting the time interval between each beacon. By default, 100ms is Beacon Interval selected. This field allows you to set the frequency for the beacon to include a delivery traffic DTIM indication message.
Pepwave MAX and Surf User Manual 20 System Settings 20.1 Admin Security There are two types of user accounts available for accessing the web admin: admin and user. They represent two user levels: the admin level has full administration access, while the user level is read-only. The user level can access only the device's status information;...
Page 135
Pepwave MAX and Surf User Manual Admin Settings This field allows you to define a name for this Pepwave router. By default, Router Name Router Name is set as MAX_XXXX or Surf_SOHO_XXXX, where XXXX refers to the last 4 digits of the unit’s serial number.
Page 136
Pepwave MAX and Surf User Manual With this box is checked, the web admin will authenticate using an external RADIUS server. Authenticated users are treated as either "admin" with full read-write permission Authentication or “user” with read-only access. Local admin and user accounts will be disabled. When...
Page 137
Pepwave MAX and Surf User Manual WAN Connection Access Settings This field allows you to restrict web admin access only from defined IP subnets. • Any - Allow web admin accesses to be from anywhere, without IP address restriction. •...
Do not attempt to upload a non-firmware file or a firmware file that is not supported by Peplink. Upgrading the Pepwave router with an invalid firmware file will damage the unit and may void the warranty.
This specifies the time zone (along with the corresponding Daylight Savings Time scheme). Time Zone The Time Zone value affects the time stamps in the Pepwave router’s event log and e-mail notifications. Check Show all to show all time zone options.
Page 140
This field allows you to verify and confirm the new administrator password. Password Sender’s Email This setting specifies the email address the Pepwave router will use to send reports. Address Recipient’s This setting specifies the email address(es) to which the Pepwave router will send email Email Address notifications.
This setting specifies the IP address or hostname of the remote syslog server. Host The Pepwave router can also send push notifications to mobile devices that have our Mobile Router Utility installed. Check the box to activate this feature. Push Events For more information on the Router Utility, go to: www.peplink.com/products/router-utility...
Pepwave MAX and Surf User Manual 20.6 SNMP SNMP or simple network management protocol is an open standard that can be used to collect information about the Pepwave router. SNMP configuration is located at System>SNMP. SNMP Settings SNMP Device This field shows the router name defined at System>Admin Security.
Page 143
Pepwave MAX and Surf User Manual SNMP Community Settings Community This setting specifies the SNMP community name. Name Allowed Source This setting specifies a subnet from which access to the SNMP server is allowed. Enter Subnet subnet address here (e.g., 192.168.1.0) and select the appropriate subnet mask.
InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl.
Upload In a high availability (HA) configuration, a Pepwave router can quickly load the configuration Configurations of its HA counterpart. To do so, click the Upload button. After loading the settings,...
This page provides a reboot button for restarting the system. For maximum reliability, the Pepwave router can equip with two copies of firmware. Each copy can be a different version. You can select the firmware version you would like to reboot the device with.
Pepwave MAX and Surf User Manual 20.11 Ping The ping test tool sends pings through a specified Ethernet interface or a SpeedFusion VPN connection. You can specify the number of pings in the field Number of times, to a maximum number of 10 times. Packet Size can be set to a maximum of 1472 bytes.
Pepwave MAX and Surf User Manual 20.12 Traceroute Test The traceroute test tool traces the routing path to the destination through a particular Ethernet interface or a SpeedFusion connection. The traceroute test utility is located at System>Tools>Traceroute. A system administrator can use the traceroute utility to analyze the connection path of a LAN/WAN connection.
Pepwave MAX and Surf User Manual 20.14 CLI (Command Line Interface Support) The CLI (command line interface) can be accessed via SSH. This field enables CLI support. The below settings specify which TCP port and which interface(s) should accept remote SSH CLI access. The user name and password used for remote SSH CLI access are the same as those used for web admin access.
This shows the modem support version. For a list of supported modems, click Modem Support Support List. Version Host Name The host name assigned to the Pepwave router appears here. Uptime This shows the length of time since the device has been rebooted. System Time This shows the current system time.
Page 151
End User License Agreement (EULA), click Important Note If you encounter issues and would like to contact the Pepwave Support Team (http://www.pepwave.com/contact/), please download the diagnostic report file and attach it along with a description of your issue.
Pepwave MAX and Surf User Manual 21.2 Active Sessions Information on active sessions can be found at Status>Active Sessions>Overview. This screen displays the number of sessions initiated by each application. Click on each service listing for additional information. This screen also indicates the number of sessions initiated by each WAN port.
Page 153
This Active Sessions section displays the active inbound/outbound sessions of each WAN connection on the Pepwave router. A filter is available to sort active session information. Enter a keyword in the field or check one of the WAN connection boxes for filtering.
Pepwave MAX and Surf User Manual 21.3 Client List The client list table is located at Status>Client List. It lists DHCP and online client IP addresses, names (retrieved from the DHCP reservation table or defined by users), current download and upload rate, and MAC address.
Pepwave MAX and Surf User Manual 21.5 UPnP / NAT-PMP The table that shows the forwarded ports under UPnP and NAT-PMP protocols is located at Status>UPnP/NAT-PMP. This section appears only if you have enabled UPnP / NAT-PMP as mentioned in Section 15.1.1.
Page 156
Pepwave MAX and Surf User Manual Click the button for a chart displaying real-time throughput, latency, and drop- rate information for each WAN connection. When pressing the button, the following menu will appear: http://www.pepwave.com Copyright @ 2015 Pepwave...
Page 157
Pepwave MAX and Surf User Manual After clicking the icon, the following menu appears: Select the L2 protocol (TCP/UDP), direction, and duration and click the Start button to begin the general throughput test. http://www.pepwave.com Copyright @ 2015 Pepwave...
Page 158
Pepwave MAX and Surf User Manual The bandwidth bonding feature of PepVPN occurs when multiple WAN lines from one end merge with multiple WAN lines from the other end. For this to happen, each WAN line needs to form a connection with all the WAN lines on the opposite end. The function of the PepVPN analyzer is to report the throughput, packet loss, and latency of all possible combinations of connections.
21.7 Event Log Event log information is located at Status>Event Log. The log section displays a list of events that has taken place on the Pepwave router. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log.
Page 160
Pepwave MAX and Surf User Manual 21.8.1 Real-Time The Data transferred since installation table indicates how much network traffic has been processed by the device since the first bootup. The Data transferred since last reboot table indicates how much network traffic has been processed by the device since the last bootup.
Page 161
Pepwave MAX and Surf User Manual 21.8.2 Hourly This page shows the hourly bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the desired connection to check from the drop-down menu. 21.8.3 Daily http://www.pepwave.com...
Page 162
Pepwave MAX and Surf User Manual This page shows the daily bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the connection to check from the drop-down menu. If you have enabled the Bandwidth Monitoring feature, the Current Billing Cycle table for that WAN connection will be displayed.
Page 163
Pepwave MAX and Surf User Manual 21.8.4 Monthly This page shows the monthly bandwidth usage for each WAN connection. If you have enabled the Bandwidth Monitoring feature, you can check the usage of each particular connection and view the information by Billing Cycle or by Calendar Month.
Page 164
Pepwave MAX and Surf User Manual Ethernet WAN Monthly Bandwidth Usage By default, the scale of data size is in MB. 1GB equals 1024MB. http://www.pepwave.com Copyright @ 2015 Pepwave...
Restoration of Factory Defaults Appendix A. To restore the factory default settings on a Pepwave router, follow the steps below: Locate the reset button on the front or back panel of the Pepwave router. With a paper clip, press the reset button and hold it for at least 10 seconds, until the unit reboots itself.
Pepwave MAX and Surf User Manual Declaration Appendix B. 1. The device supports time division technology 2. Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
Page 167
Pepwave MAX and Surf User Manual This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. 1. 20cm minimum when the product is operated alone without co-transmitting with a plug-in 3G USB dongle device. 2. 65cm minimum when the product is operated with a plug-in 3G USB device which has maximum of 7W ERP output power.
Page 168
Pepwave MAX and Surf User Manual EN 301 511 V9.0.2: 2003 Global System for Mobile communications (GSM); Harmonized standard for mobile stations in the GSM 900 and DCS 1800 bands covering essential requirements under article 3.2 of the R&TTE directive (1999/5/EC) EN 301 489-1 V1.9.2: 2008...
Page 169
Pepwave MAX and Surf User Manual Español Por medio de la presente [nombre del fabricante] declara que el [clase de equipo] [Spanish] cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Ελληνική ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ [name of manufacturer] ΔΗΛΩΝΕΙ ΟΤΙ [type of equipment] ΣΥΜΜΟΡΦΩΝΕΤΑΙ...
Page 170
Contact Us: Sales http://www.pepwave.com/contact/sales/ Support http://www.pepwave.com/contact/ Business Development and Partnerships http://www.pepwave.com/partners/channel-...
Need help?
Do you have a question about the MAX 700 and is the answer not in the manual?
Questions and answers