peplink ONE 20 User Manual

peplink ONE 20 User Manual

Balance multi-wan bonding routers
For more information, please visit peplink.com
Hide thumbs Also See for ONE 20:
Table of Contents

Advertisement

Quick Links

Peplink Balance Multi-WAN Bonding Routers
User Manual
For Models:
ONE/20/30/30 LTE/50/210/310/305/380/580/710/1350/2500
MediaFast 200/500/750
Peplink Balance Firmware 6.3
May 2016
Copyright & trademark specifications are subject to change without prior notice. Copyright © 2016 Peplink International Ltd. All Rights
Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned may be
trademarks or registered trademarks of their respective owners.

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ONE 20 and is the answer not in the manual?

Questions and answers

Summary of Contents for peplink ONE 20

  • Page 1 May 2016 Copyright & trademark specifications are subject to change without prior notice. Copyright © 2016 Peplink International Ltd. All Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned may be...
  • Page 2: Table Of Contents

    LACP NIC Bonding ···························································································· 18 USAGE SCENARIOS ······························································································· 19 PACKAGE CONTENTS ··························································································· 23 Peplink Balance One ························································································· 23 Peplink Balance 20/30/30 LTE/50 ····································································· 23 Peplink Balance 210/310 ··················································································· 23 Peplink Balance 305/380/580/710/1350/2500 ··················································· 23 Peplink MediaFast 200 ······················································································ 23 Peplink MediaFast 500 ······················································································ 23 PEPLINK BALANCE OVERVIEW ···········································································...
  • Page 3 Additional Public IP Settings········································································· 111 14.5 Dynamic DNS Settings ················································································· 112 14.6 PEPVPN WITH SPEEDFUSION BANDWIDTH BONDING ······························ 115 SpeedFusion Settings ··············································································· 115 15.1 The Peplink Balance Behind a NAT Router ················································· 122 15.2 http://www.peplink.com -3 / 269- Copyright © 2016 Peplink...
  • Page 4 AP ···························································································································· 196 AP Controller ································································································ 196 25.1 Wireless SSID ······························································································ 197 25.2 Profiles ········································································································· 203 25.3 Info ··············································································································· 207 25.4 Usage ··········································································································· 208 25.5 SSID ············································································································· 211 25.6 Wireless Client ····························································································· 211 25.7 http://www.peplink.com -4 / 269- Copyright © 2016 Peplink...
  • Page 5 MPLS Alternative ·························································································· 249 Colégio Next - Enabling eLearning ······························································· 256 Performance Optimization ············································································ 258 Maintaining the Same IP Address Throughout a Session ···························· 262 Bypassing the Firewall to Access Hosts on LAN ·········································· 263 http://www.peplink.com -5 / 269- Copyright © 2016 Peplink...
  • Page 6 USER MANUAL Peplink Balance Series Inbound Access Restriction ·········································································· 264 Outbound Access Restriction ······································································· 265 APPENDIX E. TROUBLESHOOTING ··········································································· 266 APPENDIX F. DECLARATION ······················································································ 267 APPENDIX G: PRODUCT DATASHEETS ···································································· 268 http://www.peplink.com -6 / 269- Copyright © 2016 Peplink...
  • Page 7: Introduction And Scope

    Important Note to Users of the Peplink Balance 30 (Classic Edition) Firmware 5.0 or above is NOT applicable to the Peplink Balance 30 (Classic Edition). For more information on identifying the generation of your Peplink Balance 30, please visit our knowledgebase at <http://www.peplink.com/index.php?view=faq&id=231&path=16>.
  • Page 8: Glossary

    Virtual Private Network VRRP Virtual Router Redundancy Protocol Wide Area Network WINS Windows Internet Name Service WLAN Wireless Local Area Network 210+ Refers to Peplink Balance 210/310/380/580/710/1350/2500 380+ Refers to Peplink Balance 380/580/710/1350/2500 http://www.peplink.com -8 / 269- Copyright © 2016 Peplink...
  • Page 9: Product Comparison Chart

    Simultaneous Dual-Band 802.11a/b/g/n Wi-Fi AP AP Controller Remote AP Management Web Filtering Blacklist Light Light Light Full Full MediaFast Content Caching ^Available as an optional feature Full product comparison available at: http://www.peplink.com/products/balance/model-comparison/ http://www.peplink.com -9 / 269 - Copyright © 2016 Peplink...
  • Page 10 802.11a/b/g/n Wi-Fi AP AP Controller Remote AP Management Web Filtering Blacklist Full Full Full Full Light Full Full MediaFast Content Caching ^Available as an optional feature Full product comparison available at: http://www.peplink.com/products/balance/model-comparison/ http://www.peplink.com -10 / 269 - Copyright © 2016 Peplink...
  • Page 11: Product Features

    USER MANUAL Peplink Balance Series Product Features Peplink Balance Series products enable all LAN users to share broadband Internet connections and provide advanced features to enhance Internet access. The following is a list of supported features: Supported Network Features Multiple public IP support (DHCP, PPPoE, static IP address) ...
  • Page 12: Inbound Traffic Management

    Quality of service for different applications and custom protocols  User group classification for different service levels  Bandwidth usage control and monitoring on group- and user-level  Application prioritization for custom protocols and DSL optimization  http://www.peplink.com -12 / 269 - Copyright © 2016 Peplink...
  • Page 13: Firewall

    4.10 Captive Portal Social Wi-Fi Hotspot Support  Splash screen of open networks, login page for secure networks  Customizable built-in captive portal  Supports linking to outside page for captive portal  http://www.peplink.com -13 / 269 - Copyright © 2016 Peplink...
  • Page 14: Other Supported Features

    Firmware upgrades, configuration backups, ping, and traceroute via web  administration interface Remote web-based configuration (via WAN and LAN interfaces)  Remote reporting to Peplink Balance reporting server  Hardware high availability via VRRP, with automatic configuration  synchronization Real-time, hourly, daily and monthly bandwidth usage reports and charts ...
  • Page 15: Advanced Feature Summary

    As your organization grows, it needs more bandwidth. But modifying your network would require effort better spent elsewhere. In Drop-in Mode, you can conveniently install your Peplink router without making any changes to your network. And if the Peplink router loses power for any reason, LAN Bypass will safely and automatically bypass the Peplink router to resume your original network connection.
  • Page 16: Per-User Bandwidth Control

    High Availability via VRRP When your organization has a corporate requirement demanding the highest availability with no single point of failure, you can deploy two Peplink routers in High Availability mode. With High Availability mode, the second device will take over when needed.
  • Page 17: Usb Modem And Android Tethering

    USER MANUAL Peplink Balance Series USB Modem and Android Tethering For increased WAN diversity, plug in a USB LTE modem as backup. Peplink routers are compatible with over 200 modem types. You can also tether to smartphones running Android 4.1.X and above.
  • Page 18: Lacp Nic Bonding

    Peplink Balance Series LACP NIC Bonding Use 802.3ad to combine multiple LAN connections into a virtual LAN connection. This virtual connection has higher throughput and redundancy in case any single link fails. http://www.peplink.com -18 / 269 - Copyright © 2016 Peplink...
  • Page 19: Usage Scenarios

    (POS) systems. By deploying wireless routers, our end users have been able to save significant amount of network costs at their branches by replacing or supplementing their MPLS lines with inexpensive WAN connections. http://www.peplink.com -19 / 269 - Copyright © 2016 Peplink...
  • Page 20 Our MAX HD2, MAX HD4 and MAX On-The-Go routers have been selected by end-users to employ multiple wireless networks to stream live multimedia contents. http://www.peplink.com -20 / 269 - Copyright © 2016 Peplink...
  • Page 21 -21 / 269 - Copyright © 2016 Peplink...
  • Page 22 SpeedFusion with each other. Thus, secure connections can be established among the headquarters, branch and vehicle. Further Balance 710, Balance 380 and MAX HD2 can be managed by InControl to reduce administration effort. http://www.peplink.com -22 / 269 - Copyright © 2016 Peplink...
  • Page 23: Package Contents

    USER MANUAL Peplink Balance Series Package Contents The contents of Peplink Balance product packages are as follows: Peplink Balance One Peplink Balance One  Power adapter  Information slip  Peplink Balance 20/30/30 LTE/50 Peplink Balance 20/30/30 LTE/50  Power adapter ...
  • Page 24: Peplink Balance Overview

    ON – 10 / 100 / 1000 Mbps Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port http://www.peplink.com -24 / 269 - Copyright © 2016 Peplink...
  • Page 25 USER MANUAL Peplink Balance Series USB Ports For future functionality 8.1.3 Rear Panel Appearance Power Connector 8.1.4 Product Label http://www.peplink.com -25 / 269 - Copyright © 2016 Peplink...
  • Page 26: Peplink Balance 20

    Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -26 / 269 - Copyright © 2016 Peplink...
  • Page 27 USER MANUAL Peplink Balance Series 8.2.3 Rear Panel Appearance Power Connector Kensington Security Slot 8.2.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -27 / 269 - Copyright © 2016 Peplink...
  • Page 28: Peplink Balance 30

    Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -28 / 269 - Copyright © 2016 Peplink...
  • Page 29 USER MANUAL Peplink Balance Series 8.3.3 Rear Panel Appearance Power Connector Kensington Security Slot 8.3.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -29 / 269 - Copyright © 2016 Peplink...
  • Page 30: Peplink Balance 30 Lte

    USER MANUAL Peplink Balance Series Peplink Balance 30 LTE 8.4.1 Front Panel Appearance Status LED USB Port WAN Ports Reset Button LAN Ports Power LED 8.4.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Power and Status Indicators OFF –...
  • Page 31 USER MANUAL Peplink Balance Series 8.4.3 Rear Panel Appearance Power Connector Cellular SIM Slot 8.4.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -31 / 269 - Copyright © 2016 Peplink...
  • Page 32: Peplink Balance 50

    Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -32 / 269 - Copyright © 2016 Peplink...
  • Page 33 USER MANUAL Peplink Balance Series 8.5.3 Rear Panel Appearance Power Connector Kensington Security Slot http://www.peplink.com -33 / 269 - Copyright © 2016 Peplink...
  • Page 34: Peplink Balance 210

    Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -34 / 269 - Copyright © 2016 Peplink...
  • Page 35 USER MANUAL Peplink Balance Series 8.6.3 Rear Panel Appearance Power Connector 8.6.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -35 / 269 - Copyright © 2016 Peplink...
  • Page 36: Peplink Balance 310

    Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -36 / 269 - Copyright © 2016 Peplink...
  • Page 37 USER MANUAL Peplink Balance Series 8.7.3 Rear Panel Appearance Power Connector 8.7.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -37 / 269 - Copyright © 2016 Peplink...
  • Page 38: Peplink Balance 305

    Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports Console and USB Ports Console Port Reserved for engineering use USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -38 / 269 - Copyright © 2016 Peplink...
  • Page 39 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > WAN3 http://www.peplink.com -39 / 269 - Copyright © 2016 Peplink...
  • Page 40 Pressing and holding the key for four seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. 8.8.5 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -40 / 269 - Copyright © 2016 Peplink...
  • Page 41: Peplink Balance 380

    Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports Console and USB Ports Console Port Reserved for engineering use USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -41 / 269 - Copyright © 2016 Peplink...
  • Page 42 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > WAN3 http://www.peplink.com -42 / 269 - Copyright © 2016 Peplink...
  • Page 43 Pressing and holding the key for four seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. 8.9.5 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -43 / 269 - Copyright © 2016 Peplink...
  • Page 44: Peplink Balance 580

    USER MANUAL Peplink Balance Series 8.10 Peplink Balance 580 8.10.1 Front Panel Appearance Console Power Ports RS-232 Port Display Ports LCD Controls Port 8.10.2 LED Indicators RS-232 The statuses indicated by the front panel LEDs are as follows: Port Power and Status Indicators OFF –...
  • Page 45 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > … >WAN5 http://www.peplink.com -45 / 269 - Copyright © 2016 Peplink...
  • Page 46 Pressing and holding the key for four seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. 8.10.4 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -46 / 269 - Copyright © 2016 Peplink...
  • Page 47: Peplink Balance 710

    USER MANUAL Peplink Balance Series 8.11 Peplink Balance 710 8.11.1 Front Panel Appearance Console Power RS-232 Port WAN Port Display LCD Controls RS-232 LAN Port Port Status indicated in the front panel is as follows: LED Indicator OFF – Power off...
  • Page 48 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, > LAN 10baseT-HD, 100baseTx-FD, 100baseTx-HD, > WAN1 1000baseTx-FD) > WAN2 > … > WAN7 http://www.peplink.com -48 / 269 - Copyright © 2016 Peplink...
  • Page 49 When the unit is powered off, pressing this switch will power on the unit. Reset Switch Press and release once to reset the system. 8.11.4 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -49 / 269 - Copyright © 2016 Peplink...
  • Page 50: Peplink Balance 1350

    USER MANUAL Peplink Balance Series 8.12 Peplink Balance 1350 8.12.1 Front Panel Appearance Power USB Ports Display Console Ports Port LCD Controls Port RS-232 Status indicated in the front panel is as follows: Port RS-232 LED Indicator Port OFF – Power off...
  • Page 51 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD,1000baseTx-FD) > WAN1 > WAN2 > … > WAN13 http://www.peplink.com -51 / 269 - Copyright © 2016 Peplink...
  • Page 52 Pressing and holding the key for four seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. 8.12.4 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -52 / 269 - Copyright © 2016 Peplink...
  • Page 53: Peplink Balance 2500

    USER MANUAL Peplink Balance Series 8.13 Peplink Balance 2500 8.13.1 Front Panel Appearance BPL-2500 Console Port USB Ports RS-232 Port Power Ports Display Port Controls RS-232 Port BPL-2500-SFP Console Port USB Port RS-232 Port Power Ports Display Port Controls RS-232 Port http://www.peplink.com...
  • Page 54: Console Port

    Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports Console & USB Ports Console Port Reserved for engineering use USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -54 / 269 - Copyright © 2016 Peplink...
  • Page 55 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD,1000baseTx-FD) > WAN1 > WAN2 > … > WAN13 http://www.peplink.com -55 / 269 - Copyright © 2016 Peplink...
  • Page 56 Power Switch When the unit is powered off, pressing this switch will power on the unit. 8.13.4 Unit Label Appearance BPL-2500 Serial Number LAN MAC Address BPL-2500-SFP Serial Number LAN MAC Address http://www.peplink.com -56 / 269 - Copyright © 2016 Peplink...
  • Page 57: Peplink Mediafast 500

    USER MANUAL Peplink Balance Series 8.14 Peplink MediaFast 500 8.14.1 Front Panel Appearance Power Console Port RS-232 Port USB Ports Display Ports LCD Controls Ports Ports Status indicated in the front panel is as follows: RS-232 LED Indicator Port OFF – Power off...
  • Page 58 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > … >WAN5 http://www.peplink.com -58 / 269 - Copyright © 2016 Peplink...
  • Page 59 AC input 100-240V Switches Pressing and holding the key for four seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. http://www.peplink.com -59 / 269 - Copyright © 2016 Peplink...
  • Page 60: Installation

    Constructing the Network At the high level, construct the network according to the following steps: With an Ethernet cable, connect a computer to one of the LAN ports on the Peplink Balance. For Peplink Balance models that support multiple connections, repeat with different cables for up to four computers to be connected.
  • Page 61 USER MANUAL Peplink Balance Series The following figure schematically illustrates the resulting configuration: http://www.peplink.com -61 / 269 - Copyright © 2016 Peplink...
  • Page 62: Configuring The Network Environment

    USER MANUAL Peplink Balance Series Configuring the Network Environment To ensure that your Peplink Balance works properly in the LAN environment and can access the Internet via the WAN connections, please refer to the following setup procedures: LAN configuration ...
  • Page 63: Basic Configuration

    Start a web browser on a computer that is connected with the Peplink Balance through the LAN. To connect to the web admin of the Peplink Balance, enter the following LAN IP address in the address field of the web browser: http://192.168.1.1...
  • Page 64: Configuration With The Setup Wizard

    To begin, click Setup Wizard after connecting to the web admin interface. Click Next >> to begin. Select Yes if you want to set up drop-in mode using the Setup Wizard. http://www.peplink.com -64 / 269 - Copyright © 2016 Peplink...
  • Page 65 If you have chosen to configure drop-in mode using the Setup Wizard, the WAN port to be configured in drop-in mode will be checked by default. If drop-in mode is going to be configured, the setup wizard will move on to Drop-in Settings. http://www.peplink.com -65 / 269 - Copyright © 2016 Peplink...
  • Page 66 If Custom Mobile Operator Settings is selected, APN parameters are required. Some service providers may charge a fee for connecting to a different APN. Please consult your service provider for the correct settings. http://www.peplink.com -66 / 269 - Copyright © 2016 Peplink...
  • Page 67 Save Settings to confirm. After finishing the last step in the setup wizard, click Apply Changes on the page header to allow the configuration changes to take effect. http://www.peplink.com -67 / 269 - Copyright © 2016 Peplink...
  • Page 68: Advanced Setup

    WAN connection information at Network>Interfaces>WAN. Please refer to Section 14, Configuring the WAN Interface(s), for details on setting up DHCP, static IP, PPPoE, L2TP, and mobile Internet connections http://www.peplink.com -68 / 269 - Copyright © 2016 Peplink...
  • Page 69: Cellular Wan

    This serves the same purpose as MEID HEX but uses an older format. IMEI This is the unique ID for identifying the modem in GSM/HSPA mode. Network Mode This field displays the network mode, such as HSPA, for the listed cellular connection. http://www.peplink.com -69 / 269 - Copyright © 2016 Peplink...
  • Page 70: Network Mode

    WAN IP address assigned from the PPPoE server.) When Use the following DNS server address(es) is selected, you can put custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. http://www.peplink.com -70 / 269 - Copyright © 2016 Peplink...
  • Page 71 Custom to enter your carrier’s APN, Username, and Passwordsettings manually. The correct values can be obtained from your carrier. The default and recommended value for Operator Settings is Auto. http://www.peplink.com -71 / 269 - Copyright © 2016 Peplink...
  • Page 72 WAN connection goes up). Also note that if an Ethernet WAN link fails during IP passthrough, the router can failover to a cellular WAN link that is also using IP passthrough. http://www.peplink.com -72 / 269 - Copyright © 2016 Peplink...
  • Page 73 This is the number of consecutive check failures before treating a connection as down. Retries Recovery This is the number of responses required after a health check failure before treating a Retries connection as up again. http://www.peplink.com -73 / 269 - Copyright © 2016 Peplink...
  • Page 74 Dynamic DNS  no-ip.org Service Provider  tzo.com  DNS-O-Matic Select Disabled to disable this feature. See Section 14.6 for configuration details. MTU determines the maximum allowable size per packet, in bytes. http://www.peplink.com -74 / 269 - Copyright © 2016 Peplink...
  • Page 75: Mediafast Configuration

    Whitelist (cache the specified domains only) or Blacklist (do not cache the specified Addresses domains). The Secure Content Caching menu operates identically to the MediaFast menu, except it is for secure contenting accessible through https://. http://www.peplink.com -75 / 269 - Copyright © 2016 Peplink...
  • Page 76: Scheduling Content Prefetching

    Content prefetching allows you to download content on a schedule that you define, which can help to preserve network bandwidth during busy times and keep costs down. To access MediaFast content prefetching settings, select Network>MediaFast>Prefetch Schedule. http://www.peplink.com -76 / 269 - Copyright © 2016 Peplink...
  • Page 77 To edit a scheduled download, click To delete a scheduled download, click Click to begin creating a new scheduled download. Clicking the button will cause the New Schedule following screen to appear: http://www.peplink.com -77 / 269 - Copyright © 2016 Peplink...
  • Page 78: Mdm Settings

    Click Follow Web Admin Account to allow client devices to use the built-in administrator Account account when performing MDM. Set Custom to specify a username and password your Settings router will use to log into your client devices. http://www.peplink.com -78 / 269 - Copyright © 2016 Peplink...
  • Page 79: Viewing Mediafast Statistics

    USER MANUAL Peplink Balance Series 11.4 Viewing MediaFast Statistics To get details on storage and bandwidth usage, select Status>MediaFast. http://www.peplink.com -79 / 269 - Copyright © 2016 Peplink...
  • Page 80: Configuring The Lan Interface(S)

    LAN by entering IP settings (VLAN configuration will be covered following physical LAN setup). IP Settings Enter the Peplink Balance’s IP address and subnet mask values to be used on the LAN. To IP Address & Subnet Mask enable multiple VLANs, press the button on the top right-hand corner.
  • Page 81 If you choose to override IP address when the VPN is connected, the device will not act as a connected router, and most Layer 3 routing functions will cease to work. http://www.peplink.com -81 / 269 - Copyright © 2016 Peplink...
  • Page 82 DHCP Server Settings When this setting is enabled, the Peplink Balance’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP DHCP Server address via DHCP.
  • Page 83 Choose the interfaces that you wish to aggregate here if needed. Aggregation If required, enter static route and/or WINS server settings. DHCP relay settings is an advanced feature. To enable it, click the button next to DHCP Server. http://www.peplink.com -83 / 269 - Copyright © 2016 Peplink...
  • Page 84 Check the box to enable the WINS Server. A list of WINS clients will be displayed at Enable Status>WINS Clients. Enter any needed DNS proxy settings. Once all settings have been entered, click Save to store your changes. http://www.peplink.com -84 / 269 - Copyright © 2016 Peplink...
  • Page 85: Dns Caching

    IP address. When looking up the host name from the LAN to LAN IP of the Local DNS Peplink Balance, the corresponding IP address will be returned. To display the option to set Records TTL manually, click .
  • Page 86 Check this box to turn on Bonjour forwarding. Bonjour Choose Service and Client networks from the drop-down menus, and then click Service add the networks. To delete an existing Bonjour listing, click http://www.peplink.com -86 / 269 - Copyright © 2016 Peplink...
  • Page 87: Lan Configuration With Vlan

    LAN to change under the LAN heading. The following settings are displayed: IP Settings IP Address Enter the Peplink Balance’s IP address and subnet mask values to be used on the LAN. Network Settings Name Enter a name for the LAN.
  • Page 88 USER MANUAL Peplink Balance Series Drop-in Mode Settings Drop-in mode eases the installation of the Peplink Balance on a live network between the existing firewall and router, such that no configuration changes are required on existing Enable equipment. Check the box to enable the drop-in mode feature.
  • Page 89 Layer 3 routing functions will cease to work. - Advanced feature, please click the button on the top right-hand corner of the Network Settings menu to activate. http://www.peplink.com -89 / 269 - Copyright © 2016 Peplink...
  • Page 90 USER MANUAL Peplink Balance Series DHCP Server Settings When this setting is enabled, the Peplink Balance’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP DHCP Server address via DHCP. The Peplink Balance’s DHCP server can prevent IP address collisions on the LAN.
  • Page 91 Check this box to log DHCP relay activity. Logging Once DHCP is set up, click Save and configure LAN Physical Settings, Static Route Settings, WINS Server Settings, DNS Proxy Settings, and Bonjour Forwarding as noted above. http://www.peplink.com -91 / 269 - Copyright © 2016 Peplink...
  • Page 92: Drop-In Mode

    Alternately, the hosts may be rebooted. Otherwise, hosts on one side may not be able to reach hosts on the other side of the Peplink Balance until old ARP records expire. Units not using drop-in mode are not affected.
  • Page 93 Enter the IP address of the WAN1 router in the WAN Default Gateway field. Ensure that the Peplink Balance’s IP subnet is the same as the firewall’s WAN port and the router’s LAN port.
  • Page 94 USER MANUAL Peplink Balance Series http://www.peplink.com -94 / 269 - Copyright © 2016 Peplink...
  • Page 95 WAN port can be configured in drop-in mode. If you have selected the LAN bypass port as the WAN for drop-in mode, the high availability feature will be DISABLED automatically. Want to know more about drop-in mode? Visit our YouTube Channel for video tutorials! http://youtu.be/lZG2-VPml5w http://www.peplink.com -95 / 269 - Copyright © 2016 Peplink...
  • Page 96: Configuring The Wan Interface(S)

    Click to enable this WAN connection. If needed, click the drop-down menu to apply a Enable schedule to this connection. This option allows you to select the connection method for this WAN connection. Available options are: DHCP Connection Method Static IP PPPoE L2TP http://www.peplink.com -96 / 269 - Copyright © 2016 Peplink...
  • Page 97 DHCPv6 requests. IPv6 clients on the LAN will acquire their IPv6, gateway, and DNS server addresses from it. The device will also acquire an IPv6 address for performing ping/traceroute checks and accepting web admin accesses. http://www.peplink.com -97 / 269 - Copyright © 2016 Peplink...
  • Page 98: Physical Interface Settings

    Physical Interface Settings This setting specifies port speed and duplex configurations of the WAN port. By default, Auto is selected, and the appropriate data speed is automatically detected by the Peplink Speed Balance. In the event of negotiation issues, the port speed can be manually specified. You can also choose whether or not to advertise the speed to the peer by selecting Advertise Speed.
  • Page 99: Connection Method(S)

    DNS server 2 fields. Please refer to Sections 14.3, 14.4, 14.5, and 14.6 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings. http://www.peplink.com -99 / 269 - Copyright © 2016 Peplink...
  • Page 100: Static Ip Connection

    You can input the ISP-provided DNS server addresses into the DNS server 1 and DNS server 2 fields. If no address is entered here, this link will not be used for DNS lookups. http://www.peplink.com -100 / 269 - Copyright © 2016 Peplink...
  • Page 101: Pppoe Connection

    Please refer to Sections 14.3, 14.4, 14.5, and 14.6 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings. Note A PPPoE connection made from a firewall does not work with drop-in mode. http://www.peplink.com -101 / 269 - Copyright © 2016 Peplink...
  • Page 102: L2Tp Connection

    When Use the following DNS server address(es) is selected, you can enter custom DNS server addresses for this WAN connection into the DNS server 1 and DNS server 2 fields. http://www.peplink.com -102 / 269 - Copyright © 2016 Peplink...
  • Page 103 Balance’s USB mobile WAN port, except in the case of the Balance units that include a built-in 4G LTE modem. For a list of supported modems, please refer to Peplink Modem Support page at http://www.peplink.com/modem.
  • Page 104 Operator Settings allows you to configure the APN settings of your connection. If Auto is Operator selected, the Peplink Balance will automatically detect the APN, configure the modem, and make Settings a connection. You may change the APN settings by selecting Custom Mobile Operator Settings.
  • Page 105: Frequency Band

    GSM900 / GSM1800 / GSM2100 are used in Europe, the Middle East, Africa, Asia, Oceania, and Brazil. Band If All Bands is chosen, the appropriate frequency band will be used automatically. The default GSM frequency band is All Bands. http://www.peplink.com -105 / 269 - Copyright © 2016 Peplink...
  • Page 106 The modem's electronic serial number (ESN) is also auto-detected and appears here. Network Type This is to specify the network type (e.g., 3G or 4G) to be used with the modem. http://www.peplink.com -106 / 269 - Copyright © 2016 Peplink...
  • Page 107: Wan Health Check

    Peplink Balance Series 14.3 WAN Health Check To ensure traffic is routed to healthy WAN connections only, the Peplink Balance can periodically check the health of each WAN connection. Health Check settings for each WAN connection can be independently configured via Network>Interfaces>WAN>*Connection name*>Health Check Settings.
  • Page 108 HTTP return code is between 200 and 299 and if the HTTP response content contains the string. WAN Settings>WAN Edit>Health Check Settings>URL2 URL 2 If URL2 is also provided, a health check will pass if either one of the tests passed. http://www.peplink.com -108 / 269 - Copyright © 2016 Peplink...
  • Page 109 This setting specifies the number of consecutive successful ping/DNS lookup responses that must be received before the Peplink Balance treats a previously down WAN connection Recovery as up again. By default, Recover Retries is set to 3. Using the default setting, a WAN...
  • Page 110: Bandwidth Allowance Monitor

    Disclaimer Due to different network protocol overheads and conversions, the amount of data reported by this Peplink device is not representative of actual billable data usage as metered by your network provider. Peplink disclaims any obligation or responsibility for any events arising from use of the numbers shown here.
  • Page 111: Additional Public Ip Settings

    Internet IP address is assigned to this WAN connection. Enter the IP Address List fixed Internet IP addresses and the corresponding subnet mask, and then click the Down Arrow button to populate IP address entries to the IP Address List. http://www.peplink.com -111 / 269 - Copyright © 2016 Peplink...
  • Page 112: Dynamic Dns Settings

    Either upon a change in IP addresses or every 23 days without link reconnection, the Peplink Balance will connect to the dynamic DNS service provider to update the provider’s IP address records. The settings for dynamic DNS service provider(s) and the association of hostname(s) are configured via Network>Interfaces>WAN>*Connection name*>Dynamic DNS...
  • Page 113 Due to dynamic DNS service providers’ policies, a dynamic DNS host expires automatically when the host record has not been not updated for a long time. Therefore, the Peplink Balance performs an update every 23 days, even if a WAN’s IP address did not change.
  • Page 114 USER MANUAL Peplink Balance Series http://www.peplink.com -114 / 269 - Copyright © 2016 Peplink...
  • Page 115: Pepvpn With Speedfusion

    WANs, other WANs can be used to continue carrying the network traffic. The Peplink Balance can bond all WAN connections’ bandwidth for routing SpeedFusion traffic. Unless all the WAN connections of one site are down, the Peplink Balance can keep the VPN up and running. Bandwidth bonding is enabled by default.
  • Page 116 Peplink Balance Series All data can be routed over the VPN with 256-bit AES encryption standard. To configure this, navigate to Network>Interfaces>SpeedFusion. To configure a new SpeedFusion profile, navigate to Network>Interfaces>SpeedFusion>New Profile. http://www.peplink.com -116 / 269 - Copyright © 2016 Peplink...
  • Page 117: Nat Mode

    Click the New Profile button to create a new VPN connection profile for making a VPN connection to a remote Peplink Balance via the available WAN connections. Each profile is for making a VPN connection with one remote Peplink Balance.
  • Page 118 USER MANUAL Peplink Balance Series This field is optional. With this field filled, the Peplink Balance will initiate connection to each of the remote IP addresses until it succeeds in making a connection. If the field is empty, the Peplink Balance will wait for connection from the remote peer. Therefore, at least one of the two VPN peers must specify this value.
  • Page 119 SpeedFusion profile that will take over, should the main PepVPN connection fail. PepVPN Local ID This feature allows you to change the local ID of a PepVPN connection. Click the button to select your http://www.peplink.com -119 / 269 - Copyright © 2016 Peplink...
  • Page 120 TCP port 32015 and UDP port 4500 for establishing VPN connections. If you have a firewall in front of your Peplink Balance devices, you will need to add firewall rules for these ports and protocols to allow inbound and outbound traffic to pass through the firewall.
  • Page 121 USER MANUAL Peplink Balance Series Watch a video walkthrough of setting up a SpeedFusion VPN on our YouTube Channel! http://youtu.be/xNaq13FWu_g http://www.peplink.com -121 / 269 - Copyright © 2016 Peplink...
  • Page 122: The Peplink Balance Behind A Nat Router

    USER MANUAL Peplink Balance Series 15.2 The Peplink Balance Behind a NAT Router The Peplink Balance supports establishing SpeedFusion over WAN connections which are behind a NAT (network address translation) router. To enable a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to inbound port-forward TCP port 32015 to the Peplink Balance.
  • Page 123: Speedfusion Tm Status

    IP Subnets Must Be Unique Among VPN Peers The entire interconnected SpeedFusion network is a single non-NAT IP network. Avoid duplicating subnets in your sites to prevent connectivity problems when accessing those subnets. http://www.peplink.com -123 / 269 - Copyright © 2016 Peplink...
  • Page 124: Ipsec Vpn

    IPsec implementation will make use of WAN2 and WAN3 for failover. 16.1 IPsec VPN Settings All Peplink products can make multiple IPsec VPN connections with Peplink routers, as well as Cisco and Juniper routers. Note that all LAN subnets and the subnets behind them must be unique. Otherwise, VPN members will not be able to access each other.
  • Page 125 USER MANUAL Peplink Balance Series http://www.peplink.com -125 / 269 - Copyright © 2016 Peplink...
  • Page 126: Host Name

    Mode if one of the IPsec peers uses dynamic IP addresses. Force UDP For forced UDP encapsulation regardless of NAT-traversal, tick this checkbox. Encapsulation Pre-shared This defines the peer authentication pre-shared key used to authenticate this VPN http://www.peplink.com -126 / 269 - Copyright © 2016 Peplink...
  • Page 127 Group 5: 1536-bit is the third option. Phase 2 SA This setting specifies the lifetime limit of this Phase 2 Security Association. By default, it is Lifetime set at 28800 seconds. http://www.peplink.com -127 / 269 - Copyright © 2016 Peplink...
  • Page 128: Ipsec Status

    This feature enables you to prioritize the WAN connections used by this VPN profile. 16.2 IPsec Status IPsec Status shows the current connection status of each connection profile and is displayed at Status>Interfaces>IPsec VPN. http://www.peplink.com -128 / 269 - Copyright © 2016 Peplink...
  • Page 129: Outbound Policy Management

    USER MANUAL Peplink Balance Series 17 Outbound Policy Management The Peplink Balance can flexibly manage and load balance outbound traffic among WAN connections. Important Note Outbound policy is applied only when more than one WAN connection is active. The settings for managing and load balancing outbound traffic are located at Network>Outbound Policy.
  • Page 130: Outbound Policy

    The default policy is Normal Application Compatibility. Want to know more about creating outbound rules? Visit our YouTube Channel for a video tutorial! http://youtu.be/rKH4AS_bQnE http://www.peplink.com -130 / 269 - Copyright © 2016 Peplink...
  • Page 131: Custom Rules For Outbound Policy

    Please refer to the upcoming sections for the details on the available algorithms. To create a custom rule, click Add Rule at the bottom of the table. The following window will be displayed: http://www.peplink.com -131 / 269 - Copyright © 2016 Peplink...
  • Page 132: Service Name

    This setting specifies whether the outbound traffic rule takes effect. When Enable is checked, the rule takes effect: traffic is matched and actions are taken by the Peplink Balance based on the other parameters of the rule. When Enable is unchecked, the rule Enable does not take effect: the Peplink Balance disregards the other parameters of the rule.
  • Page 133 This setting specifies the IP protocol and port of traffic that matches this rule. You may Protocol and Port select common protocols from the Protocol Selection Tool drop-down menu. This setting specifies the behavior of the Peplink Balance for the custom rule. One of the following values can be selected: ...
  • Page 134 LAN client computer behind a Peplink Balance with three WAN connections may communicate on the Internet using three different IP addresses. With the persistence feature of Peplink Balance, rules can be configured to enable client computers to persistently utilize the same WAN connections for e-banking and other secure websites.
  • Page 135 Starting from Firmware 5.2, outbound traffic can be enforced to go through a specified SpeedFusion connection. 17.2.4 Algorithm: Priority This setting specifies the priority of the WAN connections used to route the specified http://www.peplink.com -135 / 269 - Copyright © 2016 Peplink...
  • Page 136 Drag and drop to specify the order of WAN connections to be used for routing traffic. Only the highest priority healthy connection that is not in full load will be used. http://www.peplink.com -136 / 269 - Copyright © 2016 Peplink...
  • Page 137  All WAN connections are symmetric; or  A latency sensitive application must be routed through the lowest latency WAN, regardless of the WAN’s available bandwidth. http://www.peplink.com -137 / 269 - Copyright © 2016 Peplink...
  • Page 138 VPN peer. You can create custom Priority or Enforced rules and move them above the bar to override the SpeedFusion routes. Upon disabling Expert Mode, all rules above the bar will be removed. http://www.peplink.com -138 / 269 - Copyright © 2016 Peplink...
  • Page 139: Inbound Access

    18 Inbound Access Inbound access is also known as inbound port address translation. On a NAT WAN connection, all inbound traffic to the server behind the Peplink unit requires inbound access rules. By the custom definition of servers and services for inbound access, Internet users can access the servers behind Peplink Balance.
  • Page 140: Definition Of Port Forwarding

    The IP Protocol setting, along with the Port setting, specifies the protocol of the service as TCP, UDP, ICMP, or IP. Traffic that is received by the Peplink Balance via the specified protocol at the specified port(s) is forwarded to the LAN hosts specified by the Servers setting.
  • Page 141 Any Port, Single Port, Port Range, Port Map, and Range Mapping Any Port: all traffic that is received by the Peplink Balance via the specified protocol is forwarded to the servers specified by the Servers setting. For example, with IP Protocol set to TCP, and Port set to Any Port, all TCP traffic is forwarded to the configured servers.
  • Page 142: Inbound Access Services

    This setting specifies whether the inbound service rule takes effect. When Yes is selected, the inbound service rule takes effect. If the inbound traffic matches the specified IP protocol and port, action will be taken by the Peplink Balance based on the other Enable parameters of the rule.
  • Page 143 Any Port, Single Port, Port Range, Port Map, and Range Mapping Any Port: all traffic that is received by the Peplink Balance via the specified protocol is forwarded to the servers specified by the Servers setting.
  • Page 144 Internet IP address(es) of the Peplink Balance. Upon receiving a DNS query, the Peplink Balance can return (as an “A” record) the IP address for the domain name on the most appropriate healthy WAN connection. It can also act as a generic DNS server for hosting “A”, “CNAME”, “MX”, “TXT”...
  • Page 145 USER MANUAL Peplink Balance Series DNS Settings This setting specifies the WAN IP addresses on which the DNS server of the Peplink Balance should listen. If no addresses are selected, the inbound link load balancing feature will be disabled and the Peplink Balance will not respond to DNS requests.
  • Page 146 The zone transfer server of the Peplink Balance listens on TCP port 53. Zone Transfer The Peplink Balance serves both the clients that are accessing from the specified IP addresses, and the clients that are accessing its LAN interface. Routing...
  • Page 147: Domain Name

    Each WAN connection is associated with a priority number. Click Save to save the settings when configuration is complete. This section shows a list of domain names to be hosted by the Peplink Balance. Each domain can have its “NS”, “MX” and “TXT” records, and its sub-domains’ “A” and “CNAME” records.
  • Page 148 This page is for defining the domain’s SOA, NS, MX, CNAME, A, TXT, and SRV records. Seven tables are presented in this page for defining the five types of records. http://www.peplink.com -148 / 269 - Copyright © 2016 Peplink...
  • Page 149 IP address that is registered in the DNS registrar. If this field is entered, a corresponding A record for the name server will be created automatically. If it is left blank, the A record for the name server must be created manually. http://www.peplink.com -149 / 269 - Copyright © 2016 Peplink...
  • Page 150 (fully qualified domain name). Please be sure that a corresponding A record is created. Click the button on the right to finish and to add other name servers. Click the Save button to save your changes. http://www.peplink.com -150 / 269 - Copyright © 2016 Peplink...
  • Page 151 ".domain.name" will be returned for every name ending with ".domain.name" except names that have their own records. The TTL field tells the time to live of the record in external DNS caches. http://www.peplink.com -151 / 269 - Copyright © 2016 Peplink...
  • Page 152 A record may be automatically added for the SOA records with a name server IP address provided. A Record This field specifies the A record of this sub-domain to be served by the Peplink Balance. The wildcard character “*” is supported. The IP addresses of “*.domain.name" will be Host Name returned for every name ending with ".domain.name"...
  • Page 153 Custom option and a priority selection table will be shown at the bottom. This setting specifies lists of WAN-specific Internet IP addresses that are candidates to be returned when the Peplink Balance responds to DNS queries for the domain name specified by Host Name.
  • Page 154  Weight: A relative weight for records with the same priority.  Target: The canonical hostname of the machine providing the service.  Port: Enter the TCP or UDP port number on which the service is to be found. http://www.peplink.com -154 / 269 - Copyright © 2016 Peplink...
  • Page 155 Domain Delegation These are the steps to follow when you host your domain at an ISP or domain registrar and want to delegate a sub- domain to be resolved and managed by the Peplink Balance.  Click the New Domain Name button to add a domain name (e.g., www.mycompany.com). Click the corresponding domain name to view and edit record details.
  • Page 156 202.153.122.108 balancewan2 67.38.212.18 202.153.122.108 and 67.38.212.18 represent the WAN1 and WAN2 Internet IP addresses of the Peplink Balance, respectively. The values of the IP addresses are fictitious and for illustration only. Hosting the complete domain at Peplink Balance To host your own DNS server, contact the DNS registrar to have the NS records of the domain (e.g., mycompany.com) point to your Balance’s WAN IP addresses.
  • Page 157 The following steps can be used to test the DNS configuration: From a host on the Internet, use an IP address of the Peplink Balance and nslookup to lookup the corresponding host name. Check the information that is returned for the expected results.
  • Page 158: Reverse Lookup Zones

    If you are delegated the subnet 11.22.33.0/24, the Zone Name should be 33.22.11.in-arpa.addr. PTR records for 11.22.33.1, 11.22.33.2, ... 11.22.33.254 should be defined in this zone where the host IP numbers are 1, 2, ... 254, respectively. http://www.peplink.com -158 / 269 - Copyright © 2016 Peplink...
  • Page 159 Name Server: Enter the NS record's FQDN server name here. For example: "ns1.mydomain.com" (equivalent to "www.1stdomain.com.") "ns2.mydomain.com." Email, Refresh, Retry, Expire, Min Time, and TTL are entered in the same way as in http://www.peplink.com -159 / 269 - Copyright © 2016 Peplink...
  • Page 160 To create a new CNAME record, click the New CNAME Record button. CNAME records are typically used for defining classless reverse lookup zones. Subnetted reverse lookup zones are further described in RFC 2317, "Classless IN-ADDR.ARPA delegation." http://www.peplink.com -160 / 269 - Copyright © 2016 Peplink...
  • Page 161 IP address 11.22.33.44, where the reverse lookup zone is 33.22.11.in- arpa.addr, the Host IP Number should be 44. The Points To field defines the host name which the PTR record should be pointed to. It must be a FQDN. http://www.peplink.com -161 / 269 - Copyright © 2016 Peplink...
  • Page 162: Dns Record Import Wizard

     In the Target DNS Server IP Address field, enter the IP address of the DNS server.  In the Transfer via…field, choose the connection which you would like to transfer through.  Select Next >> to continue. http://www.peplink.com -162 / 269 - Copyright © 2016 Peplink...
  • Page 163 If you have entered domain(s) which already exist in your settings, a warning message will appear. Select Next >> to overwrite the existing record or << Back to go back to the previous step. http://www.peplink.com -163 / 269 - Copyright © 2016 Peplink...
  • Page 164 USER MANUAL Peplink Balance Series http://www.peplink.com -164 / 269 - Copyright © 2016 Peplink...
  • Page 165 After the zone records process have been fetched, the fetch results would be shown as above. You can view import details by clicking the corresponding hyperlink on the right- hand side. http://www.peplink.com -165 / 269 - Copyright © 2016 Peplink...
  • Page 166: Nat Mappings

    USER MANUAL Peplink Balance Series 19 NAT Mappings The Peplink Balance allows the IP address mapping of all inbound and outbound NAT’ed traffic to and from an internal client IP address. NAT mappings can be configured at Network>NAT Mappings. To add a rule for NAT mappings, click Add NAT Rule and the following screen will be displayed: http://www.peplink.com...
  • Page 167 Note 2: WAN connections in drop-in mode or IP forwarding mode are not shown here. Click Save to save the settings when configuration has been completed. Important Note Inbound firewall rules override inbound mapping settings. http://www.peplink.com -167 / 269 - Copyright © 2016 Peplink...
  • Page 168: Captive Portal

    This authenticates your clients through a RADIUS server. After selecting this option, you will see the following fields: RADIUS Server Fill in the necessary information to complete your connection to the server and enable authentication. http://www.peplink.com -168 / 269 - Copyright © 2016 Peplink...
  • Page 169: Ldap Server

    Clients listing. Here, you can choose between using the Balance’s built-in captive portal and redirecting Splash Page clients to a URL you define. http://www.peplink.com -169 / 269 - Copyright © 2016 Peplink...
  • Page 170 If you would like to use your own set of terms and conditions, please enter them here. If Conditions left empty, the built-in portal will display the default terms and conditions. Custom Landing Fill in this field to redirect clients to an external URL. Page http://www.peplink.com -170 / 269 - Copyright © 2016 Peplink...
  • Page 171: Qos

    Once users have been assigned to a user group, their internet traffic will be restricted by rules defined for that particular group. Please refer to the following two sections for details. http://www.peplink.com -171 / 269 - Copyright © 2016 Peplink...
  • Page 172: Bandwidth Control

    (for each WAN connection) that each individual Staff and Guest member can consume. No limit can be imposed on individual Managers. By default, download and upload bandwidth limits are set to unlimited (set as 0). http://www.peplink.com -172 / 269 - Copyright © 2016 Peplink...
  • Page 173: Application

    Normal, and↓ ↑High,━ Low. The Peplink Balance can detect various application traffic types by inspecting the packet content. Select an application by choosing a supported application, or by defining a custom application manually. The priority preference of supported applications is placed at the top of the table. Custom applications are at the bottom.
  • Page 174 Users will not be able to download data at full speed until the uplink becomes less congested. DSL/Cable Optimization can relieve such an issue. When it is enabled, the download speed will become less affected by the upload traffic. By default, this feature is enabled. http://www.peplink.com -174 / 269 - Copyright © 2016 Peplink...
  • Page 175: Firewall

    Internet) and the LAN side of the network. It can protect the local network from potential hacker attacks, access to offensive websites, and/or other inappropriate uses. The firewall functionality of Peplink Balance supports the selective filtering of data traffic in both directions:...
  • Page 176 USER MANUAL Peplink Balance Series Click Add Rule to display the following screen: The inbound firewall settings are located at Network>Firewall>Access Rules. http://www.peplink.com -176 / 269 - Copyright © 2016 Peplink...
  • Page 177 Enable If the box is not checked, the firewall rule does not take effect. The Peplink Balance will disregard the other parameters of the rule. Click the dropdown menu next to the checkbox to place this firewall rule on a time schedule.
  • Page 178: Event Logging

    DST=192.168.1.20 LEN=48 PROTO=TCP SPT=2260 DPT=80 Event Logging  CONN: The connection where the log entry refers to  SRC: Source IP address  DST: Destination IP address  LEN: Packet length http://www.peplink.com -178 / 269 - Copyright © 2016 Peplink...
  • Page 179  PROTO: Protocol  SPT: Source port  DPT: Destination port Click Save to store your changes. To create an additional firewall rule, click Add Rule and repeat the above steps. http://www.peplink.com -179 / 269 - Copyright © 2016 Peplink...
  • Page 180 If the default inbound rule is set to Allow for NAT-enabled WANs, no inbound Allow firewall rules will be required for inbound port forwarding and inbound NAT mapping rules. However, if the default inbound rule is set as Deny, a corresponding Allow firewall rule will be required. http://www.peplink.com -180 / 269 - Copyright © 2016 Peplink...
  • Page 181  Port scan o NMAP FIN/URG/PSH o Xmas tree o Another Xmas tree o Null scan o SYN/RST o SYN/FIN  SYN flood prevention  Ping flood attack prevention http://www.peplink.com -181 / 269 - Copyright © 2016 Peplink...
  • Page 182 Choose applications to be blocked from LAN/PPTP/PepVPN peer clients' access, except for those on the Exempted User Groups or Exempted Subnets defined below. 22.1.3.2 Web Blocking Defines web site domain names to be blocked from LAN/PPTP/PepVPN peer clients' http://www.peplink.com -182 / 269 - Copyright © 2016 Peplink...
  • Page 183 "foobar.*," then "www.foobar.com," "www.foobar.co.jp," or "foobar.co.uk" will be blocked. Placing the wild card in any other position is not supported. The Peplink Balance will inspect and look for blocked domain names on all HTTP traffic. Secure web (HTTPS) traffic is not supported.
  • Page 184: Ospf & Ripv2

    Peplink Balance Series 23 OSPF & RIPv2 The Peplink Balance supports OSPF and RIPv2 dynamic routing protocols. Click the Network tab from the top bar, and then click the OSPF & RIPv2 item on the sidebar to reach the following menu: OSPF This field determines the ID of the router.
  • Page 185 Choose an authentication method, if one is used, from this drop-down menu. Available Authentication options are MD5 and Text. Enter the authentication key next to the drop-down menu. Interfaces Determine which interfaces this area will use to listen to and deliver OSPF packets http://www.peplink.com -185 / 269 - Copyright © 2016 Peplink...
  • Page 186 Choose an authentication method, if one is used, from this drop-down menu. Available Authentication options are MD5 and Text. Enter the authentication key next to the drop-down menu. Interfaces Determine which interfaces this group will use to listen to and deliver RIPv2 packets. http://www.peplink.com -186 / 269 - Copyright © 2016 Peplink...
  • Page 187: Remote User Access

    USER MANUAL Peplink Balance Series 24 Remote User Access Networks routed by a Peplink Balance can be remotely accessed via L2TP with IPsec or PPTP. To configure this feature, navigate to Network > Remote User Access Remote User Access Settings Enable Click the checkbox to enable Remote User Access.
  • Page 188 USER MANUAL Peplink Balance Series corresponding row. Click the button to switch to enters user accounts by pasting the information in.CSV format. http://www.peplink.com -188 / 269 - Copyright © 2016 Peplink...
  • Page 189: Miscellaneous Settings

    The following diagram illustrates an HA configuration with two Peplink Balance units and two Internet connections: In the diagram, the WAN ports of each Peplink Balance unit connect to the router and to the modem. Both Peplink Balance units connect to the same LAN switch via a LAN port.
  • Page 190 Interface for Master Router Interface for Slave Router High Availability Checking this box specifies that the Peplink Balance unit is part of a high availability Enable configuration. This number identifies a pair of Peplink Balance units operating in a high availability Group Number configuration.
  • Page 191 In drop-in mode, no other configuration needs to be set. Please note that the drop-in WAN cannot be configured as a LAN bypass port while it is configured for high availability. http://www.peplink.com -191 / 269 - Copyright © 2016 Peplink...
  • Page 192: Certificate Manager

    When custom service forwarding is enabled, outgoing traffic with the specified TCP Custom Service port will be forwarded to a local or remote server by defining its IP address and port Forwarding number. http://www.peplink.com -192 / 269 - Copyright © 2016 Peplink...
  • Page 193 ISP’s e-mail server host name or IP address. Under SMTP Port, enter the TCP port number for each WAN. The Peplink Balance will intercept SMTP connections. Choose a WAN port according to the outbound policy, and then forward the connection to the SMTP server, if the chosen WAN has enabled forwarding.
  • Page 194: Service Passthrough

    Passthrough. Some Internet services need to be specially handled in a multi-WAN environment. The Peplink Balance can handle these services such that Internet applications do not notice it is behind a multi-WAN router. Settings for service passthrough support are available here.
  • Page 195 FTP sessions consist of two TCP connections; one for control and one for data. In a multi-WAN situation, they must be routed to the same WAN connection. Otherwise, problems will arise in transferring files. By default, the Peplink Balance monitors TCP control connections on port 21 for any FTP connections and binds TCP connections of the same FTP session to the same WAN.
  • Page 196: Ap Controller

    Peplink Balance Series 25 AP The AP controller acts as a centralized controller of Pepwave AP devices. With this feature, users will be able to customize and manage multiple APs from a single Peplink Balance interface. Special Note With the installation of Firmware 6.2.1 and upwards, full AP support is included free.
  • Page 197: Wireless Ssid

    Pepwave AP One unit to the Ethernet segment via the LAN port). The default value of this setting is 0, which means VLAN tagging is disabled (instead of tagged with zero). http://www.peplink.com -197 / 269 - Copyright © 2016 Peplink...
  • Page 198: Data Rate

    This setting specifies whether or not Wi-Fi clients can scan the SSID of this Broadcast SSID wireless network. Broadcast SSID is enabled by default. Select Auto to allow the Peplink Balance to set the data rate automatically, or Data Rate select Fixed and choose a rate from the displayed drop-down menu.
  • Page 199 In field, enter the UDP authentication port(s) used by your RADIUS server(s) or click the Port Default button to enter 1812. Accounting In field, enter the UDP accounting port(s) used by your RADIUS server(s) or click the Default Port button to enter 1813. http://www.peplink.com -199 / 269 - Copyright © 2016 Peplink...
  • Page 200 Enter a value in kpbs to limit connected clients’ upstream bandwidth. Enter 0 to allow Upstream unlimited upstream bandwidth. Limit Client Enter a value in kpbs to limit connected clients’ downstream bandwidth. Enter 0 to allow http://www.peplink.com -200 / 269 - Copyright © 2016 Peplink...
  • Page 201 If you have chosen MAC Address as your firewall rule type, enter the MAC address MAC Address identifying the machine to allow or deny. http://www.peplink.com -201 / 269 - Copyright © 2016 Peplink...
  • Page 202 USER MANUAL Peplink Balance Series http://www.peplink.com -202 / 269 - Copyright © 2016 Peplink...
  • Page 203: Profiles

    To change the settings of an existing profile, click the profile name, and the following screen will be shown: http://www.peplink.com -203 / 269 - Copyright © 2016 Peplink...
  • Page 204 This field specifies the name of this AP profile. These buttons specify which wireless networks will use this AP profile. You can also select the frequencies at which each network will transmit. Please note that the Peplink SSID Balance does not detect whether the AP is capable of transmitting at both frequencies.
  • Page 205: Output Power

    This field provides the option to set the wait time to receive acknowledgement packet ACK Timeout before doing retransmission. The default value is 48μs. With this feature enabled, throughput will be increased by sending two or more data Frame frames in a single transmission. http://www.peplink.com -205 / 269 - Copyright © 2016 Peplink...
  • Page 206: Web Access

    By default, it is set to 50000. - Advanced feature. Click the button on the top right-hand corner to activate. Web Administration Settings Check the box to allow Peplink Balance to manage the web admin access information of Enable the AP. Web Access...
  • Page 207: Info

    Underneath, there are two check boxes labeled 2.4 Ghz and 5 Ghz. Clicking either box Frequency will toggle the display of information for that frequency. By default, the graphs display the number of clients and data usage for both 2.4GHz and 5 GHz frequencies. http://www.peplink.com -207 / 269 - Copyright © 2016 Peplink...
  • Page 208: Usage

    More… link for additional records. 25.5 Usage A detailed breakdown of data usage for each AP is available at AP> Access Point. The information is organized by device groups as defined in Section 22.3. http://www.peplink.com -208 / 269 - Copyright © 2016 Peplink...
  • Page 209: Online Status

    For easier network management, you can give each client a name and designate its location. You can also designate which firmware pack (if any) this client will follow, as well as the channels on which the client will broadcast. http://www.peplink.com -209 / 269 - Copyright © 2016 Peplink...
  • Page 210 SSID, at that point in time. On the Data Usage by menu, you can display the information by SSID or by AP send/receive rate. Click the Event tab next to Wireless Usage to view a detailed event log for that particular device: http://www.peplink.com -210 / 269 - Copyright © 2016 Peplink...
  • Page 211: Ssid

    Here, you will be able to see your network’s heaviest users as well as search for specific users. Click the icon to bookmark specific users, and click the icon for additional details about each user: http://www.peplink.com -211 / 269 - Copyright © 2016 Peplink...
  • Page 212: Rogue Ap

    USER MANUAL Peplink Balance Series 25.8 Rogue AP A listing of suspected rogue devices can be accessed by navigating to AP>Rogue AP. Suspected Rogue Devices http://www.peplink.com -212 / 269 - Copyright © 2016 Peplink...
  • Page 213: Toolbox

    To receive new firmware packs, you can either press to download new packs or you can press to manually upload a firmware pack. Press define which firmware pack is default. http://www.peplink.com -213 / 269 - Copyright © 2016 Peplink...
  • Page 214: System Settings

    For security reasons, after logging in to the web admin Interface for the first time, it is recommended to change the administrator password. Configuring the administration interface to be accessible only from the LAN can further improve system security. Administrative settings configuration is located at System>Admin Security. http://www.peplink.com -214 / 269 - Copyright © 2016 Peplink...
  • Page 215 Peplink Balance Series Admin Settings This field allows you to define a name for this Peplink Balance unit. By default, Router Router Name Name is set as Balance_XXXX, where XXXX refers to the last 4 digits of the serial number of that balance unit.
  • Page 216: Front Panel

    The CLI (command line interface) can be accessed via SSH. It can also be accessed from CLI SSH & the serial console port on some Peplink Balance models. This field enables CLI support. For Console additional information regarding CLI, please refer to Section 22.5.
  • Page 217 To define multiple subnets, separate each IP subnet, one per line. For example: 192.168.0.0/24 10.8.0.0/16 Allowed WAN This is to choose which WAN IP address(es) the web server should listen on. IP Address(es) http://www.peplink.com -217 / 269 - Copyright © 2016 Peplink...
  • Page 218: Firmware

    Balance will automatically download the firmware. The rest of the upgrade process will be automatically initiated. You may also download a firmware image from the Peplink website and update the unit manually. To update using a firmware image, click Choose File to select the firmware file from the local computer, and then click Manual Upgrade to send the firmware to the Peplink Balance.
  • Page 219: Schedule

    Do not attempt to upload a non-firmware file or a firmware file that is not supported by Peplink. Upgrading the Peplink Balance with an invalid firmware file will damage the unit and may void the warranty.
  • Page 220: Time

    This specifies the time zone (along with the corresponding Daylight Savings Time scheme) in which Peplink Balance operates. The Time Zone value affects the time stamps in the Time Zone event log of the Peplink Balance and e-mail notifications. Check Show all to show all time zone options. Time Server This setting specifies the NTP network time server to be utilized by the Peplink Balance.
  • Page 221: Email Notification

    Password Confirm SMTP This field allows you to verify and confirm the new administrator password. Password Sender’s Email This setting specifies the email address which the Peplink Balance will use to send its Address reports. http://www.peplink.com -221 / 269 -...
  • Page 222 USER MANUAL Peplink Balance Series Recipient’s This setting specifies the email address(es) to which the Peplink Balance will send email Email Address notifications. For multiple recipients, separate each email using the enter key. After you have finsihed setting up email notifications, you can click the Test Email Notification button to test the settings before saving.
  • Page 223: Event Log

    This setting specifies the IP address or hostname of the remote syslog server. Host The Peplink Balance can also send push notifications to mobile devices that have our Mobile Router Utility installed. Check the box to activate this feature. Push Events For more information on the Router Utility, go to: www.peplink.com/products/router-utility...
  • Page 224: Snmp

    USER MANUAL Peplink Balance Series 26.7 SNMP SNMP or simple network management protocol is an open standard that can be used to collect information about the Peplink Balance unit. SNMP configuration is located at System>SNMP. SNMP Settings SNMP Device This field shows the router name defined at System>Admin Security.
  • Page 225 This setting specifies via a drop-down menu one of the following valid privacy protocols: Privacy Protocol  NONE  When DES is selected, an entry field will appear for the password. http://www.peplink.com -225 / 269 - Copyright © 2016 Peplink...
  • Page 226: Incontrol

    Peplink Balance Series 26.8 InControl InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl.
  • Page 227: Configuration

    Configurations of its HA counterpart. To do so, click the Upload button. After loading the settings, from High configure the LAN IP address of the Peplink Balance unit so that it is different from the HA counterpart. Availability Pair http://www.peplink.com -227 / 269 - Copyright ©...
  • Page 228: Feature Add-Ons

    This page provides a reboot button for restarting the system. For maximum reliability, the Peplink Balance Series can equip with two copies of firmware, and each copy can be a different version. You can select the firmware version you would like to reboot the device with.
  • Page 229: Tools

    1472 bytes. The ping utility is located at System>Tools>Ping, illustrated below: A system administrator can use the ping utility to manually check the connectivity of a particular LAN/WAN connection. http://www.peplink.com -229 / 269 - Copyright © 2016 Peplink...
  • Page 230: Traceroute Test

    A system administrator can use the traceroute utility to analyze the connection path of a LAN/WAN connection. 27.3 Wake-on-LAN Peplink routers can send special “magic packets” to any client specified from the Web UI. To access this feature, navigate to System > Tools > Wake-on-LAN Select a client from the drop-down list and click Send to send a “magic packet”...
  • Page 231 USER MANUAL Peplink Balance Series The serial console connector on other Peplink Balance units is a DB-9 male connector. To access the serial console port, connect a null modem cable with a DB-9 connector on both ends to a terminal with the port setting of 115200,8N1.
  • Page 232: Status

    USER MANUAL Peplink Balance Series 28 Status 28.1 Device System information is located at Status>Device. http://www.peplink.com -232 / 269 - Copyright © 2016 Peplink...
  • Page 233: System Time

    The second table shows the MAC address of each LAN/WAN interface connected. Important Note If you encounter issues and would like to contact the Peplink Support Team (http://www.peplink.com/contact/), please download the diagnostic report file and attach it along with a description of your issue. In Firmware 5.1 or before, the diagnostic report file can be obtained at System>Reboot.
  • Page 234: Active Sessions

    This screen displays the number of sessions initiated by each application. Click on each service listing for additional information. This screen also indicates the number of sessions initiated by each WAN port. Finally, you can see which clients are initiating the most sessions. http://www.peplink.com -234 / 269 - Copyright © 2016 Peplink...
  • Page 235 This Active Sessions section displays the active inbound / outbound sessions of each WAN connection on the Peplink Balance. A filter is available to help sort out the active session information. Enter a keyword in the field or check one of the WAN connection boxes for filtering.
  • Page 236: Client List

    Client List (see previous section). Click Flush All to flush all WINS client records. 28.5 OSPF & RIPv2 Information on OSPF and RIPv2 routing setup can be found at Status>OSPF & RIPv2. http://www.peplink.com -236 / 269 - Copyright © 2016 Peplink...
  • Page 237: Speedfusion Tm Status

    Click on the corresponding peer name to explore the WAN connection(s) status and subnet information of each VPN peer. Click the button for a chart displaying real-time throughput, latency, and drop- rate information for each WAN connection. http://www.peplink.com -237 / 269 - Copyright © 2016 Peplink...
  • Page 238 After clicking the icon, the following menu appears: Select the L2 protocol (TCP/UDP), direction, and duration and click the Start button to begin the general throughput test. http://www.peplink.com -238 / 269 - Copyright © 2016 Peplink...
  • Page 239 After clicking the icon, the analyzer will require several minutes to perform its analysis depending the number of WAN links in the SpeedFusion Tunnel. Once the test the complete, the report will appear: http://www.peplink.com -239 / 269 - Copyright © 2016 Peplink...
  • Page 240: Event Log

    Event log information is located at Status>Event Log. 28.7.1 Device Event Log The log section displays a list of events that has taken place on the Peplink Balance unit. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log.
  • Page 241: Bandwidth

    The Data transferred since last reboot table indicates how much network traffic has been processed by the device since the last bootup. http://www.peplink.com -241 / 269 - Copyright © 2016 Peplink...
  • Page 242 28.8.2 Hourly This page shows the hourly bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the desired connection to check from the drop-down menu. http://www.peplink.com -242 / 269 - Copyright © 2016 Peplink...
  • Page 243 WAN connection. The scale of the graph can be set to display megabytes (MB) or gigabytes (GB). Status http://www.peplink.com -243 / 269 - Copyright © 2016 Peplink...
  • Page 244 USER MANUAL Peplink Balance Series Click on a specific date to receive a breakdown of all client usage for that date. http://www.peplink.com -244 / 269 - Copyright © 2016 Peplink...
  • Page 245 The scale of the graph can be set to display megabytes (MB) or gigabytes (GB). Click on a specific month to receive a breakdown of all client usage for that month. http://www.peplink.com -245 / 269 - Copyright © 2016 Peplink...
  • Page 246: Appendix A. Restoration Of Factory Defaults

    USER MANUAL Peplink Balance Series Appendix A. Restoration of Factory Defaults To restore the factory default settings on a Peplink Balance unit, perform the following: For Balance models with a reset button: Locate the reset button on the Peplink Balance unit.
  • Page 247: Appendix C. Routing Under Dhcp, Static Ip, And Pppoe

    When the Peplink Balance is operating under NAT mode, the source IP addresses of outgoing IP packets are translated to the WAN IP address of the Peplink Balance. With NAT, all LAN devices share the same WAN IP address to access the Internet (i.e., the WAN IP address of the Peplink Balance).
  • Page 248: Routing Via Ip Forwarding

    Peplink Balance Series Routing Via IP Forwarding When the Peplink Balance is operating under IP forwarding mode, the IP addresses of IP packets are unchanged; the Peplink Balance forwards both inbound and outbound IP packets without changing their IP addresses.
  • Page 249: Appendix D. Case Studies

    Affordably increase your bandwidth by adding commodity ADSL links to your MPLS connection. SpeedFusion technology bonds all your connections together, enabling session-persistent, user- transparent hot failover. QoS support, bandwidth control, and traffic prioritization gives you total control over your network. http://www.peplink.com -249 / 269 - Copyright © 2016 Peplink...
  • Page 250 ADSL, 3G, and 4G LTE links. Choose a topology that suits your requirements: a hub-and- spoke topology maximizes control over your network, while a meshed topology can reduce your bandwidth overhead by enabling your devices to form Unbreakable VPN connections directly with each other. http://www.peplink.com -250 / 269 - Copyright © 2016 Peplink...
  • Page 251 Head office can use outbound policies to send internet traffic out over the DSLs and only use the MPLS connection for speedfusion, freeing up bandwidth. Devices Deployed: Balance 210, Balance 310, Balance 580 http://www.peplink.com -251 / 269 - Copyright © 2016 Peplink...
  • Page 252 Harrington Plastics, the US’s largest industrial plastics distributor, was looking to upgrade its network equipment. Harrington’s team came across Peplink and started thinking about MPLS alternatives. By choosing Peplink, they saved a fortune on upgrades and ended up with yearly savings of up to $100,000.
  • Page 253 — Peplink. Peplink partner Frontier Computer Corporation was chosen to help design and deploy the solution. Since Peplink gear is so easy to configure and install, Harrington was able to design, prototype and roll out the entire solution to the corporate headquarters and all 43 branches within just one year.
  • Page 254 4G USB modem. Where the MPLS 768kb deployed previously had cost them $192000 a year for all 40 sites, their new solution is now only costing them $92000. Their total bandwidth has been bumped from 36 Mbps to 138 Mbps. http://www.peplink.com -254 / 269 - Copyright © 2016 Peplink...
  • Page 255 PLUSS Peplink + Citrix + VoIP Adds Up to Fast, Cost-Effective WAN for Pluss A Peplink customer since 2006, Pluss is a social enterprise that each year makes gainful employment a reality for more than 5000 disabled and disadvantaged UK citizens.
  • Page 256: Colégio Next - Enabling Elearning

    Often, having more than a couple students connected to the same Wi-Fi access point was enough to bring it to its knees. Colégio Next needed a unique solution, so they contacted Peplink. Requirements...
  • Page 257 Students are far more engaged and teachers rely on their iPads all day http://www.peplink.com -257 / 269 - Copyright © 2016 Peplink...
  • Page 258: Performance Optimization

    For HTTP, set the weight to 3:4.  For SMTP, set the weight to 1:8, such that users will have a greater chance to be  routed via WAN2 when sending e-mail. http://www.peplink.com -258 / 269 - Copyright © 2016 Peplink...
  • Page 259 In general, to add a new outbound traffic rule, navigate to Advanced>Outbound Policy. Click here and select Managed by Custom Rules Click Add Rule to add a new load distribution rule. http://www.peplink.com -259 / 269 - Copyright © 2016 Peplink...
  • Page 260 USER MANUAL Peplink Balance Series Settings for HTTP: Set the weight of WAN1 and WAN2 for HTTP to 3 and 4, respectively. http://www.peplink.com -260 / 269 - Copyright © 2016 Peplink...
  • Page 261 USER MANUAL Peplink Balance Series Settings for SMTP: Set the weight of WAN1 and WAN2 for SMTP to 1 and 8, respectively. http://www.peplink.com -261 / 269 - Copyright © 2016 Peplink...
  • Page 262: Maintaining The Same Ip Address Throughout A Session

    D.4.2 Solution Make use of the persistence functionality of the Peplink Balance. With persistence configured and the By Destination option selected, the Peplink Balance will use a consistent WAN connection for source-destination pairs of IP addresses, preventing sessions from being dropped.
  • Page 263: Bypassing The Firewall To Access Hosts On Lan

    In this example, the host with an IP address of 192.168.1.102 is bound to 10.90.0.75 of WAN1: Click Save and then Apply Changes, located at the top right corner, to complete the process. http://www.peplink.com -263 / 269 - Copyright © 2016 Peplink...
  • Page 264: Inbound Access Restriction

    Internet security threats. D.6.2 Solution Firewall functionality is built into the Peplink Balance. By default, inbound access is unrestricted. Enabling a basic level of protection involves setting up firewall rules. For example, in order to protect your private network from external access, you can set up a firewall rule between the Internet and your private network.
  • Page 265: Outbound Access Restriction

    Firewall Rules table, and then adjust settings according the screenshot: After the fields have been entered as in the screenshot, click Save to add the rule. Click Apply Changes on the top right corner to complete the process. http://www.peplink.com -265 / 269 - Copyright © 2016 Peplink...
  • Page 266: Appendix E. Troubleshooting

    TCP session to query the server. Try to test with a website that does not enable Keep Alive. For example, try http://private.dnsstuff.com/tools/aboutyou.ch. (This third-party web site is provided only for reference. Peplink has no association with the site and does not guarantee the site's validity or availability.) http://www.peplink.com -266 / 269 - Copyright ©...
  • Page 267: Appendix F. Declaration

    You can test the WAN connection using ping, as in the solution to Problem 4. As we want to isolate the problems from the LAN, ping will be performed from the Peplink Balance. By using Ping/Traceroute under the Status tab of the Peplink Balance, you may able to find the source of problem.
  • Page 268: Appendix G: Product Datasheets

    Note: The country code selection is for non-US models only and is not available to all US models. Per FCC regulation, all WiFi products marketed in US must fixed to US operation channels only. Appendix G: Product Datasheets http://www.peplink.com -268 / 269 - Copyright © 2016 Peplink...
  • Page 269 Load Balancing. Unbreakable VPN. Bandwidth Bonding. Peplink Balance Multi-WAN Router The Peplink Balance multi-WAN router delivers Unbreakable VPN, SpeedFusion™ bandwidth bonding, and a host of other innovative technologies that let you take control of your WAN and improve Internet connectivity, all with one easy-to-manage device.
  • Page 270 Boost network data rates, reliability, and flexibility while slashing connectivity costs with Peplink Internet Load Balancing technology. The Peplink Balance can distribute the traffic of up to 13 Internet New Cable links and route data using seven intelligent algorithms. It all adds...
  • Page 271 AP activity and bandwidth consumption, giving you Peplink Balance. Just connect an AP One to the network and it will complete and easy control over your network. be discovered by the Balance automatically, allowing you manage...
  • Page 272 ©Peplink. All rights reserved. Peplink, the Peplink logo, and SpeedFusion are trademarks of Peplink International Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. All specifications are subject to change without notice.
  • Page 273 Peplink MediaFast Lightning Fast Content Delivery. And So Much More. Works with: MediaFast 500 and more... iTunes U iOS Updates TED.com MediaFast is our supercharged content caching solution. Designed with education and entertainment in mind, it downloads and accelerate video, iTunes U, iOS updates, app download, and other content for uninterrupted learning and fun anytime.
  • Page 274 E: sales@peplink.com ©Peplink. All rights reserved. Peplink, the Peplink logo, and SpeedFusion are trademarks of Peplink International Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. All specifications are subject to change without notice.
  • Page 275 Peplink Balance Advanced Dual-WAN Router for Branch Networking. Works With 250+ USB Modem from Worldwide Carriers One Huge Leap Forward for SMB, and Branch Networking. The Balance One router with dual-WAN load balancing delivers big-business uptime and speed in an affordable package designed just for SMBs, branch offices, and power users.
  • Page 276 Balance One Core Internet Ethernet LAN The AP One is available in a variety of configurations. Visit peplink.com/ap for details. AP One In-Wall Connect Your Home Office with LTE Backup for 100% Uptime The Balance One has simultaneous dual-band 11n...
  • Page 277 Per-Port VLAN RADIUS, LDAP Authentication WINS Server Time and Usage Quotas on Open IPsec VPN (Network-to-Network) Security Access Mode Built-in Customizable Splash Page Stateful Firewall DoS Prevention ^ SpeedFusion is available as an optional add-on www.peplink.com ©Peplink. All rights reserved.
  • Page 278 Contact Us: Sales http://www.peplink.com/contact/sales/ Support http://www.peplink.com/contact/ Certified Peplink Partner http://www.peplink.com/partners/chann el-partner-program/...

Table of Contents