Page 1: User Manual
December 2015 Copyright & trademark specifications are subject to change without prior notice. Copyright © 2015 Peplink International Ltd. All Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned may be...
Page 2: Table Of Contents
Captive Portal ································································································· 21 4.11 Other Supported Features ·············································································· 21 PACKAGE CONTENTS ··························································································· 22 Peplink Balance One ························································································· 22 Peplink Balance 20/30/30 LTE/50 ····································································· 22 Peplink Balance 210/310 ··················································································· 22 Peplink Balance 305/380/580/710/1350/2500 ··················································· 22 Peplink MediaFast 200 ······················································································ 22 Peplink MediaFast 500 ······················································································...
Page 3 Dynamic DNS Settings ················································································· 110 PEPVPN WITH SPEEDFUSION BANDWIDTH BONDING ······························ 112 13.1 SpeedFusion Settings ··············································································· 112 13.2 The Peplink Balance Behind a NAT Router ················································· 118 13.3 SpeedFusion Status ·················································································· 119 http://www.peplink.com -3 / 261- Copyright © 2015 Peplink...
Page 4 AP Controller ································································································ 189 23.2 Wireless SSID ······························································································ 190 23.3 Profiles ········································································································· 195 23.4 Info ··············································································································· 199 23.5 Usage ··········································································································· 200 23.6 AP Status ····································································································· 202 23.7 Rogue AP ····································································································· 204 23.8 Toolbox ········································································································ 204 http://www.peplink.com -4 / 261- Copyright © 2015 Peplink...
Page 5 Bypassing the Firewall to Access Hosts on LAN ·········································· 244 Inbound Access Restriction ·········································································· 245 Outbound Access Restriction ······································································· 246 APPENDIX D. TROUBLESHOOTING ··········································································· 247 APPENDIX E. PRODUCT SPECIFICATIONS ······························································ 249 Peplink Balance 20, 30, 30 LTE, and 50 ······················································ 249 http://www.peplink.com -5 / 261- Copyright © 2015 Peplink...
Page 6 USER MANUAL Peplink Balance Series Peplink Balance 210 and 310 ······································································· 250 Peplink Balance 380 ····················································································· 251 Peplink Balance 305 ····················································································· 252 Peplink Balance 380 ····················································································· 253 Peplink Balance 580 ····················································································· 254 Peplink Balance 710 ····················································································· 255 Peplink Balance 1350 ··················································································· 256 Peplink Balance 2500 ···················································································...
Page 7: Introduction And Scope
Important Note to Users of the Peplink Balance 30 (Classic Edition) Firmware 5.0 or above is NOT applicable to the Peplink Balance 30 (Classic Edition). For more information on identifying the generation of your Peplink Balance 30, please visit our knowledge base at <http://www.peplink.com/index.php?view=faq&id=231&path=16>.
Page 8: Glossary
Virtual Private Network VRRP Virtual Router Redundancy Protocol Wide Area Network WINS Windows Internet Name Service WLAN Wireless Local Area Network 210+ Refers to Peplink Balance 210/310/380/580/710/1350/2500 380+ Refers to Peplink Balance 380/580/710/1350/2500 http://www.peplink.com -8 / 261- Copyright © 2015 Peplink...
Page 9: Product Comparison Chart
MediaFast 200 has WAN 1 activated. To activate WAN 2, a Load Balancing or SpeedFusion license is required. MediaFast 500-B WAN ports 1-5 are active by default. Load balancing or SpeedFusion license is required to activate MediaFast 500-A WAN ports 2-5. http://www.peplink.com -9 / 261 - Copyright © 2015 Peplink...
Page 10: Core Functionality
Failover Load Balancing Algorithms  Weighted  Enforced  Persistence  Priority  Overflow  Least Used  Lowest Latency Drop-In Mode Inbound Load Balancing 4G/3G Modem Support Scheduled Content Caching http://www.peplink.com -10 / 261 - Copyright © 2015 Peplink...
Page 11: Vpn Functionality
Bonded VPN 150M 350M 2Gbps Throughput L2TP with IPsec PPTP VPN Server Recommended PPTP VPN 1000 Users SpeedFusion is available on the Balance One as an optional feature, supporting 2 peers. http://www.peplink.com -11 / 261 - Copyright © 2015 Peplink...
Page 12: Wlan Control
Number of IPsec Tunnels Certificate Manager MediaFast MediaFast 20/30/50 30 LTE 1350 2500 500-A 500-B WLAN Control Pepwave AP Management Access Point Configuration AP Profiles AP Firmware Update Number of 1500 Supported http://www.peplink.com -12 / 261 - Copyright © 2015 Peplink...
Page 13: Advanced Qos
30 LTE 1350 2500 500-A 500-B Advanced QoS Bandwidth Usage Monitor QoS for VoIP Ecommerce DSL/Cable Optimization Application Prioritization Application Prioritization by User Group User Group Bandwidth Reservation Individual Bandwidth Limit http://www.peplink.com -13 / 261 - Copyright © 2015 Peplink...
Page 14: Networking Functionality
Definition Many-to-One, One- to-One NAT NAT Pool SIP ALG, H.323 ALG UPnP, NAT-PMP WINS Server Dynamic DNS Web Blocking DNS Proxy DNS Record Delegation DNS Record Import Wizard Reverse Lookup Zones http://www.peplink.com -14 / 261 - Copyright © 2015 Peplink...
Page 15 Peplink Balance Series Inter-VLAN Routing DHCP Relay BOOTP Support Inbound Access Services Outbound Policy Management LACP (802.3ad) support OSPF and RIPv2 Support Service/SMTP/Web Proxy/DNS Forwarding Service Passthrough Ping/Traceroute Test PepVPN Test/Analyzer CLI Support http://www.peplink.com -15 / 261 - Copyright © 2015 Peplink...
Page 16: Device
Administrative Interface Admin/User Access Levels Active Client List Active Session List WINS Client List Bandwidth Allowance Monitor Web Reporting Services Email Notification Syslog SNMP v1, v2c and v3 InControl WAN Health http://www.peplink.com -16 / 261 - Copyright © 2015 Peplink...
Page 18: Hardware
17.7 x 4.4 30.5 x 4.4 (H x W x D) 27.3cm 27.8cm 37.9cm 39.8cm 55cm 27.8cm 13.3cm 15.9cm 16cm Weight 1.0kg 1.0kg 1.0kg 1.2kg 1.2kg 3.5kg 5.5kg 5.5kg 6.5kg 12kg 1.9kg 5.5kg http://www.peplink.com -18 / 261 - Copyright © 2015 Peplink...
Page 19: Product Features
USER MANUAL Peplink Balance Series Product Features Peplink Balance Series products enable all LAN users to share broadband Internet connections and provide advanced features to enhance Internet access. The following is a list of supported features: Supported Network Features Multiple public IP support (DHCP, PPPoE, static IP address) ...
Page 20: Inbound Traffic Management
Firewall Outbound (LAN to WAN) firewall rules  Inbound (WAN to LAN) firewall rules per WAN connection  Intrusion detection and prevention  Specification of NAT mappings  Web blocking  http://www.peplink.com -20 / 261 - Copyright © 2015 Peplink...
Page 21: Captive Portal
Firmware upgrades, configuration backups, ping, and traceroute via web  administration interface Remote web-based configuration (via WAN and LAN interfaces)  Remote reporting to Peplink Balance reporting server  Hardware high availability via VRRP, with automatic configuration  synchronization Real-time, hourly, daily and monthly bandwidth usage reports and charts ...
Page 22: Package Contents
USER MANUAL Peplink Balance Series Package Contents The contents of Peplink Balance product packages are as follows: Peplink Balance One Peplink Balance One  Power adapter  Information slip  Peplink Balance 20/30/30 LTE/50 Peplink Balance 20/30/30 LTE/50  Power adapter ...
Page 23: Peplink Balance Overview
USER MANUAL Peplink Balance Series Peplink Balance Overview Peplink Balance One 6.1.1 Front Panel Appearance Wi-Fi LED LAN Ports WAN Ports Reset Button USB Port Status LED 6.1.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Power and Status Indicators OFF –...
Page 25: Peplink Balance 20
Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -25 / 261 - Copyright © 2015 Peplink...
Page 26 USER MANUAL Peplink Balance Series 6.2.3 Rear Panel Appearance Power Connector Kensington Security Slot 6.2.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -26 / 261 - Copyright © 2015 Peplink...
Page 27: Peplink Balance 30
Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -27 / 261 - Copyright © 2015 Peplink...
Page 28 USER MANUAL Peplink Balance Series 6.3.3 Rear Panel Appearance Power Connector Kensington Security Slot 6.3.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -28 / 261 - Copyright © 2015 Peplink...
Page 29: Peplink Balance 30 Lte
USER MANUAL Peplink Balance Series Peplink Balance 30 LTE 6.4.1 Front Panel Appearance Status LED USB Port WAN Ports Reset Button LAN Ports Power LED 6.4.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Power and Status Indicators OFF –...
Page 30 USER MANUAL Peplink Balance Series 6.4.3 Rear Panel Appearance Power Connector Cellular SIM Slot 6.4.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -30 / 261 - Copyright © 2015 Peplink...
Page 31: Peplink Balance 50
Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -31 / 261 - Copyright © 2015 Peplink...
Page 33: Peplink Balance 210
Blinking – Data is transferring Orange LED OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -33 / 261 - Copyright © 2015 Peplink...
Page 34 USER MANUAL Peplink Balance Series 6.6.3 Rear Panel Appearance Power Connector 6.6.4 Unit Base Appearance Serial Number and LAN MAC Address http://www.peplink.com -34 / 261 - Copyright © 2015 Peplink...
Page 35: Peplink Balance 310
OFF – No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports USB Port USB Ports For connecting a 4G/3G USB modem 6.7.3 Rear Panel Appearance http://www.peplink.com -35 / 261 - Copyright © 2015 Peplink...
Page 37: Peplink Balance 305
Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports Console and USB Ports Console Port Reserved for engineering use USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -37 / 261 - Copyright © 2015 Peplink...
Page 38 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > WAN3 http://www.peplink.com -38 / 261 - Copyright © 2015 Peplink...
Page 39 Pressing and holding the key for 4 seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit 6.8.5 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -39 / 261 - Copyright © 2015 Peplink...
Page 40: Peplink Balance 380
Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports Console and USB Ports Console Port Reserved for engineering use USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -40 / 261 - Copyright © 2015 Peplink...
Page 41 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > WAN3 http://www.peplink.com -41 / 261 - Copyright © 2015 Peplink...
Page 42 Pressing and holding the key for 4 seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. 6.9.5 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -42 / 261 - Copyright © 2015 Peplink...
Page 43: Peplink Balance 580
USER MANUAL Peplink Balance Series 6.10 Peplink Balance 580 6.10.1 Front Panel Appearance Console Power Ports RS-232 Port Display Ports LCD Controls Port 6.10.2 LED Indicators RS-232 The statuses indicated by the front panel LEDs are as follows: Port Power and Status Indicators OFF –...
Page 44 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > … >WAN5 http://www.peplink.com -44 / 261 - Copyright © 2015 Peplink...
Page 45 Pressing and holding the key for 4 seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. 6.10.4 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -45 / 261 - Copyright © 2015 Peplink...
Page 46: Peplink Balance 710
USER MANUAL Peplink Balance Series 6.11 Peplink Balance 710 6.11.1 Front Panel Appearance Console Power RS-232 Port WAN Port Display LCD Controls RS-232 LAN Port Port Status indicated in the front panel is as follows: LED Indicator OFF – Power off...
Page 47 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, > LAN 10baseT-HD, 100baseTx-FD, 100baseTx-HD, > WAN1 1000baseTx-FD) > WAN2 > … > WAN7 http://www.peplink.com -47 / 261 - Copyright © 2015 Peplink...
Page 48 When the unit is powered off, pressing this switch will power on the unit. Reset Switch Press and release once to reset the system. 6.11.4 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -48 / 261 - Copyright © 2015 Peplink...
Page 49: Peplink Balance 1350
USER MANUAL Peplink Balance Series 6.12 Peplink Balance 1350 6.12.1 Front Panel Appearance Power USB Ports Display Console Ports Port LCD Controls Port RS-232 Status indicated in the front panel is as follows: Port RS-232 LED Indicator Port OFF – Power off...
Page 50 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD,1000baseTx-FD) > WAN1 > WAN2 > … > WAN13 http://www.peplink.com -50 / 261 - Copyright © 2015 Peplink...
Page 51 Pressing and holding the key for 4 seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. 6.12.4 Unit Label Appearance Serial Number LAN MAC Address http://www.peplink.com -51 / 261 - Copyright © 2015 Peplink...
Page 52: Peplink Balance 2500
USER MANUAL Peplink Balance Series 6.13 Peplink Balance 2500 6.13.1 Front Panel Appearance BPL-2500 Console Port USB Ports RS-232 Port Power Ports Display Port Controls RS-232 Port BPL-2500-SFP Console Port USB Port RS-232 Port Power Ports Display Port Controls RS-232 Port http://www.peplink.com...
Page 53: Console Port
Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports Console & USB Ports Console Port Reserved for engineering use USB Ports For connecting a 4G/3G USB modem http://www.peplink.com -53 / 261 - Copyright © 2015 Peplink...
Page 54 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD,1000baseTx-FD) > WAN1 > WAN2 > … > WAN13 http://www.peplink.com -54 / 261 - Copyright © 2015 Peplink...
Page 55 Power Switch When the unit is powered off, pressing this switch will power on the unit. 6.13.4 Unit Label Appearance BPL-2500 Serial Number LAN MAC Address BPL-2500-SFP Serial Number LAN MAC Address http://www.peplink.com -55 / 261 - Copyright © 2015 Peplink...
Page 56: Peplink Mediafast 500
USER MANUAL Peplink Balance Series 6.14 Peplink MediaFast 500 6.14.1 Front Panel Appearance Power Console Port RS-232 Port USB Ports Display Ports LCD Controls Ports Ports Status indicated in the front panel is as follows: RS-232 LED Indicator Port OFF – Power off...
Page 57 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > … >WAN5 http://www.peplink.com -57 / 261 - Copyright © 2015 Peplink...
Page 58 AC input 100-240V Switches Pressing and holding the key for 4 seconds will power down the unit. Power Switch When the unit is powered off, pressing this switch will power on the unit. http://www.peplink.com -58 / 261 - Copyright © 2015 Peplink...
Page 59: Installation
Constructing the Network At the high level, construct the network according to the following steps: With an Ethernet cable, connect a computer to one of the LAN ports on the Peplink Balance. For Peplink Balance models that support multiple connections, repeat with different cables for up to 4 computers to be connected.
Page 61: Configuring The Network Environment
USER MANUAL Peplink Balance Series Configuring the Network Environment To ensure that your Peplink Balance works properly in the LAN environment and can access the Internet via the WAN connections, please refer to the following setup procedures: LAN configuration ...
Page 62: Basic Configuration
Start a web browser on a computer that is connected with the Peplink Balance through the LAN. To connect to the web admin of the Peplink Balance, enter the following LAN IP address in the address field of the web browser: http://192.168.1.1...
Page 63: Configuration With The Setup Wizard
To begin, click Setup Wizard after connecting to the web admin interface. Click Next >> to begin. Select Yes if you want to set up drop-in mode using the Setup Wizard. http://www.peplink.com -63 / 261 - Copyright © 2015 Peplink...
Page 64 If you have chosen to configure drop-in mode using the Setup Wizard, the WAN port to be configured in drop-in mode will be checked by default. If drop-in mode is going to be configured, the setup wizard will move on to Drop-in Settings. http://www.peplink.com -64 / 261 - Copyright © 2015 Peplink...
Page 65 If Custom Mobile Operator Settings is selected, APN parameters are required. Some service providers may charge a fee for connecting to a different APN. Please consult your service provider for the correct settings. http://www.peplink.com -65 / 261 - Copyright © 2015 Peplink...
Page 66 Save Settings to confirm. After finishing the last step in the setup wizard, click Apply Changes on the page header to allow the configuration changes to take effect. http://www.peplink.com -66 / 261 - Copyright © 2015 Peplink...
Page 67: Advanced Setup
WAN connection information at Network>Interfaces>WAN. Please refer to Section 12, Configuring the WAN Interface(s), for details on setting up DHCP, static IP, PPPoE, L2TP, and mobile Internet connections http://www.peplink.com -67 / 261 - Copyright © 2015 Peplink...
Page 68: Cellular Wan
EV-DO device with the user. This information is presented in hex and decimal format. This serves the same purpose as MEID HEX but uses an older format. IMEI This is the unique ID for identifying the modem in GSM/HSPA mode. http://www.peplink.com -68 / 261 - Copyright © 2015 Peplink...
Page 69: Network Mode
WAN IP address assigned from the PPPoE server.) When Use the following DNS server address(es) is selected, you can put custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. http://www.peplink.com -69 / 261 - Copyright © 2015 Peplink...
Page 70 If there is any difficulty in making a connection, you may select Custom to enter your carrier’s APN, Login, Password, and Dial Number settings manually. The correct values can be obtained from your carrier. The default http://www.peplink.com -70 / 261 - Copyright © 2015 Peplink...
Page 71 This option allows you to choose whether to remain connected or disconnect when this Standby State WAN connection is no longer in the highest priority and has entered the standby state. http://www.peplink.com -71 / 261 - Copyright © 2015 Peplink...
Page 72 This is the number of consecutive check failures before treating a connection as down. Retries Recovery This is the number of responses required after a health check failure before treating a Retries connection as up again. http://www.peplink.com -72 / 261 - Copyright © 2015 Peplink...
Page 73 Service Provider  tzo.com  DNS-O-Matic Select Disabled to disable this feature. See Section 12.5 for configuration details. Determine the maximum allowable size per packet. The unit is in bytes. http://www.peplink.com -73 / 261 - Copyright © 2015 Peplink...
Page 74: Mediafast Configuration
Whitelist (Cache the specified domains only) or Blacklist (Do not cache the specified Addresses domains). The Secure Content Caching menu operates identically to the MediaFast menu, except it is for secure contenting accessible through (https://) http://www.peplink.com -74 / 261 - Copyright © 2015 Peplink...
Page 75: Scheduling Content Prefetching
Content prefetching allows you to download content on a schedule that you define, which can help to preserve network bandwidth during busy times and keep costs down. To access MediaFast content prefetching settings, select Network>MediaFast>Prefetch Schedule. http://www.peplink.com -75 / 261 - Copyright © 2015 Peplink...
Page 76: Clear Statistics
Clear Web To clear all cached content, click this button. Note that this action cannot be undone. Cache Clear Statistics To clear all prefetch and status page statistics, click this button. http://www.peplink.com -76 / 261 - Copyright © 2015 Peplink...
Page 77: Mdm Settings
Click Follow Web Admin Account for client devices to use the built-in administrator Account account when performing MDM. Set Custom to specify a username and password with Settings which your router will log into your client devices. http://www.peplink.com -77 / 261 - Copyright © 2015 Peplink...
Page 78: Viewing Mediafast Statistics
USER MANUAL Peplink Balance Series Viewing MediaFast Statistics To get details on storage and bandwidth usage, select Status>MediaFast. http://www.peplink.com -78 / 261 - Copyright © 2015 Peplink...
Page 79: Configuring The Lan Interface(S)
LAN by entering IP settings (VLAN configuration will be covered following physical LAN setup). IP Settings Enter the Peplink Balance’s IP address and subnet mask values to be used on the LAN. To IP Address & Subnet Mask enable multiple VLANs, press the...
Page 80 USER MANUAL Peplink Balance Series Drop-in Mode Settings Drop-in mode eases the installation of the Peplink Balance on a live network between the existing firewall and router, such that no configuration changes are required on existing Enable equipment. Check the box to enable the drop-in mode feature.
Page 81 This feature includes device information as relay agent for the attached client when DHCP Option forwarding DHCP requests from a DHCP client to a DHCP server. Device MAC address and network name are embedded to circuit ID and Remote ID in option 82 http://www.peplink.com -81 / 261 - Copyright © 2015 Peplink...
Page 82 DHCP Server Settings When this setting is enabled, the Peplink Balance’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP DHCP Server address via DHCP.
Page 83: Static Route
VPN will also be accepted. Any VPN member will be able to route to the local subnets. Press to create a new route. Press to remove a route. http://www.peplink.com -83 / 261 - Copyright © 2015 Peplink...
Page 84: Dns Caching
Local DNS host name and IP address. When looking up the host name from the LAN to LAN IP of the Records Peplink Balance, the corresponding IP address will be returned. Press to create a http://www.peplink.com -84 / 261 -...
Page 85 Check this box to turn on Bonjour forwarding. Bonjour Choose Service and Client networks from the drop-down menus, and then click Service add the networks. To delete an existing Bonjour listing, click http://www.peplink.com -85 / 261 - Copyright © 2015 Peplink...
Page 86: Lan Configuration With Vlan
LAN to change under the LAN heading. The following settings are displayed: IP Settings IP Address Enter the Peplink Balance’s IP address and subnet mask values to be used on the LAN. Network Settings Name Enter a name for the LAN.
Page 87 Layer 3 routing functions will cease to work. - Advanced feature, please click the button on the top right-hand corner of the “Network Settings” menu to activate. http://www.peplink.com -87 / 261 - Copyright © 2015 Peplink...
Page 88 USER MANUAL Peplink Balance Series Drop-in Mode Settings Drop-in mode eases the installation of the Peplink Balance on a live network between the existing firewall and router, such that no configuration changes are required on existing Enable equipment. Check the box to enable the drop-in mode feature.
Page 89 USER MANUAL Peplink Balance Series DHCP Server Settings When this setting is enabled, the Peplink Balance’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP DHCP Server address via DHCP. The Peplink Balance’s DHCP server can prevent IP address collisions on the LAN.
Page 90 IDs. Check this box to enable DHCP Option 82. Once DHCP is set up, press “Save” and configure LAN Physical Settings, Static Route Settings, WINS Server Settings, DNS Proxy Settings, and Bonjour Forwarding as noted above. http://www.peplink.com -90 / 261 - Copyright © 2015 Peplink...
Page 91: Drop-In Mode
Alternately, the hosts may be rebooted. Otherwise, hosts on one side may not be able to reach hosts on the other side of the Peplink Balance until old ARP records expire. Units not using drop-in mode are not affected.
Page 92 Enter the IP address of the WAN1 router in the WAN Default Gateway field. Ensure that the Peplink Balance’s IP subnet is the same as the firewall’s WAN port and the router’s LAN port. If there are hosts other than the router on the WAN segment of the Peplink Balance, check the I have other host(s) on WAN segment box, enter the IP address(es) of the host(s), and then click the down-arrow to add the hosts.
Page 93 WAN port can be configured in drop-in mode. If you have selected the LAN bypass port as the WAN for drop-in mode, the high availability feature will be DISABLED automatically. Want to know more about drop-in mode? Visit our YouTube Channel for video tutorials! http://youtu.be/lZG2-VPml5w http://www.peplink.com -93 / 261 - Copyright © 2015 Peplink...
Page 94: Configuring The Wan Interface(S)
This option allows you to select the connection method for this WAN connection. Available options are: DHCP Connection Static IP Method PPPoE L2TP Mobile Internet Connection See Sections 12.2.1, 12.2.2, 12.2.3, 12.2.4 and 12.2.5 for configuration details pertaining http://www.peplink.com -94 / 261 - Copyright © 2015 Peplink...
Page 95 DHCPv6 requests. IPv6 clients on the LAN will acquire their IPv6, gateway, and DNS server addresses from it. The device will also acquire an IPv6 address for performing ping/traceroute checks and accepting web admin accesses. http://www.peplink.com -95 / 261 - Copyright © 2015 Peplink...
Page 96: Physical Interface Settings
Physical Interface Settings This setting specifies port speed and duplex configurations of the WAN port. By default, Auto is selected, and the appropriate data speed is automatically detected by the Peplink Speed Balance. In the event of negotiation issues, the port speed can be manually specified. You can also choose whether or not to advertise the speed to the peer by selecting Advertise Speed.
Page 97: Connection Method(S)
DNS server 2 fields. Please refer to Sections 0, 12.3, 12.4, and 12.5 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings. http://www.peplink.com -97 / 261 - Copyright © 2015 Peplink...
Page 98 2 fields. If no address is entered here, this link will not be used for DNS lookups. Please refer to Sections 0, 12.3, 12.4, and 12.5 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings. http://www.peplink.com -98 / 261 - Copyright © 2015 Peplink...
Page 99: Pppoe Connection
Please refer to Sections 0, 12.3, 12.4, and 12.5 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings. Note A PPPoE connection made from a firewall does not work with drop-in mode. http://www.peplink.com -99 / 261 - Copyright © 2015 Peplink...
Page 100: L2Tp Connection
When Use the following DNS server address(es) is selected, you can enter custom DNS server addresses for this WAN connection into the DNS server 1 and DNS server 2 fields. http://www.peplink.com -100 / 261 - Copyright © 2015 Peplink...
Page 101: Connection Type
Balance’s USB mobile WAN port, except in the case of the Balance units that include a built-in 4G LTE modem. For a list of supported modems, please refer to Peplink Modem Support page at http://www.peplink.com/modem.
Page 102: Operator Settings
Operator Settings allows you to configure the APN settings of your connection. If Auto Operator Settings is selected, the Peplink Balance will automatically detect the APN, configure the modem, and make a connection. You may change the APN settings by selecting Custom Mobile Operator Settings.
Page 103: Frequency Band
GSM900 / GSM1800 / GSM2100 are used in Europe, the Middle East, Africa, Asia, Oceania, and Brazil. Band If All Bands is chosen, the appropriate frequency band will be used automatically. The default GSM frequency band is All Bands. http://www.peplink.com -103 / 261 - Copyright © 2015 Peplink...
Page 104 The modem's electronic serial number (ESN) is also auto-detected and appears here. Network Type This is to specify the network type (e.g., 3G or 4G) to be used with the modem. http://www.peplink.com -104 / 261 - Copyright © 2015 Peplink...
Page 105: Wan Health Check
Peplink Balance Series WAN Health Check To ensure traffic is routed to healthy WAN connections only, the Peplink Balance can periodically check the health of each WAN connection. Health Check settings for each WAN connection can be independently configured via Network>Interfaces>WAN>*Connection name*>Health Check Settings.
Page 106 HTTP return code is between 200 and 299 and if the HTTP response content contains the string. WAN Settings>WAN Edit>Health Check Settings>URL2 URL 2 If URL2 is also provided, a health check will pass if either one of the tests passed. http://www.peplink.com -106 / 261 - Copyright © 2015 Peplink...
Page 107 This setting specifies the number of consecutive successful ping/DNS lookup responses that must be received before the Peplink Balance treats a previously down WAN connection Recovery as up again. By default, Recover Retries is set to 3. Using the default setting, a WAN...
Page 108: Bandwidth Allowance Monitor
Disclaimer Due to different network protocol overheads and conversions, the amount of data reported by this Peplink device is not representative of actual billable data usage as metered by your network provider. Peplink disclaims any obligation or responsibility for any events arising from use of the numbers shown here.
Page 109: Additional Public Ip Settings
Internet IP address is assigned to this WAN connection. Enter the IP Address List fixed Internet IP addresses and the corresponding subnet mask, and then click the Down Arrow button to populate IP address entries to the IP Address List. http://www.peplink.com -109 / 261 - Copyright © 2015 Peplink...
Page 110: Dynamic Dns Settings
Either upon a change in IP addresses or every 23 days without link reconnection, the Peplink Balance will connect to the dynamic DNS service provider to update the provider’s IP address records. The settings for dynamic DNS service provider(s) and the association of hostname(s) are configured via Network>Interfaces>WAN>*Connection name*>Dynamic DNS...
Page 111 Due to dynamic DNS service providers’ policies, a dynamic DNS host expires automatically when the host record has not been not updated for a long time. Therefore, the Peplink Balance performs an update every 23 days, even if a WAN’s IP address did not change.
Page 112: Pepvpn With Speedfusion Tm Bandwidth Bonding
The Peplink Balance can bond all WAN connections’ bandwidth for routing SpeedFusion traffic. Unless all the WAN connections of one site are down, the Peplink Balance can keep the VPN up and running. Bandwidth bonding is enabled by default. 13.1 SpeedFusion...
Page 113 Peplink Balance Series All data can be routed over the VPN with 256-bit AES encryption standard. To configure this, navigate to Network>Interfaces>SpeedFusion. To configure a new SpeedFusion profile, navigate to Network>Interfaces>SpeedFusion>New Profile. http://www.peplink.com -113 / 261 - Copyright © 2015 Peplink...
Page 114: Nat Mode
Click the New Profile button to create a new VPN connection profile for making a VPN connection to a remote Peplink Balance via the available WAN connections. Each profile is for making a VPN connection with one remote Peplink Balance.
Page 115 USER MANUAL Peplink Balance Series This field is optional. With this field filled, the Peplink Balance will initiate connection to each of the remote IP addresses until it succeeds in making a connection. If the field is empty, the Peplink Balance will wait for connection from the remote peer. Therefore, at least one of the two VPN peers must specify this value.
Page 116 This feature allows you to change the local ID of a PepVPN connection. Click the button to select your connection and the following menu will appear: After updating the local ID, click Save to store your changes. http://www.peplink.com -116 / 261 - Copyright © 2015 Peplink...
Page 117 TCP port 32015 and UDP port 4500 for establishing VPN connections. If you have a firewall in front of your Peplink Balance devices, you will need to add firewall rules for these ports and protocols to allow inbound and outbound traffic to pass through the firewall.
Page 118: The Peplink Balance Behind A Nat Router
USER MANUAL Peplink Balance Series 13.2 The Peplink Balance Behind a NAT Router The Peplink Balance supports establishing SpeedFusion over WAN connections which are behind a NAT (network address translation) router. To enable a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to inbound port-forward TCP port 32015 to the Peplink Balance.
Page 119: Speedfusion Tm Status
IP Subnets Must Be Unique Among VPN Peers The entire interconnected SpeedFusion network is a single non-NAT IP network. Avoid duplicating subnets in your sites to prevent connectivity problems when accessing those subnets. http://www.peplink.com -119 / 261 - Copyright © 2015 Peplink...
Page 120: Ipsec Vpn
IPsec implementation will make use of WAN2 and WAN3 for failover. 14.1 IPsec VPN Settings All Peplink products can make multiple IPsec VPN connections with Peplink routers, as well as Cisco and Juniper routers. Note that all LAN subnets and the subnets behind them must be unique. Otherwise, VPN members will not be able to access each other.
Page 121 Check this box and select a WAN to connect to this VPN automatically when the specified Disconnection WAN is disconnected. To activate this function, click the button next to the “Active” option. Remote Enter the remote peer’s public IP address. For Aggressive Mode, this is optional. http://www.peplink.com -121 / 261 - Copyright © 2015 Peplink...
Page 122 IP data that is being transferred. In Aggressive Mode, only Proposal one selection is permitted. Phase 2 PFS Perfect forward secrecy (PFS) ensures that if a key was compromised, the attacker will be http://www.peplink.com -122 / 261 - Copyright © 2015 Peplink...
Page 123: Ipsec Status
This feature enables you to prioritize the WAN connections used by this VPN profile. 14.2 IPsec Status IPsec Status shows the current connection status of each connection profile and is displayed at Status>Interfaces>IPsec VPN. http://www.peplink.com -123 / 261 - Copyright © 2015 Peplink...
Page 124: Outbound Policy Management
USER MANUAL Peplink Balance Series 15 Outbound Policy Management The Peplink Balance can flexibly manage and load balance outbound traffic among WAN connections. Important Note Outbound policy is applied only when more than one WAN connection is active. The settings for managing and load balancing outbound traffic are located at Network>Outbound Policy.
Page 125: Outbound Policy
The default policy is Normal Application Compatibility. Want to know more about creating outbound rules? Visit our YouTube Channel for a video tutorial! http://youtu.be/rKH4AS_bQnE http://www.peplink.com -125 / 261 - Copyright © 2015 Peplink...
Page 126: Custom Rules For Outbound Policy
Under the Service heading, Default to change these settings. To rearrange the priority of outbound rules, drag and drop them into the desired sequence. http://www.peplink.com -126 / 261 - Copyright © 2015 Peplink...
Page 127 This setting specifies the name of the outbound traffic rule. This setting specifies whether the outbound traffic rule takes effect. When Enable is checked, the rule takes effect: traffic is matched and actions are taken by the Peplink Enable Balance based on the other parameters of the rule. When Enable is unchecked, the rule does not take effect: the Peplink Balance disregards the other parameters of the rule.
Page 128 This setting specifies the IP protocol and port of traffic that matches this rule. You may Protocol and Port select common protocols from the Protocol Selection Tool drop-down menu. This setting specifies the behavior of the Peplink Balance for the custom rule. One of the following values can be selected: ...
Page 129 LAN client computer behind a Peplink Balance with three WAN connections may communicate on the Internet using three different IP addresses. With the persistence feature of Peplink Balance, rules can be configured to enable client computers to persistently utilize the same WAN connections for e-banking and other secure websites.
Page 130 The highest priority WAN connection available will always be used for routing the specified type of traffic. A lower priority WAN connection will be used only when all higher priority connections have become unavailable. http://www.peplink.com -130 / 261 - Copyright © 2015 Peplink...
Page 131 Drag and drop to specify the order of WAN connections to be used for routing traffic. Only the highest priority healthy connection that is not in full load will be used. http://www.peplink.com -131 / 261 - Copyright © 2015 Peplink...
Page 132  All WAN connections are symmetric; or  A latency sensitive application must be routed through the lowest latency WAN, regardless of the WAN’s available bandwidth. http://www.peplink.com -132 / 261 - Copyright © 2015 Peplink...
Page 133 VPN peer. You can create custom Priority or Enforced rules and move them above the bar to override the SpeedFusion routes. Upon disabling Expert Mode, all rules above the bar will be removed. http://www.peplink.com -133 / 261 - Copyright © 2015 Peplink...
Page 134: Inbound Access
16 Inbound Access Inbound access is also known as inbound port address translation. On a NAT WAN connection, all inbound traffic to the server behind the Peplink unit requires inbound access rules. By the custom definition of servers and services for inbound access, Internet users can access the servers behind Peplink Balance.
Page 135: Definition Of Port Forwarding
The IP Protocol setting, along with the Port setting, specifies the protocol of the service as TCP, UDP, ICMP, or IP. Traffic that is received by the Peplink Balance via the specified protocol at the specified port(s) is forwarded to the LAN hosts specified by the Servers setting.
Page 136 Any Port, Single Port, Port Range, Port Map, and Range Mapping Any Port: all traffic that is received by the Peplink Balance via the specified protocol is forwarded to the servers specified by the Servers setting. For example, with IP Protocol set to TCP, and Port set to Any Port, all TCP traffic is forwarded to the configured servers.
Page 137: Inbound Access Services
This setting specifies whether the inbound service rule takes effect. When Yes is selected, the inbound service rule takes effect. If the inbound traffic matches the specified IP protocol and port, action will be taken by the Peplink Balance based on the other Enable parameters of the rule.
Page 138 Any Port, Single Port, Port Range, Port Map, and Range Mapping Any Port: all traffic that is received by the Peplink Balance via the specified protocol is forwarded to the servers specified by the Servers setting.
Page 139 Internet IP address(es) of the Peplink Balance. Upon receiving a DNS query, the Peplink Balance can return (as an “A” record) the IP address for the domain name on the most appropriate healthy WAN connection. It can also act as a generic DNS server for hosting “A”, “CNAME”, “MX”, “TXT”...
Page 140 USER MANUAL Peplink Balance Series DNS Settings This setting specifies the WAN IP addresses on which the DNS server of the Peplink Balance should listen. If no addresses are selected, the inbound link load balancing feature will be disabled and the Peplink Balance will not respond to DNS requests.
Page 141 The zone transfer server of the Peplink Balance listens on TCP port 53. Zone Transfer The Peplink Balance serves both the clients that are accessing from the specified IP addresses, and the clients that are accessing its LAN interface. Routing...
Page 142: Domain Name
Each WAN connection is associated with a priority number. Click Save to save the settings when configuration is complete. This section shows a list of domain names to be hosted by the Peplink Balance. Each domain can have its “NS”, “MX” and “TXT” records, and its sub-domains’ “A” and “CNAME” records.
Page 143 This page is for defining the domain’s SOA, NS, MX, CNAME, A, TXT, and SRV records. Seven tables are presented in this page for defining the five types of records. http://www.peplink.com -143 / 261 - Copyright © 2015 Peplink...
Page 144 A record for the name server will be created automatically. If it is left blank, the A record for the name server must be created manually. E-mail: Defines the e-mail address of the person responsible for this zone. Note:  http://www.peplink.com -144 / 261 - Copyright © 2015 Peplink...
Page 145 (fully qualified domain name). Please be sure that a corresponding A record is created. Click the button on the right to finish and to add other name servers. Click the Save button to save your changes. http://www.peplink.com -145 / 261 - Copyright © 2015 Peplink...
Page 146 ".domain.name" will be returned for every name ending with ".domain.name" except names that have their own records. The TTL field tells the time to live of the record in external DNS caches. http://www.peplink.com -146 / 261 - Copyright © 2015 Peplink...
Page 147 A record may be automatically added for the SOA records with a name server IP address provided. A Record This field specifies the A record of this sub-domain to be served by the Peplink Balance. The wildcard character “*” is supported. The IP addresses of “*.domain.name" will be Host Name returned for every name ending with ".domain.name"...
Page 148 Custom option and a priority selection table will be shown at the bottom. This setting specifies lists of WAN-specific Internet IP addresses that are candidates to be returned when the Peplink Balance responds to DNS queries for the domain name specified by Host Name.
Page 149  Weight: A relative weight for records with the same priority.  Target: The canonical hostname of the machine providing the service.  Port: Enter the TCP or UDP port number on which the service is to be found. http://www.peplink.com -149 / 261 - Copyright © 2015 Peplink...
Page 150 Domain Delegation These are the steps to follow when you host your domain at an ISP or domain registrar and want to delegate a sub- domain to be resolved and managed by the Peplink Balance.  Click the New Domain Name button to add a domain name (e.g., www.mycompany.com). Click the corresponding domain name to view and edit record details.
Page 151 202.153.122.108 balancewan2 67.38.212.18 202.153.122.108 and 67.38.212.18 represent the WAN1 and WAN2 Internet IP addresses of the Peplink Balance, respectively. The values of the IP addresses are fictitious and for illustration only. Hosting the complete domain at Peplink Balance To host your own DNS server, contact the DNS registrar to have the NS records of the domain (e.g., mycompany.com) point to your Balance’s WAN IP addresses.
Page 152 The following steps can be used to test the DNS configuration: From a host on the Internet, use an IP address of the Peplink Balance and nslookup to lookup the corresponding host name. Check the information that is returned for the expected results.
Page 153: Reverse Lookup Zones
If you are delegated the subnet 11.22.33.0/24, the Zone Name should be 33.22.11.in-arpa.addr. PTR records for 11.22.33.1, 11.22.33.2, ... 11.22.33.254 should be defined in this zone where the host IP numbers are 1, 2, ... 254, respectively. http://www.peplink.com -153 / 261 - Copyright © 2015 Peplink...
Page 154 "ns1.mydomain.com" (equivalent to "www.1stdomain.com.") "ns2.mydomain.com." Email, Refresh, Retry, Expire, Min Time, and TTL are entered in the same way as in the forward zone. Please refer to Section 16.3.5 for details. http://www.peplink.com -154 / 261 - Copyright © 2015 Peplink...
Page 155 To create a new CNAME record, click the New CNAME Record button. CNAME records are typically used for defining classless reverse lookup zones. Subnetted reverse lookup zones are further described in RFC 2317, "Classless IN-ADDR.ARPA delegation." http://www.peplink.com -155 / 261 - Copyright © 2015 Peplink...
Page 156 IP address 11.22.33.44, where the reverse lookup zone is 33.22.11.in- arpa.addr, the Host IP Number should be 44. The Points To field defines the host name which the PTR record should be pointed to. It must be a FQDN. http://www.peplink.com -156 / 261 - Copyright © 2015 Peplink...
Page 157: Dns Record Import Wizard
 In the Target DNS Server IP Address field, enter the IP address of the DNS server.  In the Transfer via…field, choose the connection which you would like to transfer through.  Select Next >> to continue. http://www.peplink.com -157 / 261 - Copyright © 2015 Peplink...
Page 158 If you have entered domain(s) which already exist in your settings, a warning message will appear. Select Next >> to overwrite the existing record or << Back to go back to the previous step. http://www.peplink.com -158 / 261 - Copyright © 2015 Peplink...
Page 160 After the zone records process have been fetched, the fetch results would be shown as above. You can view import details by clicking the corresponding hyperlink on the right- hand side. http://www.peplink.com -160 / 261 - Copyright © 2015 Peplink...
Page 161: Nat Mappings
USER MANUAL Peplink Balance Series 17 NAT Mappings The Peplink Balance allows the IP address mapping of all inbound and outbound NAT’ed traffic to and from an internal client IP address. NAT mappings can be configured at Network>NAT Mappings. To add a rule for NAT mappings, click Add NAT Rule and the following screen will be displayed: http://www.peplink.com...
Page 162 Note 2: WAN connections in drop-in mode or IP forwarding mode are not shown here. Click Save to save the settings when configuration has been completed. Important Note Inbound firewall rules override inbound mapping settings. http://www.peplink.com -162 / 261 - Copyright © 2015 Peplink...
Page 163: Captive Portal
This authenticates your clients through a RADIUS server. After selecting this option, you will see the following fields: RADIUS Server Fill in the necessary information to complete your connection to the server and enable authentication. http://www.peplink.com -163 / 261 - Copyright © 2015 Peplink...
Page 164: Ldap Server
Clients listing. Here, you can choose between using the Balance’s built-in captive portal and redirecting Splash Page clients to a URL you define. http://www.peplink.com -164 / 261 - Copyright © 2015 Peplink...
Page 165 If you would like to use your own set of terms and conditions, please enter them here. If Conditions left empty, the built-in portal will display the default terms and conditions. Custom Landing Fill in this field to redirect clients to an external URL. Page http://www.peplink.com -165 / 261 - Copyright © 2015 Peplink...
Page 166: Qos
Once users have been assigned to a user group, their internet traffic will be restricted by rules defined for that particular group. Please refer to the following two sections for details. http://www.peplink.com -166 / 261 - Copyright © 2015 Peplink...
Page 167: Bandwidth Control
(for each WAN connection) that each individual Staff and Guest member can consume. No limit can be imposed on individual Managers. By default, download and upload bandwidth limits are set to unlimited (set as 0). http://www.peplink.com -167 / 261 - Copyright © 2015 Peplink...
Page 168: Application
Normal, and↓ ↑High,━ Low. The Peplink Balance can detect various application traffic types by inspecting the packet content. Select an application by choosing a supported application, or by defining a custom application manually. The priority preference of supported applications is placed at the top of the table. Custom applications are at the bottom.
Page 169 Users will not be able to download data at full speed until the uplink becomes less congested. DSL/Cable Optimization can relieve such an issue. When it is enabled, the download speed will become less affected by the upload traffic. By default, this feature is enabled. http://www.peplink.com -169 / 261 - Copyright © 2015 Peplink...
Page 170: Firewall
Internet) and the LAN side of the network. It can protect the local network from potential hacker attacks, access to offensive websites, and/or other inappropriate uses. The firewall functionality of Peplink Balance supports the selective filtering of data traffic in both directions: Outbound (LAN to WAN) ...
Page 171 USER MANUAL Peplink Balance Series Click Add Rule to display the following screen: The inbound firewall settings are located at Network>Firewall>Access Rules. http://www.peplink.com -171 / 261 - Copyright © 2015 Peplink...
Page 172 Peplink Balance based on the other parameters of Enable the rule. If the box is not checked, the firewall rule does not take effect. The Peplink Balance will disregard the other parameters of the rule. Connection Select the WAN connection that this firewall rule should apply to.
Page 173: Event Logging
 PROTO: Protocol  SPT: Source port  DPT: Destination port Click Save to store your changes. To create an additional firewall rule, click Add Rule and repeat the above steps. http://www.peplink.com -173 / 261 - Copyright © 2015 Peplink...
Page 174 If the default inbound rule is set to Allow for NAT-enabled WANs, no inbound Allow firewall rules will be required for inbound port forwarding and inbound NAT mapping rules. However, if the default inbound rule is set as Deny, a corresponding Allow firewall rule will be required. http://www.peplink.com -174 / 261 - Copyright © 2015 Peplink...
Page 175  Port scan o NMAP FIN/URG/PSH o Xmas tree o Another Xmas tree o Null scan o SYN/RST o SYN/FIN  SYN flood prevention  Ping flood attack prevention http://www.peplink.com -175 / 261 - Copyright © 2015 Peplink...
Page 176 "foobar.*," then "www.foobar.com," "www.foobar.co.jp," or "foobar.co.uk" will be blocked. Placing the wild card in any other position is not supported. The Peplink Balance will inspect and look for blocked domain names on all HTTP traffic. Secure web (HTTPS) traffic is not supported.
Page 177: Ospf & Ripv2
Peplink Balance Series 21 OSPF & RIPv2 The Peplink Balance supports OSPF and RIPv2 dynamic routing protocols. Click the Network tab from the top bar, and then click the OSPF & RIPv2 item on the sidebar to reach the following menu: OSPF This field determines the ID of the router.
Page 178 Choose an authentication method, if one is used, from this drop-down menu. Available Authentication options are MD5 and Text. Enter the authentication key next to the drop-down menu. Interfaces Determine which interfaces this area will use to listen to and deliver OSPF packets http://www.peplink.com -178 / 261 - Copyright © 2015 Peplink...
Page 179 Choose an authentication method, if one is used, from this drop-down menu. Available Authentication options are MD5 and Text. Enter the authentication key next to the drop-down menu. Interfaces Determine which interfaces this group will use to listen to and deliver RIPv2 packets. http://www.peplink.com -179 / 261 - Copyright © 2015 Peplink...
Page 180: Remote User Access
USER MANUAL Peplink Balance Series 22 Remote User Access Networks routed by a Peplink Balance can be remotely accessed via L2TP with IPsec or PPTP. To configure this feature, navigate to Network > Remote User Access Remote User Access Settings Enable Click the checkbox to enable Remote User Access.
Page 181 USER MANUAL Peplink Balance Series corresponding row. Click the button to switch to enters user accounts by pasting the information in.CSV format. http://www.peplink.com -181 / 261 - Copyright © 2015 Peplink...
Page 182: Miscellaneous Settings
The following diagram illustrates an HA configuration with two Peplink Balance units and two Internet connections: In the diagram, the WAN ports of each Peplink Balance unit connect to the router and to the modem. Both Peplink Balance units connect to the same LAN switch via a LAN port.
Page 183 Interface for Master Router Interface for Slave Router High Availability Checking this box specifies that the Peplink Balance unit is part of a high availability Enable configuration. This number identifies a pair of Peplink Balance units operating in a high availability Group Number configuration.
Page 184 In drop-in mode, no other configuration needs to be set. Please note that the drop-in WAN cannot be configured as a LAN bypass port while it is configured for high availability. http://www.peplink.com -184 / 261 - Copyright © 2015 Peplink...
Page 185: Certificate Manager
WAN connections. In this case, DNS service will not be interrupted, even if any WAN connection is down. Custom Service When this option is enabled, incoming connections from specified ports will be Forwarding intercepted and forwarded to a local server. http://www.peplink.com -185 / 261 - Copyright © 2015 Peplink...
Page 186 ISP’s e-mail server host name or IP address. Under SMTP Port, enter the TCP port number for each WAN. The Peplink Balance will intercept SMTP connections. Choose a WAN port according to the outbound policy, and then forward the connection to the SMTP server, if the chosen WAN has enabled forwarding.
Page 187: Service Passthrough
Passthrough. Some Internet services need to be specially handled in a multi-WAN environment. The Peplink Balance can handle these services such that Internet applications do not notice it is behind a multi-WAN router. Settings for service passthrough support are available here.
Page 188 FTP sessions consist of two TCP connections; one for control and one for data. In a multi-WAN situation, they must be routed to the same WAN connection. Otherwise, problems will arise in transferring files. By default, the Peplink Balance monitors TCP control connections on port 21 for any FTP connections and binds TCP connections of the same FTP session to the same WAN.
Page 189: Ap Controller
Peplink Balance Series 23 AP The AP controller acts as a centralized controller of Pepwave AP devices. With this feature, users will be able to customize and manage multiple APs from a single Peplink Balance interface. Special Note With the installation of Firmware 6.2.1 and upwards, full AP support is included free.
Page 190: Wireless Ssid
The default value of this setting is 0, which means VLAN tagging is disabled (instead of tagged with zero). This setting specifies whether or not Wi-Fi clients can scan the SSID of this Broadcast SSID wireless network. Broadcast SSID is enabled by default. http://www.peplink.com -190 / 261 - Copyright © 2015 Peplink...
Page 191: Data Rate
USER MANUAL Peplink Balance Series Select Auto to allow the Peplink Balance to set the data rate automatically, or Data Rate select Fixed and choose a rate from the displayed drop-down menu. Multicast Filter This setting enables the filtering of multicast network traffic to the wireless SSID.
Page 192 In field, enter the UDP authentication port(s) used by your RADIUS server(s) or click the Port Default button to enter 1812. Accounting In field, enter the UDP accounting port(s) used by your RADIUS server(s) or click the Default Port button to enter 1813. http://www.peplink.com -192 / 261 - Copyright © 2015 Peplink...
Page 193 Enter a value in kpbs to limit connected clients’ upstream bandwidth. Enter 0 to allow Upstream unlimited upstream bandwidth. Limit Client Enter a value in kpbs to limit connected clients’ downstream bandwidth. Enter 0 to allow Downstream unlimited downstream bandwidth. http://www.peplink.com -193 / 261 - Copyright © 2015 Peplink...
Page 194 If you have chosen MAC Address as your firewall rule type, enter the MAC address MAC Address identifying the machine to allow or deny. http://www.peplink.com -194 / 261 - Copyright © 2015 Peplink...
Page 196 This field specifies the name of this AP profile. These buttons specify which wireless networks will use this AP profile. You can also select the frequencies at which each network will transmit. Please note that the Peplink SSID Balance does not detect whether the AP is capable of transmitting at both frequencies.
Page 197: Output Power
With this feature enabled, throughput will be increased by sending two or more data Aggregation frames in a single transmission. Frame Length This field is only available when Frame Aggregation is enabled. It specifies the frame http://www.peplink.com -197 / 261 - Copyright © 2015 Peplink...
Page 198: Web Access
By default, it is set to 50000. - Advanced feature. Click the button on the top right-hand corner to activate. Web Administration Settings Check the box to allow Peplink Balance to manage the web admin access information of Enable the AP. Web Access...
Page 199: Info
The colored boxes indicate the SSID to display information for. Clicking any colored box SSID will toggle the display of information for that SSID. By default, all the graphs show information for all SSIDs. http://www.peplink.com -199 / 261 - Copyright © 2015 Peplink...
Page 200: Usage
More… link for additional records. 23.5 Usage A detailed breakdown of data usage for each AP is available at AP> AP Status. The information is organized by device groups as defined in Section 22.3. http://www.peplink.com -200 / 261 - Copyright © 2015 Peplink...
Page 201 SSID, at that point in time. On the Data Usage by menu, you can display the information by SSID or by AP send/receive rate. Click the icon to view a detailed event log for that particular device: http://www.peplink.com -201 / 261 - Copyright © 2015 Peplink...
Page 202: Ap Status
Peplink Balance Series 23.6 AP Status A detailed breakdown of the status of each device is available at AP>Status. The information is organized by device groups as defined in Section 22.3. http://www.peplink.com -202 / 261 - Copyright © 2015 Peplink...
Page 203 Select the pull-down menu to choose a firmware pack for the devices that you have selected. After selecting your devices you wish to configure, click reach the following menu: Select the pull-down menu to choose an AP profile for the devices that you have selected. http://www.peplink.com -203 / 261 - Copyright © 2015 Peplink...
Page 204: Rogue Ap
To receive new firmware packs, you can either press to download new packs or you can press to manually upload a firmware pack. Press define which firmware pack is default. http://www.peplink.com -204 / 261 - Copyright © 2015 Peplink...
Page 205: System Settings
For security reasons, after logging in to the web admin Interface for the first time, it is recommended to change the administrator password. Configuring the administration interface to be accessible only from the LAN can further improve system security. Administrative settings configuration is located at System>Admin Security. http://www.peplink.com -205 / 261 - Copyright © 2015 Peplink...
Page 206 Peplink Balance Series Admin Settings This field allows you to define a name for this Peplink Balance unit. By default, Router Router Name Name is set as Balance_XXXX, where XXXX refers to the last 4 digits of the serial number of that balance unit.
Page 207: Front Panel
The CLI (command line interface) can be accessed via SSH. It can also be accessed from CLI SSH & the serial console port on some Peplink Balance models. This field enables CLI support. For Console additional information regarding CLI, please refer to Section 22.5.
Page 208 To define multiple subnets, separate each IP subnet, one per line. For example: 192.168.0.0/24 10.8.0.0/16 Allowed WAN This is to choose which WAN IP address(es) the web server should listen on. IP Address(es) http://www.peplink.com -208 / 261 - Copyright © 2015 Peplink...
Page 209: Firmware
Balance will automatically download the firmware. The rest of the upgrade process will be automatically initiated. You may also download a firmware image from the Peplink website and update the unit manually. To update using a firmware image, click Choose File to select the firmware file from the local computer, and then click Manual Upgrade to send the firmware to the Peplink Balance.
Page 210: Time
Do not attempt to upload a non-firmware file or a firmware file that is not supported by Peplink. Upgrading the Peplink Balance with an invalid firmware file will damage the unit and may void the warranty.
Page 211: Email Notification
Confirm SMTP This field allows you to verify and confirm the new administrator password. Password Sender’s Email This setting specifies the email address which the Peplink Balance will use to send its Address reports. Recipient’s This setting specifies the email address(es) to which the Peplink Balance will send email http://www.peplink.com...
Page 212 Notification button to test the settings before saving. After Test Email Notification is clicked, you will see this screen to confirm the settings: Click Send Test Notification to confirm. In a few seconds, you will see a message with detailed test results. http://www.peplink.com -212 / 261 - Copyright © 2015 Peplink...
Page 213: Event Log
This setting specifies the IP address or hostname of the remote syslog server. Host The Peplink Balance can also send push notifications to mobile devices that have our Mobile Router Utility installed. Check the box to activate this feature. Push Events For more information on the Router Utility, go to: www.peplink.com/products/router-utility...
Page 214: Snmp
USER MANUAL Peplink Balance Series 24.6 SNMP SNMP or simple network management protocol is an open standard that can be used to collect information about the Peplink Balance unit. SNMP configuration is located at System>SNMP. SNMP Settings SNMP Device This field shows the router name defined at System>Admin Security.
Page 215 This setting specifies via a drop-down menu one of the following valid privacy protocols: Privacy Protocol  NONE  When DES is selected, an entry field will appear for the password. http://www.peplink.com -215 / 261 - Copyright © 2015 Peplink...
Page 216: Incontrol
Peplink Balance Series 24.7 InControl InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl.
Page 217: Configuration
Configurations of its HA counterpart. To do so, click the Upload button. After loading the settings, from High configure the LAN IP address of the Peplink Balance unit so that it is different from the HA counterpart. Availability Pair http://www.peplink.com -217 / 261 - Copyright ©...
Page 218: Feature Add-Ons
This page provides a reboot button for restarting the system. For maximum reliability, the Peplink Balance Series can equip with two copies of firmware, and each copy can be a different version. You can select the firmware version you would like to reboot the device with.
Page 219: Tools
1472 bytes. The ping utility is located at System>Tools>Ping, illustrated below: A system administrator can use the ping utility to manually check the connectivity of a particular LAN/WAN connection. http://www.peplink.com -219 / 261 - Copyright © 2015 Peplink...
Page 220: Traceroute Test
A system administrator can use the traceroute utility to analyze the connection path of a LAN/WAN connection. 25.3 CLI (Command Line Interface) Support The serial console connector on some Peplink Balance units is RJ-45. To access the serial console port, prepare a RJ-45 to DB-9 console cable. Connect the RJ-45 end to the unit's console port and the DB-9 end to a terminal's serial port.
Page 223: System Time
The second table shows the MAC address of each LAN/WAN interface connected. Important Note If you encounter issues and would like to contact the Peplink Support Team (http://www.peplink.com/contact/), please download the diagnostic report file and attach it along with a description of your issue. In Firmware 5.1 or before, the diagnostic report file can be obtained at System>Reboot.
Page 224: Active Sessions
This screen displays the number of sessions initiated by each application. Click on each service listing for additional information. This screen also indicates the number of sessions initiated by each WAN port. Finally, you can see which clients are initiating the most sessions. http://www.peplink.com -224 / 261 - Copyright © 2015 Peplink...
Page 225 This Active Sessions section displays the active inbound / outbound sessions of each WAN connection on the Peplink Balance. A filter is available to help sort out the active session information. Enter a keyword in the field or check one of the WAN connection boxes for filtering.
Page 226: Client List
Client List (see previous section). Click Flush All to flush all WINS client records. 26.5 OSPF & RIPv2 Information on OSPF and RIPv2 routing setup can be found at Status>OSPF & RIPv2. http://www.peplink.com -226 / 261 - Copyright © 2015 Peplink...
Page 227: Speedfusion Tm Status
Click on the corresponding peer name to explore the WAN connection(s) status and subnet information of each VPN peer. Click the button for a chart displaying real-time throughput, latency, and drop- rate information for each WAN connection. http://www.peplink.com -227 / 261 - Copyright © 2015 Peplink...
Page 228 After clicking the icon, the following menu appears: Select the L2 protocol (TCP/UDP), direction, and duration and click the Start button to begin the general throughput test. http://www.peplink.com -228 / 261 - Copyright © 2015 Peplink...
Page 229: Event Log
"Tx Avg." is the averaged throughput across the full 10 seconds time, while "Tx Max." is the averaged throughput of the fastest 30% of time. 26.7 Event Log Event log information is located at Status>Event Log. 26.7.1 Device Event Log http://www.peplink.com -229 / 261 - Copyright © 2015 Peplink...
Page 230 USER MANUAL Peplink Balance Series The log section displays a list of events that has taken place on the Peplink Balance unit. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log. 26.7.2 IPsec Event Log This section displays a list of events that has taken place within an IPsec VPN connection.
Page 231: Bandwidth
The Data transferred since last reboot table indicates how much network traffic has been processed by the device since the last bootup. http://www.peplink.com -231 / 261 - Copyright © 2015 Peplink...
Page 232 26.8.2 Hourly This page shows the hourly bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the desired connection to check from the drop-down menu. http://www.peplink.com -232 / 261 - Copyright © 2015 Peplink...
Page 235 The scale of the graph can be set to display megabytes (MB) or gigabytes (GB). Click on a specific month to receive a breakdown of all client usage for that month. http://www.peplink.com -235 / 261 - Copyright © 2015 Peplink...
Page 236: Appendix A. Restoration Of Factory Defaults
USER MANUAL Peplink Balance Series Appendix A. Restoration of Factory Defaults To restore the factory default settings on a Peplink Balance unit, perform the following: For Balance models with a reset button: Locate the reset button on the Peplink Balance unit.
Page 237: Appendix B. Routing Under Dhcp, Static Ip, And Pppoe
When the Peplink Balance is operating under NAT mode, the source IP addresses of outgoing IP packets are translated to the WAN IP address of the Peplink Balance. With NAT, all LAN devices share the same WAN IP address to access the Internet (i.e., the WAN IP address of the Peplink Balance).
Page 238: Routing Via Ip Forwarding
Peplink Balance Series Routing Via IP Forwarding When the Peplink Balance is operating under IP forwarding mode, the IP addresses of IP packets are unchanged; the Peplink Balance forwards both inbound and outbound IP packets without changing their IP addresses.
Page 239: Appendix C. Case Studies
For HTTP, set the weight to 3:4.  For SMTP, set the weight to 1:8, such that users will have a greater chance to be  routed via WAN2 when sending e-mail. http://www.peplink.com -239 / 261 - Copyright © 2015 Peplink...
Page 240 In general, to add a new outbound traffic rule, navigate to Advanced>Outbound Policy. Click here and select Managed by Custom Rules Click Add Rule to add a new load distribution rule. http://www.peplink.com -240 / 261 - Copyright © 2015 Peplink...
Page 243: Maintaining The Same Ip Address Throughout A Session
C.2.2 Solution Make use of the persistence functionality of the Peplink Balance. With persistence configured and the By Destination option selected, the Peplink Balance will use a consistent WAN connection for source-destination pairs of IP addresses, preventing sessions from being dropped.
Page 244: Bypassing The Firewall To Access Hosts On Lan
In this example, the host with an IP address of 192.168.1.102 is bound to 10.90.0.75 of WAN1: Click Save and then Apply Changes, located at the top right corner, to complete the process. http://www.peplink.com -244 / 261 - Copyright © 2015 Peplink...
Page 245: Inbound Access Restriction
Internet security threats. C.4.2 Solution Firewall functionality is built into the Peplink Balance. By default, inbound access is unrestricted. Enabling a basic level of protection involves setting up firewall rules. For example, in order to protect your private network from external access, you can set up a firewall rule between the Internet and your private network.
Page 246: Outbound Access Restriction
Firewall Rules table, and then adjust settings according the screenshot: After the fields have been entered as in the screenshot, click Save to add the rule. Click Apply Changes on the top right corner to complete the process. http://www.peplink.com -246 / 261 - Copyright © 2015 Peplink...
Page 247: Appendix D. Troubleshooting
TCP session to query the server. Try to test with a website that does not enable Keep Alive. For example, try http://private.dnsstuff.com/tools/aboutyou.ch. (This third-party web site is provided only for reference. Peplink has no association with the site and does not guarantee the site's validity or availability.) http://www.peplink.com -247 / 261 - Copyright ©...
Page 248 You can test the WAN connection using ping, as in the solution to Problem 4. As we want to isolate the problems from the LAN, ping will be performed from the Peplink Balance. By using Ping/Traceroute under the Status tab of the Peplink Balance, you may able to find the source of problem.
Page 249: Appendix E. Product Specifications
USER MANUAL Peplink Balance Series Appendix E. Product Specifications Peplink Balance 20, 30, 30 LTE, and 50 Routing  Flexible Custom Outbound Routing Policy WAN Support  DHCP, PPPoE and Static IP  Outbound Link Load Balance Device Management  Wizard & Menu Driven Web Management Interface over HTTP / HTTPS ...
Page 250: Peplink Balance 210 And 310
USER MANUAL Peplink Balance Series Peplink Balance 210 and 310 Routing Drop-in Mode and NAT  Flexible Custom Outbound Routing Policy  WAN Support DHCP, PPPoE and Static IP  Inbound and Outbound Link Load Balance  Device Management Wizard & Menu Driven Web Management Interface over HTTP / HTTPS ...
Page 251: Peplink Balance 380
One RJ-45 for an IEEE 802.3ab 10/100M/1000M LAN  One RJ-45 Console / Serial Port  Power Specification AC input 100-240V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com -251 / 261 - Copyright © 2015 Peplink...
Page 252: Peplink Balance 305
One RJ-45 for an IEEE 802.3ab 10/100M/1000M LAN  One RJ-45 Console / Serial Port Power Specification AC input 100-240V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com -252 / 261 - Copyright © 2015 Peplink...
Page 253: Peplink Balance 380
One RJ-45 for an IEEE 802.3ab 10/100M/1000M LAN  One RJ-45 Console / Serial Port  Power Specification AC input 100-240V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com -253 / 261 - Copyright © 2015 Peplink...
Page 254: Peplink Balance 580
One RJ-45 Console / Serial (modem / TA) Port  LAN Bypass from WAN5 to LAN  Power Specification AC input 100-240V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com -254 / 261 - Copyright © 2015 Peplink...
Page 255: Peplink Balance 710
One RJ-45 for an IEEE 802.3ab 10/100/1000M LAN  One RJ-45 Console / Serial Port  Power Specification AC input 100-240V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com -255 / 261 - Copyright © 2015 Peplink...
Page 256: Peplink Balance 1350
One RJ-45 Console / Serial (modem / TA) Port  LAN Bypass from WAN1 to LAN  Power Specification AC input 100-240V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com -256 / 261 - Copyright © 2015 Peplink...
Page 257: Peplink Balance 2500
Eight RJ-45 for an IEEE 802.3ab 10/100/1000M LAN /Two SFP+ for an IEEE  802.3ae 10G LAN One RJ-45 Console / Serial Port  Power Specification AC input 100-240V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com -257 / 261 - Copyright © 2015 Peplink...
Page 258: Peplink Mediafast 200/500
 Humidity: 10% - 90% (non-condensing)  MediaFast 500-B WAN ports 1-5 are active by default. Load balancing and/or a SpeedFusion license is required to activate MediaFast 500-A WAN ports 2- http://www.peplink.com -258 / 261 - Copyright © 2015 Peplink...
Page 259: Appendix F. Declaration
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. 3. Radiation Exposure Statement (for Balance One): This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator and your body.
Page 260 Note: The country code selection is for non-US models only and is not available to all US models. Per FCC regulation, all WiFi products marketed in US must fixed to US operation channels only. http://www.peplink.com -260 / 261 - Copyright © 2015 Peplink...
Page 261 Contact Us: Sales http://www.peplink.com/contact/sales/ Support http://www.peplink.com/contact/ Certified Peplink Partner http://www.peplink.com/partners/chann el-partner-program/...

This manual is also suitable for:

Balance 20 Balance 30 lte Balance 380 Mediafast 200 Balance 30 Mediafast 500 ... Show all

peplink balance ONE User Manual

1 Introduction and Scope

2 Glossary

3 Product Comparison Chart

4 Product Features

5 Package Contents

6 Peplink Balance Overview

7 Installation

8 Basic Configuration

9 Mediafast Configuration

10 Configuring the Lan Interface(S)

11 Drop-In Mode

12 Configuring the Wan Interface(S)

13 Pepvpn with Speedfusion Tm Bandwidth Bonding

14 Ipsec Vpn

15 Outbound Policy Management

16 Inbound Access

17 Nat Mappings

18 Captive Portal

19 Qos

20 Firewall

21 Ospf & Ripv2

22 Remote User Access

Miscellaneous Settings

23 Ap ····························································································································

24 System Settings

25 Tools

26 Status

Appendix A. Restoration of Factory Defaults

Appendix B. Routing under Dhcp, Static Ip, and Pppoe

Appendix C. Case Studies

Appendix D. Troubleshooting

Appendix E. Product Specifications

Appendix F. Declaration

Quick Links

User Manual

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for peplink balance ONE

Summary of Contents for peplink balance ONE