URL blocking, making it an ideal networking solution for a wide range of mobile and office uses. This manual details setting up the Pepwave Surf SOHO router and provides an introduction to its features and usage. http://www.pepwave.com...
PEPWAVE Surf SOHO Router Glossary The following terms, acronyms, and abbreviations are frequently used in this manual: Term Definition 3rd generation standards for wireless communications (e.g., HSDPA) 4th generation standards for wireless communications (e.g., WiMAX, LTE) DHCP Dynamic Host Configuration Protocol...
PEPWAVE Surf SOHO Router Product Features The Surf SOHO enables all LAN users to share broadband Internet connections and provides advanced features to enhance Internet access. The following is the list of supported features on the Pepwave Surf SOHO router: Supported Network Features 3.1.1 WAN...
PEPWAVE Surf SOHO Router 3.1.5 QoS Quality of service for different applications and custom protocols Application prioritization for custom protocols and DSL/cable optimization Other Supported Features User-friendly web-based administration interface HTTP and HTTPS support for the Web Admin Interface ...
PEPWAVE Surf SOHO Router Pepwave Surf SOHO Router Overview Front Panel 4.1.1 LED Indicators The statuses indicated by the front panel LEDs are as follows: Wi-Fi and Status Indicators Disabled Intermittent Blinking Enabled but no client connected Wi-Fi Client(s) connected to wireless network...
Constructing the Network At a high level, construct your network according to the following steps: With an Ethernet cable, connect a computer to one of the LAN ports on the Surf SOHO. Repeat with different cables for up to 3 additional computers.
PEPWAVE Surf SOHO Router Configuring the Network Environment To ensure that your Pepwave Surf SOHO works properly in the LAN environment and can access the Internet via the WAN connections, please refer to the following setup procedures: LAN configuration: For basic configuration, refer to Connecting to the Web Admin Interface.
PEPWAVE Surf SOHO Router Connecting to the Web Admin Interface Start a Web browser on a computer that is connected with the Pepwave Surf SOHO over the LAN. To connect to the Surf SOHO's Web Admin Interface, enter the following LAN IP address in the address field of the web browser: http://192.168.50.1...
Page 12
PEPWAVE Surf SOHO Router version, and uptime. Important Note Configuration changes (e.g. WAN, LAN, admin settings, etc.) take effect only after clicking the Save button at the bottom of each page. The Apply Changes button causes the changes to be saved and applied.
PEPWAVE Surf SOHO Router Configuring the LAN Interface(s) Basic Settings LAN interface settings are located at Network > LAN > Basic Settings. http://www.pepwave.com Copyright @ 2013 Pepwave...
Page 14
PEPWAVE Surf SOHO Router IP Settings IP Address & This is the LAN IP address and subnet mask used to identify the Pepwave Surf SOHO on the network. Subnet Mask Port Settings This setting specifies the speed of the LAN Ethernet port.
A static local DNS record consists of a host name and an IP address. When looking up the Local DNS host name from the LAN to LAN IP of the Pepwave Surf SOHO, the corresponding IP Records address will be returned.
Page 16
PEPWAVE Surf SOHO Router Click the Add button to create a new SSID. Wireless Network Settings Network Name This setting allows you to specify a name to represent the virtual AP to be scanned by Wi- Fi clients. (SSID) When Yes is selected (default), this virtual AP is enabled. Select No to disable it.
Page 18
PEPWAVE Surf SOHO Router Access Control Settings Restriction Mode This option allows you to perform access control through MAC address filtering. Available options are None, Deny all except listed, and Accept all except listed. http://www.pepwave.com Copyright @ 2013 Pepwave...
PEPWAVE Surf SOHO Router Configuring the WAN Interface(s) WAN interface settings are located at Network > WAN. To change WAN priority, drag the appropriate WAN by holding the left mouse button, move it to the desired priority (the first one would be the highest priority, the second one would be lower priority, and so on), and drop it by releasing the mouse button.
Page 20
PEPWAVE Surf SOHO Router This will open a screen similar to the one shown below: http://www.pepwave.com Copyright @ 2013 Pepwave...
Page 21
PEPWAVE Surf SOHO Router Ethernet WAN Settings Connection This field is for defining a name to represent this WAN connection. Name There are three possible connection methods for your Ethernet WAN: • DHCP • Static IP Connection • PPPoE Method The connection method and details are determined by your ISP.
Page 22
PEPWAVE Surf SOHO Router This setting specifies the maximum transmission unit. By default, MTU is set to Custom 1440. You may adjust the MTU value by editing the text field. Click Default to restore the default MTU value. Select Auto and the appropriate MTU value will be automatically detected. The auto-detection will run each time the WAN connection establishes.
Page 23
PEPWAVE Surf SOHO Router 8.1.1 DHCP Connection The DHCP connection method is suitable if your ISP provides an IP address automatically using DHCP (e.g., if you're connected using a satellite modem, WiMAX modem, cable modem, metro Ethernet, etc.). There are three possible connection methods:...
PEPWAVE Surf SOHO Router 8.1.2 Static IP Connection The static IP connection method is suitable if your ISP provides a static IP address to connect directly. Static IP Settings Network address translation (NAT) substitutes the real address in a packet with a Routing Mode mapped address that is routable on the destination network.
PEPWAVE Surf SOHO Router 8.1.3 PPPoE Connection This connection method is suitable if your ISP provides a login ID/password to connect via PPPoE. PPPoE Settings Network address translation (NAT) substitutes the real address in a packet with a Routing Mode mapped address that is routable on the destination network.
IP of each WAN will be automatically reported to the DNS service provider. Either upon a change in IP addresses or every 23 days without link reconnection, the Pepwave Surf SOHO will connect to the dynamic DNS service provider to perform an IP address update within the provider’s records.
Page 27
Due to dynamic DNS service provider policy, a dynamic DNS host will automatically expire if the host record has not been updated for a long time. Therefore, the Pepwave Surf SOHO performs an update every 23 days, even if a WAN’s IP address has not changed.
PEPWAVE Surf SOHO Router Wi-Fi WAN To change Wi-Fi WAN settings, click Network > WAN > Details. http://www.pepwave.com Copyright @ 2013 Pepwave...
Page 29
PEPWAVE Surf SOHO Router Wi-Fi WAN Settings WAN Connection This field is for defining a name to represent this WAN connection. Name This setting specifies the state of the WAN connection while in standby. The available Standby State options are Remain Connected (hot standby) and Disconnect (cold standby).
Page 30
PEPWAVE Surf SOHO Router This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: • changeip.com • dyndns.org Dynamic DNS • no-ip.org • tzo.com • DNS-O-Matic Select Disabled to disable this feature.
Page 31
PEPWAVE Surf SOHO Router 8.2.1 Creating Wi-Fi Connection Profiles You can manually create a profile to connect to a Wi-Fi connection, which can be particularly useful for creating a profile for connecting to hidden-SSID access points. Click on the Create Profile… link that appears on the Connection Details page to get started.
Page 32
PEPWAVE Surf SOHO Router This will open a window similar to the one shown below: Create Wi-Fi Connection Profile Settings Network Name This field is for defining a name to represent this Wi-Fi connection. (SSID) This option allows you to select which security policy is used for this wireless network.
PEPWAVE Surf SOHO Router WAN Health Check To ensure traffic is routed to healthy WAN connections only, the Pepwave Surf SOHO can periodically check the health of each WAN connection. The health check settings for each WAN connection can be independently configured via Network >...
Page 34
PEPWAVE Surf SOHO Router Health Check Settings This setting specifies the health check method for the WAN connection. The value of Method can be configured as Disabled, Ping, or DNS Lookup. The default method is DNS Lookup. Method For Mobile Internet connection, the value of Method can be configured as Disabled or SmartCheck.
Page 35
WAN connection will be treated as down. This setting specifies the number of consecutive successful ping/DNS lookup responses that must be received before the Pepwave Surf SOHO treats a previously down WAN connection as up again. Recovery Retries By default, Recover Retries is set to 3.
Page 36
Automatic Public DNS Server Check on DNS Test Failure If Health Check Method is set to DNS Lookup and DNS lookups fail, the Surf SOHO will automatically perform DNS lookups on some public DNS servers. If the tests are successful, the target DNS server may have malfunctioned.
PEPWAVE Surf SOHO Router Bandwidth Allowance Monitor The Bandwidth Allowance Monitor helps you track network usage. Bandwidth Allowance Monitor If Email Notification is enabled, you will be notified through email when usage hits 75% and 95% of the monthly allowance.
Wi-Fi settings can be configured at Advanced > Wi-Fi Settings. Wi-Fi Radio Settings Operating Country This option sets the country whose regulations the Pepwave Surf SOHO follows. Wi-Fi Antenna Choose from the Surf SOHO's internal or optional external antennas. Wi-Fi AP Settings This option allows you to specify whether 802.11b and/or 802.11g client association...
Page 39
The interval is measured in milliseconds. DTIM The default value is set to 1 ms. This field is for specifying the wait time before the Surf SOHO transmits a packet. Slot Time By default, this field is set to 9 µs.
256-bit AES-encrypted VPN connection with the Surf SOHO. Note that all IDs must be unique. To save the local ID and begin creating a new profile, discussed next, click Save.
PEPWAVE Surf SOHO Router 10.1 Creating a New PepVPN Profile To begin creating a PepVPN profile, click the New Profile button displayed after saving a local ID, discussed above. http://www.pepwave.com Copyright @ 2013 Pepwave...
Page 42
This field is optional. With this field filled, the Pepwave Surf SOHO will initiate a connection Remote IP to each of the remote IP addresses until it succeeds. If the field is empty, the Pepwave Surf Addresses / Host SOHO will wait for a connection from the remote peer. Therefore, at least one side of the Names two VPN peers must have the field filled.
PEPWAVE Surf SOHO Router 10.2 PepVPN Outbound Custom Rules PepVPN supports setting outbound rules that apply to various services over the connection. To create a new rule, click the Add Rule button. http://www.pepwave.com Copyright @ 2013 Pepwave...
Page 44
Pepwave Surf SOHO based on the other parameters of the rule. With an Enable value of No, the Surf SOHO disregards the other parameters of the rule. This setting specifies the source IP address, IP network or MAC address for outbound Source traffic that matches the rule.
Protocol and Port You may select from common protocols using the provided drop-down menu. This setting specifies the behavior of Pepwave MAX for the custom rule. Choose from Algorithm Priority, which prioritizes WAN connections in the listed order, or Enforced, which routes matching traffic regardless of the specified WAN connection's health check status.
PEPWAVE Surf SOHO Router 10.4 The Pepwave Surf SOHO behind a NAT Router The Pepwave Surf SOHO supports PepVPN connections which are behind a NAT (network address translation) router. To allow a WAN connection behind a NAT router to accept VPN connections, you must configure the NAT router in front of the WAN connection to forward TCP port 32015 to it.
11 Port Forwarding 11.1 Port Forwarding Service The Pepwave Surf SOHO can act as a firewall that blocks, by default, all inbound access from the Internet. By using port forwarding, Internet users can access the servers behind the Pepwave Surf SOHO.
Page 48
Any Port, Single Port, Port Range and Port Map Any Port: All traffic that is received by the Pepwave Surf SOHO via the specified protocol is forwarded to the server specified by the Server IP Address setting.
PEPWAVE Surf SOHO Router 11.2 UPnP / NAT-PMP Settings UPnP and NAT-PMP are network protocols which allow a computer on the LAN to automatically configure the router to allow parties on the WAN to connect to itself. In this way, the process of inbound port forwarding is automated.
PEPWAVE Surf SOHO Router 12 NAT Mappings The configuration of NAT mappings allows IP address mapping of all inbound and outbound NAT’d traffic to and from an internal client IP address. The settings to configure NAT mappings are located at Advanced > NAT Mappings.
Page 51
PEPWAVE Surf SOHO Router The IP range is a contiguous group of private IP addresses used by the LAN host. The system maps these addresses to a number of public IP addresses, specified below, to facilitate Range outbound traffic. This option is only available when IP Range is selected.
PEPWAVE Surf SOHO Router 13 QoS QoS settings can be defined at Advanced > QoS > Application. 13.1 Application Prioritization Click the Add button to prioritize traffic for a supported or custom application. Click the button the Action column to delete the custom application in the corresponding row.
LAN side of the network. It can protect the local network from potential hacker attacks, offensive Web sites, and/or other inappropriate uses. The firewall functionality of the Pepwave Surf SOHO supports the selective filtering of data traffic in both directions: ...
Page 54
This setting specifies a name for the firewall rule. When Yes is selected, the firewall rule takes effect. If the traffic matches the specified protocol/IP/port, actions will be taken by the Pepwave Surf SOHO based on the other Enable parameters of the rule. When No is selected, the Pepwave Surf SOHO will disregard the other parameters of the rule.
Page 55
In addition, a single port, or a range of ports, can be specified for the Source IP & Port setting. This setting specifies the action to be taken by the Pepwave Surf SOHO upon encountering traffic that matches the both of the following: •...
, check Enable next to Intrusion Detection and DoS Prevention, and press the Save button. When this feature is enabled, the Pepwave Surf SOHO will detect and protect the network from the following kinds of intrusions and denial-of-service attacks. •...
Some ISPs require their users to send e-mails via the ISP’s SMTP server. All outgoing SMTP connections are blocked except those connecting to the ISP’s. The Pepwave Surf SOHO supports intercepting and redirecting all outgoing SMTP connections destined for TCP port 25 via a WAN connection to the WAN’s corresponding SMTP server.
Page 58
15.1.2 Web Proxy Forwarding When this feature is enabled, the Pepwave Surf SOHO will intercept all outgoing connections destined for the proxy server specified in Web Proxy Interception Settings, choose a WAN connection with reference to outbound policy, and then forward them to the specified Web proxy server and port number.
Service passthrough settings can be found in Advanced > Misc. Settings > Service Passthrough. Some Internet services must be specially handled in a multi-WAN environment. The Pepwave Surf SOHO supports handling these services correctly such that Internet applications do not notice being behind a multi-WAN router.
PEPWAVE Surf SOHO Router 16 System Settings 16.1 Admin Security There are two user accounts available for accessing the Web Admin. Usernames are admin and user. They represent two user levels: admin has full administration access, while user is a read-only account.
Page 61
PEPWAVE Surf SOHO Router Admin Settings This field allows you to define a name for the Pepwave Surf SOHO. Router Name By default, Router Name is set as SURF-SOHO_XXXX, where XXXX refers to the last 4 digits of the serial number of the device.
Page 62
PEPWAVE Surf SOHO Router This field allows you to specify a new user password. Once the user password is User Password set, the read-only user feature will be enabled. Confirm User This field allows you to verify and confirm the new user password.
This setting defines which WAN IP address(es) the Web server should listen on. Allowed WAN IP Address(es) 16.2 Firmware The Pepwave Surf SOHO's firmware is upgradeable through the Web Admin Interface. Firmware upgrade functionality is located at System > Firmware. http://www.pepwave.com Copyright @ 2013 Pepwave...
Do not disconnect the power during firmware upgrade process. Do not attempt to upload a non-firmware file or a firmware file that is not qualified or not supported by Pepwave. Upgrading a Pepwave Surf SOHO with an invalid firmware file will damage the unit and may void the warranty.
PEPWAVE Surf SOHO Router 16.4 Email Notification The email notification functionality of the Pepwave Surf SOHO provides a system administrator with up- to-date information on network status. The settings for configuring email notifications are found at System > Email Notification.
Page 66
Address the Pepwave Surf SOHO. Recipient’s Email This setting specifies the email addresses to which the Pepwave Surf SOHO should send Address email messages. You may enter multiple recipients’ email addresses in this field. After you have completed the settings, you can click the Test Email Notification button to test the settings before saving them.
PEPWAVE Surf SOHO Router 16.5 Event Log Event Log enables event logging to a specified remote syslog server and mobile devices. The settings for configuring a remote system log are found at System > Event Log. Send Events to Remote Syslog Server Remote Syslog This setting specifies whether or not to log events at the specified remote syslog server.
PEPWAVE Surf SOHO Router 16.6 SNMP Simple Network Management Protocol (SNMP) is an open standard that can be used to collect information from the Pepwave Surf SOHO. SNMP configuration is located at System > SNMP. SNMP Settings SNMP Device This field shows the router name defined in System > Admin Security.
When this check box is checked, the device’s status information, usage data, and configuration will be sent to Pepwave’s InControl system. Sign up for an InControl account at https://incontrol.pepwave.com/, where you can register devices under the account, monitor device status and usage reports, and download backed up configuration files.
Backing up your Pepwave Surf SOHO's settings immediately after successful completion of the initial setup is strongly recommended. You can download and upload Pepwave Surf SOHO settings, as well as restore factory settings, at System > Configuration. 16.8.1 Restore Configuration to Factory Settings The Restore Factory Settings button resets the configuration to factory default settings.
This page provides a reboot button for restarting the system. For highest reliability, the Pepwave Surf SOHO is equipped with two copies of firmware of different versions. You can select the firmware version you would like the device to reboot with.
PEPWAVE Surf SOHO Router 16.11 Traceroute Test The Traceroute test tool in traces the routing path to the destination through a particular Ethernet interface or PepVPN connection. The Traceroute Test utility is located at System > Tools > Traceroute, illustrated below: A system administrator can use the Traceroute utility to analyze the connection path of a LAN/WAN connection.
PEPWAVE Surf SOHO Router 17 Status This section displays Device status, Active Sessions, the Client List, the Event Log, and Bandwidth. 17.1 Device System information is located at Status > Device. System Information This is the name specified in the Router Name field located at System > Admin Router Name Security.
The second table shows the MAC address of each LAN/WAN interface connected. Important Note If you encounter issues and would like to contact the Pepwave support team (http://www.pepwave.com/contact/), please download the diagnostic report file and attach it along with a description the problem.
(retrieved from the DHCP reservation table or defined by users), current Download and Upload rate and MAC addresses that the Pepwave Surf SOHO has offered IP addresses to since it powered up. Network Name (SSID) and Signal refer to information about the Wi-Fi AP, which is the name of the network and its signal strength.
PEPWAVE Surf SOHO Router The log section displays a list of events that have taken place on the Pepwave Surf SOHO. Click Auto Refresh to retrieve log entries again. Click the Clear Log button to clear the log. Select 50, 100, or All to show the corresponding number of events in the log.
Page 77
PEPWAVE Surf SOHO Router 17.5.2 Hourly This page shows the daily bandwidth usage for all WAN connections. Select the connection to monitor from the drop-down menu provided. http://www.pepwave.com Copyright @ 2013 Pepwave...
Page 78
PEPWAVE Surf SOHO Router 17.5.3 Daily This page shows the daily bandwidth usage for all WAN connections. Select the connection to monitor from the drop-down menu provided. If you have enabled the Bandwidth Monitoring feature as shown in section 8.4, the Current Billing Cycle table for that WAN connection will be displayed.
Page 79
PEPWAVE Surf SOHO Router 17.5.4 Monthly This page shows the monthly bandwidth usage for each WAN connection. If you have enabled the Bandwidth Monitoring feature as shown in section 8.4, you can choose a particular connection to check its usage and select to show the monthly usage period in Billing Cycle or Calendar Month.
Restoration of Factory Defaults Appendix A. To restore the factory default settings on your Pepwave Surf SOHO unit, follow the steps below: Locate the reset button on the back panel of the Pepwave Surf SOHO. With a paper clip, press the reset button and hold it for at least 10 seconds until the unit reboots itself.
PEPWAVE Surf SOHO Router Declaration Appendix B. 1. The device supports time division technology Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
PEPWAVE Surf SOHO Router 3. CE Statement for Surf SOHO Europe – EU Declaration of Conformity This device complies with the essential requirements of the R&TTE Directive 1999/5/EC. The following test methods have been applied in order to prove presumption of conformity with the essential requirements of the R&TTE Directive 1999/5/EC:...
Page 83
PEPWAVE Surf SOHO Router Direct Spread (UTRA) for Mobile and portable (UE) radio and ancillary equipment 0081 Česky [Jméno výrobce] tímto prohlašuje, že tento [typ zařízení] je ve shodě se základními požadavky a dalšími příslušnými ustanoveními směrnice 1999/5/ES. [Czech] Dansk Undertegnede [fabrikantens navn] erklærer herved, at følgende udstyr [udstyrets typebetegnelse]...
Page 84
PEPWAVE Surf SOHO Router [Meno výrobcu] týmto vyhlasuje, že [typ zariadenia] spĺňa základné požiadavky a všetky príslušné Slovensky ustanovenia Smernice 1999/5/ES. [Slovak] [Valmistaja = manufacturer] vakuuttaa täten että [type of equipment = laitteen tyyppimerkintä] Suomi tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden [Finnish] ehtojen mukainen.
Page 85
YouTube Channel! http://www.youtube.com/PeplinkChannel Contact Us: Address: Hong Kong Office Sales United States Office A5, 5/F, HK Spinners http://www.pepwave.com/contact/sales/ 800 West El Camino Real, Industrial Building, Phase 6, Mountain View Support 481 Castle Peak Road, CA 94040 http://www.pepwave.com/contact/ Cheung Sha Wan,...
Need help?
Do you have a question about the Surf SOHO and is the answer not in the manual?
Questions and answers