peplink Pepwave Surf SOHO User Manual

For more information, please visit peplink.com

Hide thumbs

page of 151

/ 151
Contents
Table of Contents
Bookmarks

Table of Contents

Quick Links

Download this manual

Pepwave Surf SOHO

User Manual

Pepwave Product:

Surf SOHO

Pepwave Firmware 8.1.3

August 2021

& T

OPYRIGHT

RADEMARKS

logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their

respective owners.

Table of Contents

Need help?

Do you have a question about the Pepwave Surf SOHO and is the answer not in the manual?

Questions and answers

Summary of Contents for peplink Pepwave Surf SOHO

Page 1 Pepwave Surf SOHO User Manual Pepwave Product: Surf SOHO Pepwave Firmware 8.1.3 August 2021 & T OPYRIGHT RADEMARKS Specifications are subject to change without notice. Copyright © 2020 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their...
Page 2: Table Of Contents
Table of Contents Introduction and Scope Glossary Product Features Firewall Outbound Policy Other Supported Features Pepwave Surf SOHO Router Overview Panel Appearance LED Indicators Advanced Feature Summary Drop-in Mode and LAN Bypass: Transparent Deployment QoS: Clearer VoIP USB Modem Built-In Remote User VPN Support...
Page 3 Outbound and Inbound Firewall Rules Intrusion Detection and DoS Prevention Content Blocking Routing Protocols OSPF & RIPv2 Remote User Access L2TP with IPsec OpenVPN PPTP Authentication Methods Miscellaneous Settings RADIUS Server Certificate Manager Service Forwarding Service Passthrough Grouped Networks https://www.peplink.com Copyright @ 2021 Peplink...
Page 4 InControl Configuration Feature Add-ons Reboot Tools Ping Traceroute Test Wake-on-LAN WAN Analysis Status Device Active Sessions Client List OSPF & RIPv2 PepVPN Status Event Log WAN Quality Usage Reports Appendix A: Restoration of Factory Defaults https://www.peplink.com Copyright @ 2021 Peplink...
Page 5 Appendix B: Declaration https://www.peplink.com Copyright @ 2021 Peplink...
Page 6: Introduction And Scope
This manual covers setting up a Surf SOHO router and provides an introduction to their features and usage. Tips Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction. https://www.peplink.com Copyright @ 2021 Peplink...
Page 7: Glossary
Quality of Service SNMP Simple Network Management Protocol Transmission Control Protocol User Datagram Protocol Virtual Private Network VRRP Virtual Router Redundancy Protocol Wide Area Network WINS Windows Internet Name Service WLAN Wireless Local Area Network https://www.peplink.com Copyright @ 2021 Peplink...
Page 8: Product Features
DHCP server on LAN ● Extended DHCP option support ● Static routing rules ● VLAN on LAN support ● Site-to-Site VPN ● 256-bit AES Encryption ● Dynamic Routing ● Pre-shared key authentication ● PPTP/L2TP/Open VPN - VPN server https://www.peplink.com Copyright @ 2021 Peplink...
Page 9: Firewall
Authentication and accounting by RADIUS server for web admin ● Syslog ● SIP passthrough ● PPTP packet pass through ● Event log ● Active sessions ● Client list ● UPnP / NAT-PMP ● Real-time, hourly, daily, and monthly bandwidth usage reports and charts https://www.peplink.com Copyright @ 2021 Peplink...
Page 10: Pepwave Surf Soho Router Overview
Pepwave Surf SOHO Router Overview Panel Appearance https://www.peplink.com Copyright @ 2021 Peplink...
Page 11 9.17 x 5.6 x 1.18 inch 233 x 142 x 30 mm Weight 0.86 pounds 388 grams Operating Temperature -14° to 113°F -10° to 45°C Humidity 15% – 95% (non-condensing) Certifications FCC, CE, RoHS Warranty 1-Year Limited Warranty https://www.peplink.com Copyright @ 2021 Peplink...
Page 12: Led Indicators
Blinking Data is being transferred Orange LED No data is being transferred or port is not connected Port type Auto MDI/MDI-X ports Wi-Fi Signal No connection Signal strength Wi-Fi signal strength (low, medium, and high) https://www.peplink.com Copyright @ 2021 Peplink...
Page 13: Advanced Feature Summary
As your organization grows, it may require more bandwidth, but modifying your network can be tedious. In Drop-in Mode, you can conveniently install your Peplink router without making any changes to your network. For any reason your Peplink router looses power, the LAN Bypass will safely and automatically bypass the Peplink router to resume your original network connection.
Page 14: Usb Modem
USB Modem For increased WAN diversity, plug in a USB LTE modem as a backup. Peplink routers are compatible with over modem types. Built-In Remote User VPN Support Use OpenVPN or L2TP with IPsec to safely and conveniently connect remote clients to your private network. L2TP with IPsec is supported by most devices, but legacy devices can also connect using PPTP.
Page 15: Wi-Fi Air Monitoring
The SP Default Configuration feature written in the updated KB article allows for the provisioning of custom made settings (a.k.a. InControl2 configuration) via the Ethernet LAN port and is ideal for those wanting to do a bulk deployment of many Peplink devices. Note: If you would like to use this feature, please contact your purchase point (Eg.VAD).
Page 16: Installation
Start a web browser on a computer that is connected with the Pepwave Surf SOHO through the LAN. To connect to the web admin of the Pepwave Surf SOHO, enter the following LAN IP address in the address field of the web browser: https://192.168.50.1...
Page 17 You must change the default password on the first successful logon. Password requirements are: A minimum of 10 lower AND upper case characters, including at least 1 number. When HTTP is selected, the URL will be redirected to HTTPS by default. https://www.peplink.com Copyright @ 2021 Peplink...
Page 18 After successful login, the Dashboard of the web admin interface will be displayed The Dashboard shows current WAN, LAN, and Wi-Fi AP statuses. Here, you can change WAN connection priority and https://www.peplink.com Copyright @ 2021 Peplink...
Page 19 Configuration changes (e.g. WAN, LAN, admin settings, etc.) will take effect only after clicking the Save button at the bottom of each page. The Apply Changes button causes the changes to be saved and applied. https://www.peplink.com Copyright @ 2021 Peplink...
Page 20: Speedfusion Cloud
SpeedFusion Cloud With Peplink products, your device is able to connect to SpeedFusion Cloud without the use of a second endpoint. This service has wide access to a number of SpeedFusion endpoints hosted from around the world, providing your device with unbreakable connectivity wherever you are.*...
Page 21 Go to activate.speedfusion.com and select the type of SpeedFusion Cloud service, “Via Free 30-days Trial” or “Via Care Plans”, that you would like to activate. Next, register or login to your account. Select the devices that you wish to activate SpeedFusion Cloud on and Click ACTIVATE. https://www.peplink.com Copyright @ 2021 Peplink...
Page 22: Enable Speedfusion Cloud
From System > Features Add-ons, paste the license key into the window and click on Activate once you have received the license key. Enable SpeedFusion Cloud Enable SpeedFusion Cloud from SpeedFusion Cloud > Choose Cloud Location. https://www.peplink.com Copyright @ 2021 Peplink...
Page 23 Choose Automatic > Click on the green tick button to confirm the change. Click on Apply Changes to save the change. https://www.peplink.com Copyright @ 2021 Peplink...
Page 25 By default, the router will build a SpeedFusion tunnel to the SpeedFusion Cloud https://www.peplink.com Copyright @ 2021 Peplink...
Page 26 If you are running a latency sensitive service like video streaming or VOIP, a WAN Smoothing sub-tunnel can be created. Navigate to Speedfusion Cloud > Choose a cloud location > SFC. A Speedfusion tunnel configuration window will pop out. Click on the + sign to create the WAN Smoothing sub-tunnel. https://www.peplink.com Copyright @ 2021 Peplink...
Page 28 Click on Save and Apply Changes to save the configuration. Now, the router has 2 Speedfusion tunnels to the Speedfusion Cloud. https://www.peplink.com Copyright @ 2021 Peplink...
Page 30 Create an outbound policy to steer the internet traffic to go into Speedfusion Cloud. Please go to Advanced > Outbound Policy, click on Add Rule to create a new outbound policy. https://www.peplink.com Copyright @ 2021 Peplink...
Page 31: Connect Clients To Cloud
SpeedFusion Cloud provides a convenient way to route the LAN client to the cloud. From SpeedFusion Cloud > Connect Clients to Cloud. Choose a client from the drop down list > Click + > Save > Apply Changes. https://www.peplink.com Copyright @ 2021 Peplink...
Page 32: Link Wi-Fi To Cloud
SpeedFusion Cloud provides a convenient way to route the Wi-Fi client to the cloud from SpeedFusion Cloud > Link Wi-Fi to Cloud. This option is available for Balance 20X, Balance 30 Pro, and Balance One. https://www.peplink.com Copyright @ 2021 Peplink...
Page 33 Create a new SSID for SpeedFusion Cloud. The new SSID will inherit all settings from one of the existing SSIDs including the Security Policy. Then click Save follow by Apply Changes. SpeedFusion Cloud SSID will be shown on Dashboard. https://www.peplink.com Copyright @ 2021 Peplink...
Page 34: Optimize Cloud Application
SpeedFusion Cloud > Optimize Cloud Application. Select a Cloud application to route through SpeedFusion Cloud from the drop down list > Click > Save > Apply Changes. Click the to remove a selected Cloud application to route through SpeedFusion Cloud. https://www.peplink.com Copyright @ 2021 Peplink...
Page 35: Configuring The Lan Interface(S)
You can delete that VLAN by clicking the red “X” Clicking any of the existing LAN interfaces (or creating a new one) will show the following: IP Settings IP Address The IP address and subnet mask of the Pepwave router on the LAN. https://www.peplink.com Copyright @ 2021 Peplink...
Page 36 This allows the device to inject Option 82 with Router Name information before forwarding the DHCP DHCP Option 82 Request packet to a PepVPN peer, such that the DHCP Server can identify where the request originates from. https://www.peplink.com Copyright @ 2021 Peplink...
Page 37 00:AA:BB:CC:DD:EE. Press to create a new record. Press remove a record. Reserved client information can be imported from the Client List, located at Status>Client List. For more details, please refer to Section 22.3. https://www.peplink.com Copyright @ 2021 Peplink...
Page 38 WAN's connection method and IP address will be automatically updated. When drop-in mode is enabled, the LAN and the WAN for drop-in mode ports will be bridged. Traffic between the LAN https://www.peplink.com Copyright @ 2021 Peplink...
Page 39 To connect to hosts on the LAN (email notification, remote syslog, etc.), the default gateway address will be used. The SOHO will listen for this IP address when LAN hosts access services provided by the SOHO(web admin access from the WAN, DNS proxy, etc.). https://www.peplink.com Copyright @ 2021 Peplink...
Page 40 Every IP Address in the Local Network has a corresponding unique Virtual IP Address for NAT. One-to-One NAT Traffic originating from the Local Network to remote connections will be SNAT'ed and behave like coming from the defined Virtual Network. https://www.peplink.com Copyright @ 2021 Peplink...
Page 41 This table is for defining custom local DNS records. A static local DNS record consists of a host name Local DNS and IP address. When looking up the host name from the LAN to LAN IP of the Pepwave Surf SOHO, Records the corresponding IP address will be returned.
Page 42: Port Settings
When a static speed is set, you may choose whether to advertise its speed to the peer device. Auto is selected by default. You can choose not to advertise the port speed if the port has difficulty negotiating with the peer device. https://www.peplink.com Copyright @ 2021 Peplink...
Page 43: Configuring The Wan Interface
With a customized choice of WAN connections, the router will only collect the WAN Quality information of those selected WAN connections. Important Note Connection details will be changed and become effective immediately after clicking the Save and Apply button. https://www.peplink.com Copyright @ 2021 Peplink...
Page 44: Wan > Ethernet Wan
The connection method and details are determined by, and can be obtained from the ISP. Routing Mode This field shows that NAT (network address translation) will be applied to the traffic routed over this WAN connection. IP Forwarding is available when you click the link in the help text. https://www.peplink.com Copyright @ 2021 Peplink...
Page 45: Wan > Physical Interface Settings
The MSS (maximum segment size) is computed from the MTU minus 40 bytes for TCP over IPv4. If the MTU is set to Auto, the MSS will also be set automatically. By default, MSS is https://www.peplink.com Copyright @ 2021 Peplink...
Page 46: Wan > Health Check Settings
HTTP: The router will perform an HTTP request to the specified URLs. Optional with strings to match. SmartCheck: Available in Cellular/USB WAN only, SmartCheck initiates when outbound traffic goes unresponded for 10 seconds. When SmartCheck initiates, it will run an ICMP health check. https://www.peplink.com Copyright @ 2021 Peplink...
Page 47: Wan > Bandwidth Allowance Monitor
Start Day: This option allows you to define which day in the month each billing cycle begins. Monthly Allowance: This field is for defining the maximum bandwidth usage allowed for the WAN connection each month. https://www.peplink.com Copyright @ 2021 Peplink...
Page 48: Wan > Additional Ip Address Settings
WAN will be automatically reported to the DNS service provider. Either upon a change in IP addresses or every 23 days without link reconnection, the Pepwave Surf SOHO will connect to the dynamic DNS service provider to update the provider’s IP address records.
Page 49: Wi-Fi Wan And Usb Wifi Network Connection
DNS service providers. (Note: Peplink is not affiliated with DNS-O-Matic.) Wi-Fi WAN and USB WiFi Network connection To access Wi-Fi WAN settings, click Network>WAN>Wireless network connection. The WiFi-WAN and USB WiFi Network connection configuration is similar to the Ethernet WAN configuration, but has a few unique options that are shown in this section.
Page 50 This option is to specify whether the Wi-Fi WAN will connect to any open mode access points it finds. Mode AP Beacon Miss Counter Client devices will disconnect from the AP when this amount of beacons is missed Channel Scan Configure Channel Scan Interval in ms. Interval https://www.peplink.com Copyright @ 2021 Peplink...
Page 51: Wan > Wifi Connection Profiles
Wi-Fi Connection Profile Settings Network Name Enter a name to represent this Wi-Fi connection. (SSID) Security This option allows you to select which security policy is used for this wireless network. Available options: ● Open https://www.peplink.com Copyright @ 2021 Peplink...
Page 52 Preferred BSSID Configure the BSSID; the BSSID is the MAC address of the wireless access point (WAP) Connection Choose DHCP or Static IP Method DNS servers Configure the DNS servers that this WAN connection should use https://www.peplink.com Copyright @ 2021 Peplink...
Page 53: Wan > Signal Threshold Settings
Good, reliable signal strength -67 dBm Minimum signal strength for applications that require very reliable, timely delivery of data packets. -70 dBm Not strong; goof for soet internet browsing and email -80 dBm Unreliable -90 dBm Unusable https://www.peplink.com Copyright @ 2021 Peplink...
Page 54: Pepvpn
All data can be routed over the VPN using the 256-bit AES encryption standard. Each profile specifies the settings for creating a VPN connection with one remote Pepwave or Peplink device. The Pepwave Surf Soho supports 2 PepVPN remote peers per device (5 with upgrade license). https://www.peplink.com...
Page 55 To configure PepVPN, navigate to Advanced > PepVPN and select New Profile. The example below had allPepVPN advanced features enabled. https://www.peplink.com Copyright @ 2021 Peplink...
Page 57 Names (Optional) are also accepted. This field is optional. With this field filled, the Pepwave Surf SOHO will initiate connection to each of the remote IP addresses until it succeeds in making a connection. If the field is empty, the Pepwave Surf SOHO will wait for connection from the remote peer.
Page 58: Pepvpn > Send All Traffic
PepVPN connection fail. Handshake Port and Link Failure Detection Time Handshake Port Click the icon to customize the handshake port (TCP) used to initialize the PepVPN connection. The handshake uses TCP port 32015 by default. https://www.peplink.com Copyright @ 2021 Peplink...
Page 59: Outbound Policy Management
VPN subnets will be routed to its corresponding VPN peer. You can create custom Priority or Enforced rules and move them above the bar to override the PepVPN Routes. Upon disabling the Expert Mode, all rules above the bar will be deleted. https://www.peplink.com Copyright @ 2021 Peplink...
Page 60 Adding new Custom Outbound Policies To add new custom rules (Outbound Policies) select Add Rule. The Pepwave Surf SOHO supports 2 algorithms for the Outbound Policies, Enforced and Priority. The options for Outbound policies are: Default Outbound Policy Settings Service Name This field is for specifying a name to represent this profile.
Page 61 Connection Terminated sessions will go through all the rules again to determine the outgoing connection. Recovery When Source is a MAC address, this option will be disabled automatically. Default: Disable https://www.peplink.com Copyright @ 2021 Peplink...
Page 62: Port Forwarding
Servers settings. Alternatively, the Protocol Selection Tool drop-down menu can be used to automatically fill in the protocol and a single port number of common Internet services (e.g. HTTP, HTTPS, etc.). After selecting an item from the Protocol Selection Tool drop-down menu, the protocol and port number remain https://www.peplink.com Copyright @ 2021 Peplink...
Page 63 (Please see below for details on the Servers setting.) Range Mapping: traffic that is received by the Pepwave router via the specified protocol at the specified port range is forwarded via a different port to the servers specified by the Servers setting. https://www.peplink.com Copyright @ 2021 Peplink...
Page 64: Upnp / Nat-Pmp Settings
In the example above, the UPnP device is running. When the UPnP device is disconnected, the router will suspend the service and incoming traffic will be dropped (without error/notification message). The UPnP rule will remain for an interval after the UPnP device is disconnected before being removed. https://www.peplink.com Copyright @ 2021 Peplink...
Page 65: Nat Mappings
Network The IP network refers to all private IP addresses and ranges managed by the LAN host. The system maps these addresses to a number of public IP addresses (specified below) to facilitate outbound traffic. https://www.peplink.com Copyright @ 2021 Peplink...
Page 66 Outbound Policy section. Also note that WAN connections in drop-in mode or IP forwarding mode are not shown here. Click Save to save the settings when configuration has been completed. Important Note Inbound firewall rules override the Inbound Mappings settings. https://www.peplink.com Copyright @ 2021 Peplink...
Page 67: Qos
Select an application by choosing a supported application, or by defining a custom application manually. The priority preference of supported applications is placed at the top of the table. Custom applications are at the bottom. https://www.peplink.com Copyright @ 2021 Peplink...
Page 68 By default, this feature is enabled. PepVPN Tra c Optimization Enable this option to grant PepVPN traffic the highest priority when WAN is congested. https://www.peplink.com Copyright @ 2021 Peplink...
Page 69: Firewall
The firewall functionality of Pepwave routers supports the selective filtering of data traffic in both directions: ● Outbound (LAN to WAN) ● Inbound (WAN to LAN) ● Internal Network (VLAN to VLAN) The firewall also supports the following functionality: ● Intrusion detection and DoS prevention ● Web blocking https://www.peplink.com Copyright @ 2021 Peplink...
Page 70: Outbound And Inbound Firewall Rules
Outbound and Inbound Firewall Rules The outbound and inbound firewall settings are located at Advanced>Firewall>Access Rules. Click Add Rule to display the following screen: Inbound firewall settings are located at Advanced>Firewall>Access Rules>Inbound Firewall Rules. https://www.peplink.com Copyright @ 2021 Peplink...
Page 71 Click Add Rule to display the following screen: Internal Network Firewall settings are located at Advanced>Firewall>Access Rules. https://www.peplink.com Copyright @ 2021 Peplink...
Page 72 Alternatively, the Protocol Selection Tool drop-down menu can be used to automatically fill in the protocol and port number of common Internet services (e.g., HTTP, HTTPS, etc.) After selecting an item from the Protocol Selection Tool drop-down menu, the protocol and port number https://www.peplink.com Copyright @ 2021 Peplink...
Page 73 Rules are matched from top to bottom. If a connection matches any one of the upper rules, the matching process will stop. If none of the rules match, the Default rule will be applied. By default, the Default rule is set as Allow for Outbound, Inbound and Internal Network access. https://www.peplink.com Copyright @ 2021 Peplink...
Page 74: Intrusion Detection And Dos Prevention
When this feature is enabled, the Pepwave router will detect and prevent the following kinds of intrusions and denial-of-service attacks. ● Port scan ○ NMAP FIN/URG/PSH ○ Xmas tree ○ Another Xmas tree ○ Null scan ○ SYN/RST ○ SYN/FIN ● SYN flood prevention ● Ping flood attack prevention https://www.peplink.com Copyright @ 2021 Peplink...
Page 75: Content Blocking
The device will inspect and look for blocked domain names on all HTTP and HTTPS traffic. Exempted Subnets With the subnet defined in the field, clients on the particular subnet(s) will be exempted from the Web blocking rules. https://www.peplink.com Copyright @ 2021 Peplink...
Page 76: Routing Protocols
Click enable, and enter the ip address and port (if applicable) where your remote syslog server is located. Routing Protocols The Pepwave Surf SOHO supports OSPF ,RIPv2 and BGP dynamic routing protocols. OSPF & RIPv2 Click the Advanced tab from the top bar, and then click the Routing Protocols > OSPF & RIPv2 item on the sidebar to reach the following menu.
Page 77 Choose an authentication method, if one is used, from this drop-down menu. Available options are MD5 and Text. Enter the authentication key next to the drop-down menu. Interfaces Determine which interfaces this group will use to listen to and deliver RIPv2 packets. https://www.peplink.com Copyright @ 2021 Peplink...
Page 78 All the networks belonging to interfaces that have OSPF or RIPv2 enabled will be advertised even if they are not selected in this table. Static Route Enable this option to advertise LAN static routes over OSPF & RIPv2. Static routes that match the Excluded Networks table will not be advertised. Advertising https://www.peplink.com Copyright @ 2021 Peplink...
Page 79: Bgp
The interface in which the BGP neighbor is located. Autonomous The Autonomous System Number (ASN) assigned to this profile. System Neighbor BGP Neighbors and their details. IP address The IP address of the Neighbor. The Neighbor's ASN. Autonomous https://www.peplink.com Copyright @ 2021 Peplink...
Page 80 Enable this option to advertise static LAN routes. Static routes that match the Excluded Networks table will not be advertised. Advertising Custom Route Additional routes to be advertised to the BGP Neighbor. Advertising When this box is checked, every learnt OSPF route will be advertised. Advertise OSPF https://www.peplink.com Copyright @ 2021 Peplink...
Page 81 This field allows for the selection of the filter mode for route export. Filter Mode None: All BGP routes will be accepted. Accept: Routes in "Restricted Networks" will be accepted, routes not in the list will be rejected. https://www.peplink.com Copyright @ 2021 Peplink...
Page 82: Remote User Access
A remote-access VPN connection allows an individual user to connect to a private business network from a remote location using a laptop or desktop computer connected to the Internet. Networks routed by a Peplink router can be remotely accessed via OpenVPN, L2TP with IPsec or PPTP. To configure this feature, navigate to Network > Remote User Access and choose the required VPN type.
Page 83: Openvpn
Connect to Select the VLAN network for remote users to enable remote user access on. Network Authentication Determine the method of authenticating remote users User accounts: This setting allows you to define the Remote User Accounts. https://www.peplink.com Copyright @ 2021 Peplink...
Page 84 Enter the matching LDAP server details to allow for LDAP server authentication. Radius Server: Enter the matching Radius server details to allow for Radius server authentication. Active Directory: Enter the matching Active Directory details to allow for Active Directory server authentication. https://www.peplink.com Copyright @ 2021 Peplink...
Page 85: Miscellaneous Settings
1812. Secret This field is for entering the secret key for communicating to the RADIUS server. Accounting Port This setting specifies the UDP destination port for accounting requests. By default, the port number is 1813. https://www.peplink.com Copyright @ 2021 Peplink...
Page 86 1812. Secret This field is for entering the secret key for communicating to the RADIUS server. Accounting Port This setting specifies the UDP destination port for accounting requests. By default, the port number is 1813. https://www.peplink.com Copyright @ 2021 Peplink...
Page 87: Certificate Manager
WAN (Client and CA) and web admin SSL for extra security. Read the following knowledgebase article for full instructions on how to create and import a self-signed certificate: https://forum.peplink.com/t/how-to-create-a-self-signed-certificate-and-import-it-to-a-peplink-product/ Service Forwarding Service forwarding settings are located at Advanced>Misc. Settings>Service Forwarding. https://www.peplink.com Copyright @ 2021 Peplink...
Page 88 SMTP server if the chosen WAN has enabled forwarding. If the forwarding is disabled for a WAN connection, SMTP connections for the WAN will be simply be forwarded to the connection’s original destination. Web Proxy Forwarding https://www.peplink.com Copyright @ 2021 Peplink...
Page 89: Service Passthrough
After clicking the enable checkbox, enter your TCP port for traffic heading to the router, and then specify the IP Address and Port of the server you wish to forward to the service to. Service Passthrough Service passthrough settings can be found at Advanced>Misc. Settings>Service Passthrough. https://www.peplink.com Copyright @ 2021 Peplink...
Page 90 You may add more custom data ports that your IPsec system uses by checking Define custom ports. If the VPN contains IPsec site-to-site VPN traffic, check Route IPsec Site-to-Site VPN and choose the WAN connection to route the traffic to. https://www.peplink.com Copyright @ 2021 Peplink...
Page 91: Grouped Networks
Click save when you have finished adding the required networks. The grouped network “accounting” can now be used to configure a group policy or firewall rule. SIM Toolkit The SIM Toolkit, accessible via Advanced>Settings>SIM Toolkit supports two functionalities, USSD and SMS. https://www.peplink.com Copyright @ 2021 Peplink...
Page 92 Enter your USSD code under the USSD Code text field and click Submit. You will receive a confirmation. To check the SMS response, click Get. After a few minutes you will receive a response to your USSD code https://www.peplink.com Copyright @ 2021 Peplink...
Page 93 The SMS option allows you to read SMS (text) messages that have been sent to the SIM in your Peplink routers. https://www.peplink.com Copyright @ 2021 Peplink...
Page 94: Wireless Ssid
Click Add to create a new network profile, or click the existing network profile to modify its settings. SSID Settings SSID This setting specifies the Router SSID that Wi-Fi clients will see when scanning. Enable Click the drop-down menu to choose predefined schedules as your starting point. Please note that https://www.peplink.com Copyright @ 2021 Peplink...
Page 95 Force - Clients capable of 5 GHz operation are only offered with 5 GHz frequency. Prefer - Clients capable of 5 GHz operation are encouraged to associate with 5 GHz frequency. If the clients insist to attempt on 2.4 GHz frequency, 2.4 GHz frequency will be offered. Default: Disable https://www.peplink.com Copyright @ 2021 Peplink...
Page 96 Frames that are protected include Disassociation, Deauthentication and QoS Action. Fast Transition When WPA2/WPA3 - (Personal / Enterprise) is selected, the Fast Transition option is the standard defined for 801.11r to reduce the association process when it roams from one Access Point to https://www.peplink.com Copyright @ 2021 Peplink...
Page 97 Specifies the IP address or hostname of the RADIUS server host. Secret This field is for entering the secret key for communicating to the RADIUS server. Authentication Port This setting specifies the UDP destination port for authentication requests. By default, the port https://www.peplink.com Copyright @ 2021 Peplink...
Page 98 The settings allow administrator to control access to the SSID based on Firewall Rules. Available options are Disable,Lockdown - Block all except... and Flexible -Allow all except... Firewall Exceptions Create Firewall Rules based on Port, IP Network, MAC address or Domain Name https://www.peplink.com Copyright @ 2021 Peplink...
Page 99: Settings
Settings Navigating to AP>Settings displays a screen similar to the one shown below: https://www.peplink.com Copyright @ 2021 Peplink...
Page 100 Set the minimum packet size for your access point to send an RTS using the RTS/CTS handshake. Setting 0 disables this feature. Fragmentation Determines the maximum size (in bytes) that each packet fragment will be broken down into. Set 0 to disable fragmentation. Threshold https://www.peplink.com Copyright @ 2021 Peplink...
Page 101: Ap > Status
This option allows you to enable frame aggregation to increase transmission throughput. - Advanced feature. Click the button on the top right-hand corner to activate. AP > Status Access Point A detailed breakdown of data usage for each AP is available at AP > Access Point. https://www.peplink.com Copyright @ 2021 Peplink...
Page 102 For easier network management, you can give each client a name and designate its location. You can also designate which firmware pack (if any) that this client will follow, as well as the channels that the client will broadcast on. https://www.peplink.com Copyright @ 2021 Peplink...
Page 103 SSID, at that point in time. On the Data Usage by menu, you can display the information by SSID or by AP send/receive rate. Click the Event tab next to Wireless Usage to view a detailed event log for that particular device. https://www.peplink.com Copyright @ 2021 Peplink...
Page 104: Wireless Ssid
Wireless SSID In-depth wireless SSID reports are available under AP > Wireless SSID. Click the blue arrow on any SSID to obtain more detailed information on usage for each SSID. https://www.peplink.com Copyright @ 2021 Peplink...
Page 105: Wireless Client
Here, you will be able to see your network’s heaviest users as well as search for specific users. Clicking on the icon bookmarks the specific user, and clicking on the icon displays additional details about the user https://www.peplink.com Copyright @ 2021 Peplink...
Page 107: Mesh / Wds
Mesh / WDS allows you to monitor the status of your wireless distribution system (WDS) or mesh network. Track activity by MAC address by navigating to AP > Mesh / WDS. This table shows the detailed information of each AP, including protocol, transmit rate (sent / received), signal strength, and duration. https://www.peplink.com Copyright @ 2021 Peplink...
Page 108: Nearby Device
Hovering over a device’s MAC address will result in a popup with information on how the device was detected. Clicking on the icons will mark the device and move them to the table of identified devices. https://www.peplink.com Copyright @ 2021 Peplink...
Page 109: Event Log
This event log displays all of the activity on your AP network, down to the client level. Use a filter to search for events by MAC address, SSID, AP Serial Number, or AP Profile name. Click View Alerts to see only alerts, and click the More… for additional records. https://www.peplink.com Copyright @ 2021 Peplink...
Page 110: System Settings
This field allows you to specify a new user password. Once the user password is set, the read-only user User Password feature will be enabled. Confirm User This field allows you to verify and confirm the new user password. Password https://www.peplink.com Copyright @ 2021 Peplink...
Page 111 This setting specifies the UDP destination port for accounting requests. Accounting Secret This field is for entering the secret key for accessing the accounting server. Authentication This option specifies the time value for authentication timeout Timeout ● TACACS+ https://www.peplink.com Copyright @ 2021 Peplink...
Page 112 ● LAN/WAN If LAN/WAN is chosen, the WAN Connection Access Settings form will be displayed. Web Admin Port This field is for specifying the port number on which the web admin interface can be accessed. https://www.peplink.com Copyright @ 2021 Peplink...
Page 113: Firmware
IC2 if you are using that to manage your firmware upgrades. A manual upgrade using the GA firmware posted on the site may also be recommended or required for a couple of reasons. All of the Peplink/Pepwave GA firmware can be found here Navigate to the relevant product line (ie.
Page 114: Time
The InControl method Described in this knowledgebase article on our forum. Time Time Settings enables the system clock of the Pepwave router to be synchronized with a specified time server. Time settings are located at System>Time. https://www.peplink.com Copyright @ 2021 Peplink...
Page 115: Schedule
Enable and disable different functions (such as WAN connections, outbound policy, and firewalls at different times, based on a user-scheduled configuration profile. The settings for this are located at System > Schedule Enable scheduling, and then click on your schedule name or on the New Schedule button to begin. https://www.peplink.com Copyright @ 2021 Peplink...
Page 116: Email Notification
Click on the desired times to enable features at that time period. You can hold your mouse for faster entry. Email Notiﬁcation Email notification functionality provides a system administrator with up-to-date information on network status. The settings for configuring email notifications are found at System>Email Notification. https://www.peplink.com Copyright @ 2021 Peplink...
Page 117 This setting specifies the email address the Pepwave router will use to send reports. Address Recipient’s Email This setting specifies the email address(es) to which the Pepwave router will send email notifications. For multiple recipients, separate each email using the enter key. Address https://www.peplink.com Copyright @ 2021 Peplink...
Page 118 After Test Email Notification is clicked, you will see this screen to confirm the settings: Click Send Test Notification to confirm. In a few seconds, you will see a message with detailed test results. https://www.peplink.com Copyright @ 2021 Peplink...
Page 120: Event Log
This setting specifies the IP address or hostname of the URL log server. This setting is to enable event logging at the specified log server. Session Logging Session Logging This setting specifies the IP address or hostname of the Session log server. Host https://www.peplink.com Copyright @ 2021 Peplink...
Page 121: Snmp
This option allows you to enable SNMP version 3. SNMP Trap This option allows you to enable SNMP Trap To add an SNMP community, click the Add SNMP Community button in the Community Name table; the following screen will be displayed: https://www.peplink.com Copyright @ 2021 Peplink...
Page 122 When MD5 or SHA is selected, an entry field will appear for the password. Privacy Protocol This setting specifies via a drop-down menu one of the following valid privacy protocols: ● None ● ● When AES or DES is selected, an entry field will appear for the password. https://www.peplink.com Copyright @ 2021 Peplink...
Page 123: Incontrol
InControl InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl.
Page 124: Feature Add-Ons
Some Pepwave routers have features that can be activated upon purchase. Once the purchase is complete, you will receive an activation key. Enter the key in the Activation Key field, click Activate, and then click Apply Changes. https://www.peplink.com Copyright @ 2021 Peplink...
Page 125: Reboot
Number of times, to a maximum number of 10 times. Packet Size can be set to a maximum of 1472 bytes. The ping utility is located at System>Tools>Ping, illustrated below: https://www.peplink.com Copyright @ 2021 Peplink...
Page 126: Traceroute Test
The traceroute test tool traces the routing path to the destination through a particular Ethernet interface. The traceroute test utility is located at System>Tools>Traceroute. A system administrator can use the traceroute utility to analyze the connection path of a LAN/WAN connection. https://www.peplink.com Copyright @ 2021 Peplink...
Page 127: Wake-On-Lan
Wake-on-LAN Peplink routers can send special “magic packets” to any client specified from the Web UI. To access this feature, navigate to System > Tools > Wake-on-LAN. Select a client from the drop-down list and click Send to send a “magic packet”...
Page 128 The client side has a few more settings that can be changed. Make sure that the Control Port matches what’s been entered on the server side. Select the WAN(s) that will be used for testing and enter the Servers WAN IP address. Once all of the options have been set, click the Start Test button. https://www.peplink.com Copyright @ 2021 Peplink...
Page 129 The test output will show the Data Streams Parameters, the Throughput as a graph, and the Results. https://www.peplink.com Copyright @ 2021 Peplink...
Page 130 The test can be run again once it’s complete by clicking the Start button or you can click Close and change the parameters for the test. https://www.peplink.com Copyright @ 2021 Peplink...
Page 131: Status
This shows the firmware version this device is currently running. PepVPN Version This shows the current PepVPN version. Modem Support This shows the modem support version. For a list of supported modems, click Modem Support List. https://www.peplink.com Copyright @ 2021 Peplink...
Page 132 End User License Agreement (EULA), follow the Legal link Important Note If you encounter issues and would like to contact the Pepwave Support Team, please download the diagnostic report file and attach it along with a description of your issue. https://www.peplink.com Copyright @ 2021 Peplink...
Page 133: Active Sessions
This screen also indicates the number of sessions initiated by each WAN port. In addition, you can see which clients are initiating the most sessions. You can also perform a filtered search for specific sessions. You can filter by subnet, port, protocol, and interface. To perform a search, navigate to Status>Active Sessions>Search. https://www.peplink.com Copyright @ 2021 Peplink...
Page 134 This Active Sessions section displays the active inbound/outbound sessions of each WAN connection on the Pepwave router. A filter is available to sort active session information. Enter a keyword in the field or check one of the WAN connection boxes for filtering. https://www.peplink.com Copyright @ 2021 Peplink...
Page 135: Client List
DHCP reservation table or defined by users), current download and upload rate, and MAC address. Clients can be imported into the DHCP reservation table by clicking the button on the right. You can update the record after import by going to Network>LAN. https://www.peplink.com Copyright @ 2021 Peplink...
Page 136: Ospf & Ripv2
PepVPN Status shows the current connection status of each connection profile and is displayed at Status> PepVPN/SpeedFusion. Click on the corresponding peer name to explore the WAN connection(s) status and subnet information of each VPN peer. https://www.peplink.com Copyright @ 2021 Peplink...
Page 137 Click button for a chart displaying real-time throughput, latency, and drop-rate information for each WAN connection. https://www.peplink.com Copyright @ 2021 Peplink...
Page 138 When pressing the button the following menu will appear: The Speedfusion status page shows all related information about the PepVPN connection. https://www.peplink.com Copyright @ 2021 Peplink...
Page 139 This screen also allows you to run PepVPN Tests allowing throughput tests. Peplink also published a whitepaper about Speedfusion which can be downloaded from the following url: http://download.peplink.com/resources/whitepaper-speedfusion-and-best-practices-2019.pdf https://www.peplink.com Copyright @ 2021 Peplink...
Page 140: Event Log
Event log information is located at Status>Event Log The log section displays a list of events that has taken place on the Pepwave router. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log. https://www.peplink.com Copyright @ 2021 Peplink...
Page 141: Wan Quality
WAN Quality WAN Quality allows you to select each WAN and view current WAN Quality. Detailed information can be seen when selecting a point on the graph. https://www.peplink.com Copyright @ 2021 Peplink...
Page 142: Usage Reports
The Data transferred since installation table indicates how much network traffic has been processed by the device since the first bootup. The Data transferred since last reboot table indicates how much network traffic has been processed by the device since the last boot up. https://www.peplink.com Copyright @ 2021 Peplink...
Page 143 Hourly This page shows the hourly bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the desired connection to check from the drop-down menu. https://www.peplink.com Copyright @ 2021 Peplink...
Page 144 Click on a date to view the client bandwidth usage of that specific date. This feature is not available if you have selected to view the bandwidth usage of only a particular WAN connection. The scale of the graph can be set to display megabytes (MB) or gigabytes (GB). https://www.peplink.com Copyright @ 2021 Peplink...
Page 145 Click the first two rows to view the client bandwidth usage in the last two months. This feature is not available if you have chosen to view the bandwidth of an individual WAN connection. The scale of the graph can be set to display megabytes (MB) or gigabytes (GB). https://www.peplink.com Copyright @ 2021 Peplink...
Page 146: Appendix A: Restoration Of Factory Defaults
Appendix A: Restoration of Factory Defaults To restore the factory default settings on your Pepwave Surf SOHO unit, follow the steps below: 1. Locate the reset button on the back panel of the Pepwave Surf SOHO. 2. With a paperclip, press and keep the reset button pressed.
Page 147 Hold for approximately 20 seconds for factory reset (Note: The LED status light blinks in RED 3 times and release the button, all WAN/LAN port lights start blinking) After the Pepwave Surf SOHO finishes rebooting, the factory default settings will be restored. Important Note All previous configurations and bandwidth usage data will be lost after restoring factory default settings.
Page 148 CE Statement for Pepwave Routers ( Surf SOHO ) https://www.peplink.com Copyright @ 2021 Peplink...
Page 150 This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body. contact as: https://www.peplink.com/ https://www.peplink.com Copyright @ 2021 Peplink...
Page 151 USB WAN Modem Port Specification Surf SOHO Series Surf SOHO Output Rating 5V DC, 2A https://www.peplink.com Copyright @ 2021 Peplink...

peplink Pepwave Surf SOHO User Manual

Introduction and Scope

Glossary

Product Features

Pepwave Surf SOHO Router Overview

Advanced Feature Summary

Installation

Connecting to the Web Admin Interface

Speedfusion Cloud

Configuring the LAN Interface(S)

Configuring the WAN Interface

Pepvpn

Port Forwarding

NAT Mappings

Qos

Firewall

Routing Protocols

Remote User Access

Miscellaneous Settings

AP > Status

System Settings

Tools

Status

Appendix A: Restoration of Factory Defaults

Quick Links

Need help?

Questions and answers

Related Manuals for peplink Pepwave Surf SOHO

Summary of Contents for peplink Pepwave Surf SOHO

Table of Contents