Product Features Supported Network Features Firewall Captive Portal Outbound Policy AP Controller Other Supported Features Pepwave MAX Mobile Router Overview MAX 700 MAX HD2 MAX HD2 IP67 MAX HD2 mini MAX HD Dome MAX Transit / MAX Transit Duo (CAT-12)
Page 3
MAX BR1 Mini MAX BR1 Mini Core MAX BR1 M2M MAX BR1 ENT MAX BR1 Pro MAX BR1 Pro 5G MAX Hotspot MAX BR1 IP55 MAX BR2 IP55 MAX BR1 IP67 MAX On-The-Go SpeedFusion Engine UBR LTE Advanced Feature Summary Drop-in Mode and LAN Bypass: Transparent Deployment QoS: Clearer VoIP Per-User Bandwidth Control...
Page 4
SpeedFusion Cloud Activate SpeedFusion Cloud Service Enable SpeedFusion Cloud Connect Clients to Cloud Link Wi-Fi to Cloud Optimize Cloud Application Configuring the LAN Interface(s) Basic Settings Port Settings Captive Portal Configuring the WAN Interface(s) Ethernet WAN DHCP Connection Static IP Connection PPPoE Connection L2TP Connection GRE Connection...
Page 5
The Pepwave Router Behind a NAT Router IPsec VPN IPsec VPN Settings GRE Tunnel Outbound Policy Outbound Policy Adding Rules for Outbound Policy Algorithm: Weighted Balance Algorithm: Persistence Algorithm: Enforced Algorithm: Priority Algorithm: Overflow Algorithm: Least Used Algorithm: Lowest Latency...
Page 6
URL Logging Routing Protocols OSPF & RIPv2 Remote User Access L2TP with IPsec OpenVPN PPTP Authentication Methods Miscellaneous Settings High Availability Certificate Manager Service Forwarding SMTP Forwarding Web Proxy Forwarding DNS Forwarding Custom Service Forwarding Service Passthrough UART GPS Forwarding Ignition Sensing Ignition Sensing installation GPIO Menu...
Page 7
Wireless Client Nearby Device Event Log Toolbox System Settings Admin Security Firmware Time Schedule Email Notification Event Log SNMP SMS Control InControl Configuration Feature Add-ons Reboot Tools Ping Traceroute Test PepVPN Test Wake-on-LAN CLI (Command Line Interface Support) Status Device GPS Data Active Sessions Client List...
This manual covers setting up Pepwave routers and provides an introduction to their features and usage. Tips Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction! https://youtu.be/13M-JHRAICA...
Glossary The following terms, acronyms, and abbreviations are frequently used in this manual: Term Definition 3rd generation standards for wireless communications (e.g., HSDPA) 4th generation standards for wireless communications (e.g., LTE) DHCP Dynamic Host Configuration Protocol Domain Name System EVDO Evolution-Data Optimized FQDN Fully Qualified Domain Name...
Internet connections can be bonded together using our SpeedFusion technology. This allows better reliability, larger bandwidth, and increased wireless coverage compared to use only one 4G LTE modem. Below is a list of supported features on Pepwave routers. Features vary by model. For more information, please see peplink.com/products. Supported Network Features 1.1.1...
1.1.2 ● Wi-Fi AP ● Ethernet LAN ports ● DHCP server on LAN ● Extended DHCP option support ● Static routing rules ● VLAN on LAN support 1.1.3 ● PepVPN with SpeedFusion ● PepVPN performance analyzer ● X.509 certificate support ●...
● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms AP Controller 1.1.7 ● Configure and manage Pepwave AP devices ● Review the status of connected APs 1.1.8 ● Quality of service for different applications and custom protocols ●...
Other Supported Features ● User-friendly web-based administration interface ● HTTP and HTTPS support for web admin interface (default redirection to HTTPS) ● Configurable web administration port and administrator password ● Firmware upgrades, configuration backups, ping, and traceroute via web admin interface ●...
Pepwave MAX Mobile Router Overview MAX 700 2.1.1 Panel Appearance 2.1.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready...
Page 16
Wi-Fi AP and Wi-Fi WAN Indicators Disconnected Blinking slowly Connecting to network Wi-Fi WAN Blinking Connected to network with traffic Connected to network without traffic Disabled Blinking slowly Enabled but no client connected Wi-Fi AP Blinking Connected to network with traffic Client(s) connected to wireless network LAN and Ethernet WAN Ports Green LED...
MAX HD2 For certification information, please refer to Appendix B: Declaration 2.2.1 Panel Appearance...
Page 18
2.2.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Wi-Fi AP and Wi-Fi WAN Indicators Disabled Intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi WAN / Wi-Fi AP...
MAX HD2 IP67 2.3.1 Panel Appearance 2.3.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready...
MAX HD2 mini 2.4.1 Panel Appearance 2.4.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular 1 / Blinking slowly Connecting to network(s)
LAN and Ethernet WAN Ports POE Enabled Green LED POE Disabled Blinking 10 / 100 / 1000 Mbps and Data is transferring Orange LED No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports MAX HD Dome 2.5.1 Panel Appearance...
MAX Transit / MAX Transit Duo (CAT-12) 2.6.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready...
Page 24
Cellular Indicators Disabled or no SIM card inserted Cellular 1 / Blinking slowly Connecting to network(s) Cellular 2* Green Connected to network(s) MAX-TST_DUO Wi-Fi Indicators Wi-Fi AP is turn off Wi-Fi Blinking Wi-Fi AP is turn on LAN and Ethernet WAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected...
MAX Transit (CAT-18) 2.7.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready...
Page 26
Cellular Indicators Disabled or no SIM card inserted Cellular 1 / Blinking slowly Connecting to network(s) Cellular 2* Green Connected to network(s) MAX-TST_DUO Wi-Fi Indicators Wi-Fi AP is turn off Wi-Fi Blinking Wi-Fi AP is turn on LAN and Ethernet WAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected...
MAX Transit 5G 2.8.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular 1 / Blinking slowly Connecting to network(s)
LAN and Ethernet WAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected Port is connected without traffic Orange LED Blinking Data is transferring Port is not connected Port Type Auto MDI/MDI-X ports MAX Transit Mini 2.9.1 Panel Appearance 2.9.2...
Blinking Connected to wireless network(s) with traffic Connected to wireless network(s) without traffic Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s) Green Connected to network(s) 2.10 MAX Transit Pro E 2.10.1 Panel Appearance 2.10.2 LED indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing...
LAN 1 Port POE Enabled Green LED POE Disabled Blinking 10 / 100 / 1000 Mbps and Data is transferring Orange LED No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports LAN 2-3 Port and Ethernet WAN Port 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected...
Page 31
2.11.2 LED indicators Status indicated in the front panel is as follows: LED Indicator OFF – Power off Power LED GREEN – Power on LAN 1 Port ON – POE Enabled Green LED OFF - POE Disabled Blinking – 10 / 100 / 1000 Mbps with activity Orange LED OFF –...
Port Type Auto MDI/MDI-X ports Console & USB Ports Console Port Reserved for engineering use USB Ports For connecting 4G/3G USB modems 2.12 MAX BR1 ESN 2.12.1 Panel Appearance 2.12.2 LED indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Status...
Green Ready Wi-Fi Indicators Disabled intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi Blinking Connected to wireless network(s) with traffic Connected to wireless network(s) without traffic Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s) Green Connected to network(s) 2.13 MAX HD2 and HD4 with MediaFast...
Page 34
2.13.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Wi-Fi AP and Wi-Fi WAN Indicators Disabled Intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi WAN / Wi-Fi AP...
Page 35
Port is not connected Port Type Auto MDI/MDI-X ports...
2.14 MAX HD4 2.14.1 Panel Appearance 2.14.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators...
Page 37
System initializing Booting up or busy Status Blinking red Boot up error Green Ready Wi-Fi AP and Wi-Fi WAN Indicators Disabled Intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi WAN / Wi-Fi AP Blinking Connected to wireless network(s) with traffic Connected to wireless network(s) without traffic Cellular Indicators Disabled or no SIM card inserted...
2.15 MAX HD4 MBX (CAT-12) For certification information, please refer to Appendix B: Declaration 2.15.1 Panel Appearance 2.15.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green...
Page 39
Cellular and Wi-Fi WAN Indicators Disabled Intermittent Wi-Fi WAN / Blinking slowly Connecting to wireless network(s) Cellular 1 / Blinking Connected to wireless network(s) with traffic Cellular 2 Connected to wireless network(s) without traffic LAN and Ethernet WAN Ports Green LED 10 / 100 / 1000 Mbps Blinking Data is transferring...
2.16 MAX HD2/4 MBX (CAT-18) 2.16.1 Panel Appearance 2.16.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Wi-Fi AP and Wi-Fi WAN Indicators Disabled Intermittent Wi-Fi WAN / Blinking slowly...
LAN and Ethernet WAN Ports Green LED 10 / 100 / 1000 Mbps Blinking Data is transferring Orange LED No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports 2.17 MAX MBX Mini 2.17.1 Panel Appearance 2.17.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: LED Indicator...
WAN Ports GREEN – 1000 Mbps Right LED ORANGE – 100 Mbps OFF – 10 Mbps Solid – Port is connected without traffic Left LED Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports Console &...
The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready 2.19 MAX BR1 Classic For certification information, please refer to Appendix B: Declaration 2.19.1 Panel Appearance...
Page 44
2.19.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Wi-Fi Indicators Disabled intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi Blinking Connected to wireless network(s) with traffic...
2.20 MAX BR1 MK2 For certification information, please refer to Appendix B: Declaration 2.20.1 Panel Appearance 2.20.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready...
Page 46
Wi-Fi Indicators Disabled intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi Blinking Connected to wireless network(s) with traffic Connected to wireless network(s) without traffic Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s) Green Connected to network(s) LAN and Ethernet WAN Ports 1000 Mbps Green LED...
2.21 MAX BR1 Slim 2.21.1 Panel Appearance 2.21.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Wi-Fi Indicators Disabled intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi...
LAN and Ethernet WAN Ports 100 Mbps Green LED 10 Mbps Port is connected without traffic Orange LED Blinking Data is transferring Port is not connected Port Type Auto MDI/MDI-X ports 2.22 MAX BR1 Mini For certification information, please refer to Appendix B: Declaration 2.22.1 Panel Appearance...
Page 49
2.22.2 LED Indicators Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s) Green Connected to network(s)
Wi-Fi Indicators Disabled intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi Blinking Connected to wireless network(s) with traffic Connected to wireless network(s) without traffic 2.23 MAX BR1 Mini Core 2.23.1 Panel Appearance...
2.23.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s) Green Connected to network(s)
Page 52
2.24.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators...
Page 53
System initializing Booting up or busy Status Blinking red Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s) Green Connected to network(s) LAN and Ethernet WAN Ports 100 Mbps Green LED 10 Mbps Port is connected without traffic Orange LED...
2.25 MAX BR1 ENT 2.25.1 Panel Appearance 2.25.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s)
2.26 MAX BR1 Pro 2.26.1 Panel Appearance 2.26.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular Blinking Slowly Connecting to network(s)
LAN and Ethernet WAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected Port is connected without traffic Orange LED Blinking Data is transferring No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports 2.27 MAX BR1 Pro 5G...
Page 57
Cellular Indicators Disabled or no SIM card inserted Cellular Blinking Slowly Connecting to network(s) Green Connected to network(s) Wi-Fi Indicators Disabled intermittent Wi-Fi / Wi-Fi Connected to wireless network(s) LAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected Port is connected without traffic Orange LED Blinking...
2.28 MAX Hotspot 2.28.1 Panel Appearance 2.28.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: LAN and Ethernet WAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected Port is connected without traffic Orange LED Blinking Data is transferring...
2.29 MAX BR1 IP55 2.29.1 Panel Appearance 2.29.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready LAN and Ethernet WAN Ports 1000Mbps Green LED 10 Mbps / 100 Mbps or port is not connected...
Page 60
Cellular Indicators Cellular Disabled or no SIM card inserted Blinking Connecting to network(s) in Standby Mode Green Connected to network(s) in Priority 1 (Active) LAN and WAN Indicators Powered-on device connected to Ethernet port Green No device connected to Ethernet port...
2.30 MAX BR2 IP55 2.30.1 Panel Appearance 2.30.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking red Boot up error Green Ready Wi-Fi Indicators Disabled Intermittent Blinking slowly Connecting to wireless network(s) Wi-Fi...
LAN and Ethernet WAN Ports 1000Mbps Green LED 10 Mbps / 100 Mbps or port is not connected Port is connected without traffic Orange LED Blinking Data is transferring Port is not connected Port Type Auto MDI/MDI-X ports 2.31 MAX BR1 IP67 2.31.1 Panel Appearance...
2.32 MAX On-The-Go 2.32.1 Panel Appearance 2.32.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Cellular Indicators Modem is not attached to the port Green Modem is attached to the port Wi-Fi Indicators Disconnected from AP Wi-Fi Green Connected to AP...
Port Type Auto MDI/MDI-X ports 2.33 SpeedFusion Engine 2.33.1 Panel Appearance 2.34 UBR LTE 2.34.1 Panel Appearance...
Page 65
2.34.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators System initializing Booting up or busy Status Blinking Red Boot up error Green Ready LAN and Ethernet WAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected Port is connected without traffic Orange LED Blinking...
2.35 PDX 2.35.2 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators No battery installed Charging Status Blinking red Low Battery Green Full Charged...
Advanced Feature Summary Drop-in Mode and LAN Bypass: Transparent Deployment As your organization grows, it may require more bandwidth, but modifying your network can be tedious. In Drop-in Mode, you can conveniently install your Peplink router without making any changes to your network. For any reason your Peplink router looses power, the LAN Bypass will safely and automatically bypass the Peplink router to resume your original network connection.
Per-User Bandwidth Control With per-user bandwidth control, you can define bandwidth control policies for up to 3 groups of users to prevent network congestion. Define groups by IP address and subnet, and set bandwidth limits for every user in the group. High Availability via VRRP When your organization has a corporate requirement demanding the highest availability with no single point of failure, you can deploy two Peplink routers in...
USB Modem and Android Tethering For increased WAN diversity, plug in a USB LTE modem as a backup. Peplink routers are compatible with over 200 modem types. You can also tether to smartphones running Android 4.1.X and above. Compatible with: MAX 700, HD2 (all variants except IP67), HD4 (All variants) Use OpenVPN or L2TP with IPsec to safely and conveniently connect remote clients to your private network.
SIM-card USSD support Cellular-enabled routers can now use USSD to check their SIM card’s balance, process pre- paid cards, and configure carrier-specific services. Click here for full instructions on using USSD KVM Virtualization KVM is a virtualisation module that allows administrators using our routers to host a large range of virtual machines.
Note: To enable this feature, go to https://<Device's IP>/cgi-bin/MANGA/support.cgi 3.11 Wi-Fi Air Monitoring Pepwave routers support Wi-Fi “Air Monitoring Mode” which used to troubleshoot remotely and proactively monitor Wi-Fi and WAN performance. The report can be viewed under InControl 2 >...
With another Ethernet cable or a USB modem/Wi-Fi antenna/PC Card/Express Card, connect to one of the WAN ports on the Pepwave router. Repeat the same procedure for other WAN ports. Connect the power adapter to the power connector on the rear panel of the...
Configuring the Network Environment To ensure that the Pepwave router works properly in the LAN environment and can access the Internet via WAN connections, please refer to the following setup procedures: ● LAN configuration For basic configuration, refer to Section 8, Connecting to the Web Admin Interface.
The Pepwave MAX BR1 requires four screws for wall mounting. Car Mount The Pepwave MAX700/HD2 can be mounted in a vehicle using the included mounting brackets. Place the mounting brackets by the two sides and screw them onto the device.
Connecting to the Web Admin Interface Start a web browser on a computer that is connected with the Pepwave router through the LAN. To connect to the router’s web admin interface, enter the following LAN IP address in the address field of the web browser: http://192.168.50.1...
Page 83
After successful login, the Dashboard of the web admin interface will be displayed. The Dashboard shows current WAN, LAN, and Wi-Fi AP statuses. Here, you can change WAN connection priority and switch on/off the Wi-Fi AP. For further information on setting up these connections, please refer to Sections 8 and 9.
SpeedFusion Cloud With Peplink products, your device is able to connect to SpeedFusion Cloud without the use of a second endpoint. This service has wide access to a number of SpeedFusion endpoints hosted from around the world, providing your device with unbreakable connectivity wherever you are.* *SpeedFusion Cloud is supported in firmware version 8.1.0 and above.
Page 85
account. Select the devices that you wish to activate SpeedFusion Cloud on and Click ACTIVATE. From System > Features Add-ons, paste the license key into the window and click on Activate once you have received the license key.
Enable SpeedFusion Cloud Enable SpeedFusion Cloud from SpeedFusion Cloud > Choose Cloud Location. Choose Automatic > Click on the green tick button to confirm the change. Click on Apply Changes to save the change...
Page 88
By default, the router will build a SpeedFusion tunnel to the SpeedFusion Cloud...
Page 90
If you are running a latency sensitive service like video streaming or VOIP, a WAN Smoothing sub-tunnel can be created. Navigate to Speedfusion Cloud > Choose a cloud location > SFC. A Speedfusion tunnel configuration window will pop out. Click on the + sign to create the WAN Smoothing sub-tunnel.
Page 92
Click on Save and Apply Changes to save the configuration. Now, the router has 2 Speedfusion tunnels to the Speedfusion Cloud.
Page 93
Create an outbound policy to steer the internet traffic to go into Speedfusion Cloud. Please go to Advanced > Outbound Policy, click on Add Rule to create a new outbound policy.
Connect Clients to Cloud SpeedFusion Cloud provides a convenient way to route the LAN client to the cloud. From SpeedFusion Cloud > Connect Clients to Cloud.
Choose a client from the drop down list > Click + > Save > Apply Changes. Link Wi-Fi to Cloud SpeedFusion Cloud provides a convenient way to route the Wi-Fi client to the cloud from SpeedFusion Cloud > Link Wi-Fi to Cloud. This option is available for Balance 20X, Balance 30 Pro, and Balance One.
Page 96
Create a new SSID for SpeedFusion Cloud. The new SSID will inherit all settings from one of the existing SSIDs including the Security Policy. Then click Save follow by Apply Changes. SpeedFusion Cloud SSID will be shown on Dashboard.
Optimize Cloud Application Optimize Cloud Application allows you to route Internet traffic to SpeedFusion Cloud based on the application. Go to SpeedFusion Cloud > Optimize Cloud Application.
Clicking on any of the existing LAN interfaces (or creating a new one) will show the following : IP Settings IP Address The IP address and subnet mask of the Pepwave router on the LAN. Network Settings Name Enter a name for the LAN.
Page 99
Layer 2 PepVPN Bridging The remote network of the selected PepVPN profiles will be bridged with this local PepVPN Profiles LAN, creating a Layer 2 PepVPN, they will be connected and operate like a single to Bridge LAN, and any broadcast or multicast packets will be sent over the VPN. Remote Network Enable this option if you want to block network traffic between the remote networks, this will not affect the connectivity between them and this local LAN.
Page 100
When this setting is enabled, the DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP address DHCP Server via DHCP. The Pepwave router’s DHCP server can prevent IP address collision on the LAN. DHCP Server Enable logging of DHCP events in the eventlog by selecting the checkbox.
Page 101
To define an extended DHCP option, click the Add button, choose the option to define and enter its value. For values that are in IP address list format, you can enter one IP address per line in the provided text area input control. Each option can be defined once only.
Page 102
In case of a network address conflict with remote peers (i.e. PepVPN / IPsec VPN / IP Forwarding WAN are considered as remote connections), you can define Virtual Network Mapping to resolve it. Note: OSPF & RIPv2 settings should be updated as well to avoid advertising conflicted networks. For further details on virtual network mapping watch this video: https://youtu.be/C1FMdZCn3Z8 Virtual Network Mapping...
Page 103
DNS Proxy Settings To enable the DNS proxy feature, check this box, and then set up the feature at Network>LAN>DNS Proxy Settings. A DNS proxy server can Enable enabled serve requests originating from LAN/PPTP/SpeedFusion peers. Requests are forwarded to the DNS servers/resolvers defined for each WAN connection.
Page 104
connections’ resolvers. If all of the selected connections are down, queries will be forwarded to all resolvers on healthy WAN connections. Finally, if needed, configure Bonjour forwarding, Apple’s zero configuration networking protocol. Once VLAN configuration is complete, click Save to store your changes. Bonjour Forwarding Settings Enable Check this box to turn on Bonjour forwarding.
Page 105
IP or MAC address changes. After successfully setting up the Pepwave MAX as part of the network using drop-in mode, it will, depending on model, support one or more WAN connections. Some MAX units also support multiple WAN connections after activating drop-in mode, though a SpeedFusion license may be required to activate more than one WAN port.
Page 106
Drop-in Mode Settings Drop-in mode eases the installation of the Pepwave MAX on a live network between Enable the existing firewall and router, such that no configuration changes are required on existing equipment. Check the box to enable the drop-in mode feature.
Page 107
The following settings are displayed when creating a new LAN or editing an existing LAN. IP Settings IP Address & Enter the Pepwave router’s IP address and subnet mask values to be used on the Subnet Mask LAN. Network Settings...
Page 108
When this setting is enabled, the Pepwave router’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP address via DHCP. The Pepwave router’s DHCP server can prevent DHCP Server IP address collisions on the LAN.
Page 109
clients will be displayed at Status>WINS Clients. BOOTP Check this box to enable BOOTP on older networks that still require it. In addition to standard DHCP options (e.g. DNS server address, gateway address, subnet mask), you can specify the value of additional extended DHCP options, as defined in RFC 2132.
Port Settings To configure port settings, navigate to Network > Port Settings On this screen, you can enable specific ports, as well as determine the speed of the LAN ports, whether each port is a trunk or access port, can well as which VLAN each link belongs to, if any.
Captive Portal The captive portal serves as a gateway that clients have to pass if they wish to access the internet using your router. To configure, navigate to Network>LAN>Captive Portal. Captive Portal Settings Check Enable and then, optionally, select the LANs/VLANs that will use the Enable captive portal.
Page 112
Captive Portal. Clients accessing these domains and IP addresses Clients will not be redirected to the splash page. Here, you can choose between using the Pepwave router’s built-in captive portal Splash Page and redirecting clients to a URL you define.
Page 113
Portal Customization Logo Image Click the Choose File button to select a logo to use for the built-in portal. Message If you have any additional messages for your users, enter them in this field. Terms & If you would like to use your own set of terms and conditions, please enter them Conditions here.
Configuring the WAN Interface(s) WAN Interface settings are located at Network>WAN. To reorder WAN priority, drag on the appropriate WAN by holding the left mouse button, move it to the desired priority (the first one would be the highest priority, the second one would be lower priority, and so on), and drop it by releasing the mouse button.
Ethernet WAN Health Check Settings This field specifies the Health Check method to be used for this WAN connection. ● Disabled - The WAN connection is always considered to be up and will not be treated as down for any IP routing errors. ●...
Page 116
Retries a connection as up again. Bandwidth Allowance Monitor Settings Bandwidth Check the box Enable to enable bandwidth usage monitoring on this WAN Allowance connection for each billing cycle. When this option is not enabled, bandwidth usage of each month is still being tracked but no action will be taken. Monitor If Email Notification is enabled, you will receive an email notification when usage hits 75% and 95% of the monthly allowance.
Dynamic DNS Settings This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: ● changeip.com ● Dynamic DNS dyndns.org ● Service Provider no-ip.org ● tzo.com ● DNS-O-Matic Select Disabled to disable this feature. See Section 9.5 for configuration details. 9.1.1 DHCP Connection There are four possible connection methods:...
Page 118
DHCP Connection Settings Routing Mode If your service provider's DHCP server requires you to supply a hostname Hostname value upon acquiring an IP address, you may enter the value here. If your service provider does not provide you with the value, you can safely bypass (Optional) this option.
Page 119
When Use the following DNS server address(es) is selected, you may enter custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. When this IP Passthrough option is active, after the ethernet WAN connection is up, the router's DHCP server will offer the connection's IP address to one LAN client.
This field refers to the maximum download speed. Download Default weight control for outbound traffic will be adjusted according to this Bandwidth value. 9.1.2 Static IP Connection The static IP connection method is suitable if your ISP provides a static IP address to connect directly.
Page 121
Static IP Settings NAT allows substituting the real address in a packet with a mapped address that Routing Mode is routable on the destination network. By clicking the help icon in this field, you can display the IP Forwarding option, if your network requires it. IP Address / These settings allow you to specify the information required in order to Subnet Mask /...
9.1.3 PPPoE Connection This connection method is suitable if your ISP provides a login ID/password to connect via PPPoE. PPPoE Settings NAT allows substituting the real address in a packet with a mapped address Routing Mode that is routable on the destination network. By clicking the help icon in this field, you can display the IP Forwarding option, if your network requires it.
If your ISP provides a PPPoE IP address, enter it here. IP Address (Optional) Note: Leave this field blank unless it is provided by your ISP. Each ISP may provide a set of DNS servers for DNS lookups. This setting specifies the DNS (Domain Name System) servers to be used when a DNS lookup is routed through this connection.
Page 124
L2TP Settings NAT allows substituting the real address in a packet with a mapped address that is Routing Mode routable on the destination network. By clicking the help icon in this field, you can display the IP Forwarding option, if your network requires it. Enter the required information in these fields in order to connect via L2TP to your L2TP Username / ISP.
connection. (The DNS servers are obtained along with the WAN IP address assigned from the PPPoE server.) When Use the following DNS server address(es) is selected, you can enter custom DNS server addresses for this WAN connection into the DNS server 1 and DNS server 2 fields.
Page 126
WAN IP Address These settings allow you to specify the information required in order to communicate / Subnet Mask / on the Internet via a fixed Internet IP address. The information is typically determined by and can be obtained from the ISP. Default Gateway Remote GRE This field allows you to enter the IP address of the remote GRE.
This is a unique number assigned to a SIM card used in a cellular device. Some Pepwave routers support both HSPA and EV-DO. For Sprint or Verizon Wireless EV-DO users, a unique MEID identifier code (in hexadecimal format) is used by the MEID carrier to associate the EV-DO device with the user.
Page 128
Connection Settings Connection Indicate a name you wish to give this WAN connection Name This option allows you to select the routing method to be used in routing IP frames via the WAN connection. The mode can be either NAT (Network Address Translation) or IP Forwarding.
Page 129
If this is checked, the connection will disconnect when idle after the configured Time Idle Disconnect value. This option is disabled by default. Cellular Settings IIndicate which SIM card this cellular WAN will use. Only applies to cellular WAN with redundant SIM cards.
Page 130
Preferred SIM If “Both SIMs” were selected on the above field, then you can designate the priority of the SIM card slots here. Card Remote SIM Settings You may need to enable the remote SIM Host settings in the Remote SIM management, see the section 22.10 or Appendix B for more details on FusionSIM.
Page 131
in making connection, you may select Custom to enter your carrier’s APN, Login, Password, and Dial Number settings manually. The correct values can be obtained from your carrier. The default and recommended setting is Auto. APN / Login / When Auto is selected, the information in these fields will be filled automatically. Select Password / Custom to customize these parameters.
Page 132
Health Check Settings This setting allows you to specify the health check method for the cellular connection. Health Check Available options are Disabled, Ping, DNS Lookup, HTTP, and SmartCheck. The Method default method is DNS Lookup. See Section 10.4 for configuration details. If a health check test cannot be completed within the specified amount of time, the test Timeout will be treated as failed.
● DNS-O-Matic Select Disabled to disable this feature. See Section 9.5 for configuration details. This field is for specifying the Maximum Transmission Unit value of the WAN connection. An excessive MTU value can cause file downloads stall shortly after connected. You may consult your ISP for the connection's MTU value.
Page 134
standby). This setting specifies the maximum transmission unit. By default, MTU is set to Custom 1440. You may adjust the MTU value by editing the text field. Click Default to restore the default MTU value. Select Auto and the appropriate MTU value will be automatically detected.
Page 135
Roaming Connect to Any This option is to specify whether the Wi-Fi WAN will connect to any open mode Open Mode AP access points it finds. Beacon Miss This sets the threshold for the number of missed beacons. Counter Bandwidth Allowance Monitor If enabled, you will be notified by email when usage hits 75% and 95% of the monthly allowance.
Page 136
configured as Disabled or SmartCheck. Health Check Disabled When Disabled is chosen in the Method field, the WAN connection will always be considered as up. The connection will NOT be treated as down in the event of IP routing errors. Health Check Method: PING ICMP ping packets will be issued to test the connectivity with a configurable target IP address or hostname.
Page 137
This setting specifies the number of consecutive successful ping/DNS lookup responses that must be received before the Pepwave MAX treats a previously down Recovery Retries WAN connection as up again. By default, Recover Retries is set to 3. Using the default setting, a WAN connection that is treated as down will be considered as up again upon receiving three consecutive successful ping/DNS lookup responses.
Page 138
Due to dynamic DNS service providers’ policies, a dynamic DNS host expires automatically when the host record has not been not updated for a long time. Therefore, the Pepwave MAX performs an update every 23 days, even if a WAN’s IP address did not change.
9.3.1 Creating Wi-Fi Connection Profiles You can manually create a profile to connect to a Wi-Fi connection. This is useful for creating a profile for connecting to hidden-SSID access points. Click Network>WAN>Details>Create Profile… to get started. This will open a window similar to the one shown below Wi-Fi Connection Profile Settings Type Select whether the network will connect automatically or manually.
WAN Health Check To ensure traffic is routed to healthy WAN connections only, the Pepwave router can periodically check the health of each WAN connection. The health check settings for each WAN connection can be independently configured via Network>WAN>Details. Health Check Settings This setting specifies the health check method for the WAN connection.
Page 141
This setting specifies the number of consecutive ping/DNS lookup timeouts after Health Check which the Pepwave router will treat the corresponding WAN connection as down. Retries Default health retries is set to 3. Using the default Health Retries setting of 3, the...
Automatic Public DNS Server Check on DNS Test Failure When the health check method is set to DNS Lookup and health checks fail, the Pepwave router will automatically perform DNS lookups on public DNS servers. If the tests are successful, the WAN may not be down, but rather the target DNS server malfunctioned.
Page 143
DNS service providers’ policy, a dynamic DNS host will automatically expire if the host record has not been updated for a long time. Therefore the Pepwave router performs an update every 23 days, even if a WAN’s IP address has not changed.
10 Advanced Wi-Fi Settings Wi-Fi settings can be configured at Advanced>Wi-Fi Settings (or AP>Settings on some models). Note: Menus displayed can vary by model AP Settings You can select the wireless networks for 2.4 GHz or 5 GHz separately for each SSID SSID.
Page 145
AP Settings (part 2) This option allows you to specify whether 802.11b and/or 802.11g client Protocol association requests will be accepted. Available options are 802.11ng and 802.11na. By default, 802.11ng is selected. Available options are 20 MHz, 40 MHz, and Auto (20/40 MHz) . Default is Auto Channel Width (20/40 MHz), which allows both widths to be used simultaneously.
Page 146
Advanced AP Settings This field specifies the VLAN ID to tag to management traffic, such as communication traffic between the AP and the AP Controller. The value is zero Management VLAN by default, which means that no VLAN tagging will be applied. Note: Change this value with caution as alterations may result in loss of connection to the AP Controller.
Page 147
This field is for setting the wait time to receive an acknowledgement packet before ACK Timeout performing a retransmission. By default, this field is set to 48 µs. Frame Aggregation This option allows you to enable frame aggregation to increase transmission throughput.
MediaFast Configuration MediaFast settings can be configured from the Advanced menu. 11.1 Setting Up MediaFast Content Caching To access MediaFast content caching settings, select Advanced>Cache Control MediaFast Enable Click the checkbox to enable MediaFast content caching. Choose to Cache on all domains, or enter domain names and then choose Domains / IP either Whitelist (cache the specified domains only) or Blacklist (do not cache Addresses...
The Secure Content Caching menu operates identically to the MediaFast menu, except it is secure content cachting accessible through https://. In order for Mediafast devices to cache and deliver HTTPS content, every client needs to have necessary certificates installed*. *See https://forum.peplink.com/t/certificate-installation-for-mediafast-https-caching/ Cache Control Check these boxes to cache the listed content types or leave boxes unchecked to disable...
Page 150
help to preserve network bandwidth during busy times and keep costs down. To access MediaFast content prefetching settings, select Advanced >Prefetch Schedule. Prefetch Schedule Settings Name This field displays the name given to the scheduled download. Status Check the status of your scheduled download here. Next Run These fields display the date and time of the next and most recent occurrences of Time/Last Run...
Page 151
Simply provide the requested information to create your schedule. Clear Web Cache To clear all cached content, click this button. Note that this action cannot be undone. Clear Statistics To clear all prefetch and status page statistics, click this button.
To configure a website or application as content, follow the steps below. Configure a website for ContentHub This option allows you to sync a website to the Pepwave router. This website will then be published with the specified domain from the router itself and makes the content available to...
Page 154
Schedule Active Checking the box toggles the activation of the content. Type Select the type of content: Website or Application. Protocol Configure the protocol to be used: HTTP, HTTPS or both. Domain/Pat Enter the URL for the ContenHub to use as the domain name for client access (such as http://mytest.com).
Page 155
To access the content, open a browser in the MFA’s client and enter the domain details that were configured earlier (such as http://mytest.com).
Configure an application for ContentHub MediaFast routers allow you to configure and publish any application from the router itself by using one of the supported frameworks below: ● Python (version 2.7.12) ● Ruby (version 2.3.3) ● Node.js (version 6.9.2) Install the desired framework under “Package Manager” as shown below: After installing the framework, change the ”Type”...
Page 157
The setting is the same as the Website type (refer to the description in the section above). Application type content need to be packed as explained below: 1. Implement two bash script files, start.sh and stop.sh in the root folder, to start and stop your application.
Pepwave routers with MediaFast, such as the MAX HD2 and the MAX HD4. Due to the nature of Docker and its unlimited variables, this feature is supported by Pepwave up to the point of creating a running Docker Container.
For detailed configuration instructions, refer to our knowledge base articles: 1. How to install a Virtual Machine on Peplink/Pepwave - MediaFast/ContentHub Routers https://forum.peplink.com/t/how-to-install-a-virtual-machine-into-peplinkpepwave- mediafastcontenthub-routers 2. How to Install Virtual Machine with USB storage on Peplink/Pepwave - MediaFast/ContentHub Routers https://forum.peplink.com/t/how-to-install-virtual-machine-with-usb-storage-into- peplinkpepwave-mediafastcontenthub-routers...
SpeedFusion license to increase the number of site-to-site connections allowed. Pepwave routers can aggregate all WAN connections’ bandwidth for routing SpeedFusion traffic. Unless all the WAN connections of one site are down, Pepwave routers can keep the VPN up and running.
Click the New Profile button to create a new VPN connection profile for making a VPN connection to a remote Pepwave or Peplink device via the available WAN connections. Each profile is for making a VPN connection with one remote Pepwave or Peplink Device.
Page 162
Select from By Remote ID Only, Preshared Key, or X.509 to specify the method Authentication the Pepwave MAX will use to authenticate peers. When selecting By Remote ID Only, be sure to enter a unique peer ID number in the Remote ID field.
Page 163
Dynamic-DNS host names are also accepted. Address / Host Names This field is optional. With this field filled, the Pepwave MAX will initiate connection (Optional) to each of the remote IP addresses until it succeeds in making a connection. If the field is empty, the Pepwave MAX will wait for connection from the remote peer.
Page 164
To enable Layer 2 Bridging between PepVPN profiles, navigate to Network>LAN>Basic Settings>*LAN Profile Name* and refer to instructions in section 9.1 WAN Connection Priority If your device supports it, you can specify the priority of WAN connections to be used for making VPN connections. WAN connections set to OFF will never be used. Only available WAN connections with the highest priority will be used.
Page 165
Outbound Policy/PepVPN Outbound Custom Rules Some models allow you to set outbound policy and custom outbound rules from Advanced>PepVPN. See Section 14 for more information on outbound policy settings. PepVPN Local ID The local ID is a text string to identify this local unit when establishing a VPN connection. When creating a profile on a remote unit, this local ID must be entered in the remote unit's Remote ID field.
TCP port 32015 and UDP port 4500 for establishing VPN connections. If you have a firewall in front of your Pepwave devices, you will need to add firewall rules for these ports and protocols to allow inbound and outbound traffic to pass through the firewall.
Page 167
If one or more WAN connections on Unit A can accept VPN connections (by means of port forwarding or not), while none of the WAN connections on the peer Unit B can do so, you should enter all of Unit A’s public IP addresses or hostnames into Unit B’s Remote IP Addresses / Host Names field.
Page 168
IP Subnets Must Be Unique Among VPN Peers The entire interconnected SpeedFusion network is a single non-NAT IP network. Avoid duplicating subnets in your sites to prevent connectivity problems when accessing those subnets.
NAT router. Click the New Profile button to create new IPsec VPN profiles that make VPN connections to remote Pepwave, Cisco, or Juniper routers via available WAN connections. To edit any of the profiles, click on its associated...
Page 171
IPsec VPN Settings Name This field is for specifying a local name to represent this connection profile. When this box is checked, this IPsec VPN connection profile will be enabled. Active Otherwise, it will be disabled. Connect Upon Check this box and select a WAN to connect to this VPN automatically when the Disconnection specified WAN is disconnected.
Page 172
Encapsulation This defines the peer authentication pre-shared key used to authenticate this VPN Pre-shared Key connection. The connection will be up only if the pre-shared keys on each side match. Remote Available only when X.509 Certificate is chosen as the Authentication method, Certificate (pem this field allows you to paste a valid X.509 certificate.
WAN Connection Priority WAN Connection Select the appropriate WAN connection from the drop-down menu. 16.2 GRE Tunnel Generic Routing Encapsulation (GRE) is a tunneling protocol that can encapsulate a wide variety of network layer protocols inside virtual point-to-point links over an Internet Protocol network.
Page 174
GRE Tunnel Profile Settings Name This field is for specifying a name to represent this GRE Tunnel connection profile. When this box is checked, this GRE Tunnel connection profile will be enabled. Active Otherwise, it will be disabled. Remote GRE IP This field is for entering the remote GRE’s IP address Address Tunnel Local IP...
Outbound Policy Pepwave routers can flexibly manage and load balance outbound traffic among WAN connections. Important Note Outbound policy is applied only when more than one WAN connection is active The settings for managing and load balancing outbound traffic are located at Advanced>Outbound Policy or Advanced>PepVPN, depending on the model.
Page 176
Normal Application Compatibility ● Custom Note that some Pepwave routers provide only the Send All Traffic To setting here. See Section 12.1 for details Outbound Policy Settings Outbound traffic from a source LAN device is routed through the same WAN High Application connection regardless of the destination Internet IP address and protocol.
http://youtu.be/rKH4AS_bQnE 17.2 Adding Rules for Outbound Policy The menu underneath enables you to define Outbound policy rules: The bottom-most rule is Default. Edit this rule to change the device’s default manner of controlling outbound traffic for all connections that do not match any of the rules above it. Under the Service heading, click Default to change these settings.
Page 178
By default, Auto is selected as the Default Rule. You can select Custom to change the algorithm to be used. Please refer to the upcoming sections for the details on the available algorithms. To create a custom rule, click Add Rule at the bottom of the table.
Page 179
This setting specifies whether the outbound traffic rule takes effect. When Enable is checked, the rule takes effect: traffic is matched and actions are taken by the Pepwave router based on the other parameters of the rule. When Enable is unchecked, the rule does not take effect: Enable the Pepwave router disregards the other parameters of the rule.
Page 180
Protocol Selection Tool drop-down menu, the protocol and port number remains manually modifiable. This setting specifies the behavior of the Pepwave router for the custom rule. One of the following values can be selected (Note that some Pepwave routers provide only some of these options): ●...
This field allows you to configure the default action when all the selected Connections are not available. Drop the Traffic - Traffic will be discarded. When No connections are Use Any Available Connections - Traffic will be routed to any available Connection, even available it is not selected in the list.
Also, the Internet IP depends on the WAN connections over which communication actually takes place. As a result, a LAN client computer behind the Pepwave router may communicate using multiple Internet IP addresses. For example, a LAN client computer behind a Pepwave router with three WAN connections may communicate on the Internet using three different IP addresses.
By Source: The same WAN connection will be used for traffic matching the rule and originating from the same machine, regardless of its destination. This option will provide the highest level of application compatibility. By Destination: The same WAN connection will be used for traffic matching the rule, originating from the same machine, and going to the same destination.
Starting from Firmware 5.2, outbound traffic can be prioritized to go through SpeedFusion connection(s). By default, VPN connections are not included in the priority list. Configure multiple distribution rules to accommodate different kinds of services. 17.2.5 Algorithm: Overflow The traffic matching this rule will be routed through the healthy WAN connection that has the highest priority and is not in full load.
All WAN connections are symmetric; or ● A latency sensitive application must be routed through the lowest latency WAN, regardless of the WAN’s available bandwidth. 17.2.8 Expert Mode Expert Mode is available on some Pepwave routers for use by advanced users. To enable the...
Page 186
feature, click on the help icon and click turn on Expert Mode. In Expert Mode, a new special rule, SpeedFusion Routes, is displayed in the Custom Rules table. This rule represents all SpeedFusion routes learned from remote VPN peers. By default, this bar is on the top of all custom rules.
18 Port Forwarding Pepwave routers can act as a firewall that blocks, by default, all inbound access from the Internet. By using port forwarding, Internet users can access servers behind the Pepwave router. Inbound port forwarding rules can be defined at Advanced>Port Forwarding.
Any Port, Single Port, Port Range, Port Map, and Range Mapping Any Port: all traffic that is received by the Pepwave router via the specified protocol is forwarded to the servers specified by the Servers setting. For example, with IP Protocol set to TCP, and Port set to Any Port, all TCP traffic is forwarded to the configured servers.
Page 189
way, the process of inbound port forwarding becomes automated. When a computer creates a rule using these protocols, the specified TCP/UDP port of all WAN connections' default IP address will be forwarded. Check the corresponding box(es) to enable UPnP and/or NAT-PMP. Enable these features only if you trust the computers connected to the LAN ports.
19 NAT Mappings NAT mappings allow IP address mapping of all inbound and outbound NAT’d traffic to and from an internal client IP address. Settings to configure NAT mappings are located at Advanced > NAT Mappings. To add a rule for NAT mappings, click Add NAT Rule. NAT Mapping Settings NAT mapping rules can be defined for a single LAN IP Address, an IP Range, or Client(s)
Page 191
Mappings Internet IP addresses on which the system should bind. Any access to the specified WAN connection(s) and IP address(es) will be forwarded to the LAN host. This option is only available when IP Address is selected in the LAN Client(s) field.
20 QoS 20.1 User Groups LAN and PPTP clients can be categorized into three user groups: Manager, Staff, and Guest. This menu allows you to define rules and assign client IP addresses or subnets to a user group. You can apply different bandwidth and traffic prioritization policies on each user group in the Bandwidth Control and Application sections (note that the options available here vary by model).
(set as 0). 20.3 Application 20.3.1 Application Prioritization On many Pepwave routers, you can choose whether to apply the same prioritization settings to all user groups or customize the settings for each group. ↑High,━ Three application priority levels can be set: Normal, and↓Low.
When Supported Applications is selected, the Pepwave router will inspect network traffic and prioritize the selected applications. Alternatively, you can select Custom Applications and define the application by providing the protocol, scope, port number, and DSCP value.
LAN side of the network. It can protect the local network from potential hacker attacks, access to offensive websites, and/or other inappropriate uses. The firewall functionality of Pepwave routers supports the selective filtering of data traffic in both directions: ●...
21.1 Outbound and Inbound Firewall Rules 21.1.1 Access Rules The outbound firewall settings are located at Advanced>Firewall>Access Rules>Outbound Firewall Rules. Click Add Rule to display the following screen: Inbound firewall settings are located at Advanced>Firewall>Access Rules>Inbound Firewall Rules. Click Add Rule to display the following screen:...
Page 197
Internal Network firewall settings are located at Advanced>Firewall>Access Rules>Internal Network Firewall Rules. Click Add Rule to display the following window: Inbound / Outbound / Internal Network Firewall Settings...
Page 198
If the traffic matches the specified protocol/IP/port, actions will be taken by the Pepwave router based on the other parameters of the rule. If the box is not checked, the firewall rule does not take Enable effect.
Page 199
With the value of Allow for the Action setting, the matching traffic passes through the router (to be routed to the destination). If the value of the Action setting is set to Deny, the matching traffic does not pass through the router (and is discarded). This setting specifies whether or not to log matched firewall events.
Deny, a corresponding Allow firewall rule will be required. 21.1.2 Apply Firewall Rules to PepVpn Traffic 21.1.3 Intrusion Detection and DoS Prevention When this feature is enabled, the Pepwave router will detect and prevent the following kinds of intrusions and denial-of-service attacks. ● Port scan...
21.2 Content Blocking 21.2.1 Application Blocking Choose applications to be blocked from LAN/PPTP/PepVPN peer clients' access, except for those on the Exempted User Groups or Exempted Subnets defined below. 21.2.2 Web Blocking Defines website domain names to be blocked from LAN/PPTP/PepVPN peer clients' access...
"www.foobar.com," "www.foobar.co.jp," or "foobar.co.uk" will be blocked. Placing the wild card in any other position is not supported. The Pepwave MAX will inspect and look for blocked domain names on all HTTP traffic. Secure web (HTTPS) traffic is not supported.
22 Routing Protocols 22.1 OSPF & RIPv2 Pepwave supports OSPF RIPv2 dynamic routing protocols. Click the Advanced tab from the top bar, and then click the Routing Protocols > OSPF & RIPv2 item on the sidebar to reach the following menu: OSPF This field determines the ID of the router.
Page 204
OSPF Settings Assign a name to be applied to this group. Machines linked to this group will send Area ID and receive related OSPF packets, while unlinked machines will ignore them. Link Type Choose the type of network that this area will use. If an authentication method is used, select one from this drop-down menu.
RIPv2 Settings If an authentication method is used, select one from this drop-down menu. Available options are MD5 and Text. Authentication key(s) may be input next to the drop- Authentication down menu after selecting an authentication method. Select the interface(s) that this area will use to listen to and deliver RIPv2 packets. Interfaces OSPF &...
Page 206
Name This field specifies the name that represents this profile. When this box is checked, this BGP profile will be enabled. Enable If it is left unchecked, it will be disabled. Interface The interface in which the BGP neighbor is located. Autonomous The Autonomous System Number (ASN) assigned to this profile.
Page 207
Wait time in seconds for a keepalive message from a Neighbor before considering the BGP connection as stalled. Hold Time The value must be either 0 (infinite hold time) or between 3 and 65535 inclusively. Default: 240 Enable this option to advertise your own source address as the next hop when Next Hop Self propagating routes.
Page 208
e.g. 65000:21344 Well-known communities: no-export 65535:65281 no-advertise 65535:65282 no-export-subconfed 65535:65283 no-peer 65535:65284 Route Prefix: Comma separated networks. e.g. 172.168.1.0/24,192.168.1.0/28 This field allows for the selection of the filter mode for route import. None: All BGP routes will be accepted. Accept: Routes in "Restricted Networks" will be accepted, routes not in the list will Filter Mode be rejected.
Page 209
accepted. This field specifies the network(s) in the “route export” entry. Restricted Exact Match: When this box is checked, only routes with the same Network and Networks Subnet Mask will filtered. Otherwise, routes within the Networks and Subnets will be filtered. Export to other When this box is checked, routes learnt from this BGP profile will be exported to other BGP profiles.
Internet. Networks routed by a Pepwave router can be remotely accessed via OpenVPN, L2TP with IPsec or PPTP. To configure this feature, navigate to Network > Remote User Access and choose the required VPN type.
You have a choice between 2 different OpenVPN Client profiles: ● "route traffic" profile Using this profile, VPN clients will send all the traffic through the OpenVPN tunnel ● "split tunnel" profile Using this profile, VPN clients will ONLY send those traffic designated to the untagged LAN and VLAN segment through the OpenVPN tunnel.
Page 212
LDAP Server: Enter the matching LDAP server details to allow for LDAP server authentication. Radius Server: Enter the matching Radius server details to allow for Radius server authentication. Active Directory: Enter the matching Active Directory details to allow for Active Directory server authentication.
LAN bypass port. In the diagram, the WAN ports of each Pepwave router connect to the router and to the modem. Both Pepwave routers connect to the same LAN switch via a LAN port.
Page 214
● At a subsequent point when the master Pepwave router recovers, it will once again become active. You can configure high availability at Advanced>Misc. Settings>High Availability. Interface for Master Router Interface for Slave Router High Availability Checking this box specifies that the Pepwave router is part of a high availability Enable configuration.
Page 215
This setting specifies the subnet mask of the LAN. Important Note For Pepwave routers in NAT mode, the virtual IP (VIP) should be set as the default gateway for all hosts on the LAN segment. For example, a firewall sitting behind the Pepwave router should set its default gateway as the virtual IP instead of the IP of the master router.
Please note that the drop-in WAN cannot be configured as a LAN bypass port while it is configured for high availability. 24.2 Certificate Manager This section allows for certificates to be assigned to the local VPN, Web Admin SSL, Captive Portal SSL, OpenVPN CA, Wi-Fi WAN Client certificate and Wi-Fi WAN CA Certificate.
Some ISPs require their users to send e-mails via the ISP’s SMTP server. All outgoing SMTP connections are blocked except those connecting to the ISP’s. Pepwave routers support intercepting and redirecting all outgoing SMTP connections (destined for TCP port 25) via a...
ISP’s e-mail server host name or IP address. Under SMTP Port, enter the TCP port number for each WAN. The Pepwave router will intercept SMTP connections. Choose a WAN port according to the outbound policy, and then forward the connection to the SMTP server if the chosen WAN has enabled forwarding.
Service passthrough settings can be found at Advanced>Misc. Settings>Service Passthrough. Some Internet services need to be specially handled in a multi-WAN environment. Pepwave routers can handle these services such that Internet applications do not notice being behind a multi-WAN router. Settings for service passthrough support are available here.
Page 220
With this option enabled, protocols that provide audio-visual communication H.323 sessions will be defined on any packet network and pass through the Pepwave router. FTP sessions consist of two TCP connections; one for control and one for data.
24.5 UART Selected Pepwave MAX routers feature a RS-232 serial interface on the built-in terminal block. The RS-232 serial interface can be used to connect to a serial device and make it accessible over an TCP/IP network. The serial interface can be enabled and parameters can be set on the web admin page under...
Page 222
If in doubt, swap Rx and Tx, and RTS and CTS, at the other end and give it another go. Once connected, your serial device should be accessible on your Pepwave MAX router LAN IP address at the specified TCP port.
24.6 GPS Forwarding Using the GPS forwarding feature, some Pepwave routers can automatically send GPS reports to a specified server. To set up GPS forwarding, navigate to Advanced>GPS Forwarding. GPS Forwarding Enable Check this box to turn on GPS forwarding.
The time delay setting between ignition off and power down of the router is a configurable setting, which allows the router to stay on for a period of time after the engine of a vehicle is turned off. Ignition Sensing installation Colour Wire Functoin optional*...
Page 225
Connectivity diagram for devices with 4-pin connector Connectivity diagram for devices with terminal block connection...
GPIO Menu Note: This feature is applicable for certain models that come with a GPIO interface. Ignition Sensing options can be found in Advanced > GPIO. The configurable option for Ignition Input is Delay; the time in seconds that the router stays powered on after the ignition is turned off.
24.8 NTP Server Pepwave routers can now serve as a local NTP server. Upon start up, it is now able to provide connected devices with the accurate time, precise UTC from either an external NTP server or via GPS and ensuring that connected devices always receive the correct time.
Page 228
The created network groups can be used in outbound policies, firewall rules.
The Remote SIM management is accessible via Advanced > Misc Settings > Remote SIM Management. By default, this feature is disabled. Please note that a limited number of Pepwave routers support the SIM Injector, may refer to the link: https://www.peplink.com/products/sim-injector/ or Appendix B for more details on FusionSIM Manual.
Page 230
Add Remote SIM Settings SIM Server Add a new SIM Server SIM Server - Serial Enter the serial number of SIM Server Number SIM Server - Name This optional field allows you define a name for the SIM Server SIM Slot Click the drop-down menu and choose which SIM slot you want to connect.
24.11 SIM Toolkit The SIM Toolkit, accessible via Advanced > Misc Settings > SIM Toolkit, supports two functionalities, USSD and SMS. USSD Unstructured Supplementary Service Data (USSD) is a protocol used by mobile phones to communicate with their service provider’s computers. One of the most common uses is to query the available balance.
Page 232
The SMS option allows you to read SMS (text) messages that have been sent to the SIM in your Pepwave router.
To configure, navigate to the AP tab. and the following screen appears. AP Controller The AP controller for managing Pepwave APs can be enabled by checking this box. When this option is enabled, the AP controller will wait for management connections originating from APs over the LAN on TCP and UDP port 11753.
Page 234
(i.e., packets that travel from the Wi-Fi VLAN segment through the Pepwave AP One unit to the Ethernet segment via the LAN port). The default value of this setting is 0, which means VLAN tagging is disabled (instead of tagged with zero).
Page 235
Select Auto to allow the Pepwave router to set the data rate automatically, or Data Rate select Fixed and choose a rate from the displayed drop-down menu. This setting enables the filtering of multicast network traffic to the wireless Multicast Filter SSID.
Page 236
using this method, select the appropriate version using the V1/V2 controls. The security level of this method is known to be very high. When WPA/WPA2- Personal is configured, a shared key is used for data encryption and authentication. When using this configuration, the Shared Key option should be enabled.
Enter the RADIUS shared secret for the primary server and, if applicable, the Secret secondary RADIUS server. Authentication In the field, enter the UDP authentication port(s) used by your RADIUS server(s) or Port click the Default button to enter 1812. Accounting In the field, enter the UDP accounting port(s) used by your RADIUS server(s) or click Port...
25.4 Settings On many Pepwave models, the AP settings screen (AP>Settings) looks similar to the example below: AP Settings These buttons specify which wireless networks will use this AP profile. You can also select the frequencies at which each network will transmit. Please note that...
Page 239
should follow. ● If a North American region is selected, RF channels 1 to 11 will be available and the maximum transmission power will be 26 dBm (400 mW). ● If European region is selected, RF channels 1 to 13 will be available. The maximum transmission power will be 20 dBm (100 mW).
Page 240
This field specifies the VLAN ID to tag to management traffic, such as AP to AP controller communication traffic. The value is 0 by default, meaning that no VLAN Management VLAN tagging will be applied. Note: change this value with caution as alterations may result in loss of connection to the AP controller.
Page 241
Check the box to allow the Pepwave router to manage the web admin access Enable information of the AP. Web Access These buttons specify the web access protocol used for accessing the web admin Protocol of the AP. The two available options are HTTP and HTTPS.
Page 242
Wi-Fi Radio Settings Operating This option sets the country whose regulations the Pepwave router follows. Country Wi-Fi Antenna Choose from the router's internal or optional external antennas, if so equipped. Important Note Per FCC regulations, the country selection is not available on all models marketed in the US. All US models are fixed to US channels only.
Page 243
This option is for setting the time interval between each beacon. By default, Beacon Interval 100ms is selected. This field allows you to set the frequency for the beacon to include a delivery DTIM traffic indication message. The interval is measured in milliseconds. The default value is set to 1 ms.
26 AP Controller Status Info 26.1 A comprehensive overview of your AP can be accessed by navigating to AP > Controller Status > Info. AP Controller This field displays the maximum number of AP your Balance router can control. License Limit You can purchase licenses to increase the number of AP you can manage.
Page 245
time. Mouse over any line on the graph to see how many clients connected to a specific SSID for that point in time. This graph enables you to see the data usage of any SSID for any given time period. Mouse over any line on the graph to see the data usage by each SSID for Data Usage that point in time.
Access Point (Usage) 26.2 A detailed breakdown of data usage for each AP is available at AP > Controller Status > Access Point. Usage This field enables you to quickly find your device if you know its name or serial AP Name/Serial number.
Page 247
For easier network management, you can give each client a name and designate its location. You can also designate which firmware pack (if any) this client will follow, as well as the channels on which the client will broadcast. Click the icon to see a graph displaying usage: Click any point in the graphs to display detailed usage and client information for that device, using that SSID, at that point in time.
Wireless SSID 26.3 In-depth SSID reports are available under AP > Controller Status > Wireless SSID. Click the blue arrow on any SSID to obtain more detailed usage information on each SSID.
Mesh / WDS 26.4 Mesh / WDS allows you to monitor the status of your wireless distribution system (WDS) or Mesh, and track activity by MAC address by navigating to AP > Controller Status > Mesh / WDS. This table shows the detailed information of each AP, including protocol, transmit rate (sent / received), signal strength, and duration.
Device. Suspected Rogue Devices Hovering over the device MAC address will result in a popup with information on how this device was detected. Click the icons and the device will be moved to the bottom table of identified devices. Event Log 26.7 You can access the AP Controller Event log by navigating to AP >...
Events This event log displays all activity on your AP network, down to the client level. Use to filter box to search by MAC address, SSID, AP Serial Number, or AP Profile name. Click View Alerts to see only alerts, and click the More…...
28 System Settings 28.1 Admin Security There are two types of user accounts available for accessing the web admin: admin and user. They represent two user levels: the admin level has full administrative access, while the user level is read-only. The user level can access only the device's status information; users cannot make any changes on the device.
Page 255
Admin Settings This field allows you to define a name for this Pepwave router. By default, Router Router Name Name is set as MAX_XXXX, where XXXX refers to the last 4 digits of the unit’s serial number. Admin User Admin User Name is set as admin by default, but can be changed, if desired.
Page 256
Network This option is for specifying the network connection to be used for authentication. Connection Users can choose from LAN, WAN, and VPN connections. The CLI (command line interface) can be accessed via SSH. This field enables CLI SSH CLI support. For additional information regarding CLI, please refer to Section 30.5.
WAN Connection Access Settings This field allows you to restrict web admin access only from defined IP subnets. ● Any - Allow web admin accesses to be from anywhere, without IP address restriction. ● Allow access from the following IP subnets only - Restrict web admin access only from the defined IP subnets.
Page 258
If an update is found the buttons will change to allow you to Download and Update the firmware. Click on the Download and Upgrade button. A prompt will be displayed advising to download the Current Active Configuration. Please click on the underlined download text. After downloading the current config click the Ok button to start the upgrade process.
Page 259
All of the Peplink/Pepwave GA firmware can be found here Navigate to the relevant product line (ie. Balance, Max, FusionHub, SOHO, etc). Some product lines may have a dropdown that lists all of the products in that product line. Here is a screenshot from the Balance line.
28.3 Time Time Settings enables the system clock of the Pepwave router to be synchronized with a specified time server. Time settings are located at System>Time. Time Settings This specifies the time zone (along with the corresponding Daylight Savings Time Time Zone scheme).
Edit Schedule Profile Click this checkbox to enable this schedule profile. Note that if this is disabled, then Enabling any associated features will also have their scheduling disabled. Name Enter your desired name for this particular schedule profile. Click the drop-down menu to choose pre-defined schedules as your starting point. Schedule Please note that upon selection, previous changes on the schedule map will be deleted.
Page 262
WAN status changes or when new firmware is available. If Enable is not Notification checked, email notification is disabled and the Pepwave router will not send email messages. This setting specifies the SMTP server to be used for sending email. If the server SMTP Server requires authentication, check Require authentication.
Page 263
Sender’s Email This setting specifies the email address the Pepwave router will use to send reports. Address This setting specifies the email address(es) to which the Pepwave router will send Recipient’s email notifications. For multiple recipients, separate each email addresses using the Email Address enter key.
This setting specifies the IP address or hostname of the remote syslog server. Host The Pepwave router can also send push notifications to mobile devices that have Push Events our Mobile Router Utility installed. Check the box to activate this feature.
28.7 SNMP SNMP or simple network management protocol is an open standard that can be used to collect information about the Pepwave router. SNMP configuration is located at System>SNMP. SNMP Settings SNMP Device This field shows the router name defined at System>Admin Security.
Page 267
in the Community Name table, upon which the following screen is displayed: SNMP Community Settings Community This setting specifies the SNMP community name. Name This setting specifies a subnet from which access to the SNMP server is allowed. Allowed Source Enter subnet address here (e.g., 192.168.1.0) and select the appropriate subnet Subnet Address mask.
● When DES is selected, an entry field will appear for the password. 28.8 SMS Control SMS Control allows the user to control the device using SMS even if the modem does not have a data connection. The settings for configuring the SMS Control can be found at System>SMS Control.
28.9 InControl InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl.
In a high availability (HA) configuration, a Pepwave router can quickly load the configuration of its HA counterpart. To do so, click the Upload button. After loading Configurations the settings, configure the LAN IP address of the Pepwave router so that it is from High different from the HA counterpart.
This page provides a reboot button for restarting the system. For maximum reliability, the Pepwave router can equip with two copies of firmware. Each copy can be a different version. You can select the firmware version you would like to reboot the device with. The firmware marked with (Running) is the current system boot up firmware.
Tools 29.1 Ping The ping test tool sends pings through a specific Ethernet interface or a SpeedFusion connection. You can specify the number of pings in the field Number of times, to a maximum number of 10 times. Packet Size can be set to a maximum of 1472 bytes. The ping utility is located at System>Tools>Ping, illustrated below: A system administrator can use the ping utility to manually check the connectivity of a particular LAN/WAN connection.
29.2 Traceroute Test The traceroute test tool traces the routing path to the destination through a particular Ethernet interface or a SpeedFusion connection. The traceroute test utility is located at System>Tools>Traceroute. A system administrator can use the traceroute utility to analyze the connection path of a LAN/WAN connection.
29.4 Wake-on-LAN Peplink routers can send special “magic packets” to any client specified from the Web UI. To access this feature, navigate to System > Tools > Wake-on-LAN Select a client from the drop-down list and click Send to send a “magic packet” 29.5 CLI (Command Line Interface Support) The CLI (command line interface) can be accessed via SSH.
30 Status 30.1 Device System information is located at Status>Device. System Information This is the name specified in the Device Name field located at System>Admin Device Name Security. Model This shows the model name and number of this device. Product Code If your model uses a product code, it will appear here.
Page 276
Managed InControl Managed Configurations (firmware, VLAN, Captive Portal, etcetera) Configuration Host Name The host name assigned to the Pepwave router appears here. Uptime This shows the length of time since the device has been rebooted. System Time This shows the current system time.
(GPX). To review this data using third-party applications, click Status>Device and then download your GPX file. The Pepwave GPS enabled devices export real-time location data in NMEA format through the LAN IP address at TCP port 60660. It is accessible from the LAN or over a SpeedFusion connection.
Page 278
This screen displays the number of sessions initiated by each application. Click on each service listing for additional information. This screen also indicates the number of sessions initiated by each WAN port. In addition, you can see which clients are initiating the most sessions. You can also perform a filtered search for specific sessions.
This Active Sessions section displays the active inbound/outbound sessions of each WAN connection on the Pepwave router. A filter is available to sort active session information. Enter a keyword in the field or check one of the WAN connection boxes for filtering.
names (retrieved from the DHCP reservation table or defined by users), current download and upload rate, and MAC address. If the PPTP server (see Section 19.2), SpeedFusion (see Section 12.1), or AP controller (see Section 20) is enabled, you may see the corresponding connection name listed in the Name field.
Click to delete a single UPnP / NAT-PMP record in its corresponding row. To delete all records, click Delete All on the right-hand side below the table. Important Note UPnP / NAT-PMP records will be deleted immediately after clicking the button or Delete All, without the need to click Save or Confirm.
30.9 SpeedFusion Status Current SpeedFusion status information is located at Status>SpeedFusion Details about SpeedFusion connection peers appears as below: Click on the corresponding peer name to explore the WAN connection(s) status and subnet information of each VPN peer.
The Speedfusion status page shows all related information about the PepVPN connection. This screen also allows you to run PepVPN Tests allowing throughput tests. Peplink also published a whitepaper about Speedfusion which can be downloaded from the following url: http://download.peplink.com/resources/whitepaper-speedfusion-and-best-practices-2019.pdf 30.10 Event Log Event log information is located at Status>Event Log.
Page 285
The log section displays a list of events that has taken place on the Pepwave router. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log.
WAN Quality The Status > WAN Quality allow to show detailed information about each connected WAN connection. For cellular connections it shows signal strength, quality, throughput and latency for the past hour.
32 Usage Reports This section shows bandwidth usage statistics and is located at Status > Usage Reports Bandwidth usage at the LAN while the device is switched off (e.g., LAN bypass) is neither recorded nor shown. 32.1 Real-Time The Data transferred since installation table indicates how much network traffic has been processed by the device since the first bootup.
32.2 Hourly This page shows the hourly bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the desired connection to check from the drop-down menu. 32.3 Daily This page shows the daily bandwidth usage for all WAN connections, with the option of viewing...
each individual connection. Select the connection to check from the drop-down menu. If you have enabled the Bandwidth Monitoring feature, the Current Billing Cycle table for that WAN connection will be displayed. Click on a date to view the client bandwidth usage of that specific date. This feature is not available if you have selected to view the bandwidth usage of only a particular WAN connection.
Page 290
is not available if you have chosen to view the bandwidth of an individual WAN connection. The scale of the graph can be set to display megabytes (MB) or gigabytes (GB). All WAN Monthly Bandwidth Usage...
Page 291
Ethernet WAN Monthly Bandwidth Usage By default, the scale of data size is in MB. 1GB equals 1024MB.
Appendix A: Restoration of Factory Defaults To restore the factory default settings on a Pepwave router, follow the steps below: Locate the reset button on the front or back panel of the Pepwave router. With a paperclip, press and keep the reset button pressed.
Appendix B: FusionSIM Manual Peplink has developed a unique technology called FusionSIM, which allows SIM cards to remotely link to a cellular router. This can be done via cloud or within the same physical network. There are a few key scenarios to fit certain applications. The purpose of this manual is to provide an introduction on where to start and how to set up for the most common scenarios and uses.
Page 294
Setup topology This is the most basic scenario in which the SIM Injector is connected directly to the cellular router’s LAN port via an ethernet cable. This allows for the cellular router to be positioned for the best possible signal. Meanwhile, the SIM cards can be conveniently located in other locations such as the office, passenger area, or the bridge of a ship.
Page 295
1a. If you are using a Balance cellular router, go to the Network tab (top navigation bar). 1b. If you are using a MAX cellular router, go to the Advanced tab (top navigation bar). 2. Under Misc. settings (left navigation bar) find Remote SIM Management. 3.
Page 296
- Example 2: 1111-2222-3333 4444-5555-6666 B. Defining SIM Injector(s) SIM slot(s): - Format: <S/N:slot number> - Example 1: 1111-2222-3333:7,5 (the Cellular Interface will use SIM in slot 7, then 5) - Example 2: 1111-2222-3333:1,2 1111-2222-3333:3,4 (the cellular Interface will use SIM in slot 1, then in 2 from the first SIM Injector, and then it will use 3 and 4 from the second SIM Injector).
Page 297
In this scenario, each HD Dome creates a WAN connection to the main router. A single SIM Injector is used to provide SIM cards for each HD Dome. The HD Dome can be replaced with any Peplink cellular router supporting RemoteSIM technology. This scenario requires the completion of the configuration steps shown in Scenario 1 in addition to the configuration steps explained below.
Page 298
The Ethernet port must be set to ACCESS mode for each HD Dome. To do this, dummy VLANs need to be created first. 1. Go to Network (Top tab), then Network Settings (Left-side tab), and click on New LAN. This will open the settings page to create a dummy VLAN. 2.
Page 299
Configure WAN 1 as a DHCP client. WAN 1 will automatically get the Gateway IP address from HD Dome 1. Configure WAN 2 as a Static IP and set it to 192.168.50.12. Configure WAN 2 Gateway to 192.168.50.2. Same as the HD Dome 2’s IP address.
Page 300
Scenario 3: SIM Injector in LAN of main Router and multiple Cellular Routers Setup topology In this scenario, SIMs are provided to the HD Domes via the main router. In this example, the Remote SIM Proxy functionality needs to be enabled on the main router. Notes: HD Dome can be replaced with any other cellular router that supports RemoteSIM.
Page 301
This scenario requires the completion of the configuration steps for the cellular router and the SIM Injector as in Scenario 1. The configuration for the main router is explained below. Main Router configuration IMPORTANT: Main router LAN side and Cellular Routers must be configured using different subnets, e.g.
Page 302
Scenario 4: SIM Injector in a remote location Setup topology Requirements for installing a SIM Injector in a remote location: ● Cellular router communicates with the SIM Injector via UDP port 50000. Therefore this port must be reachable via public IP over the Internet. ●...
Page 303
4. Enter the public IP of the SIM Injector and click Save and Apply Changes. Notes: Do NOT check Auto LAN Discovery. Do NOT add a SIM Injector serial number to the Remote SIM Host field. Step 2. RemoteSIM and custom SIM card settings configurations are the same as in Scenario...
Page 304
How to check if a Pepwave Cellular Router supports Remote SIM 1. Go to Network (Top tab), then WAN (Left-side tab), and click Details on any cellular WAN. This will open the WAN Connection Settings page. 2. Scroll down to Cellular settings.
This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. CE Statement for Pepwave Routers ( MAX BR1 Mini for EC25-E)
Page 308
2.4GHz ( 2412 – 2472 MHz ) : 16.38 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 309
CE Statement for Pepwave Routers ( MAX BR1 Mini for MC7455)
Page 311
2.4GHz ( 2412 – 2472 MHz ) : 16.38 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 312
Industry Canada Statement (for MAX BR1 Mini) This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device.
Page 313
FCC ID : U8G-P1930LITER6 FCC 15.21: The changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. RF exposure warning: This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter.
Page 314
votre corps. Cet emetteur ne doit pas etre co-localisees ou operant en conjonction avec une autreantenne ou transmetteur. Les utilisateurs finaux et les installateurs doivent etre informes des instructions d'installation de l'antenne et des conditions de fonctionnement de l'emetteur afin de satisfaire a la conformite d'exposition RF.
Page 315
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX BR1 MK2 This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Page 316
(1) l’appareil ne doit pas produire de brouillage, et (2) l’utilisateur de l’appareil doit accepter tout brouillage radioelectrique subi, meme si le brouillage est susceptible d’en (i) The device for operation in the band 5150–5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;...
Page 317
CE Statement for Pepwave Routers ( MAX BR1 MK2 )
Page 319
2.4GHz ( 2412 – 2472 MHz ) : 19.95 dBm 5GHz ( 5150 - 5250 MHz ) : 22.73 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment.
Page 320
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX BR1 Classic This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Page 321
Industry Canada Statement ( for MAX BR1 Classic ) This device complies with Industry Canada's licence-exempt RSSs. Operation is subject to the following two conditions (1) This device may not cause interference; and(2) This device must accept any interference, including interference that may cause undesired operation of the device.
Page 322
CE Statement for Pepwave Routers ( MAX BR1 Classic for MC7455)
Page 324
2.4GHz ( 2412 – 2472 MHz ) : 19.78 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 325
CE Statement for Pepwave Routers ( MAX BR1 Classic for EC25-E)
Page 327
2.4GHz ( 2412 – 2472 MHz ) : 19.78 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 328
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX HD4 MBX, MAX HD2 MBX This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Page 329
(i) The device for operation in the band 5150–5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems; (ii) For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p.
Page 330
CE Statement for Pepwave Routers ( MAX HD4 MBX For EM7565 )
Page 332
2.4GHz ( 2412 – 2472 MHz ) : 19.6 dBm 5GHz ( 5150 - 5250 MHz ) : 19.4 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment.
Page 333
CE Statement for Pepwave Routers ( MAX HD2 MBX / MAX HD4 MBX For LM960A18)
Page 335
2.4GHz ( 2412 – 2472 MHz ) : 19.6 dBm 5GHz ( 5150 - 5250 MHz ) : 19.4 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment.
Page 336
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX HD2 This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Page 337
(i) The device for operation in the band 5150–5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems; (ii) For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p.
Page 339
CE Statement for Pepwave Routers ( MAX HD2 For MC7455)
Page 341
2.4GHz ( 2412 – 2472 MHz ) : 19.90 dBm 5GHz ( 5150 - 5250 MHz ) : 22.88 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment.
Page 342
CE Statement for Pepwave Routers ( MAX HD2 For MC7565)
Page 344
2.4GHz ( 2412 – 2472 MHz ) : 19.86 dBm 5GHz ( 5150 - 5250 MHz ) : 22.68 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment.
Page 345
Mounting the Unit Wall Mount The Pepwave MAX BR1 Classic can be wall mounted using screws. After adding the screw on the wall, slide the MAX in the screw hole socket as indicated below. Recommended screw specification M3.5 x 20mm, head diameter 6mm, head thickness 2.4mm.
Page 346
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX BR1 Pro 5G FCC 15.21 The changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. RF exposure warning This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used for this transmitter must be installed to provide a separation distance of at...
Page 347
Industry Canada Statement ( MAX BR1 Pro 5G ) This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada's licence-exempt RSS(s). Operation is subject to the following two conditions 1. This device may not cause interference. 2.
Page 348
antenna gain for 5GHz ( 5725 ~ 5850 MHz ) 4.73 dBi Battery Caution Statement Risk of explosion if the battery is replaced by an incorrect type.
Page 349
CE Statement for Pepwave Routers ( MAX BR1 Pro 5G)
Page 351
2.4GHz ( 2412 – 2472 MHz ) : 19.74 dBm 5GHz ( 5150 - 5250 MHz ) : 22.66 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment.
Page 352
For MAX BR1 Mini Core This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Page 353
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX 700 Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
Page 354
For MAX HD2 IP67, MAX HD2 Mini, MAX HD2 Dome, MAX HD4 IP67, MAX BR1 ENT, MAX BR1 M2M, SpeedFusion Engine Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
Page 355
CE Statement for Pepwave Routers ( MAX HD2 IP67 )
Page 357
WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 358
CE Statement for Pepwave Routers ( MAX HD1 Dome )
Page 360
WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 361
CE Statement for Pepwave Routers ( MAX HD2 Dome )
Page 363
WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 364
CE Statement for Pepwave Routers ( MAX BR1 ESN )
Page 366
2.4GHz ( 2412 - 2472 MHz ) : 19.78 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 367
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX HD4 Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
Page 368
susceptible d'en (i) The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems; (ii) For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p.
Page 369
CE Statement for Pepwave Routers ( MAX HD4 )
Page 371
2.4GHz ( 2412 - 2472 MHz ) : 18.87 dBm 5GHz ( 5150 - 5250 MHz & 5725 - 5850 MHz ) : 19.13 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment.
Page 372
CE Statement for Pepwave Routers ( MAX HD4 IP67 )
Page 374
WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 375
CE Statement for Pepwave Routers ( SpeedFusion Engine )
Page 377
WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) MC7455 module: EC25-E module: This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator &...
Page 378
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX Transit, MAX Transit Duo Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
Page 379
Cet equipement doit etre installe et utilise a une distance minimum de 30 cm entre le radiateur et votre corps. Battery Caution Statement Risk of explosion if the battery is replaced by an incorrect type. CE Statement for Pepwave Routers ( MAX Transit / MAX Transit Duo For EM7565 )
Page 382
2.4GHz ( 2412 - 2472 MHz ) : 18.68 dBm 5GHz ( 5150 - 5250 MHz ) : 18.19 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment.
Page 383
CE Statement for Pepwave Routers ( MAX Transit For LM960A18 )
Page 385
2.4GHz ( 2412 - 2472 MHz ) : 18.68 dBm 5GHz ( 5150 - 5250 MHz ) : 18.19 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment.
Page 386
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX Transit Mini Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
Page 387
This radio transmitter has been approved by Innovation, Science and Economic Development Canada to operate with the antenna types listed below, with the maximum permissible gain indicated. Antenna types not included in this list that have a gain greater than the maximum gain indicated for any type listed are strictly prohibited for use with this device.
Page 388
CE Statement for Pepwave Routers ( MAX Transit Mini )
Page 390
2.4GHz ( 2412 - 2472 MHz ) : 19.78 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator &...
Page 391
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX BR1 PRO, MAX BR2 PRO, UBR LTE Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
Page 392
For licence exempt equipment with detachable antennas, the user manual shall also contain the following notice in a conspicuous location: This radio transmitter 20682-P1941 has been approved by Innovation, Science and Economic Development Canada to operate with the antenna types listed below, with the maximum permissible gain indicated.
Page 393
body. Cet equipement est conforme avec l'exposition aux radiations ISED definies pour un environnement non controle. Cet equipement doit etre installe et utilise a une distance minimum de 23 cm entre le radiateur et votre corps.
Page 394
CE Statement for Pepwave Routers ( MAX BR1 PRO / MAX BR2 PRO / UBR LTE )
Page 396
2.4GHz ( 2412 - 2472 MHz ) : 19.94 dBm 5GHz ( 5150 - 5250 MHz ) : 20.34 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment.
Page 397
FCC Requirements for Operation in the United States Federal Communications Commission (FCC) Compliance Notice: For MAX BR1 IP55, MAX BR2 IP55 Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
Page 398
CE Statement for Pepwave Routers ( MAX BR1 IP55 )
Page 400
2.4GHz ( 2412 - 2472 MHz ) : 18.16 dBm 5GHz ( 5150 - 5250 MHz) : 20.32 dBm 5GHz ( 5725 - 5850 MHz) : 13.00 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment.
Page 401
CE Statement for Pepwave Routers ( MAX BR2 IP55 )
Page 403
2.4GHz ( 2412 - 2472 MHz ) : 18.99 dBm 5GHz ( 5150 - 5250 MHz ) : 22.95 dBm 5GHz ( 5725 - 5850 MHz ) : 12.80 dBm WWAN : Refer 3GPP TS 36.521 -1 ( UE Power class ) This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment.
Page 404
USB WAN Modem Port Specification MAX Series MAX HD2 / MAX BR1 MAX HD4 / MAX MAX HD2 MAX HD2 / MAX 700 MAX HD2 HD4 Media Fast / Mini HD4 MBX Media Fast MAX BR1NT MediaFast 200 Output Rating 5V DC, 2A 5V DC, 2A 5V DC, 2A...
Need help?
Do you have a question about the Peplink MAX Series and is the answer not in the manual?
Questions and answers