peplink PEPWAVE MAX Series User Manual

peplink PEPWAVE MAX Series User Manual

For more information, please visit peplink.com
Hide thumbs Also See for PEPWAVE MAX Series:
Table of Contents

Advertisement

Quick Links

This manual has been edited by Powerful Signal. It includes only the Peplink MAX BR1 Mini (HW3)
and Peplink MAX BR1 Pro 5G.
MAX Series
User Manual
Pepwave Products:
MAX 700 / HD2 / HD2 IP67 / HD2 Mini / HD2 MBX / HD Dome / HD4 / HD4 MBX / MBX Mini /
HD4 IP67 / Transit / Transit Duo / Transit 5G / Transit Core / Transit Mini / Transit Pro E / Transit
Pro / BR1 Classic / BR1 MK2 / BR1 Slim / BR1 ENT / BR1 M2M / / BR1 Mini (HW2) / BR1
Mini (HW3) / BR1 Mini Core / BR1 ESN / BR1 Pro LTE / BR1 Pro (CAT-20) / BR1 Pro 5G / BR2
Pro / BR1 IP55 / BR1 IP67 / BR2 IP55 / On-The-Go / HD2 with MediaFast / HD4 with MediaFast
/ SpeedFusion Engine / UBR LTE / PDX
Pepwave Firmware 8.2.1
June 2022
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice.
Copyright © 2021 Peplink Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Peplink International
Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
Click here
to download the complete manual with all Peplink products.

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PEPWAVE MAX Series and is the answer not in the manual?

Questions and answers

Summary of Contents for peplink PEPWAVE MAX Series

  • Page 1 Specifications are subject to change without notice. Copyright © 2021 Peplink Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Peplink International Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
  • Page 2: Table Of Contents

    Table of Contents Introduction and Scope Glossary Product Features Supported Network Features Other Supported Features Pepwave MAX Mobile Router Overview MAX BR1 Mini (HW3) MAX BR1 Pro 5G https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 3 USB Modem and Android Tethering Built-In Remote User VPN Support SIM-card USSD support KVM Virtualization DPI Engine NetFlow Wi-Fi Air Monitoring SP Default Configuration Peplink Relay DNS over HTTPS (DoH) Installation Preparation Constructing the Network Configuring the Network Environment https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 4 Advanced Wi-Fi Settings MediaFast Configuration Setting Up MediaFast Content Caching Scheduling Content Prefetching Viewing MediaFast Statistics ContentHub Configuring the ContentHub Configure a website for ContentHub Configure an application for ContentHub Docker Bandwidth Bonding SpeedFusionTM / PepVPN https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 5 Outbound and Inbound Firewall Rules Content Blocking Routing Protocols OSPF & RIPv2 Remote User Access L2TP with IPsec OpenVPN PPTP Authentication Methods Miscellaneous Settings High Availability Certificate Manager Service Forwarding Service Passthrough UART GPS Forwarding https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 6 Access Point (Usage) Wireless SSID Mesh / WDS Wireless Client Nearby Device Event Log Toolbox System Settings Admin Security Firmware Time Schedule Email Notification Event Log SNMP SMS Control InControl Configuration Feature Add-ons Reboot Tools https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 7 WAN Quality Usage Reports Real-Time Hourly Daily Monthly Appendix A: Restoration of Factory Defaults Appendix B: FusionSIM Manual Appendix C: Overview of ports used by Peplink SD-WAN routers and other Peplink services Appendix D: Declaration https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 8: Introduction And Scope

    This manual covers setting up Pepwave routers and provides an introduction to their features and usage. Tips Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction ! https://youtu.be/13M-JHRAICA https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 9: Glossary

    Quality of Service SNMP Simple Network Management Protocol Transmission Control Protocol User Datagram Protocol Virtual Private Network VRRP Virtual Router Redundancy Protocol Wide Area Network WINS Windows Internet Name Service WLAN Wireless Local Area Network https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 10: Product Features

    4G LTE modem. Below is a list of supported features on Pepwave routers. Features vary by model. For more information, please see peplink.com/products. Supported Network Features 1.1.1 WAN ●...
  • Page 11 ● Persistent routing for specified source and/or destination IP addresses per TCP/UDP service ● Traffic prioritization and DSL optimization ● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms 1.1.7 AP Controller https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 12 Quality of service for different applications and custom protocols ● User group classification for different service levels ● Bandwidth usage control and monitoring on group- and user-level ● Application prioritization for custom protocols and DSL/cable optimization https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 13: Other Supported Features

    ● UPnP / NAT-PMP ● Real-time, hourly, daily, and monthly bandwidth usage reports and charts ● IPv6 support ● Support USB tethering on Android 2.2+ phones * Not supported on MAX Surf-On-The-Go, and BR1 variants https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 14: Max Br1 Mini (Hw3)

    Boot up error Green Ready Cellular Indicators Disabled or no SIM card inserted Cellular Blinking slowly Connecting to network(s) Green Connected to network(s) Wi-Fi Indicators Wi-Fi AP is turn off Wi-Fi Wi-Fi AP is turn on https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 15: Max Br1 Pro 5G

    Blinking Slowly Connecting to network(s) Green Connected to network(s) Wi-Fi Indicators Disabled intermittent Wi-Fi / Wi-Fi Connected to wireless network(s) LAN Ports 1000 Mbps Green LED 10 Mbps / 100 Mbps or port is not connected https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 16 10 Mbps / 100 Mbps or port is not connected Port is connected without traffic Left LED Blinking Data is transferring No data is being transferred or port is not connected Port Type Auto MDI/MDI-X ports https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 17: Advanced Feature Summary

    Drop-in Mode , you can conveniently install your Peplink router without making any changes to your network. For any reason your Peplink router looses power, the LAN Bypass will safely and automatically bypass the Peplink router to resume your original network connection.
  • Page 18: Per-User Bandwidth Control

    High Availability via VRRP When your organization has a corporate requirement demanding the highest availability with no single point of failure, you can deploy two Peplink routers in High Availability mode . With High Availability mode, the second device will take over when needed.
  • Page 19: Usb Modem And Android Tethering

    USB Modem and Android Tethering For increased WAN diversity, plug in a USB LTE modem as a backup. Peplink routers are compatible with over 200 modem types . You can also tether to smartphones running Android 4.1.X and above. Compatible with: MAX 700, HD2 (all variants except IP67), HD4 (All variants)
  • Page 20: Sim-Card Ussd Support

    KVM is now supported on some MediaFast / ContentHub routers. Click here for the full instructions on how to set up KVM Click here for the full instructions on how to set up KVM with USB Storage https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 21: Dpi Engine

    (a.k.a. InControl2 configuration) via the Ethernet LAN port and is ideal for those wanting to do a bulk deployment of many Peplink devices. Note: If you would like to use this feature, please contact your purchase point (Eg.VAD).
  • Page 22: Peplink Relay

    Internet, allowing access to previously restricted applications experienced with the public SpeedFusion Cloud nodes. Available as an add-on for your home router or as an upgradable license to your Peplink router, SFC Relay is sure to impress you and any peers you give access to.
  • Page 23: Installation

    Card, connect to one of the WAN ports on the Pepwave router. Repeat the same procedure for other WAN ports. Connect the power adapter to the power connector on the rear panel of the Pepwave router, and then plug it into a power outlet. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 24: Configuring The Network Environment

    For advanced configuration, go to Section 9, Configuring the LAN Interface(s) . ● WAN configuration For basic configuration, refer to Section 8, Connecting to the Web Admin Interface . For advanced configuration, go to Section 9.2, Captive Portal . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 25: Connecting To The Web Admin Interface

    You must change the default password on the first successful logon. ● Password requirements are: A minimum of 10 lower AND upper case characters, ● including at least 1 number. When HTTP is selected, the URL will be redirected to HTTPS by default. ● https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 26 Configuration changes (e.g. WAN, LAN, admin settings, etc.) will take effect only after clicking the Save button at the bottom of each page. The Apply Changes button causes the changes to be saved and applied. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 27: Speedfusion Connect

    > SpeedFusion Service > SpeedFusion Connect . Activate SpeedFusion Connect Service All Care plans now come with SpeedFusion Connect included. This data allowance will automatically begin and end in accordance with your warranty. No activation is required. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 28: Enable Speedfusion Connect

    “ SpeedFusion Connect ” tab. To set up a Peplink Relay Server, select " Setup Home Sharing " > Choose the Cloud Location you wish to connect to > Click on the green tick button to confirm the change.
  • Page 29 To connect to SpeedFusion Cloud, you can select a Cloud Location of your choice, or simply Automatic , then the device will establish a connection to the nearest cloud server. Choose Automatic > Click on the green tick button to confirm the change. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 30 Or you may select Home Sharing and use your Relay Sharing Code to create a profile if you have set up a Peplink Relay Client on another device. Click on Apply Changes to save the change https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 31 By default, the router will build a SpeedFusion tunnel to the SpeedFusion Cloud. If you are running a latency sensitive service like video streaming or VOIP, a WAN Smoothing sub-tunnel can be created. Navigate to Speedfusion Connect > Choose a cloud location > SFC . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 32 A SpeedFusion tunnel configuration window will pop out. Click on the + sign to create the WAN Smoothing sub-tunnel. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 33 Click on Save and Apply Changes to save the configuration. Now, the router has 2 Speedfusion tunnels to the SpeedFusion Cloud. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 34 Create an outbound policy to steer the internet traffic to go into SpeedFusion Cloud. Please go to Advanced > Outbound Policy , click on Add Rule to create a new outbound policy. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 35: Connect Clients To Cloud

    SpeedFusion Connect provides a convenient way to route the LAN client to the cloud from SpeedFusion Connect > Connect Clients to Cloud . Choose a client from the drop down list > Click + > Save > Apply Changes . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 36: Link Wi-Fi To Cloud

    SpeedFusion Connect > Link Wi-Fi to Cloud . Create a new SSID for SpeedFusion Connect. The new SSID will inherit all settings from one of the existing SSIDs including the Security Policy. Then click Save followed by Apply Changes . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 37 SpeedFusion Connect SSID will be shown on Dashboard . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 38: Optimize Cloud Application

    Go to SpeedFusion Connect > Optimize Cloud Application . Select a Cloud application to route through SpeedFusion Cloud from the drop down list > Click > Save > Apply Changes. Click the to remove a selected Cloud application to route through SpeedFusion Cloud. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 39: Configuring The Lan Interface(S)

    The IP address and subnet mask of the Pepwave router on the LAN. Network Settings Name Enter a name for the LAN. Enter a number for your VLAN. VLAN ID Inter-VLAN routing Check this box to enable routing between virtual LANs. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 40 This allows the device to inject Option 82 with Router Name information before DHCP Option 82 forwarding the DHCP Request packet to a PepVPN peer, such that the DHCP Server can identify where the request originates from. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 41 In addition to standard DHCP options (e.g., DNS server address, gateway Extended address, subnet mask), you can specify the value of additional extended DHCP DHCP Option options, as defined in RFC 2132. With these extended options enabled, you can https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 42 - Advanced feature, please click the button on the top right hand corner of the Static Route section to activate and configure Virtual Network Mapping to resolve network address conflict with remote peers. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 43 NAT'ed and behaves like coming from the same Virtual IP Address. WINS Server Settings Check the box to enable the WINS server. A list of WINS clients will be displayed Enable at Status>WINS Clients . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 44 DNS resolvers will receive forwarded DNS requests. DNS Resolvers If no WAN/VPN/LAN DNS resolver is selected, all of the WAN’s DNS resolvers will be selected. If a SpeedFusion peer is selected, you may enter the VPN peer’s DNS https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 45 Bonjour Forwarding Settings Enable Check this box to turn on Bonjour forwarding. Choose Service and Client networks from the drop-down menus, and then click Bonjour Service to add the networks. To delete an existing Bonjour listing, click https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 46 WAN connections. Some MAX units also support multiple WAN connections after activating drop-in mode, though a SpeedFusion license may be required to activate more than one WAN port. Please note the Drop-In Mode is mutually exclusive with VLAN. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 47 MAX (web admin access from the WAN, DNS proxy, etc.). Shared IP Access to this IP address will be passed through to the LAN port if this device is https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 48 The following settings are displayed when creating a new LAN or editing an existing LAN. IP Settings IP Address & Enter the Pepwave router’s IP address and subnet mask values to be used on Subnet Mask the LAN. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 49 This setting specifies the length of time throughout which an IP address of a DHCP Lease Time client remains valid. Upon expiration of Lease Time , the assigned IP address will no longer be valid and the IP address assignment must be renewed. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 50 DHCP relay. Enter the IP addresses of one or two DHCP servers in the provided fields. The DHCP Server IP DHCP servers entered here will receive relayed DHCP requests from the LAN. For https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 51: Port Settings

    On this screen, you can enable specific ports, as well as determine the speed of the LAN ports, whether each port is a trunk or access port, can well as which VLAN each link belongs to, if any. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 52: Captive Portal

    Fill in the necessary information to complete your connection to the server and enable authentication. This authenticates your clients through a LDAP server. Upon selecting this option, you will see the following fields: LDAP Server https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 53 URL you define. The Portal Customization menu has two options: . Clicking displays a pop-up previewing the captive portal that your clients will see. Clicking displays the following menu: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 54 If you would like to use your own set of terms and conditions, please enter them Conditions here. If left empty, the built-in portal will display the default terms and conditions. Custom Landing Fill in this field to redirect clients to an external URL. Page https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 55: Configuring The Wan Interface(S)

    You can also set priorities on the Dashboard . Click the Details button in the corresponding row to modify the connection setting. Important Note Connection details will be changed and become effective immediately after clicking the Save and Apply button. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 56 OpenDNS - The DNS server IP addresses for OpenDNS will be using ● 208.67.222.222 and 208.67.220.220, which is standard DNS. Custom URL - You may select Custom URL: , and enter the resolver ● URL and IP address . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 57 By default, WAN Quality will always be observed and gathered automatically. With customized choice of WAN connections, the device will always observe WAN Quality of those selected WAN connections. Other WAN connections may stop observing WAN Quality information if it is not necessary for the underlying features. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 58: Ethernet Wan

    If your service provider's DHCP server requires you to supply a hostname Hostname value upon acquiring an IP address, you may enter the value here. If your service provider does not provide you with the value, you can safely bypass (Optional) this option. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 59 When Remain connected is chosen, upon bringing up this Standby State WAN connection to active, it will be immediately available for use. If this WAN connection is charged by connection time, you may want to set https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 60 Default weight control for outbound traffic will be adjusted according to this Bandwidth value. 9.1.2 Static IP Connection The static IP connection method is suitable if your ISP provides a static IP address to connect directly. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 61 DHCP server. When Use the following DNS server address(es) is selected, you may enter custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 62 Service Name Service name is provided by the ISP. (Optional) Note: Leave this field blank unless it is provided by your ISP. If your ISP provides a PPPoE IP address, enter it here. IP Address https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 63 Server 1 and DNS Server 2 fields. 9.1.4 L2TP Connection L2TP has all the compatibility and convenience of PPTP with greater security. Combine this with IPsec for a good balance between ease of use and security. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 64 (The DNS servers are obtained along with the WAN IP address assigned from the PPPoE server.) When Use the following DNS server address(es) is selected, you can enter custom DNS server addresses for this WAN connection into the DNS server 1 and DNS server 2 fields. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 65 This field allows you to enter the IP address of the local tunnel for the GRE tunnel Address connection. Tunnel Remote This field allows you to enter the IP address of the remote tunnel for the GRE IP Address tunnel connection. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 66 (The DNS servers are obtained along with the WAN IP address assigned from the PPPoE server.) When Use the following DNS server address(es) is selected, you can enter custom DNS server addresses for this WAN connection into the DNS server 1 and DNS server 2 fields. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 67: Cellular Wan

    Wireless EV-DO users, a unique MEID identifier code (in hexadecimal format) is used MEID by the carrier to associate the EV-DO device with the user. This information is presented in hex and decimal format. IMEI This is the unique ID for identifying the modem in GSM/HSPA mode. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 68 WAN connection is no longer in the highest priority and has entered the standby Standby State state. When Remain connected is chosen, bringing up this WAN connection to active makes it immediately available for use. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 69 “Use Remote SIM Only” to provision a SIM from a SIM Injector. Further details on the SIM Injector found is available here: https://www.peplink.com/products/sim-injector/ Preferred SIM If “ Both SIMs ” were selected on the above field, then you can designate the priority https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 70 Custom to enter your carrier’s APN , Login , Password , and Dial Number settings manually. The correct values can be obtained from your carrier. The default and recommended setting is Auto . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 71 The following values are used by the threshold scale: To define the threshold manually using specific signal strength values, please click on the question Mark and the following field will be visible. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 72: Wi-Fi Wan

    The auto-detection will run each time the WAN connection establishes Reply to ICMP If this setting is disabled, the WAN connection will not respond to ICMP ping PING requests. By default, this setting is enabled. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 73 This option is to specify whether the Wi-Fi WAN will connect to any open mode Open Mode AP access points it finds. Beacon Miss This sets the threshold for the number of missed beacons. Counter Channel Scan Configure Channel Scan Interval in ms. Interval https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 74 This will open a window similar to the one shown below Wi-Fi Connection Profile Settings Type Select whether the network will connect automatically or manually. Network Name Enter a name to represent this Wi-Fi connection. (SSID) https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 75: Wan Connection Settings (Common)

    When a static speed is set, you may choose whether to advertise its speed to the Speed peer device or not. Advertise Speed is selected by default. You can choose not to advertise the port speed if the port has difficulty in negotiating with the peer device. Default: Auto https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 76: Wan Health Check

    Health Check Disabled When Disabled is chosen in the Method field, the WAN connection will always be considered as up. The connection will NOT be treated as down in the event of IP routing errors. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 77 DNS servers of the WAN connection are used as the health check DNS servers. Health Check Method: HTTP HTTP connections will be issued to test connectivity with configurable URLs and strings to match. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 78 DNS lookups on public DNS servers. If the tests are successful, the WAN may not be down, but rather the target DNS server malfunctioned. You will see the following warning message on the main page: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 79: Bandwidth Allowance Monitoring

    Disclaimer Due to different network protocol overheads and conversions, the amount of data reported by this Peplink device is not representative of actual billable data usage as metered by your network provider. Peplink disclaims any obligation or responsibility for any events arising from the use of the numbers shown here.
  • Page 80: Additional Public Ip Address

    DNS service provider to perform an IP address update within the provider’s records. The settings for dynamic DNS service provider(s) and the association of hostname(s) are configured via Network>WAN>Details>Dynamic DNS Service Provider/Dynamic DNS Settings . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 81 DNS service providers’ policy, a dynamic DNS host will automatically expire if the host record has not been updated for a long time. Therefore the Pepwave router performs an update every 23 days, even if a WAN’s IP address has not changed. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 82: Advanced Wi-Fi Settings

    Indicate the preferred frequency to use for clients to connect. Frequency Important Note Per FCC regulation, the country selection is not available on all models marketed in the US. All US models are fixed to US channels only. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 83 Wi-Fi AP Settings section, which can be found at AP>Settings . Other models will display a separate section called Wi-Fi AP Advanced Settings , which can be found at Advanced>Wi-Fi Settings . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 84 Select the range you wish to cover with your Wi-Fi, and the router will make Convertor recommendations for the Slot Time and ACK Timeout. This field is for specifying the unit wait time before transmitting a packet. By Slot Time default, this field is set to 9 µs . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 85 There are 4 relative power levels available – Max , High , Mid , and Low . The actual output power will be bound by the regulatory limits of the selected Output Power country. Note that selecting the Boost option may cause the MAX’s radio output to exceed local regulatory limits. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 86: Mediafast Configuration

    Whitelist (cache the specified domains only) or Blacklist (do not cache Addresses the specified domains). Source IP This setting allows caching to be enabled on custom subnets only. Subnet If "Any" is selected, then caching will apply to all subnets. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 87 Enter a file extension, such as JPG or DOC. Then enter a lifetime in days to specify how Cache Lifetime long files with that extension will be cached. Add or delete entries using the controls on the Settings right. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 88: Scheduling Content Prefetching

    This field is also useful for quickly seeing which downloads are consuming the most storage space. To begin a scheduled download immediately, click Actions To cancel a scheduled download, click To edit a scheduled download, click https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 89 Simply provide the requested information to create your schedule. To clear all cached content, click this button. Note that this action cannot be Clear Web Cache undone. Clear Statistics To clear all prefetch and status page statistics, click this button. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 90: Viewing Mediafast Statistics

    11.3 Viewing MediaFast Statistics To get details on storage and bandwidth usage, select Status>MediaFast . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 91: Contenthub

    HTTP/HTTPS protocol. Only FTP sync is supported for this type of ContentHub content. The content should be uploaded to an FTP server before you sync it with ContentHub . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 92 Enter the details of the server that the content will be downloaded from. Enter Source credentials under Username and Password . This field determines how often the router will search for updates to the source Period content. Bandwidth Set a bandwidth limit for clients. Limit https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 93 When the sync is completed, a summary will be displayed, as shown in the screenshot below: To access the content, open a browser in the MFA’s client and enter the domain details that were configured earlier (such as http://mytest.com https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 94: Configure An Application For Contenthub

    ● Python (version 2.7.12) ● Ruby (version 2.3.3) ● Node.js (version 6.9.2) Install the desired framework under “Package Manager” as shown below: After installing the framework, change the ”Type” to “Application” and configure the website. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 95 The MediaFast router will only execute start.sh and stop.sh when the corresponding website is enabled and disabled respectively. 2. Compress the application files and the bash script to .tar.gz format. 3. Upload this tar file to the router. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 96: Docker

    , a learning platform (Moodle), or a visualisation tool for viewing large scale data (Kibana). When creating a new Docker Container, the Pepwave router will search through the Docker Hub repository. https://hub.docker.com/explore/ 7 For detailed configuration instructions, refer to our knowledge base: https://forum.peplink.com/t/how-to-run-a-docker-application-on-a-peplink-mediafast-router/1602 https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 97: Kvm

    Linux environment. For detailed configuration instructions, refer to our knowledge base articles: How to install a Virtual Machine on Peplink/Pepwave - MediaFast/ContentHub Routers How to Install Virtual Machine with USB storage on Peplink/Pepwave - MediaFast/ContentHub Routers https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 98: Bandwidth Bonding Speedfusiontm / Pepvpn

    SD-WAN routers to bond multiple Internet connections to increase site-to-site bandwidth and reliability. SpeedFusion functionality securely connects your Pepwave router to another Pepwave or Peplink device (Peplink Balance 210/310/380/580/710/1350 only). Data, voice, or video communications between these locations are kept confidential across the public Internet.
  • Page 99 Click the New Profile button to create a new VPN connection profile for making a VPN connection to a remote Pepwave or Peplink device via the available WAN connections. Each profile is for making a VPN connection with one remote Pepwave or Peplink Device. https://www.peplink.com...
  • Page 100 Pre-shared Key defines the pre-shared key used for this particular VPN Pre-shared Key connection. The VPN connection's session key will be further protected by the pre-shared key. The connection will be up only if the pre-shared keys on each side https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 101 WAN Smoothing consumption. This is suitable for streaming applications where the average bitrate requirement is much lower than the WAN's available bandwidth. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 102 - Advanced feature, please click the button on the top right-hand corner to activate. To enable Layer 2 Bridging between PepVPN profiles, navigate to Network>LAN>Basic Settings>*LAN Profile Name* and refer to instructions in section 9.1 https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 103 If you want to keep the latency as low Packet Jitter as possible, you can set it to 0ms to disable the buffer. Buffer Note : If the Receive Buffer is set, the Packet Jitter Buffer will be automatically disabled. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 104 Backup Site to designate a backup SpeedFusion profile that will take over, should the main PepVPN connection fail. Outbound Policy/PepVPN Outbound Custom Rules Some models allow you to set outbound policy and custom outbound rules from Advanced>PepVPN . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 105 When Fast is selected, a health check packet is sent every three seconds, and the expected detection time is six seconds. When Faster is selected, a health check packet is sent every second, and the expected detection time is two seconds. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 106 Pepwave devices, you will need to add firewall rules for these ports and protocols to allow inbound and outbound traffic to pass through the firewall. Want to know more about VPN sub-second session failover? Visit our YouTube Channel for a video tutorial! http://youtu.be/TLQgdpPSY88 https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 107: The Pepwave Router Behind A Nat Router

    IP addresses (i.e., 212.1.1.1 , 212.2.2.2 , and 212.3.3.3 ), and the field in Router A can be left blank. The two NAT routers on WAN1 and WAN3 connected to Router A should inbound port-forward TCP port 32015 to Router A so that all WANs will be utilized in establishing the VPN. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 108 VPN peer. Please refer to Section 22.6 for details. IP Subnets Must Be Unique Among VPN Peers The entire interconnected SpeedFusion network is a single non-NAT IP network. Avoid duplicating subnets in your sites to prevent connectivity problems when accessing those subnets. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 109: Ipsec Vpn

    WAN2 and WAN3 for failover. 16.1 IPsec VPN Settings Many Pepwave products can make multiple IPsec VPN connections with Peplink, Pepwave, Cisco, and Juniper routers. Note that all LAN subnets and the subnets behind them must be unique.
  • Page 110 IPsec VPN Settings Name This field is for specifying a local name to represent this connection profile. When this box is checked, this IPsec VPN connection profile will be enabled. Active Otherwise, it will be disabled. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 111 172.168.50.1. This is a unidirectional mapping which means clients in remote site will not be able to initiate connection to the local clients. Enter the LAN and subnets that are located at the remote site here. Remote https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 112 None - Do not request for PFS when initiating connection. However, since there Group is no valid reason to refuse PFS, the system will allow the connection to use PFS if requested by the remote peer. This is the default value. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 113: Gre Tunnel

    Click the New Profile button to create new GRE tunnel profiles that establish tunnel connections to remote tunnel endpoints via available WAN connections. To edit the profiles, click on its associated connection name in the leftmost column. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 114 This field is to select the subnet mask that is to be used for the GRE tunnel. Mask Connection Select the appropriate WAN connection from the drop-down menu. Remote Input the LAN and subnets that are located at the remote site here. Networks https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 115: Outbound Policy

    Important Note Outbound policy is applied only when more than one WAN connection is active The settings for managing and load balancing outbound traffic are located at Advanced>Outbound Policy or Advanced>PepVPN , depending on the model. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 116: Outbound Policy

    A default rule can be defined for connections that cannot be matched with any of the rules. The default policy is Normal Application Compatibility . Want to know more about creating outbound rules? Visit our YouTube Channel for a video tutorial! https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 117: Adding Rules For Outbound Policy

    Under the Service heading, click Default to change these settings. To rearrange the priority of outbound rules, drag and drop them into the desired sequence. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 118 By default, Auto is selected as the Default Rule . You can select Custom to change the algorithm to be used. Please refer to the upcoming sections for the details on the available algorithms. To create a custom rule, click Add Rule at the bottom of the table. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 119 This setting specifies the source IP Address, IP Network, MAC Address or Grouped Network for traffic that matches the rule. Source This setting specifies the destination IP address, IP network, Domain name, SpeedFusion Destination Cloud, PepVPN Profile or Grouped network for traffic that matches the rule. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 120 Lowest Latency ● Fastest Response Time For a full explanation of each Algorithm, please see the following article: https://forum.peplink.com/t/exactly-how-do-peplinks-load-balancing-algorithmns-work/8059 Load Distribution This is to define the outbound traffic weight ratio for each WAN connection. Weight https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 121 WAN connection relative to the total weight. Use the sliders to change each WAN’s weight. For example, with the following weight settings: ● Ethernet WAN1: 10 ● Ethernet WAN2: 10 ● Wi-Fi WAN: 10 ● Cellular 1: 10 ● Cellular 2: 10 https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 122 With the persistence feature, rules can be configured to enable client computers to persistently utilize the same WAN connections for e-banking and other secure websites. As a result, a client computer will communicate using one IP address, eliminating the issues mentioned above. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 123 The highest priority WAN connection available will always be used for routing the specified type of traffic. A lower priority WAN connection will be used only when all higher priority connections have become unavailable. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 124 WAN connection that is not in full load. Drag and drop to specify the order of WAN connections to be used for routing traffic. Only the highest priority healthy connection that is not in full load will be used. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 125 Therefore, this algorithm is good for two scenarios: ● All WAN connections are symmetric; or ● A latency sensitive application must be routed through the lowest latency WAN, regardless of the WAN’s available bandwidth. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 126 VPN subnets will be routed to the corresponding VPN peer. You can create custom Priority or Enforced rules and move them above the bar to override the SpeedFusion routes. Upon disabling Expert Mode, all rules above the bar will be removed. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 127: Port Forwarding

    Pepwave router disregards the other parameters of the rule. This setting identifies the service to the system administrator. Valid values for this Service Name setting consist of only alphanumeric and underscore “_” characters. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 128 (Please see below for details on the Servers setting.) Range Mapping : traffic that is received by the Pepwave router via the specified protocol at the specified port range is forwarded via a different port to the servers specified by the Servers setting. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 129: Upnp / Nat-Pmp Settings

    LAN ports. When the options are enabled, a table listing all the forwarded ports under these two protocols can be found at Status > UPnP / NAT-PMP . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 130: Nat Mappings

    The IP network refers to all private IP addresses and ranges managed by the Network LAN host. The system maps these addresses to a number of public IP addresses (specified below) to facilitate outbound traffic. This option is only https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 131 Outbound Policy section. Also note that WAN connections in drop-in mode or IP forwarding mode are not shown here. Click Save to save the settings when configuration has been completed. Important Note Inbound firewall rules override the Inbound Mappings settings. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 132: Qos

    This field is to define which User Group the specified subnet / IP address Group belongs to. Once users have been assigned to a user group, their internet traffic will be restricted by rules defined for that particular group. Please refer to the following two sections for details. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 133: Bandwidth Control

    Select an application by choosing a supported application, or by defining a custom application manually. The priority preference of supported applications is placed at the top of the table. Custom applications are at https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 134 When Supported Applications is selected, the Pepwave router will inspect network traffic and prioritize the selected applications. Alternatively, you can select Custom Applications and define the application by providing the protocol, scope, port number, and DSCP value. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 135 Users will not be able to download data at full speed until the uplink becomes less congested. DSL/Cable Optimization can relieve such an issue. When it is enabled, the download speed will become less affected by the upload traffic. By default, this feature is enabled. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 136: Firewall

    Inbound (WAN to LAN) ● Internal Network (VLAN to VLAN) The firewall also supports the following functionality: ● Intrusion detection and DoS prevention ● Web blocking With SpeedFusion enabled, the firewall rules also apply to VPN tunneled traffic. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 137: Outbound And Inbound Firewall Rules

    The outbound firewall settings are located at Advanced>Firewall>Access Rules>Outbound Firewall Rules . Click Add Rule to display the following screen: Inbound firewall settings are located at Advanced>Firewall>Access Rules>Inbound Firewall Rules . Click Add Rule to display the following screen: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 138 Internal Network firewall settings are located at Advanced>Firewall>Access Rules>Internal Network Firewall Rules . Click Add Rule to display the following window: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 139 In addition, a single port, or a range of ports, can be specified for the Destination IP & Port settings. Action This setting specifies the action to be taken by the router upon encountering traffic https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 140 Rules are matched from top to bottom. If a connection matches any one of the upper rules, the matching process will stop. If none of the rules match, the Default rule will be applied. By default, the Default rule is set as Allow for Outbound, Inbound and Internal Network access. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 141 When this feature is enabled, the Pepwave router will detect and prevent the following kinds of intrusions and denial-of-service attacks. ● Port scan NMAP FIN/URG/PSH Xmas tree Another Xmas tree Null scan SYN/RST SYN/FIN ● SYN flood prevention ● Ping flood attack prevention https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 142: Content Blocking

    Choose applications to be blocked from LAN/PPTP/PepVPN peer clients' access, except for those on the Exempted User Groups or Exempted Subnets defined below. 21.2.2 Web Blocking Defines website domain names to be blocked from LAN/PPTP/PepVPN peer clients' access https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 143 With the subnet defined in the field, clients on the particular subnet(s) can be exempted from the access blocking rules. 21.2.6 URL Logging Click enable , and the enter the ip address and port (if applicable) where your remote syslog server is located. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 144: Routing Protocols

    This is an overview of the OSPF areas that you have defined. Clicking on the name under Area allows you to configure the connection. To define a new area, Area click Add. To delete an existing area, click on the https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 145 Available options are MD5 and Text . Authentication key(s) may be input next to the drop-down menu after selecting an authentication method. Select the interface(s) that this area will use to listen to and deliver OSPF packets. Interfaces To access RIPv2 settings, click on https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 146: Bgp

    Click the Network tab along the top bar, and then click the BGP item on the sidebar to configure BGP. Click the " " to delete a BGP profile. Click " Add " to create a new BGP profile. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 147 (Optional) Assign a password for MD5 authentication of BGP sessions. AS path to be prepended to the routes received from this Neighbor. Values must be ASN and separated by commas. AS-Path Prepending: For example: inputting "64530,64531" will prepend "64530, 64531" to received routes. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 148 Custom Route Additional routes to be advertised to the BGP Neighbor. Advertising Advertise OSPF When this box is checked, every learnt OSPF route will be advertised. Route Assign a prefix to a Community. Set Community Community: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 149 This field allows for the selection of the filter mode for route export. Filter Mode None : All BGP routes will be accepted. Accept : Routes in "Restricted Networks" will be accepted, routes not in the list will https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 150 When this box is checked, routes learnt from this BGP profile will be exported to other BGP profiles. BGP Profile When this box is checked, routes learnt from this BGP profile will be exported to the Export to OSPF OSPF routing protocol. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 151: Remote User Access

    Continue to configure the authentication method. 23.2 OpenVPN Select OpenVPN and continue to configure the authentication method. The OpenVPN Client profile can be downloaded from the Status > device page after the configuration has been saved. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 152: Pptp

    This setting allows you to define the Remote User Accounts. Click Add to input username and password to create an account. After adding the user accounts, you can click on a username to edit the account password. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 153 Enter the matching LDAP server details to allow for LDAP server authentication. Radius Server: Enter the matching Radius server details to allow for Radius server authentication. Active Directory: Enter the matching Active Directory details to allow for Active Directory server authentication. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 154: Miscellaneous Settings

    In the event that no heartbeat signal from the master Pepwave router is received in 3 seconds (or longer) since the last heartbeat signal, the slave Pepwave router becomes active. ● The slave Pepwave router initiates the WAN connections and binds to a previously https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 155 If Configuration Sync. is checked, the serial number of the master unit is required Number here for the feature to work properly. Virtual IP The HA pair must share the same Virtual IP . The Virtual IP and the LAN https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 156 LAN segment. For example, a firewall sitting behind the Pepwave router should set its default gateway as the virtual IP instead of the IP of the master router. In drop-in mode, no other configuration needs to be set. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 157: Certificate Manager

    Please note that the drop-in WAN cannot be configured as a LAN bypass port while it is configured for high availability. 24.2 Certificate Manager This section allows for certificates to be assigned to the local VPN, Web Admin SSL, Captive Portal SSL, OpenVPN CA, Wi-Fi WAN Client certificate and Wi-Fi WAN CA Certificate. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 158: Service Forwarding

    The following knowledge base article describes how to create self-signed certificates and import it to a Peplink Product. https://forum.peplink.com/t/how-to-create-a-self-signed-certificate-and-import-it-to-a-peplink-pro duct/ 24.3 Service Forwarding Service forwarding settings are located at Advanced>Misc. Settings>Service Forwarding . Service Forwarding When this option is enabled, all outgoing SMTP connections destined for any host at TCP port 25 will be intercepted.
  • Page 159 WAN will be simply be forwarded to the connection’s original destination. Note If you want to route all SMTP connections only to particular WAN connection(s), you should create a custom rule in outbound policy (see Section 14.2 ). 24.3.2 Web Proxy Forwarding https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 160 24.3.4 Custom Service Forwarding After clicking the enable checkbox, enter your TCP port for traffic heading to the router, and then specify the IP Address and Port of the server you wish to forward to the service to. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 161: Service Passthrough

    Define custom control ports and enter the port numbers in the text boxes. The Pepwave router monitors outgoing TFTP connections and routes any TFTP incoming TFTP data packets back to the client. Select Enable if you want to enable TFTP passthrough support. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 162 IPsec system uses by checking Define custom ports . If the VPN contains IPsec site-to-site VPN traffic, check Route IPsec Site-to-Site VPN and choose the WAN connection to route the traffic to. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 163: Uart

    TCP/IP network. The serial interface can be enabled and parameters can be set on the web admin page under Advanced > UART . Make sure they match the serial device you are connecting to. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 164 If in doubt, swap Rx and Tx, and RTS and CTS, at the other end and give it another go. Once connected, your serial device should be accessible on your Pepwave MAX router LAN IP address at the specified TCP port. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 165: Gps Forwarding

    If you’ve chosen to send GPS reports in TAIP format, select one or more TAIP Sentence sentence types for sending the data ( PV—Position / Velocity Solution and Type/TAIP ID CP—Compact Velocity Solution ). You can also optionally include an ID (optional) number in the TAIP ID field. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 166: Ignition Sensing

    . Orange DC IN connected to permanent negative feed (ground) Black DC IN connected to permanent positive feed (power 12VDC, 2A) * Currently not functional; will be used for additional features in future firmware https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 167 Connectivity diagram for devices with 4-pin connector Connectivity diagram for devices with terminal block connection https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 168: Gpio Menu

    BR1 MK2 = Persistent; MAX Transit Mini with ContentHub = Reset to default, etc . Analog Input - to be confirmed. In most cases, it should read the external input and determine the voltage level. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 169: Ntp Server

    GPS and ensuring that connected devices always receive the correct time. Compatible with: BR1 ENT, 700 HW3, HD2/4, Transit NTP Server setting can be found via: Advanced>Misc. Settings>NTP Server Time Settings can be found at System>Time>Time Settings https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 170: Grouped Networks

    Advanced > Grouped Networks allows to configure destination networks in grouped format. Select Add group to create a new group with single IPaddresses or subnets from different VLANs. The created network groups can be used in outbound policies, firewall rules. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 171: Remote Sim Management

    “ Auto LAN Discovery ” box above. You may define the Remote SIM information by clicking the “ Add Remote SIM ”. Here, you can enable Data Roaming and custom APN for your SIM cards. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 172 If there is any difficulty in making a connection, you may select Custom to enter your carrier’s APN, Username and Password Only) settings manually. The correct values can be obtained from your carrier. The default and recommended setting is Auto. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 173: Sim Toolkit

    Enter your USSD code under the USSD Code text field and click Submit . You will receive a confirmation. To check the SMS response, click Get . After a few minutes you will receive a response to your USSD code https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 174 The SMS option allows you to read SMS (text) messages that have been sent to the SIM in your Pepwave router. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 175: Ap Controller

    To add a new SSID, click Add . Note that the following settings vary by model. The below settings ishows a new SSID window with Advanced Settings enabled (these are available by selecting the question mark in the top right corner). https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 176 Pepwave AP One unit to the Ethernet segment via the LAN port). The default value of this setting is 0 , which means VLAN tagging is disabled (instead of tagged with zero). https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 177 This setting configures the wireless authentication and encryption methods. Available options : ● Open ( No Encryption) ● Enhanced Open (OWE) Security Policy ● WPA3 -Personal (AES:CCMP) ● WPA2/WPA3 -Personal (AES:CCMP) ● WPA2 -Personal (AES:CCMP) ● WPA2 – Enterprise https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 178 Connection coming from the MAC addresses in this list will be either denied or MAC Address accepted based on the option selected in the previous field. List If more than one MAC address needs to be entered, you can use a carriage return to separate them. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 179 To create a custom subnet for guest access, enter the IP address and choose a Custom Subnet subnet mask from the drop-down menu. Block To block access from a particular subnet, enter the IP address and choose a subnet Exception mask from the drop-down menu. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 180: Wireless Mesh

    Enter the shared key in the text field. Please note that it needs to match the shared keys of Shared Key the other APs in the Wireless Mesh settings. Click Hide / Show Characters to toggle visibility. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 181: Settings

    Please note that SSID the Pepwave MAX does not detect whether the AP is capable of transmitting at both frequencies. Instructions to transmit at unsupported frequencies will be ignored by the AP. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 182 Please note that using this option with several APs in close proximity will lead to increased interference. Client Signal This field determines that maximum signal strength each individual client will Strength receive. The measurement unit is megawatts. Threshold https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 183 This field is only available when Frame Aggregation is enabled. It specifies the Frame Length frame length for frame aggregation. By default, it is set to 50000 . - Advanced feature. Click the button on the top right-hand corner to activate. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 184 If Wi-Fi Operating mode is choosing AP , The status indicated by the front panel LED is as follows: W-Fi 1 is Green, if there is any Wireless SSID is selected 2.4GHz. W-Fi 2 is Green, if there is any Wireless SSID is selected 5GHz. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 185 Navigating to AP>Settings on some Pepwave models displays a screen similar to the one shown below: Wi-Fi Radio Settings Operating This option sets the country whose regulations the Pepwave router follows. Country Wi-Fi Antenna Choose from the router's internal or optional external antennas, if so equipped. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 186 This option allows you to enable frame aggregation to increase transmission Aggregation throughput. This setting allows choosing a short or long guard period interval for your Guard Interval transmissions. - Advanced feature, please click the button on the top right-hand corner to activate. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 187: Ap Controller Status

    SSIDs. This pie chart and table indicates how many APs are online and how many are No. of APs offline. No.of Clients This graph displays the number of clients connected to each network at any https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 188 In addition, you could use the sliders at the bottom to further refine your timescale. Events This event log displays all activity on your AP network, down to the client level. Click View Alerts to see only alerts, and click the More… link for additional records. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 189: Access Point (Usage)

    You could also expand and collapse all groups by using the buttons. On the right of the table, you will see the following icons: Click the icon to see a usage table for each client: Managed Wireless Devices Click the icon to configure each client https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 190 SSID, at that point in time. On the Data Usage by menu, you can display the information by SSID or by AP send/receive rate. Click the Event tab next to Wireless Usage to view a detailed event log for that https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 191: Wireless Ssid

    Wireless SSID 26.3 In-depth SSID reports are available under AP > Controller Status > Wireless SSID . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 192: Mesh / Wds

    Mesh, and track activity by MAC address by navigating to AP > Controller Status > Mesh / WDS . This table shows the detailed information of each AP, including protocol, transmit rate (sent / received), signal strength, and duration. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 193: Wireless Client

    Here, you will be able to see your network’s heaviest users as well as search for specific users. Click the icon to bookmark specific users, and click the icon for additional details about each user: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 194 Copyright @ 2021 Peplink...
  • Page 195: Nearby Device

    Event Log 26.7 You can access the AP Controller Event log by navigating to AP > Controller Status > Event Log . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 196: Toolbox

    To receive new firmware packs, you can click Check for Updates to download new packs, or you can click Manual Upload to manually upload a firmware pack. Click Default to define which firmware pack is default. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 197: System Settings

    For security reasons, after logging in to the web admin Interface for the first time, it is recommended to change the administrator password. Configuring the administration interface to be accessible only from the LAN can further improve system security. Administrative settings configuration is located at System>Admin Security . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 198 This field allows you to specify a new user password. Once the user password is User Password set, the read-only user feature will be enabled. Confirm User This field allows you to verify and confirm the new user password. Password https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 199 This option is for specifying the protocol(s) through which the web admin interface can be accessed: ● HTTP Security ● HTTPS ● HTTP/HTTPS Web Admin Port This field is for specifying the port number on which the web admin interface can https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 200 The allowed IP subnet addresses should be entered into this text area. Each IP subnet must be in form of w.x.y.z/m , where w.x.y.z is an IP address (e.g., 192.168.0.0 ), and m is the subnet mask in CIDR format, which is between 0 and https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 201: Firmware

    Ok button to start the upgrade process. The router will download and then apply the firmware. The time that this process takes will depend on your internet connection’s speed. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 202 A manual upgrade using the GA firmware posted on the site may also be recommended or required for a couple of reasons. All of the Peplink/Pepwave GA firmware can be found here Navigate to the relevant product line (ie.
  • Page 203: Time

    This specifies the time zone (along with the corresponding Daylight Savings Time Time Zone scheme). The Time Zone value affects the time stamps in the Pepwave router’s event log and e-mail notifications. Check Show all to show all time zone options. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 204: Schedule

    Enable scheduling, and then click on your schedule name or on the New Schedule button to begin. Edit Schedule Profile Click this checkbox to enable this schedule profile. Note that if this is disabled, Enabling then any associated features will also have their scheduling disabled. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 205: Email Notification

    This setting specifies the SMTP server to be used for sending email. If the server SMTP Server requires authentication, check Require authentication . Connection This setting specifies via a drop-down menu one of the following valid Connection Security Security: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 206 After Test Email Notification is clicked, you will see this screen to confirm the settings: Click Send Test Notification to confirm. In a few seconds, you will see a message with detailed test results. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 207 Copyright @ 2021 Peplink...
  • Page 208: Event Log

    This setting is to enable event logging at the specified log server. URL Logging This setting specifies the IP address or hostname of the URL log server. Host Session Logging This setting is to enable event logging at the specified log server. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 209: Snmp

    Pepwave router. SNMP configuration is located at System>SNMP . SNMP Settings SNMP Device This field shows the router name defined at System>Admin Security . Name SNMP Port This option specifies the port which SNMP will use. The default port is 161 . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 210 To add a community for either SNMPv1 or SNMPv2, click the Add SNMP Community button in the Community Name table, upon which the following screen is displayed: SNMP Community Settings Community This setting specifies the SNMP community name. Name https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 211: Sms Control

    SMS Control can reboot devices and configure cellular settings over signalling channels, even if the modem does not have a data connection. For details of supported SMS command sets, please refer to our knowledge base https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 212: Incontrol

    E.164 International Phone Numbers format. 28.9 InControl InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl.
  • Page 213: Configuration

    You can sign up for an InControl account at https://incontrol2.peplink.com/. You can register your devices under the account, monitor their status, see their usage reports, and receive offline notifications. 28.10 Configuration Backing up Pepwave router settings immediately after successful completion of initial setup is strongly recommended.
  • Page 214: Feature Add-Ons

    You can select the firmware version you would like to reboot the device with. The firmware marked with (Running) is the current system boot up firmware. Please note that a firmware upgrade will always replace the inactive firmware partition https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 215: Tools

    10 times. Packet Size can be set to a maximum of 1472 bytes. The ping utility is located at System>Tools>Ping , illustrated below: A system administrator can use the ping utility to manually check the connectivity of a particular LAN/WAN connection. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 216: Traceroute Test

    You can define the Test Type , Direction , and Duration of the test, and press Go! to perform the throughput test. The VPN test utility is located at System>Tools>PepVPN Test , illustrated as follows: https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 217: Wake-On-Lan

    29.4 Wake-on-LAN Peplink routers can send special “magic packets” to any client specified from the Web UI. To access this feature, navigate to System > Tools > Wake-on-LAN Select a client from the drop-down list and click Send to send a “magic packet”...
  • Page 218: Status

    Security . Model This shows the model name and number of this device. Product Code If your model uses a product code, it will appear here. Hardware This shows the hardware version of this device. Revision https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 219 The Download link is for exporting a diagnostic report file required for system Report investigation. Remote Click Turn on to enable remote assistance. Assistance The second table shows the MAC address of each LAN/WAN interface connected. To view your device’s End User License Agreement (EULA), click Legal. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 220: Gps Data

    LAN IP address at TCP port 60660. It is accessible from the LAN or over a SpeedFusion connection. To access the data via a virtual serial port, install a virtual serial port driver. Visit http://www.peplink.com/index.php?view=faq&id=294 to download the driver. https://www.peplink.com...
  • Page 221: Active Sessions

    WAN port. In addition, you can see which clients are initiating the most sessions. You can also perform a filtered search for specific sessions. You can filter by subnet, port, protocol, and interface. To perform a search, navigate to Status>Active Sessions>Search . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 222 This Active Sessions section displays the active inbound/outbound sessions of each WAN connection on the Pepwave router. A filter is available to sort active session information. Enter a keyword in the field or check one of the WAN connection boxes for filtering. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 223: Client List

    In the client list table, there is a “Ban Client” feature which is used to disconnect the Wi-Fi and Remote User Access clients by clicking the button on the right. There is a blocklist on the same page after you banned the Wi-Fi or Remote User Access clients. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 224: Wins Client

    30.6 UPnP / NAT-PMP The table that shows the forwarded ports under UPnP and NAT-PMP protocols is located at Status>UPnP/NAT-PMP . This section appears only if you have enabled UPnP / NAT-PMP as mentioned in Section 16.1.1 . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 225: Ospf & Ripv2

    Important Note UPnP / NAT-PMP records will be deleted immediately after clicking the button or Delete All, without the need to click Save or Confirm . 30.7 OSPF & RIPv2 Shows status of OSPF and RIPv2 https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 226: Bgp

    Current SpeedFusion status information is located at Status>SpeedFusion Details about SpeedFusion connection peers appears as below: Click on the corresponding peer name to explore the WAN connection(s) status and subnet information of each VPN peer. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 227 Click the button for a SpeedFusion chart displaying real-time throughput, latency, and drop-rate information for each WAN connection. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 228 The Speedfusion status page shows all related information about the PepVPN connection. This screen also allows you to run PepVPN Tests allowing throughput tests. Peplink also published a whitepaper about Speedfusion which can be downloaded from the following url: http://download.peplink.com/resources/whitepaper-speedfusion-and-best-practices-2019.pdf https://www.peplink.com...
  • Page 229: Event Log

    Event log information is located at Status>Event Log . The log section displays a list of events that has taken place on the Pepwave router. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 230: Wan Quality

    31 WAN Quality The Status > WAN Quality allow to show detailed information about each connected WAN connection. For cellular connections it shows signal strength, quality, throughput and latency for the past hour. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 231: Usage Reports

    The Data transferred since installation table indicates how much network traffic has been processed by the device since the first bootup. The Data transferred since last reboot table indicates how much network traffic has been processed by the device since the last bootup. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 232: Hourly

    32.2 Hourly This page shows the hourly bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the desired connection to check from the drop-down menu. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 233: Daily

    WAN connection. The scale of the graph can be set to display megabytes ( MB ) or gigabytes ( GB ). All WAN Daily Bandwidth Usage https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 234: Monthly

    WAN connection. The scale of the graph can be set to display megabytes ( MB ) or gigabytes ( GB ). All WAN Monthly Bandwidth Usage https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 235 Ethernet WAN Monthly Bandwidth Usage By default, the scale of data size is in MB . 1GB equals 1024MB. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 236: Appendix A: Restoration Of Factory Defaults

    After the Pepwave router finishes rebooting, the factory default settings will be restored. Important Note All previous configurations and bandwidth usage data will be lost after restoring factory default settings. Regular backup of configuration settings is strongly recommended. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 237: Appendix B: Fusionsim Manual

    Appendix B: FusionSIM Manual Peplink has developed a unique technology called FusionSIM, which allows SIM cards to remotely link to a cellular router. This can be done via cloud or within the same physical network. There are a few key scenarios to fit certain applications.
  • Page 238 IMPORTANT: SIM cards inserted into SIM Injector must not have a PIN code. Note 1: The SIM Injector gets its IP address via DHCP and doesn't have a static IP address. To find it’s address, please check the DHCP lease on the cellular router. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 239 1. Go to Network (top navigation bar), then WAN (left navigation bar) and click Details for a selected cellular WAN. This will open the WAN Connection Settings page. 2. Scroll down to Cellular settings . 3. In the SIM Card section, select Use Remote SIM Only . https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 240 SIM card located in a certain SIM slot: Enable/Disable roaming (by default roaming is disabled). Add Custom mobile operator settings (APN, user name, password). 4. Repeat configuration for all SIM cards which need custom settings. 5. Click Apply Changes to take effect. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 241 In this scenario, each HD Dome creates a WAN connection to the main router. A single SIM Injector is used to provide SIM cards for each HD Dome. The HD Dome can be replaced with any Peplink cellular router supporting RemoteSIM technology. This scenario requires the completion of the configuration steps shown in Scenario 1 in addition to the configuration steps explained below.
  • Page 242 Note : set different IP addresses for each HD dome (e.g. 192.168.10.1 and 192.168.10.2). 3. Click Save and Apply Changes . 4. Go to Network (Top tab), then Port Settings (Left-side tab). 5. Set the Port Type to Access and set VLAN to Untagged LAN (see picture below). https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 243 WAN 1 will automatically get the Gateway IP address from HD Dome 1. Configure WAN 2 as a Static IP and set it to 192.168.50.12. Configure WAN 2 Gateway to 192.168.50.2. Same as the HD Dome 2’s IP address. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 244 Remote SIM Proxy functionality needs to be enabled on the main router. Notes: HD Dome can be replaced with any other cellular router that supports RemoteSIM. It is recommended to use Peplink Balance series X series routers as the main router.
  • Page 245 IMPORTANT: Main router LAN side and Cellular Routers must be configured using different subnets, e.g. 192.168. 50 .1/24 and 192.168. 100 .1/24. Note : please make sure the Peplink router is running Firmware 8.1.0 or above. 1. Open the main router WEB interface and change: From <IP address>/cgi-bin/MANGA/ index.cgi to <IP address>/cgi-bin/MANGA/ support.cgi .
  • Page 246 Cellular Router configuration Step 1. Enable the SIM Injector communication protocol. 1a. For a Balance cellular router, go to the Network (Top tab). 1b. For a MAX cellular router, go to the Advanced (Top tab). https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 247 Do NOT check Auto LAN Discovery. Do NOT add a SIM Injector serial number to the Remote SIM Host field. Step 2. RemoteSIM and custom SIM card settings configurations are the same as in Scenario https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 248 RemoteSIM. 2. Check the WAN Connection Status section. Within the cell WAN details, there is a section for Remote SIM (SIM card IMSI, SIM Injector serial number and SIM slot). https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 249: Appendix C: Overview Of Ports Used By Peplink Sd-Wan Routers And Other Peplink Services

    Appendix C: Overview of ports used by Peplink SD-WAN routers and other Peplink services Default Port Default Number Usage Service Inbound/Outbound Status UDP 5246 Data flow InControl Outbound Enabled TCP 443 HTTPS service InControl Outbound Enabled Optional, used when TCP...
  • Page 250 UDP 32015+N-1^ / TCP/UDP 4500+N-1^ - When using Sub-Tunnels, multiple ports are in use (1 for each Sub-Tunnel profile). ● The default UDP data ports used when using (N number of Sub-Tunnel profiles) are: 4500…4500+N-1, or (when port 4500 is in use by IPsec or L2TP/IPsec) 32015… 32015+N-1". https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 251: Appendix D: Declaration

    This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 252 CE Statement for Pepwave Routers ( MAX BR1 Mini for EC25-E) https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 253 Copyright @ 2021 Peplink...
  • Page 254 This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body. contact as: https://www.peplink.com/ https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 255 CE Statement for Pepwave Routers ( MAX BR1 Mini for MC7455) https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 256 Copyright @ 2021 Peplink...
  • Page 257 This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body. contact as: https://www.peplink.com/ https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 258 Cet équipement est conforme avec l'exposition aux radiations ISED définies pour un environnement non contrôlé. Cet équipement doit être installé et utilisé à une distance minimum de 20 cm entre le radiateur et votre corps. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 259 L'exploitation est autorisee aux deux conditions suivantes 1. l'appareil ne doit pas produire de brouillage, et 2. l'utilisateur de l'appareil doit accepter tout brouillage radioelect rique subi, meme si le brouillage est susceptible d'en compromettre le fonctionnement. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 260 Les types d'antenne non inclus dans cette liste, et dont le gain est superieur au gain maximal indique pour tout type figurant sur la liste, sont strictement interdits pour l'exploitation de l'emetteur. antenna type Omni-directional antenna gain 5.33 https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 261 Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 262 Antenna types not included in this list that have a gain greater than the maximum gain indicated for any type listed are strictly prohibited for use with this device. antenna type Omni-directional antenna gain for 2.4GHz 2.44 dBi https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 263 Risk of explosion if the battery replaced by an incorrect type, place the battery into fire, a hot oven, extremely high temperature or low air pressure surrounding environment, the leakage of flammable liquid or gas, and mechanically crushing or cutting of the battery. https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 264 CE Statement for Pepwave Routers ( MAX BR1 Pro 5G) https://www.peplink.com Copyright @ 2021 Peplink...
  • Page 265 Copyright @ 2021 Peplink...
  • Page 266 This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body. contact as: https://www.peplink.com/ https://www.peplink.com Copyright @ 2021 Peplink...

Table of Contents