peplink 210 User Manual

peplink 210 User Manual

Balance multi-wan routers
For more information, please visit peplink.com
Hide thumbs Also See for 210:
Table of Contents

Advertisement

Peplink Balance Multi-WAN Routers
Model 210/310/380/390/580/710/1350

User Manual

Firmware 5.1.2
May 10
Copyright & Trademarks Specifications are subject to change without prior notice. Copyright © 2010 Peplink International Ltd. All
Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned
may be trademarks or registered trademarks of their respective owners.

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 210 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for peplink 210

  • Page 1: User Manual

    Firmware 5.1.2 May 10 Copyright & Trademarks Specifications are subject to change without prior notice. Copyright © 2010 Peplink International Ltd. All Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned...
  • Page 2: Table Of Contents

    Other Supported Features ......................8 PACKAGE CONTENTS ....................... 9 Peplink Balance 210 / 310 ......................9 Peplink Balance 380 / 390 / 580 / 710 / 1350 ................. 9 PEPLINK BALANCE OVERVIEW ..................10 Peplink Balance 210 ........................10 Peplink Balance 310 ........................12 Peplink Balance 380 / 390 ......................
  • Page 3 Device ............................. 118 19.2 Active Sessions ........................119 19.3 Client List ..........................119 19.4 WINS Client ..........................120 19.5 Site-to-Site VPN ........................120 19.6 UPnP / NAT-PMP........................121 19.7 Event Log ..........................121 19.8 Bandwidth ..........................122 http://www.peplink.com Copyright © 2010 Peplink...
  • Page 4 APPENDIX D. TROUBLESHOOTING .................. 134 APPENDIX E. PRODUCT SPECIFICATIONS ................ 136 Peplink Balance 210 and 310 ..................... 136 Peplink Balance 380 and 390 ..................... 137 Peplink Balance 580 ........................138 Peplink Balance 710 ........................139 Peplink Balance 1350 ......................... 140 http://www.peplink.com...
  • Page 5: Introduction And Scope

    The Peplink Balance 210/310 provides advanced features for small business. The Peplink Balance 380, 390, 580, 710 and 1350, with a suite of advanced enterprise-class features, make ideal single-box solutions for medium to large-sized business environments, and allow service providers to enable highly available multi-network services.
  • Page 6: Glossary

    Point to Point Protocol over Ethernet Quality of Service SNMP Simple Network Management Protocol Transmission Control Protocol User Datagram Protocol Virtual Private Network VRRP Virtual Router Redundancy Protocol Wide Area Network WINS Windows Internet Name Service http://www.peplink.com - 6 - Copyright © 2010 Peplink...
  • Page 7: Product Features

    USER MANUAL Peplink Balance Series Product Features Peplink Balance Series products enable all LAN users to share broadband Internet connections, and provide advanced features to enhance Internet access. The following is the list of supported features: Supported Network Features 3.1.1 Multiple public IP support (DHCP, PPPoE, Static IP Address, or GRE) ...
  • Page 8: Other Supported Features

    Hardware backup via LAN bypass (available only with hardware revision 2 of Balance 390,  Balance 580 and 1350) Read-only user for Web Admin  Built-in WINS server  USB based mobile modem support (available only with Peplink Balance 380, 390, 580, 710 and  1350) Time server synchronization  SNMP ...
  • Page 9: Package Contents

    Peplink Balance 210 / 310 Peplink Balance 210 / 310  Power adapter  Information slip  Rackmount kit  Peplink Balance 380 / 390 / 580 / 710 / 1350 Peplink Balance 380/390/580/710/1350  Power cord  Information slip  Rackmount kit ...
  • Page 10: Peplink Balance Overview

    USER MANUAL Peplink Balance Series Peplink Balance Overview Peplink Balance 210 Front Panel Appearance 5.1.1 WAN Ports Status LED LAN Ports Power LED Reset Button LED Indicators 5.1.2 The statuses indicated by the Front Panel LEDs are as follows: Power and Status Indicators OFF –...
  • Page 11 USER MANUAL Peplink Balance Series Rear Panel Appearance 5.1.3 Power Connector Unit Base Appearance 5.1.4 Serial Number and LAN MAC Address http://www.peplink.com - 11 - Copyright © 2010 Peplink...
  • Page 12: Peplink Balance 310

    ON – 100 Mbps Green LED OFF – 10 Mbps Solid – Port is connected without traffic Yellow LED Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports http://www.peplink.com - 12 - Copyright © 2010 Peplink...
  • Page 13 USER MANUAL Peplink Balance Series Rear Panel Appearance 5.2.3 Power Connector Unit Base Appearance 5.2.4 Serial Number and LAN MAC Address http://www.peplink.com - 13 - Copyright © 2010 Peplink...
  • Page 14: Peplink Balance 380 / 390

    USER MANUAL Peplink Balance Series Peplink Balance 380 / 390 Front Panel Appearance 5.3.1 Power LED LCD Display Console WAN Ports LCD Controls LAN Port LED Indicators 5.3.2 USB Ports The statuses indicated by the Front Panel LEDs are as follows: Power and Status Indicators OFF –...
  • Page 15 (to restore factory defaults) > LAN config (shows port speed: Auto, 10baseT-FD, > Port speed > LAN 10baseT-HD, 100baseTx-FD, 100baseTx-HD) > WAN1 NOTE: Balance 390 also has 1000baseTx-FD. > WAN2 > WAN3 http://www.peplink.com - 15 - Copyright © 2010 Peplink...
  • Page 16 To hold pressing the key for 4 seconds will power down the unit Power Switch When the unit is powered off, press it will power on the unit Unit Label Appearance 5.3.5 Serial Number and LAN MAC Address http://www.peplink.com - 16 - Copyright © 2010 Peplink...
  • Page 17: Peplink Balance 580

    ON – 1000 Mbps Green LED OFF – 100/10 Mbps Solid – Port is connected without traffic Yellow LED Blinking – Data is transferring OFF – Port is not connected Port Type Auto MDI/MDI-X ports http://www.peplink.com - 17 - Copyright © 2010 Peplink...
  • Page 18 (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, > LAN 10baseT-HD, 100baseTx-FD, 100baseTx-HD) > WAN1 NOTE: Balance 390 also has 1000baseTx-FD. > WAN2 > … > WAN5 http://www.peplink.com - 18 - Copyright © 2010 Peplink...
  • Page 19 To hold pressing the key for 4 seconds will power down the unit Power Switch When the unit is powered off, press it will power on the unit Unit Label Appearance 5.4.5 Serial Number and LAN MAC Address http://www.peplink.com - 19 - Copyright © 2010 Peplink...
  • Page 20: Peplink Balance 710

    ON – 100 Mbps Green LED OFF – 10 Mbps Solid – Port is connected without traffic Yellow LED Blinking – Data is transferring OFF – Port is not connected Port Type MDI ports http://www.peplink.com - 20 - Copyright © 2010 Peplink...
  • Page 21 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, > LAN 10baseT-HD, 100baseTx-FD, 100baseTx-HD, > WAN1 1000baseTx-FD) > WAN2 > … > WAN7 http://www.peplink.com - 21 - Copyright © 2010 Peplink...
  • Page 22 When the unit is powered off, press it will power on the unit Reset Switch Press and release once to reset the system Unit Label Appearance 5.5.4 Serial Number and LAN MAC Address http://www.peplink.com - 22 - Copyright © 2010 Peplink...
  • Page 23: Peplink Balance 1350

    ON – 100 Mbps Green LED OFF – 10 Mbps Solid – Port is connected without traffic Yellow LED Blinking – Data is transferring OFF – Port is not connected Port Type MDI ports http://www.peplink.com - 23 - Copyright © 2010 Peplink...
  • Page 24 > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, > LAN 10baseT-HD, 100baseTx-FD, 100baseTx-HD, > WAN1 1000baseTx-FD) > WAN2 > … > WAN7 http://www.peplink.com - 24 - Copyright © 2010 Peplink...
  • Page 25 When the unit is powered off, press it will power on the unit Reset Switch Press and release once to reset the system Unit Label Appearance 5.6.4 Serial Number and LAN MAC Address http://www.peplink.com - 25 - Copyright © 2010 Peplink...
  • Page 26: Installation

    At the high level, construct the network according to the following steps: With an Ethernet cable, connect a computer to one of the LAN ports on the Peplink Balance. For Peplink Balance 210 and 310, repeat with different cables for up to 4 computers to be connected.
  • Page 27: Configuring The Network Environment

    USER MANUAL Peplink Balance Series Configuring the Network Environment To ensure that Peplink Balance works properly in the LAN environment and can access the Internet via the WAN connections, please refer to the following setup procedures: LAN Configuration  For basic configuration, refer to Section 7, Basic Configuration.
  • Page 28: Basic Configuration

    Connecting to Web Admin Interface Start a web browser on a computer that is connected with Peplink Balance through LAN. To connect to Web Admin Interface of Peplink Balance, enter the following LAN IP address in the address field of the web browser: http://192.168.1.1...
  • Page 29: Configuration With Setup Wizard

    USER MANUAL Peplink Balance Series Configuration with Setup Wizard The Setup Wizard of Peplink Balance simplifies the task of configuring WAN connection(s) by guiding the configuration process step by step. To begin, click Setup Wizard after connecting to Web Admin Interface.
  • Page 30 Depending on the selection of connection type, further configuration may be needed. For example, PPPoE and Static IP require additional settings for the selected WAN port. Please refer to Section 10, Configuration of WAN Interface(s), for details on setting up DHCP, Static IP and PPPoE. http://www.peplink.com - 30 - Copyright © 2010 Peplink...
  • Page 31 Confirm your settings and click Save Settings. After finishing the last step in the Setup Wizard, please click Apply Changes on the page header to allow the configuration changes to take effect. http://www.peplink.com - 31 - Copyright © 2010 Peplink...
  • Page 32: Advanced Setup

    WAN connections can be configured by entering the corresponding WAN connection information at: Network > Interfaces > WAN Please refer to Section 10, Configuration of WAN Interface(s), for details on setting up DHCP, Static IP, PPPoE, GRE, and Mobile Internet Connection (available only with Peplink Balance 380 or above). http://www.peplink.com - 32 - Copyright ©...
  • Page 33: Configuration Of Lan Interface

    USER MANUAL Peplink Balance Series Configuration of LAN Interface The LAN Interface settings are located at: Network > Interfaces > LAN http://www.peplink.com - 33 - Copyright © 2010 Peplink...
  • Page 34 You can also choose whether or not to advertise the speed to the peer by selecting the Advertise Speed checkbox. Drop-in Mode Settings Drop-in Mode eases the installation of Peplink Balance on a live network between the existing Firewall and Router, such that no configuration changes are required Default Gateway on existing equipment.
  • Page 35 This option allows you to input the DNS server addresses to be offered to the DNS Servers DHCP clients. If Assign DNS server automatically is selected, the Peplink Balance’s built-in DNS server address (i.e. LAN IP address) will be offered.
  • Page 36 This table is for defining custom local DNS records. A static local DNS record consists of a Host Name and an IP Address. When Local DNS looking up the Host Name from the LAN to LAN IP of Peplink Balance, the Records corresponding IP Address will be returned.
  • Page 37: Drop-In Mode

    Otherwise, hosts on one side may not be able to reach hosts on the other side of Peplink Balance until the old ARP records expire. Units without enabling Drop-in Mode are not affected.
  • Page 38 Balance IP subnet is the same as the Firewall’s WAN port and the Router’s LAN port. If there are hosts other than the router existing on the WAN segment of Peplink Balance, check the I have other host(s) on WAN segment box, enter the IP address(es) of the host(s), and then click the down-arrow to add the hosts.
  • Page 39 WAN5 of Balance 580) as the WAN for Drop-in Mode, High Availability feature will be DISABLED automatically. Want to know more about Drop-in mode? Visit our YouTube Channel for video tutorials! http://www.youtube.com/PeplinkChannel#p/u/9/xHTLcCXsqTc http://www.peplink.com - 39 - Copyright © 2010 Peplink...
  • Page 40: Configuration Of Wan Interface(S)

    PPPoE   Mobile Internet Connection  (available only with Peplink Balance 380/390/580/710/1350, please refer to Section 10.1.5 for details.) The connection method and details are determined by, and can be obtained from, the ISP. http://www.peplink.com - 40 - Copyright © 2010 Peplink...
  • Page 41 • PPPoE Method • Mobile Internet Connection (available only with Peplink Balance 380 or above) • See Sections 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5 for configuration details of each connection method. This field illustrates that NAT (Network Address Translation) will be applied to the traffic routing over this WAN connection.
  • Page 42 This setting specifies port speed and duplex configurations of the WAN Port. By default, Auto is selected and the appropriate data speed is automatically detected by Peplink Balance. Speed In the event of negotiation issues, the port speed can be manually specified to circumvent the issues.
  • Page 43 Please refer to Section 10.2, 10.3, 10.4, and 10.5 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings respectively. http://www.peplink.com - 43 - Copyright © 2010 Peplink...
  • Page 44: Static Ip Connection

    DNS server 2 fields. If no address is entered here, this link will not be used for DNS lookups. Please refer to Section 10.2, 10.3, 10.4, and 10.5 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings respectively. http://www.peplink.com - 44 - Copyright © 2010 Peplink...
  • Page 45: Pppoe Connection

    Please refer to Section 10.2, 10.3, 10.4, and 10.5 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings respectively. Note PPPoE connection made from a firewall does not work with Drop-in mode. http://www.peplink.com - 45 - Copyright © 2010 Peplink...
  • Page 46 DNS server 2 fields. If no address is entered here, this link will not be used for DNS lookups. Please refer to Section 10.2, 10.3, 10.4, and 10.5 for details about WAN Health Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings respectively. http://www.peplink.com - 46 - Copyright © 2010 Peplink...
  • Page 47 Tunnel IP local address: 192.168.128.222 (IP address of local end of tunnel)  Outgoing NAT IP address: 210.103.22.1 (This field is used for NAT routing mode only. For all  outgoing traffic, the IP datagram will be sent via this IP address through the tunnel; as a result, the Outgoing NAT IP address is the public address that is seen by all external hosts on the WAN.)
  • Page 48 Peplink Balance Series 10.1.4.2 Routing under GRE via IP Forwarding The following figure shows a typical scenario with Peplink Balance under the GRE connection mode and IP Forwarding routing mode: In this scenario, the IP address settings are as follows: WAN IP Address: 172.23.2.123...
  • Page 49 Mobile Internet Connection 10.1.5 (This section applies only to Peplink Balance 380, 390, 580, 710 and 1350) The Mobile Internet Connection method is suitable for USB modem mobile connection such as 3G, EVDO, EDGE, and GPRS, etc. Currently it only applies to USB mobile WAN port. For the list of supported modems, please refer to Peplink 3G Modem Support page: http://www.peplink.com/3g...
  • Page 50 GSM900 / GSM1800 / GSM2100 are used in Europe, Middle East, Africa, Asia, Band Oceania, and Brazil. If All Bands is chosen, the appropriate frequency band will be used automatically. The default GSM Frequency Band is All Bands. http://www.peplink.com - 50 - Copyright © 2010 Peplink...
  • Page 51: Wan Health Check

    Peplink Balance Series 10.2 WAN Health Check To ensure traffic is routed to healthy WAN connections only, Peplink Balance provides the functionality to periodically check the health of each WAN connection. The Health Check settings for each WAN connection can be independently configured via Network >...
  • Page 52 Health Check DNS Servers. Health Check Method: SmartCheck SmartCheck applies only to the Peplink Balance 380 or above Mobile Internet connection. It monitors the link status, and is optimized for mobile networks with high traffic latency. Other Health Check Settings This setting specifies the timeout, in seconds, for ping/DNS lookup requests.
  • Page 53 DNS lookups on some public DNS servers. If the tests are success, it means the WAN may not be down but rather the target DNS server became malfunctioned. You will see the following warning message on the Main page. http://www.peplink.com - 53 - Copyright © 2010 Peplink...
  • Page 54: Bandwidth Allowance Monitor

    This option allows you to define which day in the month each billing cycle begins. This field is for defining the maximum bandwidth usage allowed for the WAN connection Monthly Allowance each month. http://www.peplink.com - 54 - Copyright © 2010 Peplink...
  • Page 55: Additional Public Ip Settings

    Internet IP addresses are assigned to this WAN connection. IP Address List Enter the fixed Internet IP addresses and the corresponding subnet mask, and then click the Down Arrow button to populate IP address entries to the IP Address List. http://www.peplink.com - 55 - Copyright © 2010 Peplink...
  • Page 56: Dynamic Dns Settings

    Due to dynamic DNS service providers’ policy, a dynamic DNS host would expire automatically because the host record was not updated for a long time. Therefore Peplink Balance performs an update every 23 days even if a WAN’s IP address did not change.
  • Page 57: Site-To-Site Vpn

    The Site-to-Site VPN of the Peplink Balance is specifically designed for multi-WAN environment. The Peplink Balance can aggregate all WAN connections’ bandwidth for routing Site-to-Site VPN traffic. Unless all the WAN connections of one site are down, the Peplink Balance can still maintain VPN up and running.
  • Page 58 Click the Add VPN Connection button to create a new VPN connection profile for making VPN connection to a remote Peplink Balance via the available WAN connections. Each profile is for making VPN connection with one remote Peplink Balance. Click a connection name on the leftmost column to edit the profile.
  • Page 59 Important Note to Users Upgrading to Firmware 5.0+ The Site-to-Site VPN in firmware 5.0+ requires the same firmware version for all devices in the VPN network. Please make sure that both ends of the Peplink Balance units are running with the same firmware version. Important Note When outbound Internet traffic is routed to remote Site-to-Site VPN peer, the remote peer will route the traffic to its first available WAN connection only.
  • Page 60: Peplink Balance Behind Nat Router

    NAT (Network Address Translation) router. To be able for a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to inbound port forward TCP port 32015 to the Peplink Balance.
  • Page 61: Vpn Status

    VPN Status is shown in the Dashboard. The connection status of each connection profile is shown as below. VPN connection status is also shown on the LCD panel of Peplink Balance 380, 390, 580, 710 and 1350. By clicking the Details button at the top-right hand corner of Site-to-Site VPN table, you will be forwarded to Status >...
  • Page 62: Management Of Outbound Traffic To Wan

    USER MANUAL Peplink Balance Series 12 Management of Outbound Traffic to WAN Peplink Balance provides the functionality to flexibly manage and load balance outbound traffic among the WAN connections. Important Note Outbound Policy is applied only when more than one WAN connection is active.
  • Page 63: Outbound Policy

    USER MANUAL Peplink Balance Series 12.1 Outbound Policy There are three main selections for the Outbound Traffic Policy of Peplink Balance: High Application Compatibility  Normal Application Compatibility  Managed by Custom Rules  The selections are explained as follows:...
  • Page 64: Custom Rules For Outbound Policy

    Algorithm to be used. Please refer to the upcoming sections for the details of the available algorithms. To create a custom rule, click Add Rule at the bottom of the table, and the following window will be displayed: http://www.peplink.com - 64 - Copyright © 2010 Peplink...
  • Page 65 Enable taken, by Peplink Balance based on the other parameters of the rule. With an Enable value of No, the rule does not take effect: Peplink Balance disregards the other parameters of the rule. This setting specifies the source IP Address, IP Network or MAC Address for traffic that Source matches the rule.
  • Page 66 Internet IP depends on the WAN connections over which communication actually takes place. As a result, a LAN client computer behind Peplink Balance may communicate using multiple Internet IP addresses. For example, a LAN client computer behind a Peplink Balance 310 with three WAN connections may communicate on the Internet using three different IP addresses.
  • Page 67 The highest priority WAN connection available will always be used for routing the specified type of traffic. A lower priority WAN connection will be used only when all higher priority connections have become unavailable. Configure multiple distribution rules to accommodate different kinds of services. http://www.peplink.com - 67 - Copyright © 2010 Peplink...
  • Page 68 Therefore this algorithm is good for two scenarios: • All WAN connections are symmetric; or • A latency sensitive application requires to be routed through the lowest latency WAN regardless the WAN’s available bandwidth. http://www.peplink.com - 68 - Copyright © 2010 Peplink...
  • Page 69: Inbound Access

    Peplink unit requires Inbound Access rules. By the custom definition of servers and services for inbound access, Internet users can access the servers behind Peplink Balance. Advanced configurations allow inbound access to be distributed among multiple servers on the LAN.
  • Page 70: Inbound Access Services

    This setting specifies whether the inbound service rule takes effect. When Yes is selected, the inbound service rule takes effect. If the inbound traffic matches the specified IP Protocol and Port, action will be taken by Peplink Balance based on the Enable other parameters of the rule.
  • Page 71 The IP Protocol setting, along with the Port setting, specifies the protocol of the service as TCP, UDP, ICMP or IP. Traffic that is received by Peplink Balance via the specified protocol at the specified port(s) is forwarded to the LAN hosts specified by the Servers setting.
  • Page 72: Upnp / Nat-Pmp Settings

    Check the corresponding box(es) to enable UPnP and/or NAT-PMP. Enable these features only if you trust the computers on the LAN. When the options are enabled, a table listing all the forwarded ports under these two protocols can be found at Status > UPnP / NAT-PMP. http://www.peplink.com - 72 - Copyright © 2010 Peplink...
  • Page 73: Definition Of Dns Records

    Upon receiving the DNS query, Peplink Balance returns, as an “A” record, the IP address for www.mycompany.com on WAN1 because WAN1 is the most appropriate healthy link. The settings for defining the DNS records to be hosted by Peplink Balance are located at: Network > Inbound Access > DNS Settings...
  • Page 74 Each WAN connection is associated with a priority number. Click Save to save the settings when configuration is complete. This section shows a list of domain names to be hosted by the Peplink Balance. Each domain can have its “NS”, “MX” and “TXT” records, and its or its sub-domains’ “A” and “CNAME”...
  • Page 75 Time, Minimum Time, and E-mail contact address that correspond to the domain. To add or edit an NS record, click the upper Edit button in the NS Record box. Then the table will expand to look like the following: http://www.peplink.com - 75 - Copyright © 2010 Peplink...
  • Page 76 (fully qualified domain name). Click the Add button on the right to finish and to add the other one. After finishing adding NS records, click the Save button. (Before clicking the Save button, all NS record changes are not yet saved to the Peplink Balance.) MX Record 13.4.3...
  • Page 77 To add an A record, click the New A Record button. The screen resembles the one below: A Record Editing This field specifies the A record of this sub-domain to be served by the Peplink Balance. The wildcard character “*” is supported. The IP addresses of "*.domain.name" will be Host Name returned for every name ending with ".domain.name"...
  • Page 78: Ptr Record

    For example, if the IP address range 11.22.33.0 to 11.22.33.255 is delegated to the DNS server on the Peplink Balance, you will also have to create a domain 33.22.11.in-addr.arpa and have its NS records pointing to your DNS server’s (the Peplink Balance) public IP addresses.
  • Page 79 202.153.122.108 balancewan2 67.38.212.18 202.153.122.108 and 67.38.212.18 represent the WAN1 and WAN2 Internet IP addresses of Peplink Balance, respectively. The values of the IP addresses are fictitious and for illustration only; the actual IP addresses in implementation will likely be different.
  • Page 80 Testing the DNS Configuration The following steps can be used to test the DNS configuration: From a host on the Internet, use an IP address of Peplink Balance and nslookup to lookup the corresponding host name. Check the information that is returned for the expected results.
  • Page 81: Dns Record Import Wizard

    In the blank space, enter the Domain Names (Zones) which you would like to assign with the IP • address entered in the previous step. Enter one domain name per line. • Select Next>> to continue. http://www.peplink.com - 81 - Copyright © 2010 Peplink...
  • Page 82 • After the Fetching zone records process has completed, the fetch results would be shown as above. You can view import details by clicking the corresponding hyperlink on the right hand size. http://www.peplink.com - 82 - Copyright © 2010 Peplink...
  • Page 83: Nat Mappings

    Note 2: WAN connections in drop-in or IP forwarding mode are not shown here. Click Save to save the settings when configuration has been completed. Important Note Inbound firewall rules override Inbound Mapping settings. http://www.peplink.com - 83 - Copyright © 2010 Peplink...
  • Page 84: Qos

    15 QoS 15.1 User Groups (This section applies only to Peplink Balance 380, 390, 580, 710 and 1350.) LAN and PPTP clients can be categorized into three user groups - Manager, Staff, and Guest. This table allows you to define rules and assign client IP addresses or subnets to a user group. You can apply different bandwidth and traffic prioritization policies on each user group in the Bandwidth Control and Application sections.
  • Page 85 WAN connection) that each individual Staff and Guest member can consume. No limit can be imposed on individual Manager members. By default, Download and Upload Bandwidth Limits are set to unlimited (set as 0). http://www.peplink.com - 85 - Copyright © 2010 Peplink...
  • Page 86: Application

    Secure Web (HTTPS) When enabled, HTTPS (TCP port 443) traffic will be prioritized. For Peplink Balance 380, 390, 580, 710 and 1350: You can choose whether to apply the same Prioritization settings to all user groups or customize the settings for each group.
  • Page 87 The DSL/Cable Optimization can relieve such issue. When it is enabled, the download speed will become less affected by the upload traffic. By default, this feature is enabled. http://www.peplink.com - 87 - Copyright © 2010 Peplink...
  • Page 88: Firewall

    LAN side of the network. It can protect the local network from potential hacker attacks, offensive Web sites, and/or other inappropriate uses. The firewall functionality of Peplink Balance supports the selective filtering of data traffic in both directions: Outbound (LAN to WAN) ...
  • Page 89 Protocol/IP/Port, actions will be taken by Peplink Balance based on the other parameters of Enable the rule. When No is selected, the firewall rule does not take effect. Peplink Balance will disregard the other parameters of the rule. This setting is applicable to Inbound Firewall Rules only.
  • Page 90 Destination IP & Port Action With the value of Allow for the Action setting, the matching traffic passes through Peplink Balance (to be routed to the destination). If the value of the Action setting is set to Deny, the matching traffic does not pass through Peplink Balance (and is discarded).
  • Page 91 If the default inbound rule is set as Allow for NAT enabled WANs, no inbound Allow firewall rules will be required for inbound Port Forwarding and inbound NAT Mapping rules. However, if the default inbound rule is set as Deny, a corresponding Allow firewall rules will be required. http://www.peplink.com - 91 - Copyright © 2010 Peplink...
  • Page 92: Intrusion Detection And Dos Prevention

    When this feature is enabled, the Balance will detect and protect from the following kinds of intrusions and denial-of-service attacks. • Port Scan: NMAP FIN/URG/PSH Xmas Tree Another Xmas Tree Null Scan SYN/RST SYN/FIN • SYN Flood Prevention • Ping Flood Attack Prevention http://www.peplink.com - 92 - Copyright © 2010 Peplink...
  • Page 93: Miscellaneous Settings

    Peplink Balance supports High Availability (HA) configurations via an open standard Virtual Router Redundancy Protocol (VRRP, RFC 3768). In an HA configuration, two same-model Peplink Balance units (e.g. a pair of Peplink Balance 210 units, or a pair of Peplink Balance 710 units) provide redundancy and failover in a master-slave arrangement.
  • Page 94 Checking this box specifies that the Peplink Balance unit is part of a High Availability High Availability configuration. This setting specifies a number that identifies a pair of Peplink Balance units that operate in Group Number a High Availability configuration.
  • Page 95 Peplink Balance Series Important Note Under HA mode, Dynamic DNS is not supported. During a failover or fail-back, the active Peplink Balance does not perform Dynamic DNS updates. As a result, the resolved addresses may not be the IP address of the active Peplink Balance unit.
  • Page 96: Pptp Server

    USER MANUAL Peplink Balance Series 17.2 PPTP Server Peplink Balance has a built-in PPTP Server, which enables remote computers to conveniently and securely access the local network. PPTP server setting is located at: Network > Misc. Settings > PPTP Server Simply check the box to enable the PPTP server function.
  • Page 97: Service Forwarding

    The built-in DNS name server will distribute DNS lookups to corresponding DNS servers of all available WAN connections. In this case, DNS service will not be interrupted even if any WAN connection is down. http://www.peplink.com - 97 - Copyright © 2010 Peplink...
  • Page 98 Some ISPs require their users to send e-mails via the ISP’s SMTP server. All outgoing SMTP connections are blocked except those connecting to the ISP’s. The Peplink Balance supports to intercept and redirect all outgoing SMTP connections (destined for TCP port 25) via a WAN connection to the WAN’s corresponding SMTP server.
  • Page 99 Web Proxy Forwarding 17.3.2 When this feature is enabled, the Peplink Balance will intercept all outgoing connections destined for the proxy server specified in "Web Proxy Server Interception Settings", choose a WAN connection with reference of Outbound Policy, and then forward them to the specified web proxy server and port number.
  • Page 100: Service Passthrough

    Service Passthrough settings can be found at: Network > Misc. Settings > Service Passthrough Some Internet services required to be specially handled in a multi-WAN environment. The Peplink Balance supports handling such services correctly such that Internet applications do not notice it is behind a multi-WAN router.
  • Page 101: System Settings

    For security reason, after logging in to the Web Admin Interface for the first time, it is recommended to change the administrator password. Configuring the administration interface to be accessible only from the LAN can further improve system security. Administrative Settings configuration is located at: System > Admin Security http://www.peplink.com - 101 - Copyright © 2010 Peplink...
  • Page 102 USER MANUAL Peplink Balance Series Admin Settings This field allows you to define a name for this Peplink Balance unit. Router Name By default, Router Name is set as Balance_XXXX, where XXXX refers to the last 4 digits of the serial number of that balance unit.
  • Page 103 To define multiple subnets, separate each IP subnet one in a line. For example: 192.168.0.0/24 10.8.0.0/16 This is to choose which WAN IP address(es) the web server should listen on. Allowed WAN IP Address(es) http://www.peplink.com - 103 - Copyright © 2010 Peplink...
  • Page 104: Firmware Upgrade

    Do not disconnect the power during firmware upgrade process. Do not attempt to upload a non-firmware file, or a firmware file that is not qualified, or not supported, by Peplink. Upgrading a Peplink Balance unit with an invalid firmware file will damage the unit, and may void the warranty.
  • Page 105: Time

    This specifies the time zone (along with the corresponding Daylight Savings Time scheme) in which Peplink Balance operates. Time Zone The Time Zone value affects the time stamps in the Event Log of Peplink Balance and E- mail notifications. Checked the box Show all to show all time zone options.
  • Page 106: Email Notification

    Email Notification Administrator when the WAN status changes, or when new firmware is available. If the box Enable is not checked, Email Notification is disabled and Peplink Balance will not send email messages. This setting specifies the SMTP server to be used for sending email. If the Server requires SMTP Server authentication, check the box Require authentication.
  • Page 107 After it is clicked, you will see this screen to confirm the settings: Click Yes to confirm. Wait a few seconds. You will see a returned message and the detailed test result. http://www.peplink.com - 107 - Copyright © 2010 Peplink...
  • Page 108: Remote Syslog

    USER MANUAL Peplink Balance Series 18.5 Remote Syslog The Remote Syslog functionality of Peplink Balance enables event logging at a specified remote Syslog server. The settings for configuring Remote System Log are found at: System > Remote Syslog Remote Syslog Settings Remote Syslog This setting specifies whether or not to log events at the specified remote Syslog server.
  • Page 109: Snmp

    USER MANUAL Peplink Balance Series 18.6 SNMP SNMP, or Simple Network Management Protocol, is an open standard that can be used to collect information about the Peplink Balance unit. SNMP configuration is located at: System > SNMP SNMP Settings SNMP Device This field shows the router name defined in System >...
  • Page 110 This setting specifies via a drop-down menu the one of the following valid privacy protocols: Privacy Protocol • NONE • This setting specifies the privacy password, and is applicable only if the DES privacy Privacy Password protocol is selected. http://www.peplink.com - 110 - Copyright © 2010 Peplink...
  • Page 111: Reporting Server

    This setting specifies the Internet IP address or host name of the reporting server. Reporting Server By default, the Reporting Server value is report.Peplink.com. Click the link to register a login ID on Peplink’s Reporting Server. Each login ID can “create a login” associate with multiple Peplink Balance devices.
  • Page 112 “view reports” Important Note The registration process will establish contact to the reporting server to associate the Peplink Balance unit with the specified user account on the server. Prior to registration, please ensure that the user account to be entered is valid.
  • Page 113: Configuration

    In a High Availability (HA) configuration, to quickly load onto the Peplink Balance unit the configuration of its HA counterpart, click the Upload button. After loading the settings, configure the LAN IP address of the Peplink Balance unit to be different from the HA counterpart.
  • Page 114: Flash Management

    Peplink Balance Series 18.9 Flash Management The Peplink Balance 210 and 310 are equipped with dual flash memory modules. The Peplink Balance 380, 390, 580, 710 and 1350 have single module but with two partitions. Each flash memory or partition stores one firmware image.
  • Page 115: Reboot

    Download Diagnostic Report button is for exporting a report file required for system investigation. If you encounter issues and would like to contact Peplink Support Team (http://www.peplink.com/contact/), please download this file and attach it along with a description of your encountered issue.
  • Page 116: Ping Test

    Peplink Balance Series 18.11 Ping Test The Ping Test tool in Peplink Balance performs Pings through a specified Ethernet interface. Number of pings can be specified in Number of times with a maximum of 10 times. The Ping utility is located at System > Tools > Ping, illustrated as follows: A System Administrator can use the Ping utility to manually check the connectivity of a particular LAN/WAN connection.
  • Page 117: Traceroute Test

    Peplink Balance Series 18.12 Traceroute Test The Traceroute Test tool in Peplink Balance traces the routing path to the destination through a particular Ethernet interface. The Traceroute Test utility is located at System > Tools > Traceroute, illustrated as follows: A System Administrator can use the Traceroute utility to analyze the connection path of a LAN/WAN connection.
  • Page 118: Status

    USER MANUAL Peplink Balance Series 19 Status This section displays the information of Peplink Balance on the Device, Active Sessions, Client List, WINS Client List, Site-to-Site VPN, UPnP / NAT-PMP, Event Log, and Bandwidth. 19.1 Device System information is located at Status > Device:...
  • Page 119: Active Sessions

    The client list table is located at Status > Client List. It lists DHCP client IP address, their Name (retrieved from DHCP reservation table) and MAC address that the Peplink Balance has offered IP addresses to since it is powered up.
  • Page 120: Wins Client

    Details about Site-to-Site VPN connection peers would be shown as below. You can simply click on the corresponding peer name to explore the WAN connection(s) status and subnet information of each VPN peer. http://www.peplink.com - 120 - Copyright © 2010 Peplink...
  • Page 121: Upnp / Nat-Pmp

    Event Log information is located at: Status > Event Log The log section displays a list of events that has taken place on the Peplink Balance unit. Click the Refresh button to retrieve log entries again. Click the Clear Log button to clear the log. Select 50, 100, or all to show the corresponding number of events in the log.
  • Page 122: Bandwidth

    Peplink Balance Series 19.8 Bandwidth This section shows the bandwidth usage statistics, located at: Status > Bandwidth. Bandwidth usage will not be shown at the time when the Peplink Balance had been switched OFF. Real-Time 19.8.1 Click Add Trip Counter to set a new trip counter with the current time as starting time. Click Reset Trip Counter to reset the starting time of this trip counter.
  • Page 123 Click on a date to view the client bandwidth usage of that specific date. This feature is not available if you have selected to view the bandwidth usage of only a particular WAN connection. All WAN Daily Bandwidth Usage WAN2 Daily Bandwidth Usage http://www.peplink.com - 123 - Copyright © 2010 Peplink...
  • Page 124 Click the first two rows to view the client bandwidth usage of the most recent two months. This feature is not available if you have chosen to view the bandwidth usage of only a particular WAN connection. All WAN Daily Bandwidth Usage WAN2 Daily Bandwidth Usage http://www.peplink.com - 124 - Copyright © 2010 Peplink...
  • Page 125: Appendix A. Restoration Of Factory Defaults

    USER MANUAL Peplink Balance Series Appendix A. Restoration of Factory Defaults To restore the factory default settings on a Peplink Balance unit, perform the following: For Balance 210/310: Locate the reset button on the Peplink Balance unit. With a paper clip, press and keep the reset button pressed for at least 10 seconds, until the unit reboots itself.
  • Page 126: Appendix B. Routing Under Dhcp, Static Ip, And Pppoe

    Peplink Balance Series Appendix B. Routing under DHCP, Static IP, and PPPoE The information in this appendix applies only to situations where Peplink Balance operates with to a WAN connection under DHCP, Static IP, and PPPoE. For information that applies to GRE, please refer to: Section 10.1.4.1, Routing under GRE via Network Address Translation (NAT)
  • Page 127: Routing Via Ip Forwarding

    USER MANUAL Peplink Balance Series Routing via IP Forwarding When Peplink Balance is operating under IP Forwarding mode, the IP addresses of IP packets are unchanged; Peplink Balance forwards both inbound and outbound IP packets without changing their IP addresses.
  • Page 128: Appendix C. Case Studies

    Add a new outbound traffic rule for SMTP. In general, to add a new outbound traffic rule: Click here and Select Managed by Custom Rules Click Add Rule to add a new load distribution rule. http://www.peplink.com - 128 - Copyright © 2010 Peplink...
  • Page 129 Settings for HTTP: Set the weight of WAN1 and WAN2 for HTTP to 3 and 4, respectively Settings for SMTP: Set the weight of WAN1 and WAN2 for SMTP to 1 and 8, respectively http://www.peplink.com - 129 - Copyright © 2010 Peplink...
  • Page 130: Maintaining The Same Ip Address Throughout A Session

    WAN connection for source-destination pairs of IP addresses, and prevents sessions from being dropped. With Persistence is configured and the option By Source is selected, Peplink Balance uses a consistent WAN connection for same source IP addresses. This option offers even higher application compatibility but the outbound traffic load will be distributed more evenly only if more users use the Internet.
  • Page 131: Bypassing The Firewall To Access Hosts On Lan

    WAN connections, via Network > NAT Mappings > Add NAT Rule For example, the following settings add the host, with IP address 192.168.1.102, to an Inbound Mapping and bind the host to the default IP and 211.123.123.100 of WAN1: http://www.peplink.com - 131 - Copyright © 2010 Peplink...
  • Page 132: Inbound Access Restriction

    C.4.2 Solution Firewall functionality is built into Peplink Balance. By default, inbound access is unrestricted. Enabling a basic level of protection involves setting up firewall rules. For example, to set up a firewall rule between the Internet and the private network that monitors Web...
  • Page 133: Inbound Access Restriction

    For security reasons, it may be appropriate to disallow LAN users to use ftp to transfer files to and from the Internet, or otherwise restrict outbound access. This can easily be achieved by setting up an outbound firewall rule with Peplink Balance. C.5.2 Solution...
  • Page 134: Appendix D. Troubleshooting

    Try to test with a web site that does not enable Keep Alive. For example, try http://private.dnsstuff.com/tools/aboutyou.ch (This third-party web site is provided only for reference. Peplink has no association with the site and does not guarantee the site's validity or availability.)
  • Page 135 You can test the WAN connection by Ping, which is similar to problem 4. As we want to isolate the problems from the LAN, Ping will be performed from Peplink Balance. By using the Ping/Traceroute under the tab Status of the Peplink Balance, you may able to find out the source of problem.
  • Page 136: Appendix E. Product Specifications

    USER MANUAL Peplink Balance Series Appendix E. Product Specifications Peplink Balance 210 and 310 Routing Drop-in Mode and NAT  Flexible Custom Outbound Routing Policy  WAN Support DHCP, PPPoE, GRE, and Static IP  Inbound and Outbound Link Load Balance ...
  • Page 137: Peplink Balance 380 And 390

    USER MANUAL Peplink Balance Series Peplink Balance 380 and 390 Routing Drop-in Mode and NAT  Flexible Custom Outbound Routing Policy  WAN Support DHCP, PPPoE, GRE, and Static IP  Inbound and Outbound Link Load Balance  Device Management Wizard &...
  • Page 138: Peplink Balance 580

    RS-232 Console / Serial (modem / TA) Port  LAN Bypass from WAN5 to LAN  Power Specification AC input 110/220V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing  http://www.peplink.com - 138 - Copyright © 2010 Peplink...
  • Page 139: Peplink Balance 710

    One RJ-45 for an IEEE 802.3ab 10/100/1000M LAN  RS-232 Console / Serial (modem / TA) Port  Power Specification AC input 110/220V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com - 139 - Copyright © 2010 Peplink...
  • Page 140: Peplink Balance 1350

    RS-232 Console / Serial (modem / TA) Port  LAN Bypass from WAN1 to LAN  Power Specification AC input 110/220V  Operating Environment Temperature: 0°C - 40°C  Humidity: 10% - 90% (non-condensing)  http://www.peplink.com - 140 - Copyright © 2010 Peplink...
  • Page 141 Tel: +39 02 8986 6852 Tel: +39 02 8986 6852 ©2010 Peplink International Ltd. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.

This manual is also suitable for:

3803905807101350310

Table of Contents