The Peplink Balance 210/310 provides advanced features for small business. The Peplink Balance 380, 390, 580, 710 and 1350, with a suite of advanced enterprise-class features, make ideal single-box solutions for medium to large-sized business environments, and allow service providers to enable highly available multi-network services.
USER MANUAL Peplink Balance Series Product Features Peplink Balance Series products enable all LAN users to share broadband Internet connections, and provide advanced features to enhance Internet access. The following is the list of supported features: Supported Network Features 3.1.1 Multiple public IP support (DHCP, PPPoE, Static IP Address, or GRE) ...
Hardware backup via LAN bypass (available only with hardware revision 2 of Balance 390, Balance 580 and 1350) Read-only user for Web Admin Built-in WINS server USB based mobile modem support (available only with Peplink Balance 380, 390, 580, 710 and 1350) Time server synchronization SNMP ...
USER MANUAL Peplink Balance Series Peplink Balance Overview Peplink Balance 210 Front Panel Appearance 5.1.1 WAN Ports Status LED LAN Ports Power LED Reset Button LED Indicators 5.1.2 The statuses indicated by the Front Panel LEDs are as follows: Power and Status Indicators OFF –...
USER MANUAL Peplink Balance Series Peplink Balance 380 / 390 Front Panel Appearance 5.3.1 Power LED LCD Display Console WAN Ports LCD Controls LAN Port LED Indicators 5.3.2 USB Ports The statuses indicated by the Front Panel LEDs are as follows: Power and Status Indicators OFF –...
At the high level, construct the network according to the following steps: With an Ethernet cable, connect a computer to one of the LAN ports on the Peplink Balance. For Peplink Balance 210 and 310, repeat with different cables for up to 4 computers to be connected.
USER MANUAL Peplink Balance Series Configuring the Network Environment To ensure that Peplink Balance works properly in the LAN environment and can access the Internet via the WAN connections, please refer to the following setup procedures: LAN Configuration For basic configuration, refer to Section 7, Basic Configuration.
Connecting to Web Admin Interface Start a web browser on a computer that is connected with Peplink Balance through LAN. To connect to Web Admin Interface of Peplink Balance, enter the following LAN IP address in the address field of the web browser: http://192.168.1.1...
USER MANUAL Peplink Balance Series Configuration with Setup Wizard The Setup Wizard of Peplink Balance simplifies the task of configuring WAN connection(s) by guiding the configuration process step by step. To begin, click Setup Wizard after connecting to Web Admin Interface.
Page 34
You can also choose whether or not to advertise the speed to the peer by selecting the Advertise Speed checkbox. Drop-in Mode Settings Drop-in Mode eases the installation of Peplink Balance on a live network between the existing Firewall and Router, such that no configuration changes are required Default Gateway on existing equipment.
Page 35
This option allows you to input the DNS server addresses to be offered to the DNS Servers DHCP clients. If Assign DNS server automatically is selected, the Peplink Balance’s built-in DNS server address (i.e. LAN IP address) will be offered.
Page 36
This table is for defining custom local DNS records. A static local DNS record consists of a Host Name and an IP Address. When Local DNS looking up the Host Name from the LAN to LAN IP of Peplink Balance, the Records corresponding IP Address will be returned.
Otherwise, hosts on one side may not be able to reach hosts on the other side of Peplink Balance until the old ARP records expire. Units without enabling Drop-in Mode are not affected.
Page 38
Balance IP subnet is the same as the Firewall’s WAN port and the Router’s LAN port. If there are hosts other than the router existing on the WAN segment of Peplink Balance, check the I have other host(s) on WAN segment box, enter the IP address(es) of the host(s), and then click the down-arrow to add the hosts.
Page 41
• PPPoE Method • Mobile Internet Connection (available only with Peplink Balance 380 or above) • See Sections 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5 for configuration details of each connection method. This field illustrates that NAT (Network Address Translation) will be applied to the traffic routing over this WAN connection.
Page 42
This setting specifies port speed and duplex configurations of the WAN Port. By default, Auto is selected and the appropriate data speed is automatically detected by Peplink Balance. Speed In the event of negotiation issues, the port speed can be manually specified to circumvent the issues.
Page 47
Tunnel IP local address: 192.168.128.222 (IP address of local end of tunnel) Outgoing NAT IP address: 210.103.22.1 (This field is used for NAT routing mode only. For all outgoing traffic, the IP datagram will be sent via this IP address through the tunnel; as a result, the Outgoing NAT IP address is the public address that is seen by all external hosts on the WAN.)
Page 48
Peplink Balance Series 10.1.4.2 Routing under GRE via IP Forwarding The following figure shows a typical scenario with Peplink Balance under the GRE connection mode and IP Forwarding routing mode: In this scenario, the IP address settings are as follows: WAN IP Address: 172.23.2.123...
Page 49
Mobile Internet Connection 10.1.5 (This section applies only to Peplink Balance 380, 390, 580, 710 and 1350) The Mobile Internet Connection method is suitable for USB modem mobile connection such as 3G, EVDO, EDGE, and GPRS, etc. Currently it only applies to USB mobile WAN port. For the list of supported modems, please refer to Peplink 3G Modem Support page: http://www.peplink.com/3g...
Peplink Balance Series 10.2 WAN Health Check To ensure traffic is routed to healthy WAN connections only, Peplink Balance provides the functionality to periodically check the health of each WAN connection. The Health Check settings for each WAN connection can be independently configured via Network >...
Page 52
Health Check DNS Servers. Health Check Method: SmartCheck SmartCheck applies only to the Peplink Balance 380 or above Mobile Internet connection. It monitors the link status, and is optimized for mobile networks with high traffic latency. Other Health Check Settings This setting specifies the timeout, in seconds, for ping/DNS lookup requests.
Due to dynamic DNS service providers’ policy, a dynamic DNS host would expire automatically because the host record was not updated for a long time. Therefore Peplink Balance performs an update every 23 days even if a WAN’s IP address did not change.
The Site-to-Site VPN of the Peplink Balance is specifically designed for multi-WAN environment. The Peplink Balance can aggregate all WAN connections’ bandwidth for routing Site-to-Site VPN traffic. Unless all the WAN connections of one site are down, the Peplink Balance can still maintain VPN up and running.
Page 58
Click the Add VPN Connection button to create a new VPN connection profile for making VPN connection to a remote Peplink Balance via the available WAN connections. Each profile is for making VPN connection with one remote Peplink Balance. Click a connection name on the leftmost column to edit the profile.
Page 59
Important Note to Users Upgrading to Firmware 5.0+ The Site-to-Site VPN in firmware 5.0+ requires the same firmware version for all devices in the VPN network. Please make sure that both ends of the Peplink Balance units are running with the same firmware version. Important Note When outbound Internet traffic is routed to remote Site-to-Site VPN peer, the remote peer will route the traffic to its first available WAN connection only.
NAT (Network Address Translation) router. To be able for a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to inbound port forward TCP port 32015 to the Peplink Balance.
VPN Status is shown in the Dashboard. The connection status of each connection profile is shown as below. VPN connection status is also shown on the LCD panel of Peplink Balance 380, 390, 580, 710 and 1350. By clicking the Details button at the top-right hand corner of Site-to-Site VPN table, you will be forwarded to Status >...
USER MANUAL Peplink Balance Series 12 Management of Outbound Traffic to WAN Peplink Balance provides the functionality to flexibly manage and load balance outbound traffic among the WAN connections. Important Note Outbound Policy is applied only when more than one WAN connection is active.
USER MANUAL Peplink Balance Series 12.1 Outbound Policy There are three main selections for the Outbound Traffic Policy of Peplink Balance: High Application Compatibility Normal Application Compatibility Managed by Custom Rules The selections are explained as follows:...
Page 65
Enable taken, by Peplink Balance based on the other parameters of the rule. With an Enable value of No, the rule does not take effect: Peplink Balance disregards the other parameters of the rule. This setting specifies the source IP Address, IP Network or MAC Address for traffic that Source matches the rule.
Page 66
Internet IP depends on the WAN connections over which communication actually takes place. As a result, a LAN client computer behind Peplink Balance may communicate using multiple Internet IP addresses. For example, a LAN client computer behind a Peplink Balance 310 with three WAN connections may communicate on the Internet using three different IP addresses.
Peplink unit requires Inbound Access rules. By the custom definition of servers and services for inbound access, Internet users can access the servers behind Peplink Balance. Advanced configurations allow inbound access to be distributed among multiple servers on the LAN.
This setting specifies whether the inbound service rule takes effect. When Yes is selected, the inbound service rule takes effect. If the inbound traffic matches the specified IP Protocol and Port, action will be taken by Peplink Balance based on the Enable other parameters of the rule.
Page 71
The IP Protocol setting, along with the Port setting, specifies the protocol of the service as TCP, UDP, ICMP or IP. Traffic that is received by Peplink Balance via the specified protocol at the specified port(s) is forwarded to the LAN hosts specified by the Servers setting.
Upon receiving the DNS query, Peplink Balance returns, as an “A” record, the IP address for www.mycompany.com on WAN1 because WAN1 is the most appropriate healthy link. The settings for defining the DNS records to be hosted by Peplink Balance are located at: Network > Inbound Access > DNS Settings...
Page 74
Each WAN connection is associated with a priority number. Click Save to save the settings when configuration is complete. This section shows a list of domain names to be hosted by the Peplink Balance. Each domain can have its “NS”, “MX” and “TXT” records, and its or its sub-domains’ “A” and “CNAME”...
Page 76
(fully qualified domain name). Click the Add button on the right to finish and to add the other one. After finishing adding NS records, click the Save button. (Before clicking the Save button, all NS record changes are not yet saved to the Peplink Balance.) MX Record 13.4.3...
Page 77
To add an A record, click the New A Record button. The screen resembles the one below: A Record Editing This field specifies the A record of this sub-domain to be served by the Peplink Balance. The wildcard character “*” is supported. The IP addresses of "*.domain.name" will be Host Name returned for every name ending with ".domain.name"...
For example, if the IP address range 11.22.33.0 to 11.22.33.255 is delegated to the DNS server on the Peplink Balance, you will also have to create a domain 33.22.11.in-addr.arpa and have its NS records pointing to your DNS server’s (the Peplink Balance) public IP addresses.
Page 79
202.153.122.108 balancewan2 67.38.212.18 202.153.122.108 and 67.38.212.18 represent the WAN1 and WAN2 Internet IP addresses of Peplink Balance, respectively. The values of the IP addresses are fictitious and for illustration only; the actual IP addresses in implementation will likely be different.
Page 80
Testing the DNS Configuration The following steps can be used to test the DNS configuration: From a host on the Internet, use an IP address of Peplink Balance and nslookup to lookup the corresponding host name. Check the information that is returned for the expected results.
15 QoS 15.1 User Groups (This section applies only to Peplink Balance 380, 390, 580, 710 and 1350.) LAN and PPTP clients can be categorized into three user groups - Manager, Staff, and Guest. This table allows you to define rules and assign client IP addresses or subnets to a user group. You can apply different bandwidth and traffic prioritization policies on each user group in the Bandwidth Control and Application sections.
Secure Web (HTTPS) When enabled, HTTPS (TCP port 443) traffic will be prioritized. For Peplink Balance 380, 390, 580, 710 and 1350: You can choose whether to apply the same Prioritization settings to all user groups or customize the settings for each group.
LAN side of the network. It can protect the local network from potential hacker attacks, offensive Web sites, and/or other inappropriate uses. The firewall functionality of Peplink Balance supports the selective filtering of data traffic in both directions: Outbound (LAN to WAN) ...
Page 89
Protocol/IP/Port, actions will be taken by Peplink Balance based on the other parameters of Enable the rule. When No is selected, the firewall rule does not take effect. Peplink Balance will disregard the other parameters of the rule. This setting is applicable to Inbound Firewall Rules only.
Page 90
Destination IP & Port Action With the value of Allow for the Action setting, the matching traffic passes through Peplink Balance (to be routed to the destination). If the value of the Action setting is set to Deny, the matching traffic does not pass through Peplink Balance (and is discarded).
Peplink Balance supports High Availability (HA) configurations via an open standard Virtual Router Redundancy Protocol (VRRP, RFC 3768). In an HA configuration, two same-model Peplink Balance units (e.g. a pair of Peplink Balance 210 units, or a pair of Peplink Balance 710 units) provide redundancy and failover in a master-slave arrangement.
Page 94
Checking this box specifies that the Peplink Balance unit is part of a High Availability High Availability configuration. This setting specifies a number that identifies a pair of Peplink Balance units that operate in Group Number a High Availability configuration.
Page 95
Peplink Balance Series Important Note Under HA mode, Dynamic DNS is not supported. During a failover or fail-back, the active Peplink Balance does not perform Dynamic DNS updates. As a result, the resolved addresses may not be the IP address of the active Peplink Balance unit.
USER MANUAL Peplink Balance Series 17.2 PPTP Server Peplink Balance has a built-in PPTP Server, which enables remote computers to conveniently and securely access the local network. PPTP server setting is located at: Network > Misc. Settings > PPTP Server Simply check the box to enable the PPTP server function.
Page 98
Some ISPs require their users to send e-mails via the ISP’s SMTP server. All outgoing SMTP connections are blocked except those connecting to the ISP’s. The Peplink Balance supports to intercept and redirect all outgoing SMTP connections (destined for TCP port 25) via a WAN connection to the WAN’s corresponding SMTP server.
Page 99
Web Proxy Forwarding 17.3.2 When this feature is enabled, the Peplink Balance will intercept all outgoing connections destined for the proxy server specified in "Web Proxy Server Interception Settings", choose a WAN connection with reference of Outbound Policy, and then forward them to the specified web proxy server and port number.
Service Passthrough settings can be found at: Network > Misc. Settings > Service Passthrough Some Internet services required to be specially handled in a multi-WAN environment. The Peplink Balance supports handling such services correctly such that Internet applications do not notice it is behind a multi-WAN router.
Page 102
USER MANUAL Peplink Balance Series Admin Settings This field allows you to define a name for this Peplink Balance unit. Router Name By default, Router Name is set as Balance_XXXX, where XXXX refers to the last 4 digits of the serial number of that balance unit.
Do not disconnect the power during firmware upgrade process. Do not attempt to upload a non-firmware file, or a firmware file that is not qualified, or not supported, by Peplink. Upgrading a Peplink Balance unit with an invalid firmware file will damage the unit, and may void the warranty.
This specifies the time zone (along with the corresponding Daylight Savings Time scheme) in which Peplink Balance operates. Time Zone The Time Zone value affects the time stamps in the Event Log of Peplink Balance and E- mail notifications. Checked the box Show all to show all time zone options.
Email Notification Administrator when the WAN status changes, or when new firmware is available. If the box Enable is not checked, Email Notification is disabled and Peplink Balance will not send email messages. This setting specifies the SMTP server to be used for sending email. If the Server requires SMTP Server authentication, check the box Require authentication.
USER MANUAL Peplink Balance Series 18.5 Remote Syslog The Remote Syslog functionality of Peplink Balance enables event logging at a specified remote Syslog server. The settings for configuring Remote System Log are found at: System > Remote Syslog Remote Syslog Settings Remote Syslog This setting specifies whether or not to log events at the specified remote Syslog server.
USER MANUAL Peplink Balance Series 18.6 SNMP SNMP, or Simple Network Management Protocol, is an open standard that can be used to collect information about the Peplink Balance unit. SNMP configuration is located at: System > SNMP SNMP Settings SNMP Device This field shows the router name defined in System >...
This setting specifies the Internet IP address or host name of the reporting server. Reporting Server By default, the Reporting Server value is report.Peplink.com. Click the link to register a login ID on Peplink’s Reporting Server. Each login ID can “create a login” associate with multiple Peplink Balance devices.
Page 112
“view reports” Important Note The registration process will establish contact to the reporting server to associate the Peplink Balance unit with the specified user account on the server. Prior to registration, please ensure that the user account to be entered is valid.
In a High Availability (HA) configuration, to quickly load onto the Peplink Balance unit the configuration of its HA counterpart, click the Upload button. After loading the settings, configure the LAN IP address of the Peplink Balance unit to be different from the HA counterpart.
Peplink Balance Series 18.9 Flash Management The Peplink Balance 210 and 310 are equipped with dual flash memory modules. The Peplink Balance 380, 390, 580, 710 and 1350 have single module but with two partitions. Each flash memory or partition stores one firmware image.
Download Diagnostic Report button is for exporting a report file required for system investigation. If you encounter issues and would like to contact Peplink Support Team (http://www.peplink.com/contact/), please download this file and attach it along with a description of your encountered issue.
Peplink Balance Series 18.11 Ping Test The Ping Test tool in Peplink Balance performs Pings through a specified Ethernet interface. Number of pings can be specified in Number of times with a maximum of 10 times. The Ping utility is located at System > Tools > Ping, illustrated as follows: A System Administrator can use the Ping utility to manually check the connectivity of a particular LAN/WAN connection.
Peplink Balance Series 18.12 Traceroute Test The Traceroute Test tool in Peplink Balance traces the routing path to the destination through a particular Ethernet interface. The Traceroute Test utility is located at System > Tools > Traceroute, illustrated as follows: A System Administrator can use the Traceroute utility to analyze the connection path of a LAN/WAN connection.
USER MANUAL Peplink Balance Series 19 Status This section displays the information of Peplink Balance on the Device, Active Sessions, Client List, WINS Client List, Site-to-Site VPN, UPnP / NAT-PMP, Event Log, and Bandwidth. 19.1 Device System information is located at Status > Device:...
The client list table is located at Status > Client List. It lists DHCP client IP address, their Name (retrieved from DHCP reservation table) and MAC address that the Peplink Balance has offered IP addresses to since it is powered up.
Event Log information is located at: Status > Event Log The log section displays a list of events that has taken place on the Peplink Balance unit. Click the Refresh button to retrieve log entries again. Click the Clear Log button to clear the log. Select 50, 100, or all to show the corresponding number of events in the log.
Peplink Balance Series 19.8 Bandwidth This section shows the bandwidth usage statistics, located at: Status > Bandwidth. Bandwidth usage will not be shown at the time when the Peplink Balance had been switched OFF. Real-Time 19.8.1 Click Add Trip Counter to set a new trip counter with the current time as starting time. Click Reset Trip Counter to reset the starting time of this trip counter.
USER MANUAL Peplink Balance Series Appendix A. Restoration of Factory Defaults To restore the factory default settings on a Peplink Balance unit, perform the following: For Balance 210/310: Locate the reset button on the Peplink Balance unit. With a paper clip, press and keep the reset button pressed for at least 10 seconds, until the unit reboots itself.
Peplink Balance Series Appendix B. Routing under DHCP, Static IP, and PPPoE The information in this appendix applies only to situations where Peplink Balance operates with to a WAN connection under DHCP, Static IP, and PPPoE. For information that applies to GRE, please refer to: Section 10.1.4.1, Routing under GRE via Network Address Translation (NAT)
USER MANUAL Peplink Balance Series Routing via IP Forwarding When Peplink Balance is operating under IP Forwarding mode, the IP addresses of IP packets are unchanged; Peplink Balance forwards both inbound and outbound IP packets without changing their IP addresses.
WAN connection for source-destination pairs of IP addresses, and prevents sessions from being dropped. With Persistence is configured and the option By Source is selected, Peplink Balance uses a consistent WAN connection for same source IP addresses. This option offers even higher application compatibility but the outbound traffic load will be distributed more evenly only if more users use the Internet.
C.4.2 Solution Firewall functionality is built into Peplink Balance. By default, inbound access is unrestricted. Enabling a basic level of protection involves setting up firewall rules. For example, to set up a firewall rule between the Internet and the private network that monitors Web...
For security reasons, it may be appropriate to disallow LAN users to use ftp to transfer files to and from the Internet, or otherwise restrict outbound access. This can easily be achieved by setting up an outbound firewall rule with Peplink Balance. C.5.2 Solution...
Try to test with a web site that does not enable Keep Alive. For example, try http://private.dnsstuff.com/tools/aboutyou.ch (This third-party web site is provided only for reference. Peplink has no association with the site and does not guarantee the site's validity or availability.)
Page 135
You can test the WAN connection by Ping, which is similar to problem 4. As we want to isolate the problems from the LAN, Ping will be performed from Peplink Balance. By using the Ping/Traceroute under the tab Status of the Peplink Balance, you may able to find out the source of problem.
USER MANUAL Peplink Balance Series Appendix E. Product Specifications Peplink Balance 210 and 310 Routing Drop-in Mode and NAT Flexible Custom Outbound Routing Policy WAN Support DHCP, PPPoE, GRE, and Static IP Inbound and Outbound Link Load Balance ...
USER MANUAL Peplink Balance Series Peplink Balance 380 and 390 Routing Drop-in Mode and NAT Flexible Custom Outbound Routing Policy WAN Support DHCP, PPPoE, GRE, and Static IP Inbound and Outbound Link Load Balance Device Management Wizard &...
Need help?
Do you have a question about the 210 and is the answer not in the manual?
Questions and answers