peplink balance ONE User manual

Copyright & Trademarks
Copyright & trademark specifications are subject to change without prior notice. Copyright © 2017 Peplink International Ltd. All
Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentionedmay
be trademarks or registered trademarks of their respective owners.
Peplink Balance and MediaFast
User Manual
Peplink Products:
ONE/20/30 LTE/50/210/310/305/380/580/710/1350/2500
MediaFast 200/500/750
Peplink Balance Firmware 7
January 2017

http://www.peplink.com
2
Copyright @ 2017 Peplink
Table of Contents
Introduction and Scope 7
Glossary 8
Product Comparison Chart 10
Product Features 12
Supported Network Features 12
Other Supported Features 14
Advanced Feature Summary 15
Drop-in Mode and LAN Bypass: Transparent Deployment 15
QoS: Clearer VoIP 16
Per-User Bandwidth Control 16
High Availability via VRRP 17
USB Modem and Android Tethering 18
Built-In Remote User VPN Support 18
LACP NIC Bonding 19
Package Contents 20
Peplink Balance One 20
Peplink Balance 20/30/30 LTE/50 20
Peplink Balance 210/310 20
Peplink Balance 305/380/580/710/1350/2500 20
Peplink MediaFast 200 20
Peplink MediaFast 500 20
Peplink Balance Overview 21
Peplink Balance One 21
Peplink Balance 20 22
Peplink Balance 30 LTE 23
Peplink Balance 50 25
Peplink Balance 210 26
Peplink Balance 310 27
Peplink Balance 305 29
Peplink Balance 380 31
Peplink Balance 580 32

http://www.peplink.com
3
Copyright @ 2017 Peplink
Peplink Balance 710 33
Peplink Balance 1350 34
Peplink Balance 2500 36
Peplink MediaFast Overview 37
Peplink MediaFast 200 37
Peplink MediaFast 500 38
Peplink MediaFast 750 40
LCD Display Menu 42
Installation 43
Preparation 43
Constructing the Network 43
Basic Configuration 43
Connecting to the Web Admin Interface 43
Configuration with the Setup Wizard 45
Network Tab 49
WAN 49
Health Check Settings 55
Bandwidth Allowance Monitor Settings 59
Additional Public IP Settings 59
Dynamic DNS Settings 60
LAN 62
Network Settings (Without VLAN) 62
Network Settings (With VLAN) 64
Network Settings (Common Settings) 66
Port Settings 70
VPN 71
SpeedFusion 71
IPsec VPN 77
Outbound Policy 81
Inbound Access 84
Servers 84
Services 85
DNS Settings 88
SOA Records 91

http://www.peplink.com
4
Copyright @ 2017 Peplink
NS Records 92
MX Records 92
CNAME Records 93
A Records 94
PTR Records 95
TXT Records 95
SRV Records 96
Reverse Lookup Zones 97
SOA Record 98
NS Records 99
CNAME Records 99
PTR Records 100
DNS Record Import Wizard 100
NAT Mappings 104
MediaFast 106
Setting Up MediaFast Content Caching 107
Viewing MediaFast Statistics 108
Prefetch Schedule 109
ContentHub 111
MDM Settings 113
Captive Portal 113
QoS 117
User Groups 117
Bandwidth Control 118
Application 118
Prioritization for Custom Application 119
DSL/Cable Optimization 120
Firewall 120
Access Rules 120
Intrusion Detection and DoS Prevention 124
Content Blocking 125
Application Blocking 127
Web Blocking 127
Customized Domains 127
Exempted User Groups 127
Exempted Subnets 127
URL Logging 128

http://www.peplink.com
5
Copyright @ 2017 Peplink
OSPF & RIPv2 128
Remote User Access 131
Misc. Settings 132
High Availability 132
Certificate Manager 135
Service Forwarding 135
SMTP Forwarding 137
Web Proxy Forwarding 137
DNS Forwarding 138
Custom Service Forwarding 138
Service Passthrough 138
AP Tab 139
AP 139
AP Controller 139
Wireless SSID 140
Settings 146
Toolbox 158
System Tab 159
System 159
Admin Security 159
Firmware 161
Time 162
Schedule 163
Email Notification 165
Event Log 167
SNMP 168
InControl 170
Configuration 171
Feature Add-one 172
Reboot 172
Tools 173
Ping 173
Traceroute 173
Wake-on-LAN 174
CLI (Command Line) Support 174

http://www.peplink.com
6
Copyright @ 2017 Peplink
Status Tab 175
Status 175
Device 175
Active Sessions 177
Client List 179
WINS Clients 180
OSPF & RIPv2 180
MediaFast 180
SpeedFusion Status 181
Event Log 185
Device Event Log 186
IPsec Event Log 186
Bandwidth 186
Real-Time 187
Hourly 188
Daily 188
Monthly 191
Harrington Industrial Plastics 198
PLUSS 201

http://www.peplink.com
7
Copyright @ 2017 Peplink
1Introduction and Scope
The Peplink Balance series provides link aggregation and load balancing across up to thirteen WAN
connections.
The Peplink Balance series offers cost-effective solutions suitable for SOHO/power users and small
businesses. The Balance lineup also features a range of advanced enterprise solutions. Peplink
enterprise routers are ideal single-box solutions for medium to large business environments, and they
allow service providers to enable highly available multi-network services.
The Peplink MediaFast series downloads and buffers video, audio, iTunes/iTunes U, HTTP, and other
content for uninterrupted learning and fun anytime.
This manual applies to the following Peplink Balance products:
●Peplink Balance One
●Peplink Balance 20
●Peplink Balance 30 LTE
●Peplink Balance 50
●Peplink Balance 210/310
●Peplink Balance 380
●Peplink Balance 580
●Peplink Balance 710
●Peplink Balance 1350
●Peplink Balance 2500
●Peplink MediaFast 200/500
The manual covers setting up your Peplink Balance or MediaFast and provides a collection of case
studies detailing the advanced features of the Peplink Balance.

http://www.peplink.com
8
Copyright @ 2017 Peplink
2Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol

http://www.peplink.com
9
Copyright @ 2017 Peplink
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
210+
Refers to Peplink Balance 210/310/380/580/710/1350/2500
380+
Refers to Peplink Balance 380/580/710/1350/2500

http://www.peplink.com
10
Copyright @ 2017 Peplink
3Product Comparison Chart
Click underlined features to reach the relevant portion of the manual.
20/50
30LTE
One
210
310
305
380
WAN Ports
2/5
2
2
2
3
3
2
Throughput (Mbps)
150
150
600
200
200
1Gbp
s
1Gbp
s
Embedded 4G LTE Modem
-
1
-
-
-
-
-
PepVPN
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SpeedFusion Hot Failover
-
-
-^
Yes
Yes
-^
Yes
SF Bandwidth Bonding
-
-
-^
Yes
Yes
-^
Yes
SF WAN Smoothing
-
-
-^
Yes
Yes
-^
Yes
Drop-In Mode
-
-
-
Yes
Yes
Yes
Yes
High Availability
-
-
-
Yes
Yes
Yes
Yes
Simultaneous Dual-Band
802.11a/b/g/n Wi-Fi AP
-
-
Yes*
-
-
-
-
AP Controller
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Remote AP Management
-
-
-
-
-
Yes
Yes
Web Filtering Blacklist
-
-
Light
Light
Light
Full
Full
MediaFast Content Caching
-
-
-
-
-
-
-
^Available as an optional feature
*Wi-Fi is not available on the Balance One Core
Full product comparison available at:
http://www.peplink.com/products/balance/model-comparison/

http://www.peplink.com
11
Copyright @ 2017 Peplink
580
710
1350
2500
MFA
200
MFA
500
MFA
750
WAN Ports
5
7
13
12
2
5
7
Throughput (Mbps)
1.5G
bps
2.5G
bps
5Gbp
s
8Gbp
s
200
800
1.5G
bps
Embedded 4G LTE
Modem
-
-
-
-
-
-
-
PepVPN
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SpeedFusion Hot
Failover
Yes
Yes
Yes
Yes
-^
Yes
Yes
SF Bandwidth Bonding
Yes
Yes
Yes
Yes
-^
Yes
Yes
SF WAN Smoothing
Yes
Yes
Yes
Yes
-^
Yes
Yes
Drop-In Mode
Yes
Yes
Yes
Yes
Yes
Yes
Yes
High Availability
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Simultaneous Dual-Band
802.11a/b/g/n Wi-Fi AP
-
-
-
-
Yes
-
-
AP Controller
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Remote AP
Management
Yes
Yes
Yes
Yes
-
Yes
Yes
Web Filtering Blacklist
Full
Full
Full
Full
Light
Full
Full
MediaFast Content
Caching
-
-
-
-
Yes
Yes
Yes
^Available as an optional feature
Full product comparison available at:
http://www.peplink.com/products/balance/model-comparison/

http://www.peplink.com
12
Copyright @ 2017 Peplink
4Product Features
Peplink Balance Series products enable all LAN users to share broadband Internet
connections and provide advanced features to enhance Internet access. The following
is a list of supported features:
4.1 Supported Network Features
4.1.1 WAN
●Multiple public IP support (DHCP, PPPoE, static IP address)
●Static IP support for PPPoE
●10/100/1000Mbps Ethernet connection in full/half duplex
●Built-in HSPA and EVDO cellular modems
●USB mobile connection (only one USB modem can be connected at a time)
●Drop-in mode on selectable WAN port with MAC address passthrough network address
translation (NAT) / port address translation (PAT)
●Inbound and outbound NAT mapping
●Multiple static IP addresses per WAN connection
●MAC address clone
●Customizable MTU and MSS values
●WAN connection health check
●Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-
ip.org,tzo.com, and DNS-O-Matic)
●Ping, DNS lookup, and HTTP-based health check
4.1.2 LAN
●DHCP server on LAN
●Extended DHCP option support
●Static routing rules
●Local DNS proxy server
●VLAN on LAN support
4.1.3 VPN
●Secure SpeedFusionTM
●SpeedFusion performance analyzer
●X.509 certificate support (feature activation required on some Balance models)
●Bandwidth bonding and failover among selected WAN connections
●Ability to route traffic to a remote VPN peer
●Optional pre-shared key setting
●Layer 2 bridging
●Layer 2 Peer Isolation
●SpeedFusionTM throughput, ping, and traceroute tests
●Built-in L2TP / PPTP VPN server
●Authenticate L2TP / PPTP clients using RADIUS and LDAP servers
●Multi-Site PepVPN Profile

http://www.peplink.com
13
Copyright @ 2017 Peplink
●IPsec VPN for network-to-network connections (works with Cisco and Juniper only)
●L2TP / PPTP and IPsec passthrough
4.1.4 Inbound Traffic Management
●TCP/UDP traffic redirection to dedicated LAN server(s)
●Inbound link load balancing by means of DNS
4.1.5 Outbound Policy
●Link load distribution per TCP/UDP service
●Persistent routing for specified source and/or destination IP addresses per TCP/UDP
service
●Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
●Time-based scheduling
4.1.6 AP Controller
●Configure and manage Pepwave AP devices
●Review the status of connected AP
4.1.7 QoS
●Quality of service for different applications and custom protocols
●User group classification for different service levels
●Bandwidth usage control and monitoring on group- and user-level
●Application prioritization for custom protocols and DSL optimization
4.1.8 Firewall
●Outbound (LAN to WAN) firewall rules
●Inbound (WAN to LAN) firewall rules per WAN connection
●Intrusion detection and prevention
●Specification of NAT mappings
●Web blocking
●Application blocking
●Time-based scheduling
●Outbound firewall rules can be defined by destination domain name
4.1.9 Captive Portal
●Social Wi-Fi Hotspot Support
●Splash screen of open networks, login page for secure networks
●Customizable built-in captive portal
●Supports linking to outside page for captive portal

http://www.peplink.com
14
Copyright @ 2017 Peplink
4.2 Other Supported Features
●Easy-to-use web administration interface
●HTTP and HTTPS support for web administration interface
●Configurable web administration port and administrator password
●Read-only user for web admin
●Shared-IP drop-in mode
●Authentication and accounting by RADIUS server for web admin
●Firmware upgrades, configuration backups, ping, and traceroute via web administration
interface
●Remote web-based configuration (via WAN and LAN interfaces)
●Remote reporting to Peplink Balance reporting server
●Hardware high availability via VRRP, with automatic configuration synchronization
●Real-time, hourly, daily and monthly bandwidth usage reports and charts
●Hardware backup via LAN bypass
●Built-in WINS server
●Time server synchronization
●SNMP
●Email notification
●Syslog
●SIP passthrough
●PPTP packet passthrough
●Active sessions
●Active client list
●WINS client list
●UPnP / NAT-PMP
●Improved active sessions page
●Event log is persistent across reboots
●IPv6 support
●Support for USB tethering on Android 2.2+ phones

http://www.peplink.com
15
Copyright @ 2017 Peplink
5Advanced Feature Summary
5.1 Drop-in Mode and LAN Bypass: Transparent Deployment
As your organization grows, it needs more bandwidth. But modifying your network would require
effort better spent elsewhere. In Drop-in Mode, you can conveniently install your Peplink router
without making any changes to your network. And if the Peplink router loses power for any
reason, LAN Bypass will safely and automatically bypass the Peplink router to resume your
original network connection.

http://www.peplink.com
16
Copyright @ 2017 Peplink
5.2 QoS: Clearer VoIP
VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers can
detect VoIP traffic and assign it the highest priority, giving you crystal-clear calls.
5.3 Per-User Bandwidth Control

http://www.peplink.com
17
Copyright @ 2017 Peplink
With per-user bandwidth control, you can define bandwidth control policies for up to 3 groups of
users to prevent network congestion. Define groups by IP address and subnet, and set
bandwidth limits for every user in the group.
5.4 High Availability via VRRP
When your organization has a corporate requirement demanding the highest availability with no
single point of failure, you can deploy two Peplink routers in High Availability mode. With High
Availability mode, the second device will take over when needed.

http://www.peplink.com
18
Copyright @ 2017 Peplink
5.5 USB Modem and Android Tethering
For increased WAN diversity, plug in a USB LTE modem as backup. Peplink routers are
compatible with over 200 modem types. You can also tether to smartphones running Android
4.1.X and above.
5.6 Built-In Remote User VPN Support

http://www.peplink.com
19
Copyright @ 2017 Peplink
Use L2TP with IPsec to safely and conveniently connect remote clients to your private network.
L2TP with IPsec is supported by most devices, but legacy devices can also connect using PPTP.
Click here for full instructions on setting up L2TP with IPsec.
5.7 LACP NIC Bonding
Use 802.3ad to combine multiple LAN connections into a virtual LAN connection. This virtual
connection has higher throughput and redundancy in case any single link fails.

http://www.peplink.com
20
Copyright @ 2017 Peplink
6Package Contents
The contents of Peplink Balance product packages are as follows:
6.1 Peplink Balance One
●Peplink Balance One
●Power adapter
●Information slip
6.2 Peplink Balance 20/30/30 LTE/50
●Peplink Balance 20/30/30 LTE/50
●Power adapter
●Information slip
6.3 Peplink Balance 210/310
●Peplink Balance 210/310
●Power adapter
●Information slip
●Rackmount kit
6.4 Peplink Balance 305/380/580/710/1350/2500
●Peplink Balance 305/380/580/710/1350/2500
●Power cord
●Information slip
●Rackmount kit
6.5 Peplink MediaFast 200
●Peplink MediaFast 200
●Power adapter
●Information slip
6.6 Peplink MediaFast 500
●Peplink MediaFast 500
●Power cord
●Information slip
●Rackmount kit