peplink PEPWAVE HD Dome Pro User manual

MAX Series
User Manual
Pepwave Products:
MAX 700 / HD2 / HD2 IP67 / HD2 Mini / HD2 MBX / HD Dome / HD Dome Pro / HD4 / HD4
MBX / MBX Mini / HD4 IP67 / Transit / Transit Duo / Transit 5G / Transit Core / Transit Mini /
Transit Pro E / Transit Pro / BR1 Classic / BR1 MK2 / BR1 Slim / BR1 ENT / BR1 M2M / / BR1
Mini (HW2) / BR1 Mini (HW3) / BR1 Mini Core / BR1 ESN / BR1 Pro LTE / BR1 Pro (CAT-20) /
BR1 Pro 5G / BR2 Pro / BR1 IP55 / BR1 IP67 / BR2 IP55 / On-The-Go / HD2 with MediaFast /
HD4 with MediaFast / SpeedFusion Engine / UBR LTE / UBR Plus / PDX
Pepwave Firmware 8.2.1
September 2022
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice.
Copyright © 2021 Peplink Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Peplink International
Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.

Table of Contents
Introduction and Scope 8
Glossary 9
Product Features 10
Supported Network Features 10
Other Supported Features 13
Pepwave MAX Mobile Router Overview 14
MAX 700 14
MAX HD2 16
MAX HD2 IP67 18
MAX HD2 mini 19
MAX HD Dome 20
MAX HD Dome Pro 22
MAX Transit / MAX Transit Duo (CAT-12) 24
MAX Transit (CAT-18) 26
MAX Transit 5G 28
MAX Transit Mini 29
MAX Transit Pro E 30
MAX Transit Core 31
MAX Transit Pro 33
MAX BR1 ESN 35
MAX HD2 and HD4 with MediaFast 36
MAX HD4 38
MAX HD4 MBX (CAT-12) 40
MAX HD2/4 MBX (CAT-20) 42
MAX HD2/4 MBX (5G) 44
MAX MBX Mini 46
MAX HD4 IP67 48
MAX BR1 Classic 49
MAX BR1 MK2 50
MAX BR1 Slim 52
MAX BR1 Mini (HW2) 53
MAX BR1 Mini (HW3) 55
MAX BR1 Mini Core 56
https://www.peplink.com
2
Copyright @ 2021 Peplink

MAX BR1 M2M 57
MAX BR1 ENT 58
MAX BR1 Pro 59
MAX BR1 Pro (CAT-20) 60
MAX BR1 Pro 5G 62
MAX BR2 Pro 64
MAX Hotspot 65
MAX BR1 IP55 66
MAX BR2 IP55 68
MAX BR1 IP67 69
MAX On-The-Go 70
SpeedFusion Engine 71
UBR LTE 71
UBR P lus 73
PDX 74
Advanced Feature Summary 75
Drop-in Mode and LAN Bypass: Transparent Deployment 75
QoS: Clearer VoIP 75
Per-User Bandwidth Control 76
High Availability via VRRP 76
USB Modem and Android Tethering 77
Built-In Remote User VPN Support 77
SIM-card USSD support 78
KVM Virtualization 78
DPI Engine 79
NetFlow 79
Wi-Fi Air Monitoring 79
SP Default Configuration 79
Peplink Relay 80
DNS over HTTPS (DoH) 80
Installation 81
Preparation 81
Constructing the Network 81
Configuring the Network Environment 82
Mounting the Unit 83
Wall Mount 83
https://www.peplink.com
3
Copyright @ 2021 Peplink

Car Mount 83
IP67 Installation Guide 83
PDX Accessory Kit Installation Guide 84
Connecting to the Web Admin Interface 91
SpeedFusion Connect 93
Activate SpeedFusion Connect Service 93
Enable SpeedFusion Connect 94
Connect Clients to Cloud 101
Link Wi-Fi to Cloud 102
Optimize Cloud Application 104
Configuring the LAN Interface(s) 105
Basic Settings 105
Port Settings 117
Captive Portal 118
Configuring the WAN Interface(s) 121
Ethernet WAN 124
Cellular WAN 133
Wi-Fi WAN 138
WAN Connection Settings (Common) 141
WAN Health Check 142
Bandwidth Allowance Monitoring 145
Additional Public IP address 146
Dynamic DNS Settings 146
Advanced Wi-Fi Settings 148
MediaFast Configuration 152
Setting Up MediaFast Content Caching 152
Scheduling Content Prefetching 154
Viewing MediaFast Statistics 156
ContentHub 157
Configuring the ContentHub 157
Configure a website for ContentHub 157
Configure an application for ContentHub 160
Docker 161
https://www.peplink.com
4
Copyright @ 2021 Peplink

KVM 162
Bandwidth Bonding SpeedFusionTM / PepVPN 164
PepVPN 165
The Pepwave Router Behind a NAT Router 173
IPsec VPN 175
IPsec VPN Settings 175
GRE Tunnel 179
Outbound Policy 181
Outbound Policy 182
Adding Rules for Outbound Policy 183
Port Forwarding 193
UPnP / NAT-PMP Settings 195
NAT Mappings 196
QoS 197
User Groups 198
Bandwidth Control 199
Application 199
Firewall 202
Outbound and Inbound Firewall Rules 203
Content Blocking 208
Routing Protocols 210
OSPF & RIPv2 210
BGP 212
Remote User Access 217
L2TP with IPsec 217
OpenVPN 217
PPTP 218
Authentication Methods 218
Miscellaneous Settings 220
High Availability 220
Certificate Manager 223
Service Forwarding 224
https://www.peplink.com
5
Copyright @ 2021 Peplink

Service Passthrough 227
UART 228
GPS Forwarding 231
Ignition Sensing 232
Ignition Sensing installation 232
GPIO Menu 234
NTP Server 235
Grouped Networks 236
Remote SIM Management 237
SIM Toolkit 239
AP 240
AP Controller 241
Wireless SSID 241
Wireless Mesh 246
Settings 246
AP Controller Status 253
Info 253
Access Point (Usage) 255
Wireless SSID 257
Mesh / WDS 258
Wireless Client 259
Nearby Device 261
Event Log 261
Toolbox 262
System Settings 263
Admin Security 263
Firmware 267
Time 269
Schedule 270
Email Notification 271
Event Log 274
SNMP 275
SMS Control 277
InControl 278
Configuration 279
https://www.peplink.com
6
Copyright @ 2021 Peplink

Feature Add-ons 280
Reboot 280
Tools 280
Ping 281
Traceroute Test 282
PepVPN Test 282
Wake-on-LAN 283
CLI (Command Line Interface Support) 283
Status 283
Device 284
GPS Data 286
Active Sessions 287
Client List 289
WINS Client 290
UPnP / NAT-PMP 290
OSPF & RIPv2 291
BGP 292
SpeedFusion Status 292
Event Log 295
WAN Quality 296
Usage Reports 297
Real-Time 297
Hourly 297
Daily 298
Monthly 299
Appendix A: Restoration of Factory Defaults 302
Appendix B: FusionSIM Manual 303
Appendix C: Overview of ports used by Peplink SD-WAN routers and other Peplink
services 315
Appendix D: Declaration 317
https://www.peplink.com
7
Copyright @ 2021 Peplink

Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN connections,
allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi, external WiMAX
dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are
suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are
suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features
and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction !
https://youtu.be/13M-JHRAICA
https://www.peplink.com
8
Copyright @ 2021 Peplink

Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
https://www.peplink.com
9
Copyright @ 2021 Peplink

1 Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they
provide advanced features to enhance Internet access. Our Max BR wireless routers support
multiple SIM cards. They can be configured to switch from using one SIM card to another SIM
card according to different criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless
Internet connections can be bonded together using our SpeedFusion technology. This allows
better reliability, larger bandwidth, and increased wireless coverage compared to use only one
4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more
information, please see peplink.com/products.
1.1 Supported Network Features
1.1.1 WAN
● Ethernet WAN connection in full/half duplex
● Static IP support for PPPoE
● Built-in cellular modems
● USB mobile connection(s)
● Wi-Fi WAN connection
● Network address translation (NAT)/port address translation (PAT)
● Inbound and outbound NAT mapping
● IPsec NAT-T and PPTP packet passthrough
● MAC address clone and passthrough
● Customizable MTU and MSS values
● WAN connection health check
● Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org,
tzo.com and DNS-O-Matic)
● Ping, DNS lookup, and HTTP-based health check
1.1.2 LAN
● Wi-Fi AP
● Ethernet LAN ports
● DHCP server on LAN
https://www.peplink.com
10
Copyright @ 2021 Peplink

● Extended DHCP option support
● Static routing rules
● VLAN on LAN support
1.1.3 VPN
● PepVPN with SpeedFusion
TM
● PepVPN performance analyzer
● X.509 certificate support
● VPN load balancing and failover among selected WAN connections
● Bandwidth bonding and failover among selected WAN connections
● IPsec VPN for network-to-network connections (works with Cisco and Juniper)
● Ability to route Internet traffic to a remote VPN peer
● Optional pre-shared key setting
● SpeedFusion
TM throughput, ping, and traceroute tests
● PPTP server
● PPTP and IPsec passthrough
1.1.4 Firewall
● Outbound (LAN to WAN) firewall rules
● Inbound (WAN to LAN) firewall rules per WAN connection
● Intrusion detection and prevention
● Specification of NAT mappings
● Outbound firewall rules can be defined by destination domain name
1.1.5 Captive Portal
● Splash screen of open networks, login page for secure networks
● Customizable built-in captive portal
● Supports linking to outside page for captive portal
1.1.6 Outbound Policy
● Link load distribution per TCP/UDP service
● Persistent routing for specified source and/or destination IP addresses per TCP/UDP
service
● Traffic prioritization and DSL optimization
● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
1.1.7 AP Controller
https://www.peplink.com
11
Copyright @ 2021 Peplink

● Configure and manage Pepwave AP devices
● Review the status of connected APs
1.1.8 QoS
● Quality of service for different applications and custom protocols
● User group classification for different service levels
● Bandwidth usage control and monitoring on group- and user-level
● Application prioritization for custom protocols and DSL/cable optimization
https://www.peplink.com
12
Copyright @ 2021 Peplink

1.2 Other Supported Features
● User-friendly web-based administration interface
● HTTP and HTTPS support for web admin interface (default redirection to HTTPS)
● Configurable web administration port and administrator password
● Firmware upgrades, configuration backups, ping, and traceroute via web admin interface
● Remote web-based configuration (via WAN and LAN interfaces)
● Time server synchronization
● SNMP
● Email notification
● Read-only user access for web admin
● Shared IP drop-in mode
● Authentication and accounting by RADIUS server for web admin
● Built-in WINS servers*
● Syslog
● SIP passthrough
● PPTP packet passthrough
● Event log
● Active sessions
● Client list
● WINS client list *
● UPnP / NAT-PMP
● Real-time, hourly, daily, and monthly bandwidth usage reports and charts
● IPv6 support
● Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants
https://www.peplink.com
13
Copyright @ 2021 Peplink

2 Pepwave MAX Mobile Router Overview
2.1 MAX 700
2.1.1 Panel Appearance
Note:
- For proper Wi-Fi performance and operations, please ensure all 4 Wi-Fi antenna
connectors (labeled Wi-Fi 1 and Wi-Fi 2) have antennas attached.
- The LED indicators of Wi-Fi 1 & 2 shown as below is referring to the default settings of
Wi-Fi Operation mode is WAN + AP under the AP.
https://www.peplink.com
14
Copyright @ 2021 Peplink

2.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Wi-Fi AP Indicators
Wi-Fi 1
OFF
WiFi AP is disabled.
ON
WiFi AP is enabled.
Wi-Fi WAN Indicators
Wi-Fi 2
OFF
Disabled Intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100/ 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports
https://www.peplink.com
15
Copyright @ 2021 Peplink

2.2 MAX HD2
For certification information, please refer to Appendix B: Declaration
2.2.1 Panel Appearance
https://www.peplink.com
16
Copyright @ 2021 Peplink

2.2.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Wi-Fi WAN Indicators
Wi-Fi WAN
OFF
Disabled Intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
Cellular Indicators
Cellular 1 /
Cellular 2
OFF
Disabled or no SIM card inserted
Blinking slowly
Connecting to network(s)
Green
Connected to network(s)
LAN and Ethernet WAN Ports
Green LED
ON
1000 Mbps
OFF
10 Mbps / 100 Mbps or port is not connected
Orange LED
ON
Port is connected without traffic
Blinking
Data is transferring
OFF
Port is not connected
Port Type
Auto MDI/MDI-X ports
https://www.peplink.com
17
Copyright @ 2021 Peplink

2.3 MAX HD2 IP67
2.3.1 Panel Appearance
2.3.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
https://www.peplink.com
18
Copyright @ 2021 Peplink

2.4 MAX HD2 mini
2.4.1 Panel Appearance
2.4.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Cellular Indicators
Cellular 1 /
Cellular 2
OFF
Disabled or no SIM card inserted
Blinking slowly
Connecting to network(s)
Green
Connected to network(s)
https://www.peplink.com
19
Copyright @ 2021 Peplink

LAN and Ethernet WAN Ports
Green LED
ON
POE Enabled
OFF
POE Disabled
Orange LED
Blinking
10 / 100 / 1000 Mbps and Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports
2.5 MAX HD Dome
2.5.1 Panel Appearance
https://www.peplink.com
20
Copyright @ 2021 Peplink