peplink Pepwave MAX Series User manual

MAX Series
User Manual
Pepwave Products:
MAX 700 / HD2 / HD2 IP67 / HD2 Mini / HD2 MBX / HD Dome / HD4 / HD4 MBX / MBX Mini /
HD4 IP67 / Transit / Transit Duo / Transit 5G / Transit Core / Transit Mini / Transit Pro E /
Transit Pro / BR1 Classic / BR1 MK2 / BR1 Slim / BR1 ENT / BR1 M2M / / BR1 Mini (HW2) /
BR1 Mini Core / BR1 ESN / BR1 Pro LTE / BR1 Pro (CAT-20) / BR1 Pro 5G / BR1 IP55 / BR1
IP67/ BR2 IP55 / On-The-Go / HD2 with MediaFast / HD4 with MediaFast / SpeedFusion
Engine / UBR LTE / PDX
Pepwave Firmware 8.2.0
May 2022
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice.
Copyright © 2021 Peplink Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Peplink International
Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.

Table of Contents
Introduction and Scope 8
Glossary 9
Product Features 10
Supported Network Features 10
Other Supported Features 13
Pepwave MAX Mobile Router Overview 14
MAX 700 14
MAX HD2 16
MAX HD2 IP67 18
MAX HD2 mini 19
MAX HD Dome 20
MAX Transit / MAX Transit Duo (CAT-12) 22
MAX Transit (CAT-18) 24
MAX Transit 5G 26
MAX Transit Mini 27
MAX Transit Pro E 28
MAX Transit Core 30
MAX Transit Pro 31
MAX BR1 ESN 33
MAX HD2 and HD4 with MediaFast 34
MAX HD4 36
MAX HD4 MBX (CAT-12) 38
MAX HD2/4 MBX (CAT-18) 40
MAX HD2/4 MBX (5G) 41
MAX MBX Mini 43
MAX HD4 IP67 44
MAX BR1 Classic 45
MAX BR1 MK2 47
MAX BR1 Slim 49
MAX BR1 Mini (HW2) 50
MAX BR1 Mini Core 52
MAX BR1 M2M 53
MAX BR1 ENT 55
https://www.peplink.com
2
Copyright @ 2021 Peplink

MAX BR1 Pro 56
MAX BR1 Pro (CAT-20) 57
MAX BR1 Pro 5G 59
MAX Hotspot 61
MAX BR1 IP55 62
MAX BR2 IP55 64
MAX BR1 IP67 65
MAX On-The-Go 66
SpeedFusion Engine 67
UBR LTE 67
PDX 69
Advanced Feature Summary 70
Drop-in Mode and LAN Bypass: Transparent Deployment 70
QoS: Clearer VoIP 70
Per-User Bandwidth Control 71
High Availability via VRRP 71
USB Modem and Android Tethering 72
Built-In Remote User VPN Support 72
SIM-card USSD support 73
KVM Virtualization 73
DPI Engine 74
NetFlow 74
Wi-Fi Air Monitoring 74
SP Default Configuration 74
SpeedFusion Cloud Relay 75
DNS over HTTPS (DoH) 75
Installation 76
Preparation 76
Constructing the Network 76
Configuring the Network Environment 77
Mounting the Unit 78
Wall Mount 78
Car Mount 78
IP67 Installation Guide 78
PDX Accessory Kit Installation Guide 79
https://www.peplink.com
3
Copyright @ 2021 Peplink

Connecting to the Web Admin Interface 86
SpeedFusion Cloud 88
Activate SpeedFusion Cloud Service 88
Enable SpeedFusion Cloud 91
Connect Clients to Cloud 99
Link Wi-Fi to Cloud 100
Optimize Cloud Application 102
Configuring the LAN Interface(s) 103
Basic Settings 103
Port Settings 115
Captive Portal 116
Configuring the WAN Interface(s) 119
Ethernet WAN 122
Cellular WAN 131
Wi-Fi WAN 135
WAN Connection Settings (Common) 139
WAN Health Check 140
Bandwidth Allowance Monitoring 143
Additional Public IP address 144
Dynamic DNS Settings 144
Advanced Wi-Fi Settings 146
MediaFast Configuration 150
Setting Up MediaFast Content Caching 150
Scheduling Content Prefetching 152
Viewing MediaFast Statistics 154
ContentHub 155
Configuring the ContentHub 155
Configure a website for ContentHub 155
Configure an application for ContentHub 158
Docker 159
KVM 160
Bandwidth Bonding SpeedFusionTM / PepVPN 162
PepVPN 162
https://www.peplink.com
4
Copyright @ 2021 Peplink

The Pepwave Router Behind a NAT Router 171
IPsec VPN 173
IPsec VPN Settings 173
GRE Tunnel 177
Outbound Policy 179
Outbound Policy 180
Adding Rules for Outbound Policy 181
Port Forwarding 191
UPnP / NAT-PMP Settings 193
NAT Mappings 194
QoS 195
User Groups 196
Bandwidth Control 197
Application 197
Firewall 199
Outbound and Inbound Firewall Rules 201
Content Blocking 206
Routing Protocols 208
OSPF & RIPv2 208
BGP 210
Remote User Access 215
L2TP with IPsec 215
OpenVPN 215
PPTP 216
Authentication Methods 216
Miscellaneous Settings 218
High Availability 218
Certificate Manager 221
Service Forwarding 222
Service Passthrough 225
UART 226
GPS Forwarding 229
Ignition Sensing 230
https://www.peplink.com
5
Copyright @ 2021 Peplink

Ignition Sensing installation 230
GPIO Menu 232
NTP Server 233
Grouped Networks 234
Remote SIM Management 235
SIM Toolkit 237
AP 238
AP Controller 239
Wireless SSID 239
Wireless Mesh 244
Settings 244
AP Controller Status 251
Info 251
Access Point (Usage) 253
Wireless SSID 255
Mesh / WDS 256
Wireless Client 257
Nearby Device 259
Event Log 259
Toolbox 260
System Settings 261
Admin Security 261
Firmware 265
Time 267
Schedule 268
Email Notification 269
Event Log 272
SNMP 273
SMS Control 275
InControl 276
Configuration 277
Feature Add-ons 278
Reboot 278
Tools 278
Ping 279
https://www.peplink.com
6
Copyright @ 2021 Peplink

Traceroute Test 280
PepVPN Test 280
Wake-on-LAN 281
CLI (Command Line Interface Support) 281
Status 281
Device 282
GPS Data 284
Active Sessions 285
Client List 287
WINS Client 288
UPnP / NAT-PMP 288
OSPF & RIPv2 289
BGP 289
SpeedFusion Status 290
Event Log 293
WAN Quality 293
Usage Reports 295
Real-Time 295
Hourly 295
Daily 296
Monthly 297
Appendix A: Restoration of Factory Defaults 300
Appendix B: FusionSIM Manual 301
Appendix C: Overview of ports used by Peplink SD-WAN routers and other Peplink
services 313
Appendix D: Declaration 315
https://www.peplink.com
7
Copyright @ 2021 Peplink

Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN connections,
allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi, external WiMAX
dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are
suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are
suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features
and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction !
https://youtu.be/13M-JHRAICA
https://www.peplink.com
8
Copyright @ 2021 Peplink

Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
https://www.peplink.com
9
Copyright @ 2021 Peplink

1 Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they
provide advanced features to enhance Internet access. Our Max BR wireless routers support
multiple SIM cards. They can be configured to switch from using one SIM card to another SIM
card according to different criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless
Internet connections can be bonded together using our SpeedFusion technology. This allows
better reliability, larger bandwidth, and increased wireless coverage compared to use only one
4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more
information, please see peplink.com/products.
1.1 Supported Network Features
1.1.1 WAN
● Ethernet WAN connection in full/half duplex
● Static IP support for PPPoE
● Built-in cellular modems
● USB mobile connection(s)
● Wi-Fi WAN connection
● Network address translation (NAT)/port address translation (PAT)
● Inbound and outbound NAT mapping
● IPsec NAT-T and PPTP packet passthrough
● MAC address clone and passthrough
● Customizable MTU and MSS values
● WAN connection health check
● Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org,
tzo.com and DNS-O-Matic)
● Ping, DNS lookup, and HTTP-based health check
1.1.2 LAN
● Wi-Fi AP
● Ethernet LAN ports
● DHCP server on LAN
https://www.peplink.com
10
Copyright @ 2021 Peplink

● Extended DHCP option support
● Static routing rules
● VLAN on LAN support
1.1.3 VPN
● PepVPN with SpeedFusion
TM
● PepVPN performance analyzer
● X.509 certificate support
● VPN load balancing and failover among selected WAN connections
● Bandwidth bonding and failover among selected WAN connections
● IPsec VPN for network-to-network connections (works with Cisco and Juniper)
● Ability to route Internet traffic to a remote VPN peer
● Optional pre-shared key setting
● SpeedFusion
TM throughput, ping, and traceroute tests
● PPTP server
● PPTP and IPsec passthrough
1.1.4 Firewall
● Outbound (LAN to WAN) firewall rules
● Inbound (WAN to LAN) firewall rules per WAN connection
● Intrusion detection and prevention
● Specification of NAT mappings
● Outbound firewall rules can be defined by destination domain name
1.1.5 Captive Portal
● Splash screen of open networks, login page for secure networks
● Customizable built-in captive portal
● Supports linking to outside page for captive portal
1.1.6 Outbound Policy
● Link load distribution per TCP/UDP service
● Persistent routing for specified source and/or destination IP addresses per TCP/UDP
service
● Traffic prioritization and DSL optimization
● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
1.1.7 AP Controller
https://www.peplink.com
11
Copyright @ 2021 Peplink

● Configure and manage Pepwave AP devices
● Review the status of connected APs
1.1.8 QoS
● Quality of service for different applications and custom protocols
● User group classification for different service levels
● Bandwidth usage control and monitoring on group- and user-level
● Application prioritization for custom protocols and DSL/cable optimization
https://www.peplink.com
12
Copyright @ 2021 Peplink

1.2 Other Supported Features
● User-friendly web-based administration interface
● HTTP and HTTPS support for web admin interface (default redirection to HTTPS)
● Configurable web administration port and administrator password
● Firmware upgrades, configuration backups, ping, and traceroute via web admin interface
● Remote web-based configuration (via WAN and LAN interfaces)
● Time server synchronization
● SNMP
● Email notification
● Read-only user access for web admin
● Shared IP drop-in mode
● Authentication and accounting by RADIUS server for web admin
● Built-in WINS servers*
● Syslog
● SIP passthrough
● PPTP packet passthrough
● Event log
● Active sessions
● Client list
● WINS client list *
● UPnP / NAT-PMP
● Real-time, hourly, daily, and monthly bandwidth usage reports and charts
● IPv6 support
● Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants
https://www.peplink.com
13
Copyright @ 2021 Peplink

2 Pepwave MAX Mobile Router Overview
2.1 MAX 700
2.1.1 Panel Appearance
2.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
https://www.peplink.com
14
Copyright @ 2021 Peplink

Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF
Disconnected
Blinking slowly
Connecting to network
Blinking
Connected to network with traffic
ON
Connected to network without traffic
Wi-Fi AP
OFF
Disabled
Blinking slowly
Enabled but no client connected
Blinking
Connected to network with traffic
ON
Client(s) connected to wireless network
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100/ 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports
https://www.peplink.com
15
Copyright @ 2021 Peplink

2.2 MAX HD2
For certification information, please refer to Appendix B: Declaration
2.2.1 Panel Appearance
https://www.peplink.com
16
Copyright @ 2021 Peplink

2.2.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN /
Wi-Fi AP
OFF
Disabled Intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
Cellular Indicators
Cellular 1 /
Cellular 2
OFF
Disabled or no SIM card inserted
Blinking slowly
Connecting to network(s)
Green
Connected to network(s)
LAN and Ethernet WAN Ports
Green LED
ON
1000 Mbps
OFF
10 Mbps / 100 Mbps or port is not connected
Orange LED
ON
Port is connected without traffic
Blinking
Data is transferring
OFF
Port is not connected
Port Type
Auto MDI/MDI-X ports
https://www.peplink.com
17
Copyright @ 2021 Peplink

2.3 MAX HD2 IP67
2.3.1 Panel Appearance
2.3.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
https://www.peplink.com
18
Copyright @ 2021 Peplink

2.4 MAX HD2 mini
2.4.1 Panel Appearance
2.4.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Cellular Indicators
Cellular 1 /
Cellular 2
OFF
Disabled or no SIM card inserted
Blinking slowly
Connecting to network(s)
Green
Connected to network(s)
https://www.peplink.com
19
Copyright @ 2021 Peplink

LAN and Ethernet WAN Ports
Green LED
ON
POE Enabled
OFF
POE Disabled
Orange LED
Blinking
10 / 100 / 1000 Mbps and Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports
2.5 MAX HD Dome
2.5.1 Panel Appearance
https://www.peplink.com
20
Copyright @ 2021 Peplink