peplink 20 User manual

User Manual
For Models:
ONE/20/30/30 LTE/50/210/310/305/380/580/710/1350/2500
MediaFast 200/500/750
Peplink Balance Firmware 6.3
May 2016
Copyright & trademark specifications are subject to change without prior notice. Copyright © 2016 Peplink International Ltd. All Rights
Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned may be
trademarks or registered trademarks of their respective owners.
Peplink Balance Multi-WAN Bonding Routers

USER MANUAL
Peplink Balance Series
http://www.peplink.com -2 / 269- Copyright © 2016 Peplink
TABLE OF CONTENTS
1INTRODUCTION AND SCOPE·················································································· 7
2GLOSSARY ················································································································ 8
3PRODUCT COMPARISON CHART ·········································································· 9
4PRODUCT FEATURES···························································································· 11
4.1 Supported Network Features············································································· 11
4.2 WAN·················································································································· 11
4.3 LAN ··················································································································· 11
4.4 VPN··················································································································· 11
4.5 Inbound Traffic Management············································································· 12
4.6 Outbound Policy ································································································ 12
4.7 AP Controller ····································································································· 12
4.8 QoS ··················································································································· 12
4.9 Firewall·············································································································· 13
4.10 Captive Portal································································································· 13
4.11 Other Supported Features·············································································· 14
5ADVANCED FEATURE SUMMARY ······································································· 15
5.1 Drop-in Mode and LAN Bypass: Transparent Deployment································ 15
5.2 QoS: Clearer VoIP····························································································· 15
5.3 Per-User Bandwidth Control·············································································· 16
5.4 High Availability via VRRP················································································· 16
5.5 USB Modem and Android Tethering·································································· 17
5.6 Built-In Remote User VPN Support ··································································· 17
5.7 LACP NIC Bonding···························································································· 18
6USAGE SCENARIOS······························································································· 19
7PACKAGE CONTENTS ··························································································· 23
7.1 Peplink Balance One························································································· 23
7.2 Peplink Balance 20/30/30 LTE/50 ····································································· 23
7.3 Peplink Balance 210/310··················································································· 23
7.4 Peplink Balance 305/380/580/710/1350/2500··················································· 23
7.5 Peplink MediaFast 200······················································································ 23
7.6 Peplink MediaFast 500······················································································ 23
8PEPLINK BALANCE OVERVIEW··········································································· 24
8.1 Peplink Balance One························································································· 24
8.2 Peplink Balance 20···························································································· 26
8.3 Peplink Balance 30···························································································· 28
8.4 Peplink Balance 30 LTE ···················································································· 30

USER MANUAL
Peplink Balance Series
http://www.peplink.com -3 / 269- Copyright © 2016 Peplink
8.5 Peplink Balance 50···························································································· 32
8.6 Peplink Balance 210·························································································· 34
8.7 Peplink Balance 310·························································································· 36
8.8 Peplink Balance 305·························································································· 38
8.9 Peplink Balance 380·························································································· 41
8.10 Peplink Balance 580······················································································· 44
8.11 Peplink Balance 710······················································································· 47
8.12 Peplink Balance 1350····················································································· 50
8.13 Peplink Balance 2500····················································································· 53
8.14 Peplink MediaFast 500··················································································· 57
9INSTALLATION········································································································ 60
9.1 Preparation········································································································ 60
9.2 Constructing the Network ·················································································· 60
9.3 Configuring the Network Environment······························································· 62
10 BASIC CONFIGURATION ······················································································· 63
10.1 Connecting to the Web Admin Interface························································· 63
10.2 Configuration with the Setup Wizard ······························································ 64
10.3 Advanced Setup ····························································································· 68
10.4 Cellular WAN·································································································· 69
11 MEDIAFAST CONFIGURATION ············································································· 75
11.1 Setting Up MediaFast Content Caching ························································· 75
11.2 Scheduling Content Prefetching ····································································· 76
11.3 MDM Settings································································································· 78
11.4 Viewing MediaFast Statistics·········································································· 79
12 CONFIGURING THE LAN INTERFACE(S) ···························································· 80
12.1 LAN Configuration with VLAN ········································································ 87
13 DROP-IN MODE ······································································································· 92
14 CONFIGURING THE WAN INTERFACE(S) ··························································· 96
14.1 Physical Interface Settings ············································································· 98
14.2 Connection Method(s) ···················································································· 99
14.3 WAN Health Check ······················································································ 107
14.4 Bandwidth Allowance Monitor ······································································ 110
14.5 Additional Public IP Settings········································································· 111
14.6 Dynamic DNS Settings················································································· 112
15 PEPVPN WITH SPEEDFUSIONTM BANDWIDTH BONDING ······························ 115
15.1 SpeedFusionTM Settings ··············································································· 115
15.2 The Peplink Balance Behind a NAT Router ················································· 122

USER MANUAL
Peplink Balance Series
http://www.peplink.com -4 / 269- Copyright © 2016 Peplink
15.3 SpeedFusionTM Status·················································································· 123
16 IPSEC VPN ············································································································· 124
16.1 IPsec VPN Settings ······················································································ 124
16.2 IPsec Status ································································································· 128
17 OUTBOUND POLICY MANAGEMENT································································· 129
17.1 Outbound Policy ··························································································· 130
17.2 Custom Rules for Outbound Policy ······························································ 131
18 INBOUND ACCESS ······························································································· 139
18.1 Definition of Servers on LAN ········································································ 139
18.2 Definition of Port Forwarding ········································································ 140
18.3 Inbound Access Services ············································································· 142
18.4 Reverse Lookup Zones ················································································ 158
18.5 DNS Record Import Wizard ·········································································· 162
19 NAT MAPPINGS····································································································· 166
20 CAPTIVE PORTAL································································································· 168
21 QOS························································································································· 171
21.1 User Groups ································································································· 171
21.2 Bandwidth Control ························································································ 172
21.3 Application···································································································· 173
22 FIREWALL·············································································································· 175
22.1 Outbound and Inbound Firewall Rules ························································· 175
23 OSPF & RIPV2 ······································································································· 184
24 REMOTE USER ACCESS ····················································································· 187
MISCELLANEOUS SETTINGS······················································································ 189
24.1 High Availability ···························································································· 189
24.2 Certificate Manager ······················································································ 192
24.3 Service Forwarding ······················································································ 192
24.4 Service Passthrough ···················································································· 194
25 AP···························································································································· 196
25.1 AP Controller ································································································ 196
25.2 Wireless SSID ······························································································ 197
25.3 Profiles ········································································································· 203
25.4 Info ··············································································································· 207
25.5 Usage··········································································································· 208
25.6 SSID············································································································· 211
25.7 Wireless Client ····························································································· 211

USER MANUAL
Peplink Balance Series
http://www.peplink.com -5 / 269- Copyright © 2016 Peplink
25.8 Rogue AP····································································································· 212
25.9 Toolbox ········································································································ 213
26 SYSTEM SETTINGS ······························································································ 214
26.1 Admin Security ····························································································· 214
26.2 Firmware ······································································································ 218
26.3 Schedule ······································································································ 219
26.4 Time ············································································································· 220
26.5 Email Notification·························································································· 221
26.6 Event Log ····································································································· 223
26.7 SNMP··········································································································· 224
26.8 InControl······································································································· 226
26.9 Configuration ································································································ 227
26.10 Feature Add-ons························································································ 228
26.11 Reboot······································································································· 228
27 TOOLS ···················································································································· 229
27.1 Ping ·············································································································· 229
27.2 Traceroute Test ···························································································· 230
27.3 Wake-on-LAN······························································································· 230
27.4 CLI (Command Line Interface) Support························································ 230
28 STATUS ·················································································································· 232
28.1 Device ·········································································································· 232
28.2 Active Sessions ···························································································· 234
28.3 Client List······································································································ 236
28.4 WINS Client·································································································· 236
28.5 OSPF & RIPv2 ····························································································· 236
28.6 SpeedFusionTM Status ·················································································· 237
28.7 Event Log ····································································································· 240
28.8 Bandwidth····································································································· 241
APPENDIX A. RESTORATION OF FACTORY DEFAULTS········································ 246
APPENDIX C. ROUTING UNDER DHCP, STATIC IP, AND PPPOE ·························· 247
C.1 Routing Via Network Address Translation (NAT) ········································· 247
C.2 Routing Via IP Forwarding············································································ 248
APPENDIX D. CASE STUDIES ····················································································· 249
D.1 MPLS Alternative·························································································· 249
D.2 Colégio Next - Enabling eLearning······························································· 256
D.3 Performance Optimization ············································································ 258
D.4 Maintaining the Same IP Address Throughout a Session ···························· 262
D.5 Bypassing the Firewall to Access Hosts on LAN ·········································· 263

USER MANUAL
Peplink Balance Series
http://www.peplink.com -6 / 269- Copyright © 2016 Peplink
D.6 Inbound Access Restriction·········································································· 264
D.7 Outbound Access Restriction ······································································· 265
APPENDIX E. TROUBLESHOOTING ··········································································· 266
APPENDIX F. DECLARATION ······················································································ 267
APPENDIX G: PRODUCT DATASHEETS···································································· 268

USER MANUAL
Peplink Balance Series
http://www.peplink.com -7 / 269- Copyright © 2016 Peplink
1Introduction and Scope
The Peplink Balance series provides link aggregation and load balancing across up to
thirteen WAN connections.
The Peplink Balance series offers cost-effective solutions suitable for SOHO/power
users and small businesses. The Balance lineup also features a range of advanced
enterprise solutions. Peplink enterprise routers are ideal single-box solutions for
medium to large business environments, and they allow service providers to enable
highly available multi-network services.
The Peplink MediaFast series downloads and buffers video, audio, iTunes/iTunes U,
HTTP, and other content for uninterrupted learning and fun anytime.
This manual applies to the following Peplink Balance products running firmware 6.3:
Peplink Balance 20/30
Peplink Balance 30 LTE
Peplink Balance 50
Peplink Balance 210/310
Peplink Balance 380
Peplink Balance 580
Peplink Balance 710
Peplink Balance 1350
Peplink Balance 2500
Peplink MediaFast 200/500
The manual covers setting up your Peplink Balance or MediaFast and provides a
collection of case studies detailing the advanced features of the Peplink Balance.
Important Note to Users Upgrading from Firmware 4.7 or below
If your current firmware version is 4.7 or below, please upgrade to Firmware 4.8.2 before upgrading to firmware 6.3.
Important Note to Users of the Peplink Balance 30 (Classic Edition)
Firmware 5.0 or above is NOT applicable to the Peplink Balance 30 (Classic Edition). For more information on
identifying the generation of your Peplink Balance 30, please visit our knowledgebase at
<http://www.peplink.com/index.php?view=faq&id=231&path=16>.

USER MANUAL
Peplink Balance Series
http://www.peplink.com -8 / 269- Copyright © 2016 Peplink
2Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
210+
Refers to Peplink Balance 210/310/380/580/710/1350/2500
380+
Refers to Peplink Balance 380/580/710/1350/2500

USER MANUAL
Peplink Balance Series
http://www.peplink.com -9 / 269 - Copyright © 2016 Peplink
3Product Comparison Chart
Click underlined features to reach the relevant portion of the manual.
20/30/50
30LTE
One
210
310
305
380
WAN Ports
2/3/5
2
2
2
3
3
2
Throughput (Mbps)
150
150
600
200
200
1Gbps
1Gbps
Embedded 4G LTE Modem
-
1
-
-
-
-
-
PepVPN
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SpeedFusion Hot Failover
-
-
-^
Yes
Yes
-^
Yes
SF Bandwidth Bonding
-
-
-^
Yes
Yes
-^
Yes
SF WAN Smoothing
-
-
-^
Yes
Yes
-^
Yes
Drop-In Mode
-
-
-
Yes
Yes
Yes
Yes
High Availability
-
-
-
Yes
Yes
Yes
Yes
Simultaneous Dual-Band
802.11a/b/g/n Wi-Fi AP
-
-
Yes
-
-
-
-
AP Controller
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Remote AP Management
-
-
-
-
-
Yes
Yes
Web Filtering Blacklist
-
-
Light
Light
Light
Full
Full
MediaFast Content
Caching
-
-
-
-
-
-
-
^Available as an optional feature
Full product comparison available at:
http://www.peplink.com/products/balance/model-comparison/

USER MANUAL
Peplink Balance Series
http://www.peplink.com -10 / 269 - Copyright © 2016 Peplink
580
710
1350
2500
MFA200
MFA500
MFA750
WAN Ports
5
7
13
12
2
5
7
Throughput (Mbps)
1.5Gbps
2.5Gbps
5Gbps
8Gbps
200
800
1.5Gbps
Embedded 4G LTE Modem
-
-
-
-
-
-
-
PepVPN
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SpeedFusion Hot Failover
Yes
Yes
Yes
Yes
-^
Yes
Yes
SF Bandwidth Bonding
Yes
Yes
Yes
Yes
-^
Yes
Yes
SF WAN Smoothing
Yes
Yes
Yes
Yes
-^
Yes
Yes
Drop-In Mode
Yes
Yes
Yes
Yes
Yes
Yes
Yes
High Availability
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Simultaneous Dual-Band
802.11a/b/g/n Wi-Fi AP
-
-
-
-
Yes
-
-
AP Controller
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Remote AP Management
Yes
Yes
Yes
Yes
-
Yes
Yes
Web Filtering Blacklist
Full
Full
Full
Full
Light
Full
Full
MediaFast Content
Caching
-
-
-
-
Yes
Yes
Yes
^Available as an optional feature
Full product comparison available at:
http://www.peplink.com/products/balance/model-comparison/

USER MANUAL
Peplink Balance Series
http://www.peplink.com -11 / 269 - Copyright © 2016 Peplink
4Product Features
Peplink Balance Series products enable all LAN users to share broadband Internet
connections and provide advanced features to enhance Internet access. The following
is a list of supported features:
4.1 Supported Network Features
4.2 WAN
Multiple public IP support (DHCP, PPPoE, static IP address)
Static IP support for PPPoE
10/100/1000Mbps Ethernet connection in full/half duplex
Built-in HSPA and EVDO cellular modems
USB mobile connection (only one USB modem can be connected at a time)
Drop-in mode on selectable WAN port with MAC address passthrough network
address translation (NAT) / port address translation (PAT)
Inbound and outbound NAT mapping
Multiple static IP addresses per WAN connection
MAC address clone
Customizable MTU and MSS values
WAN connection health check
Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-
ip.org,tzo.com, and DNS-O-Matic)
Ping, DNS lookup, and HTTP-based health check
4.3 LAN
DHCP server on LAN
Extended DHCP option support
Static routing rules
Local DNS proxy server
VLAN on LAN support
4.4 VPN
Secure SpeedFusionTM
SpeedFusion performance analyzer
X.509 certificate support (feature activation required on some Balance
models)
Bandwidth bonding and failover among selected WAN connections
Ability to route traffic to a remote VPN peer
Optional pre-shared key setting

USER MANUAL
Peplink Balance Series
http://www.peplink.com -12 / 269 - Copyright © 2016 Peplink
Layer 2 bridging
Layer 2 Peer Isolation
SpeedFusionTM throughput, ping, and traceroute tests
Built-in L2TP / PPTP VPN server
Authenticate L2TP / PPTP clients using RADIUS and LDAP servers
Multi-Site PepVPN Profile
IPsec VPN for network-to-network connections (works with Cisco and Juniper
only)
L2TP / PPTP and IPsec passthrough
4.5 Inbound Traffic Management
TCP/UDP traffic redirection to dedicated LAN server(s)
Inbound link load balancing by means of DNS
4.6 Outbound Policy
Link load distribution per TCP/UDP service
Persistent routing for specified source and/or destination IP addresses per
TCP/UDP service
Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
Time-based scheduling
4.7 AP Controller
Configure and manage Pepwave AP devices
Review the status of connected AP
4.8 QoS
Quality of service for different applications and custom protocols
User group classification for different service levels
Bandwidth usage control and monitoring on group- and user-level
Application prioritization for custom protocols and DSL optimization

USER MANUAL
Peplink Balance Series
http://www.peplink.com -13 / 269 - Copyright © 2016 Peplink
4.9 Firewall
Outbound (LAN to WAN) firewall rules
Inbound (WAN to LAN) firewall rules per WAN connection
Intrusion detection and prevention
Specification of NAT mappings
Web blocking
Application blocking
Time-based scheduling
Outbound firewall rules can be defined by destination domain name
4.10 Captive Portal
Social Wi-Fi Hotspot Support
Splash screen of open networks, login page for secure networks
Customizable built-in captive portal
Supports linking to outside page for captive portal

USER MANUAL
Peplink Balance Series
http://www.peplink.com -14 / 269 - Copyright © 2016 Peplink
4.11 Other Supported Features
Easy-to-use web administration interface
HTTP and HTTPS support for web administration interface
Configurable web administration port and administrator password
Read-only user for web admin
Shared-IP drop-in mode
Authentication and accounting by RADIUS server for web admin
Firmware upgrades, configuration backups, ping, and traceroute via web
administration interface
Remote web-based configuration (via WAN and LAN interfaces)
Remote reporting to Peplink Balance reporting server
Hardware high availability via VRRP, with automatic configuration
synchronization
Real-time, hourly, daily and monthly bandwidth usage reports and charts
Hardware backup via LAN bypass
Built-in WINS server
Time server synchronization
SNMP
Email notification
Syslog
SIP passthrough
PPTP packet passthrough
Active sessions
Active client list
WINS client list
UPnP / NAT-PMP
Improved active sessions page
Event log is persistent across reboots
IPv6 support
Support for USB tethering on Android 2.2+ phones

USER MANUAL
Peplink Balance Series
http://www.peplink.com -15 / 269 - Copyright © 2016 Peplink
5Advanced Feature Summary
5.1 Drop-in Mode and LAN Bypass: Transparent Deployment
As your organization grows, it needs more bandwidth. But modifying your network
would require effort better spent elsewhere. In Drop-in Mode, you can conveniently
install your Peplink router without making any changes to your network. And if the
Peplink router loses power for any reason, LAN Bypass will safely and automatically
bypass the Peplink router to resume your original network connection.
5.2 QoS: Clearer VoIP
VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers
can detect VoIP traffic and assign it the highest priority, giving you crystal-clear calls.

USER MANUAL
Peplink Balance Series
http://www.peplink.com -16 / 269 - Copyright © 2016 Peplink
5.3 Per-User Bandwidth Control
With per-user bandwidth control, you can define bandwidth control policies for up to 3
groups of users to prevent network congestion. Define groups by IP address and
subnet, and set bandwidth limits for every user in the group.
5.4 High Availability via VRRP
When your organization has a corporate requirement demanding the highest availability
with no single point of failure, you can deploy two Peplink routers in High Availability
mode. With High Availability mode, the second device will take over when needed.

USER MANUAL
Peplink Balance Series
http://www.peplink.com -17 / 269 - Copyright © 2016 Peplink
5.5 USB Modem and Android Tethering
For increased WAN diversity, plug in a USB LTE modem as backup. Peplink routers are
compatible with over 200 modem types. You can also tether to smartphones running
Android 4.1.X and above.
5.6 Built-In Remote User VPN Support
Use L2TP with IPsec to safely and conveniently connect remote clients to your private
network. L2TP with IPsec is supported by most devices, but legacy devices can also
connect using PPTP.
Click here for full instructions on setting up L2TP with IPsec.

USER MANUAL
Peplink Balance Series
http://www.peplink.com -18 / 269 - Copyright © 2016 Peplink
5.7 LACP NIC Bonding
Use 802.3ad to combine multiple LAN connections into a virtual LAN connection. This
virtual connection has higher throughput and redundancy in case any single link fails.

USER MANUAL
Peplink Balance Series
http://www.peplink.com -19 / 269 - Copyright © 2016 Peplink
6Usage Scenarios
The Balance SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the Balance
30, and MediaFast 200 are suitable for SMEs or branch offices. High-capacity SD-WAN
routers such as the Balance 580, Balance 2500, and MediaFast 750 are suitable for
larger organizations and head offices.
Set out below are the major industries that have been using our SD-WAN routers:
Public safety sector has strict demand and review
processes when procuring routers suitable for
deployment. Our MAX BR1 are ruggedized and perform
as required and have been used by police departments,
fire departments and other emergency response units in
different countries. The most common application is
vehicular wireless connectivity, where multiple wireless
employed to ensure service vehicles stay connected. Our
wireless routers are also being used for adding wireless
backhaul to remote CCTV networks.
It is common for schools network to become slow and
congested during classes due to students’ simultaneous
access. Our MediaFast routers can reduce network traffic
to ease the load on the network. Teachers can store
frequently accessed education content including high
definition media, mobile applications, web content and
mobile device updates in advance. This reduces network
congestion during classes and provides students with a
much improved education content user experience.
The retail sector generally has to keep their branch
networks up and running for applications such as
enterprise resource planning (ERP), terminal services
and point-of-sale (POS) systems. By deploying wireless
routers, our end users have been able to save significant
amount of network costs at their branches by replacing or
supplementing their MPLS lines with inexpensive WAN
connections.

USER MANUAL
Peplink Balance Series
http://www.peplink.com -20 / 269 - Copyright © 2016 Peplink
The industrial, construction and utilities sector typically
have sites that are out of the way or temporary in nature.
End uses in this sector have been deploying our wireless
routers to quickly setup WAN connections through
wireless connections. For areas where wireless
connectivity coverage is intermittent, our customers have
been deploying our MAX HD routers for more bandwidth
and reliability by bonding multiple wireless networks
through our SpeedFusion technology.
A hospitality customer usually needs a network
infrastructure that can provide fast internet access to
hundreds of guests. By deploying our Balance series
routers, hospitality end-users are able to prioritize and
separate network traffic to prevent congestion, and the
ability to use 4G LTE USB modems for an additional
resilience and bandwidth.
Broadcasters, including journalists and reporters, usually
rely on wireless networks to stream live content back to
stations, especially for live broadcast and sports events.
Our MAX HD2, MAX HD4 and MAX On-The-Go routers
have been selected by end-users to employ multiple
wireless networks to stream live multimedia contents.