peplink 20 User manual

Model 20/30/210/310/380/580/710/1350
User Manual
Firmware 5.3
May 2011
Copyright & Trademarks Specifications are subject to change without prior notice. Copyright © 2011 Peplink International Ltd. All
Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned
may be trademarks or registered trademarks of their respective owners.
Peplink Balance Multi-WAN Routers

USER MANUAL
Peplink Balance Series
http://www.peplink.com -2 / 182-Copyright © 2011 Peplink
Table of Contents
1INTRODUCTION AND SCOPE ···························································································· 5
2GLOSSARY ······················································································································· 6
3PRODUCT COMPARISON CHART ······················································································ 7
4PRODUCT FEATURES······································································································ 11
4.1 Supported Network Features········································································································ 11
4.2 Other Supported Features ············································································································ 12
5PACKAGE CONTENTS ····································································································· 13
5.1 Peplink Balance 20 / 30 ················································································································ 13
5.2 Peplink Balance 210 / 310 ············································································································ 13
5.3 Peplink Balance 380 / 580 / 710 / 1350························································································ 13
6PEPLINK BALANCE OVERVIEW ······················································································· 14
6.1 Peplink Balance 20 ······················································································································· 14
6.2 Peplink Balance 30 ······················································································································· 16
6.3 Peplink Balance 210 ····················································································································· 18
6.4 Peplink Balance 310 ····················································································································· 20
6.5 Peplink Balance 380 ····················································································································· 22
6.6 Peplink Balance 580 ····················································································································· 25
6.7 Peplink Balance 710 ····················································································································· 28
6.8 Peplink Balance 1350 ··················································································································· 31
7INSTALLATION··············································································································· 34
7.1 Preparation ··································································································································· 34
7.2 Constructing the Network ············································································································· 34
7.3 Configuring the Network Environment·························································································· 35
8BASIC CONFIGURATION································································································· 36
8.1 Connecting to Web Admin Interface····························································································· 36
8.2 Configuration with Setup Wizard ·································································································· 37
8.3 Advanced Setup ··························································································································· 40
9CONFIGURATION OF LAN INTERFACE············································································· 41
10 DROP-IN MODE·········································································································· 45
11 CONFIGURATION OF WAN INTERFACE(S) ···································································· 48
11.1 Connection Method(s)··············································································································· 50
11.2 Physical Interface Settings········································································································ 59
11.3 WAN Health Check ··················································································································· 60
11.4 Bandwidth Allowance Monitor··································································································· 63
11.5 Additional Public IP Settings ····································································································· 64
11.6 Dynamic DNS Settings ············································································································· 65
12 SITE-TO-SITE VPN ······································································································· 66

USER MANUAL
Peplink Balance Series
http://www.peplink.com -3 / 182-Copyright © 2011 Peplink
12.1 Site-to-Site VPN Settings·········································································································· 66
12.2 Peplink Balance Behind NAT Router ························································································ 69
12.3 VPN Status································································································································ 70
13 MANAGEMENT OF OUTBOUND TRAFFIC TO WAN······················································· 71
13.1 Outbound Policy························································································································ 72
13.2 Custom Rules For Outbound Policy·························································································· 73
14 INBOUND ACCESS······································································································· 79
14.1 Definition of Port Forwarding ···································································································· 79
14.2 Definition of Servers on LAN····································································································· 81
14.3 Inbound Access Services·········································································································· 82
14.4 UPnP / NAT-PMP Settings ······································································································· 84
14.5 Definition of DNS Records ········································································································ 85
14.6 Reverse Lookup Zones············································································································· 96
14.7 DNS Record Import Wizard ······································································································ 99
15 NAT MAPPINGS········································································································ 101
16 WLAN CONTROLLER ································································································· 103
16.1 WLAN Information··················································································································· 103
16.2 AP Management ····················································································································· 106
16.3 Wireless Networks ·················································································································· 107
16.4 Captive Portal Management ··································································································· 111
16.5 AP Profile ································································································································ 118
17 QOS ························································································································· 121
17.1 User Groups···························································································································· 121
17.2 Bandwidth Control··················································································································· 122
17.3 Application······························································································································· 123
18 FIREWALL················································································································· 125
18.1 Outbound and Inbound Firewall······························································································ 125
18.2 Web Blocking ·························································································································· 130
19 MISCELLANEOUS SETTINGS ······················································································ 131
19.1 High Availability······················································································································· 131
19.2 PPTP Server ··························································································································· 134
19.3 Service Forwarding ················································································································· 136
19.4 Service Passthrough ··············································································································· 138
20 SYSTEM SETTINGS ···································································································· 139
20.1 Admin Security ························································································································ 139
20.2 Firmware Upgrade ·················································································································· 143
20.3 Time ········································································································································ 144
20.4 Email Notification ···················································································································· 145
20.5 Remote Syslog························································································································ 147
20.6 SNMP······································································································································ 148
20.7 Reporting Server ····················································································································· 150
20.8 Configuration··························································································································· 152

USER MANUAL
Peplink Balance Series
http://www.peplink.com -4 / 182-Copyright © 2011 Peplink
20.9 Reboot····································································································································· 153
20.10 Ping Test ································································································································· 154
20.11 Traceroute Test······················································································································· 155
20.12 VPN Test································································································································· 155
21 STATUS ···················································································································· 156
21.1 Device ····································································································································· 156
21.2 Active Sessions······················································································································· 157
21.3 Client List ································································································································ 157
21.4 Access Point ··························································································································· 158
21.5 WINS Client····························································································································· 158
21.6 Site-to-Site VPN······················································································································ 158
21.7 UPnP / NAT-PMP···················································································································· 160
21.8 Event Log ································································································································ 161
21.9 Bandwidth ······························································································································· 162
APPENDIX A. RESTORATION OF FACTORY DEFAULTS·························································· 165
APPENDIX B. ROUTING UNDER DHCP, STATIC IP, AND PPPOE············································· 166
B.1 Routing via Network Address Translation (NAT)········································································ 166
B.2 Routing via IP Forwarding ·········································································································· 167
APPENDIX C. CASE STUDIES ······························································································· 168
C.1 Performance Optimization ·········································································································· 168
C.2 Maintaining the Same IP Address throughout a Session ··························································· 170
C.3 Bypassing the Firewall to Access Hosts on LAN········································································ 171
C.4 Inbound Access Restriction ········································································································ 172
C.5 Outbound Access Restriction ····································································································· 173
APPENDIX D. TROUBLESHOOTING ····················································································· 174
APPENDIX E. PRODUCT SPECIFICATIONS ············································································ 176
E.1 Peplink Balance 20 and 30········································································································· 176
E.2 Peplink Balance 210 and 310····································································································· 177
E.3 Peplink Balance 380 ··················································································································· 178
E.4 Peplink Balance 580 ··················································································································· 179
E.5 Peplink Balance 710 ··················································································································· 180
E.6 Peplink Balance 1350 ················································································································· 181

USER MANUAL
Peplink Balance Series
http://www.peplink.com -5 / 182-Copyright © 2011 Peplink
1Introduction and Scope
The Peplink Balance series provides link aggregation and load balancing across up to thirteen WAN
connections.
The Peplink Balance 20/30 provides a cost-effective solution suitable for power users and home offices.
The Peplink Balance 210/310 provides advanced features for small business.
The Peplink Balance 380, 580, 710 and 1350, with a suite of advanced enterprise-class features, make
ideal single-box solutions for medium to large-sized business environments, and allow service providers
to enable highly available multi-network services.
This manual applies to the following Peplink Balance products:
Peplink Balance 20/30 (firmware version v5.3.x) **Will be available in June 2011
Peplink Balance 210/310 (firmware version v5.3.x)
Peplink Balance 380 (firmware version v5.3.x)
Peplink Balance 580 (firmware version v5.3.x)
Peplink Balance 710 (firmware version v5.3.x)
Peplink Balance 1350 (firmware version v5.3.x)
The manual presents how-to set up Peplink Balance, and provides a collection of case studies involving
advanced features of Peplink Balance.
Important Note to Users Upgrading from Firmware 4.7 or below
If your current firmware version is 4.7 or below, please upgrade to Firmware 4.8.2 first before
upgrading to Firmware 5.3.
Important Note to Users of Peplink Balance 30 (Classic Edition)
Firmware 5.0 or above is NOT applicable to Peplink Balance 30 (Classic Edition). For more information
of identifying the generation of your Peplink Balance 30, please visit our knowledge base at
<http://www.peplink.com/index.php?view=faq&id=231&path=16>.

USER MANUAL
Peplink Balance Series
http://www.peplink.com -6 / 182-Copyright © 2011 Peplink
2Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term Definition
3G 3rd Generation family of standards for wireless communications
DHCP Dynamic Host Configuration Protocol
DNS Domain Name System
EVDO Evolution-Data Optimized
HSDPA High-Speed Downlink Packet Access
GRE Generic Routing Encapsulation
HTTP Hyper-Text Transfer Protocol
ICMP Internet Control Message Protocol
IP Internet Protocol
LAN Local Area Network
MAC Address Media Access Control Address
MTU Maximum Transmission Unit
MSS Maximum Segment Size
NAT Network Address Translation
PPPoE Point to Point Protocol over Ethernet
QoS Quality of Service
SNMP Simple Network Management Protocol
TCP Transmission Control Protocol
UDP User Datagram Protocol
VPN Virtual Private Network
VRRP Virtual Router Redundancy Protocol
WAN Wide Area Network
WINS Windows Internet Name Service
WLAN Wireless Local Area Network
210+ Refer to Peplink Balance 210/310/380/580/710/1350
380+ Refer to Peplink Balance 380/580/710/1350

USER MANUAL
Peplink Balance Series
http://www.peplink.com -7 / 182 - Copyright © 2011 Peplink
3Product Comparison Chart
Features 20 30 210 310 380 580 710 1350
Customer Group Home and Home Office Small Business Mid-Size Business Large Enterprise
Capacity
WAN Ports / Internet Links 2 3 2 3 3 (GbE) 5 (GbE) 7 (3x GbE) 13 (GbE)
Recommended Users 1-25 1-25 1-50 1-50 50-500 300-1000 500-2000+ 1000-5000+
Router Throughput 50M 50M 50M 50M 170M 250M 350M 1500M
Core Functionality
Load Balancing & Failover Yes Yes Yes Yes Yes Yes Yes Yes
Load Balancing Algorithms 5 5 7 7 7 7 7 7
•Weighted Yes Yes Yes Yes Yes Yes Yes Yes
•Enforced Yes Yes Yes Yes Yes Yes Yes Yes
•Persistence Yes Yes Yes Yes Yes Yes Yes Yes
•Priority Yes Yes Yes Yes Yes Yes Yes Yes
•Overflow Yes Yes Yes Yes Yes Yes Yes Yes
•Least Used X X Yes Yes Yes Yes Yes Yes
•Lowest Latency X X Yes Yes Yes Yes Yes Yes
Drop-In Mode X X Yes Yes Yes Yes Yes Yes
Inbound Load Balancing X X Yes Yes Yes Yes Yes Yes

USER MANUAL
Peplink Balance Series
http://www.peplink.com -8 / 182 - Copyright © 2011 Peplink
3G Modem Support Yes Yes X X Yes Yes Yes Yes
VPN Functionality
Site to Site VPN Bonding X X Yes Yes Yes Yes Yes Yes
Number of S2S VPN Peers X X 2 2 20 50 300 800
Bonded VPN Throughput X X 30M 30M 60M 80M 150M 350M
PPTP VPN Server X X Yes Yes Yes Yes Yes Yes
Recommended PPTP VPN
Users X X 15 15 50 100 200 500
RADIUS / LDAP support for
PPTP X X X X Yes Yes Yes Yes
WLAN Control Functionality
Manage Pepwave AP One X X X X Yes Yes Yes Yes
Access Point Configuration X X X X Yes Yes Yes Yes
Number of AP Support X X X X 50 100 250 500
Advanced QoS Functionality
Bandwidth Usage Monitor X X Yes Yes Yes Yes Yes Yes
QoS for VoIP and E-Commerce Yes Yes Yes Yes Yes Yes Yes Yes
Application Prioritization X X Yes Yes Yes Yes Yes Yes
Application Prioritization by
User Group X X X X Yes Yes Yes Yes
User Group Bandwidth
Reservation X X X X Yes Yes Yes Yes

USER MANUAL
Peplink Balance Series
http://www.peplink.com -9 / 182 - Copyright © 2011 Peplink
Individual Bandwidth Limit X X X X Yes Yes Yes Yes
Networking Functionality
NAT and IP Forwarding Yes Yes Yes Yes Yes Yes Yes Yes
Configurable Static Routes Yes Yes Yes Yes Yes Yes Yes Yes
Port Forwarding Yes Yes Yes Yes Yes Yes Yes Yes
Many to One, One to One NAT Yes Yes Yes Yes Yes Yes Yes Yes
UPnP, NAT-PMP Yes Yes Yes Yes Yes Yes Yes Yes
WINS Server Yes Yes Yes Yes Yes Yes Yes Yes
Dynamic DNS Yes Yes Yes Yes Yes Yes Yes Yes
Web Blocking X X X X Yes Yes Yes Yes
Device Management
Functionality
Web Administrative Interface Yes Yes Yes Yes Yes Yes Yes Yes
Email Notification Yes Yes Yes Yes Yes Yes Yes Yes
Client List Yes Yes Yes Yes Yes Yes Yes Yes
Bandwidth Usage Statistics Yes Yes Yes Yes Yes Yes Yes Yes
Web Reporting Services Yes Yes Yes Yes Yes Yes Yes Yes
Email Notification Yes Yes Yes Yes Yes Yes Yes Yes
Syslog Yes Yes Yes Yes Yes Yes Yes Yes
SNMP v1, v2c and v3 Yes Yes Yes Yes Yes Yes Yes Yes

USER MANUAL
Peplink Balance Series
http://www.peplink.com -10 / 182 - Copyright © 2011 Peplink
Hardware Features
LAN Ports 4 4 4 4 1 (GbE) 1 (GbE) 1 (GbE) 1 (GbE)
Power Input 100V to 240V
AC
100V to 240V
AC
100V to 240V
AC
100V to 240V
AC
100V to 240V
AC
100V to 240V
AC
100V to 240V
AC
100V to 240V
AC
Power Consumption 15W 15W 15W 15W 50W 50W 70W 70W
1U Rackmount X X Yes Yes Yes Yes Yes Yes
High Availability X X Yes Yes Yes Yes Yes Yes
LAN Bypass X X X X X Yes X Yes
Dimension (H x W x D) 3.5cm x 26cm x
13.3cm
4.4cm x 29.3cm x
15.9cm 1U x 27.0cm 1U x 27.8cm 1U x 37.9cm 1U x 39.8cm
Weight 1.0kg 1.0kg 1.2kg 1.2kg 3.5kg 5.5kg 5.5kg 6.5kg

USER MANUAL
Peplink Balance Series
http://www.peplink.com -11 / 182 - Copyright © 2011 Peplink
4Product Features
Peplink Balance Series products enable all LAN users to share broadband Internet connections, and
provide advanced features to enhance Internet access. The following is the list of supported features:
4.1 Supported Network Features
4.1.1 WAN
Multiple public IP support (DHCP, PPPoE, Static IP Address, or GRE)
10/100 Mbps Connection in Full/Half Duplex
1000 Mbps Connection in Full/Half Duplex (Available on Peplink Balance 380+)
USB Mobile Connection* (Available on Peplink Balance 20/30, 380+)
*Remark: Only one USB modem can be connected.
Drop-in Mode on selectable WAN port with MAC address passthrough (Available on Peplink
Balance 210+)
Network Address Translation (NAT) / Port Address Translation (PAT)
Inbound and Outbound NAT mapping
IPsec NAT-T and PPTP packet passthrough
Multiple static IP addresses per WAN Connection
MAC address clone
Customizable MTU and MSS values
WAN connection health check
Dynamic DNS (Supported service providers: changeip.com, dyndns.org, no-ip.org and tzo.com)
4.1.2 LAN
DHCP server on LAN
Static routing rules
Local DNS
4.1.3 VPN (Available on Peplink Balance 210+)
Secure Site-to-Site VPN
VPN load balancing and failover among selected WAN connections
Site-to-Site VPN bandwidth bonding
Ability to route Internet traffic to a remote VPN peer
Optional pre-shared key setting
Authenticate PPTP clients by RADIUS and LDAP servers (Available on Peplink Balance 380+)
Site-to-Site VPN Throughput, Ping and Traceroute Test (Available on Peplink Balance
210+)PPTP server
PPTP and IPsec passthrough
4.1.4 Inbound Traffic Management
TCP/UDP traffic redirection to dedicated LAN server(s)
Inbound link load balancing by means of DNS (Available on Peplink Balance 210+)
4.1.5 Outbound Policy
Link load distribution per TCP/UDP service
Persistent routing for specified source and/or destination IP addresses per TCP/UDP service
Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
4.1.6 WLAN Controller
•Configure and manage Pepwave AP devices
•Review the status of connected AP

USER MANUAL
Peplink Balance Series
http://www.peplink.com -12 / 182 - Copyright © 2011 Peplink
4.1.7 QoS(Available on Peplink Balance 210+)
Quality of Service for different applications and custom protocols
User Group classification for different service levels (Available on Peplink Balance 380+)
Bandwidth usage control and monitoring on group- and user- level (Available on Peplink
Balance 380+)
Application Prioritization for custom protocols and DSL optimization
4.1.8 Firewall
Outbound (LAN to WAN) firewall rules
Inbound (WAN to LAN) firewall rules per WAN connection
Intrusion detection and prevention
Specification of NAT mappings
Web Blocking (Available on Peplink Balance 380+)
4.2 Other Supported Features
Easy-to-use web-based administration interface
HTTP and HTTPS support for Web Administration Interface
Configurable web administration port and administrator password
Read-only user for Web Admin
Authentication and Accounting by RADIUS server for Web Admin
Firmware upgrades, configuration backups, Ping, and Traceroute via Web Administration
Interface
Remote web based configuration (via WAN and LAN interfaces)
Remote reporting to Peplink Balance reporting server
Real-Time, Daily and Monthly Bandwidth Usage reports and charts
Hardware High Availability via VRRP, with automatic configuration synchronization (Available on
Peplink Balance 210+)
Hardware backup via LAN bypass (Available on Peplink Balance 580 and 1350)
Built-in WINS server
Time server synchronization
SNMP
Email notification
Syslog
SIP passthrough
PPTP packet passthrough
Event Log
Active Sessions
Client List
WINS Client List
UPnP / NAT-PMP

USER MANUAL
Peplink Balance Series
http://www.peplink.com -13 / 182 - Copyright © 2011 Peplink
5Package Contents
The contents of Peplink Balance product packages are as follows:
5.1 Peplink Balance 20 / 30
Peplink Balance 20 / 30
Power adapter
Information slip
5.2 Peplink Balance 210 / 310
Peplink Balance 210 / 310
Power adapter
Information slip
Rackmount kit
5.3 Peplink Balance 380 / 580 / 710 / 1350
Peplink Balance 380 / 580 / 710 / 1350
Power cord
Information slip
Rackmount kit

USER MANUAL
Peplink Balance Series
http://www.peplink.com -14 / 182 - Copyright © 2011 Peplink
6Peplink Balance Overview
6.1 Peplink Balance 20
6.1.1 Front Panel Appearance
6.1.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power
OFF – Power off
Green – Power on
Status
OFF – System initializing
Red – Booting up or busy
Green – Ready state
LAN and WAN Ports
Green LED
ON – 100 Mbps
OFF – 10 Mbps
Yellow LED
Solid – Port is connected without traffic
Blinking – Data is transferring
OFF – Port is not connected
Port Type Auto MDI/MDI-X ports
USB Port
USB Ports For connecting a USB based mobile modem.
LAN Ports
Power LED
Reset Button
Status LED WAN Ports USB Port

USER MANUAL
Peplink Balance Series
http://www.peplink.com -15 / 182 - Copyright © 2011 Peplink
6.1.3 Rear Panel Appearance
6.1.4 Unit Base Appearance
Serial Number and
LAN MAC Address
Power Connector
Kensington Security Slot

USER MANUAL
Peplink Balance Series
http://www.peplink.com -16 / 182 - Copyright © 2011 Peplink
6.2 Peplink Balance 30
6.2.1 Front Panel Appearance
6.2.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power
OFF – Power off
Green – Power on
Status
OFF – System initializing
Red – Booting up or busy
Green – Ready state
LAN and WAN Ports
Green LED
ON – 100 Mbps
OFF – 10 Mbps
Yellow LED
Solid – Port is connected without traffic
Blinking – Data is transferring
OFF – Port is not connected
Port Type Auto MDI/MDI-X ports
USB Port
USB Ports For connecting a USB based mobile modem.
Reset Button
Power LED
Status LED
LAN Ports
WAN Ports USB Port

USER MANUAL
Peplink Balance Series
http://www.peplink.com -17 / 182 - Copyright © 2011 Peplink
6.2.3 Rear Panel Appearance
6.2.4 Unit Base Appearance
Serial Number and
LAN MAC Address
Power Connector
Kensington Security Slot

USER MANUAL
Peplink Balance Series
http://www.peplink.com -18 / 182 - Copyright © 2011 Peplink
6.3 Peplink Balance 210
6.3.1 Front Panel Appearance
6.3.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power
OFF – Power off
Green – Power on
Status
OFF – System initializing
Red – Booting up or busy
Green – Ready state
LAN and WAN Ports
Green LED
ON – 100 Mbps
OFF – 10 Mbps
Yellow LED
Solid – Port is connected without traffic
Blinking – Data is transferring
OFF – Port is not connected
Port Type Auto MDI/MDI-X ports
LAN Ports
Power LED
Reset Button
Status LED
WAN Ports

USER MANUAL
Peplink Balance Series
http://www.peplink.com -19 / 182 - Copyright © 2011 Peplink
6.3.3 Rear Panel Appearance
6.3.4 Unit Base Appearance
Serial Number and
LAN MAC Address
Power Connector

USER MANUAL
Peplink Balance Series
http://www.peplink.com -20 / 182 - Copyright © 2011 Peplink
6.4 Peplink Balance 310
6.4.1 Front Panel Appearance
6.4.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power
OFF – Power off
Green – Power on
Status
OFF – System initializing
Red – Booting up or busy
Green – Ready state
LAN and WAN Ports
Green LED
ON – 100 Mbps
OFF – 10 Mbps
Yellow LED
Solid – Port is connected without traffic
Blinking – Data is transferring
OFF – Port is not connected
Port Type Auto MDI/MDI-X ports
Reset Button
Power LED
Status LED LAN Ports
WAN Ports