peplink 20 User manual

User Manual
For Model 20/30/210/310/305/380/580/710/1350/2500
Peplink Balance Firmware 5.4
December 2013
Copyright & TrademarksSpecifications are subject to change without prior notice. Copyright © 2013Peplink International Ltd. All
Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned
may be trademarks or registered trademarks of their respective owners.
Peplink Balance Multi
-WAN Bonding Routers

USER MANUAL
Peplink Balance Series
TABLE OF CONTENTS
1INTRODUCTION AND SCOPE ······························································································5
2GLOSSARY ··························································································································6
3PRODUCT COMPARISON CHART ························································································7
4PRODUCT FEATURES ········································································································11
4.1 Supported Network Features ·····················································································11
4.2Other Supported Features·························································································12
5PACKAGE CONTENTS········································································································14
5.1 Peplink Balance 20 / 30····························································································14
5.2 Peplink Balance 210 / 310·························································································14
5.3 Peplink Balance305 / 380 / 580 / 710 / 1350 / 2500 ························································14
6PEPLINK BALANCE OVERVIEW ·························································································15
6.1 Peplink Balance 20··································································································15
6.2 Peplink Balance 30··································································································17
6.3 Peplink Balance 210································································································19
6.4 Peplink Balance 310································································································21
6.5 Peplink Balance 305································································································23
6.6 Peplink Balance 380································································································26
6.7 Peplink Balance 580································································································29
6.8 Peplink Balance 710································································································32
6.9 Peplink Balance 1350 ······························································································35
6.10 Peplink Balance 2500 ···························································································38
7INSTALLATION··················································································································42
7.1 Preparation············································································································42
7.2 Constructing the Network··························································································42
7.3 Configuring the Network Environment··········································································44
8BASIC CONFIGURATION ···································································································45
8.1 Connecting to Web Admin Interface ············································································45
8.2 Configuration with Setup Wizard·················································································46
8.3 Advanced Setup ·····································································································48
9CONFIGURATION OF LAN INTERFACE ··············································································50
10 DROP-IN MODE················································································································54
11 CONFIGURATION OF WAN INTERFACE(S) ········································································57
11.1 Connection Method(s)···························································································59
11.2 Physical Interface Settings·····················································································65
11.3 WAN Health Check·······························································································67
11.4 Bandwidth Allowance Monitor ·················································································70
11.5 Additional Public IP Settings···················································································71
11.6 Dynamic DNS Settings··························································································72
http://www.peplink.com -2 / 207- Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
12 BANDWIDTH BONDING SPEEDFUSIONTM ·········································································74
12.1 SpeedFusionTMSettings·························································································74
12.2 Peplink Balance Behind NAT Router ········································································79
12.3 SpeedFusionTM Status···························································································80
13 IPSEC VPN ························································································································81
13.1 IPsec VPN Settings ······························································································81
13.2 IPsec Status········································································································84
14 MANAGEMENT OF OUTBOUND TRAFFIC TO WAN ··························································84
14.1 Outbound Policy ··································································································84
14.2 Custom Rules for Outbound Policy···········································································86
15 INBOUND ACCESS ············································································································92
15.1 Definition of Port Forwarding···················································································92
15.2 Definition of Servers on LAN···················································································94
15.3 Inbound Access Services·······················································································95
15.4 Reverse Lookup Zones ······················································································· 109
15.5 DNS Record Import Wizard ·················································································· 112
16 NAT MAPPINGS··············································································································115
17 WLAN CONTROLLER·······································································································117
17.1 WLAN Information······························································································ 117
17.2 AP Management································································································ 122
17.3 Wireless Networks······························································································ 123
17.4 Captive Portal Management ················································································· 128
17.5 AP Profile········································································································· 135
18 QOS································································································································138
18.1 User Groups ····································································································· 138
18.2 Bandwidth Control······························································································ 139
18.3 Application········································································································ 140
19 FIREWALL ·······················································································································142
19.1 Outbound and Inbound Firewall Rules ···································································· 142
19.2 Web Blocking···································································································· 149
20 MISCELLANEOUS SETTINGS····························································································150
20.1 High Availability ································································································· 150
20.2 PPTP Server····································································································· 153
20.3 Service Forwarding····························································································· 155
20.4 Service Passthrough··························································································· 157
21 SYSTEM SETTINGS··········································································································158
21.1 Admin Security ·································································································· 158
21.2 Firmware Upgrade······························································································ 162
21.3 Time················································································································ 163
21.4 Email Notification ······························································································· 164
http://www.peplink.com -3 / 207- Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
21.5 Remote Syslog·································································································· 166
21.6 SNMP·············································································································· 167
21.7 InControl ·········································································································· 169
21.8 Configuration····································································································· 170
21.9 Reboot············································································································· 171
22 TOOLS ····························································································································171
22.1 Ping Test·········································································································· 171
22.2 Traceroute Test ································································································· 173
22.3 SpeedFusionTM Test ··························································································· 173
22.4 CLI (Command Line Interface Support)··································································· 174
23 STATUS ··························································································································175
23.1 Device ············································································································· 175
23.2 Active Sessions ································································································· 176
23.3 Client List········································································································· 178
23.4 Access Point····································································································· 179
23.5 WINS Client······································································································ 179
23.6 SpeedFusionTMStatus ························································································· 179
23.7 Event Log········································································································· 180
23.8 Bandwidth ········································································································ 181
APPENDIX A. RESTORATION OF FACTORY DEFAULTS ·····························································186
APPENDIX B. ROUTING UNDER DHCP, STATIC IP, AND PPPOE ···············································187
B.1 Routing via Network Address Translation (NAT)···························································187
B.2 Routing via IP Forwarding······················································································· 188
APPENDIX C. CASE STUDIES ····································································································189
C.1 Performance Optimization······················································································· 189
C.2Maintaining the Same IP Address throughout a Session················································ 191
C.3 Bypassing the Firewall to Access Hosts on LAN ·························································· 192
C.4 Inbound Access Restriction····················································································· 193
C.5 Outbound Access Restriction··················································································· 194
APPENDIX D. TROUBLESHOOTING··························································································195
APPENDIX E. PRODUCT SPECIFICATIONS ················································································197
E.1 Peplink Balance 20 and 30······················································································ 197
E.2 Peplink Balance 210 and 310 ·················································································· 198
E.3 Peplink Balance 380······························································································ 199
E.4 Peplink Balance 305······························································································ 200
E.5 Peplink Balance 380······························································································ 201
E.6 Peplink Balance 580······························································································ 202
E.7 Peplink Balance 710······························································································ 203
E.8 Peplink Balance 1350 ···························································································· 204
E.9 Peplink Balance 2500 ···························································································· 205
APPENDIX F. DECLARATION····································································································206
http://www.peplink.com -4 / 207- Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
1Introduction and Scope
The Peplink Balance series provides link aggregation and load balancing across up to thirteen WAN
connections.
The Peplink Balance 20/30 provides a cost-effective solution suitable for power users and home offices.
The Peplink Balance 210/310 provides advanced features for small business.
The Peplink Balance 380, 580, 710, 1350 and 2500, with a suite of advanced enterprise-class features,
make ideal single-box solutions for medium to large-sized business environments, andallow service
providers to enable highly available multi-network services.
This manual applies to the following Peplink Balance products:
Peplink Balance 20/30 (firmware version v5.4.x)
Peplink Balance 210/310 (firmware version v5.4.x)
Peplink Balance 380 (firmware version v5.4.x)
Peplink Balance 580 (firmware version v5.4.x)
Peplink Balance 710 (firmware version v5.4.x)
Peplink Balance 1350 (firmware version v5.4.x)
Peplink Balance 2500 (firmware version v5.4.x)
The manual presents how-to set up Peplink Balance, and provides a collection of case studies involving
advanced features of Peplink Balance.
Important Note to Users Upgrading from Firmware 4.7 or below
If your current firmware version is 4.7 or below, please upgrade to Firmware 4.8.2 first before upgrading to Firmware
5.3 or 5.4
Important Note to Users of Peplink Balance 30 (Classic Edition)
Firmware 5.0 or above is NOT applicable to Peplink Balance 30 (Classic Edition). For more information of
identifying the generation of your Peplink Balance 30, please visit our knowledge base at
<http://www.peplink.com/index.php?view=faq&id=231&path=16>.
http://www.peplink.com -5 / 207- Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
2Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd Generation standards for wireless communications (e.g. HSDPA)
4G
4th Generation standards for wireless communications (e.g. WiMAX, LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
210+
Refer to Peplink Balance 210/310/380/580/710/1350/2500
380+
Refer to Peplink Balance 380/580/710/1350/2500
http://www.peplink.com -6 / 207- Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
3Product Comparison Chart
Features 20 30 210 310 380 580 710 1350 2500
Capacity
WAN Ports (GbE) / Internet
2
3
2
3
3
5
7
13
12
Recommended Users 1-25 1-25 1-50 1-50 50-500 300-1000 500-2000+ 1000-
5000+
5000-20000+
Router Throughput
100M
100M
100M
100M
200M
400M
800M
1500M
8Gbps
Core Functionality
Load Balancing & Failover Yes Yes Yes Yes Yes Yes Yes Yes Yes
Load Balancing Algorithms
5
5
7
7
7
7
7
7
7
•
Weighted
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
•
Enforced
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
•
Persistence
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
•Priority
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
•Overflow
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
•
Least Used
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
•
Lowest Latency
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Drop-In Mode
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Inbound Load Balancing
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
4G/3G Modem Support
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
http://www.peplink.com -7 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
VPN Functionality
SpeedFusionTM
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Number of SpeedFusionTMPeer
X
X
2
2
20
50
300
800
4000
Bonded VPN Throughput
X
X
30M
30M
60M
80M
150M
350M
2Gbps
PPTP VPN Server
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Recommended PPTP VPN
3
3
15
15
50
100
200
500
1000
RADIUS / LDAP support for
PPTP
X X Yes Yes Yes Yes Yes Yes Yes
IPsec VPN
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Number of IPsec Tunnel
2
2
2
2
20
50
150
400
800
WLAN Control Functionality
Manage Pepwave AP One
X
X
X
X
Yes
Yes
Yes
Yes
Yes
Access Point Configuration
X
X
X
X
Yes
Yes
Yes
Yes
Yes
AP Firmware Update
X
X
X
X
Yes
Yes
Yes
Yes
Yes
Number of AP Support
X
X
X
X
50*
100*
250*
500*
Yes
Advanced QoS Functionality
Bandwidth Usage Monitor
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
QoS for VoIP and E-
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Application Prioritization
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Application Prioritization by
X
X
X
X
Yes
Yes
Yes
Yes
Yes
User Group Bandwidth
X
X
X
X
Yes
Yes
Yes
Yes
Yes
Individual Bandwidth Limit
X
X
X
X
Yes
Yes
Yes
Yes
Yes
http://www.peplink.com -8 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
Networking Functionality
NAT and IP Forwarding
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Static Routes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Port Forwarding
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Many to One, One to One NAT
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
NAT Pool
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SIP ALG, H.323 ALG
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
UPnP, NAT-PMP
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
WINS Server
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Dynamic DNS
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Web Blocking
X
X
X
X
Yes
Yes
Yes
Yes
Yes
Device
Web Administrative Interface
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Email Notification
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Active Client List
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Active Session List
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Bandwidth Usage Statistics
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Web Reporting Services
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Email Notification
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Syslog
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SNMP v1, v2c and v3
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
http://www.peplink.com -9 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
Hardware Features
LAN Ports (GbE) 4 4 4 4 1 1 1 1 8/ 2(10GbE
SFP+)
Power Input 9-16V DC 9-16V DC 9-16V AC
DC 9-16VDC 100V to 240V AC 100V to 240V AC 100V to 240V AC 100V to 240V AC 100V to 240V
AC
Power Consumption
15W
15W
15W
15W
50W
50W
70W
70W
230W
1U Rackmount
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
High Availability
X
X
Yes
Yes
Yes
Yes
Yes
Yes
Yes
LAN Bypass
X
X
X
X
X
Yes
Yes
Yes
Yes
Dimension (H x W x D) 3.5cm x 26cm x
13.3cm
1U x 15.9cm 1U x 27.8cm 1U x 37.9cm 1U x 39.8cm 1U x 55cm
Weight
1.0kg
1.0kg
1.2kg
1.2kg
3.5kg
5.5kg
5.5kg
6.5kg
12kg
http://www.peplink.com -10 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
4Product Features
Peplink Balance Series products enableall LAN users to sharebroadband Internet connections,and
provide advanced features to enhanceInternet access. The following is the list of supported features:
4.1 Supported Network Features
4.1.1 WAN
Multiple public IP support (DHCP, PPPoE, Static IP Address)
10/100/1000Mbps Ethernet connection in Full/Half Duplex
USB mobile connection(Remark: Only one USB modem can be connected at a time.)
Drop-in Modeon selectable WAN portwith MAC address passthrough(Available on Peplink
Balance 210+)
Network Address Translation (NAT) / Port Address Translation (PAT)
Inbound and Outbound NAT mapping
Multiple static IP addresses per WAN Connection
MAC address clone
Customizable MTU and MSS values
WAN connection health check
Dynamic DNS (Supported service providers: changeip.com, dyndns.org, no-ip.org,tzo.com and
DNS-O-Matic)
Ping, DNS Lookup and HTTP based health check
4.1.2 LAN
DHCP server on LAN
Static routing rules
Local DNS proxy server
4.1.3 VPN
Secure SpeedFusionTM(Available on Peplink Balance 210+)
Bandwidth bonding &failover among selected WAN connections
Ability to route traffic to a remote VPN peer
Optional pre-shared key setting
Layer 2 Bridging
SpeedFusionTM Throughput, Ping and Traceroute Test
Built-in PPTP VPN Server
Authenticate PPTP clients by RADIUS and LDAP servers (Available on Peplink Balance 210+)
IPsec VPN for Network-to-Network connection (Works with Cisco, Juniper only)
PPTP and IPsecpassthrough
4.1.4 Inbound Traffic Management
TCP/UDP traffic redirection to dedicated LAN server(s)
Inbound link load balancing by means of DNS(Available on Peplink Balance 210+)
http://www.peplink.com -11 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
4.1.5 Outbound Policy
Link load distribution per TCP/UDP service
Persistent routing for specified source and/or destination IP addresses per TCP/UDP service
Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
4.1.6 WLAN Controller
•Configure and manage Pepwave AP devices
•Review the status of connected AP
4.1.7 QoS(Available on Peplink Balance 210+)
Quality of Service for different applications and custom protocols
User Group classification for different service levels (Available on Peplink Balance 380+)
Bandwidth usage control and monitoring on group- and user- level (Available on Peplink
Balance 380+)
Application Prioritization for custom protocols and DSL optimization
4.1.8 Firewall
Outbound (LAN to WAN) firewall rules
Inbound (WAN to LAN) firewall rules per WAN connection
Intrusion detection and prevention
Specification of NAT mappings
Web Blocking (Available on Peplink Balance 380+)
Outbound firewall rules can be defined by destination domain name
4.2 Other Supported Features
Easy-to-use web administration interface
HTTP and HTTPS support for Web Administration Interface
Configurable web administration port and administrator password
Read-only user for Web Admin
Authentication and Accounting by RADIUS server for Web Admin(Available on Peplink Balance
210+)
Firmware upgrades, configuration backups, Ping, and Traceroute via Web Administration
Interface
Remote web based configuration (via WAN and LAN interfaces)
Remote reporting to Peplink Balance reporting server
Hardware High Availability via VRRP, with automatic configuration synchronization(Available on
Peplink Balance 210+)
Real-Time, Hourly, Daily and Monthly Bandwidth Usage reports and charts
Hardware backup via LAN bypass (Available on Peplink Balance 580, 710, 1350 and 2500)
Built-in WINS server
Time server synchronization
SNMP
Email notification
Syslog
SIP passthrough
http://www.peplink.com -12 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
PPTP packet passthrough
Active Sessions
Active Client List
WINS Client List
UPnP / NAT-PMP
Improved Active Sessions Page
Event Log is persistent across reboots
IPv6 support
Support USB tethering on Android 2.2+ phones
http://www.peplink.com -13 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
5Package Contents
The contents of Peplink Balance product packages are as follows:
5.1 Peplink Balance 20 / 30
Peplink Balance 20 / 30
Power adapter
Information slip
5.2 Peplink Balance 210 / 310
Peplink Balance 210 / 310
Power adapter
Information slip
Rackmount kit
5.3 Peplink Balance305 / 380 / 580 / 710 / 1350 / 2500
Peplink Balance 305/380/580/710/1350/2500
Power cord
Information slip
Rackmount kit
http://www.peplink.com -14 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
6Peplink Balance Overview
6.1 Peplink Balance 20
6.1.1 Front Panel Appearance
6.1.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power OFF – Power off
Green – Power on
Status
OFF – Upgrading firmware
Red – Booting up or busy
Blinking red– Boot up error
Green – Ready
LAN and WAN Ports
Green LED ON – 10 / 100 / 1000 Mbps
Orange LED Blinking – Data is transferring
OFF – No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports
USB Port
USB Ports For connecting a 4G/3G USB modem.
LAN Ports Power LED
Reset Button
Status LED WAN Ports USB Port
http://www.peplink.com -15 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
6.1.3 Rear Panel Appearance
6.1.4 Unit Base Appearance
Serial Number and
LAN MAC Address
Power Connector
Kensington Security Slot
http://www.peplink.com -16 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
6.2 Peplink Balance 30
6.2.1 Front Panel Appearance
6.2.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power OFF – Power off
Green – Power on
Status
OFF – Upgrading firmware
Red – Booting up or busy
Blinking red– Boot up error
Green – Ready
LAN and WAN Ports
Green LED ON – 10 / 100 /1000 Mbps
Orange LED Blinking – Data is transferring
OFF – No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports
USB Port
USB Ports For connecting a 4G/3G USB modem.
Reset Button
Power LED
Status LED
LAN Ports
WAN Ports USB Port
http://www.peplink.com -17 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
6.2.3 Rear Panel Appearance
6.2.4 Unit Base Appearance
Serial Number and
LAN MAC Address
Power Connector
Kensington Security Slot
http://www.peplink.com -18 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
6.3 Peplink Balance 210
6.3.1 Front Panel Appearance
6.3.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power OFF – Power off
Green – Power on
Status
OFF – Upgrading firmware
Red – Booting up or busy
Blinking red– Boot up error
Green – Ready
LAN and WAN Ports
Green LED ON – 10 / 100 / 1000 Mbps
Orange LED Blinking – Data is transferring
OFF – No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports
USB Port
USB Ports For connecting a 4G/3G USB modem.
LAN Ports
Power LED
Reset Button
USB
WAN Ports
Status LED
http://www.peplink.com -19 / 207 - Copyright © 2013 Peplink

USER MANUAL
Peplink Balance Series
6.3.3 Rear Panel Appearance
6.3.4 Unit Base Appearance
Serial Number and
LAN MAC Address
Power Connector
http://www.peplink.com -20 / 207 - Copyright © 2013 Peplink