peplink PEPWAVE Balance One User manual

Balance and MediaFast
User Manual (Declaration)
Peplink Products:
One / One Core / Two / 20 / 20X / 30 LTE / 30 Pro / 210 / 310 / 310X / 310 5G / 310 Fiber 5G /
305 / 380 / 380X / 580 / 580X / 710 / 1350 / 2500 / 2500 EC/ EPX / SDX / SDX Pro / MediaFast
200 / 500 / 750
Peplink Balance Firmware 8.3.0
September 2023
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice.
Copyright © 2021 Peplink Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Peplink International
Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.

Table of Contents
Introduction and Scope 8
1 Glossary 9
2 Product Comparison Charts 10
2.1 Balance Routers (for Small Office / Branch) 10
2.2 Balance Routers (for for Enterprise / Headquarters) 11
2.3 MediaFast Routers 12
3 Product Features 13
3.1 WAN 13
3.2 LAN 13
3.3 VPN 14
3.4 Inbound Traffic Management 14
3.5 Outbound Policy 14
3.6 AP Controller 14
3.7 QoS 14
3.8 Firewall 15
3.9 Captive Portal 15
3.10 Other Supported Features 15
4 Advanced Feature Summary 17
4.1 Drop-in Mode and LAN Bypass: Transparent Deployment 17
4.2 QoS: Clearer VoIP 17
4.3 Per-User Bandwidth Control 18
4.4 High Availability via VRRP 18
4.5 USB Modem and Android Tethering 19
4.6 Built-In Remote User VPN Support 19
4.7 LACP NIC Bonding 20
4.8 KVM Virtualization 20
4.9 DPI Engine 20
4.10 NetFlow 21
4.11 Wi-Fi Air Monitoring 21
4.12 SP Default Configuration 21
4.13 Peplink Relay 21
4.14 DNS over HTTPS (DoH) 22
4.15 Peplink InTouch 22
4.16 Synergy Mode 22
https://www.peplink.com
2
Copyright @ 2022 Peplink

4.17 Virtual WAN on VLAN 22
5 Package Contents 23
5.1 Peplink Balance One/Two 23
5.2 Peplink Balance 20/30/30 LTE/30 Pro/50 23
5.3 Peplink Balance 20X 23
5.4 Peplink Balance 210/310 23
5.5 Peplink Balance 310X 23
5.6 Peplink Balance 310 5G 24
5.7 Peplink Balance 310 Fiber 5G 24
5.8 Peplink Balance 305/380/580/710/1350/2500/2500 EC 24
5.9 Peplink Balance 380X/580X 24
5.10 Peplink MediaFast 200 24
5.11 Peplink MediaFast 500 25
5.12 Peplink EPX 25
5.13 Peplink SDX 25
5.14 Peplink SDX Pro 25
6 Peplink Balance Overview 26
6.1 Peplink Balance One 26
6.2 Peplink Balance Two 27
6.3 Peplink Balance 20 28
6.4 Peplink Balance 20X 30
6.5 Peplink Balance 30 LTE 33
6.6 Peplink Balance 30 Pro 34
6.7 Peplink Balance 50 36
6.8 Peplink Balance 210 37
6.9 Peplink Balance 305 38
6.10 Peplink Balance 310 39
6.11 Peplink Balance 310X 40
6.12 Peplink Balance 310 5G 42
6.13 Peplink Balance 310 Fiber 5G 43
6.14 Peplink Balance 380 45
6.15 Peplink Balance 380X 46
6.16 Peplink Balance 580 48
6.17 Peplink Balance 580X 49
6.18 Peplink Balance 710 51
6.19 Peplink Balance 1350 53
6.20 Peplink Balance 2500 54
https://www.peplink.com
3
Copyright @ 2022 Peplink

6.21 Peplink Balance 2500 EC 55
7 Peplink MediaFast Overview 56
7.1 Peplink MediaFast 200 56
7.2 Peplink MediaFast 500 58
7.3 Peplink MediaFast 750 59
8 Peplink Flex-Module Supported Models 60
8.1 Peplink EPX 60
8.2 Peplink SDX 63
8.3 Peplink SDX Pro 66
8.4 Flex Module Expansion Modules 68
9 OLED Display Menu 75
10 Installation 76
11 Basic Configuration 77
12 WAN Connection Settings (Common) 77
13 System Tab 77
14 Status Tab 77
Appendix A. Restoration of Factory Defaults 78
Appendix B. Routing under DHCP, Static IP, and PPPoE 78
Appendix C. FusionSIM Manual 81
Appendix D. Case studies 81
Appendix E. Overview of ports used by Peplink SD-WAN routers and other Peplink services 81
Appendix F. Troubleshooting 83
Appendix G. Declaration 85
https://www.peplink.com
4
Copyright @ 2022 Peplink

Introduction and Scope
Peplink Balance routers provide link aggregation and load balancing across multiple WAN
connections. We develop products and technologies that can help you build SD-WAN networks
with unbreakable connection resilience, unmatched deployment flexibility, and intuitive ease of
use.
Our product and technology focus has always been on WAN virtualization and the intelligent use
of multiple WAN links at the same time to increase reliability and bandwidth whilst reducing
costs.
We have two key WAN virtualization technologies, Intelligent load balancing for Internet access
and SpeedFusion VPN Bonding for secure branch to branch connectivity.
The Peplink MediaFast series are a range of routers capable of content caching.
Designed with education and entertainment in mind, MediaFast downloads and accelerates
video, iTunes iOS updates, app downloads, and other content for uninterrupted learning and fun
anytime.
The MediaFast can prefetch content during off-peak hours, saving connectivity costs and
reducing network burden during busy times.
This manual applies to the following Peplink Balance products:
● Peplink Balance One
● Peplink Balance Two
● Peplink Balance 20
● Peplink Balance 20X
● Peplink Balance 30 LTE/Pro
● Peplink Balance 210
● Peplink Balance 310
● Peplink Balance 310X
● Peplink Balance 310 5G
● Peplink Balance 310 Fiber 5G
● Peplink Balance 380
● Peplink Balance 380X
● Peplink Balance 580
● Peplink Balance 580X
● Peplink Balance 710
● Peplink Balance 1350
● Peplink Balance 2500
● Peplink Balance 2500 EC
● Peplink MediaFast 200/500/750
● Peplink EPX
● Peplink SDX
● Peplink SDX Pro
https://www.peplink.com
5
Copyright @ 2022 Peplink

The manual covers setting up your Peplink Balance or MediaFast and provides a collection of
case studies detailing the advanced features of the Peplink Balance.
1 Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRF
Virtual Routing and Forwarding
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
https://www.peplink.com
6
Copyright @ 2022 Peplink

210+
Refers to Peplink Balance 210/310/380/580/710/1350/2500/2500 EC
380+
Refers to Peplink Balance 380/580/710/1350/2500/2500 EC
2 Product Comparison Charts
2.1 Balance Routers (for Small Office / Branch)
20
20X
30 LTE
30 PRO
ONE
TWO
210
310X
Product Code
BPL-021
BPL-021X-
LTE
BPL-031-LT
E
BPL-031-L
TEA
BPL-ONE
BPL-TWO
BPL-210
BPL-310
X
Capacity
Ethernet WAN
Ports
2 (GE) +
1 (GE)
2 (GE)
2 (GE)
2/5 (GE) #
2 (GE)
2 (GE) +
2 (GE)
LAN Ports
4 (GE)
4 (GE)
4 (GE)
4 (GE)
8/5 (GE) #
4 (GE)
7 (GE)
9 (GE)
Simultaneous
Dual-Band
802.11ac/a/b/g/
n Wi-Fi AP
No
Yes
No
Yes
Yes
No
No
No
Embedded 4G
LTE
No
Yes
Yes
Yes
No
No
No
Yes
SIM Card Size
No
Mini-SIM
(2FF)
Mini-SIM
(2FF)
Mini-SIM
(2FF)
No
No
No
Mini-SIM
(2FF)
USB WAN
Modem Port
1
1
1
1
1
1
1
2
Recommended
Users
1-60
1-60
1-60
1-60
1-60
25-150
25-150
50-500
Stateful
Firewall
Throughput
150Mbps
900Mbps
200Mbps
400Mbps
600Mbps/
400Mbps #
1Gbps
350Mbps
2.5Gbps
A full product comparison for Balance routers is available at:
http://www.peplink.com/products/balance/model-comparison/
https://www.peplink.com
7
Copyright @ 2022 Peplink

2.2 Balance Routers (for for Enterprise / Headquarters)
305
310X
380
380X
580
580X
710
1350
2500
2500 EC
Product
Code
BPL-305
BPL-310
X
BPL-380
BPL-380
X
BPL-580
BPL-580
X
BPL-7
10
BPL-135
BPL-
2500 *
BPL-
2500-EC
Capacity
Ethernet
WAN Ports
3 (GE)
2 (GE)
3 (GE)
3 (GE)
5 (GE)
5 (GE)
7 (GE)
13 (GE)
12
(GE)/4
(GE) &
2 (10G
SFP+) *
Up to 16
(GE)*
Up to 4x
10G
SFP+*
LAN Ports
3 (GE)
9 (GE)
3 (GE)
3 (GE)
3 (GE)
3 (GE)
3 (GE)
3 (GE)
8 (GE)/
2 (10G
SFP+) *
Up to 16
(GE)*
Up to 4x
10G
SFP+*
Simultaneou
s Dual-Band
802.11ac/a/b
/g/n Wi-Fi
AP
No
No
No
No
No
No
No
No
No
No
Embedded
4G LTE
No
Yes
No
No
No
No
No
No
No
No
SIM Card
Size
No
Yes
No
No
No
No
No
No
No
No
USB WAN
Modem Port
1
2
1
1
1
1
1
1
1
1
Recommend
ed Users
50-500
50-500
50-500
50-500
300-1000
300-1000
500-2
000
1000-500
0
5000-20
000+
10000-200
00+
Stateful
Firewall
Throughput
1Gbps
2.5Gbps
1Gbps
3Gbps
1.5Gbps
4Gbps1
2.5Gb
ps
5Gbps
8Gbps
30Gbps
A full product comparison for Balance routers is available at:
http://www.peplink.com/products/balance/model-comparison/
https://www.peplink.com
8
Copyright @ 2022 Peplink

2.3 MediaFast Routers
MediaFast 200
MediaFast 500
MediaFast 750
Product Code
MFA-200-W
MFA-500-B
MFA-750-B
WAN Interface
2x GE
(Only WAN 1 is activated.)
5x GE
7x GE
Wi-Fi Interface
Simultaneous Dual-Band
802.11a/b/g/n Access Point
-
-
Embedded 3G/4G LTE
-
-
-
USB WAN Modem
1
1
1
LAN Interface
8x GE; 802.3at PoE Output
3x GE
3x GE
Recommended Users
25-150
300-1000
500-2000
Router Throughput
200Mbps
800Mbps
1.5Gbps
Disk Drive
120GB SSD
500GB SSD
1TB SSD
Load Balancing & Failover
Yes
Yes
Yes
PepVPN
Yes
Yes
Yes
SpeedFusion Hot Failover
Optional Feature
Yes
Yes
SpeedFusion WAN
Smoothing
Optional Feature
Yes
Yes
SpeedFusion Bandwidth
Bonding
Optional Feature
Yes
Yes
Number of
PepVPN/SpeedFusion
Peers
2
50
300
PepVPN/ SpeedFusion
Throughput
50Mbps
200Mbps
400Mbps
Built-in AP Controller
Yes
Yes
Yes
Maximum Number of AP
Support
50
100
250
PoE Input
-
-
-
PoE Output
8x 802.3at (optional
feature)
-
-
Dimensions
292 x 177 x 44 mm
431 x 305 x 44 mm
426 x 365 x 44 mm
Gross Weight
2.8 kg
6.6 kg
5.5 kgs
A full product comparison for MediaFast routers is available at:
https://www.peplink.com/products/mediafast-specifications/
https://www.peplink.com
9
Copyright @ 2022 Peplink

3 Product Features
Peplink Balance Series products enable all LAN users to share broadband Internet connections
and provide advanced features to enhance Internet access. The following is a list of supported
features:
3.1 WAN
● Multiple public IP support (DHCP, PPPoE, static IP address)
● Static IP support for PPPoE
● 10/100/1000Mbps Ethernet connection in full/half duplex
● Built-in HSPA and EVDO cellular modems
● USB mobile connection (only one USB modem can be connected at a time)
● Drop-in mode on selectable WAN port with MAC address passthrough n etwork address
translation (NAT) / port address translation (PAT)
● Inbound and outbound NAT mapping
● Multiple static IP addresses per WAN connection
● MAC address clone
● Customizable MTU and MSS values
● WAN connection health check
● Dynamic DNS (supported service providers: changeip.com, dyndns.org,
no-ip.org,tzo.com, and DNS-O-Matic)
● Ping, DNS lookup, and HTTP-based health check
● WAN throughput and consistency diagnosis
● WAN to WAN speed test
● USB Ethernet Adapter support
3.2 LAN
● DHCP server on LAN
● Extended DHCP option support
● Static routing rules
● Local DNS proxy server
● 802.1q VLANs
● Port-based VLANs
● Virtual Network Mapping
https://www.peplink.com
10
Copyright @ 2022 Peplink

3.3 VPN
● Secure SpeedFusion
TM
● SpeedFusion performance analyzer
● X.509 certificate support
● Bandwidth bonding and failover among selected WAN connections
● Ability to route traffic to a remote VPN peer
● Optional pre-shared key setting
● Layer 2 bridging
● Layer 2 Peer Isolation
● SpeedFusion
TM throughput, ping, and traceroute tests
● Built-in L2TP / PPTP / OpenVPN VPN server
● Authenticate L2TP / PPTP clients using RADIUS and LDAP servers
● Multi-Site PepVPN Profile
● IPsec VPN for network-to-network connections
● L2TP / PPTP and IPsec passthrough
● Simultaneous L2 & L3 VPN tunnel between the same pair of devices
3.4 Inbound Traffic Management
● TCP/UDP traffic redirection to dedicated LAN server(s)
● Inbound link load balancing by means of DNS
3.5 Outbound Policy
● Link load distribution per TCP/UDP service
● Persistent routing for specified source and/or destination IP addresses per TCP/UDP
service
● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
● Time-based scheduling
3.6 AP Controller
● Configure and manage Pepwave AP devices
● Review the status of connected AP
3.7 QoS
● Quality of service for different applications and custom protocols
https://www.peplink.com
11
Copyright @ 2022 Peplink

● User group classification for different service levels
● Bandwidth usage control and monitoring on group- and user-level
● Application prioritization for custom protocols and DSL optimization
3.8 Firewall
● Outbound (LAN to WAN) firewall rules
● Inbound (WAN to LAN) firewall rules per WAN connection
● Intrusion detection and prevention
● Specification of NAT mappings
● Web blocking
● Application blocking
● Time-based scheduling
● Outbound firewall rules can be defined by destination domain name
3.9 Captive Portal
● Social Wi-Fi Hotspot Support
● Splash screen of open networks, login page for secure networks
● Customizable built-in captive portal
● Supports linking to outside page for captive portal
3.10 Other Supported Features
● Easy-to-use web administration interface
● HTTP and HTTPS support for web administration interface
● Configurable web administration port and administrator password
● Read-only user for web admin
● Shared-IP drop-in mode
● Authentication and accounting by RADIUS server for web admin
● Firmware upgrades, configuration backups, ping, and traceroute via web administration
interface
● Remote web-based configuration (via WAN and LAN interfaces)
● Remote reporting to Peplink Balance reporting server
● Hardware high availability via VRRP, with automatic configuration synchronization
● Real-time, hourly, daily and monthly bandwidth usage reports and charts
● Hardware backup via LAN bypass
● Built-in WINS server
● Time server synchronization
● SNMP
https://www.peplink.com
12
Copyright @ 2022 Peplink

● Email notification
● Syslog
● SIP passthrough
● PPTP packet passthrough
● Active sessions
● Active client list
● WINS client list
● UPnP / NAT-PMP
● Event log is persistent across reboots
● IPv6 support
● Support for USB tethering on Android phones
https://www.peplink.com
13
Copyright @ 2022 Peplink

4 Advanced Feature Summary
4.1 Drop-in Mode and LAN Bypass: Transparent Deployment
As your organization grows, it may require more bandwidth, but modifying your network can be
tedious. In Drop-in Mode , you can conveniently install your Peplink router without making any
changes to your network. For any reason your Peplink router looses power, the LAN Bypass
will safely and automatically bypass the Peplink router to resume your original network
connection.
4.2 QoS: Clearer VoIP
VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers can
detect VoIP traffic and assign it the highest priority, giving you crystal-clear calls.
https://www.peplink.com
14
Copyright @ 2022 Peplink

4.3 Per-User Bandwidth Control
With per-user bandwidth control, you can define bandwidth control policies for up to 3 groups of
users to prevent network congestion. Define groups by IP address and subnet, and set
bandwidth limits for every user in the group.
4.4 High Availability via VRRP
When your organization has a corporate requirement demanding the highest availability with no
single point of failure, you can deploy two Peplink routers in High Availability mode . With High
Availability mode, the second device will take over when needed.
https://www.peplink.com
15
Copyright @ 2022 Peplink

4.5 USB Modem and Android Tethering
For increased WAN diversity, plug in a USB LTE modem as backup. Peplink routers are
compatible with over 200 modem types . You can also tether to smartphones running Android
4.1.X and above.
By default, the USB port is “USB Modem” mode. If you need to use it to connect to USB
Ethernet Adapter, you need to change it to “USB Ethernet” mode,
https://forum.peplink.com/t/can-i-use-ethernet-adapters-on-the-usb-wan/8327
4.6 Built-In Remote User VPN Support
Use OpenVPN or L2TP with IPsec to safely and conveniently connect remote clients to your
private network. L2TP with IPsec is supported by most devices, but legacy devices can also
connect using PPTP.
Click here for the full instructions on setting up L2TP with IPsec.
Click here for the full instructions on setting up OpenVPN connections
https://www.peplink.com
16
Copyright @ 2022 Peplink

4.7 LACP NIC Bonding
Use 802.3ad to combine multiple LAN connections into a virtual LAN connection. This virtual
connection has higher throughput and redundancy in case any single link fails.
4.8 KVM Virtualization
KVM is a virtualisation module that allows administrators using our routers to host a large range
of virtual machines. KVM is now supported by some of the MediaFast / ContentHub routers.
Click here for the full instructions on how to set up KVM
Click here for the full instructions on how to set up KVM with USB Storage
4.9 DPI Engine
The DPI report written in the updated KB article will show further information on InControl2
through breaking down application categories into subcategories.
https://forum.peplink.com/t/ic2-deep-packet-inspection-dpi-reports-and-everything-you-need-to-k
now-about-it/10151/
https://www.peplink.com
17
Copyright @ 2022 Peplink

4.10 NetFlow
NetFlow protocol is used to track network traffic. Tracking information from NetFlow can be sent
to the NetFlow collector, which analyzes data and generates reports for review.
Note : To enable this feature, go to https://<Device's IP>/cgi-bin/MANGA/support.cgi
4.11 Wi-Fi Air Monitoring
Peplink routers support Wi-Fi “Air Monitoring Mode” which is used to troubleshoot remotely and
proactively monitor Wi-Fi and WAN performance. After enabling Wi-Fi Air Monitoring, reports
can be viewed under InControl 2 > Reports > AirProbe Reports .
Note : To enable this feature, go to https://<Device's IP>/cgi-bin/MANGA/support.cgi
4.12 SP Default Configuration
The SP Default Configuration feature written in the updated KB article allows for the
provisioning of custom made settings (a.k.a. InControl2 configuration) via the Ethernet LAN port
and is ideal for those wanting to do a bulk deployment of many Peplink devices.
Note : If you would like to use this feature, please contact your purchase point (Eg.VAD).
4.13 Peplink Relay
Cloud Service Providers often restrict access to certain applications. With SFC Relay, you can
route traffic before going out to the Internet, allowing access to previously restricted applications
experienced with the public SpeedFusion Cloud nodes. Available as an add-on for your home
router or as an upgradable license to your Peplink router, SFC Relay is sure to impress you and
any peers you give access to.
https://forum.peplink.com/t/configure-speedfusion-cloud-relay-server-and-client/6215ca9b017e4
8e0f3ff2479/
https://www.peplink.com
18
Copyright @ 2022 Peplink

4.14 DNS over HTTPS (DoH)
DoH provides the benefits of communicating DNS information over a secure HTTPS connection
in an encrypted manner. The protocol offers increased privacy and confidentiality by preventing
data interception and man-in-the-middle attacks.
4.15 Peplink InTouch
InTouch is Peplink’s zero-touch remote network management solution, leveraging InControl 2
and a SpeedFusion Connect (formerly known as SpeedFusion Cloud) data plan. This service
extends a network administrator’s ability to reach any device UI backed by a Peplink/Pepwave
router. To configure InTouch, all you need is a valid InControl 2 subscription, a SpeedFusion
Connect data plan, and a Peplink/Pepwave router (which requires the latest 8.2.0 firmware).
To watch a demonstration and read the FAQ, visit
https://www.peplink.com/enterprise-solutions/intouch/
Or learn to configure InTouch at https://youtu.be/zg0iavHGkJw
4.16 Synergy Mode
Synergy mode is a cascade multiple devices and combine the number of WANs to a single
device virtually. All the WANs on the Synergized Device will appear as native WAN interfaces at
the Synergy Controller and it can be managed like the built-in WAN interfaces.
https://forum.peplink.com/t/synergy-mode-(firmware-8.3.0)/639be7d8af8c71a6f3050323/
4.17 Virtual WAN on VLAN
The Virtual WAN Activation License allows you to create 1 x virtual WAN on a particular VLAN,
on either WAN or LAN interface. This means that you can create a virtual WAN on VLAN for a
WAN port, or a virtual WAN on VLAN for a LAN port.
https://forum.peplink.com/t/b20x-virtual-wan-activation-license-faq/6204bac7d90b9e6355e96e8
d/1
https://www.peplink.com
19
Copyright @ 2022 Peplink

5 Package Contents
The contents of Peplink Balance product packages are as follows:
5.1 Peplink Balance One/Two
● Peplink Balance One/Two
● Power adapter
● Information slip
5.2 Peplink Balance 20/30/30 LTE/30 Pro/50
● Peplink Balance 20/30/30 LTE/30 Pro/50
● Power adapter
● Information slip
5.3 Peplink Balance 20X
● Peplink Balance 20X
● 2x LTE Antenna, 1x GPS Antenna, 2x Wi-Fi Antenna
● Power adapter
● Information slip
5.4 Peplink Balance 210/310
● Peplink Balance 210/310
● Power adapter
● Information slip
● Rackmount kit
5.5 Peplink Balance 310X
● Peplink Balance 310X
● 2x LTE Antenna, 1x GPS Antenna
● Power adapter
● Ear L-Mounts kit
● Power cord
https://www.peplink.com
20
Copyright @ 2022 Peplink