peplink PEPWAVE MAX BR2 Pro User manual

Copyright & Trademarks
Specifications are subject to change without notice. Copyright © 2019 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are
trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
Pepwave MAX User
Manual
Pepwave Products:
MAX BR2 Pro / BR2 Pro / MAX BR2 Pro LTE / MAX BR2 Pro LTEA / MAX -CX2-Mini / MAX
CX2 Mini / CX2 Mini / MAX-BR2-PRO-LTE-E-T / MAX-BR2-PRO-LTE-US-T / MAX-BR2-PRO-
LTEA-W-T
/
UBR LTE / UBR-LTE-US-T-PRM / MAX UBR LTE / MAX UBR / MAX UBR LTEA / UBR /
Pismo941 / UBR-LTE / UBR-LTE-US-T / UBR-LTEA-W-T / UBR-LTEA-W-T-PRM / MAX BR1 Pro /
MAX BR1 Pro LTE / MAX BR1 Pro LTEA / MAX-BR1-PRO-LTEA-W-T / MAX-BR1-LTE-US-T /
UBR-LTE-EJ-T-PRM
Pepwave Firmware 8.0.0
August 2019

https://www.peplink.com
2
Copyright @ 2019 Pepwave
Table of Contents
Introduction and Scope 7
Glossary 8
Product Features 9
Supported Network Features 9
WAN 9
LAN 10
VPN 10
Firewall 10
Captive Portal 10
Outbound Policy 10
AP Controller 11
QoS 11
Other Supported Features 11
Pepwave MAX Mobile Router Overview 134
MAX BR2 Pro 13
Advanced Feature Summary 16
Drop-in Mode and LAN Bypass: Transparent Deployment 16
QoS: Clearer VoIP 16
Per-User Bandwidth Control 17
High Availability via VRRP 17
USB Modem and Android Tethering 18
Built-In Remote User VPN Support 18
SIM-card USSD support 19
Installation 20
Preparation 20
Constructing the Network 20
Configuring the Network Environment 21
Mounting the Unit 21
Wall Mount 21
Car Mount 22
IP67 Installation Guide 22
Connecting to the Web Admin Interface 22
Configuring the LAN Interface(s) 24

https://www.peplink.com
3
Copyright @ 2019 Pepwave
Basic Settings 24
Port Settings 33
Captive Portal 34
Configuring the WAN Interface(s) 36
Ethernet WAN 37
DHCP Connection 40
Static IP Connection 440
PPPoE Connection 41
L2TP Connection 43
Cellular WAN 44
Wi-Fi WAN 549
Creating Wi-Fi Connection Profiles 57
WAN Health Check 58
Dynamic DNS Settings 60
Advanced Wi-Fi Settings 62
ContentHub Configuration 67
ContentHub 67
Configuring the ContentHub 67
Configure a website to be published from the ContentHub 68
Configure an application to be published from the ContentHub 69
MediaFast Configuration 71
Setting Up MediaFast Content Caching 72
Scheduling Content Prefetching 73
Viewing MediaFast Statistics 76
Bandwidth Bonding SpeedFusionTM / PepVPN 77
PepVPN 77
The Pepwave Router Behind a NAT Router 83
SpeedFusionTM Status 84
IPsec VPN 85
IPsec VPN Settings 85
Outbound Policy Management 89
Outbound Policy 89
Custom Rules for Outbound Policy 91
Algorithm: Weighted Balance 91
Algorithm: Persistence 92
Algorithm: Enforced 94

https://www.peplink.com
4
Copyright @ 2019 Pepwave
Algorithm: Priority 94
Algorithm: Overflow 94
Algorithm: Least Used 95
Algorithm: Lowest Latency 95
Expert Mode 96
Inbound Access 96
Port Forwarding Service 96
UPnP / NAT-PMP Settings 99
NAT Mappings 99
QoS 101
User Groups 10001
Bandwidth Control 10102
Application 10102
Application Prioritization 10102
Prioritization for Custom Applications 10103
DSL/Cable Optimization 10203
Firewall 10204
Outbound and Inbound Firewall Rules 10305
Access Rules 10305
Apply Firewall Rules to PepVpn Traffic 10608
Intrusion Detection and DoS Prevention 10608
Content Blocking 10709
Application Blocking 10709
Web Blocking 10709
Customized Domains 10810
Exempted User Groups 10810
Exempted Subnets 10810
URL Logging 10810
OSPF & RIPv2 10810
BGP 11214
Remote User Access 11416
L2TP with IPsec 11517
OpenVPN 11517
PPTP 11618
Authentication Methods 11618
Miscellaneous Settings 11820

https://www.peplink.com
5
Copyright @ 2019 Pepwave
High Availability 11820
Certificate Manager 12123
Service Forwarding 12224
SMTP Forwarding 125
Web Proxy Forwarding 12326
DNS Forwarding 12426
Custom Service Forwarding 12426
Service Passthrough 12426
UART 12629
GPS Forwarding 12831
Ignition Sensing 12832
Ignition Sensing installation 12932
GPIO Menu 13134
Grouped Networks 13235
SIM Toolkit 13235
AP - access point 13538
AP Controller 13538
Wireless SSID 13538
Settings 13942
AP Controller Status 14447
Info 14447
Access Point (Usage) 146
Wireless SSID 14851
Wireless Client 14952
Nearby Device 15053
Event Log 15154
Toolbox 15255
System Settings 15356
Admin Security 15356
Firmware 15660
Web admin interface : automatically check for updates 15660
Web admin interface : install updates manually 15761
The InControl method 15862
Time 15962
Schedule 15963
Email Notification 16064
Event Log 166

https://www.peplink.com
6
Copyright @ 2019 Pepwave
SNMP 166
InControl 168
Configuration 169
Feature Add-ons 170
Reboot 170
Tools 171
Ping 171
Traceroute Test 171
PepVPN Test 172
Wake-on-LAN 172
CLI (Command Line Interface Support) 173
Status 174
Device 174
GPS Data 175
Active Sessions 176
Client List 177
WINS Client 178
UPnP / NAT-PMP 178
OSPF & RIPv2 179
BGP 179
SpeedFusion Status 180
Event Log 182
WAN Quality 184
Usage Reports 184
Real-Time 185
182 186
Daily 187
Monthly 188
Appendix B: Declaration 191

https://www.peplink.com
7
Copyright @ 2019 Pepwave
1 Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN
connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi,
external WiMAX dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are
suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are
suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features
and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction!
https://youtu.be/13M-JHRAICA

https://www.peplink.com
8
Copyright @ 2019 Pepwave
Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term Definition
3G 3rd generation standards for wireless communications (e.g., HSDPA)
4G 4th generation standards for wireless communications (e.g., LTE)
DHCP Dynamic Host Configuration Protocol
DNS Domain Name System
EVDO Evolution-Data Optimized
FQDN Fully Qualified Domain Name
HSDPA High-Speed Downlink Packet Access
HTTP Hyper-Text Transfer Protocol
ICMP Internet Control Message Protocol
IP Internet Protocol
LAN Local Area Network
MAC Address Media Access Control Address
MTU Maximum Transmission Unit
MSS Maximum Segment Size
NAT Network Address Translation
PPPoE Point to Point Protocol over Ethernet
QoS Quality of Service
SNMP Simple Network Management Protocol
TCP Transmission Control Protocol
UDP User Datagram Protocol
VPN Virtual Private Network
VRRP Virtual Router Redundancy Protocol

https://www.peplink.com
9
Copyright @ 2019 Pepwave
WAN Wide Area Network
WINS Windows Internet Name Service
WLAN Wireless Local Area Network
2 Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they
provide advanced features to enhance Internet access. Our Max BR wireless routers support
multiple SIM cards. They can be configured to switch from using one SIM card to another SIM
card according to different criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless
Internet connections can be bonded together using our SpeedFusion technology. This allows
better reliability, larger bandwidth, and increased wireless coverage are comparing to use only
one 4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more
information, please see peplink.com/products.
2.1 Supported Network Features
2.1.1 WAN
● Ethernet WAN connection in full/half duplex
● Static IP support for PPPoE
● Built-in cellular modems
● USB mobile connection(s)
● Wi-Fi WAN connection
● Network address translation (NAT)/port address translation (PAT)
● Inbound and outbound NAT mapping
● IPsec NAT-T and PPTP packet passthrough
● MAC address clone and passthrough
● Customizable MTU and MSS values
● WAN connection health check
● Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org,
tzo.com and DNS-O-Matic)
● Ping, DNS lookup, and HTTP-based health check

https://www.peplink.com
10
Copyright @ 2019 Pepwave
2.1.2 LAN
● Wi-Fi AP
● Ethernet LAN ports
● DHCP server on LAN
● Extended DHCP option support
● Static routing rules
● VLAN on LAN support
2.1.3 VPN
● PepVPN with SpeedFusion
TM
● PepVPN performance analyzer
● X.509 certificate support
● VPN load balancing and failover among selected WAN connections
● Bandwidth bonding and failover among selected WAN connections
● IPsec VPN for network-to-network connections (works with Cisco and Juniper only)
● Ability to route Internet traffic to a remote VPN peer
● Optional pre-shared key setting
● SpeedFusion
TM
throughput, ping, and traceroute tests
● PPTP server
● PPTP and IPsec passthrough
2.1.4 Firewall
● Outbound (LAN to WAN) firewall rules
● Inbound (WAN to LAN) firewall rules per WAN connection
● Intrusion detection and prevention
● Specification of NAT mappings
● Outbound firewall rules can be defined by destination domain name
2.1.5 Captive Portal
● Splash screen of open networks, login page for secure networks
● Customizable built-in captive portal
● Supports linking to outside page for captive portal
2.1.6 Outbound Policy
● Link load distribution per TCP/UDP service
● Persistent routing for specified source and/or destination IP addresses per TCP/UDP

https://www.peplink.com
11
Copyright @ 2019 Pepwave
service
● Traffic prioritization and DSL optimization
● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
2.1.7 AP Controller
● Configure and manage Pepwave AP devices
● Review the status of connected APs
2.1.8 QoS
● Quality of service for different applications and custom protocols
● User group classification for different service levels
● Bandwidth usage control and monitoring on group- and user-level
● Application prioritization for custom protocols and DSL/cable optimization
2.2 Other Supported Features
● User-friendly web-based administration interface
● HTTP and HTTPS support for web admin interface
● Configurable web administration port and administrator password
● Firmware upgrades, configuration backups, ping, and traceroute via web admin
interface
● Remote web-based configuration (via WAN and LAN interfaces)
● Time server synchronization
● SNMP
● Email notification
● Read-only user for web admin
● Shared IP drop-in mode
● Authentication and accounting by RADIUS server for web admin
● Built-in WINS servers*
● Syslog
● SIP passthrough
● PPTP packet passthrough
● Event log
● Active sessions
● Client list
● WINS client list *
● UPnP / NAT-PMP
● Real-time, hourly, daily, and monthly bandwidth usage reports and charts

https://www.peplink.com
12
Copyright @ 2019 Pepwave
● IPv6 support
● Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants

https://www.peplink.com
13
Copyright @ 2019 Pepwave
3 Pepwave MAX Mobile Router Overview
3.1 BR2 Pro
3.1.1 Panel Appearance
3.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red Boot up error
Green Ready

https://www.peplink.com
14
Copyright @ 2019 Pepwave
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF Disconnected
Blinking slowly Connecting to network
Blinking Connected to network with traffic
ON Connected to network without traffic
Wi-Fi AP
OFF Disabled
Blinking slowly Enabled but no client connected
Blinking Connected to network with traffic
ON Client(s) connected to wireless network
LAN and Ethernet WAN Ports
Green LED ON 10 / 100/ 1000 Mbps
Orange LED Blinking Data is transferring
OFF No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports

https://www.peplink.com
15
Copyright @ 2019 Pepwave
4 Advanced Feature Summary
4.1 Drop-in Mode and LAN Bypass: Transparent Deployment
As your organization grows, it needs more bandwidth. But modifying your network would require
effort better spent elsewhere. In Drop-in Mode, you can conveniently install your Peplink router
without making any changes to your network. And if the Peplink router loses power for any reason,
LAN Bypass will safely and automatically bypass the Peplink router to resume your original
network connection.
Compatible with: MAX 700, MAX HD2 (All variants), HD4 (All Variants)
4.2 QoS: Clearer VoIP
VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers can
detect VoIP traffic and assign it the highest priority, giving you crystal-clear calls.

https://www.peplink.com
16
Copyright @ 2019 Pepwave
4.3 Per-User Bandwidth Control
With per-user bandwidth control, you can define bandwidth control policies for up to 3 groups of
users to prevent network congestion. Define groups by IP address and subnet, and set bandwidth
limits for every user in the group.
4.4 High Availability via VRRP
When your organization has a corporate requirement demanding the highest availability with no
single point of failure, you can deploy two Peplink routers in High Availability mode. With High
Availability mode, the second device will take over when needed.
Compatible with: MAX 700, MAX HD2 (All variants), HD4 (All Variants)

https://www.peplink.com
17
Copyright @ 2019 Pepwave
4.5 USB Modem and Android Tethering
For increased WAN diversity, plug in a USB LTE modem as backup. Peplink routers are
compatible with over 200 modem types. You can also tether to smartphones running Android
4.1.X and above.
Compatible with: MAX 700, HD2 (all variants except IP67), HD4 (All variants)
4.6 Built-In Remote User VPN Support
Use OpenVPN or L2TP with IPsec to safely and conveniently connect remote clients to your
private network. L2TP with IPsec is supported by most devices, but legacy devices can also
connect using PPTP.
Click here for the full instructions on setting up L2TP with IPsec.
Click here for the full instructions on setting up OpenVPN connections

https://www.peplink.com
18
Copyright @ 2019 Pepwave
4.7 SIM-card USSD support
Cellular-enabled routers can now use USSD to check their SIM card’s balance, process pre-
paid cards, and configure carrier-specific services.
Click here for full instructions on using USSD.

https://www.peplink.com
19
Copyright @ 2019 Pepwave
5 Installation
The following section details connecting Pepwave routers to your network.
5.1 Preparation
Before installing your Pepwave router, please prepare the following as appropriate for your
installation:
● At least one Internet/WAN access account and/or Wi-Fi access information
● Depending on network connection type(s), one or more of the following:
○ Ethernet WAN: A 10/100/1000BaseT UTP cable with RJ45 connector
○ USB: A USB modem
○ Embedded modem: A SIM card for GSM/HSPA service
○ Wi-Fi WAN: Wi-Fi antennas
○ PC Card/Express Card WAN:
A PC Card/ExpressCard for the
corresponding card slot
● A computer installed with the TCP/IP network protocol and a supported web browser.
Supported browsers include Microsoft Internet Explorer 11 or above, Mozilla Firefox 24
or above, Apple Safari 7 or above, and Google Chrome 18 or above.
5.2 Constructing the Network
At a high level, construct the network according to the following steps:
1. With an Ethernet cable, connect a computer to one of the LAN ports on the
Pepwave router. Repeat with different cables for up to 4 computers to be
connected.
2. With another Ethernet cable or a USB modem/Wi-Fi antenna/PC Card/Express
Card, connect to one of the WAN ports on the Pepwave router. Repeat the same
procedure for other WAN ports.
3. Connect the power adapter to the power connector on the rear panel of the
Pepwave router, and then plug it into a power outlet.

https://www.peplink.com
20
Copyright @ 2019 Pepwave
The following figure schematically illustrates the resulting configuration:
5.3 Configuring the Network Environment
To ensure that the Pepwave router works properly in the LAN environment and can access
the Internet via WAN connections, please refer to the following setup procedures:
● LAN configuration
For basic configuration, refer to Section 8, Connecting to the Web Admin Interface.
For advanced configuration, go to Section 9, Configuring the LAN Interface(s).
● WAN configuration
For basic configuration, refer to Section 8, Connecting to the Web Admin Interface.
For advanced configuration, go to Section 9.2, Captive Portal.
6 Mounting the Unit
6.1 Wall Mount
The Pepwave MAX 700/HD2/On-The-Go can be wall mounted using screws. After adding the
screw on the wall, slide the MAX in the screw hole socket as indicated below. Recommended
screw specification: M3.5 x 20mm, head diameter 6mm, head thickness 2.4mm.
The Pepwave MAX BR1 requires four screws for wall mounting.