peplink Pepwave MAX Series User manual

Copyright & Trademarks
Specifications are subject to change without notice. Copyright © 2017 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks
of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
Pepwave MAX and Pepxim
User Manual
Pepwave Products:
MAX 700/HD2/HD2 IP67/HD2 mini/HD4/Transit/CX4/BR1/BR1 Mini/BR1 Slim/BR1 ENT/BR1
Pro LTE/BR1 IP55/BR2 IP55//BR1 IP67/On-The-Go/MAX HD2/HD4 with MediaFast
Pepxim Products:
NPC/SD-PMU
Pepwave Firmware 7
January 2017

http://www.peplink.com
2
Copyright @ 2017 Pepwave
Table of Contents
1 Introduction and Scope 8
2 Glossary 9
3Product Features 10
3.1 Supported Network Features 10
3.1.1 WAN 10
3.1.2 LAN 11
3.1.3 VPN 11
3.1.4 Firewall 11
3.1.5 Captive Portal 11
3.1.6 Outbound Policy 11
3.1.7 AP Controller 12
3.1.8 QoS 12
3.2 Other Supported Features 12
4 Pepwave MAX Mobile Router Overview 13
4.1 MAX 700 13
4.2 MAX HD2 15
4.3 MAX HD2 IP67 17
4.4 MAX HD2 Mini 18
4.5 MAX Transit 19
4.6 MAX CX4 20
4.7 MAX HD4 / HD2 and HD4 with MediaFast 21
4.8 MAX BR1 22
4.9 MAX BR1 MK2 24
4.10 MAX BR1 Slim 25
4.11 MAX BR1 ENT 25
4.12 MAX BR1 Pro LTE 27
4.13 MAX Hotspot 28
4.14 BR1 Mini 29

http://www.peplink.com
3
Copyright @ 2017 Pepwave
4.15 MAX BR1/2 IP55 30
4.16 MAX BR1 IP67 32
4.17 MAX On-The-Go 32
4.18 NPC (Network Power Controller) 33
4.19 SD-PMU 34
5. Advanced Feature Summary 35
5.1 Drop-in Mode and LAN Bypass: Transparent Deployment 35
5.2 QoS: Clearer VoIP 35
5.3 Per-User Bandwidth Control 36
5.4 High Availability via VRRP 36
5.5 USB Modem and Android Tethering 37
5.6 Built-In Remote User VPN Support 38
5.7 SIM-card USSD support 39
6. Installation 40
6.1 Preparation 40
6.2 Constructing the Network 41
6.3 Configuring the Network Environment 41
7 Mounting the Unit 42
7.1 Wall Mount 42
7.2 Car Mount 42
7.3 IP67 Installation Guide 42
8 Connecting to the Web Admin Interface 43
9 Configuring the LAN Interface(s) 45
9.1 Basic Settings 45
9.2 Port Settings 55
9.3 Captive Portal 56
10 Configuring the WAN Interface(s) 59
10.1 Ethernet WAN 60
10.1.1 DHCP Connection 62

http://www.peplink.com
4
Copyright @ 2017 Pepwave
10.1.2 Static IP Connection 63
10.1.3 PPPoE Connection 65
10.1.4 L2TP Connection 66
10.2 Cellular WAN 67
10.3 Wi-Fi WAN 73
10.3.1 Creating Wi-Fi Connection Profiles 79
10.4 WAN Health Check 80
10.5 Dynamic DNS Settings 83
11 Advanced Wi-Fi Settings 85
12 MediaFast Configuration 89
12.1 Setting Up MediaFast Content Caching 89
12.2 Scheduling Content Prefetching 90
12.3 Viewing MediaFast Statistics 92
13 Bandwidth Bonding SpeedFusionTM / PepVPN 93
13.1 PepVPN 93
13.2 The Pepwave Router Behind a NAT Router 100
13.3 SpeedFusionTM Status 101
14 IPsec VPN 102
14.1 IPsec VPN Settings 102
15 Outbound Policy Management 106
15.1 Outbound Policy 106
15.2 Custom Rules for Outbound Policy 107
15.2.1 Algorithm: Weighted Balance 108
15.2.2 Algorithm: Persistence 109
15.2.3 Algorithm: Enforced 110
15.2.4 Algorithm: Priority 111
15.2.5 Algorithm: Overflow 111
15.2.6 Algorithm: Least Used 112
15.2.7 Algorithm: Lowest Latency 112
15.2.8 Expert Mode 113

http://www.peplink.com
5
Copyright @ 2017 Pepwave
16 Inbound Access 114
16.1 Port Forwarding Service 114
16.1.1 UPnP / NAT-PMP Settings 116
17 NAT Mappings 117
18 QoS 119
18.1 User Groups 119
18.2 Bandwidth Control 120
18.3 Application 120
18.3.1 Application Prioritization 120
18.3.2 Prioritization for Custom Applications 121
18.3.3 DSL/Cable Optimization 121
19 Firewall 121
19.1 Outbound and Inbound Firewall Rules 122
19.1.1 Access Rules 122
19.1.2 Apply Firewall Rules to PepVpn Traffic 125
19.1.3 Intrusion Detection and DoS Prevention 126
19.2 Content Blocking 127
19.2.1 Application Blocking 127
19.2.2 Web Blocking 128
19.2.3 Customized Domains 128
19.2.4 Exempted User Groups 128
19.2.5 Exempted Subnets 128
19.2.6 URL Logging 128
20 OSPF & RIPv2 129
21 Remote User Access 131
Miscellaneous Settings 133
21.1 High Availability 133
21.2 PPTP Server 137
21.3 Certificate Manager 139

http://www.peplink.com
6
Copyright @ 2017 Pepwave
21.4 Service Forwarding 139
21.4.1 SMTP Forwarding 140
21.4.2 Web Proxy Forwarding 141
21.4.3 DNS Forwarding 141
21.4.4 Custom Service Forwarding 141
21.5 Service Passthrough 142
21.6 GPS Forwarding 143
22 AP Controller 144
22.1 Wireless SSID 144
22.2 Settings 148
23 AP Controller Status 154
23.1 Info 154
23.2 Access Point (Usage) 156
23.3 Wireless SSID 158
23.4 Wireless Client 159
23.5 Nearby Device 161
23.6 Event Log 162
24 Toolbox 163
25 System Settings 163
25.1 Admin Security 163
25.2 Firmware 168
25.3 Time 169
25.4 Schedule 169
25.5 Email Notification 171
25.6 Event Log 173
25.7 SNMP 173
25.8 InControl 176
25.9 Configuration 176
25.10 Feature Add-ons 178
25.11 Reboot 178

http://www.peplink.com
7
Copyright @ 2017 Pepwave
26 Tools 178
26.1 Ping 178
26.2 Traceroute Test 179
26.3 PepVPN Test 180
26.4 Wake-on-LAN 181
26.5 CLI (Command Line Interface Support) 181
27 Status 182
27.1 Device 182
27.2 GPS Data 183
27.3 Active Sessions 183
27.4 Client List 185
27.5 WINS Client 186
27.6 UPnP / NAT-PMP 186
27.7 SpeedFusion Status 187
27.8 Event Log 191
28 Bandwidth Status 192
28.1 Real-Time 192
28.2 Hourly 193
28.3 Daily 194
28.4 Monthly 195
Appendix A: Restoration of Factory Defaults 197
Appendix B: Declaration 198

http://www.peplink.com
8
Copyright @ 2017 Pepwave
1Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN connections,
allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi, external WiMAX
dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many different
deployments and markets. Entry level SD-WAN models such as the MAX BR1 are suitable for SMEs or
branch offices. High-capacity SD-WAN routers such as the MAX HD2 are suitable for larger
organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction!
http://youtu.be/UCkVQThLKO4

http://www.peplink.com
9
Copyright @ 2017 Pepwave
2Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network

http://www.peplink.com
10
Copyright @ 2017 Pepwave
3Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they provide
advanced features to enhance Internet access. Our Max BR wireless routers support multiple SIM cards.
They can be configured to switch from using one SIM card to another SIM card according to different
criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless Internet
connections can be bonded together using our SpeedFusion technology. This allows better reliability,
larger bandwidth, and increased wireless coverage are comparing to use only one 4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more information,
please see peplink.com/products.
3.1 Supported Network Features
3.1.1 WAN
●Ethernet WAN connection in full/half duplex
●Static IP support for PPPoE
●Built-in cellular modems
●USB mobile connection(s)
●Wi-Fi WAN connection
●Network address translation (NAT)/port address translation (PAT)
●Inbound and outbound NAT mapping
●IPsec NAT-T and PPTP packet passthrough
●MAC address clone and passthrough
●Customizable MTU and MSS values
●WAN connection health check
●Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org, tzo.com and
DNS-O-Matic)
●Ping, DNS lookup, and HTTP-based health check

http://www.peplink.com
11
Copyright @ 2017 Pepwave
3.1.2 LAN
●Wi-Fi AP
●Ethernet LAN ports
●DHCP server on LAN
●Extended DHCP option support
●Static routing rules
●VLAN on LAN support
3.1.3 VPN
●PepVPN with SpeedFusionTM
●PepVPN performance analyzer
●X.509 certificate support
●VPN load balancing and failover among selected WAN connections
●Bandwidth bonding and failover among selected WAN connections
●IPsec VPN for network-to-network connections (works with Cisco and Juniper only)
●Ability to route Internet traffic to a remote VPN peer
●Optional pre-shared key setting
●SpeedFusionTM throughput, ping, and traceroute tests
●PPTP server
●PPTP and IPsec passthrough
3.1.4 Firewall
●Outbound (LAN to WAN) firewall rules
●Inbound (WAN to LAN) firewall rules per WAN connection
●Intrusion detection and prevention
●Specification of NAT mappings
●Outbound firewall rules can be defined by destination domain name
3.1.5 Captive Portal
●Splash screen of open networks, login page for secure networks
●Customizable built-in captive portal
●Supports linking to outside page for captive portal
3.1.6 Outbound Policy
●Link load distribution per TCP/UDP service
●Persistent routing for specified source and/or destination IP addresses per TCP/UDP service
●Traffic prioritization and DSL optimization

http://www.peplink.com
12
Copyright @ 2017 Pepwave
●Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
3.1.7 AP Controller
●Configure and manage Pepwave AP devices
●Review the status of connected APs
3.1.8 QoS
●Quality of service for different applications and custom protocols
●User group classification for different service levels
●Bandwidth usage control and monitoring on group- and user-level
●Application prioritization for custom protocols and DSL/cable optimization
3.2 Other Supported Features
●User-friendly web-based administration interface
●HTTP and HTTPS support for web admin interface
●Configurable web administration port and administrator password
●Firmware upgrades, configuration backups, ping, and traceroute via web admin interface
●Remote web-based configuration (via WAN and LAN interfaces)
●Time server synchronization
●SNMP
●Email notification
●Read-only user for web admin
●Shared IP drop-in mode
●Authentication and accounting by RADIUS server for web admin
●Built-in WINS servers*
●Syslog
●SIP passthrough
●PPTP packet passthrough
●Event log
●Active sessions
●Client list
●WINS client list *
●UPnP / NAT-PMP
●Real-time, hourly, daily, and monthly bandwidth usage reports and charts
●IPv6 support

http://www.peplink.com
13
Copyright @ 2017 Pepwave
●Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants
4Pepwave MAX Mobile Router Overview
4.1 MAX 700
4.1.1 Panel Appearance
4.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error

http://www.peplink.com
14
Copyright @ 2017 Pepwave
Green
Ready
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF
Disconnected
Blinking slowly
Connecting to network
Blinking
Connected to network with traffic
ON
Connected to network without traffic
Wi-Fi AP
OFF
Disabled
Blinking slowly
Enabled but no client connected
Blinking
Connected to network with traffic
ON
Client(s) connected to wireless network
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100/ 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports

http://www.peplink.com
15
Copyright @ 2017 Pepwave
4.2 MAX HD2
4.2.1 Panel Appearance

http://www.peplink.com
16
Copyright @ 2017 Pepwave
4.2.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking
red
Boot up error
Green
Ready
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN /
Cellular 1 /
Cellular 2
OFF
Disabled Intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100 / 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports

http://www.peplink.com
17
Copyright @ 2017 Pepwave
4.3 MAX HD2 IP67
4.3.1 Panel Appearance
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking
red
Boot up error
Green
Ready

http://www.peplink.com
18
Copyright @ 2017 Pepwave
4.4 MAX HD2 mini
4.4.1 Panel Appearance
4.4.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Cellular WAN Indicators
Cellular 1 /
Cellular 2
OFF
Disabled intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100 / 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports

http://www.peplink.com
19
Copyright @ 2017 Pepwave
4.5 MAX Transit
4.5.1 Panel Appearance
4.5.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Cellular WAN Indicators
Cellular 1 /
Cellular 2*
OFF
Disabled intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
* For MAX-TST_DUO
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100 / 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports

http://www.peplink.com
20
Copyright @ 2017 Pepwave
4.6 MAX CX4
4.6.1 Panel Appearance
4.6.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green
Ready
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN /
Cellular 1 /
Cellular 2
OFF
Disabled Intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100 / 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type
Auto MDI/MDI-X ports