peplink Pepwave MAX Series User manual

Copyright & Trademarks
Specifications are subject to change without notice. Copyright © 2020 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are
trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
Pepwave MAX User
Manual
Pepwave Products:
BR1 Mini Core
Pepwave Firmware 8.0.2
June 2021

https://www.peplink.com
Copyright @ 2021 Pepwave
Table of Contents
Introduction and Scope 7
Glossary 8
Product Features 9
Supported Network Features 9
WAN 9
LAN 10
VPN 10
Firewall 10
Captive Portal 10
Outbound Policy 10
AP Controller 11
QoS 11
Other Supported Features 11
Pepwave MAX Mobile Router Overview 13
MAX BR1 Mini Core 13
Advanced Feature Summary 14
Drop-in Mode and LAN Bypass: Transparent Deployment 14
QoS: Clearer VoIP 15
Per-User Bandwidth Control 15
High Availability via VRRP 16
USB Modem and Android Tethering 16
Built-In Remote User VPN Support 17
SIM-card USSD support 17
Installation 18
Preparation 18
Constructing the Network 18
Configuring the Network Environment 19
Mounting the Unit 20
Wall Mount 20
Connecting to the Web Admin Interface 21
Configuring the LAN Interface(s) 23
Basic Settings 23
Port Settings 32

https://www.peplink.com
Copyright @ 2021 Pepwave
Captive Portal 32
Configuring the WAN Interface(s) 35
Ethernet WAN 36
DHCP Connection 39
Static IP Connection 40
PPPoE Connection 40
L2TP Connection 42
Cellular WAN 43
Wi-Fi WAN 50
Creating Wi-Fi Connection Profiles 56
WAN Health Check 57
Dynamic DNS Settings 59
Advanced Wi-Fi Settings 61
ContentHub Configuration 66
ContentHub 66
Configuring the ContentHub 66
Configure a website to be published from the ContentHub 67
Configure an application to be published from the ContentHub 68
MediaFast Configuration 70
Setting Up MediaFast Content Caching 70
Scheduling Content Prefetching 72
Viewing MediaFast Statistics 74
Bandwidth Bonding SpeedFusionTM / PepVPN 75
PepVPN 75
The Pepwave Router Behind a NAT Router 81
SpeedFusionTM Status 82
IPsec VPN 82
IPsec VPN Settings 83
Outbound Policy Management 87
Outbound Policy 87
Custom Rules for Outbound Policy 89
Algorithm: Weighted Balance 89
Algorithm: Persistence 90
Algorithm: Enforced 91
Algorithm: Priority 92
Algorithm: Overflow 92

https://www.peplink.com
Copyright @ 2021 Pepwave
Algorithm: Least Used 93
Algorithm: Lowest Latency 93
Expert Mode 94
Inbound Access 94
Port Forwarding Service 94
UPnP / NAT-PMP Settings 96
NAT Mappings 97
QoS 98
User Groups 98
Bandwidth Control 99
Application 100
Application Prioritization 100
Prioritization for Custom Applications 100
DSL/Cable Optimization 101
Firewall 101
Outbound and Inbound Firewall Rules 102
Access Rules 102
Apply Firewall Rules to PepVpn Traffic 105
Intrusion Detection and DoS Prevention 105
Content Blocking 106
Application Blocking 106
Web Blocking 106
Customized Domains 107
Exempted User Groups 107
Exempted Subnets 107
URL Logging 107
OSPF & RIPv2 107
BGP 111
Remote User Access 113
L2TP with IPsec 114
OpenVPN 114
PPTP 115
Authentication Methods 115
Miscellaneous Settings 117
High Availability 117
Certificate Manager 120

https://www.peplink.com
Copyright @ 2021 Pepwave
Service Forwarding 121
SMTP Forwarding 121
Web Proxy Forwarding 122
DNS Forwarding 123
Custom Service Forwarding 123
Service Passthrough 123
UART 125
GPS Forwarding 127
Ignition Sensing 127
Ignition Sensing installation 128
GPIO Menu 130
Grouped Networks 131
SIM Toolkit 131
AP - access point 134
AP Controller 134
Wireless SSID 134
Settings 138
AP Controller Status 143
Info 143
Access Point (Usage) 144
Wireless SSID 147
Wireless Client 147
Nearby Device 148
Event Log 149
Toolbox 150
System Settings 151
Admin Security 151
Firmware 154
Web admin interface : automatically check for updates 154
Web admin interface : install updates manually 155
The InControl method 156
Time 157
Schedule 157
Email Notification 158
Event Log 160
SNMP 161
InControl 163

https://www.peplink.com
Copyright @ 2021 Pepwave
Configuration 164
Feature Add-ons 165
Reboot 165
Tools 165
Ping 165
Traceroute Test 166
PepVPN Test 167
Wake-on-LAN 167
CLI (Command Line Interface Support) 168
Status 169
Device 169
GPS Data 170
Active Sessions 171
Client List 172
WINS Client 173
UPnP / NAT-PMP 173
OSPF & RIPv2 174
BGP 174
SpeedFusion Status 174
Event Log 176
WAN Quality 178
Usage Reports 178
Real-Time 180
Hourly 180
Daily 181
Monthly 182
Appendix A: Restoration of Factory Defaults 185
Appendix B: Declaration 185

https://www.peplink.com
Copyright @ 2021 Pepwave
1 Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN connections,
allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi, external WiMAX
dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are
suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are
suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features
and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction!
https://youtu.be/13M-JHRAICA

https://www.peplink.com
Copyright @ 2021 Pepwave
Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G 3rd generation standards for wireless communications (e.g., HSDPA)
4G 4th generation standards for wireless communications (e.g., LTE)
DHCP Dynamic Host Configuration Protocol
DNS Domain Name System
EVDO Evolution-Data Optimized
FQDN Fully Qualified Domain Name
HSDPA High-Speed Downlink Packet Access
HTTP Hyper-Text Transfer Protocol
ICMP Internet Control Message Protocol
IP Internet Protocol
LAN Local Area Network
MAC Address Media Access Control Address
MTU Maximum Transmission Unit
MSS Maximum Segment Size
NAT Network Address Translation
PPPoE Point to Point Protocol over Ethernet
QoS Quality of Service
SNMP Simple Network Management Protocol
TCP Transmission Control Protocol
UDP User Datagram Protocol
VPN Virtual Private Network
VRRP Virtual Router Redundancy Protocol

https://www.peplink.com
Copyright @ 2021 Pepwave
WAN Wide Area Network
WINS Windows Internet Name Service
WLAN Wireless Local Area Network
2 Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they
provide advanced features to enhance Internet access. Our Max BR wireless routers support
multiple SIM cards. They can be configured to switch from using one SIM card to another SIM
card according to different criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless
Internet connections can be bonded together using our SpeedFusion technology. This allows
better reliability, larger bandwidth, and increased wireless coverage are comparing to use only
one 4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more
information, please see peplink.com/products.
2.1 Supported Network Features
2.1.1 WAN
●Ethernet WAN connection in full/half duplex
●Static IP support for PPPoE
●Built-in cellular modems
●USB mobile connection(s)
●Wi-Fi WAN connection
●Network address translation (NAT)/port address translation (PAT)
●Inbound and outbound NAT mapping
●IPsec NAT-T and PPTP packet passthrough
●MAC address clone and passthrough
●Customizable MTU and MSS values
●WAN connection health check
●Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org,
tzo.com and DNS-O-Matic)
●Ping, DNS lookup, and HTTP-based health check

https://www.peplink.com
Copyright @ 2021 Pepwave
2.1.2 LAN
●Wi-Fi AP
●Ethernet LAN ports
●DHCP server on LAN
●Extended DHCP option support
●Static routing rules
●VLAN on LAN support
2.1.3 VPN
●PepVPN with SpeedFusionTM
●PepVPN performance analyzer
●X.509 certificate support
●VPN load balancing and failover among selected WAN connections
●Bandwidth bonding and failover among selected WAN connections
●IPsec VPN for network-to-network connections (works with Cisco and Juniper only)
●Ability to route Internet traffic to a remote VPN peer
●Optional pre-shared key setting
●SpeedFusionTM throughput, ping, and traceroute tests
●PPTP server
●PPTP and IPsec passthrough
2.1.4 Firewall
●Outbound (LAN to WAN) firewall rules
●Inbound (WAN to LAN) firewall rules per WAN connection
●Intrusion detection and prevention
●Specification of NAT mappings
●Outbound firewall rules can be defined by destination domain name
2.1.5 Captive Portal
●Splash screen of open networks, login page for secure networks
●Customizable built-in captive portal
●Supports linking to outside page for captive portal
2.1.6 Outbound Policy
●Link load distribution per TCP/UDP service
●Persistent routing for specified source and/or destination IP addresses per TCP/UDP

https://www.peplink.com
Copyright @ 2021 Pepwave
service
●Traffic prioritization and DSL optimization
●Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
2.1.7 AP Controller
●Configure and manage Pepwave AP devices
●Review the status of connected APs
2.1.8 QoS
●Quality of service for different applications and custom protocols
●User group classification for different service levels
●Bandwidth usage control and monitoring on group- and user-level
●Application prioritization for custom protocols and DSL/cable optimization
2.2 Other Supported Features
●User-friendly web-based administration interface
●HTTP and HTTPS support for web admin interface (default redirection to HTTPS)
●Configurable web administration port and administrator password
●Firmware upgrades, configuration backups, ping, and traceroute via web admin
interface
●Remote web-based configuration (via WAN and LAN interfaces)
●Time server synchronization
●SNMP
●Email notification
●Read-only user for web admin
●Shared IP drop-in mode
●Authentication and accounting by RADIUS server for web admin
●Built-in WINS servers*
●Syslog
●SIP passthrough
●PPTP packet passthrough
●Event log
●Active sessions
●Client list
●WINS client list *
●UPnP / NAT-PMP
●Real-time, hourly, daily, and monthly bandwidth usage reports and charts

https://www.peplink.com
Copyright @ 2021 Pepwave
●IPv6 support
●Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants

https://www.peplink.com
Copyright @ 2021 Pepwave
3 Pepwave MAX Mobile Router Overview
3.1 MAX BR1 Mini Core
3.1.1 Panel Appearance
3.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking
red Boot up error
Green Ready
Cellular Indicators
Cellular OFF Disabled or no SIM card inserted
ON Connecting or connected to network(s)
LAN and Ethernet WAN Ports
Green LED ON 100 Mbps
OFF 10 Mbps

https://www.peplink.com
Copyright @ 2021 Pepwave
Orange LED Blinking Data is transferring
OFF Port is not connected
Port Type Auto MDI/MDI-X ports
4 Advanced Feature Summary
4.1 Drop-in Mode and LAN Bypass: Transparent Deployment
As your organization grows, it needs more bandwidth. But modifying your network would require
effort better spent elsewhere. In Drop-in Mode, you can conveniently install your Peplink router
without making any changes to your network. And if the Peplink router loses power for any
reason, LAN Bypass will safely and automatically bypass the Peplink router to resume your
original network connection.
Compatible with: MAX 700, MAX HD2 (All variants), HD4 (All Variants)

https://www.peplink.com
Copyright @ 2021 Pepwave
4.2 QoS: Clearer VoIP
VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers can
detect VoIP traffic and assign it the highest priority, giving you crystal-clear calls.
4.3 Per-User Bandwidth Control
With per-user bandwidth control, you can define bandwidth control policies for up to 3 groups
of users to prevent network congestion. Define groups by IP address and subnet, and set
bandwidth limits for every user in the group.

https://www.peplink.com
Copyright @ 2021 Pepwave
4.4 High Availability via VRRP
When your organization has a corporate requirement demanding the highest availability with no
single point of failure, you can deploy two Peplink routers in High Availability mode. With High
Availability mode, the second device will take over when needed.
Compatible with: MAX 700, MAX HD2 (All variants), HD4 (All Variants)
4.5 USB Modem and Android Tethering
For increased WAN diversity, plug in a USB LTE modem as a backup. Peplink routers are
compatible with over 200 modem types. You can also tether to smartphones running
Android 4.1.X and above.
Compatible with: MAX 700, HD2 (all variants except IP67), HD4 (All variants)

https://www.peplink.com
Copyright @ 2021 Pepwave
4.6 Built-In Remote User VPN Support
Use OpenVPN or L2TP with IPsec to safely and conveniently connect remote clients to your
private network. L2TP with IPsec is supported by most devices, but legacy devices can also
connect using PPTP.
Click here for the full instructions on setting up L2TP with IPsec.
Click here for the full instructions on setting up OpenVPN connections
4.7 SIM-card USSD support
Cellular-enabled routers can now use USSD to check their SIM card’s balance, process pre-
paid cards, and configure carrier-specific services.
Click here for full instructions on using USSD.

https://www.peplink.com
Copyright @ 2021 Pepwave
5 Installation
The following section details connecting Pepwave routers to your network.
5.1 Preparation
Before installing your Pepwave router, please prepare the following as appropriate for your
installation:
●At least one Internet/WAN access account and/or Wi-Fi access information
●Depending on network connection type(s), one or more of the following:
○Ethernet WAN: A 10/100/1000BaseT UTP cable with RJ45 connector
○USB: A USB modem
○Embedded modem: A SIM card for GSM/HSPA service
○Wi-Fi WAN: Wi-Fi antennas
○PC Card/Express Card WAN: A PC Card/ExpressCard for the corresponding
card slot
●A computer installed with the TCP/IP network protocol and a supported web browser.
Supported browsers include Microsoft Internet Explorer 11 or above, Mozilla Firefox 24
or above, Apple Safari 7 or above, and Google Chrome 18 or above.
5.2 Constructing the Network
At a high level, construct the network according to the following steps:
1. With an Ethernet cable, connect a computer to one of the LAN ports on the
Pepwave router. Repeat with different cables for up to 4 computers to be connected.
2. With another Ethernet cable or a USB modem/Wi-Fi antenna/PC Card/Express
Card, connect to one of the WAN ports on the Pepwave router. Repeat the same
procedure for other WAN ports.
3. Connect the power adapter to the power connector on the rear panel of the
Pepwave router, and then plug it into a power outlet.

https://www.peplink.com
Copyright @ 2021 Pepwave
The following figure schematically illustrates the resulting configuration:
5.3 Configuring the Network Environment
To ensure that the Pepwave router works properly in the LAN environment and can access
the Internet via WAN connections, please refer to the following setup procedures:
●LAN configuration
For basic configuration, refer to Section 8, Connecting to the Web Admin Interface.
For advanced configuration, go to Section 9, Configuring the LAN Interface(s).
●WAN configuration
For basic configuration, refer to Section 8, Connecting to the Web Admin Interface.
For advanced configuration, go to Section 9.2, Captive Portal.

https://www.peplink.com
Copyright @ 2021 Pepwave
6 Mounting the Unit
6.1 Wall Mount
The Pepwave MAX BR1 Mini Core requires four screws for wall mounting. Recommended
screw specification: M3.5 x 20mm, head diameter 6mm, head thickness 2.4mm.