peplink Pepwave MAX Series User manual

Copyright & Trademarks
Specifications are subject to change without notice. Copyright © 2020 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are
trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
Pepwave MAX
User Manual
Pepwave Products:
MAX 700 / HD2 / HD2 IP67 / HD2 mini / HD2 Dome / HD4 / HD4 MBX /HD4 IP67 / Transit /
Transit Mini / BR1 Classic / BR1 MK2 / BR1 Slim / BR1 ENT / BR1 M2M / BR1 Mini / BR1 Mini
Core / BR1 Pro LTE / BR1 IP55 / BR1 IP67/ BR2 IP55 / On-The-Go / MAX HD2 / HD4 with
MediaFast / SpeedFusion Engine / UBR LTE / PDX
Pepwave Firmware 8.1.0
August 2020

https://www.peplink.com
1
Copyright @ 2020 Pepwave
Table of Contents
Introduction and Scope 7
Glossary 8
Product Features 9
Supported Network Features 9
WAN 9
LAN 10
VPN 10
Firewall 10
Captive Portal 10
Outbound Policy 10
AP Controller 11
QoS 11
Other Supported Features 11
Pepwave MAX Mobile Router Overview 13
MAX 700 13
MAX HD2 15
MAX HD2 IP67 17
MAX HD2 mini 18
MAX HD2 Dome 20
MAX Transit / MAX Transit Duo (CAT-12) 22
MAX Transit (CAT-18) 23
MAX Transit Mini 25
MAX HD2 and HD4 with MediaFast 26
MAX HD4 28
MAX HD4 MBX (CAT-12) 30
MAX HD2/4 MBX (CAT-18) 32
MAX HD4 IP67 33
MAX BR1 Classic 34
MAX BR1 MK2 36
MAX BR1 Slim 38
MAX BR1 Mini 40
MAX BR1 Mini Core 42
MAX BR1 M2M 43
MAX BR1 ENT 45
MAX BR1 Pro 46

https://www.peplink.com
2
Copyright @ 2020 Pepwave
MAX Hotspot 47
MAX BR1 IP55 48
MAX BR2 IP55 50
MAX BR1 IP67 51
MAX On-The-Go 52
SpeedFusion Engine 53
UBR LTE 54
PDX 55
Advanced Feature Summary 56
Drop-in Mode and LAN Bypass: Transparent Deployment 56
QoS: Clearer VoIP 57
Per-User Bandwidth Control 57
High Availability via VRRP 58
USB Modem and Android Tethering 58
Built-In Remote User VPN Support 59
SIM-card USSD support 59
DPI Engine 60
Installation 61
Preparation 61
Constructing the Network 61
Configuring the Network Environment 62
Mounting the Unit 62
Wall Mount 62
Car Mount 63
IP67 Installation Guide 63
PDX Accessory Kit Installation Guide 63
Connecting to the Web Admin Interface 69
SpeedFusion Cloud 72
Activate SpeedFusion Cloud Service 72
Enable SpeedFusion Cloud 74
Connect Clients to Cloud 81
Link Wi-Fi to Cloud 82
Configuring the LAN Interface(s) 84
Basic Settings 84
Port Settings 95
Captive Portal 95

https://www.peplink.com
3
Copyright @ 2020 Pepwave
Configuring the WAN Interface(s) 98
Ethernet WAN 99
DHCP Connection 102
Static IP Connection 103
PPPoE Connection 104
L2TP Connection 105
Cellular WAN 106
Wi-Fi WAN 113
Creating Wi-Fi Connection Profiles 119
WAN Health Check 120
Dynamic DNS Settings 122
Advanced Wi-Fi Settings 124
ContentHub Configuration 129
ContentHub 129
Configuring the ContentHub 129
Configure a website to be published from the ContentHub 130
Configure an application to be published from the ContentHub 131
MediaFast Configuration 133
Setting Up MediaFast Content Caching 134
Scheduling Content Prefetching 135
Viewing MediaFast Statistics 138
Bandwidth Bonding SpeedFusionTM / PepVPN 139
PepVPN 139
The Pepwave Router Behind a NAT Router 145
IPsec VPN 147
IPsec VPN Settings 147
Outbound Policy Management 151
Outbound Policy 151
Custom Rules for Outbound Policy 153
Algorithm: Weighted Balance 153
Algorithm: Persistence 154
Algorithm: Enforced 155
Algorithm: Priority 156
Algorithm: Overflow 156
Algorithm: Least Used 157
Algorithm: Lowest Latency 157

https://www.peplink.com
4
Copyright @ 2020 Pepwave
Expert Mode 158
Inbound Access 158
Port Forwarding Service 158
UPnP / NAT-PMP Settings 160
NAT Mappings 161
User Groups 163
Bandwidth Control 164
Application 164
Application Prioritization 164
Prioritization for Custom Applications 164
DSL/Cable Optimization 165
Firewall 165
Outbound and Inbound Firewall Rules 166
Access Rules 166
Apply Firewall Rules to PepVpn Traffic 169
Intrusion Detection and DoS Prevention 169
Content Blocking 171
Application Blocking 171
Web Blocking 171
Customized Domains 172
Exempted User Groups 172
Exempted Subnets 172
URL Logging 172
OSPF & RIPv2 172
BGP 176
Remote User Access 178
L2TP with IPsec 179
OpenVPN 179
PPTP 180
Authentication Methods 180
Miscellaneous Settings 182
High Availability 182
Certificate Manager 185
Service Forwarding 186
SMTP Forwarding 186
Web Proxy Forwarding 187
DNS Forwarding 188

https://www.peplink.com
5
Copyright @ 2020 Pepwave
Custom Service Forwarding 188
Service Passthrough 188
UART 190
GPS Forwarding 192
Ignition Sensing 192
Ignition Sensing installation 193
GPIO Menu 195
NTP Server 196
Grouped Networks 196
SIM Toolkit 197
AP - access point 200
AP Controller 200
Wireless SSID 200
Settings 205
AP Controller Status 211
Info 211
Access Point (Usage) 213
Wireless SSID 215
Wireless Client 216
Nearby Device 217
Event Log 218
Toolbox 219
System Settings 220
Admin Security 220
Firmware 223
Web admin interface : automatically check for updates 223
Web admin interface : install updates manually 224
The InControl method 225
Time 226
Schedule 226
Email Notification 227
Event Log 229
SNMP 230
InControl 232
Configuration 232
Feature Add-ons 233
Reboot 234

https://www.peplink.com
6
Copyright @ 2020 Pepwave
Tools 234
Ping 234
Traceroute Test 235
PepVPN Test 236
Wake-on-LAN 237
CLI (Command Line Interface Support) 237
Status 238
Device 238
GPS Data 239
Active Sessions 240
Client List 241
WINS Client 242
UPnP / NAT-PMP 242
OSPF & RIPv2 243
BGP 244
SpeedFusion Status 244
Event Log 246
WAN Quality 248
Usage Reports 248
Real-Time 249
Hourly 249
Daily 250
Monthly 251
Appendix A: Restoration of Factory Defaults 254
Appendix B: Declaration 254

https://www.peplink.com
7
Copyright @ 2020 Pepwave
Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN
connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi,
external WiMAX dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are
suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are
suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features
and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction!
https://youtu.be/13M-JHRAICA

https://www.peplink.com
8
Copyright @ 2020 Pepwave
Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G 3rd generation standards for wireless communications (e.g., HSDPA)
4G 4th generation standards for wireless communications (e.g., LTE)
DHCP Dynamic Host Configuration Protocol
DNS Domain Name System
EVDO Evolution-Data Optimized
FQDN Fully Qualified Domain Name
HSDPA High-Speed Downlink Packet Access
HTTP Hyper-Text Transfer Protocol
ICMP Internet Control Message Protocol
IP Internet Protocol
LAN Local Area Network
MAC Address Media Access Control Address
MTU Maximum Transmission Unit
MSS Maximum Segment Size
NAT Network Address Translation
PPPoE Point to Point Protocol over Ethernet
QoS Quality of Service
SNMP Simple Network Management Protocol
TCP Transmission Control Protocol
UDP User Datagram Protocol
VPN Virtual Private Network
VRRP Virtual Router Redundancy Protocol

https://www.peplink.com
9
Copyright @ 2020 Pepwave
WAN Wide Area Network
WINS Windows Internet Name Service
WLAN Wireless Local Area Network
1Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they
provide advanced features to enhance Internet access. Our Max BR wireless routers support
multiple SIM cards. They can be configured to switch from using one SIM card to another SIM
card according to different criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless
Internet connections can be bonded together using our SpeedFusion technology. This allows
better reliability, larger bandwidth, and increased wireless coverage are comparing to use only
one 4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more
information, please see peplink.com/products.
1.1 Supported Network Features
1.1.1 WAN
●Ethernet WAN connection in full/half duplex
●Static IP support for PPPoE
●Built-in cellular modems
●USB mobile connection(s)
●Wi-Fi WAN connection
●Network address translation (NAT)/port address translation (PAT)
●Inbound and outbound NAT mapping
●IPsec NAT-T and PPTP packet passthrough
●MAC address clone and passthrough
●Customizable MTU and MSS values
●WAN connection health check
●Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org,
tzo.com and DNS-O-Matic)
●Ping, DNS lookup, and HTTP-based health check

https://www.peplink.com
10
Copyright @ 2020 Pepwave
1.1.2 LAN
●Wi-Fi AP
●Ethernet LAN ports
●DHCP server on LAN
●Extended DHCP option support
●Static routing rules
●VLAN on LAN support
1.1.3 VPN
●PepVPN with SpeedFusionTM
●PepVPN performance analyzer
●X.509 certificate support
●VPN load balancing and failover among selected WAN connections
●Bandwidth bonding and failover among selected WAN connections
●IPsec VPN for network-to-network connections (works with Cisco and Juniper only)
●Ability to route Internet traffic to a remote VPN peer
●Optional pre-shared key setting
●SpeedFusionTM throughput, ping, and traceroute tests
●PPTP server
●PPTP and IPsec passthrough
1.1.4 Firewall
●Outbound (LAN to WAN) firewall rules
●Inbound (WAN to LAN) firewall rules per WAN connection
●Intrusion detection and prevention
●Specification of NAT mappings
●Outbound firewall rules can be defined by destination domain name
1.1.5 Captive Portal
●Splash screen of open networks, login page for secure networks
●Customizable built-in captive portal
●Supports linking to outside page for captive portal
1.1.6 Outbound Policy
●Link load distribution per TCP/UDP service
●Persistent routing for specified source and/or destination IP addresses per TCP/UDP

https://www.peplink.com
11
Copyright @ 2020 Pepwave
service
●Traffic prioritization and DSL optimization
●Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
1.1.7 AP Controller
●Configure and manage Pepwave AP devices
●Review the status of connected APs
1.1.8 QoS
●Quality of service for different applications and custom protocols
●User group classification for different service levels
●Bandwidth usage control and monitoring on group- and user-level
●Application prioritization for custom protocols and DSL/cable optimization
1.2 Other Supported Features
●User-friendly web-based administration interface
●HTTP and HTTPS support for web admin interface (default redirection to HTTPS)
●Configurable web administration port and administrator password
●Firmware upgrades, configuration backups, ping, and traceroute via web admin
interface
●Remote web-based configuration (via WAN and LAN interfaces)
●Time server synchronization
●SNMP
●Email notification
●Read-only user for web admin
●Shared IP drop-in mode
●Authentication and accounting by RADIUS server for web admin
●Built-in WINS servers*
●Syslog
●SIP passthrough
●PPTP packet passthrough
●Event log
●Active sessions
●Client list
●WINS client list *
●UPnP / NAT-PMP
●Real-time, hourly, daily, and monthly bandwidth usage reports and charts

https://www.peplink.com
12
Copyright @ 2020 Pepwave
●IPv6 support
●Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants

https://www.peplink.com
13
Copyright @ 2020 Pepwave
2Pepwave MAX Mobile Router Overview
2.1 MAX 700
2.1.1 Panel Appearance
2.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red
Booting up or busy
Blinking red
Boot up error
Green Ready

https://www.peplink.com
14
Copyright @ 2020 Pepwave
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF Disconnected
Blinking slowly Connecting to network
Blinking Connected to network with traffic
ON
Connected to network without traffic
Wi-Fi AP
OFF
Disabled
Blinking slowly Enabled but no client connected
Blinking Connected to network with traffic
ON Client(s) connected to wireless network
LAN and Ethernet WAN Ports
Green LED ON 10 / 100/ 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports

https://www.peplink.com
15
Copyright @ 2020 Pepwave
2.2 MAX HD2
2.3 For certification information, please refer to Appendix B: Declaration
2.3.1 Panel Appearance

https://www.peplink.com
16
Copyright @ 2020 Pepwave
2.3.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red Boot up error
Green Ready
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN /
Cellular 1 /
Cellular 2
OFF Disabled Intermittent
Blinking slowly Connecting to wireless network(s)
Blinking Connected to wireless network(s) with traffic
ON Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED ON 10 / 100 / 1000 Mbps
Orange LED Blinking Data is transferring
OFF No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports

https://www.peplink.com
17
Copyright @ 2020 Pepwave
2.4 MAX HD2 IP67
2.4.1 Panel Appearance
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red Boot up error
Green Ready

https://www.peplink.com
18
Copyright @ 2020 Pepwave
2.5 MAX HD2 mini
2.5.1 Panel Appearance
2.5.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red Boot up error
Green Ready

https://www.peplink.com
19
Copyright @ 2020 Pepwave
Cellular WAN Indicators
Cellular 1 /
Cellular 2
OFF Disabled intermittent
Blinking slowly Connecting to wireless network(s)
Blinking Connected to wireless network(s) with traffic
ON Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED ON 10 / 100 / 1000 Mbps
Orange LED Blinking Data is transferring
OFF
No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports