peplink Pepwave Surf SOHO User manual

Pepwave Surf SOHO
User Manual
Pepwave Product:
Surf SOHO
Pepwave Firmware 8.1.3
August 2021
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. Copyright © 2020 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave
logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their
respective owners.

Table of Contents
Introduction and Scope 5
Glossary 6
Product Features 7
LAN 7
VPN 7
Firewall 8
Outbound Policy 8
QoS 8
Other Supported Features 8
Pepwave Surf SOHO Router Overview 9
Panel Appearance 9
LED Indicators 11
Advanced Feature Summary 12
Drop-in Mode and LAN Bypass: Transparent Deployment 12
QoS: Clearer VoIP 12
USB Modem 13
Built-In Remote User VPN Support 13
DPI Engine 13
Wi-Fi Air Monitoring 14
SP Default Configuration 14
Installation 15
Preparation 15
Constructing the Network 15
Connecting to the Web Admin Interface 15
SpeedFusion Cloud 19
Activate SpeedFusion Cloud Service 19
Enable SpeedFusion Cloud 21
Connect Clients to Cloud 29
Link Wi-Fi to Cloud 30
Optimize Cloud Application 32
Configuring the LAN Interface(s) 33
Network Settings 33
Port Settings 40
Configuring the WAN interface 41
https://www.peplink.com
2
Copyright @ 2021 Peplink

WAN > Quality Monitoring 41
WAN > Ethernet WAN 42
WAN > Physical Interface Settings 43
WAN > Health Check Settings 44
WAN > Bandwidth Allowance Monitor 45
WAN > Additional IP Address Settings 46
WAN > Dynamic DNS Settings 46
Wi-Fi WAN and USB WiFi Network connection 47
WAN > WiFi Connection Profiles 49
WAN > Signal threshold settings 51
Indication of WiFi strength values: 51
PepVPN 52
PepVPN > Send ALL traffic 56
Outbound Policy Management 57
Port Forwarding 60
UPnP / NAT-PMP Settings 62
NAT Mappings 63
QoS 65
Bandwidth Control 65
Application Prioritization 65
Firewall 67
Outbound and Inbound Firewall Rules 68
Intrusion Detection and DoS Prevention 72
Content Blocking 73
Routing Protocols 74
OSPF & RIPv2 74
BGP 77
Remote User Access 80
L2TP with IPsec 80
OpenVPN 80
PPTP 81
Authentication Methods 81
Miscellaneous Settings 83
RADIUS Server 83
Certificate Manager 85
Service Forwarding 85
Service Passthrough 87
Grouped Networks 88
https://www.peplink.com
3
Copyright @ 2021 Peplink

SIM Toolkit 89
AP 92
Wireless SSID 92
Settings 97
AP > Status 99
Access Point 99
Wireless SSID 102
Wireless Client 103
Mesh / WDS 105
Nearby Device 106
Event Log 106
System Settings 108
Admin Security 108
Firmware 111
Time 112
Schedule 113
Email Notification 114
Event Log 117
SNMP 117
InControl 120
Configuration 120
Feature Add-ons 121
Reboot 121
Tools 121
Ping 122
Traceroute Test 123
Wake-on-LAN 123
WAN Analysis 124
Status 126
Device 127
Active Sessions 129
Client List 131
OSPF & RIPv2 132
BGP 132
PepVPN Status 132
Event Log 135
WAN Quality 136
Usage Reports 137
Appendix A: Restoration of Factory Defaults 141
https://www.peplink.com
4
Copyright @ 2021 Peplink

Appendix B: Declaration 141
https://www.peplink.com
5
Copyright @ 2021 Peplink

Introduction and Scope
The Surf SOHO is a professional-grade router that is secure, reliable, and easy to use.
With the Surf SOHO, you can connect to the Internet using a USB cellular modem, Ethernet, or Wi-Fi. Hook the Surf
SOHO up to Ethernet and Cellular connections, and it will automatically fail over from one to the other as needed. That
way, you can stay connected even when a connection breaks
This manual covers setting up a Surf SOHO router and provides an introduction to their features and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction.
https://www.peplink.com
6
Copyright @ 2021 Peplink

Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
https://www.peplink.com
7
Copyright @ 2021 Peplink

Product Features
PepwaveSurf SOHO routers enable all LAN users to share broadband Internet connections, and they provide advanced
features to enhance Internet access. Our Surf SOHO routers support one Ethernet, one USB 4G LTE/3G WAN, and
Wi-Fi as WAN for failover
It also includes three SMA dual-band antennas that allows better reliability, larger bandwidth, and increased wireless
coverage.
Below is a list of supported features on Pepwave routers. Features vary by model.
For more information, please visit our website.
WAN
● Ethernet WAN connection in full/half duplex
● Static IP support for PPPoE
● USB mobile connection(s)
● Wi-Fi WAN connection
● Network address translation (NAT)/port address translation (PAT)
● Inbound and outbound NAT mapping
● IPsec NAT-T and PPTP packet pass through
● Intelligent Failover
● MAC address clone and passthrough
● Customizable MTU and MSS values
● WAN connection health check
● Dynamic DNS
● Ping, DNS lookup, and HTTP-based health check
LAN
● Wi-Fi AP
● Ethernet LAN ports
● DHCP server on LAN
● Extended DHCP option support
● Static routing rules
● VLAN on LAN support
VPN
● Site-to-Site VPN
● 256-bit AES Encryption
● Dynamic Routing
● Pre-shared key authentication
● PPTP/L2TP/Open VPN - VPN server
https://www.peplink.com
8
Copyright @ 2021 Peplink

Firewall
● Outbound (LAN to WAN) firewall rules
● Inbound (WAN to LAN) firewall rules per WAN connection
● Intrusion detection and prevention
● Specification of NAT mappings
● Outbound firewall rules can be defined by destination domain name
Outbound Policy
● Link load distribution per TCP/UDP service
● Persistent routing for specified source and/or destination IP addresses per TCP/UDP service
● Traffic prioritization and DSL optimization
● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
QoS
● Quality of service for different applications and custom protocols
● User group classification for different service levels
● Bandwidth usage control and monitoring on group- and user-level
● Application prioritization for custom protocols and DSL/cable optimization
Other Supported Features
● User-friendly web-based administration interface
● HTTP and HTTPS support for web admin interface
● Configurable web administration port and administrator password
● Firmware upgrades, configuration backups, ping, and traceroute via web admin interface
● Remote web-based configuration (via WAN and LAN interfaces)
● Time server synchronization
● SNMP
● Email notification
● Read-only user for web admin
● Shared IP drop-in mode
● Authentication and accounting by RADIUS server for web admin
● Syslog
● SIP passthrough
● PPTP packet pass through
● Event log
● Active sessions
● Client list
● UPnP / NAT-PMP
● Real-time, hourly, daily, and monthly bandwidth usage reports and charts
https://www.peplink.com
9
Copyright @ 2021 Peplink

Pepwave Surf SOHO Router Overview
Panel Appearance
https://www.peplink.com
10
Copyright @ 2021 Peplink

Specifications
WAN Interface
1x 100/1000M Ethernet Port
1x USB 2.0 Interface
Wi-Fi as WAN
LAN Interface
4x 100/1000M Ethernet Ports
Simultaneous Dual-Band 11ac Wi-Fi AP
Wi-Fi AP Operating Frequency
2412 – 2472 MHz and
5180 - 5825 MHz
Wi-Fi Antenna
3x External Wi-Fi Antenna
Recommended Users
1-25
Router Throughput
120Mbps
Number of PPTP VPN Users
3
Number of PPTP VPN Users
2
Power Input
DC Jack: 10V − 24VDC
AC Adapter: AC Input 100V − 240V, DC Output 12V, 1.5A
Power Consumption
26W (max) with USB WAN
22W (max) without USB WAN
Dimensions
9.17 x 5.6 x 1.18 inch
233 x 142 x 30 mm
Weight
0.86 pounds
388 grams
Operating Temperature
-14° to 113°F
-10° to 45°C
Humidity
15% – 95% (non-condensing)
Certifications
FCC, CE, RoHS
Warranty
1-Year Limited Warranty
https://www.peplink.com
11
Copyright @ 2021 Peplink

LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Wi-Fi and Status Indicators
Wi-Fi
OFF
Disabled Intermittent
Blinking
Enabled but no client connected
ON
Client(s) connected to wireless network
Continuous blinking
Transferring data to wireless network
Status
OFF
System initializing
Red
Booting up or busy
Green
Ready state
LAN and Ethernet WAN Ports
Green LED
ON
1000 Mbps
OFF
10 Mbps / 100 Mbps or port is not connected
Orange LED
ON
Port is being connected
Blinking
Data is being transferred
OFF
No data is being transferred or port is not connected
Port type
Auto MDI/MDI-X ports
Wi-Fi Signal
Off
No connection
Signal strength
Wi-Fi signal strength (low, medium, and high)
https://www.peplink.com
12
Copyright @ 2021 Peplink

Advanced Feature Summary
Drop-in Mode and LAN Bypass: Transparent Deployment
As your organization grows, it may require more bandwidth, but modifying your network can be tedious. In Drop-in
Mode, you can conveniently install your Peplink router without making any changes to your network. For any reason your
Peplink router looses power, the LAN Bypass will safely and automatically bypass the Peplink router to resume your
original network connection.
QoS: Clearer VoIP
VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers can detect VoIP traffic and assign
it the highest priority, giving you crystal-clear calls.
https://www.peplink.com
13
Copyright @ 2021 Peplink

USB Modem
For increased WAN diversity, plug in a USB LTE modem as a backup. Peplink routers are compatible with over 250
modem types.
Built-In Remote User VPN Support
Use OpenVPN or L2TP with IPsec to safely and conveniently connect remote clients to your private network. L2TP with
IPsec is supported by most devices, but legacy devices can also connect using PPTP.
Click here for the full instructions on setting up L2TP with IPsec.
Click here for the full instructions on setting up OpenVPN connections
DPI Engine
The DPI report written in the updated KB article will show further information on InControl2 through breaking down
application categories into subcategories.
sscs
https://forum.peplink.com/t/updated-ic2-deep-packet-inspection-dpi-reports-and-everything-you-need-to-know-about-it/29
658
https://www.peplink.com
14
Copyright @ 2021 Peplink

Wi-Fi Air Monitoring
Pepwave routers support Wi-Fi “Air Monitoring Mode” which used to troubleshoot remotely and proactively monitor Wi-Fi
and WAN performance. The report can be viewed under InControl 2 > Reports > AirProbe Reports after enabling Wi-Fi
Air Monitoring.
Note: To enable this feature, go to https://<Device's IP>/cgi-bin/MANGA/support.cgi
SP Default Configuration
The SP Default Configuration feature written in the updated KB article allows for the provisioning of custom made
settings (a.k.a. InControl2 configuration) via the Ethernet LAN port and is ideal for those wanting to do a bulk deployment
of many Peplink devices.
Note: If you would like to use this feature, please contact your purchase point (Eg.VAD).
https://www.peplink.com
15
Copyright @ 2021 Peplink

Installation
The following section details connecting Pepwave routers to your network.
Preparation
Before installing your Pepwave router, please prepare the following as appropriate for your installation:
● At least one Internet/WAN access account and/or Wi-Fi access information
● Depending on network connection type(s), one or more of the following:
●Ethernet WAN: An ethernet cable with RJ45 connector
●USB: A USB modem
●Wi-Fi WAN: Wi-Fi antennasA computer with the TCP/IP network protocol and a web browser installed.
Supported browsers include Microsoft Internet Explorer 11 or above, Mozilla Firefox 24 or above, Apple Safari 7 or
above, and Google Chrome 18 or above.
Constructing the Network
Construct the network according to the following steps:
1: With an Ethernet cable, connect a computer to one of the LAN ports on the Pepwave router. Repeat with different
cables for up to 4 computers to be connected.
2: With another Ethernet cable or a USB modem/Wi-Fi antenna/, connect to one of the WAN ports on the Pepwave
router. Repeat the same procedure for other WAN ports.
Connect the power adapter to the power connector on the rear panel of the Pepwave router, and then plug it into a power
outlet.
Connecting to the Web Admin Interface
Start a web browser on a computer that is connected with the Pepwave Surf SOHO through the LAN.
To connect to the web admin of the Pepwave Surf SOHO, enter the following LAN IP address in the address field of the
web browser: https://192.168.50.1
(This is the default LAN IP address of the Pepwave Surf SOHO.) Enter the following to access the web admin interface.
Username: admin
Password: admin
(This is the default admin user login of the Pepwave Surf SOHO.)
https://www.peplink.com
16
Copyright @ 2021 Peplink

You must change the default password on the first successful logon.
Password requirements are: A minimum of 10 lower AND upper case characters, including at least 1 number.
When HTTP is selected, the URL will be redirected to HTTPS by default.
https://www.peplink.com
17
Copyright @ 2021 Peplink

After successful login, the Dashboard of the web admin interface will be displayed
The Dashboard shows current WAN, LAN, and Wi-Fi AP statuses. Here, you can change WAN connection priority and
https://www.peplink.com
18
Copyright @ 2021 Peplink

switch on/off the Wi-Fi AP.
Device Information displays details about the device, including model name, firmware version,CPU Load, throughput
and uptime.
Important Note
Configuration changes (e.g. WAN, LAN, admin settings, etc.) will take effect only after clicking the Save button at the bottom
of each page. The Apply Changes button causes the changes to be saved and applied.
https://www.peplink.com
19
Copyright @ 2021 Peplink

SpeedFusion Cloud
With Peplink products, your device is able to connect to SpeedFusion Cloud without the use of a second endpoint. This
service has wide access to a number of SpeedFusion endpoints hosted from around the world, providing your device
with unbreakable connectivity wherever you are.*
*SpeedFusion Cloud is supported in firmware version 8.1.0 and above. SpeedFusion Cloud is a subscription basis.
SpeedFusion Cloud license can be purchased at https://store.peplink.com/ > Cloud Solutions > SpeedFusion Cloud
Service.
Activate SpeedFusion Cloud Service
You are entitled to a 30-days free period with 100GB of SpeedFusion usage upon activation of the SpeedFusion Cloud
service. This offer is limited to once per device. To get your activation key please visit SpeedFusion Cloud.
https://www.peplink.com
20
Copyright @ 2021 Peplink