Pepwave HD2 mini User manual

Pepwave MAX User Manual
Pepwave Products:
MAX 700/HD2/HD2 IP67/HD2 mini/HD4/Transit/BR1/BR1 Slim/BR1 ENT/BR1 Pro LTE/BR1
IP55/BR2 IP55/On-The-Go/MAX HD2/HD4 with MediaFast
Pepwave Firmware 7
January 2017
Copyright & Trademarks
Specifications are subject to change without notice. Copyright © 2017 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo
are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.

Table of Contents
Introduction and Scope 8
Glossary 9
Product Features 10
Supported Network Features 10
WAN 10
LAN 11
VPN 11
Firewall 12
Captive Portal 12
Outbound Policy 12
AP Controller 12
QoS 12
Other Supported Features 13
Pepwave MAX Mobile Router Overview 14
MAX 700 14
MAX HD2 16
MAX HD2 IP67 18
MAX HD2 mini 19
MAX Transit 20
MAX HD4 22
MAX BR1 23
MAX BR1 Slim 25
MAX BR1 Pro LTE 27
MAX Hotspot 29
BR1 Mini 30
MAX BR1/2 IP55 31
MAX On-The-Go 32
http://www.peplink.com
2
Copyright @ 2017 Pepwave

Advanced Feature Summary 34
Drop-in Mode and LAN Bypass: Transparent Deployment 34
QoS: Clearer VoIP 35
Per-User Bandwidth Control 36
High Availability via VRRP 36
USB Modem and Android Tethering 37
Built-In Remote User VPN Support 38
SIM-card USSD support 39
Installation 39
Preparation 39
Constructing the Network 40
Configuring the Network Environment 41
Mounting the Unit 41
Wall Mount 41
Car Mount 41
IP67 Installation Guide 41
Connecting to the Web Admin Interface 42
Configuring the LAN Interface(s) 43
Basic Settings 43
Port Settings 54
Captive Portal 54
Configuring the WAN Interface(s) 57
Ethernet WAN 58
DHCP Connection 63
Static IP Connection 64
PPPoE Connection 65
L2TP Connection 67
Cellular WAN 68
Wi-Fi WAN 74
http://www.peplink.com
3
Copyright @ 2017 Pepwave

Creating Wi-Fi Connection Profiles 81
WAN Health Check 82
Dynamic DNS Settings 85
Advanced Wi-Fi Settings 86
MediaFast Configuration 91
Setting Up MediaFast Content Caching 91
Scheduling Content Prefetching 92
Viewing MediaFast Statistics 93
Bandwidth Bonding SpeedFusionTM / PepVPN 95
PepVPN 95
The Pepwave Router Behind a NAT Router 102
SpeedFusionTM Status 103
IPsec VPN 103
IPsec VPN Settings 103
Outbound Policy Management 108
Outbound Policy 108
Custom Rules for Outbound Policy 110
Algorithm: Weighted Balance 113
Algorithm: Persistence 115
Algorithm: Enforced 116
Algorithm: Priority 116
Algorithm: Overflow 117
Algorithm: Least Used 117
Algorithm: Lowest Latency 118
Expert Mode 118
Inbound Access 119
Port Forwarding Service 119
UPnP / NAT-PMP Settings 121
http://www.peplink.com
4
Copyright @ 2017 Pepwave

NAT Mappings 121
QoS 123
User Groups 123
Bandwidth Control 124
Application 124
Application Prioritization 125
Prioritization for Custom Applications 125
DSL/Cable Optimization 126
Firewall 126
Outbound and Inbound Firewall Rules 127
Access Rules 127
Apply Firewall Rules to PepVpn Traffic 130
Intrusion Detection and DoS Prevention 131
Content Blocking 132
Application Blocking 132
Web Blocking 132
Customized Domains 133
Exempted User Groups 133
Exempted Subnets 133
URL Logging 133
OSPF & RIPv2 134
Remote User Access 136
Miscellaneous Settings 138
High Availability 138
PPTP Server 142
Certificate Manager 144
Service Forwarding 144
SMTP Forwarding 145
Web Proxy Forwarding 146
http://www.peplink.com
5
Copyright @ 2017 Pepwave

DNS Forwarding 146
Custom Service Forwarding 146
Service Passthrough 147
GPS Forwarding 148
AP Controller 149
Wireless SSID 149
Settings 154
AP Controller Status 160
Info 160
Access Point (Usage) 161
Wireless SSID 164
Wireless Client 165
Nearby Device 166
Event Log 167
Toolbox 168
System Settings 169
Admin Security 169
Firmware 173
Time 174
Schedule 174
Email Notification 176
Event Log 177
SNMP 178
InControl 181
Configuration 182
Feature Add-ons 184
Reboot 184
Tools 184
Ping 184
http://www.peplink.com
6
Copyright @ 2017 Pepwave

Traceroute Test 185
PepVPN Test 186
Wake-on-LAN 186
CLI (Command Line Interface Support) 187
Status 187
Device 189
GPS Data 190
Active Sessions 190
Client List 192
WINS Client 193
UPnP / NAT-PMP 193
SpeedFusion Status 194
Event Log 198
Bandwidth Status 199
Real-Time 199
Hourly 200
Daily 200
Monthly 202
Appendix B: Declaration 206
http://www.peplink.com
7
Copyright @ 2017 Pepwave

1 Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN
connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi,
external WiMAX dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are
suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are
suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features
and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction!
http://youtu.be/UCkVQThLKO4
http://www.peplink.com
8
Copyright @ 2017 Pepwave

2 Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd generation standards for wireless communications (e.g., HSDPA)
4G
4th generation standards for wireless communications (e.g., LTE)
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
FQDN
Fully Qualified Domain Name
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
http://www.peplink.com
9
Copyright @ 2017 Pepwave

UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network
3 Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they
provide advanced features to enhance Internet access. Our Max BR wireless routers support
multiple SIM cards. They can be configured to switch from using one SIM card to another SIM
card according to different criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless
Internet connections can be bonded together using our SpeedFusion technology. This allows
better reliability, larger bandwidth, and increased wireless coverage are comparing to use only
one 4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more
information, please see peplink.com/products.
3.1 Supported Network Features
3.1.1 WAN
● Ethernet WAN connection in full/half duplex
● Static IP support for PPPoE
● Built-in cellular modems
● USB mobile connection(s)
● Wi-Fi WAN connection
● Network address translation (NAT)/port address translation (PAT)
http://www.peplink.com
10
Copyright @ 2017 Pepwave

● Inbound and outbound NAT mapping
● IPsec NAT-T and PPTP packet passthrough
● MAC address clone and passthrough
● Customizable MTU and MSS values
● WAN connection health check
● Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org,
tzo.com and DNS-O-Matic)
● Ping, DNS lookup, and HTTP-based health check
3.1.2 LAN
● Wi-Fi AP
● Ethernet LAN ports
● DHCP server on LAN
● Extended DHCP option support
● Static routing rules
● VLAN on LAN support
3.1.3 VPN
● PepVPN with SpeedFusionTM
● PepVPN performance analyzer
● X.509 certificate support
● VPN load balancing and failover among selected WAN connections
● Bandwidth bonding and failover among selected WAN connections
● IPsec VPN for network-to-network connections (works with Cisco and Juniper only)
● Ability to route Internet traffic to a remote VPN peer
● Optional pre-shared key setting
● SpeedFusionTM throughput, ping, and traceroute tests
● PPTP server
● PPTP and IPsec passthrough
http://www.peplink.com
11
Copyright @ 2017 Pepwave

3.1.4 Firewall
● Outbound (LAN to WAN) firewall rules
● Inbound (WAN to LAN) firewall rules per WAN connection
● Intrusion detection and prevention
● Specification of NAT mappings
● Outbound firewall rules can be defined by destination domain name
3.1.5 Captive Portal
● Splash screen of open networks, login page for secure networks
● Customizable built-in captive portal
● Supports linking to outside page for captive portal
3.1.6 Outbound Policy
● Link load distribution per TCP/UDP service
● Persistent routing for specified source and/or destination IP addresses per TCP/UDP
service
● Traffic prioritization and DSL optimization
● Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
3.1.7 AP Controller
● Configure and manage Pepwave AP devices
● Review the status of connected APs
3.1.8 QoS
● Quality of service for different applications and custom protocols
● User group classification for different service levels
● Bandwidth usage control and monitoring on group- and user-level
● Application prioritization for custom protocols and DSL/cable optimization
http://www.peplink.com
12
Copyright @ 2017 Pepwave

3.2 Other Supported Features
● User-friendly web-based administration interface
● HTTP and HTTPS support for web admin interface
● Configurable web administration port and administrator password
● Firmware upgrades, configuration backups, ping, and traceroute via web admin
interface
● Remote web-based configuration (via WAN and LAN interfaces)
● Time server synchronization
● SNMP
● Email notification
● Read-only user for web admin
● Shared IP drop-in mode
● Authentication and accounting by RADIUS server for web admin
● Built-in WINS servers*
● Syslog
● SIP passthrough
● PPTP packet passthrough
● Event log
● Active sessions
● Client list
● WINS client list *
● UPnP / NAT-PMP
● Real-time, hourly, daily, and monthly bandwidth usage reports and charts
● IPv6 support
● Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants
http://www.peplink.com
13
Copyright @ 2017 Pepwave

4 Pepwave MAX Mobile Router Overview
4.1 MAX 700
4.1.1 Panel Appearance
4.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking
red
Boot up error
Green
Ready
http://www.peplink.com
14
Copyright @ 2017 Pepwave

Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF
Disconnected
Blinking slowly
Connecting to network
Blinking
Connected to network with traffic
ON
Connected to network without traffic
Wi-Fi AP
OFF
Disabled
Blinking slowly
Enabled but no client connected
Blinking
Connected to network with traffic
ON
Client(s) connected to wireless network
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100/ 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not
connected
Port Type
Auto MDI/MDI-X ports
http://www.peplink.com
15
Copyright @ 2017 Pepwave

4.2 MAX HD2
4.2.1 Panel Appearance
4.2.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
http://www.peplink.com
16
Copyright @ 2017 Pepwave

Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking
red
Boot up error
Green
Ready
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN /
Cellular 1 /
Cellular 2
OFF
Disabled Intermittent
Blinking slowly
Connecting to wireless network(s)
Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100 / 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not
connected
Port Type
Auto MDI/MDI-X ports
http://www.peplink.com
17
Copyright @ 2017 Pepwave

4.3 MAX HD2 IP67
4.3.1 Panel Appearance
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking
red
Boot up error
Green
Ready
http://www.peplink.com
18
Copyright @ 2017 Pepwave

4.4 MAX HD2 mini
4.4.1 Panel Appearance
4.4.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking
red
Boot up error
Green
Ready
Cellular WAN Indicators
Cellular 1 /
Cellular 2
OFF
Disabled intermittent
Blinking slowly
Connecting to wireless network(s)
http://www.peplink.com
19
Copyright @ 2017 Pepwave

Blinking
Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
LAN and Ethernet WAN Ports
Green LED
ON
10 / 100 / 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not
connected
Port Type
Auto MDI/MDI-X ports
4.5 MAX Transit
4.5.1 Panel Appearance
4.5.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF
System initializing
Red
Booting up or busy
Blinking
red
Boot up error
http://www.peplink.com
20
Copyright @ 2017 Pepwave