Pepwave Peplink MAX Series User manual

Copyright & Trademarks
Specifications are subject to change without notice. Copyright © 2021 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are
trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
MAX Series
User Manual
Pepwave Products:
MAX 700 / HD2 / HD2 IP67 / HD2 Mini / HD2 MBX / HD Dome / HD4 / HD4 MBX / MBX
Mini / HD4 IP67 / Transit / Transit Duo / Transit 5G / Transit Core / Transit Mini / Transit Pro
E / BR1 Classic / BR1 MK2 / BR1 Slim / BR1 ENT / BR1 M2M / BR1 Mini / BR1 Mini Core /
BR1 ESN / BR1 Pro LTE / BR1 Pro 5G / BR1 IP55 / BR1 IP67/ BR2 IP55 / On-The-Go / HD2
with MediaFast / HD4 with MediaFast / SpeedFusion Engine / UBR LTE / PDX
Pepwave Firmware 8.1.3
October 2021

Table of Contents
Introduction and Scope 8
Glossary 9
Product Features 10
Supported Network Features 10
WAN 10
LAN 11
VPN 11
Firewall 11
Captive Portal 11
Outbound Policy 11
AP Controller 12
QoS 12
Other Supported Features 13
Pepwave MAX Mobile Router Overview 14
MAX 700 14
MAX HD2 16
MAX HD2 IP67 18
MAX HD2 mini 19
MAX HD Dome 20
MAX Transit / MAX Transit Duo (CAT-12) 22
MAX Transit (CAT-18) 24
MAX Transit 5G 26
MAX Transit Mini 27
MAX Transit Pro E 28
MAX Transit Core 29
MAX BR1 ESN 31
MAX HD2 and HD4 with MediaFast 32
MAX HD4 35
MAX HD4 MBX (CAT-12) 37
MAX HD2/4 MBX (CAT-18) 39
MAX MBX Mini 40
MAX HD4 IP67 41
MAX BR1 Classic 42
MAX BR1 MK2 44
MAX BR1 Slim 46

MAX BR1 Mini 47
MAX BR1 Mini Core 49
MAX BR1 M2M 50
MAX BR1 ENT 53
MAX BR1 Pro 54
MAX BR1 Pro 5G 55
MAX Hotspot 57
MAX BR1 IP55 58
MAX BR2 IP55 60
MAX BR1 IP67 61
MAX On-The-Go 62
SpeedFusion Engine 63
UBR LTE 63
PDX 65
Advanced Feature Summary 66
Drop-in Mode and LAN Bypass: Transparent Deployment 66
QoS: Clearer VoIP 66
Per-User Bandwidth Control 67
High Availability via VRRP 67
USB Modem and Android Tethering 68
Built-In Remote User VPN Support 68
SIM-card USSD support 69
KVM Virtualization 69
DPI Engine 70
NetFlow 70
Wi-Fi Air Monitoring 70
SP Default Configuration 70
Installation 71
Preparation 71
Constructing the Network 71
Configuring the Network Environment 72
Mounting the Unit 73
Wall Mount 73
Car Mount 73
IP67 Installation Guide 73
PDX Accessory Kit Installation Guide 74
Connecting to the Web Admin Interface 81

SpeedFusion Cloud 83
Activate SpeedFusion Cloud Service 83
Enable SpeedFusion Cloud 86
Connect Clients to Cloud 93
Link Wi-Fi to Cloud 94
Optimize Cloud Application 96
Configuring the LAN Interface(s) 97
Basic Settings 97
Port Settings 109
Captive Portal 110
Configuring the WAN Interface(s) 113
Ethernet WAN 114
DHCP Connection 116
Static IP Connection 119
PPPoE Connection 121
L2TP Connection 122
GRE Connection 124
Cellular WAN 126
Wi-Fi WAN 132
Creating Wi-Fi Connection Profiles 138
WAN Health Check 139
Dynamic DNS Settings 141
Advanced Wi-Fi Settings 143
MediaFast Configuration 147
Setting Up MediaFast Content Caching 147
Scheduling Content Prefetching 148
Viewing MediaFast Statistics 151
ContentHub 152
Configuring the ContentHub 152
Configure a website for ContentHub 152
Configure an application for ContentHub 155
Docker 157
KVM 158
Bandwidth Bonding SpeedFusionTM / PepVPN 159
PepVPN 160

The Pepwave Router Behind a NAT Router 165
IPsec VPN 168
IPsec VPN Settings 168
GRE Tunnel 172
Outbound Policy 174
Outbound Policy 174
Adding Rules for Outbound Policy 176
Algorithm: Weighted Balance 180
Algorithm: Persistence 181
Algorithm: Enforced 182
Algorithm: Priority 182
Algorithm: Overflow 183
Algorithm: Least Used 184
Algorithm: Lowest Latency 184
Expert Mode 184
Port Forwarding 186
UPnP / NAT-PMP Settings 187
NAT Mappings 189
QoS 191
User Groups 191
Bandwidth Control 192
Application 192
Application Prioritization 192
Prioritization for Custom Applications 192
DSL/Cable Optimization 193
Firewall 194
Outbound and Inbound Firewall Rules 195
Access Rules 195
Apply Firewall Rules to PepVpn Traffic 199
Intrusion Detection and DoS Prevention 199
Content Blocking 200
Application Blocking 200
Web Blocking 200
Customized Domains 201
Exempted User Groups 201
Exempted Subnets 201

URL Logging 201
Routing Protocols 202
OSPF & RIPv2 202
BGP 204
Remote User Access 209
L2TP with IPsec 209
OpenVPN 209
PPTP 210
Authentication Methods 210
Miscellaneous Settings 212
High Availability 212
Certificate Manager 215
Service Forwarding 216
SMTP Forwarding 216
Web Proxy Forwarding 217
DNS Forwarding 218
Custom Service Forwarding 218
Service Passthrough 218
UART 220
GPS Forwarding 222
Ignition Sensing 222
Ignition Sensing installation 223
GPIO Menu 225
NTP Server 226
Grouped Networks 226
Remote SIM Management 228
SIM Toolkit 230
AP 232
AP Controller 232
Wireless SSID 232
Wireless Mesh 236
Settings 237
AP Controller Status 243
Info 243
Access Point (Usage) 245
Wireless SSID 247
Mesh / WDS 248

Wireless Client 249
Nearby Device 250
Event Log 251
Toolbox 252
System Settings 253
Admin Security 253
Firmware 256
Time 259
Schedule 259
Email Notification 260
Event Log 264
SNMP 265
SMS Control 267
InControl 268
Configuration 268
Feature Add-ons 269
Reboot 270
Tools 271
Ping 271
Traceroute Test 272
PepVPN Test 272
Wake-on-LAN 273
CLI (Command Line Interface Support) 273
Status 274
Device 274
GPS Data 276
Active Sessions 276
Client List 278
WINS Client 279
UPnP / NAT-PMP 279
OSPF & RIPv2 280
BGP 280
SpeedFusion Status 281
Event Log 283
WAN Quality 285
Usage Reports 286

Real-Time 286
Hourly 287
Daily 287
Monthly 288
Appendix A: Restoration of Factory Defaults 291
Appendix B: FusionSIM Manual 292
Appendix C: Declaration 304

Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN
connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi,
external WiMAX dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for many
different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are
suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are
suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their features
and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction!
https://youtu.be/13M-JHRAICA

Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G 3rd generation standards for wireless communications (e.g., HSDPA)
4G 4th generation standards for wireless communications (e.g., LTE)
DHCP Dynamic Host Configuration Protocol
DNS Domain Name System
EVDO Evolution-Data Optimized
FQDN Fully Qualified Domain Name
HSDPA High-Speed Downlink Packet Access
HTTP Hyper-Text Transfer Protocol
ICMP Internet Control Message Protocol
IP Internet Protocol
LAN Local Area Network
MAC Address Media Access Control Address
MTU Maximum Transmission Unit
MSS Maximum Segment Size
NAT Network Address Translation
PPPoE Point to Point Protocol over Ethernet
QoS Quality of Service
SNMP Simple Network Management Protocol
TCP Transmission Control Protocol
UDP User Datagram Protocol
VPN Virtual Private Network
VRRP Virtual Router Redundancy Protocol

WAN Wide Area Network
WINS Windows Internet Name Service
WLAN Wireless Local Area Network
1Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and they
provide advanced features to enhance Internet access. Our Max BR wireless routers support
multiple SIM cards. They can be configured to switch from using one SIM card to another SIM
card according to different criteria, including wireless network reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow
simultaneous wireless Internet connections through multiple wireless networks. The wireless
Internet connections can be bonded together using our SpeedFusion technology. This allows
better reliability, larger bandwidth, and increased wireless coverage compared to use only one
4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For more
information, please see peplink.com/products.
1.1 Supported Network Features
1.1.1 WAN
●Ethernet WAN connection in full/half duplex
●Static IP support for PPPoE
●Built-in cellular modems
●USB mobile connection(s)
●Wi-Fi WAN connection
●Network address translation (NAT)/port address translation (PAT)
●Inbound and outbound NAT mapping
●IPsec NAT-T and PPTP packet passthrough
●MAC address clone and passthrough
●Customizable MTU and MSS values
●WAN connection health check
●Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-ip.org,
tzo.com and DNS-O-Matic)
●Ping, DNS lookup, and HTTP-based health check

1.1.2 LAN
●Wi-Fi AP
●Ethernet LAN ports
●DHCP server on LAN
●Extended DHCP option support
●Static routing rules
●VLAN on LAN support
1.1.3 VPN
●PepVPN with SpeedFusionTM
●PepVPN performance analyzer
●X.509 certificate support
●VPN load balancing and failover among selected WAN connections
●Bandwidth bonding and failover among selected WAN connections
●IPsec VPN for network-to-network connections (works with Cisco and Juniper)
●Ability to route Internet traffic to a remote VPN peer
●Optional pre-shared key setting
●SpeedFusionTM throughput, ping, and traceroute tests
●PPTP server
●PPTP and IPsec passthrough
1.1.4 Firewall
●Outbound (LAN to WAN) firewall rules
●Inbound (WAN to LAN) firewall rules per WAN connection
●Intrusion detection and prevention
●Specification of NAT mappings
●Outbound firewall rules can be defined by destination domain name
1.1.5 Captive Portal
●Splash screen of open networks, login page for secure networks
●Customizable built-in captive portal
●Supports linking to outside page for captive portal
1.1.6 Outbound Policy
●Link load distribution per TCP/UDP service

●Persistent routing for specified source and/or destination IP addresses per TCP/UDP
service
●Traffic prioritization and DSL optimization
●Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
1.1.7 AP Controller
●Configure and manage Pepwave AP devices
●Review the status of connected APs
1.1.8 QoS
●Quality of service for different applications and custom protocols
●User group classification for different service levels
●Bandwidth usage control and monitoring on group- and user-level
●Application prioritization for custom protocols and DSL/cable optimization

1.2 Other Supported Features
●User-friendly web-based administration interface
●HTTP and HTTPS support for web admin interface (default redirection to HTTPS)
●Configurable web administration port and administrator password
●Firmware upgrades, configuration backups, ping, and traceroute via web admin
interface
●Remote web-based configuration (via WAN and LAN interfaces)
●Time server synchronization
●SNMP
●Email notification
●Read-only user access for web admin
●Shared IP drop-in mode
●Authentication and accounting by RADIUS server for web admin
●Built-in WINS servers*
●Syslog
●SIP passthrough
●PPTP packet passthrough
●Event log
●Active sessions
●Client list
●WINS client list *
●UPnP / NAT-PMP
●Real-time, hourly, daily, and monthly bandwidth usage reports and charts
●IPv6 support
●Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, and BR1 variants

2Pepwave MAX Mobile Router Overview
2.1 MAX 700
2.1.1 Panel Appearance
2.1.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red
Boot up error
Green
Ready

Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF Disconnected
Blinking slowly Connecting to network
Blinking Connected to network with traffic
ON
Connected to network without traffic
Wi-Fi AP
OFF
Disabled
Blinking slowly Enabled but no client connected
Blinking Connected to network with traffic
ON Client(s) connected to wireless network
LAN and Ethernet WAN Ports
Green LED ON 10 / 100/ 1000 Mbps
Orange LED
Blinking
Data is transferring
OFF
No data is being transferred or port is not connected
Port Type Auto MDI/MDI-X ports

2.2 MAX HD2
For certification information, please refer to Appendix B: Declaration
2.2.1 Panel Appearance

2.2.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red Boot up error
Green Ready
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN /
Wi-Fi AP
OFF Disabled Intermittent
Blinking slowly Connecting to wireless network(s)
Blinking Connected to wireless network(s) with traffic
ON
Connected to wireless network(s) without traffic
Cellular Indicators
Cellular 1 /
Cellular 2
OFF Disabled or no SIM card inserted
Blinking slowly Connecting to network(s)
Green
Connected to network(s)
LAN and Ethernet WAN Ports
Green LED ON 1000 Mbps
OFF 10 Mbps / 100 Mbps or port is not connected
Orange LED
ON Port is connected without traffic
Blinking Data is transferring
OFF Port is not connected
Port Type Auto MDI/MDI-X ports

2.3 MAX HD2 IP67
2.3.1 Panel Appearance
2.3.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red Boot up error
Green Ready

2.4 MAX HD2 mini
2.4.1 Panel Appearance
2.4.2 LED Indicators
The statuses indicated by the front panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Blinking red Boot up error
Green Ready
Cellular Indicators
Cellular 1 /
Cellular 2
OFF Disabled or no SIM card inserted
Blinking slowly Connecting to network(s)
Green Connected to network(s)