Pepwave MAX 600 User manual

COPYRIGHT &TRADEMARKS
Specifications are subject to change without notice. Copyright © 2011 Pepwave Ltd. All Rights Reserved. Pepwave and the
Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered
trademarks of their respective owners.
Pepwave MAX Series:
MAX 600 / 700 / HD2
Document Rev. 5.2
September-11

http://www.pepwave.com 2 Copyright @ 2011 Pepwave
Table of Contents
1INTRODUCTION AND SCOPE ...........................................................................................4
2GLOSSARY .......................................................................................................................5
3PRODUCT FEATURES .......................................................................................................6
3.1 SUPPORTED NETWORK FEATURES ........................................................................................................ 6
3.2 OTHER SUPPORTED FEATURES ............................................................................................................ 7
4PEPWAVE MAX MOBILE ROUTER OVERVIEW .................................................................8
4.1 MAX 600 .....................................................................................................................................8
4.2MAX 700 .....................................................................................................................................8
4.3MAX HD2 .................................................................................................................................. 10
5INSTALLATION...............................................................................................................14
5.1 PREPARATION ............................................................................................................................... 14
5.2 CONSTRUCTING THE NETWORK ......................................................................................................... 14
5.3 CONFIGURING THE NETWORK ENVIRONMENT ....................................................................................... 15
5.4MOUNTING THE UNIT.................................................................................................................... 15
6CONNECTING TO WEB ADMIN INTERFACE....................................................................17
7CONFIGURATION OF LAN INTERFACE(S) .......................................................................19
7.1 BASIC SETTINGS............................................................................................................................. 19
7.2 WI-FI AP .................................................................................................................................... 22
8CONFIGURATION OF WAN INTERFACE(S) .....................................................................24
8.1 ETHERNET WAN ..................................................................................................................... 25
8.2 EXPRESS CARD /PC CARD /USB1 /USB2 .................................................................... 32
8.3 WI-FI WAN ........................................................................................................................... 34
8.4 WAN HEALTH CHECK ..................................................................................................................... 37
8.5 BANDWIDTH ALLOWANCE MONITOR .................................................................................................. 39
9WI-FI SETTINGS .............................................................................................................40
9.1 STP (SPANNING TREE PROTOCOL) ..................................................................................................... 42
10 SITE-TO-SITE VPN ..........................................................................................................43
10.1 CONFIGURING A SITE-TO-SITE VPN PROFILE ........................................................................................ 43
10.2 LINK FAILURE DETECTION................................................................................................................. 45
10.3 PEPWAVE MAX BEHIND NAT ROUTER ............................................................................................... 47
10.4 VPN STATUS ................................................................................................................................ 48
11 MANAGEMENT OF OUTBOUND TRAFFIC TO WAN........................................................49
11.1 OUTBOUND POLICY ........................................................................................................................ 50
11.2 CUSTOM RULES FOR OUTBOUND POLICY ............................................................................................. 51

http://www.pepwave.com 3 Copyright @ 2011 Pepwave
12 PORT FORWARDING .....................................................................................................58
12.1 PORT FORWARDING SERVICE ............................................................................................................ 58
12.2 UPNP/NAT-PMP SETTINGS .......................................................................................................... 60
13 NAT MAPPINGS.............................................................................................................61
14 QOS ..........................................................................................................................63
14.1 USER GROUPS .............................................................................................................................. 63
14.2 BANDWIDTH CONTROL.................................................................................................................... 64
14.3 APPLICATION ................................................................................................................................ 65
15 FIREWALL ......................................................................................................................67
15.1 OUTBOUND AND INBOUND FIREWALL ................................................................................................. 67
15.2 INTRUSION DETECTION AND DOSPREVENTION ..................................................................................... 71
16 MISCELLANEOUS SETTINGS...........................................................................................72
16.1 PPTP SERVER ............................................................................................................................... 72
16.2 SERVICE FORWARDING .................................................................................................................... 73
16.3 SERVICE PASSTHROUGH................................................................................................................... 75
17 SYSTEM SETTINGS.........................................................................................................76
17.1 ADMIN SECURITY ........................................................................................................................... 76
17.2 FIRMWARE UPGRADE ..................................................................................................................... 80
17.3 TIME .......................................................................................................................................... 81
17.4 EMAIL NOTIFICATION...................................................................................................................... 82
17.5 REMOTE SYSLOG ........................................................................................................................... 84
17.6 SNMP........................................................................................................................................ 85
17.7 CONFIGURATION ........................................................................................................................... 87
17.8 REBOOT ...................................................................................................................................... 88
17.9 PING TEST.................................................................................................................................... 89
17.10 TRACEROUTE TEST ......................................................................................................................... 90
17.11 VPN TEST.................................................................................................................................... 90
18 STATUS..........................................................................................................................91
18.1 DEVICE........................................................................................................................................ 91
18.2 ACTIVE SESSIONS ........................................................................................................................... 92
18.3 CLIENT LIST .................................................................................................................................. 92
18.4 WINS CLIENT ............................................................................................................................... 93
18.5 SITE-TO-SITE VPN ......................................................................................................................... 93
18.6 UPNP/NAT-PMP ....................................................................................................................... 94
18.7 EVENT LOG .................................................................................................................................. 94
18.8 BANDWIDTH................................................................................................................................. 95
APPENDIX A. RESTORATION OF FACTORY DEFAULTS .............................................................99
APPENDIX B. DECLARATION..................................................................................................100

http://www.pepwave.com 4 Copyright @ 2011 Pepwave
1 Introduction and Scope
The Pepwave MAX Mobile Router provides link aggregation and load balancing across six WAN
connections, allowing a combination of technologies like 3G HSDPA, EVDO, Wi-Fi, external WiMAX
dongle, and Satellite to be utilized to connect to the Internet.
This manual presents how to set up the Pepwave MAX Mobile Router and provides an introduction to the
features and usage of Pepwave MAX Mobile Router.
Tips
Want to know more about Pepwave MAX? Visit our YouTube Channel for a video introduction!
http://www.youtube.com/PeplinkChannel#p/u/1/1ste4dQV-V8

http://www.pepwave.com 5 Copyright @ 2011 Pepwave
2 Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term Definition
3G 3rd Generation family of standards for wireless communications
DHCP Dynamic Host Configuration Protocol
WINS Windows Internet Name Service
DNS Domain Name System
EVDO Evolution-Data Optimized
HSDPA High-Speed Downlink Packet Access
GRE Generic Routing Encapsulation
HTTP Hyper-Text Transfer Protocol
ICMP Internet Control Message Protocol
IP Internet Protocol
LAN Local Area Network
MAC Address Media Access Control Address
MTU Maximum Transmission Unit
MSS Maximum Segment Size
NAT Network Address Translation
PPPoE Point to Point Protocol over Ethernet
QoS Quality of Service
SNMP Simple Network Management Protocol
TCP Transmission Control Protocol
UDP User Datagram Protocol
VPN Virtual Private Network
VRRP Virtual Router Redundancy Protocol
WAN Wide Area Network
Wi-Fi Trademark of Wi-Fi Alliance for certified products based on IEEE 802.11
standards
WiMAX Worldwide Interoperability for Microwave Access

http://www.pepwave.com 6 Copyright @ 2011 Pepwave
3 Product Features
Pepwave MAX enables all LAN users to share broadband Internet connections, and provide advanced
features to enhance Internet access. The following is the list of supported features on Pepwave MAX
Mobile Router:
3.1 Supported Network Features
3.1.1 WAN
Ethernet WAN Connection in Full/Half Duplex
USB WAN connections
PC Card WAN connection
Express Card WAN connection
Wi-Fi WAN connection
Network Address Translation (NAT) / Port Address Translation (PAT)
Inbound and Outbound NAT mapping
IPsec NAT-T and PPTP packet passthrough
MAC address clone and passthrough
Customizable MTU and MSS values
WAN connection health check
Dynamic DNS (Supported service providers: changeip.com, dyndns.org, no-ip.org and tzo.com)
3.1.2 LAN
Wi-Fi AP
Ethernet LAN ports
DHCP server on LAN
Static routing rules
3.1.3 VPN
Secure Site-to-Site VPN
VPN load balancing and failover among selected WAN connections
Site-to-Site VPN bandwidth bonding
Ability to route Internet traffic to a remote VPN peer
Optional pre-shared key setting
Site-to-Site VPN Throughput, Ping and Traceroute Test
PPTP server
PPTP and IPsec passthrough
3.1.4 Firewall
Outbound (LAN to WAN) firewall rules
Inbound (WAN to LAN) firewall rules per WAN connection
Intrusion detection and prevention
Specification of NAT mappings

http://www.pepwave.com 7 Copyright @ 2011 Pepwave
3.1.5 Outbound Policy
Link load distribution per TCP/UDP service
Persistent routing for specified source and/or destination IP addresses per TCP/UDP service
Traffic Prioritization and DSL optimization
Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
3.1.6 QoS
Quality of Service for different applications and custom protocols
User Group classification for different service levels
Bandwidth usage control and monitoring on group- and user- level
Application Prioritization for custom protocols and DSL optimization
3.2 Other Supported Features
User-friendly web-based administration interface
HTTP and HTTPS support for Web Admin Interface
Configurable web administration port and administrator password
Firmware upgrades, configuration backups, Ping, and Traceroute via Web Admin Interface
Remote web based configuration (via WAN and LAN interfaces)
Time server synchronization
SNMP
Email notification
Read-only user for Web Admin
Authentication and Accounting by RADIUS server for Web Admin
Built-in WINS Servers
Syslog
SIP passthrough
PPTP packet passthrough
Event Log
Active Sessions
Client List
WINS Client List
UPnP / NAT-PMP
Real-Time, Daily and Monthly Bandwidth Usage reports and charts

http://www.pepwave.com 8 Copyright @ 2011 Pepwave
4 Pepwave MAX Mobile Router Overview
4.1 MAX 600
4.1.1 Front Panel Appearance
4.1.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Power and Status Indicators
Power OFF Power off
Green Power on
Status
OFF System initializing
Red Booting up or busy
Green Ready state
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF Disabled Intermittent
Blinking Trying to connect but not connected to any wireless network
ON Connected to wireless network(s) without traffic
Continuous Blinking Transferring data
Wi-Fi AP
OFF Disabled Intermittent
Blinking Enabled but no client associated
ON Client(s) associated to wireless network
Continuous Blinking Transferring data to wireless network
Wi-Fi AP LED
LAN Ports
Ethernet WAN Port
PC Card Slot Express Card Slot
Wi-Fi WAN Connector
Wi-Fi LAN Connector USB Ports
Status LED
Power LED
Wi-Fi WAN LED
Reset Button

http://www.pepwave.com 9 Copyright @ 2011 Pepwave
LAN and Ethernet WAN Ports
Green LED ON 100 Mbps
OFF 10 Mbps
Yellow LED
Solid Port is connected without traffic
Blinking Data is transferring
OFF Port is not connected
Port Type Auto MDI/MDI-X ports
4.1.3 Rear Panel Appearance
Power Connector
Terminal Block

http://www.pepwave.com 10 Copyright @ 2011 Pepwave
4.2 MAX 700
4.2.1 Front Panel Appearance
4.2.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Green Ready state
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN
OFF Disabled Intermittent
Blinking Trying to connect but not connected to any wireless network
ON Connected to wireless network(s) without traffic
Continuous Blinking Transferring data
Wi-Fi AP
OFF Disabled Intermittent
Blinking Enabled but no client associated
ON Client(s) associated to wireless network
Continuous Blinking Transferring data to wireless network
LAN Ports
Ethernet WAN Port
Wi-Fi WAN Connector
Wi-Fi LAN Connector
USB Port
Wi-Fi AP LED
Wi-Fi WAN LED
Reset Button
Power LED
Terminal Block
Status LED

http://www.pepwave.com 11 Copyright @ 2011 Pepwave
LAN and Ethernet WAN Ports
Green LED ON 1000 Mbps
OFF 10/100 Mbps
Yellow LED
Solid Port is connected without traffic
Blinking Data is transferring
OFF Port is not connected
Port Type Auto MDI/MDI-X ports
4.2.3 Rear Panel Appearance
Power Connector
USB Ports
Kingston Lock

http://www.pepwave.com 12 Copyright @ 2011 Pepwave
4.3 MAX HD2
4.3.1 Front Panel Appearance
4.3.2 LED Indicators
The statuses indicated by the Front Panel LEDs are as follows:
Status Indicators
Status
OFF System initializing
Red Booting up or busy
Green Ready state
Wi-Fi AP and Wi-Fi WAN Indicators
Wi-Fi WAN /
Cellular 1 /
Cellular 2
OFF Disabled Intermittent
Blinking Trying to connect but not connected to any wireless network
ON Connected to wireless network(s) without traffic
Continuous Blinking Transferring data
LAN and Ethernet WAN Ports
Green LED ON 1000 Mbps
OFF 10/100 Mbps
Yellow LED
Solid Port is connected without traffic
Blinking Data is transferring
OFF Port is not connected
Port Type Auto MDI/MDI-X ports
LAN Ports
Ethernet WAN Port
Wi-Fi WAN Connector
Wi-Fi AP Connector
USB Port
Status LED
Wi-Fi WAN LED
Reset Button
Cellular WAN LED
Terminal Block

http://www.pepwave.com 13 Copyright @ 2011 Pepwave
4.3.3 Rear Panel Appearance
Power Connector
Cellular SIM SlotsKingston Lock
Cellular Antenna Connectors

http://www.pepwave.com 14 Copyright @ 2011 Pepwave
5 Installation
Connecting the Network with Pepwave MAX Mobile Router:
5.1 Preparation
Before installing Pepwave MAX Mobile Router, please prepare the following:
At least one Internet/WAN access account and/or Wi-Fi access information.
For each network connection,
Ethernet WAN: A 10/100BaseT UTP cable with RJ45 connector
USB: A USB modem
Wi-Fi WAN: A Wi-Fi antenna
PC Card / Express Card WAN: A PC Card/Express Card for the corresponding card slot.
A computer with TCP/IP network protocol and a web browser installed. Supported browsers
include Microsoft Internet Explorer 7.0 or above, Mozilla Firefox 3.0 or above, Apple Safari 3.1.1
or above, and Google Chrome 2.0 or above.
5.2 Constructing the Network
At the high level, construct the network according to the following steps:
1. With an Ethernet cable, connect a computer to one of the LAN ports on the Pepwave MAX.
Repeat with different cables for up to 4 computers to be connected.
2. With another Ethernet cable or a USB modem / Wi-Fi antenna / PC Card / Express Card, connect
it to one of the WAN ports on the Pepwave MAX. Repeat the same procedure for other WAN
ports.
3. Connect the power adapter to the power connector on the rear panel of Pepwave MAX, and then
plug it into a power outlet.
The following figure schematically illustrates the configuration that results:

http://www.pepwave.com 15 Copyright @ 2011 Pepwave
5.3 Configuring the Network Environment
To ensure that Pepwave MAX works properly in the LAN environment and can access the Internet via the
WAN connections, please refer to the following setup procedures:
LAN Configuration
For basic configuration, refer to Section 7, Connecting to Web Admin Interface.
For advanced configuration, go to Section 8, Configuration of LAN Interface(s).
WAN Configuration
For basic configuration, refer to Section 7, Connecting to Web Admin Interface.
For advanced configuration, go to Section 9, Configuration of WAN Interface(s).
5.4 Mounting the Unit
5.4.1 Wall Mount
Pepwave MAX can be mounted on the wall by screwing. After adding the screw on the wall, slide the
MAX in the screw hole socket as indicated below.
Recommeneded Screw Specification: M3.5 x 20mm, Head Diameter 6mm, Head Thickness 2.4mm
Wall Mount
Screw Socket
Wall Mount
Screw Socket

http://www.pepwave.com 16 Copyright @ 2011 Pepwave
5.4.2 Car Mount
Pepwave MAX can be mounted on a flat surface using the included car mounting plate. Place the car
mount according the label’s direction, and screw it onto the device.
After mounting the plate on the back of the device, add screw on the plate on the flat surface.
Mounting Plate
Screw Holes

http://www.pepwave.com 17 Copyright @ 2011 Pepwave
6 Connecting to Web Admin Interface
1. Start a web browser on a computer that is connected with Pepwave MAX through LAN.
2. To connect to Web Admin Interface of Pepwave MAX, enter the following LAN IP address in the
address field of the web browser:
http://192.168.50.1
(This is the default LAN IP address of Pepwave MAX.)
3. Enter the following to access the Web Admin
Interface.
User Name: admin
Password: admin
(This is the default Username and Password
of Pepwave MAX. The Admin and Read-only
User Password can be changed at System >
Admin Security of the Web Admin Interface.)
4. After successful login, the Dashboard of Web Admin Interface will be displayed. It looks similar
to the following:

http://www.pepwave.com 18 Copyright @ 2011 Pepwave
Dashboard shows the current WAN, LAN, Wi-Fi AP settings and statuses. You can simply change
priority of WAN connections and switch on / off Wi-Fi AP in here. For further information about how-to set
up these connections, please refer to Section 8 and 9.
Device Information shows the details about the device, including Model name, Firmware version and
Uptime. For further information please refer to Section 19.
Important Note
Configuration changes (e.g. WAN, LAN, Admin settings, etc.) will only take effect after clicking the
Save button at the bottom of each page. The Apply Changes button causes the changes to be saved
and applied.

http://www.pepwave.com 19 Copyright @ 2011 Pepwave
7 Configuration of LAN Interface(s)
7.1 Basic Settings
The LAN Interface settings are located in Network > LAN > Basic Settings:

http://www.pepwave.com 20 Copyright @ 2011 Pepwave
IP Settings
IP Address &
Subnet Mask The IP address of Pepwave MAX on LAN.
Speed
This setting specifies the speed of the LAN Ethernet Port.
By default, Auto is selected and the appropriate data speed is automatically
detected by Pepwave MAX.
In the event of negotiation issues, the port speed can be manually specified to
circumvent the issues. You can also choose whether or not to advertise the
speed to the peer by selecting the Advertise Speed checkbox.
DHCP Server Settings
DHCP Server
When this setting is enabled, the DHCP server of Pepwave MAX automatically
assigns an IP address to each computer that is connected via LAN and is
configured to obtain an IP address via DHCP.
Pepwave MAX’s DHCP server can prevent IP address collision on LAN.
IP Range &
Subnet Mask This setting allocates a range of IP address that will be assigned to LAN
computers by the DHCP server of Pepwave MAX.
Lease Time
This setting specifies the length of time throughout which an IP address of a
DHCP client remains valid. Upon expiration of the Lease Time, the assigned IP
address will no longer be valid and the renewal of the IP address assignment will
be required.
DNS Servers This option allows you to input the DNS server addresses to be offered to the
DHCP clients. If Assign DNS server automatically is selected, the Pepwave
MAX’s built-in DNS server address (i.e. LAN IP address) will be offered.
WINS Server
This option allows you to specify the Windows Internet Name Service (WINS)
server. You may choose to use the built-in WINS server or external WINS
servers.
When this unit is Site-to-Site VPN connected, other VPN peers can share this
unit's built-in WINS server by entering this unit's LAN IP address in their DHCP
WINS Servers setting. Therefore, all PC clients in the VPN can resolve the
NetBIOS names of other clients in remote peers.
If you have enabled this option, a list of WINS clients will be displayed at Status >
WINS Clients.
Extended DHCP
Option
In addition to standard DHCP options (e.g. DNS server address, gateway
address, subnet mask), you can specify the value of additional Extended DHCP
Options defined in RFC 2132. In this case, you can pass additional configuration
information to LAN hosts.
To define an Extended DHCP Option, click the Add button, choose the option that
you want to define and enter its value. For values that are in IP address list
format, you can enter one IP address per line in the provided text area input
control. Each option is allowed to be defined once only.
DHCP
Reservation This setting reserves the assignment of fixed IP addresses for a list of computers
on the LAN. The computers to be assigned fixed IP addresses on the LAN are