Pepwave MAX and SURF User manual

COPYRIGHT &TRADEMARKS
Specifications are subject to change without notice. Copyright © 2016 Pepwave Ltd. All Rights Reserved.
Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may
be trademarks or registered trademarks of their respective owners.
Pepwave MAX and Surf
User Manual
Pepwave Products:
MAX 700/HD2/HD2 IP67/HD2 mini/HD4/Transit/BR1/BR1 Slim/BR1 ENT/BR1 Pro
LTE/BR1 IP55/BR2 IP55/On-The-Go/MAX HD2/HD4 with MediaFast/Device
Connector/ Surf SOHO
Pepwave Firmware 6.3
May 2016

Pepwave MAX and Surf User Manual
http://www.pepwave.com
2
Copyright @ 2016 Pepwave
Table of Contents
1INTRODUCTION AND SCOPE............................................................................................. 6
2GLOSSARY........................................................................................................................ 7
3PRODUCT FEATURES ........................................................................................................ 8
3.1 SUPPORTED NETWORK FEATURES.................................................................................... 8
3.2 OTHER SUPPORTED FEATURES ...................................................................................... 10
4PEPWAVE MAX MOBILE ROUTER OVERVIEW.................................................................. 11
4.1 MAX 700................................................................................................................ 11
4.2 MAX HD2............................................................................................................... 13
4.3 MAX HD2 IP67 ....................................................................................................... 15
4.4 MAX HD2 MINI ........................................................................................................ 16
4.5 MAX TRANSIT........................................................................................................... 18
4.6 MAX HD4............................................................................................................... 19
4.7 MAX BR1................................................................................................................ 20
4.8 MAX BR1 SLIM ........................................................................................................ 22
4.9 MAX BR1 ENT ........................................................................................................ 24
4.10 MAX BR1 PRO LTE................................................................................................... 25
4.11 MAX BR1/2 IP55 .................................................................................................... 26
4.12 MAX ON-THE-GO..................................................................................................... 28
4.13 SURF SOHO ............................................................................................................. 29
5ADVANCED FEATURE SUMMARY.................................................................................... 31
5.1 DROP-IN MODE AND LAN BYPASS:TRANSPARENT DEPLOYMENT ........................................ 31
5.2 QOS: CLEARER VOIP .................................................................................................. 31
5.3 PER-USER BANDWIDTH CONTROL ................................................................................. 32
5.4 HIGH AVAILABILITY VIA VRRP ...................................................................................... 32
5.5 USB MODEM AND ANDROID TETHERING........................................................................ 33
5.6 BUILT-IN REMOTE USER VPN SUPPORT ......................................................................... 33
5.7 SIM-CARD USSD SUPPORT.......................................................................................... 34
6INSTALLATION ............................................................................................................... 35
6.1 PREPARATION............................................................................................................ 35
6.2 CONSTRUCTING THE NETWORK ..................................................................................... 36
6.3 CONFIGURING THE NETWORK ENVIRONMENT .................................................................. 37
7MOUNTING THE UNIT .................................................................................................... 38
7.1 WALL MOUNT........................................................................................................... 38
7.2 CAR MOUNT ............................................................................................................. 38
7.3 IP67 INSTALLATION GUIDE .......................................................................................... 38

Pepwave MAX and Surf User Manual
http://www.pepwave.com
3
Copyright @ 2016 Pepwave
8CONNECTING TO THE WEB ADMIN INTERFACE ............................................................... 39
9CONFIGURING THE LAN INTERFACE(S)............................................................................ 41
9.1 BASIC SETTINGS ......................................................................................................... 41
9.2 CAPTIVE PORTAL ........................................................................................................ 51
10 CONFIGURING THE WAN INTERFACE(S) .......................................................................... 53
10.1 ETHERNET WAN ....................................................................................................... 54
10.2 CELLULAR WAN ........................................................................................................ 62
10.3 WI-FI WAN ............................................................................................................. 67
10.4 WAN HEALTH CHECK ................................................................................................. 73
10.5 DYNAMIC DNS SETTINGS ............................................................................................ 75
11 ADVANCED WI-FI SETTINGS............................................................................................ 78
12 MEDIAFAST CONFIGURATION ........................................................................................ 81
12.1 SETTING UP MEDIAFAST CONTENT CACHING .................................................................. 81
12.2 SCHEDULING CONTENT PREFETCHING............................................................................. 82
12.3 VIEWING MEDIAFAST STATISTICS .................................................................................. 83
13 BANDWIDTH BONDING SPEEDFUSIONTM / PEPVPN......................................................... 85
13.1 PEPVPN .................................................................................................................. 86
13.2 THE PEPWAVE ROUTER BEHIND A NAT ROUTER .............................................................. 92
13.3 SPEEDFUSIONTM STATUS ............................................................................................. 93
14 IPSEC VPN...................................................................................................................... 94
14.1 IPSEC VPN SETTINGS.................................................................................................. 94
15 OUTBOUND POLICY MANAGEMENT ............................................................................... 98
15.1 OUTBOUND POLICY .................................................................................................... 98
15.2 CUSTOM RULES FOR OUTBOUND POLICY ........................................................................ 99
16 INBOUND ACCESS .........................................................................................................108
16.1 PORT FORWARDING SERVICE ...................................................................................... 108
17 NAT MAPPINGS ............................................................................................................111
18 QOS 113
18.1 USER GROUPS ......................................................................................................... 113
18.2 BANDWIDTH CONTROL.............................................................................................. 114
18.3 APPLICATION........................................................................................................... 114
19 FIREWALL .....................................................................................................................116
19.1 OUTBOUND AND INBOUND FIREWALL RULES ................................................................. 116
19.2 CONTENT BLOCKING ................................................................................................. 121
19.3 OSPF &RIPV2....................................................................................................... 122

Pepwave MAX and Surf User Manual
http://www.pepwave.com
4
Copyright @ 2016 Pepwave
19.4 REMOTE USER ACCESS .............................................................................................. 124
MISCELLANEOUS SETTINGS.................................................................................................126
19.5 HIGH AVAILABILITY ................................................................................................... 126
19.6 PPTP SERVER ......................................................................................................... 129
19.7 CERTIFICATE MANAGER............................................................................................. 130
19.8 SERVICE FORWARDING .............................................................................................. 130
19.9 SERVICE PASSTHROUGH............................................................................................. 133
19.10 GPS FORWARDING................................................................................................... 134
20 AP CONTROLLER ...........................................................................................................135
20.1 WIRELESS SSID ....................................................................................................... 135
20.2 SETTINGS................................................................................................................ 139
20.3 TOOLBOX................................................................................................................ 143
21 SYSTEM SETTINGS.........................................................................................................144
21.1 ADMIN SECURITY ..................................................................................................... 144
21.2 FIRMWARE.............................................................................................................. 148
21.3 TIME...................................................................................................................... 149
21.4 SCHEDULE............................................................................................................... 149
21.5 EMAIL NOTIFICATION................................................................................................ 150
21.6 EVENT LOG ............................................................................................................. 152
21.7 SNMP................................................................................................................... 154
21.8 INCONTROL............................................................................................................. 156
21.9 CONFIGURATION ...................................................................................................... 156
21.10 FEATURE ADD-ONS................................................................................................... 158
21.11 REBOOT ................................................................................................................. 158
21.12 PING...................................................................................................................... 159
21.13 TRACEROUTE TEST.................................................................................................... 160
21.14 PEPVPN TEST ......................................................................................................... 160
21.15 WAKE-ON-LAN....................................................................................................... 161
21.16 CLI (COMMAND LINE INTERFACE SUPPORT).................................................................. 161
22 STATUS.........................................................................................................................162
22.1 DEVICE................................................................................................................... 162
22.2 ACTIVE SESSIONS ..................................................................................................... 164
22.3 CLIENT LIST ............................................................................................................. 166
22.4 WINS CLIENT ......................................................................................................... 166
22.5 UPNP/NAT-PMP ................................................................................................. 167
22.6 SPEEDFUSION STATUS............................................................................................... 167
22.7 EVENT LOG ............................................................................................................. 171
22.8 BANDWIDTH ........................................................................................................... 171
APPENDIX A. RESTORATION OF FACTORY DEFAULTS......................................................177

Pepwave MAX and Surf User Manual
http://www.pepwave.com
5
Copyright @ 2016 Pepwave
APPENDIX B. CASE STUDIES...........................................................................................177
MPLS ALTERNATIVE............................................................................................................. 177
NETWORK TRAFFIC DISTRIBUTION ........................................................................................... 180
SINGAPORE NATIONAL DAY PARADE 2015 ............................................................................... 182
UNOLS (UNIVERSITY-NATIONAL OCEANOGRAPHIC LABORATORY SYSTEM)..................................... 184
APPENDIX C. PRODUCT DATASHEETS ............................................................................191

Pepwave MAX and Surf User Manual
http://www.pepwave.com
6
Copyright @ 2016 Pepwave
1Introduction and Scope
Pepwave routers provide link aggregation and load balancing across multiple WAN
connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE,
Wi-Fi, external WiMAX dongle, and satellite to be utilized to connect to the Internet.
The MAX wireless SD-WAN router series has a wide range of products suitable for
many different deployments and markets. Entry level SD-WAN models such as the MAX
BR1 are suitable for SMEs or branch offices. High-capacity SD-WAN routers such as
the MAX HD2 are suitable for larger organizations and head offices.
This manual covers setting up Pepwave routers and provides an introduction to their
features and usage.
Tips
Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction!
http://youtu.be/UCkVQThLKO4

Pepwave MAX and Surf User Manual
http://www.pepwave.com
7
Copyright @ 2016 Pepwave
2Glossary
The following terms, acronyms, and abbreviations are frequently used in this manual:
Term
Definition
3G
3rd Generation standards for wireless communications
4G
4th Generation standards for wireless communications
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
EVDO
Evolution-Data Optimized
HSDPA
High-Speed Downlink Packet Access
HTTP
Hyper-Text Transfer Protocol
ICMP
Internet Control Message Protocol
IP
Internet Protocol
LAN
Local Area Network
MAC Address
Media Access Control Address
MTU
Maximum Transmission Unit
MSS
Maximum Segment Size
NAT
Network Address Translation
PPPoE
Point to Point Protocol over Ethernet
QoS
Quality of Service
SNMP
Simple Network Management Protocol
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
VPN
Virtual Private Network
VRRP
Virtual Router Redundancy Protocol
WAN
Wide Area Network
WINS
Windows Internet Name Service
WLAN
Wireless Local Area Network

Pepwave MAX and Surf User Manual
http://www.pepwave.com
8
Copyright @ 2016 Pepwave
3Product Features
Pepwave routers enable all LAN users to share broadband Internet connections, and
they provide advanced features to enhance Internet access. Our Max BR wireless
routers support multiple SIM cards. They can be configured to switch from using one
SIM card to another SIM card according to different criteria, including wireless network
reliability and data usage.
Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and
allow simultaneous wireless Internet connections through multiple wireless networks.
The wireless Internet connections can be bonded together using our SpeedFusion
technology. This allows better reliability, larger bandwidth, and increased wireless
coverage are comparing to use only one 4G LTE modem.
Below is a list of supported features on Pepwave routers. Features vary by model. For
more information, please see peplink.com/products.
3.1 Supported Network Features
3.1.1 WAN
Ethernet WAN connection in full/half duplex
Static IP support for PPPoE
Built-in HSPA and EVDO cellular modems
USB mobile connection(s)
Wi-Fi WAN connection
Network address translation (NAT)/port address translation (PAT)
Inbound and outbound NAT mapping
IPsec NAT-T and PPTP packet passthrough
MAC address clone and passthrough
Customizable MTU and MSS values
WAN connection health check
Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-
ip.org, tzo.com and DNS-O-Matic)
Ping, DNS lookup, and HTTP-based health check
3.1.2 LAN
Wi-Fi AP
Ethernet LAN ports
DHCP server on LAN
Extended DHCP option support
Static routing rules
VLAN on LAN support

Pepwave MAX and Surf User Manual
http://www.pepwave.com
9
Copyright @ 2016 Pepwave
3.1.3 VPN
PepVPN with SpeedFusionTM
PepVPN performance analyzer
X.509 certificate support
VPN load balancing and failover among selected WAN connections
Bandwidth bonding and failover among selected WAN connections
IPsec VPN for network-to-network connections (works with Cisco and Juniper
only)
Ability to route Internet traffic to a remote VPN peer
Optional pre-shared key setting
SpeedFusionTM throughput, ping, and traceroute tests
PPTP server
PPTP and IPsec passthrough
3.1.4 Firewall
Outbound (LAN to WAN) firewall rules
Inbound (WAN to LAN) firewall rules per WAN connection
Intrusion detection and prevention
Specification of NAT mappings
Outbound firewall rules can be defined by destination domain name
3.1.5 Captive Portal
Splash screen of open networks, login page for secure networks
Customizable built-in captive portal
Supports linking to outside page for captive portal
3.1.6 Outbound Policy
Link load distribution per TCP/UDP service
Persistent routing for specified source and/or destination IP addresses per
TCP/UDP service
Traffic prioritization and DSL optimization
Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms
3.1.7 AP Controller
Configure and manage Pepwave AP devices

Pepwave MAX and Surf User Manual
http://www.pepwave.com
10
Copyright @ 2016 Pepwave
Review the status of connected APs
3.1.8 QoS
Quality of service for different applications and custom protocols
User group classification for different service levels
Bandwidth usage control and monitoring on group- and user-level
Application prioritization for custom protocols and DSL/cable optimization
3.2 Other Supported Features
User-friendly web-based administration interface
HTTP and HTTPS support for web admin interface
Configurable web administration port and administrator password
Firmware upgrades, configuration backups, ping, and traceroute via web admin
interface
Remote web-based configuration (via WAN and LAN interfaces)
Time server synchronization
SNMP
Email notification
Read-only user for web admin
Shared IP drop-in mode
Authentication and accounting by RADIUS server for web admin
Built-in WINS servers*
Syslog
SIP passthrough
PPTP packet passthrough
Event log
Active sessions
Client list
WINS client list *
UPnP / NAT-PMP
Real-time, hourly, daily, and monthly bandwidth usage reports and charts
IPv6 support
Support USB tethering on Android 2.2+ phones
* Not supported on MAX Surf-On-The-Go, Surf SOHO, and BR1 variants