Pepwave MAX User Manual - Peplink

1 Pepwave MAX User Manual Pepwave Products: MAX 700 / HD2 / HD2 IP67 / HD2 mini / HD4 / Transit / BR1 Classic / BR1 MK2 / BR1 Slim / BR1 ENT / BR1 M2M / BR1 Mini / BR1 Pro LTE / BR1 IP55 / BR2 IP55 / On-The-Go / MAX HD2 / HD4 with MediaFast Pepwave Firmware 7 January 2018 Copyright & Trademarks Specifications are subject to change without notice. Copyright 2018 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners. Table of Contents Introduction and Scope8 Glossary9 Product Features10 Supported Network Features10 WAN10 LAN11 VPN11 Firewall12 Captive Portal12 Outbound Policy12 AP Controller12 QoS12 Other Supported Features13 Pepwave MAX Mobile Router Overview14 MAX 70014 MAX HD216 MAX HD2 IP6718 MAX HD2 mini19 MAX Transit20 MAX HD4 / HD2 and HD4 with MediaFast22 MAX BR1 Classic23 MAX BR1 MK225 MAX BR1 Slim26 MAX BR1 Mini27 MAX BR1 M2M29 MAX BR1 ENT31 MAX BR1 Pro LTE32 MAX Hotspot34 2 Copyright @ 2018 Pepwave MAX BR1/2 IP5536 MAX On-The-Go37 Advanced Feature Summary39 Drop-in Mode and LAN Bypass: Transparent Deployment39 QoS.

2 Clearer VoIP40 Per-User Bandwidth Control41 High Availability via VRRP41 USB Modem and Android Tethering42 Built-In Remote User VPN Support43 SIM-card USSD support44 Installation44 Preparation44 Constructing the Network45 Configuring the Network Environment46 Mounting the Unit46 Wall Mount46 Car Mount46 IP67 Installation Guide47 Connecting to the Web Admin Interface47 Configuring the LAN Interface(s)48 Basic Settings48 Port Settings59 Captive Portal59 Configuring the WAN Interface(s)62 Ethernet WAN63 DHCP Connection65 Static IP Connection66 PPPoE Connection67 L2TP Connection69 3 Copyright @ 2018 Pepwave Cellular WAN70 Wi-Fi WAN76 Creating Wi-Fi Connection Profiles83 WAN Health Check84 Dynamic DNS Settings87 Advanced Wi-Fi Settings88 MediaFast Configuration93 Setting Up MediaFast Content Caching93 Scheduling Content Prefetching94 Viewing MediaFast Statistics95 Bandwidth Bonding SpeedFusionTM / PepVPN97 PepVPN97 The Pepwave Router Behind a NAT Router104 SpeedFusionTM Status105 IPsec VPN105 IPsec VPN Settings105 Outbound Policy Management110 Outbound Policy110 Custom Rules for Outbound Policy112 Algorithm: Weighted Balance112 Algorithm.

3 Persistence114 Algorithm: Enforced115 Algorithm: Priority115 Algorithm: Overflow116 Algorithm: Least Used116 Algorithm: Lowest Latency117 Expert Mode117 Inbound Access118 Port Forwarding Service118 4 Copyright @ 2018 Pepwave UPnP / NAT-PMP Settings120 NAT Mappings120 QoS122 User Groups122 Bandwidth Control123 Application124 Application Prioritization124 Prioritization for Custom Applications124 DSL/Cable Optimization125 Firewall125 Outbound and Inbound Firewall Rules126 Access Rules126 Apply Firewall Rules to PepVpn Traffic129 Intrusion Detection and DoS Prevention130 Content Blocking131 Application Blocking131 Web Blocking132 Customized Domains132 Exempted User Groups132 Exempted Subnets132 URL Logging132 OSPF & RIPv2133 Remote User Access135 Miscellaneous Settings137 High Availability137

4 PPTP Server141 Certificate Manager143 Service Forwarding143 SMTP Forwarding144 5 Copyright @ 2018 Pepwave Web Proxy Forwarding145 DNS Forwarding145 Custom Service Forwarding146 Service Passthrough146 GPS Forwarding147 AP Controller148 Wireless SSID148 Settings153 AP Controller Status159 Info159 Access Point (Usage)160 Wireless SSID163 Wireless Client164 Nearby Device166 Event Log167 Toolbox168 System Settings169 Admin Security169 Firmware173 Time174 Schedule174 Email Notification176 Event Log178 SNMP178 InControl181 Configuration182 Feature Add-ons184 Reboot184 Tools184 6 Copyright @ 2018 Pepwave Ping184 Traceroute Test185 PepVPN Test186 Wake-on-LAN187 CLI (Command Line Interface Support)187 Status187 Device189 GPS Data190 Active Sessions191 Client List192 WINS Client193 UPnP / NAT-PMP193 SpeedFusion Status194 Event Log198 Bandwidth Status199 Real-Time199 Hourly200 Daily200 Monthly202 Appendix B.

5 Declaration206 7 Copyright @ 2018 Pepwave 1 Introduction and Scope Pepwave routers provide link aggregation and load balancing across multiple WAN connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi, external WiMAX dongle, and satellite to be utilized to connect to the Internet. The MAX wireless SD-WAN router series has a wide range of products suitable for many different deployments and markets. Entry level SD-WAN models such as the MAX BR1 are suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the MAX HD2 are suitable for larger organizations and head offices. This Manual covers setting up Pepwave routers and provides an introduction to their features and usage.

6 Tips Want to know more about Pepwave routers? Visit our YouTube Channel for a video introduction ! 8 Copyright @ 2018 Pepwave 2 Glossary The following terms, acronyms, and abbreviations are frequently used in this Manual : Term Definition 3G 3rd generation standards for wireless communications ( , HSDPA) 4G 4th generation standards for wireless communications ( , LTE) DHCP Dynamic Host Configuration Protocol DNS Domain Name System EVDO Evolution-Data Optimized FQDN Fully Qualified Domain Name HSDPA High-Speed Downlink Packet Access HTTP Hyper-Text Transfer Protocol ICMP Internet Control Message Protocol IP Internet Protocol LAN Local Area Network MAC Address Media Access Control Address MTU Maximum Transmission Unit MSS Maximum Segment Size NAT Network Address Translation PPPoE Point to Point Protocol over Ethernet QoS Quality of Service SNMP Simple Network Management Protocol TCP Transmission Control Protocol 9 Copyright @ 2018 Pepwave UDP User Datagram Protocol VPN Virtual Private Network VRRP Virtual Router Redundancy Protocol WAN

7 Wide Area Network WINS Windows Internet Name Service WLAN Wireless Local Area Network 3 Product Features Pepwave routers enable all LAN users to share broadband Internet connections, and they provide advanced features to enhance Internet access. Our Max BR wireless routers support multiple SIM cards. They can be configured to switch from using one SIM card to another SIM card according to different criteria, including wireless network reliability and data usage. Our MAX HD series wireless routers are embedded with multiple 4G LTE modems, and allow simultaneous wireless Internet connections through multiple wireless networks. The wireless Internet connections can be bonded together using our SpeedFusion technology.

8 This allows better reliability, larger bandwidth, and increased wireless coverage are comparing to use only one 4G LTE modem. Below is a list of supported features on Pepwave routers. Features vary by model. For more information, please see Network Features Ethernet WAN connection in full/half duplex Static IP support for PPPoE Built-in cellular modems USB mobile connection(s) Wi-Fi WAN connection Network address translation (NAT)/port address translation (PAT) 10 Copyright @ 2018 Pepwave Inbound and outbound NAT mapping IPsec NAT-T and PPTP packet passthrough MAC address clone and passthrough Customizable MTU and MSS values WAN connection health check Dynamic DNS (supported service providers.)

9 , , , and DNS-O-Matic) Ping, DNS lookup, and HTTP-based health check Wi-Fi AP Ethernet LAN ports DHCP server on LAN Extended DHCP option support Static routing rules VLAN on LAN support PepVPN with SpeedFusion TM PepVPN performance analyzer certificate support VPN load balancing and failover among selected WAN connections Bandwidth bonding and failover among selected WAN connections IPsec VPN for network-to-network connections (works with Cisco and Juniper only) Ability to route Internet traffic to a remote VPN peer Optional pre-shared key setting SpeedFusion TM throughput, ping, and traceroute tests PPTP server PPTP and IPsec passthrough 11 Copyright @ 2018 Pepwave Outbound (LAN to WAN) firewall rules Inbound (WAN to LAN)

10 Firewall rules per WAN connection Intrusion detection and prevention Specification of NAT mappings Outbound firewall rules can be defined by destination domain name Portal Splash screen of open networks, login page for secure networks Customizable built-in captive portal Supports linking to outside page for captive portal Policy Link load distribution per TCP/UDP service Persistent routing for specified source and/or destination IP addresses per TCP/UDP service Traffic prioritization and DSL optimization Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms Controller Configure and manage Pepwave AP devices Review the status of connected APs Quality of service for different applications and custom protocols User group classification for different service levels Bandwidth usage control and monitoring on group- and user-level