USER MANUAL Peplink Balance Series OSPFv2 / RIPv2 Settings Area ID Determine the name of your Area ID to apply to this group. Machines linked to this group will send and receive related OSPFv2 packets, while unlinked machines will ignore it. Link Type Choose the network type that this area will use.
USER MANUAL Peplink Balance Series 21 Miscellaneous Settings The miscellaneous settings include configuration for High Availability, PPTP Server, Service Forwarding, and Service Passthrough. 21.1 High Availability (Available on Peplink Balance 210+) Peplink Balance supports High Availability (HA) configurations via an open standard Virtual Router Redundancy Protocol (VRRP, RFC 3768). In an HA configuration, two same-model Peplink Balance units (e.g.
USER MANUAL Peplink Balance Series Interface for Master Router Interface for Slave Router High Availability Enable Group Number Checking this box specifies that the Peplink Balance unit is part of a High Availability configuration. This number identifies a pair of Peplink Balance units operating in a High Availability configuration.The two Peplink Balance units in the pair must have the same Group Number value. This setting specifies whether the Peplink Balance unit operates in Master or Slave mode.
USER MANUAL Peplink Balance Series Important Note For Balance Routers in NAT mode, the Virtual IP (VIP) should be set as the default gateway for all hosts sitting on the LAN segment. For example, a firewall sitting behind the Balance should set its default gateway as the Virtual IP instead of the IP of Master Balance. In Drop-in mode, no other configuration needs to be set. Please note that the Drop-in WAN cannot be configured as a LAN Bypass port while it is configured for High Availability.
USER MANUAL Peplink Balance Series 21.2 PPTP Server Peplink Balance has a built-in PPTP Server, which enables remote computers to conveniently and securely access the local network. PPTP server settingsare located at: Network> Misc. Settings > PPTP Server Simply check the box to enable the PPTP server function. All connected PPTP sessions are displayed on the Client List at Status > Client List.Please refer to section 25.3 for details.
USER MANUAL Peplink Balance Series Important Note PPTP server will be disabled automatically if the Balance is deployed in Drop-in mode. 21.3 Certificate Manager This section allows you to assign certificates for Local VPN and Web Admin SSL. The local keys will not be transferred to another device by any means. 21.4 Service Forwarding Service Forwarding settings are located at:Network>Misc.
USER MANUAL Peplink Balance Series Some ISPs require their users to send e-mails via the ISP’s SMTP server.All outgoing SMTP connections are blocked except those connecting to the ISP’s. The Peplink Balance supports theinterception and redirection of all outgoing SMTP connections (destined for TCP port 25) via a WAN connection to the WAN’s corresponding SMTP server. To enable the feature, select the Enable check box under SMTP Forwarding Setup.
USER MANUAL Peplink Balance Series 21.4.3 DNS Forwarding When DNS Forwarding is enabled, all clients’ outgoing DNS requests will also be intercepted and forwarded to the built-in DNS proxy server. Service Passthrough Service Passthrough settings can be found at:Network >Misc. Settings> Service Passthrough Some Internet services need to be specially handled in a multi-WAN environment.The Peplink Balance can handlethese services such that Internet applications do not notice it is behind a multi-WAN router.
USER MANUAL Peplink Balance Series TFTP The Peplink Balance monitors outgoing TFTP connections and routes any incoming TFTP data packets back to the client. Select Enable if you want to enable the TFTP Passthrough support. This field is for enabling the support of IPsec NAT-T Passthrough. UDP ports 500, 4500 and 10000 are monitored by default. IPsec NAT-T You may add more custom data ports that your IPsec system usesby checking the box Define custom ports.
USER MANUAL Peplink Balance Series 22 AP The AP Controller acts as a centralized controller of Pepwave AP devices. With this feature, users will be able to customize and manage multiple AP one a single Peplink Balance Interface. To configure, navigate to the AP tab and the following options will be shown. Special Note Each Balance router can control a limited number of routers without cost. To manage more, a Full Edition license is required.
USER MANUAL Peplink Balance Series 2. Create a local DNS record for AP Controller with a value corresponding to the AP Controller's public IP address. Permitted AP Access points to manage can be specifiedhere. If Any is selected, the AP Controller will manage any AP that reports to it. If Access points listed below: is selected, only APs with a serial number listed in the provided text box will be managed. 22.
USER MANUAL Peplink Balance Series SSID Settings SSID This setting specifies the SSID of the virtual AP to be scanned by Wi-Fi clients. This setting specifies the VLAN ID to be tagged on all outgoing packets generated from this wireless network (i.e., packets that travel from the Wi-Fi segment through the Pepwave AP One unit to the Ethernet segment via the LAN port). The default value of this setting is 0, which means VLAN tagging is disabled (instead of tagged with zero).
USER MANUAL Peplink Balance Series Access Control The settings allow administrator to control access using Mac address filtering. Available options areNone, Deny all except listed, Accept all except listed, and RADIUS MAC Authentication. When WPA/WPA2 - Enterprise is configured, RADIUS-based 802.1 x authentication is enabled. Under this configuration, the Shared Key option should be disabled. When using this method, select the appropriate version using the V1/V2 controls.
USER MANUAL Peplink Balance Series Guest Protect Block All Private Check this box to deny all connection attempts by private IP addresses. IP To create a custom subnet for guest access, enter the IP address and choose a subnet mask Custom Subnet from the drop-down menu. To add the new subnet, click the subnet, click the button. To delete a custom button. To block access from a particular subnet, enter the IP address and choose a subnet mask Block Exception from the drop-down menu.
USER MANUAL Peplink Balance Series Bandwidth Management Upstream Limit Downstream Limit Enter a value in kpbs to limit the wireless network’s upstream bandwidth. Enter 0 to allow unlimited upstream bandwidth. Enter a value in kpbs to limit the wireless network’s downstream bandwidth. Enter 0 to allow unlimited downstream bandwidth. Client Upstream Enter a value in kpbs to limit connected clients’ upstream bandwidth. Enter 0 to allow Limit unlimited upstream bandwidth.
USER MANUAL Peplink Balance Series Firewall Settings Choose Flexible – Allow all except… or Lockdown – Block all except… to turn on the Firewall Mode firewall, then create rules for the firewall exceptions by click the button. See the discussion below for details on creating a firewall rule. To delete a rule, click the associated button. To turn off the firewall, select Disable. Firewall Rule Name Enter a descriptive name for the firewall rule in this field.
USER MANUAL Peplink Balance Series 22.3 Profiles AP profiles assigned to each Pepwave AP device can be configured at AP > Profiles Each AP is associated with one AP Profile. By default, all devices are associated with the first (Default) profile. The Default profile cannot be removed. You can define an AP profile by clicking the New AP Profile button. Click the Clone button of an existing profile to create a new profile based on it.
USER MANUAL Peplink Balance Series SSID These buttons specify which wireless networks will use this AP Profile. You can also select the frequencies at which each network will transmit. Please note that the Peplink Balance does not detect weather the AP is capable of transmitting at both frequencies. Instructions to transmit at unsupported frequencies will be ignored by the AP. This drop-down menu specifies the national / regional regulations which the AP should follow.
USER MANUAL Peplink Balance Series These buttons determine the time period at which the AP under this profile will be activated. Clicking the Custom Schedule option will open the following diagram: Operating ScheduleA Click the desired time periods to toggle the activation state of AP under this profile. Max number of ClientsA This field determines the maximum clients that can be connected to AP under this profile.
USER MANUAL Peplink Balance Series Web Administration Settings Enable Check the box to allow Peplink Balance to manage the web admin access information of the AP. Thesebuttonsspecify the web access protocol used for accessing the web admin of AP. Web Access Protocol The two available options are HTTP and HTTPS. Management Port This field specifies the management port used for accessing the device.
USER MANUAL Peplink Balance Series 22.4 Info A comprehensive overview of your AP can be accessed by navigating to AP > Info. AP Controller License Limit This field displays the maximum number of AP your Balance router can control. You can purchase licenses to increase the number of AP you could manage. Frequency Underneath, there are two check boxes labeled 2.4 Ghz and 5 Ghz. Clicking either box will toggle the display of information for that frequency.
USER MANUAL Peplink Balance Series Events This event log displays all activity on your AP network, down to the client level. Click View Alerts to see only alerts, and click the More… link for additional records. 22.5 Usage A detailed breakdown of data usage for each AP is available onAP >Status. The information is organized by device groups as defined in section 22.3 http://www.peplink.
USER MANUAL Peplink Balance Series Usage Device Name/Serial Number Online Status This field enables you to quickly find your device if you know its name or serial number. Fill in the field to begin searching. Partial names and serial numbers are supported. This button toggles weather your search will include offline devices. This table shows the detailed information on each AP, including: channel, number of clients, upload traffic, and download traffic.
USER MANUAL Peplink Balance Series Click the icon to view a detailed event log for that particular device: 22.6 AP Status A detailed breakdown of the status of each device is available on AP >Status. The information is organized by device groups as defined in section 22.3 http://www.peplink.
USER MANUAL Peplink Balance Series AP Status Device Name/Serial Number Online Status This field enables you to quickly find your device if you know its name or serial number. Fill in the field to begin searching. Partial names and serial numbers are supported. This button toggles weather your search will include offline devices. This table displays the MAC address, IP Address, firmware version, and specific configurations of each device.
USER MANUAL Peplink Balance Series 22.7 Rogue AP A listing of suspected Rogue devicescan be accessed by navigating to AP >Rogue AP. Suspected Rogue Devices Hovering over the device MAC address will result in a popup with information on how this device was detected. Click the icons and the device will be moved to the bottom table of identified devices. 22.8 Toolbox Additional tools for managing firmware packs, power adjustment, and channel assignment can be found under AP >Toolbox.
USER MANUAL Peplink Balance Series 23 System Settings 23.1 Admin Security There are two types of user accounts available for accessing the Web Admin:admin and user.They represent two user levels: the admin level has full administration access, the user level is read-only. The user level can only access the device's status information;itcannot make any changes on the device.
USER MANUAL Peplink Balance Series Admin Settings This field allows you to define a name for this Peplink Balance unit. Router Name By default, the Router Name is set as Balance_XXXX, where XXXX refers to the last 4 digits of the serial number of that balance unit. Admin User Name It is set as admin by default and is not customizable. Admin Password This field allows you to specify a new administrator password.
USER MANUAL Peplink Balance Series Web Session Timeout This field specifies the number of hours and minutes that a web session can remain idle before the Balance terminatesits access to the Web Admin Interface. By default, it is set to4 hours. With this box is checked,the Web Admin will authenticate using an external RADIUS server. Authenticated users are treated as either "admin" with full read-write permission or “user” Authentication by with read-only access.
USER MANUAL Peplink Balance Series If LAN/WAN is chosen, the WAN Connection Access Settings form will be displayed. WAN Connection Access Settings This field allows you to restrict the ability to access web admin toonly defined IP subnets. Any - Allow web admin accesses from anywhere, without IP address restrictions. Allow access from the following IP subnets only - Restrictsthe ability to access web admin to only defined IP subnets.
USER MANUAL Peplink Balance Series Firmware The firmware of Peplink Balance is upgradeable through the Web Admin Interface. Firmware upgrade functionality is located at:System>Firmware There are two ways to upgrade the unit.The first method is through an online download,the system canDownload and Upgradeover the Internet.The second method is to upload a firmware file manually. To perform an online download, click on the Check for Firmware button.The Peplink Balance will check online for new firmware.
USER MANUAL Peplink Balance Series 23.3 Time The Time Server functionality enables the system clock of Peplink Balance to be synchronized with a specified Time Server. The settings for Time Server configuration are located at:System > Time Time Server Settings This specifies the time zone (along with the corresponding Daylight Savings Time scheme) in which Peplink Balance operates. Time Zone The Time Zone value affects the time stamps in the Event Log of Peplink Balance and Email notifications.
USER MANUAL Peplink Balance Series 23.4 Email Notification The Email Notification functionality of Peplink Balance provides a System Administrator with up to date information on network status. The settings for configuring Email Notification are found at: System> Email Notification Email Notification Settings This setting specifies whether or not to enable Email Notification.
USER MANUAL Peplink Balance Series Confirm SMTP Password This field allows you to verify and confirm the new administrator password. Sender’s Email Address This setting specifies the email address which the Peplink Balance will use to send its reports. Recipient’s Email This setting specifies the email address(es) to which the Peplink Balance will send email Address notifications. For multiple recipients, separate each email using the enter key.
USER MANUAL Peplink Balance Series 23.5 Event Log The Event Log functionality enables event logging at a specified remote Syslog server.The settings for configuring Remote System Log are found at: System>Event Log Remote Syslog Settings Remote Syslog This setting specifies whether or not to log events at the specified remote Syslog server. Remote Syslog Host This setting specifies the IP address or hostname of the remote Syslog server.
USER MANUAL Peplink Balance Series 23.6 SNMP SNMPor Simple Network Management Protocolis an open standard that can be used to collect information about the Peplink Balance unit. SNMP configuration is located at:System> SNMP SNMP Settings SNMP Device Name SNMP Port This field shows the router name defined in System > Admin Security. This option specifies the port which SNMP used. The default port is set as 161. SNMPv1 This option allows you to enable SNMP version 1.
USER MANUAL Peplink Balance Series To add a community for either SNMPv1 or SNMPv2, click theAdd SNMP Communitybutton in the Community Nametable, upon which the following screen is displayed: SNMP Community Settings Community Name This setting specifies the SNMP Community Name. Allowed Source Subnet Address This setting specifies a subnet from which access to the SNMP server is allowed. Enter subnet address here (e.g. 192.168.1.0) and select the appropriate subnet mask.
USER MANUAL Peplink Balance Series 23.7 InControl InControl is a cloud based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl. When this check box is checked, the device's status information will be sent to the Peplink InControl system.
USER MANUAL Peplink Balance Series 23.8 Configuration Backing up the Peplink Balance settings immediately after the successful completion of the initial setup is strongly recommended. The functionality to download and upload Peplink Balance settings is found at: System> Configuration Configuration Restore Configuration to Factory Settings Downloading Active Configurations The Restore Factory Settings button is to reset the configuration to the factory default settings.
USER MANUAL Peplink Balance Series 23.9 Feature Add-ons Some balance models have features that could be activated upon purchase. Once the purchase is complete, you will receive an Activation Key. Enter the key on the Activation Key field, click Activate, and then click Apply Changes. 23.10 Reboot This page provides a Reboot button for restarting the system. For maximum reliability, the Peplink Balance series can equip with two copies of firmware; each copy a different version.
USER MANUAL Peplink Balance Series 24 Tools 24.1 Ping The Ping Test tool in the Peplink Balance performs Pings through a specified Ethernet interface or a SpeedFusionTM VPN connection. You can specify the number of pings in the fieldNumber of timesto a maximum number of 10 times, and Packet Size can be specified in the fieldPacket Size to a maximum of 1472 bytes.
USER MANUAL Peplink Balance Series 24.2 Traceroute Test The Traceroute Test tool traces the routing path to the destination through a particular Ethernet interface TM or a SpeedFusion connection. The Traceroute Test utility is located at System> Tools >Traceroute. Tip A System Administrator can use the Traceroute utility to analyze the connection path of a LAN/WAN connection. 24.
USER MANUAL Peplink Balance Series This feature is located in System > PepVPN Analyzer.To utilize this feature, simply choose your profile from the drop-down menu and clickGo! 24.5 CLI (Command Line Interface Support) The serial console connector with the Peplink Balance 305, 380 HW rev 5, Peplink Balance 580, Peplink Balance 710 HW rev 2, Peplink Balance 1350 and Peplink Balance 2500 is RJ-45.To access the serial console port, prepare a RJ-45 to DB-9 console cable.
USER MANUAL Peplink Balance Series 25 Status 25.1 Device System information is located at Status>Device: http://www.peplink.
USER MANUAL Peplink Balance Series System Information Router Name Model This is the name specified in the field Router Name located in System > Admin Security. This shows the model name and number of this device. Hardware Revision This shows the hardware version of this device. Serial Number Firmware Uptime System Time Diagnostic Report This shows the serial number of this device. This shows the firmware version this device is currently running.
USER MANUAL Peplink Balance Series 25.2 Active Sessions Information on Active Sessions is at: Status > Active Sessions> Overview This screen displays the number of sessions initiated by each application. Click on each Service to obtain additional information. This screen also indicates the number of sessions initiated by each WAN port. Finally, you can see which clients are initiating the most sessions. http://www.peplink.
USER MANUAL Peplink Balance Series In addition, you can also perform a filtered search for specific sessions. You can filter by subnet, port, protocol, and interface. To perform a search, navigate to: Status > Active Sessions> Search This Active Sessions section displays the active inbound / outbound sessions of each WAN connection on Peplink Balance. A filter is available to help sort out the active session information.Enter a keyword in the field or check one of the WAN connection boxes for filtering.
USER MANUAL Peplink Balance Series 25.3 Client List The client list table is located at Status > Client List.It lists DHCP and online client IP addresses: their Name (retrieved from DHCP reservation table or defined by users), their current Download and Upload rate and the MAC address. Clients can be imported into the DHCP Reservation table by clicking the column. Further update the record after the import by going to Network > LAN. button on the right-most If PPTP Server in section 21.
USER MANUAL Peplink Balance Series 25.6 Event Log Event Loginformation is located at: Status>Event Log 25.6.1 Device Event Log The log section displays a list of events that has taken place on the Peplink Balance unit.Click the Refresh button to retrieve log entries again. Click the Clear Log button to clear the log. Select 50, 100, or allto show the corresponding number of events in the log. http://www.peplink.
USER MANUAL Peplink Balance Series 25.6.2 IPsec Event Log This section displays a list of events that has taken place within an IPsec VPN connection. Check the box next to Auto Refresh and the log will be refreshed automatically. For an AP event Log, navigate to: AP > Info 25.7 Bandwidth This section shows the bandwidth usage statistics, located at: Status >Bandwidth. Bandwidth usage at the LAN while the device is switched off (e.g. LAN Bypass) are neither recorded nor shown. http://www.peplink.
USER MANUAL Peplink Balance Series 25.7.1 Real-Time The Data transferred since installationtable indicates how much network traffic has been processed by the device since first bootup.The Data transferred since last reboot table indicates how much network traffic has been processed by the device since the last bootup. Click the Show Detailslink on the top right hand corner of each table, anda breakdown of the data transferred will be shown.
USER MANUAL Peplink Balance Series 25.7.2 Hourly This page shows the hourly bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the desired connection to check from the drop down menu. http://www.peplink.
USER MANUAL Peplink Balance Series 25.7.3 Daily This page shows the daily bandwidth usage for all WAN connections, with the option of viewing each individual connection. Select the connection to check from the drop down menu.If you have enabled theBandwidth Monitoringfeature as shown in section 11.4, the Current Billing Cycletable for that WAN connection will be displayed. Click ona date to view the client bandwidth usage of that specific date.
USER MANUAL Peplink Balance Series Click on a specific date to receivea breakdown of all client usage for that date. http://www.peplink.
USER MANUAL Peplink Balance Series 25.7.4 Monthly This page shows the monthly bandwidth usage for each WAN connection. If you have enabled Bandwidth Monitoringfeature as shown in section11.4, you can check the usage of each particular connection and view the information byBilling Cycle or byCalendar Month. Click the first two rows to view the client bandwidth usage on the last two months.This feature is not available if you have chosen to view the bandwidth of an individual WAN connection.
USER MANUAL Peplink Balance Series Appendix A. Restoration of Factory Defaults To restore the factory default settings on a Peplink Balance unit, perform the following: For Balance 20/30/30 LTE/210/310: 1. Locate the reset button on the Peplink Balance unit. 2. With a paper clip, press and keep the reset button pressed for at least 10 seconds, until the unit reboots itself.
USER MANUAL Peplink Balance Series Appendix B. Routing under DHCP, Static IP, and PPPoE The information in this appendix applies only to situations where the Peplink Balance operates a WAN connection under DHCP, Static IP, and PPPoE. B.1 Routing via Network Address Translation (NAT) When the Peplink Balance is operating under NAT mode, the source IP addresses of outgoing IP packets are translated to the WAN IP address of Peplink Balance.
USER MANUAL Peplink Balance Series B.2 Routing via IP Forwarding When Peplink Balance is operating under IP Forwarding mode, the IP addresses of IP packets are unchanged; Peplink Balance forwards both inbound and outbound IP packets without changing their IP addresses. The following figure shows the packet flow in IP Forwarding mode: http://www.peplink.
USER MANUAL Peplink Balance Series Appendix C. Case Studies C.1 Performance Optimization C.1.1 Scenario In this scenario, email and web browsing are the two main Internet services used by the LAN users. The mail server is external to the network. The connections are ADSL (WAN1, with slow uplink and fast downlink) and Metro Ethernet (WAN2, symmetric). C.1.2 Solution For optimal performance with this configuration, individually set the WAN load balance according to the characteristics of each service.
USER MANUAL Peplink Balance Series Settings for HTTP: Set the weight of WAN1 and WAN2 for HTTP to 3 and 4, respectively Settings for SMTP: Set the weight of WAN1 and WAN2 for SMTP to 1 and 8, respectively http://www.peplink.
USER MANUAL Peplink Balance Series C.2 Maintaining the Same IP Address throughout a Session C.2.1 Scenario Some IP address sensitive web sites (for example, Internet banking) use both client IP address and cookie matching for session identification.Since load balancing uses different IP addresses, the session is dropped when a mismatching IP is detected resulting in frequent interruptions while visiting such sites. C.2.2 Solution Make use of the Persistency functionality of Peplink Balance.
USER MANUAL Peplink Balance Series C.3 Bypassing the Firewall to Access Hosts on LAN C.3.1 Scenario There are times when remote access to computers on the LAN is desirable; for example, when hosting web sites, online businesses and FTP download and upload areas, etc. In such cases, it may be appropriate to create an inbound NAT mapping for the network to allow some hosts on the LAN to be accessible from outside of the firewall. C.3.
USER MANUAL Peplink Balance Series C.4 Inbound Access Restriction C.4.1 Scenario A firewall is required in order to protect the network from potential hacker attacks and other Internet security threats. C.4.2 Solution Firewall functionality is builtinto the Peplink Balance. By default, inbound access is unrestricted. Enabling a basic level of protection involves setting up firewall rules.
USER MANUAL Peplink Balance Series C.5 Outbound Access Restriction C.5.1 Scenario For security reasons, it may be appropriate to restrict outbound access. For example, you may want to prevent LAN usersfrom usingftp to transfer files to and from the Internet. This can easily be achieved by setting up an outbound firewall rule with Peplink Balance. C.5.2 Solution To setup a firewall between Internet and private network for outbound access, navigate to Network > Access Rules.
USER MANUAL Peplink Balance Series Appendix D. Troubleshooting Problem 1 Outbound load is only distributed over one WAN connection. Solution Outbound load balancing can only be distributetraffic evenly between available WAN connections if many outbound connections are made. If there is only one user on the LAN and only one download session is made from his/her browser, the WAN connections cannot be fully utilized. For a single user, download management applications are recommended.
USER MANUAL Peplink Balance Series Problem 5 What can I do if I suspect a problem on my Internet/WAN connection? Solution You can test the WAN connection by Ping, which is similar to problem 4. As we want to isolate the problems from the LAN, Ping will be performed from Peplink Balance. By using the Ping/Tracerouteunder the tab Status of the Peplink Balance, you may able to find out the source of problem.
USER MANUAL Peplink Balance Series Appendix E. Product Specifications E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series E.
USER MANUAL Peplink Balance Series Appendix F. Declaration 1. CAUTION: RISK OF EXPLOSION IF BATTERY IS REPLACED BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE INSTRUCTIONS 2. Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules.
What are we doing at the moment? Follow us on Twitter! http://twitter.com/Peplink Want to know more about us? Add us on Facebook! http://www.facebook.com/peplink Difficulties when configuring the device? Visit our YouTube Channel! http://www.youtube.com/PeplinkChannel Anything want to share with everyone? Discuss on Peplink Forum! http://forum.peplink.
