Pepwave MAX and Surf User Manual Portal Customization Logo Image Message Terms & Conditions Custom Landing Page Click the Choose File button to select a logo to use for the built-in portal. If you have any additional messages for your users, enter them in this field. If you would like to use your own set of terms and conditions, please enter them here. If left empty, the built-in portal will display the default terms and conditions. Fill in this field to redirect clients to an external URL.
Pepwave MAX and Surf User Manual 10.1 Ethernet WAN From Network>WAN, choose a WAN connection and then click Details. WAN Port (Section 1) WAN Connection Name Schedule Enter a name to represent this WAN connection. Click the drop-down menu to apply a time schedule to this interface There are three possible connection methods for Ethernet WAN: Connection Method • • • DHCP Static IP PPPoE The connection method and details are determined by, and can be obtained from, the ISP.
Pepwave MAX and Surf User Manual Hostname DNS Servers Enter a hostname for this WAN port if needed. Select a DNS server for this port to use. This port can either be automatically selected or manually designated. WAN Port (Section 2) Standby State This setting specifies the standby state of the WAN connection. The available options are Remain connected and Disconnect. The default state is Remain Connected.
Pepwave MAX and Surf User Manual health check DNS servers, regardless of whether the result is positive or negative. Timeout If a health check test cannot be completed within the specified amount of time, the test will be treated as failed. Health Check Interval This is the number of consecutive check failures before treating a connection as down. Health Check Retries This is the number of consecutive check failures before treating a connection as down.
Pepwave MAX and Surf User Manual default MTU value. Select Auto and the appropriate MTU value will be automatically detected. Auto-detection will run each time the WAN connection establishes. WAN Port (Section 4) MSS This setting should be configured based on the maximum payload size that the local system can handle. The MSS (maximum segment size) is computed from the MTU minus 40 bytes for TCP over IPv4. If MTU is set to Auto, the MSS will also be set automatically. By default, MSS is set to Auto.
Pepwave MAX and Surf User Manual IPv6 IPv6 IPv6 support can be enabled on one of the available Ethernet WAN ports. On this screen, you can choose which WAN will support IPv6. To enable IPv6 support on a WAN, the WAN router must respond to stateless address auto configuration advertisements and DHCPv6 requests. IPv6 clients on the LAN will acquire their IPv6, gateway, and DNS server addresses from it.
Pepwave MAX and Surf User Manual IP Address/ Subnet Mask/ Default Gateway Hostname (Optional) DNS Servers This information is obtained from the ISP automatically. If your service provider's DHCP server requires you to supply a hostname value upon acquiring an IP address, you may enter the value here. If your service provider does not provide you with the value, you can safely bypass this option. Each ISP may provide a set of DNS servers for DNS lookups.
Pepwave MAX and Surf User Manual selected, you may enter custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. 10.1.3 PPPoE Connection This connection method is suitable if your ISP provides a login ID/password to connect via PPPoE.
Pepwave MAX and Surf User Manual in the DNS servers being assigned by the WAN DHCP server to be used for outbound DNS lookups over the connection. (The DNS servers are obtained along with the WAN IP address assigned from the DHCP server.) When Use the following DNS server address(es) is selected, you may enter custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. 10.1.4 L2TP Connection L2TP has all the compatibility and convenience of PPTP with greater security.
Pepwave MAX and Surf User Manual When Use the following DNS server address(es) is selected, you can enter custom DNS server addresses for this WAN connection into the DNS server 1 and DNS server 2 fields. 10.2 Cellular WAN To access cellular WAN settings, click Network>WAN>Details. (Available on the Pepwave MAX BR1, HD2, and HD2 IP67 only) Cellular Status IMSI This is the International Mobile Subscriber Identity which uniquely identifies the SIM card. This is applicable to 3G modems only.
Pepwave MAX and Surf User Manual WAN Connection Settings WAN Connection Name Schedule Network Mode Enter a name to represent this WAN connection. Click the drop-down menu to apply a time schedule to this interface if needed. Users have to specify the network they are on accordingly. Auto: The subnet mask will be set automatically. Subnet Selection Routing Mode Force /31 Subnet: The subnet mask will be set as 255.255.255.254(/31), and the gateway IP address will be recalculated.
Pepwave MAX and Surf User Manual Cellular Settings Network Selection 3G/2G By default, the MAX router will automatically choose a network to connect to. If you wish to use only certain networks, click the button beside the menu item. This drop-down menu allows restricting cellular to particular band. Click the enable the selection of specific bands. button to Authentication Choose from PAP Only or CHAP Only to use those authentication methods exclusively.
Pepwave MAX and Surf User Manual This setting applies to 3G/EDGE/GPRS modems only. It does not apply to EVDO/EVDO Rev. A modems. This allows you to configure the APN settings of your connection. If Auto is selected, the mobile operator should be detected automatically. The connected device will be configured and connection will be made automatically. If there is any difficulty in making connection, you may select Custom to enter your carrier’s APN, Login, Password, and Dial Number settings manually.
Pepwave MAX and Surf User Manual Health Check Settings Heath Check Method Timeout This setting allows you to specify the health check method for the cellular connection. Available options are Disabled, Ping, DNS Lookup, HTTP, and SmartCheck. The default method is DNS Lookup. See Section 10.4 for configuration details. If a health check test cannot be completed within the specified amount of time, the test will be treated as failed.
Pepwave MAX and Surf User Manual 10.3 Wi-Fi WAN To access Wi-Fi WAN settings, click Network>WAN>Details. Wi-Fi Connection Settings WAN Connection Name Schedule Standby State Enter a name to represent this WAN connection. Click the drop-down menu to apply a time schedule to this interface. This setting specifies the state of the WAN connection while in standby. The available options are Remain Connected (hot standby) and Disconnect (cold standby).
Pepwave MAX and Surf User Manual Roaming Connect to Any Open Mode AP Checking this box will enable Wi-Fi roaming. Click the icon for additional options. This option is to specify whether the Wi-Fi WAN will connect to any open mode access points it finds. Bandwidth Allowance Monitor If Error! Reference source not found. is enabled, you will be notified by email when usage hits 75% and 95% of the monthly allowance.
Pepwave MAX and Surf User Manual Health Check Settings Method This setting specifies the health check method for the WAN connection. This value can be configured as Disabled, PING, DNS Lookup, or HTTP. The default method is DNS Lookup. For mobile Internet connections, the value of Method can be configured as Disabled or SmartCheck. Health Check Disabled When Disabled is chosen in the Method field, the WAN connection will always be considered as up.
Pepwave MAX and Surf User Manual Health Check DNS Servers This field allows you to specify two DNS hosts’ IP addresses with which connectivity is to be tested via DNS Lookup. If Use first two DNS servers as Health Check DNS Servers is checked, the first two DNS servers will be the DNS lookup targets for checking a connection's health. If the box is not checked, Host 1 must be filled, while a value for Host 2 is optional.
Pepwave MAX and Surf User Manual Other Health Check Settings Timeout This setting specifies the timeout in seconds for ping/DNS lookup requests. The default timeout is 5 seconds. Health Check Interval This setting specifies the time interval in seconds between ping or DNS lookup requests. The default health check interval is 5 seconds.
Pepwave MAX and Surf User Manual TZO Key Update All Hosts Hosts / Domain Check this box to automatically update all hosts. This setting specifies a list of hostnames or domains to be associated with the public Internet IP address of the WAN connection. Important Note In order to use dynamic DNS services, appropriate hostname registration(s), as well as a valid account with a supported dynamic DNS service provider, are required.
Pepwave MAX and Surf User Manual Wi-Fi Connection Profile Settings Type Network Name (SSID) Select whether the network will connect automatically or manually. Enter a name to represent this Wi-Fi connection. This option allows you to select which security policy is used for this wireless network. Available options: • Open • WEP • WPA/WPA2 – Personal • WPA/WPA2 – Enterprise Security 10.
Pepwave MAX and Surf User Manual When Disabled is chosen in the Method field, the WAN connection will always be considered as up. The connection will NOT be treated as down in the event of IP routing errors. Health Check Method: PING ICMP ping packets will be issued to test the connectivity with a configurable target IP address or hostname. A WAN connection is considered as up if ping responses are received from either one or both of the ping hosts.
Pepwave MAX and Surf User Manual filled, a health check will pass if the HTTP return code is between 200 and 299 and if the HTTP response content contains the string. WAN Settings>WAN Edit>Health Check Settings>URL2 If URL2 is also provided, a health check will pass if either one of the tests passed. URL 2 Other Health Check Settings Timeout This setting specifies the timeout in seconds for ping/DNS lookup requests. The default timeout is 5 seconds.
Pepwave MAX and Surf User Manual router), the public IP of each WAN will be automatically reported to the DNS service provider. Either upon a change in IP addresses or every 23 days without link reconnection, the Pepwave router will connect to the dynamic DNS service provider to perform an IP address update within the provider’s records.
Pepwave MAX and Surf User Manual providers’ policy, a dynamic DNS host will automatically expire if the host record has not been updated for a long time. Therefore the Pepwave router performs an update every 23 days, even if a WAN’s IP address has not changed. http://www.pepwave.
Pepwave MAX and Surf User Manual 11 Advanced Wi-Fi Settings Wi-Fi settings can be configured at Advanced>Wi-Fi Settings (or AP>Settings on some models). Note that menus displayed can vary by model. Wi-Fi Radio Settings This drop-down menu specifies the national/regional regulations which the Wi-Fi radio should follow. Operating Country • If a North American region is selected, RF channels 1 to 11 will be available and the maximum transmission power will be 26 dBm (400 mW).
Pepwave MAX and Surf User Manual Advanced Wi-Fi AP settings can be displayed by clicking the on the top right-hand corner of the Wi-Fi AP Settings section, which can be found at AP>Settings. Other models will display a separate section called Wi-Fi AP Advanced Settings, which can be found at Advanced>Wi-Fi Settings. Wi-Fi AP Advanced Settings Beacon Rate A Beacon Interval A DTIM A Slot Time A This option is for setting the time interval between each beacon. By default, 100ms is selected.
Pepwave MAX and Surf User Manual Wi-Fi WAN settings can be configured at Advanced>Wi-Fi Settings (or Advanced>Wi-Fi WAN or some models). Wi-Fi WAN Settings Channel Width Available options are 20/40 MHz and 20 MHz. Default is 20/40 MHz, which allows both widths to be used simultaneously. Bit Rate This option allows you to select a specific bit rate for data transfer over the device’s WiFi network. By default, Auto is selected.
Pepwave MAX and Surf User Manual 12 MediaFast Configuration MediaFast settings can be configured from the Network menu. 12.1 Setting Up MediaFast Content Caching To access MediaFast content caching settings, select Advanced>Cache Control. Cache Control Settings Domain Source IP Subnet Choose to Cache on all domains, or enter domain names and then choose either Cache the specified domains only or Do not cache the specified domains.
Pepwave MAX and Surf User Manual 12.2 Scheduling Content Prefetching Content prefetching allows you to download content on a schedule that you define, which can help to preserve network bandwidth during busy times and keep costs down. To access MediaFast content prefetching settings, select Advanced >Prefetch Schedule. Prefetch Schedule Settings Name This field displays the name given to the scheduled download. Status Check the status of your scheduled download here.
Pepwave MAX and Surf User Manual To begin a scheduled download immediately, click Actions . To cancel a scheduled download, click To edit a scheduled download, click To delete a scheduled download, click . . . Click to begin creating a new scheduled download. Clicking the button will cause the following screen to appear: New Schedule Simply provide the requested information to create your schedule. Clear Web Cache Clear Statistics To clear all cached content, click this button.
Pepwave MAX and Surf User Manual http://www.pepwave.
Pepwave MAX and Surf User Manual 13 Bandwidth Bonding SpeedFusionTM / PepVPN Pepwave bandwidth bonding SpeedFusionTM is our patented technology that enables our SD-WAN routers to bond multiple Internet connections to increase site-to-site bandwidth and reliability. SpeedFusion functionality securely connects your Pepwave router to another Pepwave or Peplink device (Peplink Balance 210/310/380/580/710/1350 only).
Pepwave MAX and Surf User Manual 13.1 PepVPN To configure PepVPN and SpeedFusion, navigate to Advanced>SpeedFusion™ or Advanced>PepVPN. The local LAN subnet and subnets behind the LAN (defined under Static Route on the LAN settings page) will be advertised to the VPN. All VPN members (branch offices and headquarters) will be able to route to local subnets. Note that all LAN subnets and the subnets behind them must be unique. Otherwise, VPN members will not be able to access each other.
Pepwave MAX and Surf User Manual A list of defined SpeedFusion connection profiles and a Link Failure Detection Time option will be shown. Click the New Profile button to create a new VPN connection profile for making a VPN connection to a remote Peplink Balance via the available WAN connections. Each profile is for making a VPN connection with one remote Peplink Balance. PepVPN Profile Settings Name This field is for specifying a name to represent this profile.
Pepwave MAX and Surf User Manual Enter Remote IDs either by typing out each Remote ID and Pre-shared Key, or by pasting a CSV. If you wish to paste a CSV, click the setting. Remote ID/Remote Certificate Allow Shared Remote ID NAT Mode Remote IP Address / Host Names (Optional) Data Port Bandwidth Limit Cost icon next to the “Remote ID / Preshared Key” These optional fields become available when X.509 is selected as the Peplink Balance’s VPN authentication method, as explained above.
Pepwave MAX and Surf User Manual 8.41 WAN Connection Priority WAN Connection Priority If your device supports it, you can specify the priority of WAN connections to be used for making VPN connections. WAN connections set to OFF will never be used. Only available WAN connections with the highest priority will be used. To enable asymmetric connections, connection mapping to remote WANs, cut-off latency, and packet loss suspension time, click the button.
Pepwave MAX and Surf User Manual PepVPN Local ID The local ID is a text string to identify this local unit when establishing a VPN connection. When creating a profile on a remote unit, this local ID must be entered in the remote unit's Remote ID field. Click the ID. icon to edit Local PepVPN Settings A Handshake PortA To designate a custom handshake port (TCP), click the custom radio button and enter the port number you wish to designate.
Pepwave MAX and Surf User Manual Tip Want to know more about VPN sub-second session failover? Visit our YouTube Channel for a video tutorial! http://youtu.be/TLQgdpPSY88 http://www.pepwave.
Pepwave MAX and Surf User Manual 13.2 The Pepwave Router Behind a NAT Router Pepwave routers support establishing SpeedFusionTM over WAN connections which are behind a NAT (network address translation) router. To enable a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to inbound port-forward TCP port 32015 to the Pepwave router.
Pepwave MAX and Surf User Manual 13.3 SpeedFusionTM Status SpeedFusionTM status is shown in the Dashboard. The connection status of each connection profile is shown as below. After clicking the Status button at the top right corner of the SpeedFusionTM table, you will be forwarded to Status>SpeedFusionTM, where you can view subnet and WAN connection information for each VPN peer. Please refer to Section 22.6 for details.
Pepwave MAX and Surf User Manual 14 IPsec VPN IPsec VPN functionality securely connects one or more branch offices to your company's main headquarters or to other branches. Data, voice, and video communications between these locations are kept safe and confidential across the public Internet. IPsec VPN on Pepwave routers is specially designed for multi-WAN environments.
Pepwave MAX and Surf User Manual IPsec VPN Settings Name This field is for specifying a local name to represent this connection profile. Active When this box is checked, this IPsec VPN connection profile will be enabled. Otherwise, it http://www.pepwave.
Pepwave MAX and Surf User Manual will be disabled. Connect Upon Disconnection of Remote Gateway IP Address / Host Name Check this box and select a WAN to connect to this VPN automatically when the specified WAN is disconnected. Enter the remote peer’s public IP address. For Aggressive Mode, this is optional. Enter the local LAN subnets here. If you have defined static routes, they will be shown here.
Pepwave MAX and Surf User Manual field is typically a U-FQDN. Remote ID In Main Mode, this field can be left blank. In Aggressive Mode, if Remote Gateway IP Address is filled on this end and the peer end, this field can be left blank. Otherwise, this field is typically a U-FQDN. Phase 1 (IKE) Proposal In Main Mode, this allows setting up to six encryption standards, in descending order of priority, to be used in initial connection key negotiations. In Aggressive Mode, only one selection is permitted.
Pepwave MAX and Surf User Manual 15 Outbound Policy Management Pepwave routers can flexibly manage and load balance outbound traffic among WAN connections. Important Note Outbound policy is applied only when more than one WAN connection is active. The settings for managing and load balancing outbound traffic are located at Advanced>Outbound Policy or Advanced>PepVPN, depending on the model. 15.
Pepwave MAX and Surf User Manual Application Compatibility highest application compatibility. Normal Application Compatibility Outbound traffic from a source LAN device to the same destination Internet IP address will be routed through the same WAN connection persistently, regardless of protocol. This option provides high compatibility to most applications, and users still benefit from WAN link load balancing when multiple Internet servers are accessed.
Pepwave MAX and Surf User Manual The bottom-most rule is Default. Edit this rule to change the device’s default manner of controlling outbound traffic for all connections that do not match any of the rules above it. Under the Service heading, click Default to change these settings. To rearrange the priority of outbound rules, drag and drop them into the desired sequence. By default, Auto is selected as the Default Rule. You can select Custom to change the algorithm to be used.
Pepwave MAX and Surf User Manual New Custom Rule Settings Service Name Enable This setting specifies the name of the outbound traffic rule. This setting specifies whether the outbound traffic rule takes effect. When Enable is checked, the rule takes effect: traffic is matched and actions are taken by the Pepwave router based on the other parameters of the rule. When Enable is unchecked, the rule does not take effect: the Pepwave router disregards the other parameters of the rule.
Pepwave MAX and Surf User Manual Protocol and Port This setting specifies the IP protocol and port of traffic that matches this rule. This setting specifies the behavior of the Pepwave router for the custom rule. One of the following values can be selected (note that some Pepwave routers provide only some of these options): Algorithm Weighted Balance Persistence Enforced Priority Overflow Least Used Lowest Latency The upcoming sections detail the listed algorithms.
Pepwave MAX and Surf User Manual 15.2.1 Algorithm: Weighted Balance This setting specifies the ratio of WAN connection usage to be applied on the specified IP protocol and port. This setting is applicable only when Algorithm is set to Weighted Balance. The amount of matching traffic that is distributed to a WAN connection is proportional to the weight of the WAN connection relative to the total weight. Use the sliders to change each WAN’s weight.
Pepwave MAX and Surf User Manual 15.2.2 Algorithm: Persistence The configuration of persistent services is the solution to the few situations where link load distribution for Internet services is undesirable. For example, for security reasons, many e-banking and other secure websites terminate the session when the client computer’s Internet IP address changes mid-session. In general, different Internet IP addresses represent different computers.
Pepwave MAX and Surf User Manual 15.2.3 Algorithm: Enforced This setting specifies the WAN connection usage to be applied on the specified IP protocol and port. This setting is applicable only when Algorithm is set to Enforced. Matching traffic will be routed through the specified WAN connection, regardless of the health check status of the WAN connection. Starting from Firmware 5.2, outbound traffic can be enforced to go through a specified SpeedFusionTM connection. 15.2.
Pepwave MAX and Surf User Manual Drag and drop to specify the order of WAN connections to be used for routing traffic. Only the highest priority healthy connection that is not in full load will be used. 15.2.6 Algorithm: Least Used The traffic matching this rule will be routed through the healthy WAN connection that is selected in Connection and has the most available download bandwidth.
Pepwave MAX and Surf User Manual • A latency sensitive application must be routed through the lowest latency WAN, regardless of the WAN’s available bandwidth. 15.2.8 Expert Mode Expert Mode is available on some Pepwave routers for use by advanced users. To enable the feature, click on the help icon and click turn on Expert Mode. In Expert Mode, a new special rule, SpeedFusionTM Routes, is displayed in the Custom Rules table. This rule represents all SpeedFusionTM routes learned from remote VPN peers.
