peplink ONE 310, ONE 305, ONE 380, ONE 580, ONE 710 User Manual

Peplink Balance Multi-WAN Bonding Routers

User Manual

For Models: ONE/20/30/30 LTE/50/210/310/305/380/580/710/1350/2500 MediaFast 200/500/750

Peplink Balance Firmware 6.3

May 2016

Copyright & trademark specifications are subject to change without prior notice. Copyright © 2016 Peplink International Ltd. All Rights Reserved. Peplink and the Peplink logo are trademarks of Peplink International Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.

USER MANUAL

Peplink Balance Series

TABLE OF CONTENTS

1 INTRODUCTION AND SCOPE·················································································· 7

2 GLOSSARY ················································································································ 8

3 PRODUCT COMPARISON CHART ·········································································· 9

4 PRODUCT FEATURES ···························································································· 11

4.1 Supported Network Features············································································· 11

4.2 WAN ·················································································································· 11

4.3 LAN ··················································································································· 11

4.4 VPN ··················································································································· 11

4.5 Inbound Traffic Management············································································· 12

4.6 Outbound Policy ································································································ 12

4.7 AP Controller ····································································································· 12

4.8 QoS ··················································································································· 12

4.9 Firewall ·············································································································· 13

4.10 Captive Portal ································································································· 13

4.11 Other Supported Features ·············································································· 14

5 ADVANCED FEATURE SUMMARY ······································································· 15

5.1 Drop-in Mode and LAN Bypass: Transparent Deployment ································ 15

5.2 QoS: Clearer VoIP ····························································································· 15

5.3 Per-User Bandwidth Control ·············································································· 16

5.4 High Availability via VRRP················································································· 16

5.5 USB Modem and Android Tethering ·································································· 17

5.6 Built-In Remote User VPN Support ··································································· 17

5.7 LACP NIC Bonding ···························································································· 18

6 USAGE SCENARIOS ······························································································· 19

7 PACKAGE CONTENTS ··························································································· 23

7.1 Peplink Balance One ························································································· 23

7.2 Peplink Balance 20/30/30 LTE/50 ····································································· 23

7.3 Peplink Balance 210/310 ··················································································· 23

7.4 Peplink Balance 305/380/580/710/1350/2500 ··················································· 23

7.5 Peplink MediaFast 200 ······················································································ 23

7.6 Peplink MediaFast 500 ······················································································ 23

8 PEPLINK BALANCE OVERVIEW ··········································································· 24

8.1 Peplink Balance One ························································································· 24

8.2 Peplink Balance 20 ···························································································· 26

8.3 Peplink Balance 30 ···························································································· 28

8.4 Peplink Balance 30 LTE ···················································································· 30

USER MANUAL

Peplink Balance Series

8.5 Peplink Balance 50 ···························································································· 32

8.6 Peplink Balance 210 ·························································································· 34

8.7 Peplink Balance 310 ·························································································· 36

8.8 Peplink Balance 305 ·························································································· 38

8.9 Peplink Balance 380 ·························································································· 41

8.10 Peplink Balance 580 ······················································································· 44

8.11 Peplink Balance 710 ······················································································· 47

8.12 Peplink Balance 1350 ····················································································· 50

8.13 Peplink Balance 2500 ····················································································· 53

8.14 Peplink MediaFast 500 ··················································································· 57

9 INSTALLATION ········································································································ 60

9.1 Preparation ········································································································ 60

9.2 Constructing the Network ·················································································· 60

9.3 Configuring the Network Environment ······························································· 62

10 BASIC CONFIGURATION ······················································································· 63

10.1 Connecting to the Web Admin Interface ························································· 63

10.2 Configuration with the Setup Wizard ······························································ 64

10.3 Advanced Setup ····························································································· 68

10.4 Cellular WAN ·································································································· 69

11 MEDIAFAST CONFIGURATION ············································································· 75

11.1 Setting Up MediaFast Content Caching ························································· 75

11.2 Scheduling Content Prefetching ····································································· 76

11.3 MDM Settings ································································································· 78

11.4 Viewing MediaFast Statistics ·········································································· 79

12 CONFIGURING THE LAN INTERFACE(S) ···························································· 80

12.1 LAN Configuration with VLAN ········································································ 87

13 DROP-IN MODE ······································································································· 92

14 CONFIGURING THE WAN INTERFACE(S) ··························································· 96

14.1 Physical Interface Settings ············································································· 98

14.2 Connection Method(s) ···················································································· 99

14.3 WAN Health Check ······················································································ 107

14.4 Bandwidth Allowance Monitor ······································································ 110

14.5 Additional Public IP Settings········································································· 111

14.6 Dynamic DNS Settings ················································································· 112

15 PEPVPN WITH SPEEDFUSION

15.1 SpeedFusion

TM

Settings ··············································································· 115

TM

BANDWIDTH BONDING ······························ 115

15.2 The Peplink Balance Behind a NAT Router ················································· 122

USER MANUAL

Peplink Balance Series

15.3 SpeedFusion

16 IPSEC VPN ············································································································· 124

16.1 IPsec VPN Settings ······················································································ 124

16.2 IPsec Status ································································································· 128

17 OUTBOUND POLICY MANAGEMENT ································································· 129

17.1 Outbound Policy ··························································································· 130

17.2 Custom Rules for Outbound Policy ······························································ 131

18 INBOUND ACCESS ······························································································· 139

18.1 Definition of Servers on LAN ········································································ 139

18.2 Definition of Port Forwarding ········································································ 140

18.3 Inbound Access Services ············································································· 142

18.4 Reverse Lookup Zones ················································································ 158

18.5 DNS Record Import Wizard ·········································································· 162

TM

Status ·················································································· 123

19 NAT MAPPINGS ····································································································· 166

20 CAPTIVE PORTAL ································································································· 168

21 QOS ························································································································· 171

21.1 User Groups ································································································· 171

21.2 Bandwidth Control ························································································ 172

21.3 Application ···································································································· 173

22 FIREWALL ·············································································································· 175

22.1 Outbound and Inbound Firewall Rules ························································· 175

23 OSPF & RIPV2 ······································································································· 184

24 REMOTE USER ACCESS ····················································································· 187

MISCELLANEOUS SETTINGS ······················································································ 189

24.1 High Availability ···························································································· 189

24.2 Certificate Manager ······················································································ 192

24.3 Service Forwarding ······················································································ 192

24.4 Service Passthrough ···················································································· 194

25 AP ···························································································································· 196

25.1 AP Controller ································································································ 196

25.2 Wireless SSID ······························································································ 197

25.3 Profiles ········································································································· 203

25.4 Info ··············································································································· 207

25.5 Usage ··········································································································· 208

25.6 SSID ············································································································· 211

25.7 Wireless Client ····························································································· 211

USER MANUAL

Peplink Balance Series

25.8 Rogue AP ····································································································· 212

25.9 Toolbox ········································································································ 213

26 SYSTEM SETTINGS ······························································································ 214

26.1 Admin Security ····························································································· 214

26.2 Firmware ······································································································ 218

26.3 Schedule ······································································································ 219

26.4 Time ············································································································· 220

26.5 Email Notification ·························································································· 221

26.6 Event Log ····································································································· 223

26.7 SNMP ··········································································································· 224

26.8 InControl ······································································································· 226

26.9 Configuration ································································································ 227

26.10 Feature Add-ons ························································································ 228

26.11 Reboot ······································································································· 228

27 TOOLS ···················································································································· 229

27.1 Ping ·············································································································· 229

27.2 Traceroute Test ···························································································· 230

27.3 Wake-on-LAN ······························································································· 230

27.4 CLI (Command Line Interface) Support ························································ 230

28 STATUS ·················································································································· 232

28.1 Device ·········································································································· 232

28.2 Active Sessions ···························································································· 234

28.3 Client List······································································································ 236

28.4 WINS Client ·································································································· 236

28.5 OSPF & RIPv2 ····························································································· 236

28.6 SpeedFusion

TM

Status ·················································································· 237

28.7 Event Log ····································································································· 240

28.8 Bandwidth····································································································· 241

APPENDIX A. RESTORATION OF FACTORY DEFAULTS ········································ 246

APPENDIX C. ROUTING UNDER DHCP, STATIC IP, AND PPPOE ·························· 247

C.1 Routing Via Network Address Translation (NAT) ········································· 247 C.2 Routing Via IP Forwarding············································································ 248

APPENDIX D. CASE STUDIES ····················································································· 249

D.1 MPLS Alternative ·························································································· 249 D.2 Colégio Next - Enabling eLearning ······························································· 256 D.3 Performance Optimization ············································································ 258 D.4 Maintaining the Same IP Address Throughout a Session ···························· 262 D.5 Bypassing the Firewall to Access Hosts on LAN ·········································· 263

USER MANUAL

Peplink Balance Series

D.6 Inbound Access Restriction ·········································································· 264 D.7 Outbound Access Restriction ······································································· 265

APPENDIX E. TROUBLESHOOTING ··········································································· 266

APPENDIX F. DECLARATION ······················································································ 267

APPENDIX G: PRODUCT DATASHEETS ···································································· 268

USER MANUAL

Important Note to Users Upgrading from Firmware 4.7 or below

If your current firmware version is 4.7 or below, please upgrade to Firmware 4.8.2 before upgrading to firmware 6.3.

Important Note to Users of the Peplink Balance 30 (Classic Edition)

Firmware 5.0 or above is NOT applicable to the Peplink Balance 30 (Classic Edition). For more information on identifying the generation of your Peplink Balance 30, please visit our knowledgebase at <http://www.peplink.com/index.php?view=faq&id=231&path=16>.

Peplink Balance Series

1 Introduction and Scope

The Peplink Balance series provides link aggregation and load balancing across up to thirteen WAN connections.

The Peplink Balance series offers cost-effective solutions suitable for SOHO/power users and small businesses. The Balance lineup also features a range of advanced enterprise solutions. Peplink enterprise routers are ideal single-box solutions for medium to large business environments, and they allow service providers to enable highly available multi-network services.

The Peplink MediaFast series downloads and buffers video, audio, iTunes/iTunes U, HTTP, and other content for uninterrupted learning and fun anytime.

This manual applies to the following Peplink Balance products running firmware 6.3:

 Peplink Balance 20/30  Peplink Balance 30 LTE  Peplink Balance 50  Peplink Balance 210/310  Peplink Balance 380  Peplink Balance 580  Peplink Balance 710  Peplink Balance 1350  Peplink Balance 2500  Peplink MediaFast 200/500

The manual covers setting up your Peplink Balance or MediaFast and provides a collection of case studies detailing the advanced features of the Peplink Balance.

USER MANUAL

Term

Definition

3G

3rd generation standards for wireless communications (e.g., HSDPA)

4G

4th generation standards for wireless communications (e.g., LTE)

DHCP

Dynamic Host Configuration Protocol

DNS

Domain Name System

EVDO

Evolution-Data Optimized

FQDN

Fully Qualified Domain Name

HSDPA

High-Speed Downlink Packet Access

HTTP

Hyper-Text Transfer Protocol

ICMP

Internet Control Message Protocol

IP

Internet Protocol

LAN

Local Area Network

MAC Address

Media Access Control Address

MTU

Maximum Transmission Unit

MSS

Maximum Segment Size

NAT

Network Address Translation

PPPoE

Point to Point Protocol over Ethernet

QoS

Quality of Service

SNMP

Simple Network Management Protocol

TCP

Transmission Control Protocol

UDP

User Datagram Protocol

VPN

Virtual Private Network

VRRP

Virtual Router Redundancy Protocol

WAN

Wide Area Network

WINS

Windows Internet Name Service

WLAN

Wireless Local Area Network

210+

Refers to Peplink Balance 210/310/380/580/710/1350/2500

380+

Refers to Peplink Balance 380/580/710/1350/2500

Peplink Balance Series

2 Glossary

The following terms, acronyms, and abbreviations are frequently used in this manual:

USER MANUAL

20/30/50

30LTE

One

210

310

305

380

WAN Ports

2/3/5

2 2 2 3 3

2

Throughput (Mbps)

150

600

200

1Gbps

Embedded 4G LTE Modem

- 1 - - - - -

PepVPN

Yes

SpeedFusion Hot Failover

- - -^

Yes

-^

Yes

SF Bandwidth Bonding

- - -^

Yes

-^

Yes

SF WAN Smoothing

- - -^

Yes

-^

Yes

Drop-In Mode

- - -

Yes

High Availability

- - -

Yes

Simultaneous Dual-Band

802.11a/b/g/n Wi-Fi AP

- - Yes

- - -

-

AP Controller

Yes

Remote AP Management

- - - - -

Yes

Web Filtering Blacklist

- - Light

Light

Full

MediaFast Content Caching

- - - - - - -

Peplink Balance Series

3 Product Comparison Chart

Click underlined features to reach the relevant portion of the manual.

^Available as an optional feature

Full product comparison available at: http://www.peplink.com/products/balance/model-comparison/

USER MANUAL

580

710

1350

2500

MFA200

MFA500

MFA750

WAN Ports

5 7 13

12 2 5

7

Throughput (Mbps)

1.5Gbps

2.5Gbps

5Gbps

8Gbps

200

800

1.5Gbps

Embedded 4G LTE Modem

- - -

-

PepVPN

Yes

SpeedFusion Hot Failover

Yes

-^

Yes

SF Bandwidth Bonding

Yes

-^

Yes

SF WAN Smoothing

Yes

-^

Yes

Drop-In Mode

Yes

High Availability

Yes

Simultaneous Dual-Band

802.11a/b/g/n Wi-Fi AP

- - -

-

Yes - -

AP Controller

Yes

Remote AP Management

Yes

-

Yes

Web Filtering Blacklist

Full

Light

Full

MediaFast Content Caching

- - -

-

Yes

Peplink Balance Series

^Available as an optional feature

Full product comparison available at: http://www.peplink.com/products/balance/model-comparison/

USER MANUAL

Peplink Balance Series

4 Product Features

Peplink Balance Series products enable all LAN users to share broadband Internet connections and provide advanced features to enhance Internet access. The following is a list of supported features:

4.1 Supported Network Features

4.2 WAN

 Multiple public IP support (DHCP, PPPoE, static IP address)  Static IP support for PPPoE  10/100/1000Mbps Ethernet connection in full/half duplex  Built-in HSPA and EVDO cellular modems  USB mobile connection (only one USB modem can be connected at a time)  Drop-in mode on selectable WAN port with MAC address passthrough network

address translation (NAT) / port address translation (PAT)

 Inbound and outbound NAT mapping  Multiple static IP addresses per WAN connection  MAC address clone  Customizable MTU and MSS values  WAN connection health check  Dynamic DNS (supported service providers: changeip.com, dyndns.org, no-

ip.org,tzo.com, and DNS-O-Matic)

 Ping, DNS lookup, and HTTP-based health check

4.3 LAN

 DHCP server on LAN  Extended DHCP option support  Static routing rules  Local DNS proxy server

 VLAN on LAN support

4.4 VPN

 Secure SpeedFusion  SpeedFusion performance analyzer  X.509 certificate support (feature activation required on some Balance

models)

 Bandwidth bonding and failover among selected WAN connections  Ability to route traffic to a remote VPN peer  Optional pre-shared key setting

TM

USER MANUAL

Peplink Balance Series

 Layer 2 bridging  Layer 2 Peer Isolation  SpeedFusion  Built-in L2TP / PPTP VPN server  Authenticate L2TP / PPTP clients using RADIUS and LDAP servers  Multi-Site PepVPN Profile  IPsec VPN for network-to-network connections (works with Cisco and Juniper

only)

 L2TP / PPTP and IPsec passthrough

4.5 Inbound Traffic Management

 TCP/UDP traffic redirection to dedicated LAN server(s)  Inbound link load balancing by means of DNS

TM

throughput, ping, and traceroute tests

4.6 Outbound Policy

 Link load distribution per TCP/UDP service  Persistent routing for specified source and/or destination IP addresses per

TCP/UDP service

 Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms  Time-based scheduling

4.7 AP Controller

 Configure and manage Pepwave AP devices  Review the status of connected AP

4.8 QoS

 Quality of service for different applications and custom protocols  User group classification for different service levels  Bandwidth usage control and monitoring on group- and user-level  Application prioritization for custom protocols and DSL optimization

USER MANUAL

Peplink Balance Series

4.9 Firewall

 Outbound (LAN to WAN) firewall rules  Inbound (WAN to LAN) firewall rules per WAN connection  Intrusion detection and prevention  Specification of NAT mappings  Web blocking  Application blocking  Time-based scheduling  Outbound firewall rules can be defined by destination domain name

4.10 Captive Portal

 Social Wi-Fi Hotspot Support  Splash screen of open networks, login page for secure networks  Customizable built-in captive portal  Supports linking to outside page for captive portal

USER MANUAL

Peplink Balance Series

4.11 Other Supported Features

 Easy-to-use web administration interface  HTTP and HTTPS support for web administration interface  Configurable web administration port and administrator password  Read-only user for web admin  Shared-IP drop-in mode  Authentication and accounting by RADIUS server for web admin  Firmware upgrades, configuration backups, ping, and traceroute via web

administration interface

 Remote web-based configuration (via WAN and LAN interfaces)  Remote reporting to Peplink Balance reporting server  Hardware high availability via VRRP, with automatic configuration

synchronization

 Real-time, hourly, daily and monthly bandwidth usage reports and charts  Hardware backup via LAN bypass  Built-in WINS server

 Time server synchronization  SNMP  Email notification  Syslog  SIP passthrough  PPTP packet passthrough  Active sessions  Active client list  WINS client list  UPnP / NAT-PMP  Improved active sessions page  Event log is persistent across reboots  IPv6 support  Support for USB tethering on Android 2.2+ phones

USER MANUAL

Peplink Balance Series

5 Advanced Feature Summary

5.1 Drop-in Mode and LAN Bypass: Transparent Deployment

As your organization grows, it needs more bandwidth. But modifying your network would require effort better spent elsewhere. In Drop-in Mode, you can conveniently install your Peplink router without making any changes to your network. And if the Peplink router loses power for any reason, LAN Bypass will safely and automatically bypass the Peplink router to resume your original network connection.

5.2 QoS: Clearer VoIP

VoIP and videoconferencing are highly sensitive to latency. With QoS, Peplink routers can detect VoIP traffic and assign it the highest priority, giving you crystal-clear calls.

USER MANUAL

Peplink Balance Series

5.3 Per-User Bandwidth Control

With per-user bandwidth control, you can define bandwidth control policies for up to 3 groups of users to prevent network congestion. Define groups by IP address and subnet, and set bandwidth limits for every user in the group.

5.4 High Availability via VRRP

When your organization has a corporate requirement demanding the highest availability with no single point of failure, you can deploy two Peplink routers in High Availability

mode. With High Availability mode, the second device will take over when needed.

USER MANUAL

Peplink Balance Series

5.5 USB Modem and Android Tethering

For increased WAN diversity, plug in a USB LTE modem as backup. Peplink routers are compatible with over 200 modem types. You can also tether to smartphones running Android 4.1.X and above.

5.6 Built-In Remote User VPN Support

Use L2TP with IPsec to safely and conveniently connect remote clients to your private network. L2TP with IPsec is supported by most devices, but legacy devices can also connect using PPTP.

Click here for full instructions on setting up L2TP with IPsec.

USER MANUAL

Peplink Balance Series

5.7 LACP NIC Bonding

Use 802.3ad to combine multiple LAN connections into a virtual LAN connection. This virtual connection has higher throughput and redundancy in case any single link fails.

USER MANUAL

Public safety sector has strict demand and review processes when procuring routers suitable for deployment. Our MAX BR1 are ruggedized and perform as required and have been used by police departments, fire departments and other emergency response units in different countries. The most common application is vehicular wireless connectivity, where multiple wireless employed to ensure service vehicles stay connected. Our wireless routers are also being used for adding wireless backhaul to remote CCTV networks.

It is common for schools network to become slow and congested during classes due to students’ simultaneous access. Our MediaFast routers can reduce network traffic to ease the load on the network. Teachers can store frequently accessed education content including high definition media, mobile applications, web content and mobile device updates in advance. This reduces network congestion during classes and provides students with a much improved education content user experience.

The retail sector generally has to keep their branch networks up and running for applications such as enterprise resource planning (ERP), terminal services and point-of-sale (POS) systems. By deploying wireless routers, our end users have been able to save significant amount of network costs at their branches by replacing or supplementing their MPLS lines with inexpensive WAN connections.

Peplink Balance Series

6 Usage Scenarios

The Balance SD-WAN router series has a wide range of products suitable for many different deployments and markets. Entry level SD-WAN models such as the Balance 30, and MediaFast 200 are suitable for SMEs or branch offices. High-capacity SD-WAN routers such as the Balance 580, Balance 2500, and MediaFast 750 are suitable for larger organizations and head offices.

Set out below are the major industries that have been using our SD-WAN routers:

USER MANUAL

The industrial, construction and utilities sector typically have sites that are out of the way or temporary in nature. End uses in this sector have been deploying our wireless routers to quickly setup WAN connections through wireless connections. For areas where wireless connectivity coverage is intermittent, our customers have been deploying our MAX HD routers for more bandwidth and reliability by bonding multiple wireless networks through our SpeedFusion technology.

A hospitality customer usually needs a network infrastructure that can provide fast internet access to hundreds of guests. By deploying our Balance series routers, hospitality end-users are able to prioritize and separate network traffic to prevent congestion, and the ability to use 4G LTE USB modems for an additional resilience and bandwidth.

Broadcasters, including journalists and reporters, usually rely on wireless networks to stream live content back to stations, especially for live broadcast and sports events. Our MAX HD2, MAX HD4 and MAX On-The-Go routers have been selected by end-users to employ multiple wireless networks to stream live multimedia contents.

Peplink Balance Series

USER MANUAL

Vessels often roam between shore networks, wireless networks and satellite. Vessels which have been deploying our wireless routers to improve offshore communications, transmitting oceanographic research data and providing Internet access to its crew and passengers.

Our MAX HD series routers with its multiple embedded wireless modems can keep passengers connected to high speed Internet. Fleet management is also built-in and available to transportation operators via InControl.

It is crucial for stakeholders in energy sector to access their supervisory control and data acquisition systems reliably and remotely. Our wireless routers have been helping our customers modernize their networking communications part of their supervisory control and data acquisition systems, providing them with reliability and resiliency over wireless connections while enabling real-time monitoring and controls.

Peplink Balance Series

USER MANUAL

Peplink Balance Series

The diagram below illustrates how our SD-WAN routers, SpeedFusion technology and InControl cloud services can be used together.

Each of our SD-WAN routers (Balance 710, Balance 380 and MAX HD2) can form SpeedFusion with each other. Thus, secure connections can be established among the headquarters, branch and vehicle. Further Balance 710, Balance 380 and MAX HD2 can be managed by InControl to reduce administration effort.

USER MANUAL

Peplink Balance Series

7 Package Contents

The contents of Peplink Balance product packages are as follows:

7.1 Peplink Balance One

 Peplink Balance One  Power adapter  Information slip

7.2 Peplink Balance 20/30/30 LTE/50

 Peplink Balance 20/30/30 LTE/50  Power adapter  Information slip

7.3 Peplink Balance 210/310

 Peplink Balance 210/310  Power adapter  Information slip  Rackmount kit

7.4 Peplink Balance 305/380/580/710/1350/2500

 Peplink Balance 305/380/580/710/1350/2500  Power cord  Information slip  Rackmount kit

7.5 Peplink MediaFast 200

 Peplink MediaFast 200  Power adapter  Information slip

7.6 Peplink MediaFast 500

 Peplink MediaFast 500  Power cord  Information slip  Rackmount kit

USER MANUAL

Power and Status Indicators

Wi-Fi

OFF – Wi-Fi is off

Green – Ready

Status

OFF – Upgrading firmware

Red – Booting up or busy

Blinking red – Boot up error

Green – Ready

LAN and WAN Ports

Green LED

ON – 10 / 100 / 1000 Mbps

Orange LED

Blinking – Data is transferring

OFF – No data is being transferred or port is not connected

Port Type

Auto MDI/MDI-X ports

USB Port

Status LED

USB Port

LAN Ports

WAN Ports

Reset Button

Wi-Fi LED

Peplink Balance Series

8 Peplink Balance Overview

8.1 Peplink Balance One

8.1.1 Front Panel Appearance

8.1.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

USB Ports

For future functionality

Power Connector

Peplink Balance Series

8.1.3 Rear Panel Appearance

8.1.4 Product Label

USER MANUAL

Power and Status Indicators

Power

OFF – Power off

Green – Power on

Status

OFF – Upgrading firmware

Red – Booting up or busy

Blinking red – Boot up error

Green – Ready

LAN and WAN Ports

Green LED

ON – 10 / 100 / 1000 Mbps

Orange LED

Blinking – Data is transferring

OFF – No data is being transferred or port is not connected

Port Type

Auto MDI/MDI-X ports

USB Port

USB Ports

For connecting a 4G/3G USB modem

LAN Ports

Power LED

Reset Button

Status LED

WAN Ports

USB Port

Peplink Balance Series

8.2 Peplink Balance 20

8.2.1 Front Panel Appearance

8.2.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Serial Number and

LAN MAC Address Power Connector

Kensington Security Slot

Peplink Balance Series

8.2.3 Rear Panel Appearance

8.2.4 Unit Base Appearance

USER MANUAL

Power and Status Indicators

Power

OFF – Power off

Green – Power on

Status

OFF – Upgrading firmware

Red – Booting up or busy

Blinking red – Boot up error

Green – Ready

LAN and WAN Ports

Green LED

ON – 10 / 100 /1000 Mbps

Orange LED

Blinking – Data is transferring

OFF – No data is being transferred or port is not connected

Port Type

Auto MDI/MDI-X ports

USB Port

USB Ports

For connecting a 4G/3G USB modem

Reset Button

Power LED

Status LED

LAN Ports

WAN Ports

USB Port

Peplink Balance Series

8.3 Peplink Balance 30

8.3.1 Front Panel Appearance

8.3.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Serial Number and

LAN MAC Address

Power Connector

Kensington Security Slot

Peplink Balance Series

8.3.3 Rear Panel Appearance

8.3.4 Unit Base Appearance

USER MANUAL

Power and Status Indicators

Power

OFF – Power off

Green – Power on

Status

OFF – Upgrading firmware

Red – Booting up or busy

Blinking red – Boot up error

Green – Ready

LAN and WAN Ports

Green LED

ON – 10 / 100 /1000 Mbps

Orange LED

Blinking – Data is transferring

OFF – No data is being transferred or port is not connected

Port Type

Auto MDI/MDI-X ports

USB Port

USB Ports

For connecting a 4G/3G USB modem

Reset Button

Power LED

Status LED

LAN Ports

WAN Ports

USB Port

Peplink Balance Series

8.4 Peplink Balance 30 LTE

8.4.1 Front Panel Appearance

8.4.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Serial Number and

LAN MAC Address

Power Connector

Cellular SIM Slot

Peplink Balance Series

8.4.3 Rear Panel Appearance

8.4.4 Unit Base Appearance

USER MANUAL

Power and Status Indicators

Power

OFF – Power off

Green – Power on

Status

OFF – Upgrading firmware

Red – Booting up or busy

Blinking red – Boot up error

Green – Ready

LAN and WAN Ports

Green LED

ON – 10 / 100 /1000 Mbps

Orange LED

Blinking – Data is transferring

OFF – No data is being transferred or port is not connected

Port Type

Auto MDI/MDI-X ports

USB Port

USB Ports

For connecting a 4G/3G USB modem

USB Port

LAN Ports

WAN Ports

Reset Button

Status LED

Power LED

Peplink Balance Series

8.5 Peplink Balance 50

8.5.1 Front Panel Appearance

8.5.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Power Connector

Kensington Security Slot

Peplink Balance Series

8.5.3 Rear Panel Appearance

USER MANUAL

Power and Status Indicators

Status

OFF – Upgrading firmware

Red – Booting up or busy

Blinking red – Boot up error

Green – Ready

LAN and WAN Ports

Green LED

ON – 10 / 100 / 1000 Mbps

Orange LED

Blinking – Data is transferring

OFF – No data is being transferred or port is not connected

Port Type

Auto MDI/MDI-X ports

USB Port

USB Ports

For connecting a 4G/3G USB modem

WAN Ports

LAN Ports

Status LED

Reset

Button

USB

Peplink Balance Series

8.6 Peplink Balance 210

8.6.1 Front Panel Appearance

8.6.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Serial Number and

LAN MAC Address

Power

Connector

Peplink Balance Series

8.6.3 Rear Panel Appearance

8.6.4 Unit Base Appearance

USER MANUAL

Power and Status Indicators

Status

OFF – Upgrading firmware

Red – Booting up or busy

Blinking red – Boot up error

Green – Ready

LAN and WAN Ports

Green LED

ON – 10 / 100 / 1000 Mbps

Orange LED

Blinking – Data is transferring

OFF – No data is being transferred or port is not connected

Port Type

Auto MDI/MDI-X ports

USB Port

USB Ports

For connecting a 4G/3G USB modem

WAN Ports

LAN Ports

Status LED

Reset

Button

USB

Peplink Balance Series

8.7 Peplink Balance 310

8.7.1 Front Panel Appearance

8.7.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Serial Number and

LAN MAC Address

Power

Connector

Peplink Balance Series

8.7.3 Rear Panel Appearance

8.7.4 Unit Base Appearance

USER MANUAL

Power and Status Indicators

Power LED

OFF – Power off

GREEN – Power on

LAN Port, WAN 1 – 3 Ports

Right LED

ORANGE – 1000 Mbps

GREEN – 100 Mbps

OFF – 10 Mbps

Left LED

Solid – Port is connected without traffic

Blinking – Data is transferring

OFF – Port is not connected

Port Type

Auto MDI/MDI-X ports

Console and USB Ports

Console Port

Reserved for engineering use

USB Ports

For connecting a 4G/3G USB modem

Console

LCD Controls

USB

Peplink Balance Series

8.8 Peplink Balance 305

8.8.1 Front Panel Appearance

8.8.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Peplink Balance Series

8.8.3 LCD Display Menu

> HA State: Master/Slave > LAN IP > VIP > System Status > System > Firmware ver. (shows firmware version) > Serial number (shows serial number) > System time (shows current time) > System up time (shows system uptime since last reboot) > CPU load (shows current CPU loading, 0-100%) > LAN > Status (shows LAN port physical status) > IP address (shows LAN IP address) > Subnet mask (shows LAN subnet mask) > Link status (shows Connected/Disconnected, IP address list) > WAN1 > WAN2 > WAN3 > VPN status (shows Connected/Disconnected) >VPN Profile 1 >VPN Profile 2 >… >VPN Profile n > Link usage > Throughput in (shows transfer rate in Kbps) > WAN1 > WAN2 > WAN3 > Throughput out (shows transfer rate in Kbps) > WAN1 > WAN2 > WAN3 > Data Transfer’d (shows volume transferred since last reboot in MB) > WAN1 > WAN2 > WAN3 > Maintenance > Reboot > Reboot? (Yes/No) (to reboot the unit) > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > WAN3

USER MANUAL

Connector Ports

Power Connector

AC input 110/220V

Switch

Power Switch

Pressing and holding the key for four seconds will power down the unit. When the unit is powered off, pressing this switch will power on the unit.

Power

Connector

Power

Switch

Serial Number

and

LAN MAC

Address

Peplink Balance Series

8.8.4 Rear Panel Appearance

8.8.5 Unit Label Appearance

USER MANUAL

Power and Status Indicators

Power LED

OFF – Power off

GREEN – Power on

LAN Port, WAN 1 – 3 Ports

Right LED

ORANGE – 1000 Mbps

GREEN – 100 Mbps

OFF – 10 Mbps

Left LED

Solid – Port is connected without traffic

Blinking – Data is transferring

OFF – Port is not connected

Port Type

Auto MDI/MDI-X ports

Console and USB Ports

Console Port

Reserved for engineering use

USB Ports

For connecting a 4G/3G USB modem

Console

LCD Controls

Power

WAN

Peplink Balance Series

8.9 Peplink Balance 380

8.9.1 Front Panel Appearance

8.9.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

USER MANUAL

Peplink Balance Series

8.9.3 LCD Display Menu

> HA State: Master/Slave > LAN IP > VIP > System Status > System > Firmware ver. (shows firmware version) > Serial number (shows serial number) > System time (shows current time) > System up time (shows system uptime since last reboot) > CPU load (shows current CPU loading, 0-100%) > LAN > Status (shows LAN port physical status) > IP address (shows LAN IP address) > Subnet mask (shows LAN subnet mask) > Link status (shows Connected/Disconnected, IP address list) > WAN1 > WAN2 > WAN3 > VPN status (shows Connected/Disconnected) >VPN Profile 1 >VPN Profile 2 >… >VPN Profile n > Link usage > Throughput in (shows transfer rate in Kbps) > WAN1 > WAN2 > WAN3 > Throughput out (shows transfer rate in Kbps) > WAN1 > WAN2 > WAN3 > Data Transfer’d (shows volume transferred since last reboot in MB) > WAN1 > WAN2 > WAN3 > Maintenance > Reboot > Reboot? (Yes/No) (to reboot the unit) > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2 > WAN3

USER MANUAL

Connector Ports

Power Connector

AC input 110/220V

Switch

Power Switch

Pressing and holding the key for four seconds will power down the unit. When the unit is powered off, pressing this switch will power on the unit.

Power

Connector

Power

Switch

Serial Number

and

LAN MAC

Address

Peplink Balance Series

8.9.4 Rear Panel Appearance

8.9.5 Unit Label Appearance

USER MANUAL

Power and Status Indicators

Power LED

OFF – Power off

GREEN – Power on

LAN Port, WAN 1 – 5 Ports

Right LED

ORANGE – 1000 Mbps

GREEN – 100 Mbps

OFF – 10 Mbps

Left LED

Solid – Port is connected without traffic

Blinking – Data is transferring

OFF – Port is not connected

Port Type

Auto MDI/MDI-X ports

Console and USB Ports

Console Port

Reserved for engineering use

USB Ports

For connecting a 4G/3G USB modem

Console

LCD Controls

Peplink Balance Series

8.10 Peplink Balance 580

8.10.1 Front Panel Appearance

8.10.2 LED Indicators

The statuses indicated by the front panel LEDs are as follows:

8.10.3 LCD Display Menu

USER MANUAL

Peplink Balance Series

> HA State: Master/Slave > LAN IP > VIP > System Status > System > Firmware ver. (shows firmware version) > Serial number (shows serial number) > System time (shows current time) > System up time (shows system uptime since last reboot) > CPU load (shows current CPU loading, 0-100%) > LAN > Status (shows LAN port physical status) > IP address (shows LAN IP address) > Subnet mask (shows LAN subnet mask) > Link status (shows Connected/Disconnected, IP address list) > WAN1 > WAN2

> … >WAN5 > VPN status (shows Connected/Disconnected) >VPN Profile 1 >VPN Profile 2 >… >VPN Profile n > Link usage > Throughput in (shows transfer rate in Kbps) > WAN1 > WAN2

> … >WAN5 > Throughput out (shows transfer rate in Kbps) > WAN1 > WAN2

> … >WAN5 > Data Transfer’d (shows volume transferred since last reboot in MB) > WAN1 > WAN2

> … >WAN5 > Maintenance > Reboot > Reboot? (Yes/No) (to reboot the unit) > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2

> … >WAN5

USER MANUAL

Connector Ports

Power Connector

AC input 110/220V

Switch

Power Switch

Pressing and holding the key for four seconds will power down the unit. When the unit is powered off, pressing this switch will power on the unit.

Power Connector

Power

Switch

Serial Number

and

LAN MAC

Address

Peplink Balance Series

Rear Panel Appearance

8.10.4 Unit Label Appearance

USER MANUAL

LAN Port, WAN 1 – 7 Ports

Green LED

ON – 1000 Mbps

OFF – 100/10 Mbps

Orange LED

Solid – Port is connected without traffic

Blinking – Data is transferring

OFF – Port is not connected

Port Type

Auto MDI/MDI-X ports

LED Indicator

Power LED

OFF – Power off

GREEN – Power on

Console & USB Ports

Console Port

Reserved for engineering use

USB Ports

For connecting a 4G/3G USB modem

LCD Controls

Peplink Balance Series

8.11 Peplink Balance 710

8.11.1 Front Panel Appearance

Status indicated in the front panel is as follows:

USER MANUAL

Peplink Balance Series

8.11.2 LCD Display Menu

> HA State: Master/Slave >LAN IP > VIP > System Status > System > Firmware ver. (shows firmware version) > Serial number (shows serial number) > System time (shows current time) > System up time (shows system uptime since last reboot) > CPU load (shows current CPU loading, 0-100%) > LAN > Status (shows LAN port physical status) > IP address (shows LAN IP address) > Subnet mask (shows LAN subnet mask) > Link status (shows Connected/Disconnected, IP address list) > WAN1 > WAN2 > … > WAN7 > VPN status (shows Connected/Disconnected) >VPN Profile 1 >VPN Profile 2 >… >VPN Profile n > Link usage > Throughput in (shows transfer rate in Kbps) > WAN1 > WAN2 > … > WAN7 > Throughput out (shows transfer rate in Kbps) > WAN1 > WAN2 > … > WAN7 > Data Transfer’d (shows volume transferred since last reboot in MB) > WAN1 > WAN2 > … > WAN7 > Maintenance > Reboot > Reboot? (Yes/No) (to reboot the unit) > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, > LAN 10baseT-HD, 100baseTx-FD, 100baseTx-HD, > WAN1 1000baseTx-FD) > WAN2 > … > WAN7

USER MANUAL

Connector Ports

RS-232 Port

Reserved for engineering use

Power Connector

AC input 110/220V

Switches

Power Switch

Pressing and holding the key for four seconds will power down the unit. When the unit is powered off, pressing this switch will power on the unit.

Reset Switch

Press and release once to reset the system.

Serial Number

and

LAN MAC

Address

Peplink Balance Series

8.11.3 Rear Panel Appearance

8.11.4 Unit Label Appearance

USER MANUAL

LAN Port, WAN 1 – 13 Ports

Right LED

ORANGE – 1000 Mbps

GREEN – 100 Mbps

OFF – 10 Mbps

Left LED

Solid – Port is connected without traffic

Blinking – Data is transferring

OFF – Port is not connected

Port Type

Auto MDI/MDI-X ports

LED Indicator

Power LED

OFF – Power off

GREEN – Power on

Console & USB Ports

Console Port

Reserved for engineering use

USB Ports

For connecting a 4G/3G USB modem

Peplink Balance Series

8.12 Peplink Balance 1350

8.12.1 Front Panel Appearance

Status indicated in the front panel is as follows:

USER MANUAL

Peplink Balance Series

8.12.2 LCD Display Menu

> HA State: Master/Slave >LAN IP > VIP > System Status > System > Firmware ver. (shows firmware version) > Serial number (shows serial number) > System time (shows current time) > System up time (shows system uptime since last reboot) > CPU load (shows current CPU loading, 0-100%) > LAN > Status (shows LAN port physical status) > IP address (shows LAN IP address) > Subnet mask (shows LAN subnet mask) > Link status (shows Connected/Disconnected, IP address list) > WAN1 > WAN2 > … > WAN13 > VPN status (shows Connected/Disconnected) >VPN Profile 1 >VPN Profile 2 >… >VPN Profile n > Link usage > Throughput in (shows transfer rate in Kbps) > WAN1 > WAN2 > … > WAN13 > Throughput out (shows transfer rate in Kbps) > WAN1 > WAN2 > … > WAN13 > Data Transfer’d (shows volume transferred since last reboot in MB) > WAN1 > WAN2 > … > WAN13 > Maintenance > Reboot > Reboot? (Yes/No) (to reboot the unit) > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD,1000baseTx-FD) > WAN1 > WAN2 > … > WAN13

USER MANUAL

Connector Ports

Power Connector

AC input 110/220V

Switches

Power Switch

Pressing and holding the key for four seconds will power down the unit. When the unit is powered off, pressing this switch will power on the unit.

Power

Connector

Power

Switch

Serial Number

and

LAN MAC

Address

Peplink Balance Series

8.12.3 Rear Panel Appearance

8.12.4 Unit Label Appearance

USER MANUAL

Console

Power

WAN

Peplink Balance Series

8.13 Peplink Balance 2500

8.13.1 Front Panel Appearance

BPL-2500

BPL-2500-SFP

USER MANUAL

LAN and WAN Ports

Right LED

ORANGE – 1000 Mbps

GREEN – 100 Mbps

OFF – 10 Mbps

Left LED

Solid – Port is connected without traffic

Blinking – Data is transferring

OFF – Port is not connected

Port Type

Auto MDI/MDI-X ports

LED Indicator

Power LED

OFF – Power off

GREEN – Power on

Console & USB Ports

Console Port

Reserved for engineering use

USB Ports

For connecting a 4G/3G USB modem

Peplink Balance Series

Status indicated in the front panel is as follows:

USER MANUAL

Peplink Balance Series

8.13.2 LCD Display Menu

> HA State: Master/Slave >LAN IP > VIP > System Status > System > Firmware ver. (shows firmware version) > Serial number (shows serial number) > System time (shows current time) > System up time (shows system uptime since last reboot) > CPU load (shows current CPU loading, 0-100%) > LAN > Status (shows LAN port physical status) > IP address (shows LAN IP address) > Subnet mask (shows LAN subnet mask) > Link status (shows Connected/Disconnected, IP address list) > WAN1 > WAN2 > … > WAN13 > VPN status (shows Connected/Disconnected) >VPN Profile 1 >VPN Profile 2 >… >VPN Profile n > Link usage > Throughput in (shows transfer rate in Kbps) > WAN1 > WAN2 > … > WAN13 > Throughput out (shows transfer rate in Kbps) > WAN1 > WAN2 > … > WAN13 > Data Transfer’d (shows volume transferred since last reboot in MB) > WAN1 > WAN2 > … > WAN13 > Maintenance > Reboot > Reboot? (Yes/No) (to reboot the unit) > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD,1000baseTx-FD) > WAN1 > WAN2 > … > WAN13

USER MANUAL

Connector Ports

Power Connector

AC input 100-240V

Switches

Power Switch

Pressing and holding the key for four seconds will power down the unit. When the unit is powered off, pressing this switch will power on the unit.

Power

Connector

Power

Switch

Serial Number

and

LAN MAC

Address

Serial Number

and

LAN MAC

Address

Peplink Balance Series

8.13.3 Rear Panel Appearance

8.13.4 Unit Label Appearance

BPL-2500

BPL-2500-SFP

USER MANUAL

LAN 1-3 Ports, WAN 1-5 Ports

Right LED

ORANGE – 1000 Mbps

GREEN – 100 Mbps

OFF – 10 Mbps

Left LED

Solid – Port is connected without traffic

Blinking – Data is transferring

OFF – Port is not connected

Port Type

Auto MDI/MDI-X ports

LED Indicator

Power LED

OFF – Power off

GREEN – Power on

Console & USB Ports

Console Port

Reserved for engineering use

USB Ports

For connecting 4G/3G USB modems

USB Ports

WAN

Peplink Balance Series

8.14 Peplink MediaFast 500

8.14.1 Front Panel Appearance

Status indicated in the front panel is as follows:

USER MANUAL

Peplink Balance Series

8.14.2 LCD Display Menu

> HA State: Master/Slave > LAN IP > VIP > System Status > System > Firmware ver. (shows firmware version) > Serial number (shows serial number) > System time (shows current time) > System up time (shows system uptime since last reboot) > CPU load (shows current CPU loading, 0-100%) > LAN > Status (shows LAN port physical status) > IP address (shows LAN IP address) > Subnet mask (shows LAN subnet mask) > Link status (shows Connected/Disconnected, IP address list) > WAN1 > WAN2

> … >WAN5 > VPN status (shows Connected/Disconnected) >VPN Profile 1 >VPN Profile 2 >… >VPN Profile n > Link usage > Throughput in (shows transfer rate in Kbps) > WAN1 > WAN2

> … >WAN5 > Throughput out (shows transfer rate in Kbps) > WAN1 > WAN2

> … >WAN5 > Data Transfer’d (shows volume transferred since last reboot in MB) > WAN1 > WAN2

> … >WAN5 > Maintenance > Reboot > Reboot? (Yes/No) (to reboot the unit) > Factory default > Factory default? (Yes/No) (to restore factory defaults) > LAN config > Port speed (shows port speed: Auto, 10baseT-FD, 10baseT-HD, > LAN 100baseTx-FD, 100baseTx-HD, 1000baseTx-FD) > WAN1 > WAN2

> … >WAN5

USER MANUAL

Connector Ports

Power Connector

AC input 100-240V

Switches

Power Switch

Pressing and holding the key for four seconds will power down the unit. When the unit is powered off, pressing this switch will power on the unit.

Power

Switch

Power

Connector

Peplink Balance Series

8.14.3 Rear Panel Appearance

USER MANUAL

Peplink Balance Series

9 Installation

The following section details connecting the Peplink Balance to your network:

9.1 Preparation

Before installing your Peplink Balance, please prepare the following:

 At least one Internet/WAN access account  For each network connection, one 10/100BaseT UTP cable with RJ45 connector,

one 1000BaseT Cat5E UTP cable for the Gigabit port, or one USB modem for the USB WAN port

 A computer with the TCP/IP network protocol and a web browser installed—

supported browsers include Microsoft Internet Explorer 8.0 and above, Mozilla Firefox 10.0 and above, Apple Safari 5.1 and above, and Google Chrome 18 and above

9.2 Constructing the Network

At the high level, construct the network according to the following steps:

1. With an Ethernet cable, connect a computer to one of the LAN ports on the Peplink

Balance. For Peplink Balance models that support multiple connections, repeat with different cables for up to four computers to be connected.

2. With another Ethernet cable, connect the WAN/broadband modem to one of the

WAN ports on the Peplink Balance. Repeat using different cables to connect from two to 13 WAN/broadband connections or connect a USB modem to the USB WAN port.

3. Connect the provided power adapter or cord to the power connector on the Peplink

Balance, and then plug the power adapter into a power outlet.

USER MANUAL

Peplink Balance Series

The following figure schematically illustrates the resulting configuration:

USER MANUAL

Peplink Balance Series

9.3 Configuring the Network Environment

To ensure that your Peplink Balance works properly in the LAN environment and can access the Internet via the WAN connections, please refer to the following setup procedures:

 LAN configuration

For basic configuration, refer to Section 10, Basic Configuration. For advanced configuration, refer to Section 0, Configuring the LAN

Interface(s).

 WAN configuration

For basic configuration, refer to Section 10, Basic Configuration. For advanced configuration, refer to Section 14, Configuring the WAN

Interface(s).

 MediaFast configuration

For MediaFast configuration, refer to Section 11, MediaFast Configuration.

USER MANUAL

Peplink Balance Series

10 Basic Configuration

10.1 Connecting to the Web Admin Interface

1. Start a web browser on a computer that is connected with the Peplink Balance

through the LAN.

2. To connect to the web admin of the Peplink Balance, enter the following LAN IP

address in the address field of the web browser:

http://192.168.1.1

(This is the default LAN IP address of the Peplink Balance.)

3. Enter the following to access the

web admin interface.

Username: admin Password: admin

(This is the default admin user login of the Peplink Balance. The admin and read-only user password can be changed at System>Admin Security.)

4. After successful login, the Dashboard of the web admin interface will be

displayed. It looks similar to the following:

USER MANUAL

Important Note

The Save button causes the changes to be saved. Configuration changes (e.g., WAN, LAN, admin settings, etc.) take effect after clicking the Apply Changes button on each page’s top-right corner.

Peplink Balance Series

10.2 Configuration with the Setup Wizard

The Setup Wizard simplifies the task of configuring WAN connection(s) by guiding the configuration process step-by-step.

To begin, click Setup Wizard after connecting to the web admin interface.

Click Next >> to begin.

Select Yes if you want to set up drop-in mode using the Setup Wizard.

USER MANUAL

Peplink Balance Series

Click on the appropriate checkbox(es) to select the WAN connection(s) to be configured. If you have chosen to configure drop-in mode using the Setup Wizard, the WAN port to be configured in drop-in mode will be checked by default.

If drop-in mode is going to be configured, the setup wizard will move on to Drop-in Settings.

USER MANUAL

Peplink Balance Series

If you are not using drop-in mode, select the connection method for the WAN connection(s) from the following screen:

Depending on the selection of connection type, further configuration may be needed. For example, PPPoE and static IP require additional settings for the selected WAN port.

Please refer to Section 14, Configuring the WAN Interface(s) for details on setting up

DHCP, static IP, and PPPoE. If Mobile Internet Connection is checked, the setup wizard will move on to Operator

Settings.

If Custom Mobile Operator Settings is selected, APN parameters are required. Some service providers may charge a fee for connecting to a different APN. Please consult your service provider for the correct settings.

USER MANUAL

Peplink Balance Series

Click on the appropriate check box(es) to select the preferred WAN connection(s). Connection(s) not selected in this step will be used as backup only. Click Next >> to continue.

Choose the time zone of your country/region. Check the box Show all to display all time zone options.

Check in the following screen to make sure all settings have been configured correctly, and then click Save Settings to confirm.

After finishing the last step in the setup wizard, click Apply Changes on the page header to allow the configuration changes to take effect.

USER MANUAL

Tip

Please refer to Section 14, Configuring the WAN Interface(s), for details on setting up DHCP, static IP, PPPoE, L2TP, and mobile Internet connections.

Peplink Balance Series

10.3 Advanced Setup

Advanced settings can be configured from the Network menu. WAN connections can be configured by entering the corresponding WAN connection information at Network>Interfaces>WAN.

USER MANUAL

Cellular Status

IMSI

This is the International Mobile Subscriber Identity, which uniquely identifies the SIM card. This is applicable to 3G modems only.

MEID

Some Balance models support both HSPA and EV-DO. For Sprint or Verizon Wireless EVDO users, a unique MEID identifier code (in hexadecimal format) is used by the carrier to associate the EV-DO device with the user. This information is presented in hex and decimal format.

ESN

This serves the same purpose as MEID HEX but uses an older format.

IMEI

This is the unique ID for identifying the modem in GSM/HSPA mode.

Network Mode

This field displays the network mode, such as HSPA, for the listed cellular connection.

Peplink Balance Series

10.4 Cellular WAN

To access cellular WAN settings, click Network>WAN>Details next to the appropriate cellular connection listing.

USER MANUAL

WAN Connection Settings

WAN

Connection

Name

Enter a name to represent this WAN connection.

Network Mode

Choose the appropriate network mode for the cellular connection.

Routing Mode

Select the routing method to be used in routing IP frames via the WAN connection. The mode

can be either NAT (network address translation) or IP Forwarding. Click the button to enable IP forwarding.

DNS Servers

Each ISP may provide a set of DNS servers for DNS lookups. This setting specifies the DNS (Domain Name System) servers to be used when a DNS lookup is routed through this connection.

Selecting Obtain DNS server address automatically results in the DNS servers assigned by the PPPoE server being used for outbound DNS lookups over the WAN connection. (The DNS servers are obtained along with the WAN IP address assigned from the PPPoE server.)

When Use the following DNS server address(es) is selected, you can put custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields.

Peplink Balance Series

USER MANUAL

Cellular Settings

3G/2G

Select Auto, 3G Only, or 2G Only. Click to display advanced band selection options.

Authentication

Choose from Auto, PAP Only, or CHAP Only to authenticate cellular connections.

Band Selection

Select on or more bands to restrict cellular traffic to those bands.

Data Roaming

This checkbox enables data roaming on this particular SIM card. Please check your service

provider’s data roaming policy before proceeding.

Operator

Settings

This setting applies to 3G / EDGE / GPRS modems only. It does not apply to EVDO / EVDO Rev. A modems.

This allows you to configure the APN settings of your connection. If Auto is selected, the mobile operator should be detected automatically. The connected device will be configured, and connection will be made automatically afterwards. If there is any difficulty in making a connection, you may select Custom to enter your carrier’s APN, Username, and Passwordsettings manually. The correct values can be obtained from your carrier. The default and recommended value for Operator Settings is Auto.

Peplink Balance Series

USER MANUAL

APN /

Username /

Password /

SIM PIN

When Auto is selected, the information in these fields will be filled automatically. Select Custom to customize these parameters. The parameter values are determined by and can be

obtained from the ISP. Click to display a link to manage your SIM pin.

Bandwidth

Allowance

Monitor

Check Enable to turn on bandwidth usage monitoring on this WAN connection for each billing cycle. When this option is not enabled, bandwidth usage of each month is still being tracked, but no action will be taken.

Action

If Email Notification is enabled, you will be notified by email when usage hits 75% and 95% of the monthly allowance.

If Disconnect when usage hits 100% of monthly allowance is checked, this WAN connection will be disconnected automatically when the usage hits the monthly allowance. It will not resume connection unless this option has been turned off or the usage has been reset when a new billing cycle starts.

Start Day

This option allows you to define which day of the month each billing cycle begins.

Monthly

Allowance

This field is for defining the maximum bandwidth usage allowed for the WAN connection each month.

General Settings

IP Passthrough

When IP Passthrough is checked, after the cellular WAN connection is up, the router's DHCP server will offer the connection's IP address to one LAN client. All incoming or outgoing traffic will be routed without NAT.

Regardless the WAN connection's state, the router always binds to the LAN IP address (default: 192.168.50.1). When the cellular WAN is connected, the LAN client could access the router's web admin by manually configuring its IP address to the same subnet as the router's LAN IP address (e.g., 192.168.50.10).

Note: when this option is first enabled, the LAN client may not be able to refresh its IP address to the cellular WAN IP address in a timely fashion. The LAN client may have to manually renew its IP address from DHCP server. After this option is enabled, the DHCP lease time will be two minutes (i.e., the LAN client could refresh its IP address and access the network at most one minute after the cellular WAN connection goes up).

Also note that if an Ethernet WAN link fails during IP passthrough, the router can failover to a cellular WAN link that is also using IP passthrough.

Peplink Balance Series

USER MANUAL

Standby State

This option allows you to choose whether to remain connected or disconnect when this WAN connection is no longer in the highest priority and has entered the standby state. When Remain connected is chosen, setting this WAN connection as active will make it immediately available for use.

Idle Disconnect

When Internet traffic is not detected within the user-specified timeframe, the modem will automatically disconnect. Once the traffic is resumed by the LAN host, the connection will be reactivated.

Health Check Settings

Heath Check

Method

This setting allows you to specify the health check method for the cellular connection. The available options are Disabled, Ping, DNS Lookup, HTTP, and SmartCheck.

The default method is DNS Lookup. See Section 14.3 for configuration details.

Timeout

If a health check test cannot be completed within the specified amount of time, the test will be treated as failed.

Health Check

Interval

This is the time interval between each health check test.

Health Check

Retries

This is the number of consecutive check failures before treating a connection as down.

Recovery

Retries

This is the number of responses required after a health check failure before treating a connection as up again.

Peplink Balance Series

USER MANUAL

Dynamic DNS Settings

Dynamic DNS

Service Provider

This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers:

 changeip.com  dyndns.org  no-ip.org  tzo.com  DNS-O-Matic

Select Disabled to disable this feature. See Section 14.6 for configuration details.

MTU

MTU determines the maximum allowable size per packet, in bytes.

Peplink Balance Series

USER MANUAL

MediaFast

Enable

Click the checkbox to enable MediaFast content caching.

Domains / IP

Addresses

Choose to Cache on all domains, or enter domain names and then choose either Whitelist (cache the specified domains only) or Blacklist (do not cache the specified

domains).

Peplink Balance Series

11 MediaFast Configuration

MediaFast settings can be configured from the Network menu.

11.1 Setting Up MediaFast Content Caching

To access MediaFast content caching settings, select Network>MediaFast.

The Secure Content Caching menu operates identically to the MediaFast menu, except it is for secure contenting accessible through https://.

USER MANUAL

Cache Control

Content Type

Check these boxes to cache the listed content types or leave boxes unchecked to disable caching for the listed types.

Cache Lifetime

Settings

Enter a file extension, such as JPG or DOC. Then enter a lifetime in days to specify how long files with that extension will be cached. Add or delete entries using the controls on the right.

Peplink Balance Series

11.2 Scheduling Content Prefetching

Content prefetching allows you to download content on a schedule that you define, which can help to preserve network bandwidth during busy times and keep costs down. To access MediaFast content prefetching settings, select Network>MediaFast>Prefetch Schedule.

USER MANUAL

Prefetch Schedule Settings

Name

This field displays the name given to the scheduled download.

Status

Check the status of your scheduled download here.

Next Run

Time/Last Run

Time

These fields display the date and time of the next and most recent occurrences of the scheduled download.

Last Duration

Check this field to ensure that the most recent download took as long as expected to complete. A value that is too low might indicate an incomplete download or incorrectly specified download target, while a value that is too long could mean a download with an incorrectly specified target or stop time.

Result

This field indicates whether downloads are in progress ( ) or complete ( ).

Last Download

Check this field to ensure that the most recent download file size is within the expected range. A value that is too low might indicate an incomplete download or incorrectly specified download target, while a value that is too long could mean a download with an incorrectly specified target or stop time. This field is also useful for quickly seeing which downloads are consuming the most storage space.

Actions

To begin a scheduled download immediately, click . To cancel a scheduled download, click . To edit a scheduled download, click . To delete a scheduled download, click .

New Schedule

Click to begin creating a new scheduled download. Clicking the button will cause the following screen to appear:

Peplink Balance Series

USER MANUAL

Simply provide the requested information to create your schedule.

Clear Web

Cache

Click to clear all cached contentn. Note that this action cannot be undone.

Clear Statistics

Click to clear all prefetch and status page statistics.

MDM Settings

Enable

Click this checkbox to enable MDM on your router.

Account Settings

Click Follow Web Admin Account to allow client devices to use the built-in administrator account when performing MDM. Set Custom to specify a username and password your router will use to log into your client devices.

Peplink Balance Series

11.3 MDM Settings

In addition to performing content caching, MediaFast-enabled routers can also serve as an MDM, administrating to client devices.

USER MANUAL

Peplink Balance Series

11.4 Viewing MediaFast Statistics

To get details on storage and bandwidth usage, select Status>MediaFast.

USER MANUAL

IP Settings

IP Address &

Subnet Mask

Enter the Peplink Balance’s IP address and subnet mask values to be used on the LAN. To

enable multiple VLANs, press the button on the top right-hand corner.

Drop-in Mode Settings

Enable

Drop-in mode eases the installation of the Peplink Balance on a live network between the existing firewall and router, such that no configuration changes are required on existing equipment. Check the box to enable the drop-in mode feature.

Please refer to Section 13, Drop-in Mode for details.

WAN for Drop-

In Mode

Select the WAN port to be used for drop-in mode. If WAN 1 with LAN Bypass is selected, the high availability feature will be disabled automatically.

Peplink Balance Series

12 Configuring the LAN Interface(s)

LAN Interface settings are located at Network>LAN>Network Settings. Begin setting up your physical LAN by entering IP settings (VLAN configuration will be covered following physical LAN setup).

If drop-in mode will be used, you can configure it in the next section.

USER MANUAL

Shared Drop-In

IPA

When this option is enabled, the passthrough IP address will be used to connect to WAN hosts (email notification, remote syslog, etc.). The Balance will listen for this IP address when WAN hosts access services provided by the Balance (web admin access from the WAN, DNS server requests, etc.).

To connect to hosts on the LAN (email notification, remote syslog, etc.), the default gateway address will be used. The Balance will listen for this IP address when LAN hosts access services provided by the Balance (web admin access from the WAN, DNS proxy, etc.).

Shared IP

AddressA

Access to this IP address will be passed through to the LAN port if this device is not serving the service being accessed. The shared IP address will be used in connecting to hosts on the WAN (e.g., email notification, remote syslog, etc.) The device will also listen on the IP address when hosts on the WAN access services served on this device (e.g., web admin accesses from WAN, DNS server, etc.)

WAN Default

Gateway

Enter the WAN router's IP address in this field. If there are more hosts in addition to the

router on the WAN segment, click the button next to “WAN Default Gateway” and check the I have other host(s) on WAN segment box and enter the IP address of the hosts that need to access LAN devices or be accessed by others.

WAN DNS

Servers

Enter the selected WAN's corresponding DNS server IP addresses.

Layer 2 PepVPN Bridging Settings

PepVPN

Profiles to

Bridge

The remote network of the selected PepVPN profiles will be bridged with this local LAN, creating a Layer 2 PepVPN. They will be connected and operate like a single LAN, and any broadcast or multicast packets will be sent over the VPN.

Remote

Network

Isolation

Enable this option if you want to block network traffic between the remote networks. This will not affect the connectivity between them and this local LAN.

Spanning Tree

Protocol

Click this checkbox to enable spanning tree protocol in your L2 PepVPN.

Override IP

Address when

bridge

connected

Select Do not override if the LAN IP address and local DHCP server should remain unchanged after the Layer 2 PepVPN is up.

If you choose to override IP address when the VPN is connected, the device will not act as a router, and most Layer 3 routing functions will cease to work.

Peplink Balance Series

A

- Advanced feature, please click the button on the top right-hand corner to activate.

USER MANUAL

DHCP Server Settings

DHCP Server

When this setting is enabled, the Peplink Balance’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP

address via DHCP. The Peplink Balance’s DHCP server can prevent IP address collisions

on the LAN.

DHCP Server

Logging

Check this box to log DHCP server activity.

IP Range &

Subnet Mask

These settings allocate a range of IP addresses that will be assigned to LAN computers by the Peplink Balance’s DHCP server.

Lease Time

This setting specifies the length of time throughout which an IP address of a DHCP client remains valid. Upon expiration of Lease Time, the assigned IP address will no longer be valid and the IP address assignment must be renewed.

DNS Servers

This option allows you to input the DNS server addresses to be offered to DHCP clients. If Assign DNS server automatically is selected, the Peplink Balance’s built-in DNS server address (i.e., LAN IP address) will be offered.

WINS Server

This option allows you to specify the Windows Internet Name Service (WINS) server. You may choose to use the built-in WINS server or external WINS servers.

When this unit is connected using SpeedFusionTM, other VPN peers can share this unit's built-in WINS server by entering this unit's LAN IP address in their DHCP WINS Servers setting. Therefore, all PC clients in the VPN can resolve the NetBIOS names of other clients in remote peers. If you have enabled this option, a list of WINS clients will be displayed at

Status>WINS Clients.

BOOTP

Check this box to enable BOOTP on older networks that still require it.

Peplink Balance Series

Note: drop-in mode and VLAN functionality are mutually exclusive. To change DHCP settings, continue to the next section.

USER MANUAL

Extended

DHCP Option

In addition to standard DHCP options (e.g. DNS server address, gateway address, subnet mask), you can specify the value of additional extended DHCP options, as defined in RFC

2132. With these extended options enabled, you can pass additional configuration information to LAN hosts.

To define an extended DHCP option, click the Add button, choose the option to define, and then enter its value. For values that are in IP address list format, you can enter one IP address per line in the provided text area input control. Each option can be defined once only.

DHCP

Reservation

This setting reserves the assignment of fixed IP addresses for a list of computers on the LAN. The computers to be assigned fixed IP addresses on the LAN are identified by their MAC addresses.

The fixed IP address assignment is displayed as a cross-reference list between the computers’ names, MAC addresses, and fixed IP addresses.

Name (an optional field) allows you to specify a name to represent the device. MAC

addresses should be in 00:AA:BB:CC:DD:EE format. Press to create a new record. Press to remove a record. Reserved clients information can be imported from the

Client List, located at Status>Client List. For more details, please refer to Section 28.3.

LAN Physical Settings

Speed

The default speed setting is Auto, which allows the Balance to detect and apply an appropriate speed setting. You can also set the speed manually, as well as specify whether the speed will be advertised on the network. Generally, advertising port speed is necessary only when the port experiences difficulty negotiating speeds with peer devices.

IEEE 802.3ad

Link

Aggregation

Choose the interfaces that you wish to aggregate here if needed.

Peplink Balance Series

Next, choose port settings.

If required, enter static route and/or WINS server settings.

DHCP relay settings is an advanced feature. To enable it, click the button next to DHCP Server.

USER MANUAL

DHCP Relay Settings

DHCP Relay

Enter the address of the DHCP server here. DHCP requests will be relayed to it.

DHCP Server

IP Address

DHCP requests from the LAN are relayed to the entered DHCP server. For active-passive DHCP server configurations, enter active and passive DHCP server IPs

into the DHCP Server 1 and DHCP Server 2 fields.

DHCP Option

82

This feature includes device information as relay agent for the attached client when forwarding DHCP requests from a DHCP client to a DHCP server. Device MAC address and network name are embedded to circuit ID and Remote ID in option 82.

DHCP Relay

Logging

Check this box to log DHCP relay activity.

Static Route Settings

Static Route

This table is for defining static routing rules for the LAN segment. A static route consists of the network address, subnet mask, and gateway address. The address and subnet mask values are in w.x.y.z format.

The local LAN subnet and subnets behind the LAN will be advertised to the VPN. Remote routes sent over the VPN will also be accepted. Any VPN member will be able to route to

the local subnets. Click to create a new route. Click to remove a route.

WINS Server Settings

Enable

Check the box to enable the WINS Server. A list of WINS clients will be displayed at

Status>WINS Clients.

Peplink Balance Series

Enter any needed DNS proxy settings. Once all settings have been entered, click Save to store your changes.

USER MANUAL

DNS Proxy Settings

Enable

To enable the DNS proxy feature, check this box, and then set up the feature at Network>LAN>DNS Proxy Settings.

A DNS proxy server can be enabled to serve DNS requests originating from LAN/PPTP/SpeedFusion

TM

peers. Requests are forwarded to the DNS servers/resolvers

defined for each WAN connection.

DNS Caching

This field is to enable DNS caching on the built-in DNS proxy server. When the option is

enabled, queried DNS replies will be cached until the records’ TTL has been reached. This

feature can improve DNS response time by storing all received DNS results for faster DNS lookup. However, it cannot return the most updated result for frequently updated DNS records. By default, DNS Caching is disabled.

Include Google

Public DNS

Servers

When this option is enabled, the DNS proxy server will forward DNS requests to Google's public DNS servers, in addition to the DNS servers defined in each WAN. This could

increase the DNS service's availability. This setting is disabled by default.

Local DNS

Records

This table is for defining custom local DNS records. A static local DNS record consists of a host name and IP address. When looking up the host name from the LAN to LAN IP of the Peplink Balance, the corresponding IP address will be returned. To display the option to set

TTL manually, click . Click to create a new record. Click to remove a record.

Domain

Lookup Policy

DNS proxy will look up the domain names defined here using only the specified connections.

DNS

ResolversA

Check the box to enable the WINS server. A list of WINS clients will be displayed at Network>LAN>DNS Proxy Settings>DNS Resolvers.

This field specifies which DNS resolvers will receive forwarded DNS requests. If no WAN/VPN/LAN DNS resolver is selected, all of the WAN’s DNS resolvers will be selected. If a SpeedFusion

TM

peer is selected, you may enter the VPN peer’s DNS resolver IP

Peplink Balance Series

USER MANUAL

address(es).

Queries will be forwarded to the selected connections’ resolvers. If all of the selected

connections are down, queries will be forwarded to all resolvers on healthy WAN connections.

Bonjour Forwarding Settings

Enable

Check this box to turn on Bonjour forwarding.

Bonjour

Service

Choose Service and Client networks from the drop-down menus, and then click to add the networks. To delete an existing Bonjour listing, click .

Peplink Balance Series

A

- Advanced feature, please click the button on the top right-hand corner to activate.

Finally, if needed, configure your Bonjour forwarding settings. Once all settings have been entered, click Save to store your changes.

USER MANUAL

IP Settings

IP Address

Enter the Peplink Balance’s IP address and subnet mask values to be used on the LAN.

Network Settings

Name

Enter a name for the LAN.

VLAN ID

Enter a VLAN ID for your LAN.

Inter-VLAN

routing

Check this box to enable routing between virtual LANs.

Captive Portal

Check this box to turn on captive portals.

Peplink Balance Series

12.1 LAN Configuration with VLAN

To enable VLAN configuration, click the button in the IP Settings section.

To add a new LAN, click the New LAN button. To change LAN settings, click the name of the LAN to change under the LAN heading.

The following settings are displayed:

USER MANUAL

Drop-in Mode Settings

Enable

Drop-in mode eases the installation of the Peplink Balance on a live network between the existing firewall and router, such that no configuration changes are required on existing equipment. Check the box to enable the drop-in mode feature.

Please refer to Section 13, Drop-in Mode for details.

WAN for Drop-

In Mode

Select the WAN port to be used for drop-in mode. If WAN 1 with LAN bypass is selected, the high availability feature will be disabled automatically.

Shared Drop-In

IPA

When this option is enabled, the passthrough IP address will be used to connect to WAN hosts (email notification, remote syslog, etc.). The Balance will listen for this IP address when WAN hosts access services provided by the Balance (web admin access from the WAN, DNS server requests, etc.).

To connect to hosts on the LAN (email notification, remote syslog, etc.), the default gateway address will be used. The Balance will listen for this IP address when LAN hosts access services provided by the Balance (web admin access from the WAN, DNS proxy, etc.).

Shared IP

AddressA

Access to this IP address will be passed through to the LAN port if this device is not serving the service being accessed. The shared IP address will be used in connecting to hosts on the WAN (e.g., email notification, remote syslog, etc.) The device will also listen on the IP address when hosts on the WAN access services served on this device (e.g., web admin accesses from WAN, DNS server, etc.)

WAN Default

Gateway

Enter the WAN router's IP address in this field. If there are more hosts in addition to the

router on the WAN segment, click the button next to WAN Default Gateway and check the I have other host(s) on WAN segment box and enter the IP address of the hosts that

Peplink Balance Series

USER MANUAL

need to access LAN devices or be accessed by others.

WAN DNS

Servers

Enter the selected WAN's corresponding DNS server IP addresses.

Layer 2 PepVPN BridgingA

PepVPN

Profiles to

BridgeA

The remote network of the selected PepVPN profiles will be bridged with this local LAN, creating a Layer 2 PepVPN. They will be connected and operate like a single LAN, and any broadcast or multicast packets will be sent over the VPN.

Remote

Network

IsolationA

Enable this option if you want to block network traffic between remote networks. This will not affect the connectivity between them and this local LAN.

Spanning Tree

ProtocolA

When Layer 2 bridging is enabled, this field specifies the port to be bridged to the remote site. If you choose WAN, the selected WAN will be dedicated to bridging with the remote site and will be disabled for WAN purposes. The LAN port will remain unchanged.

Override IP

Address when

bridge is

connectedA

Select "Do not override" if the LAN IP address and local DHCP server should remain unchanged after the Layer 2 PepVPN is up.

If you choose to override IP address when the VPN is connected, the device will not act as a router, and most Layer 3 routing functions will cease to work.

Peplink Balance Series

A

- Advanced feature, please click the button on the top right-hand corner to activate.

A

- Advanced feature, please click the button on the top right-hand corner of the

Network Settings menu to activate.

USER MANUAL

DHCP Server Settings

DHCP Server

When this setting is enabled, the Peplink Balance’s DHCP server automatically assigns an IP address to each computer that is connected via LAN and configured to obtain an IP

address via DHCP. The Peplink Balance’s DHCP server can prevent IP address collisions

on the LAN.

DHCP Server

Logging

Check this box to log DHCP server activity.

IP Range &

Subnet Mask

These settings allocate a range of IP address that will be assigned to LAN computers by the Peplink Balance’s DHCP server.

Lease Time

This setting specifies the length of time throughout which an IP address of a DHCP client remains valid. Upon expiration of Lease Time, the assigned IP address will no longer be valid and the IP address assignment must be renewed.

DNS Servers

This option allows you to input the DNS server addresses to be offered to DHCP clients. If Assign DNS server automatically is selected, the Peplink Balance’s built-in DNS server address (i.e., LAN IP address) will be offered.

WINS Servers

This option allows you to specify the Windows Internet Name Service (WINS) server. You may choose to use the built-in WINS server or external WINS servers.

When this unit is connected using SpeedFusionTM, other VPN peers can share this unit's built-in WINS server by entering this unit's LAN IP address in their DHCP WINS Servers setting. Therefore, all PC clients in the VPN can resolve the NetBIOS names of other clients in remote peers. If you have enabled this option, a list of WINS clients will be displayed at

Status>WINS Clients.

BOOTP

Check this box to enable BOOTP on older networks that still require it.

Extended

DHCP Option

In addition to standard DHCP options (e.g., DNS server address, gateway address, subnet mask), you can specify the value of additional extended DHCP options, as defined in RFC

2132. With these extended options enabled, you can pass additional configuration information to LAN hosts.

To define an extended DHCP option, click the Add button, choose the option to define, and then enter its value. For values that are in IP address list format, you can enter one IP address per line in the provided text area input control. Each option can be defined once only.

Peplink Balance Series

USER MANUAL

DHCP

Reservation

This setting reserves the assignment of fixed IP addresses for a list of computers on the LAN. The computers to be assigned fixed IP addresses on the LAN are identified by their MAC addresses. The fixed IP address assignment is displayed as a cross-reference list between the computers’ names, MAC addresses, and fixed IP addresses.

Name (an optional field) allows you to specify a name to represent the device. MAC

addresses should be in 00:AA:BB:CC:DD:EE format. Click to create a new record. Click to remove a record. Reserved clients information can be imported from the

Client List, located at Status>Client List. For more details, please refer to Section 28.3.

DHCP Relay Settings

Enable

Check this box to turn on DHCP relay.

DHCP Server IP

Address

Enter the IP addresses of one or two DHCP servers in the provided fields. The DHCP servers entered here will receive relayed DHCP requests from the LAN. For active-passive DHCP server configurations, enter active and passive DHCP server relay IP addresses in

DHCP Server 1 and DHCP Server 2.

DHCP Option

82

DCHP Option 82 includes device information as relay agent for the attached client when

forwarding DHCP requests from client to server. This option also embeds the device’s MAC

address and network name in circuit and remote IDs. Check this box to enable DHCP Option 82.

DHCP Relay

Logging

Check this box to log DHCP relay activity.

Peplink Balance Series

Once configuration is complete, click Save to store the changes. To configure DHCP relay, first click the button found next to the DHCP Server option

to display the settings.

Once DHCP is set up, click Save and configure LAN Physical Settings, Static Route Settings, WINS Server Settings, DNS Proxy Settings, and Bonjour Forwarding as noted above.

USER MANUAL

IMPORTANT NOTE for customers using drop-in mode and

planning to upgrade from Firmware 4.8.2 or below to 5.0+

MAC address passthrough for drop-in mode is implemented in Firmware 5.0 and above. If drop-in mode is enabled when upgrading from a previous firmware version, the ARP tables on hosts on LAN and WAN segments must be flushed once. Alternately, the hosts may be rebooted. Otherwise, hosts on one side may not be able to reach hosts on the other side of the Peplink Balance until old ARP records expire. Units not using drop-in mode are not affected.

NOTE

The PPTP server will be disabled in drop-in mode.

Peplink Balance Series

13 Drop-in Mode

Drop-in mode (or transparent bridging mode) eases the installation of the Peplink Balance on a live network between the firewall and router, such that changes to the settings of existing equipment are not required.

The following diagram illustrates drop-in mode setup:

Enable drop-in mode using the Setup Wizard. After enabling this feature and selecting the WAN for drop-in mode, various settings, including the WAN's connection method and IP address, will be automatically updated.

When drop-in mode is enabled, the LAN and the WAN for drop-in mode ports will be bridged. Traffic between the LAN hosts and WAN router will be forwarded between the devices. In this case, the hosts on both sides will not notice any IP or MAC address changes.

After successfully setting up the Peplink Balance as part of the network using drop-in mode, it will, depending on model, support one or more WAN connections. Some MediaFast units also support multiple WAN connections after activating drop-in mode, though a SpeedFusion license may be required to activate more than one WAN port.

USER MANUAL

Peplink Balance Series

To enable drop-in mode, perform the following steps:

1. Check the Enable box under Drop-in Mode, located at Network>LAN>Network

Settings. (After checking the Enable box, most network settings for WAN1 will be hidden in the web admin interface.)

2. Enter the IP address of the WAN1 router in the WAN Default Gateway field.

Ensure that the Peplink Balance’s IP subnet is the same as the firewall’s WAN port and the router’s LAN port.

3. If there are hosts other than the router on the WAN segment of the Peplink

Balance, check the I have other host(s) on WAN segment box, enter the IP address(es) of the host(s), and then click the down-arrow to add the hosts.

4. To avoid consuming an IP address, click to turn on the shared IP address

feature. Then check Share Drop-In IP and enter a Shared IP Address.

USER MANUAL

Peplink Balance Series

USER MANUAL

Important Note

Starting from Firmware version 5.0, drop-in mode can be configured on any WAN port. Please note that only one WAN port can be configured in drop-in mode. If you have selected the LAN bypass port as the WAN for drop-in mode, the high availability feature will be DISABLED automatically.

Tip

Want to know more about drop-in mode? Visit our YouTube Channel for video tutorials!

http://youtu.be/lZG2-VPml5w

Peplink Balance Series

The following diagram illustrates:

USER MANUAL

Connection Settings

WAN

Connection

Name

Enter a name to represent this WAN connection.

Enable

Click to enable this WAN connection. If needed, click the drop-down menu to apply a schedule to this connection.

Connection

Method

This option allows you to select the connection method for this WAN connection. Available options are:

1. DHCP

2. Static IP

3. PPPoE

4. L2TP

Peplink Balance Series

14 Configuring the WAN Interface(s)

WAN interface settings are located at Network>WAN.

By clicking a Connection Name, connection settings of that WAN can be modified. The connection method and details can be obtained from your ISP.

USER MANUAL

5. GRE

See Sections 14.2.1, 14.2.2, 14.2.3, 14.2.4 and 14.2.5 for configuration details pertaining to each connection method.

Routing Mode

This field shows that NAT (network address translation) will be applied to the traffic routing over this WAN connection. IP Forwarding is also available when you click the link in the help text. For further details, please refer to Appendix B,

Routing under DHCP, Static IP, and PPPoE.

Connection

Type

This setting specifies the utilization of the WAN connection.

Always-on results in the WAN connection being used whenever it is available. If Backup Priority and a priority group are selected, the WAN connection is treated as a backup

connection and is used only in the absence of available always-on WAN connection(s) and higher priority backup connection(s).

The default and recommended connection type is Always-on.

Reply to ICMP

Ping

If this field is disabled, the WAN connection will not respond to ICMP ping requests. By default, this setting is enabled.

Upload

Bandwidth

This setting specifies the data bandwidth in the outbound direction from the LAN through the WAN interface. This value is provided by your ISP and should reflect the actual speed of the WAN. This value is referenced when default weight is chosen for outbound traffic and traffic prioritization. Setting the correct value here can result in effective traffic prioritization and efficient use of upload bandwidth.

Download

Bandwidth

This setting specifies the data bandwidth in the inbound direction from the WAN interface to the LAN. This value is provided by your ISP and should reflect the actual speed of the WAN. This value is referenced as the default weight value when using the Least Used or Persistence (Auto) algorithms in Outbound Policy with Managed by Custom Rules chosen.

IPv6

IPv6 support can be enabled on one of the available Ethernet WAN ports. On this screen, you can choose which WAN will support IPv6.

To enable IPv6 support on a WAN, the WAN router must respond to stateless address auto configuration advertisements and DHCPv6 requests. IPv6 clients on the LAN will acquire their IPv6, gateway, and DNS server addresses from it. The device will also acquire an IPv6 address for performing ping/traceroute checks and accepting web admin accesses.

Peplink Balance Series

USER MANUAL

Physical Interface Settings

Speed

This setting specifies port speed and duplex configurations of the WAN port. By default, Auto is selected, and the appropriate data speed is automatically detected by the Peplink

Balance. In the event of negotiation issues, the port speed can be manually specified. You can also choose whether or not to advertise the speed to the peer by selecting Advertise

Speed.

MTU

This setting specifies the maximum transmission unit. By default, MTU is set to Custom

1440. You may adjust the MTU value by editing the text field. Click Default to restore the

default MTU value. Select Auto, and the appropriate MTU value will be automatically detected. The auto-detection will run each time the WAN connection establishes.

MSS

This setting should be configured based on the maximum payload size that the local system can handle. The MSS (maximum segment size) is computed by taking the MTU and subtracting 40 bytes for TCP over IPv4.If MTU is set to Auto, MSS will also be set automatically. By default, MSS is set to Auto.

MAC Address Clone

This setting allows you to configure the MAC address. Some service providers (e.g., cable

providers) identify the client’s MAC address and require the client to always use the same MAC address to connect to the network. In such cases, change the WAN interface’s MAC address to the original client PC’s MAC address via this field. The default MAC address is a

unique value assigned at the factory. In most cases, the default value is sufficient. Clicking the Default button restores the MAC address to the default value.

VLAN

Some service providers require the router to enable VLAN tagging for Internet traffic. If it is required by your service provider, you can enable this field and enter the VLAN ID that the provider requires.

Note: leave this field disabled if you are not sure.

Peplink Balance Series

14.1 Physical Interface Settings

USER MANUAL

DHCP Settings

Hostname (Optional)

If your service provider's DHCP server requires you to supply a hostname value upon acquiring an IP address, you may enter the value here. If your service provider does not provide you with a hostname, you can safely bypass this option.

DNS Servers

Each ISP may provide a set of DNS servers for DNS lookups. This setting specifies the DNS (Domain Name System) servers to be used when a DNS lookup is routed through this connection.

Selecting Obtain DNS server address automatically results in the DNS servers assigned by the WAN DHCP server being used for outbound DNS lookups over the connection. (The DNS servers are obtained along with the WAN IP address assigned by the DHCP server.) When Use the following DNS server address(es) is selected, you may

enter custom DNS server addresses for this WAN connection into the DNS server 1 and DNS server 2 fields.

Peplink Balance Series

14.2 Connection Method(s)

There are four possible connection methods:

1. DHCP

2. Static IP

3. PPPoE

4. L2TP

5. Mobile Internet Connection (for USB WAN)

14.2.1 DHCP Connection

The DHCP connection method is suitable if your ISP provides an IP address automatically using DHCP (e.g., cable, metro Ethernet, etc.).

Please refer to Sections 14.3, 14.4, 14.5, and 14.6 for details about WAN Health

Check, Bandwidth Allowance Monitor, Additional Public IP Settings, and Dynamic DNS Settings.

USER MANUAL

Static IP Settings

IP Address /

Subnet Mask /

Default

Gateway

These settings specify the information required in order to communicate on the Internet via a fixed Internet IP address.

The information is typically determined by and can be obtained from your ISP.

DNS Servers

Each ISP may provide a set of DNS servers for DNS lookups. This field specifies the DNS (Domain Name System) servers to be used when a DNS lookup is routed through this connection.

You can input the ISP-provided DNS server addresses into the DNS server 1 and DNS

server 2 fields. If no address is entered here, this link will not be used for DNS lookups.

Peplink Balance Series

14.2.2 Static IP Connection

The static IP connection method is suitable if your ISP provides a static IP address to connect directly.

peplink ONE 310, ONE 305, ONE 380, ONE 580, ONE 710 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual