Pismolabs Technology P1375 Pepwave / Peplink / Pismo Wireless Product User Manual Pepwave MAX
Pismo Labs Technology Limited Pepwave / Peplink / Pismo Wireless Product Pepwave MAX
Contents
- 1. User Manual (1 of 2).pdf
- 2. User Manual (2 of 2).pdf
User Manual (1 of 2).pdf
| Download: |  |
| Mirror Download [FCC.gov] | |
| Document ID | 2221017 |
| Application ID | EQNpclVGwbknjR+eCRdMWw== |
| Document Description | User Manual (1 of 2).pdf |
| Short Term Confidential | No |
| Permanent Confidential | No |
| Supercede | No |
| Document Type | User Manual |
| Display Format | Adobe Acrobat PDF - pdf |
| Filesize | 267.11kB (3338893 bits) |
| Date Submitted | 2014-03-20 00:00:00 |
| Date Available | 2014-03-20 00:00:00 |
| Creation Date | 2014-03-19 13:19:15 |
| Producing Software | Microsoft® Office Word 2007 |
| Document Lastmod | 2014-03-19 13:20:06 |
| Document Title | Pepwave MAX User Manual |
| Document Creator | Microsoft® Office Word 2007 |
| Document Author: | Peplink Ltd. |
PepwaveMAX Series: MAX 700 / HD2 /HD2 IP67 / BR1/ On-The-Go Pepwave MAX Firmware 6.1 March 2014 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2014 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners. Table of Contents 1 INTRODUCTION AND SCOPE ................................................................................................. 5 2 GLOSSARY ............................................................................................................................. 6 3 PRODUCT FEATURES ............................................................................................................. 7 3.1 3.2 SUPPORTED NETWORK FEATURES ........................................................................................................ 7 OTHER SUPPORTED FEATURES ............................................................................................................ 8 4 PEPWAVE MAX MOBILE ROUTER OVERVIEW ..................................................................... 10 4.1 4.2 4.3 4.4 4.5 MAX 700 ................................................................................................................................... 10 MAX HD2 .................................................................................................................................. 12 MAX HD2 IP67 ........................................................................................................................... 14 MAX BR1 ................................................................................................................................... 16 MAX ON-THE-GO......................................................................................................................... 19 5 INSTALLATION .................................................................................................................... 21 5.1 5.2 5.3 5.4 PREPARATION ............................................................................................................................... 21 CONSTRUCTING THE NETWORK ......................................................................................................... 21 CONFIGURING THE NETWORK ENVIRONMENT ....................................................................................... 22 MOUNTING THE UNIT ..................................................................................................................... 22 6 CONNECTING TO WEB ADMIN INTERFACE ......................................................................... 23 7 CONFIGURATION OF LAN INTERFACE(S) ............................................................................. 25 7.1 7.2 BASIC SETTINGS............................................................................................................................. 25 CAPTIVE PORTAL ........................................................................................................................... 30 8 CONFIGURATION OF WAN INTERFACE(S) ........................................................................... 33 8.1 8.2 8.3 8.4 8.5 8.6 ETHERNET WAN ........................................................................................................................... 34 CELLULAR WAN ............................................................................................................................ 42 WI-FI WAN................................................................................................................................. 46 WAN HEALTH CHECK ..................................................................................................................... 50 BANDWIDTH ALLOWANCE MONITOR .................................................................................................. 53 DYNAMIC DNS SETTINGS ................................................................................................................ 54 9 ADVANCED WI-FI SETTINGS ................................................................................................ 56 10 BANDWIDTH BONDING SPEEDFUSIONTM ............................................................................ 59 10.1 10.2 10.3 PEPVPN ..................................................................................................................................... 59 PEPWAVE MAX BEHIND NAT ROUTER ............................................................................................... 65 SPEEDFUSIONTM STATUS ................................................................................................................. 66 11 IPSEC VPN ........................................................................................................................... 67 11.1 IPSEC VPN SETTINGS ..................................................................................................................... 67 12 MANAGEMENT OF OUTBOUND TRAFFIC TO WAN ............................................................. 70 12.1 12.2 OUTBOUND POLICY ........................................................................................................................ 71 CUSTOM RULES FOR OUTBOUND POLICY ............................................................................................. 72 http://www.pepwave.com Copyright @ 2014 Pepwave 13 PORT FORWARDING ........................................................................................................... 80 13.1 PORT FORWARDING SERVICE ............................................................................................................ 80 14 NAT MAPPINGS .................................................................................................................. 83 15 QOS 15.1 15.2 15.3 USER GROUPS .............................................................................................................................. 85 BANDWIDTH CONTROL .................................................................................................................... 86 APPLICATION ................................................................................................................................ 87 16 FIREWALL ............................................................................................................................ 89 16.1 OUTBOUND AND INBOUND FIREWALL ................................................................................................. 89 17 MISCELLANEOUS SETTINGS ................................................................................................ 95 17.1 17.2 17.3 17.4 17.5 HIGH AVAILABILITY......................................................................................................................... 95 PPTP SERVER ............................................................................................................................... 98 CERTIFICATE MANAGER ................................................................................................................... 99 SERVICE FORWARDING .................................................................................................................. 100 SERVICE PASSTHROUGH ................................................................................................................. 103 18.1 18.2 18.3 WIRELESS SSID ........................................................................................................................... 104 SETTINGS ................................................................................................................................... 105 TOOLBOX ................................................................................................................................... 107 18 AP 19 SYSTEM SETTINGS ............................................................................................................. 108 19.1 19.2 19.3 19.4 19.5 19.6 19.7 19.8 19.9 19.10 19.11 19.12 19.13 19.14 19.15 ADMIN SECURITY ......................................................................................................................... 108 FIRMWARE UPGRADE ................................................................................................................... 112 TIME ........................................................................................................................................ 113 EMAIL NOTIFICATION .................................................................................................................... 113 EVENTLOG ................................................................................................................................. 116 SNMP...................................................................................................................................... 117 INCONTROL ................................................................................................................................ 119 CONFIGURATION ......................................................................................................................... 120 FEATURE ADD-ONS ...................................................................................................................... 121 REBOOT .................................................................................................................................... 121 PING TEST.................................................................................................................................. 122 TRACEROUTE TEST ....................................................................................................................... 123 PEPVPN TEST............................................................................................................................. 123 PEPVPN ANALYZER ...................................................................................................................... 124 CLI (COMMAND LINE INTERFACE SUPPORT) ....................................................................................... 124 20 STATUS ............................................................................................................................. 125 20.1 20.2 20.3 20.4 20.5 20.6 20.7 20.8 DEVICE...................................................................................................................................... 125 ACTIVE SESSIONS ......................................................................................................................... 127 CLIENT LIST ................................................................................................................................ 129 WINS CLIENT ............................................................................................................................. 130 TM SPEEDFUSION .......................................................................................................................... 130 UPNP / NAT-PMP ..................................................................................................................... 131 EVENT LOG ................................................................................................................................ 132 BANDWIDTH ............................................................................................................................... 133 http://www.pepwave.com Copyright @ 2014 Pepwave APPENDIX A. RESTORATION OF FACTORY DEFAULTS ........................................................ 138 APPENDIX B. DECLARATION .............................................................................................. 139 http://www.pepwave.com Copyright @ 2014 Pepwave 1 Introduction and Scope The Pepwave MAX Mobile Router provides link aggregation and load balancing acrossmultiple WAN connections, allowing a combination of technologies like 3G HSDPA, EVDO, 4G LTE, Wi-Fi, external WiMAX dongle, and Satellite to be utilized to connect to the Internet. This manual presents how to set up the Pepwave MAX Mobile Router and provides an introduction to thefeatures and usage of Pepwave MAX Mobile Router. Tips Want to know more about Pepwave MAX? Visit ourYouTube Channel for a video introduction! http://youtu.be/UCkVQThLKO4 http://www.pepwave.com Copyright @ 2014 Pepwave 2 Glossary The following terms, acronyms, and abbreviations are frequently used in this manual: Term Definition 3G 3rd Generation standards for wireless communications (e.g. HSDPA) 4G 4th Generation standards for wireless communications (e.g. WiMAX, LTE) DHCP DNS EVDO HSDPA Dynamic Host Configuration Protocol Domain Name System Evolution-Data Optimized High-Speed Downlink Packet Access HTTP Hyper-Text Transfer Protocol ICMP Internet Control Message Protocol IP LAN MAC Address Internet Protocol Local Area Network Media Access Control Address MTU Maximum Transmission Unit MSS Maximum Segment Size NAT Network Address Translation PPPoE QoS SNMP Point to Point Protocol over Ethernet Quality of Service Simple Network Management Protocol TCP Transmission Control Protocol UDP User Datagram Protocol VPN Virtual Private Network VRRP Virtual Router Redundancy Protocol WAN Wide Area Network WINS Windows Internet Name Service WLAN Wireless Local Area Network http://www.pepwave.com Copyright @ 2014 Pepwave 3 Product Features PepwaveMAX enables all LAN users to share broadband Internet connections, and provide advanced features to enhance Internet access. The following is the list of supported features on Pepwave MAX Mobile Router: 3.1 Supported Network Features 3.1.1 WAN Ethernet WAN Connection in Full/Half Duplex Static IP support for PPPoE Built-in HSPA and EVDO cellular modems (Available on Pepwave MAX HD2 and HD2 IP67) USB mobile connection(s) Wi-Fi WAN connection Network address translation (NAT)/ port address translation (PAT) Inbound and outbound NATmapping IPsec NAT-T and PPTP packet passthrough MAC address clone and passthrough Customizable MTU and MSS values WAN connection health check Dynamic DNS (supportedservice providers: changeip.com, dyndns.org, no-ip.org, tzo.com and DNS-O-Matic) Ping, DNS lookup and HTTP based health check 3.1.2 LAN Wi-Fi AP Ethernet LAN ports DHCP server on LAN Extended DHCP option support Static routing rules VLAN on LAN support 3.1.3 VPN TM SpeedFusion SpeedFusion performance analyzer X.509 certificate support (supported forMAX 700, and MAX HD2, available on the Max BR1 and MAX_OTG_U4_SF as an activated feature) VPN load balancing and failover among selected WAN connections Bandwidth bonding & failover among selected WAN connections IPsec VPN for Network-to-Network connection (Works with Cisco, Juniper only) Ability to route Internet traffic to a remote VPN peer Optional pre-shared key setting SpeedFusionTMthroughput, ping and traceroute tests PPTP server http://www.pepwave.com Copyright @ 2014 Pepwave PPTP and IPsec passthrough 3.1.4 Firewall Outbound (LAN to WAN) firewall rules Inbound (WAN to LAN) firewall rules per WAN connection Intrusion detection and prevention Specification of NAT mappings Outbound firewall rules can be defined by destination domain name 3.1.5 Captive Portal Splash screen of open networks, login page for secure networks Customizable built-in captive portal Supports linking to outside page for captive portal 3.1.6 Outbound Policy Link load distribution per TCP/UDP service Persistent routing for specified source and/or destination IP addresses per TCP/UDP service Traffic Prioritization and DSL optimization Prioritize and route traffic to VPN tunnels with Priority and Enforced algorithms 3.1.7 AP Controller(Available on the Pepwave MAX 700 and MAX HD2) Configure and manage Pepwave AP devices Review the status of connected AP 3.1.8 QoS 3.2 Quality of Service for different applications and custom protocols User Group classification for different service levels Bandwidth usage control and monitoring on group- and user- level Application Prioritization for custom protocols and DSL/Cable optimization Other Supported Features User-friendly web-based administration interface HTTP and HTTPS support for Web Admin Interface Configurable web administration port and administrator password Firmware upgrades, configuration backups, Ping, and Traceroute via Web Admin Interface Remote web based configuration (via WAN and LAN interfaces) Time server synchronization SNMP Email notification http://www.pepwave.com Copyright @ 2014 Pepwave Read-only user for Web Admin SharedIP drop-in mode (Available on the Pepwave MAX 700 and MAX HD2) Authentication and Accounting by RADIUS server for Web Admin Built-in WINS Servers Syslog SIP passthrough PPTP packet passthrough Event Log Active Sessions Client List WINS Client List UPnP / NAT-PMP Real-Time, Hourly, Daily and Monthly Bandwidth Usage reports and charts IPv6 support(Available on Pepwave MAX 700, HD2 and HD2 IP67) Support USB tethering on Android 2.2+ phones http://www.pepwave.com Copyright @ 2014 Pepwave 4 Pepwave MAX Mobile Router Overview 4.1 MAX 700 Status LED 4.1.1 Front Panel Appearance Ethernet WAN Port Wi-Fi LAN Connector USB Port Power LED Terminal Block Reset Button LAN Ports Wi-Fi WAN Connector Wi-Fi AP LED Wi-Fi WAN LED 4.1.2 Rear Panel Appearance Power Connector USB Ports Kensington Lock http://www.pepwave.com 10 Copyright @ 2014 Pepwave 4.1.3 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF Red Blinking red Green System initializing Booting up or busy Boot up error Ready Wi-Fi AP and Wi-Fi WAN Indicators Wi-Fi WAN Wi-Fi AP OFF Disconnected Blinking slowly Connecting to network Blinking Connected to network with traffic ON OFF Blinking slowly Blinking ON Connected to network without traffic Disabled Enabled but no client connected Connected to network with traffic Client(s) connected to wireless network LAN and Ethernet WAN Ports Green LED Orange LED Port Type http://www.pepwave.com ON 10 / 100/ 1000 Mbps Blinking Data is transferring OFF No data is being transferred or port is not connected Auto MDI/MDI-X ports 11 Copyright @ 2014 Pepwave 4.2 MAX HD2 4.2.1 Front Panel Appearance Ethernet WAN Port Wi-Fi AP Connector USB Port Cellular WAN LED Terminal Block Reset Button Status LED LAN Ports Wi-Fi WAN LED Wi-Fi WAN Connector 4.2.2 Rear Panel Appearance Power Connector Cellular Antenna Connectors Cellular SIM Slots Kensington Lock http://www.pepwave.com 12 Copyright @ 2014 Pepwave 4.2.3 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF Red Blinking red Green System initializing Booting up or busy Boot up error Ready Wi-Fi AP and Wi-Fi WAN Indicators Wi-Fi WAN / Cellular 1 / Cellular 2 OFF Disabled Intermittent Blinking slowly Connecting to wireless network(s) Blinking Connected to wireless network(s) with traffic ON Connected to wireless network(s) without traffic LAN and Ethernet WAN Ports Green LED Orange LED Port Type http://www.pepwave.com ON 10 / 100 / 1000 Mbps Blinking Data is transferring OFF No data is being transferred or port is not connected Auto MDI/MDI-X ports 13 Copyright @ 2014 Pepwave 4.3 MAX HD2 IP67 4.3.1 Front Panel Appearance 4.3.2 TopPanelAppearance 2x Female N-Type Antenna Connectors for Cellular Connection Waterproof Air Vent http://www.pepwave.com 14 Copyright @ 2014 Pepwave 4.3.3 Rear Panel Appearance 2x Female N-Type Antenna Connectors for Cellular Connection Ground Plate Waterproof Ethernet WAN and LAN Status LED Waterproof DC Power Connector The statuses indicated by the front panel LEDs are as follows: Status Indicators Status http://www.pepwave.com OFF Red Blinking red Green System initializing Booting up or busy Boot up error Ready 15 Copyright @ 2014 Pepwave 4.4 MAX BR1 4.4.1 Front Appearance 4.4.2 Top Panel Appearance (MAX-BR1 Version) SMA Cellular Antenna Connector RP-SMA Wi-Fi Antenna Connector Redundant Cellular SIM Slots SMA GPS Antenna Connector (MAX-BR1-LTE Version) Redundant Cellular SIM Slots SMA Cellular Antenna Connectors http://www.pepwave.com 16 RP-SMA Wi-Fi Antenna Connector SMA GPS Antenna Connector Copyright @ 2014 Pepwave 4.4.3 Rear Panel Appearance 10/100 Ethernet WAN 10 -30V DC Terminal Block Dual 10/100 Ethernet LAN http://www.pepwave.com 17 10 – 30V DC Connector Copyright @ 2014 Pepwave 4.4.4 LED Indicators The statuses indicated by the front panel LEDs are as follows: Status Indicators Status OFF Red Blinking red Green System initializing Booting up or busy Boot up error Ready Wi-Fi Indicators Wi-Fi OFF Disabled Intermittent Blinking slowly Connecting to wireless network(s) Blinking Connected to wireless network(s) with traffic ON Connected to wireless network(s) without traffic Cellular Indicators Cellular OFF Disabled or no SIM card inserted ON Connecting or connected to network(s) LAN and Ethernet WAN Ports ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring OFF Port is not connected Green LED Orange LED Port Type http://www.pepwave.com Auto MDI/MDI-X ports 18 Copyright @ 2014 Pepwave 4.5 MAX On-The-Go 4.5.1 Top Panel Appearance USB WAN Ports 4.5.2 Rear Panel Appearance 10 -24V DC Terminal Block RP-SMA Wi-Fi Antenna Connector LAN Port Ethernet WAN http://www.pepwave.com 19 Copyright @ 2014 Pepwave 4.5.3 LED Indicators The statuses indicated by the front panel LEDs are as follows: Cellular Indicators WAN OFF Modem is not attached to the port. Green Modem is attached to the port. Wi-Fi Indicators Wi-Fi OFF Disconnected to AP. Green Connected to AP. Status Indicators Status OFF Red Green System initializing Booting up or busy Ready LAN and Ethernet WAN Ports ON 100 Mbps OFF 10 Mbps ON Port is connected without traffic Blinking Data is transferring Green LED Orange LED Port Type http://www.pepwave.com Auto MDI/MDI-X ports 20 Copyright @ 2014 Pepwave 5 Installation The following section details connecting the Pepwave MAX Mobile Router to your network: 5.1 Preparation Before installingyour Pepwave MAX Mobile Router, please prepare the following: At least one Internet/WAN access account and/or Wi-Fi access information. For each network connection, 5.2 Ethernet WAN: A 10/100/1000BaseT UTP cable with RJ45 connector USB: A USB modem Embedded Modem: A SIM card for GSM/HSPA service Wi-Fi WAN: Wi-Fi antennas PC Card / Express Card WAN:A PC Card/ExpressCard for the corresponding card slot. A computer with TCP/IP network protocol and a web browser installed. Supported browsers include Microsoft Internet Explorer 8.0 or above, Mozilla Firefox 10.0 or above, Apple Safari 5.1 or above, and Google Chrome 18 or above. Constructing the Network At the high level, construct the network according to the following steps: 1. With an Ethernet cable, connect a computer to one of the LAN ports on thePepwave MAX. Repeat with different cables for up to 4 computers to be connected. 2. With another Ethernet cable or a USB modem / Wi-Fi antenna / PC Card / Express Card, connect it to one of the WAN ports on the Pepwave MAX. Repeat the same procedure for other WAN ports. 3. Connect the power adapter to the power connector on the rear panel ofthe Pepwave MAX, and then plug it into a power outlet. The following figure schematically illustrates the configuration that results: http://www.pepwave.com 21 Copyright @ 2014 Pepwave 5.3 Configuring the Network Environment To ensure that the Pepwave MAX works properly in the LAN environment and can access the Internet via the WAN connections, please refer to the following setup procedures: LAN Configuration For basic configuration, refer to Section6,Connecting to Web Admin Interface. For advanced configuration, go to Section7, Configuration of LAN Interface(s). WAN Configuration For basic configuration, refer to Section6, Connecting to Web Admin Interface. For advanced configuration, go to Section 7.2,Captive Portal The Captive Portal serves as gateway that clients have to pass if they wish to access the internet using your router. To configure, navigate to Network >Captive Portal to see the following screen: Captive Portal Settings Clicking the edit button trigger a dialogue where you can choose which LAN / VLAN to apply your captive portal. Apply On Click all LAN / VLAN that you wish to apply the captive portal to. Access Mode Click Open Access to allow clients to freely access your router. Click User Authentication to force your clients to authenticate before accessing your router. http://www.pepwave.com 22 Copyright @ 2014 Pepwave This authenticates your clients through a Radius Server. Upon selecting this option, you will see the following fields: Radius Server Fill in the necessary information to complete your connection to the server and enable authentication. This authenticates your clients through a LDAP Server. Upon selecting this option, you will see the following fields: LDAP Server Fill in the necessary information to complete your connection to the server and enable authentication. Access Quota Set a time and data cap to each user’s Internet usage. Quota Reset Time This menu determines how your usage quota resets. Setting it to daily will reset it at a specified time every day. Setting a number of minutes after quota reached establish a timer for each user that begins after the quota has been reached. Splash Page Here, you can choose between using the MAX router’s built-in captive portal and redirecting clients to a URL you define. The Portal Customization menu has two options: and previewing the captive portal that your clients will see. Clicking following menu: http://www.pepwave.com 23 . Clicking will result in a pop-up will result in the appearance of Copyright @ 2014 Pepwave Portal Customization Logo Image Message Terms & Conditions Custom Landing Page Click the Choose File button to select an logo to use for the built-in portal If you have any additional messages for your users, place it on this field. If you would like to use your own set of terms and conditions, please place it here. If left empty, the built-in portal will display the default terms and conditions. Fill in this field to redirect clients to an external URL. http://www.pepwave.com 24 Copyright @ 2014 Pepwave 6 Configuration of WAN Interface(s) 6.1 Mounting the Unit 6.1.1 Wall Mount The Pepwave MAX 700/HD2/On-The-Go can be mounted on the wall by screwing. After adding the screw on the wall, slide the MAX in the screw whole socket as indicated below.Recommeneded Screw Specification: M3.5 x 20mm, Head Diameter 6mm, Head Thickness 2.4mm The Pepwave MAX BR1 can be mountedby screwing the four holes on the device to the wall. 6.1.2 Car Mount The Pepwave MAX700/HD2 can be mounted in a vehicle using the included mounting brackets. Place the mounting brackets by the two sides, and screw it onto the device. Connecting to Web Admin Interface 1. Start a Web browser on a computer that is connected with the Pepwave MAX through LAN. 2. To connect to Web Admin Interface of the Pepwave MAX, enter the following LAN IP address in the address field of the web browser: http://192.168.50.1 http://www.pepwave.com 25 Copyright @ 2014 Pepwave (This is the default LAN IP address of the Pepwave MAX.) 3. Enter the following to access the Web Admin Interface. Username: admin Password: admin (This is the default Username and Password of the Pepwave MAX. The Admin and Read-only User Password can be changed at System > Admin Security of the Web Admin Interface.) http://www.pepwave.com 26 Copyright @ 2014 Pepwave 4. After successful login, the Dashboardof the Web Admin Interface will be displayed: The Dashboard shows the current WAN, LAN, Wi-Fi AP settings and status. Here, youcan change priority of WAN connectionsand switch on / off Wi-Fi AP. For further information onhow-to set up these connections, please refer to Section 0 and 8.2. Device Information shows the details about the device, including Model name, Firmwareversion and Uptime. For further information, please refer to Section 21. Important Note Configuration changes (e.g. WAN, LAN, Admin settings, etc.) will only take effect after clicking the Save button at the bottom of each page. The Apply Changes button causes the changes to be saved and applied. http://www.pepwave.com 27 Copyright @ 2014 Pepwave 8 Configuration of LAN Interface(s) 8.1 Basic Settings The LAN Interface settings are located in Network> LAN>Basic Settings IP Settings IP Address Speed The IP address of the Pepwave MAX on LAN. This setting specifies the speed of the LAN Ethernet Port. By default, Auto is selected and the appropriate data speed is automatically detected by the Pepwave MAX. In the event of negotiation issues, the port speed can be manually specified to circumvent the issues. You can also choose whether or not to advertise the speed to the peer by selecting the Advertise Speed checkbox. Port Settings This is the port speed of the LAN interface. It should be set to the same speed as the connected device to avoid any port negotiation problem. Speed When a static speed is set, you may choose whether to advertise its speed to the peer device or not. Advertise Speed is selected by default. You can choose not to advertise the port speed if the port has difficulty in negotiating with the peer device. http://www.pepwave.com 28 Copyright @ 2014 Pepwave Drop-in Mode Settings Enable Drop-in Mode eases the installation of the Peplink MAX on a live network between the existing firewall and router, such that no configuration changes are required on existing equipment. Check the box to enable the Drop-in Mode feature. Please refer to SectionError! Reference source not found., Error! Reference source not found.for details. WAN for Drop-In Mode Shared Drop-In ModeA Shared IP AddressA WAN Default Gateway Select the WAN port to be used for Drop-in Mode. If WAN 1 with LAN Bypass is selected, the High Availability feature will be disabled automatically. When this option is enabled, the passthrough IP address will be used to connect to WAN hosts (email notification, remote syslog, etc.). The MAX Router will listen for this IP address when WAN hosts access services provided by the MAX Router (Web Admin access from the WAN, DNS server requests, etc.). To connect to hosts on the LAN (email notification, remote syslog, etc.), the default gateway address will be used. The MAX Router will listen for this IP address when LAN hosts access services provided by the MAX Router (Web Admin access from the WAN, DNS proxy, etc.). Access to this IP address will be passed through to the LAN port if this device is not serving the service being accessed. The shared IP Address will be used in connecting to hosts on the WAN (e.g. email notification, remote syslog, etc.) The device will also listen on the IP address when hosts on the WAN access services served on this device (e.g. web admin accesses from WAN, DNS server, etc.) Enter the WAN router's IP address in this field. If there are more hosts in addition to the router on the WAN segment, check the I have other host(s) on WAN segment box and enter the IP address of the hosts that need to access LAN devices or be accessed by others. WAN DNS Servers Enter the selected WAN's corresponding DNS server IP addresses. - Advanced feature, please click the http://www.pepwave.com button on the top right hand corner to activate. 29 Copyright @ 2014 Pepwave DHCP Server Settings DHCP Server When this setting is enabled, the DHCP server of thePepwave MAX automatically assigns an IP address to each computer that is connected via LAN and is configured to obtain an IP address via DHCP. The Pepwave MAX’s DHCP server can prevent IP address collision on the LAN. IP Range & Subnet Mask Thesesettings allocate a range of IP address that will be assigned to LAN computers by the DHCP server of thePepwave MAX. Lease Time This setting specifies the length of time throughout which an IP address of a DHCP client remains valid. Upon expiration of the Lease Time, the assigned IP address will no longer be valid and the renewal of the IP address assignment will be required. DNS Servers This option allows you to input the DNS server addresses to be offered to the DHCP clients. If Assign DNS server automatically is selected, the Pepwave MAX’s built-in DNS server address (i.e. LAN IP address) will be offered. This option allows you to specify the Windows Internet Name Service (WINS) server. You may choose to use the built-in WINS server or external WINS servers. TM WINS Server Extended DHCP Option When this unit is connected using SpeedFusion , other VPN peers can share this unit's built-in WINS server by entering this unit's LAN IP address in their DHCP WINS Servers setting. Therefore, all PC clients in the VPN can resolve the NetBIOS names of other clients in remote peers. If you have enabled this option, a list of WINS clients will be displayed at Status > WINS Clients. In addition to standard DHCP options (e.g. DNS server address, gateway address, subnet mask), you can specify the value of additional extended DHCP options, asdefined in RFC 2132. With these extended options enabled, you can pass additional configuration information to LAN hosts. To define an extended DHCP option, click the Add button, choose the option that you want to define and enter its value. For values that are in IP address list format, you can enter one IP address per line in the provided text area input control. Each option is allowed to be defined once only. This setting reserves the assignment of fixed IP addresses for a list of computers on the LAN. The computers to be assigned fixed IP addresses on the LAN are identified by their MAC addresses. DHCP Reservation The fixed IP address assignment is displayed as a cross-reference list between the computers’ names, MAC addresses and fixed IP addresses. Name (an optional field) allows you to specifya name to represent the device. MAC addresses should be in the format of 00:AA:BB:CC:DD:EE Press to create a new record. Press to remove a record Reserved clients information can be imported from the Client List, located at Status > Client List. For more details, please refer to section 21.3. Static Route Settings Static Route This table is for defining static routing rules for the LAN segment. A static route consists of the network address, subnet mask, and gateway address. The address and subnet mask http://www.pepwave.com 30 Copyright @ 2014 Pepwave values are in w.x.y.zformat. The local LAN subnet and subnets behind the LAN will be advertised to the VPN. Remote routes sent over the VPN will also be accepted. Any VPN member will be able to route to the local subnets. Press to create a new route. Press to remove a route. WINS Server Settings Enable Check the box to enable the WINS Server. A list of WINS clients will be displayed at Status > WINS Clients. DNS Proxy Settings A check box to enable to DNS Proxy feature. Network > LAN > DNS Proxy Settings table Enable DNS Caching A DNS proxy server can be enabled to serve DNS requests originating from LAN/PPTP/ SpeedFusionTMpeers. Requests are forwarded to the DNS servers/resolvers defined in each WAN connection This field is to enable DNS caching on the built-in DNS proxy server. When the option is enabled, queried DNS replies will be cached until the records’ TTL has been reached. This feature can help improve the DNS lookup time. However, it cannot return the most updated result for those frequently updated DNS records. By default, it is disabled. Include Google Public DNS Servers When this option is enabled, the DNS proxy server will also forward DNSrequests to Google's Public DNS Servers in addition to the DNS servers defined in each WAN. This could increase the DNS service's availability. Default: disabled This table is for defining custom local DNS records. Local DNS Records A static local DNS record consists of a Host Name and an IP Address. When looking up the Host Name from the LAN to LAN IP of the Pepwave MAX, the corresponding IP Address will be returned. http://www.pepwave.com 31 Copyright @ 2014 Pepwave Press to create a new record. Press to remove a record. Check the box to enable the WINS Server. A list of WINS clients will be displayed at Network > LAN > DNS Proxy Settings > DNS Resolvers. This field specifies which DNS resolvers will receive forwarded DNS requests. If no WAN/VPN/LAN DNS resolver is selected, all of the WAN’s DNS resolvers will be selected. LAN DNS TM Resolver Settings If a SpeedFusion peer is selected, you may enter the VPN peer’s DNS resolver IP address(es). Queries will be forwarded to the selected connections’ resolvers. If all of the selected connections are down, queries will be forwarded to all resolvers on healthy WAN connections. http://www.pepwave.com 32 Copyright @ 2014 Pepwave 8.2 Captive Portal The Captive Portal serves as gateway that clients have to pass if they wish to access the internet using your router. To configure, navigate to Network >Captive Portal to see the following screen: Captive Portal Settings Clicking the edit button trigger a dialogue where you can choose which LAN / VLAN to apply your captive portal. Apply On Click all LAN / VLAN that you wish to apply the captive portal to. Access Mode Click Open Access to allow clients to freely access your router. Click User Authentication to force your clients to authenticate before accessing your router. This authenticates your clients through a Radius Server. Upon selecting this option, you will see the following fields: Radius Server Fill in the necessary information to complete your connection to the server and enable authentication. http://www.pepwave.com 33 Copyright @ 2014 Pepwave This authenticates your clients through a LDAP Server. Upon selecting this option, you will see the following fields: LDAP Server Fill in the necessary information to complete your connection to the server and enable authentication. Access Quota Set a time and data cap to each user’s Internet usage. Quota Reset Time This menu determines how your usage quota resets. Setting it to daily will reset it at a specified time every day. Setting a number of minutes after quota reached establish a timer for each user that begins after the quota has been reached. Splash Page Here, you can choose between using the MAX router’s built-in captive portal and redirecting clients to a URL you define. The Portal Customization menu has two options: and previewing the captive portal that your clients will see. Clicking following menu: http://www.pepwave.com 34 . Clicking will result in a pop-up will result in the appearance of Copyright @ 2014 Pepwave Portal Customization Logo Image Message Terms & Conditions Custom Landing Page Click the Choose File button to select an logo to use for the built-in portal If you have any additional messages for your users, place it on this field. If you would like to use your own set of terms and conditions, please place it here. If left empty, the built-in portal will display the default terms and conditions. Fill in this field to redirect clients to an external URL. http://www.pepwave.com 35 Copyright @ 2014 Pepwave 9 Configuration of WAN Interface(s) The WAN Interface settings are located at: Network > WAN To reorder different WANs’ priority, just drag on the appropriate WAN by holding the left mouse button, move it to the desired priority (the first one would be the highest priority, the second one would be lower priorityand so on) and drop it by releasing the mouse button. To disable a particular WAN connection, just drag on the appropriate WAN by holding the left mouse button, move it the Disabledrow and drop it by releasing the mouse button. You can also do the above priority setting on the Dashboard, please refer to Section 0 for information. Click the Details button in the corresponding row of connection to modify the connection setting. Important Note Connection Details will be changed and become effective right afterclicking the Save and Apply button. http://www.pepwave.com 36 Copyright @ 2014 Pepwave 9.1 Ethernet WAN FromNetwork > WAN, choose a WAN connection and click the button: WAN Port –1 WAN Connection Name This field is for defining a name to represent this WAN connection. There are three possible connection methods for Ethernet WAN: Connection Method DHCP Static IP PPPoE The connection method and details are determined by, and can be obtained from, the ISP. See the Sections9.1.1, 9.1.2, and 9.1.3 for details of each connection method. http://www.pepwave.com 37 Copyright @ 2014 Pepwave WAN Port – 2 This setting specifies the state of the WAN connection. The available options are Remain Standby State connected and Disconnect. The default state is Remain Connected. Upstream Bandwidth Downstream Bandwidth Health Check Method This setting specifies the data bandwidth in the outbound direction from the LAN through the WAN interface. This setting specifies the data bandwidth in the inbound direction from the WAN interface to the LAN. This value is referenced as the default weight value when using the algorithm Least Used, or the algorithm Persistence (Auto) in Outbound Policy with Managed by Custom Rules chosen (see Section 13.2). This setting specifies the health check method for the WAN connection. The value of method can be configured as Disabled, Ping or DNS Lookup. The default method is Disabled. See Section9.4 for configuration details. This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: Dynamic DNS Service Provider changeip.com dyndns.org no-ip.org tzo.com DNS-O-Matic Select Disabled to disable this feature. See Section 1.1 for configuration details. http://www.pepwave.com 38 Copyright @ 2014 Pepwave WAN Port – 3 Bandwidth Allowance Monitor This option allows you to enable bandwidth usage monitoring on this WAN connection for each billing cycle. When this is not enabled, bandwidth usage of each month is still being tracked but no action will be taken. See Section 9.5 for configuration details. (Action, Start Day, Monthly Allowance) This setting specifies port speed and duplex configurations of the WAN Port. Port Speed By default, Auto is selected and the appropriate data speed is automatically detected by the Pepwave MAX. In the event of negotiation issues, the port speed can be manually specified to circumvent the issues. You can also choose whether or not to advertise the speed to the peer by selecting the Advertise Speed checkbox. This setting specifies the Maximum Transmission Unit. By default, MTU is set to Custom 1440. MTU You may adjust the MTU value by editing the text field. Click Default to restore the default MTU value. Select Auto and the appropriate MTU value will be automatically detected. The autodetection will run each time when the WAN connection establishes. http://www.pepwave.com 39 Copyright @ 2014 Pepwave WAN Port – 5 MSS This setting should be configured based on the maximum payload size that the local system can handle. The MSS (Maximum Segment Size) is computed from the MTU minus 40 bytes for TCP over IPv4. If MTU is set to Auto, the MSS will also be set automatically. By default, MSS is set to Auto. This setting allows you to configure the MAC address. Some service providers (e.g. cable providers) identify the client’s MAC address and require the MAC Address client to always use the same MAC address to connect to the network. In such cases, change Clone the WAN interface’s MAC address to the original client PC’s one via this field. The default MAC Address is a unique value assigned at the factory. In most cases, the default value is sufficient. Clicking the Default button restores the MAC Address to the default value. VLAN Click the square if you wish to enable VLAN functionality and enable multiple broadcast domains. Once you enable VLAN, you will be able to enter a name for your network. Reply to ICMP If this field is disabled, the WAN connection will not respond to ICMP PING requests. PING By default, this is enabled. Additional Public IP Address The IP Address List represents the list of fixed Internet IP addresses assigned by the ISP, in the event that more than one Internet IP addresses are assigned to this WAN connection. Enter the fixed Internet IP addresses and the corresponding subnet mask, and then click the Down Arrow button to populate IP address entries to the IP Address List. http://www.pepwave.com 40 Copyright @ 2014 Pepwave IPv6 IPv6 support can be enabled on one of the available Ethernet WAN ports. On this screen, you can choose which WAN will support IPv6. IPv6 To enable IPv6 support on a WAN, the WAN router must respond to Stateless Address Auto configuration advertisements and DHCPv6 requests. IPv6 clients on the LAN will acquire their IPv6, gateway, and DNS server addresses from it. The device will also acquire an IPv6 address for performing ping/traceroute checks and accepting web admin accesses. Note: This feature is only available on the Pepwave MAX 700,HD2 and HD2 IP67. http://www.pepwave.com 41 Copyright @ 2014 Pepwave 9.1.1 DHCP Connection The DHCP connection method is suitable if the ISP provides an IP address automatically by DHCP (e.g. Satellite Modem, WiMAX Modem, Cable, Metro Ethernet, etc.). There are three possible connection methods: 1. 2. 3. DHCP Static IP PPPoE DHCP Settings Routing Mode IP Address/ Subnet Mask/ Default Gateway DNS Servers This is to substitute the real address in a packet with a mapped address that is routable on the destination network This information is obtained from the ISP automatically. Each ISP may provide a set of DNS servers for DNS lookups. This setting specifies the DNS (Domain Name System) Servers to be used when a DNS lookup is routed through this connection. Selecting Obtain DNS server address automatically results in the DNS Servers to be assigned by the WAN DHCP Server to be used for outbound DNS lookups over the connection. (The DNS Servers are obtained along with the WAN IP address assigned from the DHCP server.) When Use the following DNS server address(es) is selected, you may enter custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. Hostname (Optional) http://www.pepwave.com If your service provider's DHCP server requires you to supply a hostname value upon acquiring an IP address, you may enter the value here. If your service provider does not provide you with the value, you can safely bypass this option. 42 Copyright @ 2014 Pepwave 9.1.2 Static IPConnection This Static IP connection method is suitable if ISP provides a static IP address to connect directly. Static IP Settings Routing Mode IP Address / Subnet Mask / Default Gateway DNS Servers http://www.pepwave.com This is to substitute the real address in a packet with a mapped address that is routable on the destination network These settings allow you to specify the information required in order to communicate on the Internet via a fixed Internet IP address. The information is typically determined by and can be obtained from the ISP. Each ISP may provide a set of DNS servers for DNS lookups. This field specifies the DNS (Domain Name System) Servers to be used when a DNS lookup is routed through this connection. You can input the ISP provided DNS server addresses into the DNS Server 1 and DNS Server 2 fields. If no address is entered here, this link will not be used for DNS lookups. 43 Copyright @ 2014 Pepwave 9.1.3 PPPoE Connection This connection method is suitable if ISP provides login ID/ password to connect via PPPoE. PPPoE Settings Routing Mode This is to substitute the real address in a packet with a mapped address that is routable on the destination network IP Address / Subnet Mask / Default Gateway This information is obtained from the ISP automatically. PPPoE User Name / Password Enter the required information in these fields in order to connect via PPPoE to the ISP. The parameter values are determined by and can be obtained from the ISP. Confirm PPPoE Password Verify your password by entering it again in this field. Service Name Service Name is provided by the ISP. Note: Leave this field blank unless it is provided by your ISP. DNS Servers Each ISP may provide a set of DNS servers for DNS lookups.This setting specifies the DNS (Domain Name System) Servers to be used when a DNS lookup is routed through this connection. Selecting Obtain DNS server address automatically results in the DNS Servers assigned by the PPPoE server to be used for outbound DNS lookups over the WAN connection. (The DNS Servers are obtained along with the WAN IP address assigned from the PPPoE server.) When Use the following DNS server address(es) is selected, you can put custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. http://www.pepwave.com 44 Copyright @ 2014 Pepwave 9.2 Cellular WAN Network>WAN> Click on Detail (Available on the Pepwave BR1, MAX HD2, and HD2 IP67 only) Cellular Status IMSI This is the International Mobile Subscriber Identity which uniquely identifies the SIM card. This is applicable to 3G modems only. The Pepwave MAX supports both HSPA and EV-DO. MEID For Sprint or Verizon Wireless EV-DO users, a unique MEID identifier code (in hexadecimal format) is used by the carrier to associate the EV-DO device with the user. This information is presented in hex and decimal format. ESN This serves the same purpose as MEID HEX but uses an older format. IMEI This is the unique ID for identifying the modem in GSM/HSPA mode. http://www.pepwave.com 45 Copyright @ 2014 Pepwave WAN Connection Settings WAN Connection Name This field is for defining a name to represent this WAN connection. Network Mode Users have to specify the Network they are on accordingly. Routing Mode This option allows you to select the routing method to be used in routing IP frames via the WAN connection. The mode can be either NAT (Network Address Translation) or IP Forwarding. Click the button to enable IP Forwarding. Cellular Settings 3G/2G Data Roaming Band selection to restrict cellular on particular band. Click on the selection of specific bands. button to enable the This checkbox enables data roaming on this particular SIM card. Please check your service provider’s data roaming policy before proceeding. This setting applies to 3G / EDGE / GPRS modem only. It does not apply to EVDO / EVDO Rev. A modem. Operator Settings http://www.pepwave.com This allows you to configure the APN settings of your connection. If Auto is selected, the mobile operator should be detected automatically. The connected device will be configured and connection will be made automatically afterwards. If there is any difficulty in making connection, you may select Custom to enter your carrier’s APN, Login, 46 Copyright @ 2014 Pepwave Password, and Dial Number settings manually. The correct values can be obtained from your carrier. The default and recommended Operator Settings is Auto. APN / Login / Password / SIM PIN When Auto is selected, the information in these fields will be filled automatically. Select the option Custom and you may customize these parameters. The parameters values are determined by and can be obtained from the ISP. General Settings Each ISP may provide a set of DNS servers for DNS lookups.This setting specifies the DNS (Domain Name System) Servers to be used when a DNS lookup is routed through this connection. DNS Servers Selecting Obtain DNS server address automatically results in the DNS Servers assigned by the PPPoE server to be used for outbound DNS lookups over the WAN connection. (The DNS Servers are obtained along with the WAN IP address assigned from the PPPoE server.) When Use the following DNS server address(es) is selected, you can put custom DNS server addresses for this WAN connection into the DNS Server 1 and DNS Server 2 fields. Standby State This option allows you to choose whether to remain the connection connected or disconnected when this WAN connection is no longer in the highest priority and has entered the standby state. When Remain connected is chosen, upon bringing up this WAN connection to active, it will be immediately available for use. Idle Disconnect When Internet traffic is not detected within the user specified timeframe, the modem will automatically disconnect. Once the traffic is resumed by the LAN host, the connection will be re-activated, http://www.pepwave.com 47 Copyright @ 2014 Pepwave Health Check Settings This setting allows you to specify the health check method for the Cellular connection. The as available options are Disabled, Ping, DNS Lookup, HTTP, and SmartCheck Heath Check Method The default method is DNS Lookup.See Section 9.4 for configuration details. Timeout If a health check test cannot be completed within the specified amount of time, the test will be treated as failed. Health Check Interval This is the time interval between each health check test. Health Check Retries This is the number of consecutive check failures before treating a connection as down. This is the number of responses required after a health check failure before treating a connection as up again. Recovery Retries Dynamic DNS Settings This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: Dynamic DNS Service Provider changeip.com dyndns.org no-ip.org tzo.com DNS-O-Matic Select Disabled to disable this feature.See Section 1.1 for configuration details. http://www.pepwave.com 48 Copyright @ 2014 Pepwave Bandwidth Allowance Settings Bandwidth Allowance Monitor This option allows you to enable bandwidth usage monitoring on this WAN connection for each billing cycle. When this is not enabled, bandwidth usage of each month is still being tracked but no action will be taken. See Section 9.5 for configuration details. This setting specifies the Maximum Transmission Unit. By default, MTU is set to Custom 1440. MTU You may adjust the MTU value by editing the text field. Click Default to restore the default MTU value. Select Auto and the appropriate MTU value will be automatically detected. The auto-detection will run each time when the WAN connection establishes Wi-Fi WAN Network>WAN>Click on Wi-Fi WAN http://www.pepwave.com 49 Copyright @ 2014 Pepwave Wi-Fi WAN Settings WAN Connection Name This field is for defining a name to represent this WAN connection. Standby State This setting specifies the state of the WAN connection while in standby. The available options are Remain Connected (hot standby) and Disconnect (cold standby). Health Check Method This setting allows you to specify the health check method for the WAN connection. The available options are Disabled, Ping, and DNS Lookup. The default method is Disabled. See Section 9.4 for configuration details. This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: Dynamic DNS http://www.pepwave.com changeip.com dyndns.org no-ip.org tzo.com DNS-O-Matic 50 Copyright @ 2014 Pepwave Select Disabled to disable this feature.See Section 1.1 for configuration details. Bandwidth Allowance Monitor This option allows you to enable bandwidth usage monitoring on this WAN connection for each billing cycle. When this is not enabled, bandwidth usage of each month is still being tracked but no action will be taken. See Section 9.5 for configuration details. This setting specifies the Maximum Transmission Unit. By default, MTU is set to Custom 1440. MTU You may adjust the MTU value by editing the text field. Click Default to restore the default MTU value. Select Auto and the appropriate MTU value will be automatically detected. The auto-detection will run each time when the WAN connection establishes Connect to Any Open Mode AP This option is to specify whether the Wi-Fi WAN will connect to any open mode access point it finds. By default, this is disabled. Reply to ICMP PING If this field is disabled, the WAN connection will not respond to ICMP PING requests. By default, this is enabled. http://www.pepwave.com 51 Copyright @ 2014 Pepwave 9.3.1 Create Wi-Fi Connection Profile You can manually create a profile to connect to a Wi-Fi connection. It is useful for creating a profile for connecting to hidden-SSID access points. Click on the link Create Profile… and the following window will be displayed. Network > WAN click on andthen click onCreate Profile…. This will open a window similar to the shown below Create Wi-Fi Connection Profile Settings Network Name (SSID) This field is for defining a name to represent this Wi-Fi connection. This option allows you to select which security policy is used for this wireless network. Available options: Open WEP WPA/WPA2 – Personal WPA/WPA2 – Enterprise Security The settings to be displayed under this row will vary depending on the selected security policy. http://www.pepwave.com 52 Copyright @ 2014 Pepwave 9.4 WAN Health Check To ensure traffic is routed to healthy WAN connections only, the Pepwave MAX provides the functionality to periodically check the health of each WAN connection. The Health Check settings for each WAN connection can be independently configured via Network > WAN > Details: Health Check Settings Method This setting specifies the health check method for the WAN connection. The value of Method can be configured as Disabled, Ping or DNS Lookup. The default method is DNS Lookup. For Mobile Internet connection, the value of Method can be configured as Disabled orSmartCheck. Health Check Disabled When Disabledis chosen in the Method field, the WAN connection will always be considered as up. The connection will not be treated as down in the event of IP routing errors. Health Check Method: PING The ICMP PING packets will be issued to test the connectivity with a configurable target IP address or host name. A WAN connection is considered as up if PING responses are received from either one or both of the PING Hosts. This setting specifies IP addresses or host names with which connectivity is to be tested via ICMP Ping. PING Hosts If Use first two DNS servers as Ping Hostsis checked, the target PING Host will be the first DNS server for the corresponding WAN connection. Reliable PING hosts with a high uptime should be considered. By default, the first two DNS servers of the WAN connection are used as the PING Hosts. Health Check Method: DNS Lookup DNS lookups will be issued to test the connectivity with target DNS servers. The connection will be treated as up if DNS responses are received from either one or both of the servers, regardless of whether the result was positive or http://www.pepwave.com 53 Copyright @ 2014 Pepwave negative. This field allows you to specify two DNS hosts’ IP address with which connectivity is to be tested via DNS Lookup. If Use first two DNS servers as Health Check DNS Serversis checked, the first two DNS servers will be the DNS lookup targets for checking a connection's health. If the box is not checked, field Host 1 must be filled and field Host 2 is optional. Health Check DNS Servers If the box Include public DNS servers is selected and no response is received from all specified DNS servers, DNS lookups will also be issued to some public DNS servers. A WAN connection will be treated as down only if there is also no response received from the public DNS servers. Connections will be considered up if DNS responses are received from any one of the health check DNS servers, regardless of a positive or negative result. By default, the first two DNS servers of the WAN connection are used as the Health Check DNS Servers. Health Check Method: HTTP HTTP connections will be issued to test the connectivity with configurable URLs and strings to match. WAN Settings > WAN Edit > Health Check Settings >URL 1 URL 1 The URL will be retrieved when performing an HTTP health check. When String to Match is left blank, a health check will pass if the HTTP return code is between 200 and 299 (Note: HTTP redirection codes 301 or 302 are treated as failures). When String to Match is filled, a health check will pass if the HTTP return code is between 200 and 299 and if the HTTP response content contains the string WAN Settings > WAN Edit > Health Check Settings >URL 2 URL 2 If URL 2 is also provided, a health check will pass if either one of the tests passed . http://www.pepwave.com 54 Copyright @ 2014 Pepwave Other Health Check Settings This setting specifies the timeout, in seconds, for ping/DNS lookup requests. Default Timeout is set to 5 second. Timeout Health Check Interval This setting specifies the time interval, in seconds, between ping or DNS lookup requests. Default Health Check Interval is 5 seconds. Health Check Retries This setting specifies the number of consecutive ping/DNS lookup timeouts after which the Pepwave MAX is to treat the corresponding WAN connection as down. Default Health Retries is set to 3. For example, with the default Health Retries setting of 3, after consecutive 3 timeouts, the corresponding WAN connection will be treated as down. Recovery Retries This setting specifies the number of consecutive successful ping/DNS lookup responses that must be received before the Pepwave MAX treats a previously down WAN connection to be up again. By default, Recover Times is set to 3. For example, a WAN connection that is treated as down will be considered to be up again upon receiving 3 consecutive successful ping/DNS lookup responses. Automatic Public DNS Server Check on DNS Test Failure In case the health check method is set to DNS Lookup and checks failed, the MAX will automatically perform DNS lookups on some public DNS servers. If the tests are success, it means the WAN may not be down but rather the target DNS server became malfunctioned. You will see the following warning message on the Main page. http://www.pepwave.com 55 Copyright @ 2014 Pepwave 9.5 Bandwidth Allowance Monitor Bandwidth Allowance Monitor helpskeep track of your network usage. Click Enable to begin. Bandwidth Allowance Monitor Action Start Day Monthly Allowance http://www.pepwave.com If the feature Email Notification is enabled, you will be notified through email when usage hits 75% and 95% of the monthly allowance. If the box Disconnect when usage hits 100% of monthly allowance is checked, this WAN connection will be disconnected automatically when the usage hits the monthly allowance. It will not resume connection unless this option has been turned off or the usage has been reset when a new billing cycle starts. This option allows you to define which day in the month each billing cycle begins. This field is for defining the maximum bandwidth usage allowed for the WAN connection each month. 56 Copyright @ 2014 Pepwave 9.6 Dynamic DNS Settings The Pepwave MAXis capable of registering the domain name relationships to dynamic DNS service providers. Through registration with dynamic DNS service provider(s), the default public Internet IP address of each WAN connection can be associated with a host name. With Dynamic DNS service enabled for a WAN connection, you can connect to your WAN's IP address from the external even if its IP address is dynamic. You have to register for an account from the listed dynamic DNS service providers before enabling this option. If the WAN connection's IP address is a reserved private IP address (i.e. behind a NAT router), the Public IP of each WAN will be automatically reported to the DNS service provider. Either upon a change in IP addresses or every 23 days without link reconnection, the Pepwave MAX will connect to the dynamic DNS service provider to perform an IP address update within the provider’s records. Dynamic DNS Settings This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers: Dynamic DNS Account Name / Email Address Password / TZO Key Hosts / Domain http://www.pepwave.com changeip.com dyndns.org no-ip.org tzo.com DNS-O-Matic Select Disabled to disable this feature. This setting specifies the registered user name for the dynamic DNS service. This setting specifies the password for the dynamic DNS service. This field allows you to specify a list of host names or domains to be associated with the public Internet IP address of the WAN connection. If you need to enter more than one host, you can use a carriage return to separate them. 57 Copyright @ 2014 Pepwave Important Note In order to use dynamic DNS services, appropriate host name registration(s) as well as a valid account with a supported dynamic DNS service provider are required. A dynamic DNS update is performed whenever a WAN’s IP address changes. E.g. IP is changed after a DHCP IP refresh, reconnection, etc. Due to dynamic DNS service providers’ policy; a dynamic DNS host will automatically expire if the host record has not been updated for a long time. Therefore the Pepwave MAX performs an update every 23 days even if a WAN’s IP address has not changed. http://www.pepwave.com 58 Copyright @ 2014 Pepwave 10 Advanced Wi-Fi Settings Wi-Fi settings can be configured at Advanced> Wi-Fi Settings. Please note that menus displayed will vary with model. Wi-Fi Radio Settings This drop-down menu specifies the national / regional regulations which the Wi-Fi Radio should follow. Operating Country If a North American region is selected, RF channels 1 to 11 will be available and the maximum transmission power will be 26 dBm (400 mW). If European region is selected, RF channels 1 to 13 will be available. The maximum transmission power will be 20 dBm (100 mW). NOTE: Users are required to choose an option suitable to local laws and regulations. Wi-Fi Antenna This setting determines whether the Wi-Fi radio will use its internal antenna, or rely on an outside one installed on its SMA or Type-N connectors. Important Note Per FCC regulation, the country selection is not available on all models marketed in US. All US models are fixed to US channel only. http://www.pepwave.com 59 Copyright @ 2014 Pepwave Wi-Fi AP Settings Protocol This option allows you to specify whether 802.11b and/or 802.11g client association requests will be accepted. Available options are 802.11b/g,802.11b Only, and 802.11g Only. By default, 802.11b/g is selected. Channel This option allows you to select which 802.11 RF channel will be utilized. Channel 1 (2.412 GHz) is selected by default. Channel Width Options Auto (20/40 MHz) and 20 MHz are available. Default is Auto (20/40 MHz), which allows both widths to be used simultaneously. This option is for specifying the transmission output power for the Wi-Fi AP. Output Power There are 4 relative power levels available – Max, High, Mid and Low. The actual output power will be bound by the regulatory limits of the selected country. By default, 23 dBm (200 mW) or 20 dBm (100 mW) (depending on which operating country you have chosen in the previous section) is selected. Wi-Fi WAN Settings Channel Width Bit Rate Output Power Options Auto (20/40 MHz) and 20 MHz are available. Default is Auto (20/40 MHz), which allows both widths to be used simultaneously. This option allows you to select a specific bit rate for data transfer over the device’s WiFi network. By default, Auto is selected. This option is for specifying the transmission output power for the Wi-Fi AP. There are 4 relative power levels available – Max, High, Mid and Low. The actual output power will be bound by the regulatory limits of the selected country. By default, 23 dBm (200 mW) or 20 dBm (100 mW) (depending on which operating country you have chosen in the previous section) is selected. http://www.pepwave.com 60 Copyright @ 2014 Pepwave Wi-Fi AP Advanced Settings Beacon Rate Beacon Interval DTIM This option is for setting the transmit bit rate for sending a beacon. By default, 1Mbps is selected. This option is for setting the time interval between each beacon. By default, 100ms is selected. This field allows you to set the frequency for the beacon to include Delivery Traffic Indication Message. The interval is measured in millisecond. The default value is set to 1 ms. Slot Time ACK Timeout This field is for specifying the unit wait time before it transmits a packet. By default, this field is set to 9 µs. This field is for setting the wait time to receive an acknowledgement packet before performing a retransmission. By default, this field is set to 48 µs. Frame Aggregation Guard Interval This option allows you to enable frame aggregation to increase transmission throughput. This is where you opt for a short or long guard period interval for your transmissions. http://www.pepwave.com 61 Copyright @ 2014 Pepwave 11 Bandwidth Bonding SpeedFusionTM The Pepwave Bandwidth Bonding SpeedFusionTMfunctionality securely connectsyourMAX router to anotherPepwave MAX or Peplink device (only Peplink Balance 210/310/380/580/710/1350 are available for this function). The data, voice, or video communications between these locations are kept confidential across the public Internet. The Bandwidth Bonding SpeedFusionTM of the Pepwave MAX is specifically designed for multi-WAN environment. The Pepwave MAX can aggregate all WAN connections’ bandwidth for routing TM SpeedFusion traffic. Unless all the WAN connections of one site are down, the Pepwave MAX can still maintain VPN up and running. VPN Bandwidth Bonding is supported in firmware 5.1 or above. All available bandwidth will be utilized to establish the VPN tunnel, and all traffic will be load balanced at packet level across all links.VPN Bandwidth Bonding is enabled by default. 11.1 PepVPN The local LAN subnet and subnets behind the LAN (defined under Static Route in the LAN settings page) will be advertised to the VPN.All VPN members (branch offices and headquarters) will be able to route to the local subnets.Note that all LAN subnet and subnets behind it have to be unique.Otherwise, VPN members will not be able to access each other. All data can be routed over the VPN with 256-bit AES encryption standard. To configure, navigate to Advanced>PepVPN, click the New Profile button http://www.pepwave.com 62 Copyright @ 2014 Pepwave to create a new VPN profile.Each profile is for making VPN connection with one remote Peplink Balance/Pepwave MAX. Once you click on New Profile button this will open a window: PepVPN Profile Active Check this box to enable VPN functionality. Encryption By default, VPN traffic is encrypted with 256-bit AES standard. If the option Off is selected on both sides of a VPN connection, no encryption will be applied. Remote ID The Pepwave MAX establishes VPN connection with a remote peer that has a serial numberor a remote ID here. Select from By Remote ID Only, Preshared Key, or X.509 to specify the method the Pepwave MAX will use to authenticate peers. When selecting By Remote ID Only, be sure to enter a unique peer ID number in the Remote ID field. Remote ID: To allow the Pepwave MAXto establisha VPN connection with a specific remote peer using a unique identifying number. Authentication Preshared Key: Pre-shared Key defines the pre-shared key used for this particular VPN connection. The connection will be up only if the pre-shared keys on each side match.When the peer is running firmware 5.0+, this setting will be ignored. If you would like to prevent the display of the pre-shared key, check Hide Characters. http://www.pepwave.com 63 Copyright @ 2014 Pepwave X.509 To authenticate VPN connections using X.509 certificates, copy and paste certificate details into this field. To get more information on a listed X.509 certificate, click the Show Details link below the field. NAT Mode By selecting this option, the remote unit VPN will be assigned with an IP address from the local DHCP server. All the remote side traffic via this VPN will go through Network Address Translation (NAT) using the assigned IP address. Enter the remote peer’s WAN IP address(es) or host name(s) here. Dynamic-DNS host names are accepted. RemoteIP Addresses / Host Names This field is optional. With this field filled, the Pepwave MAX will initiate connection to each of the remote IP addresses until success. If the field is empty, the Pepwave MAX will wait for connection from the remote peer. Therefore, at least one side of the two VPN peers has to have the field filled. Otherwise, VPN connection cannot be established. Enter one IP address or host name per line. If Default is selected, VPN data will go through UDP port 4500. Data Port SelectCustom and enter a port number if a specific outgoing port is desired. http://www.pepwave.com 64 Copyright @ 2014 Pepwave A Layer 2 Bridging is an advanced feature, click the icon next to PepVPN profile to activate it, then click the box next to Layer 2 Bridging to see all configuration options. Layer 2 Bridging Layer 2 Bridging When this check box is unchecked, traffic between local and remote networks will be IP forwarded. To bridge the Ethernet network of an Ethernet port on a local and remote network, select this check box. When this check box is selected, the two networks will become a single LAN, and any broadcast (e.g., ARP requests) or multicast traffic (e.g., Bonjour) will be sent over the VPN. The L2 bridging feature is hidden from the user interface by default. To enable this feature, user has to click the hidden link at the upper right corner of the SpeedFusionTM Profile table. This field specifies the port to be bridged to the remote site. Bridge port VLAN Tagging STP If you choose WAN X (internal: replace the X by the WAN port number) that WAN will be disabled for WAN purposes. Instead, the WAN port will be dedicated to bridging with the remote site. The LAN port will remain unchanged. This field specifies the VLAN ID with which the VPN's traffic should be tagged before sending the traffic to the bridge port. If no VLAN tagging is needed, select No VLAN. To define a new VLAN ID, click New... and input the VLAN ID. VLAN IDs that are not referenced by any VPN profiles will be removed from the list automatically. Default: No VLAN Checking this box enables Spanning Tree Protocol. Default: Unchecked. Preserve LAN Settings Upon Connected The LAN port is chosen as the bridge port. Selecting this option preserves LAN settings (e.g., LAN port IP address, DHCP server, etc.) when the Layer 2 VPN is connected. Uncheck this option if the LAN IP address and gateway will use remote LAN settings. Check this option if the LAN IP address and local DHCP server should remain unchanged after the VPN is up. If you choose not to preserve LAN settings when the VPN is connected, the device will not act as a router, and most Layer 3 routing functions will cease to work. Configure Use this setting to specify how a management IP address is acquired for the bridge port in the specified VLAN (if defined) when the Layer 2 bridge is connected. If you choose As None, no IP address will be assigned to the bridge port for the Layer 2 connection. http://www.pepwave.com 65 Copyright @ 2014 Pepwave Send All Traffic To This feature allows you to redirect all traffic to a specified PepVPN connection. Click the connection and the following menu will appear: button to select your You could also specify a DNS server to resolve incoming DNS requests PepVPN Local ID The Local ID is a text string to identify this local unit when establishing a VPN connection. When creating a profile on a remote unit, this Local ID has to be inputted in the remote unit's "Remote ID" field. Click the icon to edit your Local ID. WAN Connection Priority WAN Connection Priority You can specify the priority of the WAN connections to be used for making VPN connections. WAN connections set to OFF will never be used. Only available WAN connections with the highest priority will be utilized.To enable connection mapping to remote WAN, click the http://www.pepwave.com button. 66 Copyright @ 2014 Pepwave Link Failure Detection TM The bonded SpeedFusion can detect routing failures on the path between two sites over each WAN connection. Failed WAN connections will not be used to route VPN traffic. Health check packets are sent to the remote unit to detect any failure. The more frequent checks it sends, the shorter detection time, but the higher bandwidth overhead will be consumed. Link Failure Detection Time When Recommended is selected, a health check packet is sent out every 5 seconds, and the expected detection time is 15 seconds. When Fast is selected, a health check packet is sent out every 3 seconds, and the expected detection time is 6 seconds. When Faster is selected, a health check packet is sent out every 1 second, and the expected detection time is 2 seconds. When Extreme is selected, a health check packet is sent out every 0.1 second, and the expected detection time is under 1 second. By default, Recommended is selected. TM Important Note Pepwave’s proprietary SpeedFusion used TCP port 32015 and UDP port 4500 for establishing VPN connections. If you have a firewall in front of the devices, you will need to add firewall rules for these port and protocols which will allow inbound and outbound traffic pass-through the firewall. Tip Want to know more about VPN Sub-Second Session Failover? Visit our YouTube Channel for a video tutorial! http://youtu.be/TLQgdpPSY88 http://www.pepwave.com 67 Copyright @ 2014 Pepwave 11.2 Pepwave MAX Behind NAT Router TM The Pepwave MAX supports establishing SpeedFusion over WAN connections which are behind a NAT (Network Address Translation) router. To be able for a WAN connection behind a NAT router to accept VPN connections, you can configure the NAT router in front of the WAN connection to forward TCP port 32015 to it. If one or more WAN connections on Unit A can accept VPN connections (by means of port forwarding or not) while none of the WAN connections on the peer Unit B can do so, you should put all public IP addresses or host names of the Unit A to the Unit B’s RemoteIP Addresses / Host Namesfield. Leave TM the field in Unit A blank.With such setting, SpeedFusion connection can be set up and all WAN connections on both sides will be utilized. For example, see the following diagram: One of the WANs of RouterA is non-NAT’d (212.1.1.1).The rest of the WANs on RouterA and all WANs on RouterB are NAT’d. In such case, the RemoteIP Addresses / Host Names field in RouterB should be filled with all of the RouterA’s host names or public IP addresses (i.e. 212.1.1.1, 212.2.2.2 and 212.3.3.3), and the field in RouterA can be left blank. The two NAT routers on WAN1 and WAN3 of Router A should inbound port forward TCP port 32015 to the Router A so that all WANs would be utilized to establish VPN. http://www.pepwave.com 68 Copyright @ 2014 Pepwave 11.3 SpeedFusionTM Status VPN Status is shown in the Status> SpeedFusionTM. The connection status of each connection profile is shown as below: By clicking the Details button at the top-right hand corner of SpeedFusionTMtable, you will be forwarded to TM Status >SpeedFusion . You can view the subnet and WAN connection information of each VPN peer. Please refer to Section21.5 for details. IP subnets must be unique among VPN peers The entire inter-connected SpeedFusionTM network is one single non-NAT IP network. No two subnets in two sites shall be duplicated. Otherwise, connectivity problems will be experienced in accessing those subnets. http://www.pepwave.com 69 Copyright @ 2014 Pepwave 12 IPsec VPN The Pepwave MAX’s IPsec VPN functionality securely connects one or more branch offices to your company's main headquarters or to other branches.The data, voice, or video communications between these locations are thus kept safe and confidential across the public Internet. The IPsec VPN of the Pepwave MAX is especially designed for a multi-WAN environment. For instance, a user sets up multiple IPsec profiles for his multi- WAN1 ~ WAN3 environment, if WAN1 is connected and its health check turns up good, the IPsec traffic will go through this link. However, should unforeseen problems (e.g. physically unplugged or ISP problems) arise and cause WAN1 to go down, our IPsec implementation will make use of WAN2 and WAN3 accordingly, as failover purposes. 12.1 IPsec VPN Settings All of our Pepwaveproducts can makemultiple IPsec VPN connections with Peplink, Pepwave as well as Cisco or Juniper Routers. Note that all LAN subnet and subnets behind it have to be unique.Otherwise, VPN members will not be able to access each other. All data can be routed over the VPN with a selection of encryption standards such as 3DES, AES-128 and AES-256. To configure, navigate to Advanced>IPsec VPN: A NAT-Traversal option and list of definedIPsec VPN profiles will be shown. The NAT-Traversal option should be enabled if your system is behind a NAT router. Click the New Profilebutton to create new IPsec VPN profiles that make VPN connections to remote Peplink Balance, Pepwave MAX, Cisco or Juniper Routers via the available WAN connections. To edit any of the profiles, click on its associated connection name in the leftmost column. http://www.pepwave.com 70 Copyright @ 2014 Pepwave IPsec VPN Settings Name This field is for specifying a local name to represent this connection profile. Active When this box is checked, this IPsec VPN connection profile will be enabled. Otherwise, it will be disabled. Remote Gateway IP Address Local Networks Enter the remote peer’s public IP address.For Aggressive Mode, this is optional.. Enter the local LAN subnets here. If you have defined “static routes”, they will be shown here too. Remote Networks Enter the LAN and subnets that are located at the remote site here. Main Mode Choose this Main Mode if both IPsec peers use static IP addresses. Aggressive Mode Choose this Aggressive Mode if one of the IPsec peers use dynamic IP addresses. Force UDP Encapsulation For UDP encapsulation to be forced regardless of the NAT-Traversal, tick this checkbox. Pre-shared Key This defines the peer authentication pre-shared key to be used to authenticate this VPN http://www.pepwave.com 71 Copyright @ 2014 Pepwave connection. The connection will be up only if the pre-shared keys on each side match. Local ID Under Main Mode, this field can be left blank. Under Aggressive Mode, if Remote Gateway IP Address field is filled on this end and the peer end, this field can be left blank. Otherwise, this field is typically a U-FQDN. Remote ID Under Main Mode, this field can be left blank. Under Aggressive Mode, if Remote Gateway IP Address field is filled on this end and the peer end, this field can be left blank. Otherwise, this field is typically a U-FQDN. Phase 1 (IKE) Proposal Under Main Mode, this allows the setting of up to 6 encryption standards, in descending order of priority, to be used in the initial connection key negotiations. For Aggressive Mode, only one selection is permitted. This is the Diffie-Hellman group used within IKE. This allows two parties to establish a shared secret over an insecure communications channel. The larger the group number, the Phase 1 DH Group higher the security. Group 2 - 1024-bit is the default value. Group 5 - 1536-bit is the alternative option. Phase 1 SA Lifetime Phase 2 (ESP) Proposal This setting specifies the lifetime limit of this Phase 1 Security Association. By default, it is set at 3600 seconds. Under Main Mode, this allows the setting of up to 6 encryption standards, in descending order of priority, to be used for the IP data that is being transferred. For Aggressive Mode, only one selection is permitted. The Perfect Forward Secrecy (PFS) ensures that if a key was compromised, the attacker will be able to access only the data protected by that key but not any other data. Phase 2 PFS Group Phase 2 SA Lifetime None - Do not request for PFS when initiating connection. However, since there is no valid reason to refuse PFS, the system will allow the connection to use PFS if requested by the remote peer. This is the default value. Group 2 - 1024-bit Diffie-Hellman group. The larger the group number, the higher the security. Group 5 - 1536-bit is the third option. This setting specifies the lifetime limit of this Phase 2 Security Association. By default, it is set at 28800 seconds. WAN Connection Priority WAN Connection http://www.pepwave.com Select the appropriate WAN connection with the help of drop down 72 Copyright @ 2014 Pepwave
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.6 Linearized : Yes Tagged PDF : Yes XMP Toolkit : Adobe XMP Core 4.0-c316 44.253921, Sun Oct 01 2006 17:14:39 Modify Date : 2014:03:19 13:20:06+08:00 Create Date : 2014:03:19 13:19:15+08:00 Metadata Date : 2014:03:19 13:20:06+08:00 Creator Tool : Microsoft® Office Word 2007 Format : application/pdf Title : Pepwave MAX User Manual Creator : Peplink Ltd. Document ID : uuid:5f11d25d-dcf0-458f-98f5-e711f319247d Instance ID : uuid:8c017338-f6c0-4449-b140-45418187bda8 Producer : Microsoft® Office Word 2007 Page Count : 72 Author : Peplink Ltd.EXIF Metadata provided by EXIF.tools