Front View                                                             Top

 

Side                                                                           Bottom

LED Indicators
Power	Blue LED	OFF – Power is Off ON – Power is On
Status	Blue LED	OFF – Access point is initializing ON – Access point is ready
Ethernet Port	Blue LED	OFF – No data is being transferred or no device is connected to the Ethernet port BLINKING – Ethernet port is sending/receiving data ON – A powered-on device is connected to Ethernet port
	Port Type	Auto MDI/MDI-X ports
Wi-Fi	Blue LED	OFF – 2.4/5GHz Wi-Fi radio is off ON – 2.4/5GHz Wi-Fi radio is on  / no Wi-Fi mesh uplink BLINKING – Indicates the state of the 2.4/5GHz Wi-Fi mesh uplink

 

 

 Front View

LED Indicators
Status	Blue LED	OFF – Access point is initializing ON – Access point is ready
Ethernet Port	Blue LED	OFF – No data is being transferred or no device is connected to the Ethernet port BLINKING – Ethernet port is sending/receiving data ON – A powered-on device is connected to the Ethernet port
	Port Type	Auto MDI/MDI-X ports
Wi-Fi	Blue LED	OFF – 2.4/5GHz Wi-Fi radio is off ON – 2.4/5GHz Wi-Fi radio is on / no Wi-Fi mesh uplink BLINKING – Indicates the state of the 2.4/5GHz Wi-Fi mesh uplink state

 

Front View

LED Indicators
Status	RED – Access point is initializing GREEN – Access point is ready
Wi-Fi	OFF – Wi-Fi AP is off  GREEN – Wi-Fi AP is on
Ethernet Port	ON – Port is connected without traffic LAN BLINKING – Ethernet port sending/receiving data  OFF – No data is being transferred or No device connected to Ethernet port

 

Front View 

LED Indicators
Status	OFF – Access point is initializing ON – Access point is ready

 

LED Indicators
Status	RED – Access point is initializing GREEN – Access point is ready
Wi-Fi	OFF – 2.4/5GHz Wi-Fi radio off BLINKING – AP sending/receiving data GREEN – 2.4/5GHz Wi-Fi radio on Note that this model includes a 2.4GHz Wi-Fi radio and a 5GHz Wi-Fi radio that can operate simultaneously to increase speed and reduce interference.

 

LED Indicators
Status	RED – Access point is initializing GREEN – Access point is ready
Wi-Fi	OFF – 2.4/5GHz Wi-Fi radio off BLINKING – AP sending/receiving data GREEN – 2.4/5GHz Wi-Fi radio on Note that this model includes a 2.4GHz Wi-Fi radio and a 5GHz Wi-Fi radio that can operate simultaneously to increase speed and reduce interference.

 

WAN connection details need to be configured in order to connect the router to the Internet.

To configure a WAN connection, go to Network > WAN from the menu and select the desired WAN connection by clicking on its name. 

WAN Connection Settings
WAN Connection Name	Enter a name to represent this WAN connection.
Enable	This setting enables the WAN connection. If schedules have been defined, you will be able to select a schedule to apply to the connection.
Connection Method	There are three possible connection methods for Ethernet WAN: DHCP Static IP PPPoE The connection method and details are determined by, and can be obtained from the ISP.
Hostname	Provide a hostname for this WAN port if requested by the ISP.
DNS Server	Enter the DNS server address that your access point will use to resolve host names.
Connection Priority	This option allows you to configure the WAN connection, whether for normal daily usage or as a backup connection only.  If Always-on is selected, the WAN connection will be kept on continuously, regardless of the priority of other WAN connections.  If Backup is selected, the WAN connection will depend on other WAN connections. It will not be used when one or more higher priority dependent WAN connections are connected.
Independent from Backup WANs	If this is checked, the connection will be working independently from other backup WAN connections. WAN connections whose Connection Priority are set to Backup will ignore the status of this WAN connection, and will be used when none of the other higher priority connections are available.
Reply to ICMP Ping	If the checkbox is unticked, this option is disabled and the system will not reply to any ICMP ping echo requests to the WAN IP addresses of this WAN connection. Default: ticked (Yes)
Upload Bandwidth	This field refers to the maximum upload speed.  This value is referenced when default weight is chosen for outbound traffic and traffic prioritization. A correct value can result in effective traffic prioritization and efficient use of upstream bandwidth.
Download Bandwidth	This field refers to the maximum download speed. Default weight control for outbound traffic will be adjusted according to this value.

Physical Interface Settings
Port Speed	This is the port speed of the WAN connection. It should be set to the same speed as the connected device in case of any port negotiation problems. When a static speed is set, you may choose whether to advertise its speed to the peer device or not. In this setting, Advertise Speed is selected by default. You can choose not to advertise the port speed if the port has difficulty in negotiating with the peer device. The default setting for Port Speed is: Auto.
MTU	This field is for specifying the Maximum Transmission Unit value of the WAN connection. An excessive MTU value can cause file downloads to stall shortly after connecting. You may consult your ISP for the connection’s MTU value. The default value is 1440.
MSS	This setting should be configured based on the maximum payload size that the local system can handle. The MSS (maximum segment size) is computed from the MTU minus 40 bytes for TCP over IPv4. If the MTU is set to Auto, the MSS will also be set automatically.  By default, MSS is set to Auto.
MAC Address Clone	Some service providers (e.g. cable providers) identify the client’s MAC address and require the client to always use the same MAC address to connect to the network. In such cases, change the WAN interface’s MAC address to the original client PC’s MAC address via this field. The default MAC address is a unique value assigned at the factory. In most cases, the default value is sufficient. Clicking Default restores the MAC address to the default value.
VLAN	Click the square if you wish to enable VLAN functionality for the WAN connection and enable multiple broadcast domains. Once you enable VLAN, you will be able to enter a name for your network.

 

Health Check Settings

To ensure traffic is routed only to healthy WAN connections, the Pepwave AP can periodically check the health of each WAN connection. The health check settings for each WAN connection can be independently configured via Network > WAN > *Connection Name* > Health Check Settings.

 

Health Check Settings
Health Check Method	This setting specifies the health check method for the WAN connection. This value can be configured as Disabled, PING, DNS Lookup, or HTTP. The default method is DNS Lookup.  Health Check Method: Disabled When Disabled is chosen in the method field, the WAN connection will always be considered as up. The connection will NOT be treated as down in the event of IP routing errors.  Health Check Method: PING ICMP ping packets will be issued to test the connectivity with a configurable target IP address or hostname. A WAN connection is considered as up if ping responses are received from either one or both of the ping hosts. PING Host: This setting specifies IP addresses or hostnames with which connectivity is to be tested via ICMP ping.  If the Use first two DNS servers as Ping Hosts is checked, the target ping host will be the first DNS server for the corresponding WAN connection. Reliable ping hosts with a high uptime should be considered. By default, the first two DNS servers of the WAN connection are used as the ping hosts. Health Check Method: DNS Lookup DNS lookups will be issued to test connectivity with target DNS servers. The connection will be treated as up if DNS responses are received from one or both of the servers, regardless of whether the result was positive or negative. DNS Servers: This field allows you to specify two DNS hosts’ IP addresses with which connectivity is to be tested via DNS Lookup.  If the Use first two DNS servers as Health Check DNS Servers is checked, the first two DNS servers will be the DNS lookup targets for checking a connection’s health. If the box is not checked, Host 1 must be filled, while a value for Host 2 is optional.  If the Include public DNS servers is checked and no response is received from all specified DNS servers, DNS lookups will also be issued to some public DNS servers. A WAN connection will be treated as down only if there is also no response received from the public DNS servers.  Connections will be considered as up if DNS responses are received from any one of the health check DNS servers, regardless of a positive or negative result. By default, the first two DNS servers of the WAN connection are used as the health check DNS servers. Health Check Method: HTTP HTTP connections will be issued to test connectivity with configurable URLs and strings to match. URL 1: The URL will be retrieved when performing an HTTP health check. When Matching String is left blank, a health check will pass if the HTTP return code is between 200 and 299 (Note: HTTP redirect codes 301 or 302 are treated as failures).  When Matching String is filled, a health check will pass if the HTTP return code is between 200 and 299 and if the HTTP response content contains the string. URL 2: If URL 2 is also provided, a health check will pass if either one of the tests passed.
Timeout	If a health check test cannot be completed within the specified amount of time, the test will be treated as failed.
Health Check Interval	This is the time interval between each health check test.
Health Check Retries	This is the number of consecutive health check failures before treating a connection as down.
Recovery Retries	This is the number of responses required after a health check failure before treating a connection as up again.

 

Additional IP Address Settings

Additional IP Address Settings
Additional IP Address	The IP Address list represents the list of fixed Internet IP addresses assigned by the ISP in the event that more than one Internet IP address is assigned to this WAN connection.

 

Dynamic DNS Settings

Pepwave access points are capable of registering the domain name relationships to dynamic DNS service providers. Through registration with dynamic DNS service provider(s), the default public Internet IP address of each WAN connection can be associated with a host name. With dynamic DNS service enabled for a WAN connection, you can connect to your WAN’s IP address from external sources, even if its IP address is dynamic. You must register for an account from the listed dynamic DNS service providers before enabling this option. 

If the WAN connection’s IP address is a reserved private IP address (i.e. behind a NAT router), the public IP of each WAN will be automatically reported to the DNS service provider. 

Either upon a change in IP addresses or every 23 days without link reconnection, the Pepwave router will connect to the dynamic DNS service provider to perform an IP address update within the provider’s records.

Dynamic DNS Settings
Service Provider	This setting specifies the dynamic DNS service provider to be used for the WAN based on supported dynamic DNS service providers:  changeip.com  dyndns.org  no-ip.org  DNS-O-Matic Others… When Others… is selected, it supports custom Dynamic DNS servers by entering its URL. Works with any service compatible with DynDNS API. Select Disabled to disable this feature.
User ID / Username / Email	This setting specifies the registered user name for the dynamic DNS service.
Password	This setting specifies the password for the dynamic DNS service.
Hosts	This setting specifies a list of hostnames or domains to be associated with the public Internet IP address of the WAN connection.
Update All Hosts	Check this box to automatically update all hosts.

 

DNS over HTTPS (DoH) 

*Please note that the following settings are available only for AP One Rugged (HW2).
You can enable the DoH support in this section. 

When this option is enabled, the DNS proxy server will use HTTPS connection to forward DNS requests to the DoH resolver, it will not fallback to traditional UDP DNS.

To configure custom DNS over HTTPS resolver, select Custom URL:, enter resolver URL and IP address.

 

DNS over HTTPS
Enable	When this option is enabled, the DNS proxy server will use HTTPS connections to forward DNS requests to the DoH resolver; it will not fallback to traditional UDP DNS options.
Server	The options to configure DoH with a predefined server are:  Cloudflare – The DNS server IP addresses for Cloudflare will be using 1.1.1.1, which is unfiltered.  Quad9 – The DNS server IP addresses for Quad9 will be using 9.9.9.9 and 142.112.112.112, which is malware blocking and DNSSEC.  Google DNS – The DNS server IP  addresses for Google DNS will be using 8.8.8.8 and 8.8.4.4, which is RFC8484 standard. OpenDNS – The DNS server IP addresses for OpenDNS will be using 208.67.222.222 and 208.67.220.220, which is standard DNS.    Custom URL – You may select Custom URL:, and enter the resolver URL and IP address.

 

WAN Quality Monitoring

This settings advice how WAN Quality information is being gathered.

By default, WAN Quality will always be observed and gathered automatically. With customized choice of WAN connections, the device will always observe WAN Quality of those selected WAN connections. Other WAN connections may stop observing WAN Quality information if it is not necessary for the underlying features.

 

Network Settings

Port Settings

PepVPN securely connects one or more remote sites to the site running your access point.

*Please note that the following settings will be available only when your access point is operating in Router Mode.

To set up PepVPN, first give your site a local PepVPN ID. To modify an existing local ID, 

click on .

Once you’ve specified a local ID, click the New Profile button to configure PepVPN.

 

PepVPN Profile Settings
Name	Enter a name to represent this profile. The name can be any combination of alphanumeric characters (0-9, A-Z, a-z), underscores (_), dashes (-), and/or non-leading/trailing spaces ( ).
Enable	Check this box to enable PepVPN.
Encryption	By default, VPN traffic is encrypted with 256-bit AES. If Off is selected on both ends of a VPN connection, no encryption will be applied.
Authentication	Select Remote ID / Pre-shared Key to specify the method your access point will use to authenticate peers. When selecting Remote ID / Pre-shared Key, be sure to enter a unique peer ID number in the Remote ID field.
Remote ID / Pre-shared Key	This optional field becomes available when Remote ID / Pre-shared Key is selected as the Pepwave access point’s VPN Authentication method, as explained above. Pre-shared Key defines the pre-shared key used for this particular VPN connection.  The VPN connection’s session key will be further protected by the pre-shared key. The connection will be up only if the pre-shared keys on each end match.
NAT Mode	Check this box to allow the local DHCP server to assign an IP address to the remote peer. When NAT Mode is enabled, all remote traffic over the VPN will be tagged with the assigned IP address using network address translation.
Remote IP Address / Host Names (Optional)	If NAT Mode is not enabled, you can enter a remote peer’s WAN IP address or hostname(s) here. If the remote peer uses more than one address, enter only one of them here. Multiple hostnames are allowed and can be separated by a space character or carriage return. Dynamic-DNS host names are also accepted.  This field is optional. With this field filled, the Peplink Balance will initiate connection to each of the remote IP addresses until it succeeds in making a connection. If the field is empty, the Peplink Balance will wait for connection from the remote peer. Therefore, at least one of the two VPN peers must specify this value. Otherwise, VPN connections cannot be established.
Cost	Define path cost for this profile. OSPF will determine the best route through the network using the assigned cost.  Default: 10
Data Port	This field specifies the outgoing UDP port number for transporting VPN data. If Default is selected, port 4500 will be used by default. Port 32015 will be used if port 4500 is unavailable. If Custom is selected, you can input a custom outgoing port number between 1 and 65535.
Bandwidth Limit	Define maximum download and upload speed to each individual peer. This functionality requires the peer to use PepVPN version 4.0.0 or above.
Receive Buffer	Receive Buffer can help to reduce out-of-order packets and jitter, but will introduce extra latency to the tunnel.  Default is 0 ms, which disables the buffer, and the maximum buffer size is 2000 ms.
WAN Connection Priority
WAN Connection Priority	If your device supports it, you can specify the priority of WAN connections to be used for making VPN connections. WAN connections set to OFF will never be used. Only available WAN connections with the highest priority will be used.  To enable asymmetric connections, connection mapping to remote WANs, cut-off latency, and packet loss suspension time, click the   button.

Send All Traffic To

This feature allows you to redirect all traffic to a specified PepVPN connection. Click the   button to select your connection and the following menu will appear: You could also specify a DNS server to resolve incoming DNS requests. Check the box next to Backup Site to designate a backup SpeedFusion profile that will take over should the main PepVPN connection fail.

Link Failure Detection Time

Link Failure Detection Time

The bonded VPN can detect routing failures on the path between two sites over each WAN connection. Failed WAN connections will not be used to route VPN traffic. Health check packets are sent to the remote unit to detect any failure. The more frequently checks are sent, the shorter the detection time, although more bandwidth will be consumed. When Recommended (default) is selected, a health check packet is sent every five seconds, and the expected detection time is 15 seconds. When Fast is selected, a health check packet is sent every three seconds, and the expected detection time is six seconds. When Faster is selected, a health check packet is sent every second, and the expected detection time is two seconds. When Extreme is selected, a health check packet is sent every 0.1 second, and the expected detection time is less than one second.

*Please note that the following settings will be available only when your access point is operating in Router Mode.

NAT mappings allow IP address mapping of all inbound and outbound NAT’d traffic to and from an internal client IP address. Settings to configure NAT mappings are located at Network > NAT Mappings. 

*Please note that the following settings will be available only when your access point is operating in Router Mode.

To add a rule for NAT mappings, click Add NAT Rule. 

NAT Mapping Settings
LAN Client(s)	NAT mapping rules can be defined for a single LAN IP Address, an IP Range, or an IP Network.
Address	This is the IP address of the LAN host where the system will map the selected connection IP addresses.
Inbound Mappings	This section is to define which inbound IP addresses should be forwarded to the LAN Client(s).
Outbound Mappings	This section is to define which IP addresses of each WAN should be used when an IP connection is made from the LAN host to the Internet.

The captive portal serves as a gateway that clients have to pass if they wish to access the Internet using your router. To configure the captive portal, navigate to Network > Captive Portal.

Captive Portal Settings
Name	Enter a name for the Captive Portal Profile.
Enable	Check the Enable box to turn on your access point’s built-in captive portal functionality.
Hostname	To customize the portal’s form submission and redirection URL, enter a new URL in this field.
Access Mode	Open Access allows clients to freely access your router. User Authentication forces your clients to authenticate before accessing your router. External Server uses the captive portal with HotSpotSystem or CoovaChilli.  As described in the following knowledgebase article: https://forum.peplink.com/t/using-hotspotsystem-wi-fi-on-pepwave-max-routers/
User Authentication	This authenticates your clients through a RADIUS server. After selecting this option, you will see the following fields: Fill in the necessary information to complete your connection to the server and enable authentication.
Access Quota	Enter a value in minutes to limit access time on a given login or enter 0 to allow unlimited use time on a single login. Likewise, enter a value in MB for the total bandwidth allowed or enter 0 to allow unlimited bandwidth on a single login.
Quota Reset Time	This menu determines how your usage quota resets. Setting it to Daily will reset it at a specified time every day. Setting a number of minutes after quota reached establishes a timer for each user that begins after the quota has been reached.
Inactive Timeout	Enter a value in minutes to logout following the specified period of inactivity or enter 0 to disable inactivity logouts.
Allowed Networks	To whitelist a network, enter the domain name / IP address here and click the . To delete an existing network from the list of allowed networks, click the button next to the listing.
Allowed Clients	To whitelist a client, enter the MAC address / IP address here and click the . To delete an existing client from the list of allowed clients, click the   button next to the listing.
Splash Page	Here, you can choose between using the Pepwave access point’s built-in captive portal or redirecting clients to a URL that you define.
Popup Handling	Configurable options for popup handling: Bypass popup (redirection only takes place on a normal browser) Automatically show splash page on Safari for Apple (iOS / macOS) devices
Logout Hostname	A hostname that can be used to logout captive portal when being accessed on the browser.
Customize splash page	Click on the provided link in the Captive Portal Profile to customize the splash page. A new browser tab with a WYSIWYG editor of the splash page will be opened. To edit the content, switch Edit Mode on and select the corresponding elements to edit.

 

*Please note that the following settings will be available only when your access point is operating in Router Mode.

Radius Server

Certificate Manager

Ignition Sensing

Use the controls on the AP tab to set the wireless SSID, AP settings and Mesh, as well as wireless distribution system (WDS) settings.

Access Point 

Wireless SSID 

Wireless Client 

Mesh / WDS

Nearby Device

Event Log

Admin Settings
Devicer Name	This field allows you to define a name for this Peplink Balance unit. By default, Device Name is set as Model_XXXX, where XXXX refers to the last 4 digits of the serial number of that unit.
Admin User Name	Admin User Name is set as admin by default, but can be changed.
Admin Password	This field allows you to specify a new administrator password.
Confirm Admin Password	This field allows you to confirm the new administrator password.
Read-only User Name	Read-only User Name is set as user by default, but can be changed, if desired.
User Password	This field allows you to specify a new user password. Once the user password is set, the read-only user feature will be enabled.
Confirm User Password	This field allows you to confirm the new user password.
Web Session Timeout	A web login session will be logged out automatically when it has been idle longer than the Web Session Timeout. Unlimited session timeout: 0 hours 0 minutes. Default: 4 hours 0 minutes.
Authentication Method	When External Authentication is selected, the web admin will authenticate using the corresponding external server. Authenticated users are treated as either “admin” with full read-write permission or “user” with read-only access. Local admin and user accounts will be disabled. However, when the device is not able to communicate with the external server, local accounts are enabled to allow emergency access. By default, it is set to Local Account. Available options:  Local Account RADIUS   Authentication Protocol This specifies the authentication protocol used. Available options are MSCHAP v2 and PAP. Authentication Host This specifies the IP address or hostname of the RADIUS server host. Authentication Port This setting specifies the UDP destination port for authentication requests. Authentication Secret This field is for entering the secret key for accessing the RADIUS server. Accounting Host This specifies the IP address or hostname of the RADIUS server host. Accounting Port  This setting specifies the UDP destination port for accounting requests. Accounting Secret This field is for entering the secret key for accessing the accounting server. Authentication Timeout  This option specifies the time value for authentication timeout. TACACS+   TACACS+ Server This specifies the access address of the external TACACS+ server. TACACS+ Server Secret This field is for entering the secret key for accessing the RADIUS server.  TACACS+ Server Timeout This option specifies the time value for TACACS+ timeout.
Security	This option is for specifying the protocol(s) through which the web admin interface can be accessed: HTTP HTTPS  HTTP/HTTPS
Web Admin Access	This option is for specifying the network interfaces through which the web admin interface can be accessed:  LAN only LAN/WAN  If LAN/WAN is chosen, the WAN Connection Access Settings form will be displayed.
Web Admin Port	This field is for specifying the port number on which the web admin interface can be accessed.
Allowed Source IP Subnets	This option is for specifying the IP subnets through which the web admin interface can be accessed. Any – Allow web admin access to be from anywhere, and without an IP address. Allow access from the following IP subnets only – Restrict web admin access to only the defined IP subnets. When this is chosen, a text input area will be displayed beneath:  The allowed IP subnet addresses should be entered into this text area. Each IP subnet must be in form of w.x.y.z/m, where w.x.y.z is an IP address (e.g. 192.168.0.0), and m is the subnet mask in CIDR format, which is between 0 and 32 inclusively (e.g. 192.168.0.0/24).  To define multiple subnets, separate each IP subnet one in a line. For example:  192.168.0.0/24  10.8.0.0/16
Allowed WAN IP Address(es)	This field allows you to select the WAN IP address(es) the web server should connect to.

You can select the operating mode you want to use for the access point device. The available options are: 

• Router Mode
• Bridge Mode 
• Bridge Mode, without LAN IP address

There are two ways to upgrade the unit. The first method is through an online download. The second method is to upload a firmware file manually.

To perform an online download, click on the Check for Firmware button. The access point will check online for new firmware. If new firmware is available, the access point automatically downloads the firmware. The rest of the upgrade process will be automatically initiated.

You may also download a firmware image from the Peplink website and update the unit manually. To update using a firmware image, click Choose File to select the firmware file from the local computer, and then click Manual Upgrade to send the firmware to the access point. It will then automatically initiate the firmware upgrade process.

Please note that all devices can store two different firmware versions in two different partitions. A firmware upgrade will always replace the inactive partition. If you want to keep the inactive firmware, you can simply reboot your device with the inactive firmware and then perform the firmware upgrade.

Firmware Upgrade Status

Status LED information during firmware upgrade: OFF – Firmware upgrade in progress (DO NOT disconnect power.) Red – Unit is rebooting Green – Firmware upgrade successfully completed

 

Important Note

The firmware upgrade process may not necessarily preserve the previous configuration, and the behavior varies on a case-by-case basis. Consult the release notes for the particular firmware version before installing. Do not disconnect the power during the firmware upgrade process. Do not attempt to upload a non-firmware file or a firmware file that is not supported by Peplink. Upgrading the Peplink Balance with an invalid firmware file will damage the unit and may void the warranty.

The time server functionality enables the system clock of the access point to be synchronized with a specified time server. The settings for time server configuration are located at System > Time.

 

Time Settings
Time Zone	This specifies the time zone (along with the corresponding Daylight Savings Time scheme) in which Pepwave AP operates. The Time Zone value affects the time stamps in the event log of the Pepwave AP and e-mail notifications. Check Show all to show all time zone options.
Time Server	This setting specifies the NTP network time server to be utilized by the Pepwave AP.

Enable and disable different functions such as WAN connections and SSID at different times, based on a user-scheduled configuration profile. The settings for this are located at System > Schedule. 

Click on New Schedule to begin the schedule profile. 

Edit Schedule Profile
Enable	Click this checkbox to enable this schedule profile. Note that if this is disabled, then any associated features will also have their scheduling disabled.
Name	Enter your desired name for this particular schedule profile.
Schedule	Click the drop-down menu to choose from predefined schedules as your starting point. Please note that upon selecting a predefined schedule, previous changes on the schedule map will be deleted.
Schedule Map	Click on the desired times to enable features for that time period. You can hold down your mouse button for faster entry.

 

Email notification functionality provides a system administrator with up-to-date information on network status. The settings for configuring email notifications are found at System > Email Notification.

 

Email Notification Settings
Email Notification	This setting specifies whether or not to enable email notification.  If Enable is checked, the Pepwave AP will send email messages to system administrators when the WAN status changes or when new firmware is available.  If Enable is unchecked, email notification is disabled and the Pepwave AP will not send email messages.
SMTP Server	This setting specifies the SMTP server to be used for sending the email notifications. If the server requires authentication, check Require authentication.
Connection Security	This setting specifies via a drop-down menu one of the following valid connection security options:  None  STARTTLS  SSL/TTS  When a connection security option is selected, the SMTP Port will automatically set a default port number.
SMTP Port	This field is for specifying the SMTP port number. By default, this is set to 25.  When STARTTLS is selected, the default port number will be set to 587.  When SSL/TTS is selected, the default port number will be set to 465.  You may customize the port number by editing this field.
SMTP User Name / Password	This setting specifies the SMTP username and password for accessing the SMTP Server to send the email notifications. These fields are only visible when the Require authentication box is checked in the SMTP Server setting.
Confirm SMTP Password	This field allows you to verify that the SMTP password matches (if a password is provided in the SMTP Password field).
Sender’s Email Address	This setting specifies the email address that the Pepwave AP will send reports from.
Recipient’s Email Address	This setting specifies the email address(es) to which the Pepwave AP will send email notifications. For multiple recipients, separate each email address using the Enter key.

 

After you have finished setting up email notifications, you may click the Test Email Notification button to test the settings before saving them. After Test Email Notification is clicked, you will see this screen to confirm the settings:

Click Send Test Notification to send the test email with the current settings. In a few seconds, you will see a message with detailed test results.

Event log functionality enables event logging at a specified remote syslog server. The settings for configuring the remote system log can be found at System > Event Log.

 

Remote Syslog Settings
Remote Syslog	This setting specifies whether or not to log events at the specified remote syslog server.
Remote Syslog Host	This setting specifies the IP address or hostname of the remote syslog server. Default Port is: 514
Push Event	The Pepwave AP can also send push notifications to mobile devices that have our Mobile Router Utility installed. Check the box to activate this feature.  For more information on the Router Utility, go to: www.peplink.com/products/router-utility

SNMP or simple network management protocol is an open standard that can be used to collect information about the Pepwave AP unit. SNMP configuration is located at System > SNMP.

SNMP Settings
SNMP Device Name	This field displays the router name defined at System > Admin Security.
SNMP Port	This option specifies the port which SNMP will use. The default port is 161.
SNMPv1	This option allows you to enable SNMP version 1.
SNMPv2c	This option allows you to enable SNMP version 2c.
SNMPv3	This option allows you to enable SNMP version 3.
SNMP Trap	This option allows you to enable SNMP Trap. If enabled, the following entry fields will appear.
SNMP Trap Community	This setting specifies the SNMP Trap community name.
SNMP Trap Server	Enter the IP address of the SNMP Trap server.

 

To add a community for either SNMPv1 or SNMPv2c, click the Add SNMP Community button in the Community Name table, upon which the following screen is displayed:

SNMP Community Settings
Community Name	This setting specifies the SNMP community name.
Allowed Network	This setting specifies a subnet from which access to the SNMP server is allowed. Enter the subnet address here (e.g. 192.168.1.0) and select the appropriate subnet mask.

 

To define a user name for SNMPv3, click Add SNMP User in the SNMPv3 User Name table, upon which the following screen is displayed:

SNMPv3 User Settings
User Name	This setting specifies a user name to be used in SNMPv3.
Authentication Protocol	This setting specifies via a drop-down menu one of the following valid authentication protocols:  None MD5  SHA When MD5 or SHA is selected, an entry field will appear for the password.
Privacy	This setting specifies via a drop-down menu one of the following valid privacy protocols:  NONE  DES  AES When DES or AES is selected, an entry field will appear for the password.

 

Here is the option to choose the controller management for the access point. This setting specifies via a drop-down menu one of the following valid authentication protocols:  

• Auto – AP automatically assigned to active AP Controller.
• AP Controller – AP is controlled by Peplink Balance with AP controller feature.

AP Controller
Persistent Controller	Check the box Persistent Controller and enter the IP address of the Peplink Balance under Controller Host.

• InControl – AP is controlled by InControl*

InControl
Restricted to Status Reporting Only	When the box Restricted to Status Reporting Only is ticked, the AP will only report its status, but can’t be managed or configured by InControl.
Privately Host InControl	Check the box “Privately Host InControl” and enter the IP Address or hostname of your InControl Appliance.

• Disable – You can disable the controller feature on the AP. 

 

*InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. 

You can sign up for an InControl account at https://incontrol2.peplink.com. You can register your devices under the account, monitor their status, see their usage reports, and receive offline notifications.

 

Backing up your Pepwave access point settings immediately after successful completion of the initial setup is strongly recommended. The functionality to download and upload Pepwave access point settings is found at System > Configuration.

Configuration
Restore Configuration to Factory Settings	The Restore Factory Settings button is to reset the configuration to factory default settings. After clicking the button, you will need to click the Apply Changes button on the top right corner to make the settings effective.
Download Active Configurations	Click Download to backup the current active settings.
Upload Configurations	To restore or change settings based on a configuration file, click Choose File to locate the configuration file on the local computer, and then click Upload. The new settings can then be applied by clicking the Apply Changes button on the page header, or you can cancel the procedure by pressing discard on the main page of the web admin interface.

 

*Please note that the following settings are available only for AP One AX devices. 

You can control the LED Status Indicator (available only for AP One AX devices). Available options are: 

• Default 
• Always Turn Off

Some Pepwave access point models have features that can be activated upon purchase. Once the purchase is complete, you will receive an activation key. Enter the activation key into the Activation Key field, click Activate, and then click Apply Changes.

Restart the access point with the Reboot button. For maximum reliability, the Pepwave access point can contain two copies of firmware;  each copy can be a different version. You can select the firmware version you would like to reboot the device with. The firmware marked with (Running) is the current system boot up firmware.

Please note that a firmware upgrade will always replace the inactive firmware partition.

 

PING

Traceroute

Wake-on-LAN

WAN Analysis

 

 

System Information
Device Name	This is the name specified in the Device Name field located at System > Admin Security.
Model	This displays the model of the device.
Hardware Revision	This displays the hardware version of this device.
Serial Number	This displays the serial number of this device.
Firmware	This displays the firmware version this device is currently running.
PepVPN Version	This displays the current PepVPN version.
Host name	This displays the hostname of the device.
Uptime	This displays the length of time since the device has been rebooted.
System Time	This displays the current system time.
Diagnostic Report	The Download link is for exporting a diagnostic report file required for system investigation.
Remote Assistance	Click Turn On to enable remote assistance.

 

The second table shows the MAC address of each connected LAN/WAN interface. To view your device’s End User License Agreement (EULA), follow the Legal link. 

Important Note

If you encounter issues and would like to contact the Peplink Support Team (https://contact.peplink.com/secure/create-support-ticket.html), please download the diagnostic report file and attach it along with a description of your issue.

 

Information on active sessions can be found at Status > Active Sessions > Overview.

*Please note that the following active session will be available only when your access point is operating in Router Mode.

This screen displays the number of sessions initiated by each application. Click on each service listing for additional information. This screen also indicates the number of sessions initiated by each WAN port. In addition, you can see which clients are initiating the most sessions. 

You can also perform a filtered search for specific sessions. You can filter by subnet, port, protocol, and interface. To perform a search, navigate to Status > Active Sessions > Search.

This Active Sessions section displays the active inbound/outbound sessions of each WAN connection on the Pepwave router. A filter is available to sort active session information. Enter a keyword in the field or check the box of one of the WAN connections to filter your search. 

The Client List displays all currently connected clients. It lists DHCP and online client IP addresses, names (retrieved from the DHCP reservation table or defined by users), current download and upload rate, and MAC address. 

 

In the client list table, there is a Ban Client feature which can be used to disconnect Wi-Fi clients by clicking the   button on the right.

There is a blocklist on the same page after you have banned Wi-Fi clients.

You may also unblock Wi-Fi clients when the client devices need to reconnect to the network by clicking the   button on the right. 

The Event Log displays a list of all events associated with your access point. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log. 

 

The Status > WAN Quality allows you to select each WAN and view current WAN quality. Detailed information can be seen when selecting a point on the graph.

Real-Time 

Hourly

Daily

Monthly

 

Federal Communication Commission Interference Statement (AP One AX Lite)

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

-Reorient or relocate the receiving antenna.

-Increase the separation between the equipment and receiver.

-Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

-Consult the dealer or an experienced radio/TV technician for help.

 

Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.

 

Radiation Exposure Statement

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

 

Industry Canada Statement (AP One AX Lite)

This product meets the applicable Innovation, Science and Economic Development Canada technical specifications.

 

Le present produit est conforme aux specifications techniques applicables d’Innovation, Sciences et Developpement economique Canada.

 

This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada’s licence-exempt RSS(s). Operation is subject to the following two conditions:

(1) This device may not cause interference.

(2) This device must accept any interference, including interference that may cause undesired operation of the device.

 

Le present appareil est conforme aux CNR d’Industrie Canada applicables aux appareils radio exempts de licence. L’exploitation est autorisee aux deux conditions suivantes:

(1) l’appareil ne doit pas produire de brouillage, et

(2) l’utilisateur de l’appareil doit accepter tout brouillage radioelectrique subi, meme si le brouillage est susceptible d’en

 

(i) The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;

(ii) For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate; and

The high-power radars are allocated as primary users (i.e. priority users) of the band

5725-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices.

 

(i) Le dispositif fonctionnant dans la bande 5150-5250 MHz est reserve uniquement pour une utilisation a l’interieur afin de reduire les risques de brouillage prejudiciable aux systemes de satellites mobiles utilisant les memes canaux;

 

(ii) Le gain maximal d’antenne permis pour les dispositifs avec antenne(s) amovible(s) utilisant la bande 5725-5850 MHz doit se conformer a la limitation P.I.R.E specifiee pour l’exploitation point a point et non point a point, selon le cas.

En outre, les utilisateurs devraient aussi etre avises que les utilisateurs de radars de haute puissance sont designes utilisateurs principaux (c.-a-d., qu’ils ont la priorite) pour les bande 5725-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL.

 

Radiation Exposure Statement

This device complies with the ISED radiation exposure limit set forth for an uncontrolled environment. This device should be installed and operated with minimum distance 20cm between the radiator & your body.

 

Cet equipement est conforme avec l’exposition aux radiations ISED definies pour un environnement non contr6le. Cet equipement doit etre installe et utilise a une distance minimum de 20 cm entre le radiateur et votre corps.

 

Federal Communication Commission Interference Statement (AP One AX)

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.

However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

 

-Reorient or relocate the receiving antenna.

-Increase the separation between the equipment and receiver.

-Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

-Consult the dealer or an experienced radio/TV technician for help.

 

Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.

 

Radiation Exposure Statement

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

 

CE Statement for Pepwave Routers ( AP One AX Lite )

2.4GHz ( 2412 – 2472 MHz ) : 19.74 dBm

5GHz ( 5150 – 5250 MHz ) : 22.94 dBm

 

This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

 

This equipment is restricted to indoor use only when operating in the 5150 to 5250 MHz frequency range in above countries.

 

contact as: https://www.peplink.com

 

 

 

UK Statement for Pepwave Routers ( AP One AX Lite )

 

CE Statement for Pepwave Routers ( AP One AX )

2.4GHz ( 2412 – 2472 MHz ) : 19.87 dBm

5GHz ( 5150 – 5250 MHz ) : 22.78 dBm

 

This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

 

This equipment is restricted to indoor use only when operating in the 5150 to 5250 MHz frequency range in above countries.

 

contact as: https://www.peplink.com/

 

 

 

UK Statement for Pepwave Routers ( AP One AX )

 

 

Federal Communication Commission Interference Statement ( AP One AC mini)

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

 

-Reorient or relocate the receiving antenna.

-Increase the separation between the equipment and receiver.

-Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

-Consult the dealer or an experienced radio/TV technician for help.

 

Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.

 

Radiation Exposure Statement

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

 

Industry Canada Statement ( AP One AC mini)

This product meets the applicable Innovation, Science and Economic Development Canada technical specifications.

Le present produit est conforme aux specifications techniques applicables d’Innovation, Sciences et Developpement economique Canada.

This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada’s licence-exempt RSS(s). Operation is subject to the following two conditions:

 

(1) This device may not cause interference.

(2) This device must accept any interference, including interference that may cause undesired operation of the device.

 

Le present appareil est conforme aux CNR d’Industrie Canada applicables aux appareils radio exempts de licence. L’exploitation est autorisee aux deux conditions suivantes:

(1) l’appareil ne doit pas produire de brouillage, et

(2) l’utilisateur de l’appareil doit accepter tout brouillage radioelectrique subi, meme si le brouillage est susceptible d’en

(i) The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;

(ii) For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate; and

The high-power radars are allocated as primary users (i.e. priority users) of the band 5725-5850 MHz and that these radars could cause interference and/or damage to LE- LAN devices.

(i) Le dispositif fonctionnant dans la bande 5150-5250 MHz est reserve uniquement pour une utilisation a l’interieur afin de reduire les risques de brouillage prejudiciable aux systemes de satellites mobiles utilisant les memes canaux;

(ii) Le gain maximal d’antenne permis pour les dispositifs avec antenne(s) amovible(s) utilisant la bande 5725-5850 MHz doit se conformer a la limitation P.I.R.E specifiee pour l’exploitation point a point et non point a point, selon le cas.

En outre, les utilisateurs devraient aussi etre avises que les utilisateurs de radars de haute puissance sont designes utilisateurs principaux (c.-a-d., qu’ils ont la priorite) pour les bande 5725-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL.

Radiation Exposure Statement

This device complies with the ISED radiation exposure limit set forth for an uncontrolled environment. This device should be installed and operated with minimum distance 20cm between the radiator & your body.

Cet equipement est conforme avec l’exposition aux radiations ISED definies pour un environnement non contr6le. Cet equipement doit etre installe et utilise a une distance minimum de 20 cm entre le radiateur et votre corps.

 

CE Statement for Pepwave Routers ( AP One AC Mini )

2.4GHz ( 2412 – 2472 MHz ) : 19.89 dBm

5GHz ( 5150 – 5250 MHz ) : 22.70 dBm

 

This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 2cm between the radiator & your body.

 

This equipment is restricted to indoor use only when operating in the 5150 to 5250 MHz frequency range in above countries.

 

contact as: https://www.peplink.com

Federal Communication Commission Interference Statement

Any changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment.

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference at his own expense.

 

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1) this device may not cause harmful interference and

(2) this device must accept any interference received, including interference that may cause undesired operation.

 

Radiation Exposure Statement

This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled

environment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator and your body.

 

VCCI Class A Statement

この装置は、クラスＡ機器です。この装置を住宅環境で使用すると電波妨害を引き起こすことがあります。この場合には使用者が適切な対策を講ずるよう要求されることがあります。

VCCI-A

 

CE Statement for Pepwave Routers ( AP One Rugged HW2 )

2.4GHz ( 2412 – 2472 MHz ) : 19.95 dBm

5GHz ( 5150 – 5250 MHz ) : 22.65 dBm

 

This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi- ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

 

This equipment is restricted to indoor use only when operating in the 5150 to 5250 MHz frequency range in above countries.

 

contact as: https://www.peplink.com/

 

 

UK Statement for Pepwave Routers ( AP One Rugged HW2 )

Federal Communication Commission Interference Statement (AP Pro AX)

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference at his own expense.

-This device complies with Part 15 of the FCC Rules. Operation is subject to the following
two conditions:

(1) this device may not cause harmful interference and

(2) this device must accept any interference received, including interference that may cause undesired operation.

 

Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.

Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

Professional Installation Instruction
This product is designed for specific application and needs to be installed by qualified personnel who has RF and related rule knowledge and need to get the Peplink certified to install the product. The general user shall not attempt to install or change the settings.

 

Innovation, Science and Economic Development Canada Statement ( AP Pro AX )

This product meets the applicable Innovation, Science and Economic Development Canada technical specifications.
Le present produit est conforme aux specifications techniques applicables d’Innovation, Sciences et Developpement economique Canada.
This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada’s licence-exempt RSS(s). Operation is subject to the following two conditions:

(1) This device may not cause interference.
(2) This device must accept any interference, including interference that may cause undesired operation of the device.

Le present appareil est conforme aux CNR d’Industrie Canada applicables aux appareils radio exempts de licence. L’exploitation est autorisee aux deux conditions suivantes:

(1) l’appareil ne doit pas produire de brouillage, et
(2) l’utilisateur de l’appareil doit accepter tout brouillage radioelectrique subi, meme si le brouillage est susceptible d’en

(i) The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;
(ii) For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate; and

The high-power radars are allocated as primary users (i.e. priority users) of the band 5725-5850 MHz and that these radars could cause interference and/or damage to LE- LAN devices.

(i) Le dispositif fonctionnant dans la bande 5150-5250 MHz est reserve uniquement pour une utilisation a l’interieur afin de reduire les risques de brouillage prejudiciable aux systemes de satellites mobiles utilisant les memes canaux;
(ii) Le gain maximal d’antenne permis pour les dispositifs avec antenne(s) amovible(s) utilisant la bande 5725-5850 MHz doit se conformer a la limitation P.I.R.E specifiee pour l’exploitation point a point et non point a point, selon le cas.
En outre, les utilisateurs devraient aussi etre avises que les utilisateurs de radars de haute puissance sont designes utilisateurs principaux (c.-a-d., qu’ils ont la priorite) pour les bande 5725-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL.

Radiation Exposure Statement
This device complies with the ISED radiation exposure limit set forth for an uncontrolled environment. This device should be installed and operated with minimum distance 20cm between the radiator & your body.
Cet equipement est conforme avec l’exposition aux radiations ISED definies pour un environnement non contr6le. Cet equipement doit etre installe et utilise a une distance minimum de 20 cm entre le radiateur et votre corps.

CE Statement for Pepwave Routers ( AP Pro AX )

2.4GHz ( 2412 – 2472 MHz ) : 19.86 dBm
5GHz ( 5150 – 5250 MHz ) : 29.66 dBm

This equipment complies with CE radiation exposure limits set forth for an uncontrolled envi-ronment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

This equipment is restricted to indoor use only when operating in the 5150 to 5250 MHz frequency range in above countries.

contact as: https://www.peplink.com/

UK Statement for Pepwave Routers ( AP Pro AX )