manualshive.com logo in svg

peplink Balance 380, User Manual, Page: 76 / 111

Share
Download
peplink Balance 380 User Manual Download Page 76

 

PePLink Balance Series v4.0 User Manual 

 

 

Page 76 

Outbound 

Mappings 

This  setting  specifies  the  IP  address  of  each  WAN  connection  to  be 
used for any outgoing traffic originating from the LAN Host. 

Note  1:  If  you  do  not  want  to  use  a  specific  WAN  for  outgoing 
accesses,  you  should  still  choose  “default”  here,  then  customize  the 
outbound access rule in the “Outbound Traffic Management” section. 

Note  2:  WAN  connections  in  drop-in  or  IP  forwarding  mode  are  not 
shown here. 

Click 

Save

 to save the settings when configuration is complete. 

 

Important Note 

Inbound firewall rules override Inbound Mapping settings. 

Summary of Contents for Balance 380

Page 1: ...007 PePLink Ltd All Rights Reserved PePLink and the PePLink logo are trademarks of PePLink Ltd Other brands or products mentioned may be trademarks or registered trademarks of their respective owners...

Page 2: ...WITH SETUP WIZARD 22 7 3 ADVANCED SETUP 23 8 CONFIGURATION OF LAN INTERFACE S 24 9 DROP IN MODE 27 10 CONFIGURATION OF WAN INTERFACE S 30 10 1 DHCP CONNECTION 30 10 2 STATIC IP CONNECTION 33 10 3 PPPO...

Page 3: ...APPENDIX A RESTORATION OF FACTORY DEFAULTS 97 APPENDIX B ROUTING UNDER DHCP STATIC IP AND PPPOE 98 B 1 ROUTING VIA NETWORK ADDRESS TRANSLATION NAT 98 B 2 ROUTING VIA IP FORWARDING 98 APPENDIX C CASE...

Page 4: ...firmware version v4 0 x PePLink Balance 380 firmware version v4 0 x PePLink Balance 700 firmware version v4 0 x The manual presents how to set up PePLink Balance and provides a collection of case stud...

Page 5: ...rg 3 1 2 LAN DHCP server on LAN Static routing rules Local DNS 3 1 3 Firewall Outbound LAN to WAN firewall rules Inbound WAN to LAN firewall rules per WAN connection Specification of NAT mappings 3 1...

Page 6: ...only with PePLink Balance 200 300 380 and 700 Time server synchronization SNMP Email notification Syslog SIP pass through PPTP packet pass through Web Logging Link Status Active Sessions 4 Package Co...

Page 7: ...us Indicators Power OFF Power off Green Power on Status OFF System initializing Red Booting up or busy Orange Power on self test Green Ready LAN Indicators Activity OFF Port is not connected Green Por...

Page 8: ...ing use WAN Ports Supports up to two 10 100BaseT WAN connections typically connected to broadband modems LAN Ports Supports up to four 10 100BaseT LAN connections typically connected to client PCs Pow...

Page 9: ...ower OFF Power off Green Power on Status OFF System initializing Red Booting up or busy Orange Power on self test Green Ready state LAN Indicators Activity OFF Port is not connected Green Port is conn...

Page 10: ...up to three 10 100BaseT WAN connections typically connected to broadband modems LAN Ports Supports up to four 10 100BaseT LAN connections typically connected to client PCs Power Connector DC 9V power...

Page 11: ...nd Status Indicators Power LED OFF Power off Green Power on RS 232 Port RS 232 Port Reserved for Engineering Use LAN and WAN Indicators Green LED ON 100 Mbps OFF 10 Mbps Yellow LED Solid Port is conne...

Page 12: ...k shows LAN subnet mask Link status shows Connected Disconnected IP address list WAN1 WAN2 WAN3 Link usage Throughput in shows transfer rate in Kbps WAN1 WAN2 WAN3 Throughput out shows transfer rate i...

Page 13: ...served for engineering use Power Connector AC input 110 220V Switch Power Switch To hold pressing the key for 4 secs will power down the unit When the unit is powered off press it will power on the un...

Page 14: ...bps OFF 100 10 Mbps Yellow LED Solid Port is connected without traffic Blinking Data is transferring OFF Port is not connected Note They are auto MDI MDI X ports WAN Ports 4 to 7 Fast Ethernet Green L...

Page 15: ...LAN subnet mask Link status shows Connected Disconnected IP address list WAN1 WAN2 WAN7 Link usage Throughput in shows transfer rate in Kbps WAN1 WAN2 WAN7 Throughput out shows transfer rate in Kbps...

Page 16: ...g use Power Connector AC input 110 220V Switches Power Switch To hold pressing the key for 4 secs will power down the unit When the unit is powered off press it will power on the unit Reset Switch Pre...

Page 17: ...to the following steps 1 With a network cable connect a computer to one of the LAN ports on the PePLink Balance For PePLink Balance 30 200 and 300 repeat with different cables for up to 4 computers to...

Page 18: ...ePLink Balance will automatically provide a suitable IP Address and related information to each computer connected to its LAN interface Please refer to Section 8 Configuration of LAN Interface s for f...

Page 19: ...e New Connection Wizard screen click Next 6 Select Connect to the Internet and click Next 7 Select Set up my connection manually and click Next 8 Select the following checkbox Connect using a broadban...

Page 20: ...lose the TCP IP Control Panel 6 2 5 UNIX DHCP Client Configuration Depending on the flavor of UNIX the procedure may vary The following steps are for Red Hat Enterprise Linux 3 1 Login to the system a...

Page 21: ...e is 192 168 1 1 3 When prompted for User Name and Password to access the Web Administration Interface enter the following as User Name and Password to proceed User Name admin Password admin The defau...

Page 22: ...eck box es to select the WAN connection s to be configured Select the connection type from the following screen Depending on the selection of connection type further configuration may be needed For ex...

Page 23: ...ngs can be configured from the Network menu WAN connections can be configured by entering the corresponding WAN connection information from Network Interfaces WAN Tip Please refer to Section 10 Config...

Page 24: ...PePLink Balance Series v4 0 User Manual Page 24 8 Configuration of LAN Interface s The LAN Interface settings are located in Network Interfaces LAN...

Page 25: ...ollision on LAN IP Range Subnet Mask This setting allocates a range of IP address that will be assigned to LAN computers by the DHCP server of PePLink Balance Lease Time This setting specifies the len...

Page 26: ...DNS caching on the built in DNS proxy When it is enabled queried DNS replies will be stored for the same requests next time This could improve the DNS lookup time But it cannot return the most update...

Page 27: ...IP address translation Hosts on the LAN will not notice any change in the IP addresses of the hosts on WAN1 and vice versa However although the IP addresses on all of the forwarded packets remain the...

Page 28: ...Web Administration Interface 2 Put the IP address of the WAN1 router in the Default Gateway field Ensure that the PePLink Balance IP subnet is the same as the Firewall s WAN port and the Router s LAN...

Page 29: ...nk Balance is reported by the IP packets from LAN hosts From a practical perspective the mentioned change in MAC addresses is communicated briefly after the installation of PePLink Balance to the WAN1...

Page 30: ...in Network Interfaces WAN There are four possible connection methods DHCP Static IP PPPoE GRE The connection method and details are determined by and can be obtained from the ISP 10 1 DHCP Connection...

Page 31: ...interface to the LAN The value of this setting is also used as the default weight value for the default outbound rule if Custom Outbound Traffic Rules in Outbound Traffic Management Physical Interface...

Page 32: ...ion The DNS Servers are obtained along with the WAN IP address assigned from the DHCP server When Use the following DNS server address es is selected you can put custom DNS server addresses for this W...

Page 33: ...onnection For further details please refer to Appendix B Routing under DHCP Static IP and PPPoE Connection Type This setting specifies the utilization of the WAN connection The selection of Always on...

Page 34: ...AC address Some service providers e g cable providers identify the clients MAC addresses and require a client to always connect using the same MAC address In such cases use the MAC Address setting to...

Page 35: ...ssigned by the ISP in the event that more than one Internet IP addresses are assigned to this WAN connection Enter the fixed Internet IP addresses and the corresponding subnet mask and then click the...

Page 36: ...tatic IP and PPPoE Connection Type This setting specifies the utilization of the WAN connection The selection of Always on results in the WAN connection to be used whenever it is available If Backup P...

Page 37: ...n such cases use the MAC Address setting to change the PePLink Balance WAN interface MAC address to be the same as that of the original client PC The default MAC Address is a unique value assigned at...

Page 38: ...er addresses for this WAN connection into the DNS server 1 and DNS server 2 fields Please refer to chapter 10 5 10 6 and 10 7 for details about SMTP Forwarding Dynamic DNS Settings and WAN Health Chec...

Page 39: ...le Always on WAN connection s and higher priority backup connection s The default and recommended Connection Type is Always on Upstream Bandwidth This setting specifies the data bandwidth in the outbo...

Page 40: ...GRE via IP Forwarding The values for DNS server 1 and DNS server 2 are typically determined by and can be obtained from the ISP DNS Servers Each ISP may provide a set of DNS servers for DNS lookups T...

Page 41: ...this scenario the IP address settings are as follows WAN IP Address 172 23 2 123 Default Gateway 172 23 2 122 Remote GRE IP address 172 23 254 87 GRE router or host s IP address Tunnel IP remote addre...

Page 42: ...mote IP Address 192 168 128 223 210 103 22 0 24 PePLink Balance LAN IP Address 210 103 22 1 Private IP Network In this scenario the IP address settings are as follows WAN IP Address 172 23 2 123 Defau...

Page 43: ...dynamic DNS service providers Through registration with dynamic DNS service provider s the default public Internet IP address of each WAN connection can be associated with a host name Either upon a c...

Page 44: ...ration PePLink Balance will perform a force update every 23 days if a WAN s IP address did not changed 10 7 WAN Health Check To ensure traffic is only routed to health WAN connections only PePLink Bal...

Page 45: ...idered By default the first two DNS servers of the WAN connection are used as the Ping Hosts Health Check Method DNS Lookup DNS lookups will be issued to test the connectivity with target DNS servers...

Page 46: ...ssful ping DNS lookup responses that must be received before the PePLink treats a previously down WAN connection to be up again By default Recover Times is set to 3 For example with the default Recove...

Page 47: ...ork from potential hacker attacks offensive Web sites and or other inappropriate uses The firewall functionality of PePLink Balance supports the selective filtering of data traffic in both directions...

Page 48: ...tting specifies the WAN connection s on which the rule applies Any WAN1 WAN2 WAN3 applicable only to PePLink Balance 30 300 380 and 700 WAN4 to WAN7 applicable only to PePLink Balance 700 A value of A...

Page 49: ...tion to which the log entry refers Possible values are LAN and WANx where x is the WAN number SRC Source IP address DST Destination IP address LEN Packet length PROTO Protocol SPT Source port DPT Dest...

Page 50: ...ies the action to be taken by PePLink Balance upon encountering traffic that matches the both of the following Source IP Port Destination IP Port With the value of Allow for the Action setting the mat...

Page 51: ...of the destination Internet IP address and protocol This provides the highest application compatibility Normal Application Compatibility With the selection of this policy outbound traffic from a sourc...

Page 52: ...rule is Default Click on it to change the device s default way to control outbound traffic for all connections that does not match any rules above Click the service Default to change its setting By d...

Page 53: ...le Source This setting specifies the source IP Address IP Network or MAC Address for the traffic to be matched for the rule Destination This setting specifies the destination IP Address or IP Network...

Page 54: ...s distributed to a WAN connection is proportional to the weight of WAN connection relative to the total weight Example With the following weight settings on a PePLink Balance 300 WAN1 10 WAN2 10 WAN3...

Page 55: ...he traffic from the same machine to the same destination It provides higher application compatibility but a less even distribution of load to the WAN connections for the type of traffic By destination...

Page 56: ...o route the specified network service The highest priority available WAN connections will always be used for routing the specified type of traffic A lower priority WAN connection will be used only whe...

Page 57: ...perate under NAT mode For WAN connections that operate under drop in mode or IP forwarding inbound traffic is forwarded to the LAN by default 13 1 Definition of Servers on LAN This section applies onl...

Page 58: ...k Balance 200 300 380 and 700 Services are defined at Network Inbound Access Services Tip At least one server must be defined before services can be added Please refer to Section 13 1 Definition of Se...

Page 59: ...ing consist only of alphanumeric and the underscore _ characters IP Protocol The IP Protocol setting along with the Port setting specify the protocol of the service as one of the following valid value...

Page 60: ...Port 80 is forwarded to the configured servers via Port 80 Port Range traffic that is received by PePLink Balance via the specified protocol at the specified port range is forwarded via the same resp...

Page 61: ...s The amount of traffic that is distributed to a server is proportional to the weight value assigned to the server relative to the total weight Example With the following weight settings on a PePLink...

Page 62: ...Enable This setting specifies whether the Inbound Service takes effect With an Enable value of Yes the inbound service takes effect traffic is matched and actions are taken by PePLink Balance based on...

Page 63: ...eceived by PePLink Balance via the specified protocol at the specified port is forwarded via the same port to the servers specified by the Servers setting For example with IP Protocol set to TCP and P...

Page 64: ...omain name on the most appropriate healthy WAN connection It also supports acting as a generic DNS server for hosting A CNAME MX TXT and NS records For example This example is for illustration only th...

Page 65: ...rver should listen select the WAN connection by checking the appropriate boxes and the IP addresses associated with the WAN connections by highlighting the appropriate items in the list Multiple items...

Page 66: ...riority ones become unavailable To specify the Primary and Backup connections click the Edit button that corresponds to Default Connection Priority The screen should assemble the one below Each WAN co...

Page 67: ...From Network Inbound Access DNS Settings enter a domain name in the Domain Name field click the Add Domain button Then click on the newly created domain name and the following screen is displayed This...

Page 68: ...ne from the master Retry Defines the time between retries if the slave secondary fails to contact the master when refresh above has expired Expire Indicates when the zone data is no longer authoritati...

Page 69: ...r finishing adding MX records click the Save button 13 4 4 CNAME Record The CNAME Record table shows the domain s CNAME records Here is how you use CNAME Records If you want a sub domain secure to hav...

Page 70: ...fied by Host Name The IP addresses listed in each box as Default are the Internet IP addresses associated with each of the WAN connections For WAN connections that operate under Drop in mode there may...

Page 71: ...ows the TXT record of the domain name Click the Edit button to edit the record The time to live value and the TXT record s value can be entered Click the Save button to finish After completing editing...

Page 72: ...when you host your domain at your ISP or a domain registrar and want to delegate a sub domain to be resolved and managed at PePLink Balance 1 Create a domain e g www mycompany com 2 Create NS records...

Page 73: ...tious and for illustration only the actual IP addresses in implementation will likely be different Hosting the complete domain at PePLink Balance To host your own DNS server contact the DNS registrar...

Page 74: ...n Windows follows C Documents and Settings User Name nslookup Default Server ns1 myisp com Address 147 22 11 2 server 202 153 122 108 This is PePLink Balance s WAN IP address Default Server balance my...

Page 75: ...ule upon which the following screen is displayed NAT Mapping Settings LAN Host This is the IP address of the host on the LAN that the system should map the selected connection IP address correspondenc...

Page 76: ...e 1 If you do not want to use a specific WAN for outgoing accesses you should still choose default here then customize the outbound access rule in the Outbound Traffic Management section Note 2 WAN co...

Page 77: ...ve arrangement From a high level in the event that the Master Unit is down the Slave Unit becomes active The following diagram illustrates an HA configuration with two PePLink Balance 200 units and tw...

Page 78: ...ability configuration The two PePLink Balance units in the pair must have the same Group Number value Preferred Role This setting specifies whether the PePLink Balance unit operates in Master or Slave...

Page 79: ...Quality of Service are located at the following location Network Misc Settings Traffic Prioritization Please note that the PePLink Balance prioritizes only outbound packets E g for secure web prioriti...

Page 80: ...specifies the protocol s through which the Web Administration Interface is accessible HTTP HTTPS HTTP HTTPS Web Admin Port This setting specifies the port number at which the Web Administration Inter...

Page 81: ...defined IP subnets When this is chosen a text input area will be displayed beneath The allowed IP subnet addresses should be entered into this text area Each IP subnet must be in form of n n n n m whe...

Page 82: ...peplink com and update the unit manually Click Browse to select the firmware file from the local computer then click Upload to send the firmware to PePLink Balance PePLink Balance will then automatica...

Page 83: ...guration are located at the following location System Time Time Server Settings Time Zone This specifies the time zone along with the corresponding Daylight Savings Time scheme in which PePLink Balanc...

Page 84: ...rator when the WAN status changes or when new firmware is available If disable is set PePLink Balance does not send email messages SMTP Server This setting specifies the SMTP server to be used for sen...

Page 85: ...This setting specifies whether or not to log events at the specified remote Syslog server Remote Syslog Host This setting specifies the IP address or hostname of the remote Syslog server Port This se...

Page 86: ...ty button in the Community Name table upon which the following screen is displayed SNMP Community Settings Community Name This setting specifies the SNMP Community Name Allowed Source Subnet Address T...

Page 87: ...pecifies the privacy password and is applicable only if the DES privacy protocol is selected 16 7 Reporting Server The Reporting functionality enables PePLink Balance to post traffic data and other in...

Page 88: ...ow will pop up Fill in the User Account field to specify the login ID on the Reporting Server to be allowed to access the report of this PePLink Balance device view reports Click the link to view link...

Page 89: ...is to backup the current active settings Click Download and save the configuration file 16 8 3 Uploading Configurations To restore or change settings based on a configuration file click Browse to loca...

Page 90: ...s displays the firmware version on each flash module partition i e Flash 1 or Flash 2 Flash Status This shows the status of the flash module Boot from The star indicates the flash module partition fro...

Page 91: ...The Ping Test tool in PePLink Balance performs Pings through a specified Ethernet interface The Ping utility is located at System Tools Ping The Ping utility is displayed as a pop up window illustrat...

Page 92: ...ing path to the destination through a particular Ethernet interface The Traceroute Test utility is located at System Tools Traceroute The Traceroute Test utility is displayed as a pop up window illust...

Page 93: ...nd log 17 1 Device System information is located at Status Device System Information System Time This shows the current system time Serial Number This shows the serial number of the PePLink Balance un...

Page 94: ...ve amounts of data that have been transferred through each WAN connection as well as the inbound and outbound rate of data transferred via various protocols If you click on the Add Trip Counter link a...

Page 95: ...r Manual Page 95 17 3 Active Sessions Information on Active Sessions is at Status Active Sessions This Active Sessions section displays the active inbound and outbound UDP and TCP sessions of each WAN...

Page 96: ...ddresses and MAC addresses that the PePLink Balance has offered IP addresses to since it is powered up 17 5 Log Log information is located at Status Logs The log section displays a list of events that...

Page 97: ...e unit 2 With a paper clip press and keep the reset button pressed for at least 10 seconds until the unit reboots itself For Balance 380 700 Use the buttons to control the LCD menu to go to Maintenanc...

Page 98: ...IP address of PePLink Balance Therefore with NAT all LAN devices share the same WAN IP address to access the Internet i e the WAN IP address of PePLink Balance Operating PePLink Balance in NAT mode re...

Page 99: ...ce Web browsing mainly downloads data sending e mails mainly consumes upload bandwidth Both connections offer good download speeds WAN2 offers good upload speeds Define WAN1 and WAN2 s inbound and out...

Page 100: ...ncy functionality of PePLink Balance With Persistency configured and the option By destination selected PePLink Balance uses a consistent WAN connection for source destination pairs of IP addresses an...

Page 101: ...e in Network Outbound Traffic Management Custom Outbound Traffic Rules Click Add Rule select HTTP TCP port 80 for web service and select Persistence Tip A System Administrator can use the Traceroute u...

Page 102: ...it may be appropriate to create an inbound NAT mapping for the network to allow some hosts on the LAN to be accessible from outside of the firewall C 3 2 Solution Web Administration Interface can be...

Page 103: ...inbound access is unrestricted Enabling a basic level of protection involves setting up firewall rules For example to set up a firewall rule between the Internet and the private network that monitors...

Page 104: ...is can easily be achieved by setting up an outbound firewall rule with PePLink Balance C 5 2 Solution To set up a firewall between Internet and private network for outbound access make the settings ac...

Page 105: ...all of 2 or even 3 download sessions were being distributed to the same link by chance Problem 3 I am using some web sites to lookup my public IP address e g www whatismyip com When I keep pressing t...

Page 106: ...ing Traceroute under the tab Status of the PePLink Balance you may able to find out the source of problem Problem 6 When I upload files to a server via ftp the transfer stalls after a few kilobytes of...

Page 107: ...gurations Upload and Download Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based State...

Page 108: ...ns Upload and Download Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based Stateful Fir...

Page 109: ...figurations Upload and Download Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based Sta...

Page 110: ...nload Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based Stateful Firewall with IP Add...

Page 111: ...eplink com contact support SALES http www peplink com contact sales CORPORATE ADDRESS PHONE http www peplink com PePLink Ltd United States 800 West El Camino Real Mountain View CA 94040 United States...

Reviews:

No comments