Peplink Balance_One Router Manual PDF (Setup & Configuration Guide)

Page 156 / 234 Scroll up to view Page 151 - 155

USER MANUAL

Peplink Balance Series

http://www.peplink.com

-156 / 234 -

You can configure High Availability at the following location:

Network>Misc. Settings>High Availability

:

Interface for Master Router

Interface for Slave Router

High Availability

Enable

Checking this box specifies that the Peplink Balance unit is part of a High Availability

configuration.

Group Number

This number identifies a pair of Peplink Balance units operating in a High Availability

configuration. The two Peplink Balance units in the pair must have the same Group Number

value.

Preferred Role

This setting specifies whether the Peplink Balance unit operates in Master or Slave mode.

Click the corresponding radio button to set the role of the unit.

One of the units in the pair must be configured as the Master and the other unit must be

configured as the Slave

Resume Master

Role Upon

Recovery

This option is displayed when

Master

mode is selected in Preferred Role.

If this option is enabled, once the device has recovered from an outage, it will take over and

resume its

Master

role from the slave unit.

Configuration

Sync.

This option is displayed when

Slave

mode is selected in Preferred Role.

If this option is

enabled

and the

Master Serial Number

entered matches with the actual

master unit's, the master unit will automatically transfer the configuration to this unit. Please

make sure the LAN IP Address and the Subnet Mask fields are set correctly in the LAN

Settings page.

You can refer to the

Event Log

for the configuration synchronization status.

Master Serial

Number

If the box

Configuration Sync.

is checked, the serial number of the Master unit is required

here for the feature to work properly.

Virtual IP

The HA pair must share the same Virtual IP. This Virtual IP and the LAN Administration IP

must be under the same network.

LAN

Administration

IP

This setting specifies a LAN IP address to be used for accessing administration functionality.

This address should be unique within the LAN.

Subnet Mask

This setting specifies the subnet mask of the LAN.

Page 157 / 234

USER MANUAL

Peplink Balance Series

http://www.peplink.com

-157 / 234 -

Important Note

For Balance Routers in NAT mode, the Virtual IP (VIP) should be set as the default gateway for all hosts sitting on

the LAN segment. For example, a firewall sitting behind the Balance should set its default gateway as the Virtual

IP instead of the IP of Master Balance.

In Drop-in mode, no other configuration needs to be set.

Please note that the Drop-in WAN cannot be configured as a LAN Bypass port while it is configured for High

Availability.

Page 158 / 234

USER MANUAL

Peplink Balance Series

http://www.peplink.com

-158 / 234 -

22.2

PPTP Server

Peplink Balance has a built-in PPTP Server, which enables remote computers to conveniently and

securely access the local network.

PPTP server settings are located at:

Network>Misc. Settings>PPTP Server

.

Simply check the box to enable the PPTP server function. All connected PPTP sessions are displayed on

the Client List at

Status>Client List

. Please refer to section 26.3 for details.

PPTP Server Setting

Listen On

This setting is for specifying the WAN connection(s) and IP address(es) that the PPTP

server should listen on.

Authentication

(This option is only applicable on Peplink Balance 305/380+ and MediaFast 200+.)

This setting is for specifying the user database source for PPTP authentication. Three

sources can be selected:

Local User Accounts, LDAP Server, RADIUS Server

.

Local User Accounts

- User accounts are stored in the Peplink Balance locally. You can

add/modify/delete accounts in the User Accounts table below.

LDAP Server

- Authenticate with an external LDAP server. Tested with Open LDAP server

where passwords are NTLM hashed. Active Directory is not supported. (You can choose to

use RADIUS to authenticate with a Windows Server.)

RADIUS Server

- Authenticate with an external RADIUS server. Tested with Microsoft

Windows Internet Authentication Service, and FreeRADIUS servers where passwords are

NTLM hashed or in plain text.

User Accounts

This setting allows you to define the PPTP User Accounts

for authentication via Local User

Accounts

. Click Add to input username and password to create an account. After adding

the user accounts, you can click on a username to edit the account password. Click the

button

to delete the account in its corresponding row.

Page 159 / 234

USER MANUAL

Peplink Balance Series

http://www.peplink.com

-159 / 234 -

Important Note

PPTP server will be disabled automatically if the Balance is deployed in Drop-in mode.

22.3

Certificate Manager

This section allows you to assign certificates for Local VPN and Web Admin SSL. The local keys will not

be transferred to another device by any means.

22.4

Service Forwarding

Service Forwarding settings are located at:

Network>Misc. Settings>Service Forwarding

.

Service Forwarding

SMTP Forwarding

When this option is enabled, all outgoing SMTP connections destined for any host at

TCP port 25 will be intercepted. These connections will be redirected to a specified

SMTP server and port number. SMTP server settings for each WAN can be specified

after selecting

Enable

.

Web Proxy Forwarding

When this option is enabled, all outgoing connections destined for the proxy server

specified in Web Proxy Interception Settings will be intercepted. These connections

will be redirected to a specified web proxy server and port number. Web Proxy

Interception Settings and proxy server settings for each WAN can be specified after

selecting

Enable

.

DNS Forwarding

When this option is enabled, all outgoing DNS lookups will be intercepted and

redirected to the built-in DNS name server.

If any LAN device is using DNS name servers of a WAN connection, you may want to

enable this option to enhance the DNS availability without modifying the DNS server

setting of the clients. The built-in DNS name server will distribute DNS lookups to

corresponding DNS servers of all available WAN connections. In this case, DNS

service will not be interrupted even if any WAN connection is down.

Page 160 / 234

USER MANUAL

Peplink Balance Series

http://www.peplink.com

-160 / 234 -

22.4.1 SMTP Forwarding

Some ISPs require their users to send e-

mails via the ISP’s SMTP server.

All outgoing SMTP connections

are blocked except those connecting to the ISP’s. The Peplink Balance supports

the interception and

redirection of all outgoing SMTP connections (destined for TCP port 25) via a WAN connection to the

WAN’s corresponding SMTP server.

To enable the feature, select the

Enable

check box under

SMTP Forwarding Setup

. Check the box

Enable Forwarding

for the WAN connection(s) that needs such forwarding. Under

SMTP Server

, enter

the ISP’s e

-mail server host name or IP address and under

SMTP Port

, enter the TCP port number for

each WAN.

The Peplink Balance will intercept SMTP connections, choose a WAN port according to the Outbound

Policy, and then forward the connection to the SMTP server if the chosen WAN has enabled forwarding.

If the forwarding is disabled for a WAN connection, SMTP connections for the WAN will be simply be

forwarded to the con

nection’s original destination.

Note

If you want to route all SMTP connections only to particular WAN connection(s), you should create a custom rule

in Outbound Policy (see Section 15.1).

22.4.2 Web Proxy Forwarding

When this feature is enabled, the Peplink Balance will intercept all outgoing connections destined for the

proxy server specified in "Web Proxy Server Interception Settings". Then it will choose a WAN connection

according to the Outbound Policy and forward the connection to the specified web proxy server and port

Rate

Popular Peplink Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share