Model | Hardware Revision | Date of Release | Status | Enclosure |
Balance 210/310 | 4th | Fall 2014 | Shipping | ![]() |
Balance 305 | 2nd | Early 2015 | Shipping | ![]() |
Balance 380 | 6th | Early 2015 | Shipping | ![]() |
Balance 580 | 2nd / 3rd | Fall 2014 | Shipping | ![]() |
Balance 710 | 3rd | Early 2015 | Shipping | ![]() |
Balance 1350 | 2nd | Early 2015 | Shipping | ![]() |
Balance 2500 | 1st | Mid 2013 | Shipping | ![]() |
Latest Balance Hardware Revision
Obtaining Your Free Firmware License Key
As of June 2015, Peplink products come with free Firmware upgrades. If your Firmware is requesting a license key, please follow these steps:
Add Your Device to InControl 2
Skip this step if your device is already registered in InControl 2
1) From your Organization dashboard, navigate to Organization > Organization Settings and click Add Devices.
2) On the Add Devices screen, select the group for your device, enter its serial number, and click Next… to finish adding your device.
Access your license key.
1) From your Organization dashboard, click the group your device is in.
2) Then click your device to reach the device details page. There, you will find your Firmware license key
Obtaining your Free AP Controller Licenses
As of June 2015, Peplink devices can manage their maximum supported number of APs for free. This functionality is available from Firmware 6.2.1 upwards.
Forwarding GPS information to External IP Address
Click Save, and then Apply Changes to save your configuration.
How to Use USSD Codes on Cellular-Enabled Routers
To access your router’s USSD functionality, navigate to Advanced > Misc Settings > SIM Toolkit, and the following menu will appear:
Enter your USSD code under the USSD Code text field and click Submit.
You will receive a confirmation. To check the SMS response, click Get.
You will receive the response to your USSD code. It may take a minute or two for it to show up.
Setting up L2TP With IPsec
Setting up Your Peplink Device
On Balance models, navigate to Network > Misc. Settings > Remote access.
On MAX models, navigate to Advanced > Remote User Access.
The following menu will appear:
Click Enable, and the menu will expand.
- Enter your preshared key in the Preshared Key text area.
- In the Listen on section, select the LAN ports that you want the L2TP server to pay attention to. Be sure that at least one of the LAN ports have a public IP address.
- Under the User Accounts section, enter the Usernames and Passwords for each client who will connect to the VPN. For bulk entry, click the (?) logo to enable pasting directly from a CSV file.
Setting Up Your Android Device
Notice: VPN configuration for Android varies depending on model. If in doubt, please refer to your device documentation.
Open your VPN settings page and tap the + button to add a new VPN profile.
The Edit VPN Profile page will appear, fill it out with the information you entered on your Peplink Device and tap Save. Back on the VPN screen, tap your VPN profile, enter your credentials, and press connect.
Setting Up Your iOS Device
Open your Settings page, tap the General button. Scroll down until you see the VPN column and press the > symbol. On the VPN screen, tap Add VPN Configuration…
The Add Configuration page will appear, fill it out with the information you entered on your Peplink Device and tap Save. Back on the VPN screen, tap the button beside Not Connected to begin connecting via VPN.
Cert Installation for MFA HTTPS Caching
In order for Mediafast devices to cache and deliver HTTPS content, clients need to have the necessary certificates installed. To install certificates, navigate to cert.peplink.com, and follow the instructions for your client platform.
Please ensure that your client is connected to your MediaFast device on the LAN side, as cert.peplink.com is hosted by the MediaFast.
How to enroll device to MDM server
To Enroll your iOS device:
- Go to http://mdm.peplink.com:8182/register from the device
- To install the CA Certificate on the device, click “Install CA Cert” and click “Install”
- To enroll the device in the Peplink MDM, click “Enroll in Peplink MDM” and click “Install”
Once the device has the CA certificate installed and the MDM enrolled, you will be able to see your device by accessing your MDM admin page (full instructions below), and navigating to Status > Device List.
To Un-enroll your iOS device:
- Open “Settings” on the device
- Select “General” > “Profiles”
- To remove the CA Certificate from the device, select “Peplink MDM CA” and click “Remove”
- To unenroll the device from the Peplink MDM, select “Peplink MDM Profile” and click “Remove”
Once the device has the CA certificate uninstalled and the MDM unenrolled, you will no longer be able to manage the device from your MDM admin page
Help! My IC2 Captive Portal Settings Are Spilling Over to Other SSIDs.
You have set multiple SSIDS, one for public use and others for internal. For the public captive portal, you have just configured Social Wi-Fi using InControl. However, you now find that ALL of your SSIDS can be publicly accessed through Facebook captive portals.
Reason: This is happening because Balance and the MAX devices (which are delivering your captive portals) apply captive portals by VLAN, rather than SSID. If there are more than one SSIDs on the same VLAN, then the captive portal settings of the first SSID will overwrite all others.
Solution: To fix this, we recommend that you create a new VLAN, and assign the SSID with Social Wi-Fi captive portal on your newly created VLAN.
This could be accomplished by taking the following steps:
- Enable VLAN by going to Network > LAN > IP Settings, clicking the “?” icon and then the “here” link.
- Add a new LAN with a VLAN ID, say, 10. The IP and subnet shall be different from the Untagged one. Save and apply the changes.
- On IC2, change the VLAN ID of the captive portal enabled SSID to 10. Press the Save button.
SSID and AP Password for Peplink/Pepwave Wi-Fi Products
The default SSID is Peplink-last 4 digit of serial number or Pepwave-last 4 digit of serial number
E.g. Pepwave-4DSN
The default AP password is the last 8 digit of the LAN MAC.
E.g. If the LAN MAC of your device is 00-1A-DD-C1-E2-A0, the password is DDC1E2A0.
What Is The Difference Between Hardware Revisions of Peplink Balance 1350?
Please refer to the following for the differences across revisions.
Hardware Revision |
Date of Release | Enclosure |
2nd | Early 2015 | ![]() |
1st | Late 2010 | ![]() |
Please note: Actual launch dates vary in different countries.
How to add additional IPs on a WAN
To add additional IPs on a WAN port edit the WAN ports settings (Network -> Connection Settings) and fill in the additional IP’s in the ‘Additional Public IP Settings’ section. Click Save and Apply.

Now when you add a new service for Inbound Access (Network -> Inbound Access -> Services) in the ‘Inbound IP Address(es)’ Section you can select which of the available WAN IPs the service should be port forwarded through.
What Is The Difference Between Hardware Revisions of Peplink Balance 305?
Hardware Revision | Date of Release | Enclosure |
2nd | Early 2015 |
![]() |
1st | 2013 | ![]() |
Please note: Actual launch dates vary in different countries.
How to Set Up Social Wi-Fi
Requirements:
To set up a Social Wi-Fi Hotspot, you will need the following items:
- An InControl 2 account.
- A Facebook homepage.
- A supported device running Firmware 6.2.1 or above or AP Firmware 3.5.2.
Supported devices:
Peplink devices that have built-in Wi-Fi AP capability can deliver Social Wi-Fi, including:
- Balance: One
- MAX: 700, OTG, BR1*, BR2, HD2*, HD4
- MediaFast: HD2, HD4
- AP One: AP One, Mini, AC Mini, 300M, In-Wall, Flex 300M
- AP Pro: AP Pro, 300M, Duo
*With the exception of the BR1 ENT, and the HD2 Mini
Instructions
1) Set up your devices
Make sure you are running Firmware 6.2.1. or AP Firmware 3.5.2. You can find your Firmware status and update your Firmware on System > Firmware.
If you have disabled InControl 2 management, please re-enable it. For MAX devices, you can find the settings on System > InControl. For Pepwave APs, you can find the settings on System > Controller. Click the “Controller Management” checkbox to enable InControl management.
2) Setting up your Facebook Wi-Fi on IC2
On your organization dashboard, click on the group you will use. Navigate to Wi-Fi AP > Group-wide SSID Settings. Click “Add New SSID”, and the following menu will appear:
After naming your SSID, Scroll down to Captive Portal Settings, click the “Captive Portal” checkbox. Click the “Facebook” tab, then Enable. For your Facebook Page ID, enter your company’s Facebook Page.
OR
The last part of your facebook page URL is your Facebook Page ID. If a number string appears at the end of the URL, that will also work. Either way, Copy it and return to InControl.
Enter your Facebook Page ID or number string into the “Facebook Page ID” text field, setup any usage limitations if needed, and press the Save Changes button to finish your configuration. If you wish, you could also click the Preview link next to the Captive Portal checkbox to preview your captive portal:
Forwarding GPS information to External IP Address
Click Save, and then Apply Changes to save your configuration.
How to Grant Read-Only Rights on InControl 2
There are four types of read-only users on InControl 2: organization dashboard viewers, organization viewers, group dashboard viewers, and group viewers.
Registering Organization Dashboard Viewers and Organization Viewers.
Both of these read-only user accounts can access the entire organization. The difference is that Organization Dashboard Viewers can only see dashboards while Organizations Viewers can also see reports, settings, and device details.
1) Enter Your Organization Admin Page by navigating to Organization Name > Organization Settings > Organization Settings
2) Enter the new user’s email address, and then choose either “Dashboard Viewer” or “Organization Viewer” on the drop-down menu. Press “Save Changes” to save your changes.
Existing InControl users will receive an email with the link to their new access. Nonexisting users will get an invitation email with a password to Access InControl. Please note that any user registered as a “Dashboard viewer” on this page will be able to see the organization dashboard and the dashboards for all groups.
Registering Group Dashboard Viewers and Group Viewers.
Both of these read-only user accounts can only access your selected group. The difference is that Group Dashboard Viewers can only see the group dashboard while Group Viewers can also see reports, settings, and device details.
1) Select the group that you want to grant access to.
2) Then navigate to Group Name > Settings > Group settings
3) Enter the new user’s email address, and then choose either “Dashboard Viewer” or “Group Viewer” on the drop-down menu. Press “Save Changes” to save your changes.
Existing InControl users will receive an email with the link to their new access. Nonexisting users will get an invitation email with a password to Access InControl. Please note that any user registered as a “Dashboard viewer” on this page will only be able to see the dashboard for your selected group.
Upgrading from Firmware Older than 5.3.12 to Firmware 6.x
If your device is running Firmware older than 5.3.12, please upgrade to 5.3.12 first before upgrading to 6.x
When upgrading 4.x 5.3.12, you will encounter a Firmware lock screen. Contact us, and we will send you the key to unlock Firmware 5.3.12. From there, you will be clear to upgrade to Firmware 6.x
Experimental Support for USB Ethernet Adapters
With an USB Ethernet Adapter, the USB port on the following models can be made to accept an Ethernet connection:
- Balance: 305, 380, 580, 710, 1350, 2500
- MAX: All products equipped with a USB port will support this feature.
- Surf: SOHO.
We have tested this feature with the following USB Ethernet adapters:
- Apple USB Ethernet Adapter.
- ASUS USB 2.0 to Ethernet Adapter.
- Plugable® USB 2.0 to 10/100/1000 Gigabit Ethernet LAN Wired Network Adapter.
This feature is currently experimental and this list may be subject to change.
Help! My IC2 Captive Portal Settings Are Spilling Over to Other SSIDs.
You have set multiple SSIDS, one for public use and others for internal. For the public captive portal, you have just configured Social Wi-Fi using InControl. However, you now find that ALL of your SSIDS have Facebook captive portals applied to them.
Reason: This is happening because Balance and the MAX devices (which are delivering your captive portals) apply captive portals by VLAN, rather than SSID. If there are more than one SSIDs on the same VLAN, then the captive portal settings of the first SSID will be applied to all others.
Solution: To fix this, we recommend that you create a new VLAN, and assign the SSID with Social Wi-Fi captive portal on your newly created VLAN.
This could be accomplished by taking the following steps:
- Enable VLAN by going to Network > LAN > IP Settings, clicking the “?” icon and then the “here” link.
- Add a new LAN with a VLAN ID, say, 10. The IP and subnet shall be different from the Untagged one. Save and apply the changes.
- On IC2, change the VLAN ID of the captive portal enabled SSID to 10. Press the Save button.
Introducing Find My Peplink
With Find My Peplink, you can look up your device and find the IP addresses of all its healthy public WAN connections.
Requirements:
- Find My Peplink works for all Balance and MAX devices.
- Device needs to be running Firmware 6.2.2 or later.
Enabling it on InControl 2:
Find My Peplink is disabled by default. To activate it, follow the below instructions
- On your device’s management page, click the edit button next to the near the top left corner
- Scroll down and click the on/off button next to Find My Peplink Service
- Click the On Button and change your Find My Peplink Address if desired. Please note that each address needs to be unique, and are given on a first come, first served basis
Using it from in any command prompt:
- From your command prompt, simply type nslookup and then domain name.mypep.link