Bookmark

Peplink Settings to Get Started

Peplink routers offer powerful tools for managing cellular, Starlink, Wi-Fi, and other internet connections. But all those options can be intimidating when you are first getting started.

This guide walks through a practical starter configuration using the local web admin interface in Peplink Firmware 8.6.0. We will cover:

• Updating the firmware and setting the time zone
• Renaming the main local network
• Creating an optional guest network
• Creating primary and guest Wi-Fi networks
• Setting up an optional Wi-Fi network that uses SpeedFusion Connect
• Reviewing outbound policies and optional bandwidth controls
• Applying changes and downloading a configuration backup

For more on Peplink products and features, see our full Peplink Resource Center:

Peplink Getting Started Initial Settings Video

In this video, MIRC founder Chris and Erik of MobileMustHave configure a Peplink router from scratch. The video was recorded before Firmware 8.6.0, so a few menu names and recommended steps have changed. Use the written instructions below whenever they differ from the video.

Introduction

This guide focuses on a straightforward setup for RVers, boaters, and other mobile internet users. It does not attempt to configure every Peplink feature.

Peplink models and hardware revisions do not all have the same ports, Wi-Fi radios, licenses, or menu options. If a setting described here is not shown on your router, that feature may not be supported by your particular model or may require an active Care plan.

Firmware 8.6.0 Compatibility

Firmware 8.6.0 is not available for every Peplink model or hardware revision. Check the exact model and hardware revision shown on your router's Dashboard and use Peplink's firmware download page to confirm support.

Important upgrade step: BR1 Pro (CAT-20), BR1 Pro 5G, BR2 Pro, and all supported Dome, Transit, and B One models must first be upgraded to Firmware 8.5.4 before installing Firmware 8.6.0.

First Steps

• Before powering on the router, attach all required cellular, Wi-Fi, and, optionally, GPS antennas.
• If your router has an internal cellular modem, insert an activated SIM card while the router is powered off.
• Connect the router to power and wait for it to finish starting.
• Connect a computer or tablet to the router using an Ethernet LAN port or the factory Wi-Fi network shown on the router's label. A computer is usually easier than a phone for initial setup.
• Open a browser and enter 192.168.50.1. This is the standard Peplink local admin address unless it has already been changed.
• Log in using the credentials supplied with the router. On many models, the initial username and password are both admin.
• Create a new administrator password when prompted and save it somewhere secure.
• If the setup screen asks you to change the factory Wi-Fi password, create a strong password and reconnect to the router using the new password.

Your browser may display a security or certificate warning when opening the router's local admin page. Confirm that you are connected directly to your own Peplink router before continuing past the warning.

Erik demonstrates the initial login process in this video: Peplink Initial Login and Password Setup.

Update the Firmware

Go to System > Firmware and use the automatic update option when available. The router will offer to download the active configuration before upgrading; keep that backup. The router will reboot during the update.

Remember the Firmware 8.5.4 prerequisite listed above before upgrading a BR1 Pro, BR1 Pro 5G, BR2 Pro, or supported Dome, Transit, or B One router to Firmware 8.6.0.

We also have a firmware update video here: Updating Peplink Firmware.

If you are following along with the main video, Chris and Erik had already configured a Wi-Fi WAN connection so they could demonstrate the router online. You do not need Wi-Fi WAN to complete this basic setup. That is covered in this video: Peplink Wi-Fi WAN Setup.

How to Use This Guide

The paths in this guide use the following format:

• Top Tab > Left Menu > Setting

For example, System > Time > Time Settings means to select the System tab, choose Time from the left menu, and then use the Time Settings section.

Click Save at the bottom of each screen. Then click Apply Changes to complete the settings change. Changes to the LAN address, Ethernet port assignments, or Wi-Fi networks can temporarily disconnect you from the router, so make those changes only when you are prepared to reconnect.

System Tab

Set the Time Zone

Setting the correct time zone makes the event log and notifications easier to understand.

• System > Time > Time Settings
• Select your time zone.
• Leave the time server settings at their defaults unless you have a specific reason to change them.
• Click Save.

InControl 2

InControl 2 is Peplink's cloud-based management system. It can be useful for remote monitoring, configuration, firmware updates, and support.

Go to System > InControl to review the settings. Leave InControl enabled if you plan to manage the router through InControl 2 or use PrimeCare features that depend on it. Disable it only if you have decided not to use Peplink's cloud management.

InControl 2 access and included features depend on the router and its active warranty or Care plan. For more information, see our guide:

Network Tab

The Network tab controls your local networks and internet connections. For this starter setup, we will keep the main network simple and add an optional isolated guest network.

Rename the Main Network

Go to Network > LAN > Network Settings and click the existing Untagged LAN network. Change only its name to something clear, such as Main Network or Primary Network.

For a basic setup, leave its IP address, subnet mask, VLAN, and DHCP settings unchanged.

Connecting Starlink

To use Starlink as a Peplink WAN connection, connect Starlink's Ethernet output to a Peplink WAN port and configure that Ethernet WAN normally. You do not need to create a special LAN just for Starlink.

Firmware 8.6.0 adds Starlink status information to WAN Details on supported routers. The amount of information shown depends on the Starlink and Peplink connection method.

Reassigning an Ethernet Port (Optional)

Some Peplink routers have Ethernet ports that can be assigned as either WAN or LAN. This can be useful when you need another wired LAN connection for a computer, printer, camera, or network switch.

Go to Network > Port Settings. Change a port only after confirming that it is not the port currently providing your internet connection or your connection to the admin interface.

Not every Peplink model has reassignable ports, and some routers can only turn a LAN port into a WAN port with Primecare or a license.

Create an Optional Guest Network

A separate guest network can provide internet access without allowing guests to reach devices on your main network.

Go to Network > LAN > Network Settings and select New LAN. Use these example settings:

• IP Address: 192.168.53.1
• Subnet Mask: 255.255.255.0, sometimes displayed as /24
• Name: Guest Network (or whatever you want to name it)
• VLAN ID: 3 (or an unused VLAN ID)
• Inter-VLAN Routing: Disabled or unchecked (important to segregate the guest network from your private network)
• DHCP Server: Enabled
• DHCP Range: 192.168.53.10 through 192.168.53.240

The router's address is 192.168.53.1. The full guest subnet is 192.168.53.0/24. Do not enter 192.168.53.0 as the router's IP address.

Access Point (AP) Tab

External Peplink Access Points (Optional)

If you are using a separate compatible Peplink access point, the router can manage it from the AP tab. Go to the AP tab > AP Controller and enable AP Management.

Leave AP Management disabled if you are only using the Wi-Fi built into the router. Enabling it in advance provides no benefit for a basic setup. Firmware 8.6.0 adds support for tri-band external and integrated access points on supported models, but no special setting is required unless you have compatible hardware.

Create the Main Wi-Fi Network

Go to AP tab > Wireless SSID and select Add. The exact fields vary slightly by model.

• SSID: Enter the Wi-Fi name you want to see, such as Smith Family.
• Enable: Always or Always On.
• VLAN or Network: Select the untagged Main Network. On many routers, this is VLAN 0 or Untagged.
• Broadcast SSID: Enabled.
• Security Policy: WPA2/WPA3 - Personal is a good starting point for compatibility and security.
• Shared Key: Create a strong Wi-Fi password.

Click Save. Apply the change and test the new Wi-Fi network before disabling or deleting the factory SSID.

Create the Guest Wi-Fi Network

If you created the Guest Network in the previous section, add a second SSID:

• SSID: Enter a name such as Smith Guest.
• VLAN or Network: Select Guest Network or enter VLAN 3.
• Broadcast SSID: Enabled.
• Security Policy: WPA2/WPA3 - Personal.
• Shared Key: Create a separate guest password that is easy for you to share but is not reused for your main network.
• Layer 2 Isolation: Enable this advanced option when available so guest devices cannot directly communicate with one another.

After testing the new Wi-Fi networks, you can disable or delete the factory SSID. Expect to be disconnected if you are still using it.

Set Up Wireless Mesh (Optional)

A wireless mesh lets a compatible external Peplink access point connect back to the router over Wi-Fi instead of Ethernet. A wired Ethernet connection is generally preferable when practical.

Go to AP tab > Wireless Mesh and select Add. Enter a Mesh ID, select the supported radio band or bands, and create a strong Shared Key. Mesh options vary by router and access point.

SFC Protect (SpeedFusion Connect)

SpeedFusion Connect sends selected traffic through a Peplink-hosted SpeedFusion endpoint. Depending on the router, plan, and tunnel settings, it can improve reliability by using multiple WAN connections for features such as bonding, smoothing, or hot failover.

SpeedFusion Connect availability and included data depend on the router and its active Care plan. SpeedFusion data can be purchased from Peplink, if needed. Check the Dashboard for the current SpeedFusion Connect allowance before routing large amounts of traffic through it.

Create the SpeedFusion Connect Profile

Open the SFC Protect tab. If a client profile is not already present, select Client Mode - for Outbound accesses.

• Choose Automatic for the SFC Protect location unless you have a reason to select a specific endpoint.
• Select the green check mark to add the profile.
• Click Apply Changes.

Create a Dedicated SpeedFusion Wi-Fi Network

The simplest way to send selected devices through SpeedFusion Connect is to create a dedicated Wi-Fi network from the SFC Protect tab. This avoids the separate SpeedFusion VLAN and manual outbound policy discussed in the video.

• Go to SFC Protect > Route by Wi-Fi SSID.
• Create a new SSID, such as Smith-SFC.
• Select your main Wi-Fi network as the source whose settings should be copied.
• Confirm the security settings and password.
• Click Save and Apply Changes.

Devices connected to this new SSID will be routed through SpeedFusion Connect. Devices on your regular Wi-Fi network will continue to use the router's normal outbound policy.

For a wired device, use SFC Protect > Route by LAN Client and select the client from the list.

Firmware 8.6.0 also adds SpeedFusion Boost, an advanced performance option intended for suitable Starlink, 5G, and other WAN links. It is not required for this basic setup and can be turned on later after confirming that the standard SpeedFusion Connect profile works properly.

Advanced Tab

The Advanced tab includes powerful routing, bandwidth, and firewall tools. Most new users should make only a few changes here and leave the remaining settings at their defaults.

Review the Default Outbound Policy

Outbound policies decide which internet connection is used for outgoing traffic. Go to Advanced > Outbound Policy. The bottom rule is the Default rule.

For a first setup, leave the Default rule unchanged unless you already know that a particular WAN should always have priority. Peplink's normal priority and load-balancing controls are usually enough to get started.

You do not need to create a manual SpeedFusion outbound policy when using SFC Protect > Route by Wi-Fi SSID or Route by LAN Client.

Optional Guest Bandwidth Limit

You can keep guest devices from consuming too much bandwidth by assigning the guest subnet to Peplink's Guest QoS group and setting a per-device limit.

• Go to Advanced > QoS > User Groups.
• Add the subnet 192.168.53.0/24 to the Guest group.
• Go to Advanced > QoS > Bandwidth Control.
• Enable individual bandwidth limits for Guest users.
• As a conservative example, set each guest device to 5 Mbps download and 2 Mbps upload. Adjust these limits for your available connection speed and data plan.

These are per-device limits, not a single combined limit for the entire guest network.

Optional Application Priorities

Under Advanced > QoS > Application, supported traffic types can be assigned High, Normal, or Low priority. Prioritizing VoIP and videoconferencing traffic may help when a WAN connection is congested.

If your router shows SpeedFusion VPN Traffic Optimization, enabling it gives SpeedFusion traffic the highest priority during WAN congestion. This setting does not create or route traffic through a SpeedFusion tunnel by itself.

Optional Content Blocking

Peplink's application and website blocking options are located at Advanced > Firewall > Content Blocking. These controls can block selected applications or domains and can exempt chosen user groups or subnets.

Content blocking is optional and should be tested carefully.

Wrapping Up

Click Apply Changes after saving your final settings. If you changed or disabled the Wi-Fi network you were using, reconnect to one of the new SSIDs and then return to 192.168.50.1.

Return to the Dashboard and confirm that:

• Your intended WAN connections show as connected.
• Your main Wi-Fi network provides internet access.
• The guest Wi-Fi network provides internet access but cannot reach devices on the main network.
• The optional SFC Wi-Fi network appears and routes through SpeedFusion Connect.

Download a Configuration Backup

Once the router is working as intended, download a backup:

• System > Configuration > Download Active Configurations

Keep the file in a secure location. A configuration backup can contain network names, settings, and other sensitive information. You can use this file to reapply these settings if you need to reset the router or want to return it to the initial setup configuration.