InControl 2 User Guide
Peplink Product:
InControl 2
Version 1.03
February 2017
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. Copyright © 2017 Peplink International Ltd. All Rights
Reserved. Pepwave and the Pepwave logo are trademarks of Peplink International Ltd. Other brands or
products mentioned may be trademarks or registered trademarks of their respective owners.
Table of Contents
1. Purpose 3
2. Initial Setup 3
3. Organization, Group, and Device Configuration and Management 8
Changing Login Details 8
Adding Devices 9
Managing Devices 11
Creating Groups 12
Managing Groups 12
Viewing the Operation Log 14
Changing Organization Settings 16
Changing Group-Wide Settings 17
Managing Warranty and License Information 20
Managing Device Firmware 20
Configuring Wi-Fi 21
Configuring PepVPN / SpeedFusion Endpoints 24
Viewing System Messages 25
4. Fleet and Device Management 26
Using the Dashboard 26
Device Summary 26
Device List 26
Map 26
Event Log 28
Getting Detailed PepVPN/SpeedFusion Information 29
Monitoring Clients 30
5. Reporting 31
Device Reports 31
Bandwidth Reports 32
Wi-Fi Reports 33
Cellular Reports 34
Captive Portal Reports 34
Event Log 35
1. Purpose
This manual is a guide to setting up and using InControl 2.
2. Initial Setup
If you have already set up an InControl 2 account or plan to log in using your
Google account, please skip to Step 6.
1. Navigate to the InControl 2 login page at h ttps://incontrol2.peplink.com. Click
the S
ignup link, in the lower right corner.
2. Enter an e-mail address that will serve as your login name.
3. Complete the remaining fields. Click Submit to continue.
4. You will receive a confirmation e-mail. Click the Activate Account button in
the confirmation e-mail.
5. Click the L
ogin button to re-display the InControl 2 login page at
https://incontrol2.peplink.com.
6. Log in with the user name and password created for your InControl 2 account.
You can also login using a linked Google account. If you do so, InControl 2 will ask
for access to your e-mail address and basic profile.
When you log in to InControl 2 for the first time, you’ll be prompted to create an
Organization.
7. To get started, enter organization name, country, and address information.
8. Check to see that your location has been correctly identified. If you want to
specify a different address than the one shown, you can select it using the
map, type it in the Address field, or enter the coordinates below the map.
9. Choose m iles or k
m as your S
peed unit.
10. Click Submit to create your organization.
After you create an Organization, you’ll need to create at least one group.
11. On the C
reate Group page, displayed next, name your group. If needed,
change address and time zone details. Click Create Group to finish.
12. On the A dd Devices Into Groups page, enter one or more serial numbers
and click the N
ext button.
InControl 2 will check to make sure each device is valid for use with the software,
and is not already in use. The results will display in a table.
13. If the device is valid, the table will show the device name, address and
location. Click the Add Devices button to add it to the specified group.
To add more groups and devices or modify your InControl 2 configuration, see the
next section, Organization, Group, and Device Configuration and
Management.
3. Organization, Group, and Device Configuration and Management
This section covers configuring InControl 2, as well as managing groups and devices.
Note that some operations are possible only at the , while others
require that you work at the .
To switch between these levels, select the appropriate icon on the navigation bar and
verify that or is displayed in the breadcrumb
navigation.
Changing Login Details
1. To change login details, click the user name link displayed in the upper right
corner.
On the Account page, you can change your login e-mail address, account name,
language, and password. You can also review recent logins to ensure that the
account has been accessed properly.
Adding Devices
1. To add new devices, click O
rganization Settings > Add Devices.
You can also add a device from the . Click Group, then choose
the desired group from the drop-down menu. When the screen
opens, click Settings > Add Devices.
2. On the A dd Devices Into Groups page, choose a group from the Select
Group drop-down menu. (If you are already at the , you will
skip this step.)
3. Enter one or more serial numbers.
4. Click the N
ext button.
InControl 2 will check to make sure each device is valid for use with the software,
and is not already in use. The results will display in a table.
5. If the device is valid, the table will show the device name, address and
location. Click the Add Devices button to add it to the specified group.
Managing Devices
1. To display device management data for individual devices, click their names on
the Dashboard Device List and on most reports. You can also click
Organization Settings > Device Management at the ,
and S
ettings > Device Management at the to display a list
of devices.
2. Clicking a device name displays its detail page, which provides in-depth device
information, as well as access to Wi-Fi settings and the E
vent Log report. You
can also download configuration backups to use in device restoration and
additional device configuration.
3. For GPS-enabled devices, you can track location in real time or display
historical route information. You can also color-code routes by speed or
coverage, specify a custom tracking time frame, get real-time traffic
information, and more.
Creating Groups
1. To begin adding groups, click O
rganization Settings > Create Group.
2. On the C
reate Group page, name your group and, if needed, change address
and time zone details. Click C
reate Group to finish.
Managing Groups
1. Click Organization Settings > Group Management.
On the G
roups management page, you can delete, rename, and create new
groups.
2. Click the C
reate button to enter a new group.
The C
reate Group page opens. Follow the instructions in the previous section,
Creating Groups , to add a new group.
3. To delete or rename, click the box beside the group you want to change.
Immediately, the D elete and Rename buttons appear above the table.
4. Click the D
elete button to delete the group.
5. Click OK in the dialog box to complete the delete.
6. If you want to rename a group, click the Rename button.
7. Type the new name in the editable N ame box that opens.
8. To save your work, click the S
ave Changes button.
Viewing the Operation Log
1. To display the operation log, click Organization Settings > Operation Log.
Here, you can view all past operations or search for operations that meet
particular criteria.
To sort the view, click the arrows next to the table headings.
Changing Organization Settings
1. To begin changing organization settings, click S
ettings > Settings.
2. Here, you can change organizational security options, logos, addresses, and
more.
The following table explains what changes you can make.
Organization Settings
Organization Add administrative users with F
ull or R
ead-only access.
Admins
Security Idle timeout: Set the time after which inactive users will be logged
out of InControl 2.
Two factor authentication: To require your users to use two-factor
authentication to log in, click this box.
Authenticated with Password: To require your users to log in with a
username and password, click this box.
Block Peplink Support: To prevent Peplink support from viewing the
organization during support calls, click this box
Logo/Favicon Drag-and-drop or upload images to customize InControl 2 with your
own branding.
Address Enter your address, select it from the map, or enter coordinates.
Unit Select your preferred unit of measurement: Metric, Imperial, or
Nautical.
3. To save your work, click the S
ave Changes button.
Changing Group-Wide Settings
1. To begin changing group settings, first click the G
roups icon in the navigation
bar and select the appropriate group from the drop-down menu.
2. Click the Group name in the navigation bar, then click Settings > Group
Settings.
3. Here, you can change and add group administrators, enable e-mail
notifications, silence device reporting for a specified period, and more.
The following table explains what changes you can make.
Group-Wide Settings
Organization Add administrative users with F
ull or R
ead-only access.
Admins
Group Admins Add group administrators with F
ull or R
ead-only access.
E-mail Enable/disable e-mail notifications of system activity. You can also
Notifications set a Silence Period, a recurring time when devices will not
update the system. You can choose to apply this setting to all
devices or devices with specified tags applied.
HTTP/S Click to enter HTTP/S notifications, including the URL and related
Notifications information.
Time Zone Select a time zone and specify whether devices will use this setting.
Device Web Click this box to set up administrator and user password
Admin information.
Authentication
WeChat Enter WeChat account information for this group.
Settings for
Captive Portal
SMS Settings Click to enter SMS service provider and related information.
for Captive
Portal
Scheduled Select the preferred reboot schedule: N
one, D
aily, or Weekly.
Reboot
External Enable/disable External InControl Appliance. The enabled options
InControl are By Redirection and By Configuration.
Appliance
Settings
Address Enter your address, select it from the map, or enter coordinates.
4. To store your updates, click the S
ave Changes button.
Managing Warranty and License Information
1. To view and manage device warranty and license information, click
Organization Settings > Warranty & License.
2. Here, you can filter the list to show warranties that are close to expiring, as
well as those that have already expired. You can also import FusionHub license
keys, create an evaluation license, and download the latest FusionHub
firmware.
Managing Device Firmware
1. To view and manage firmware updates for your devices, select the appropriate
group from your Groups drop-down menu.
2. Click Settings > Firmware Policy.
3. On this page, you can view firmware versions, as well as set group policy for
firmware update frequency. To save your work, click Save Changes.
Configuring Wi-Fi
1. Select the appropriate group from your Groups drop-down menu.
2. Click Wi-Fi AP > Group-wide SSID Settings.
On the Group-wide SSID Settings page, you can enable/disable available Wi-Fi
configurations.
3. To change SSID settings, click the identifier in the table.
In order for the edit page to open, W
i-Fi Management must be checked.
The SSID Settings page displays a variety of Wi-Fi configuration settings.
Group-Wide Settings
SSID Enter a name for the Wi-Fi network.
Security Security Policy - Choose from Open – No Encryption, W
PA2 -
Settings Personal, WPA2 - Enterprise, WPA/WPA2 - Personal,
WPA/WPA2 - Enterprise, and S tatic WEP.
Layer 2 Isolation - Enable/disable Layer 2 port isolation, which
can prevent unauthorized port-to-port communication.
SSID SSID Visibility - Available values are S
how this SSID and H
ide
Discovery this SSID. Note that hiding the SSID does not prevent access to
users who know the SSID.
VLAN To insert a VLAN ID, click the box next to VLAN Tagging.
Settings
MAC Filter Restriction Mode - Deny or accept all MAC addresses, except
those listed in MAC Address List, which displays if you select
either D
eny or A llow.
Multicast Multicast Filter - Enable or disable multicast filtering.
Settings Multicast Rate - Choose one of the options to change the balance
of multicast speed/range.
IGMP Snooping - Click to turn on.
Radio Both 2.4 GHz and 5
GHz are selected by default, to support
Selection communication in every mode.
Maximum The default for both radio selections is U
nlimited. Use the
Number of drop-down list to change that number.
Clients
Device Enable the SSID on all devices or on devices with the specified tags.
Selection
Schedule The SSID Settings are always on.
4. Click the S
ave Changes button when you are finished.
5. To add a new SSID, click the A
dd new SSID button, on the Group-wide
SSID Settings page. Use the Group-Wide Settings table above, and click the
Save Changes button when you are finished.
Configuring PepVPN / SpeedFusion Endpoints
1. If allowed by your deployment, you can configure PepVPN / SpeedFusion
endpoints right from InControl 2. To access this feature, click P
epVPN /
SpeedFusion > Configuration.
2. Next, check Enable to display configuration settings.
All enabled profiles will display in the table under the map.
3. To make changes to an existing profile, click the Edit button.
4. To add a profile, click the A
dd Profile button.
5. Enter the following information as you are prompted to do so:
End Point Configuration
Topology Select Star, F
ully Meshed or Point-to-Point.
Choose Click next to the device for which you are adding this profile.
Endpoint
Devices
Choose The IP address or hostname assigned to the hub will display here.
Hub Device Click the H
igh Availability Setup box to enable HA. Then select
the appropriate group and device for your HA deployment.
The Profile Summary displays next. It contains the following additional information.
Profile Summary
Encryption Toggle 256-bit AES encryption; in most cases, it’s best to leave
encryption turned on
NAT Mode Check this box to enable network address translation
Data Port The default data port is 4500; port 32015 will be used if port 4500
is unavailable
Send All Traffic Internet traffic from LAN clients on the endpoint device will be
to Remote Hub routed to the remote hub site over the SpeedFusion connection
instead of routing to the device's WAN port(s)
Link Failure Choose the amount of time between link status checks; lower
Detection Time values enable faster detection but consume more bandwidth
WAN Choose N
ormal, M
edium, H
igh, or O
ff.
Smoothing
WAN If you select Change WAN Priority, the next screen that displays
Priority will allow you to change priorities for one or more of the PepVPN
profiles.
Viewing System Messages
To see important system messages, click the notification ( ) icon located at the
top of the page.
4. Fleet and Device Management
Using the Dashboard
The Dashboard provides a wealth of at-a-glance data about online and offline devices,
client statistics, location, and more. To access the Dashboard, select a group and then
click the Dashboard icon located in the navigation bar.
Device Summary
This section offers a quick overview of online, offline, total online and offline, and
connected client devices, all updated live.
Device List
The Device List displays important device information that can be easily sorted so you
can quickly find just the information you need. The Device List also provides quick
access to device management tools and group-level Wi-Fi settings.
Map
The map lets you keep an eye on your whole fleet in real time. Icons are marked with
the name assigned to the device being tracked. Icons with numbers indicate multiple
devices in the area.
To get details, including a complete route history, click any map icon.
To see a device’s route history in motion, select a speed and click the
play/pause button.
Event Log
The Event Log keeps you up-to-date on client connection/disconnection, data session
times, time synchronizations, and more. For details on client devices, click the
appropriate listing in the C lient column. To display the Device Management page for a
device, click its listing in the Device column. To display the entire Event Log report,
which can be downloaded for use in other applications, click More…
Getting Detailed PepVPN/SpeedFusion Information
InControl 2 makes it easy to monitor the real time performance and activity of PepVPN
/ SpeedFusion endpoints. To get started, select a Group. Then click PepVPN /
SpeedFusion > Live Status - Tabular View.
To see receive/transmit, packet drop rate, and latency statistics for a listed endpoint,
click the disclosure triangle.
For a visual representation of this data, click the graph icon on the right.
Hover over graphed lines to see details. You can also click items in the graph legend to
show/hide them.
Monitoring Clients
InControl 2 offers comprehensive client reporting in real time. To access a list of all
connected clients, click C
lients in the navigation bar, when you are on the
.
For detailed information on a connected client, click its link in the N
ame column.
On the Clients detail page, you’ll see the client’s current location, as well as other data.
To see historical data for the client, click Event Log.
5. Reporting
InControl 2 offers a variety of reports to help you monitor network and client devices.
To access these reports select R eports from the navigation bar while working at the
.
Device Reports
To get an in-depth look at network equipment and client devices, select R eports >
Device Reports. For more detail on displayed data, click on available links and hover
over graph data.
Bandwidth Reports
The Bandwidth Report represents real-time, per-minute, hourly, daily, and monthly
bandwidth statistics. You can display the data for WAN, LAN, or mobile internet
connections.
Hover over any data point for download, upload, and total information.
The same data displays in a table below the graph. Click D
ownload as CSV to save
the data to a spreadsheet or database.
Wi-Fi Reports
This report offers the same data as Device Reports, plus an SSID usage table to help
you determine which access points are handling the most traffic.
Cellular Reports
You can take a look at signal strength and quality over time--from ten minutes to 12
hours--with the Cellular Report.
Hover over any data point for strength and quality information.
The map below the graph allows you to filter and display the results by strength and/or
quality.
Captive Portal Reports
This report displays data and analysis about captive portal sessions and users during
the specified time period.
The reports display the following information about captive portals and their users:
Captive Portal Reports
Portal Access Provides a visual representation of the number of Sessions, Sign-in
Page Views, Guest Clients, Failed Sign-Ins, Total Bandwidth, Total
Session Time and Average Session Time. Click the
Overview This table displays all the information from the Portal Access fields
listed above, for each day in the specified time period. Click the
next to a column heading for an explanation of the data.
Visits In Choose a portal and type (see portal access above) to displays the
Each Access number of visitors by Facebook and All logins for the specified time
Mode period.
Genders Displays a pie chart of users by gender.
Countries Displays a pie chart of users by country.
Relationship Displays a pie chart of users by their Facebook relationship status.
Status
Social User Displays the names, demographic information, and login details of
List users who signed into the captive portal with a Facebook account.
The name field links you to the Facebook account. Click D ownload
full list as CSV to save the data to a spreadsheet or database.
Collected Displays the number of e-mail addresses captured by the captive
E-mail portal. Click D
ownload as CSV to save the data to a spreadsheet
Addresses or database.
SMS Users Displays the number of phone numbers captured by the captive
portal. Click D
ownload as CSV to save the data to a spreadsheet
or database.
Event Log
The Event Log lets you track any kind of system event and can be filtered using an
array of presets. You can also specify custom report filtering criteria.
