Cisco RV110W Instruction Manual

Cisco Small Business
RV110W Wireless-N VPN Firewall
ADMINISTRATION
GUIDE

© 2011-2012 Cisco Systems, Inc. All rights reserved 78-20157-03 (formerly OL-21745-01)
Revised March 2012
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco RV110W Administration Guide 3
Contents
Chapter 1: Introduction 8
Product Overview 8
Getting to Know the Cisco RV110W 10
Front Panel 10
Back Panel 12
Installing the Cisco RV110W 13
Placement Tips 13
Connecting the Equipment 13
Using the Setup Wizard 15
Using the Getting Started Page 16
Navigating through the Pages 18
Saving Changes 19
Viewing the Help Files 19
Configuration Next Steps 20
Verifying the Hardware Installation 20
Connecting to Your Wireless Network 21
Chapter 2: Configuring Networking 22
Configuring the WAN Settings 22
Configuring Automatic Configuration (DHCP) 22
Configuring Static IP 23
Configuring PPPoE 23
Configuring PPTP 25
Configuring L2TP 26
Configuring Optional Settings 28
Configuring the LAN Settings 29
Changing the Default Cisco RV110W IP Address 30
Configuring DHCP 31
Configuring VLANs 32
Configuring Static DHCP 34
Viewing DHCP Leased Clients 35

Cisco RV110W Administration Guide 4
Contents
Configuring a DMZ Host 35
Configuring RSTP 36
Port Management 37
Cloning the MAC Address 39
Configuring Routing 40
Configuring the Operating Mode 40
Configuring Dynamic Routing 40
Configuring Static Routing 41
Configuring Inter-VLAN Routing 42
Viewing the Routing Table 43
Configuring Dynamic DNS 43
Configuring the IP Mode 44
Configuring IPv6 45
Configuring the WAN for an IPv6 Network 45
Configuring IPv6 LAN Settings 49
Configuring IPv6 Static Routing 52
Configuring Routing (RIPng) 54
Configuring Tunneling 54
Viewing IPv6 Tunnel Status 55
Configuring Router Advertisement 56
Configuring Advertisement Prefixes 57
Chapter 3: Configuring the Wireless Network 60
Wireless Security 60
Wireless Security Tips 60
General Network Security Guidelines 62
Cisco RV110W Wireless Networks 62
Configuring Basic Wireless Settings 63
Editing the Wireless Network Settings 65
Configuring the Security Mode 66
Configuring MAC Filtering 69

Cisco RV110W Administration Guide 5
Contents
Configuring Time of Day Access 70
Configuring the Wireless Guest Network 71
Configuring Advanced Wireless Settings 73
Configuring WDS 76
Configuring WPS 77
Chapter 4: Configuring the Firewall 79
Cisco RV110W Firewall Features 79
Configuring Basic Firewall Settings 81
Configuring Remote Management 83
Configuring Universal Plug and Play 84
Managing Firewall Schedules 85
Adding or Editing a Firewall Schedule 85
Configuring Services Management 85
Configuring Access Rules 86
Adding Access Rules 87
Creating an Internet Access Policy 90
Adding or Editing an Internet Access Policy 90
Configuring Port Forwarding 91
Configuring Single Port Forwarding 92
Configuring Port Range Forwarding 93
Configuring Port Range Triggering 93
Chapter 5: Configuring VPN 95
VPN Tunnel Types 95
VPN Clients 96
Configuring PPTP 96
Configuring NetBIOS Over VPN 97
Creating and Managing PPTP Users 97
Creating and Managing QuickVPN Users 98
Importing VPN Client Settings 99

Cisco RV110W Administration Guide 6
Contents
Configuring Basic VPN Settings (Site-to-Site VPN) 100
Viewing Default Values 101
Configuring Advanced VPN Parameters 102
Managing IKE Policies 102
Managing VPN Policies 103
Configuring Certificate Management 108
Configuring VPN Passthrough 109
Chapter 6: Configuring Quality of Service (QoS) 111
Configuring Bandwidth Management 111
Configuring Bandwidth 111
Configuring Bandwidth Priority 112
Configuring QoS Port-Based Settings 113
Configuring CoS Settings 114
Configuring DSCP Settings 114
Chapter 7: Administering Your Cisco RV110W 116
Setting Password Complexity 117
Configuring User Accounts 118
Setting the Session Timeout Value 119
Configuring Simple Network Management (SNMP) 119
Configuring SNMP System Information 119
Editing SNMPv3 Users 120
Configuring the SNMP Traps 121
Using Diagnostic Tools 122
Network Tools 122
Configuring Port Mirroring 124
Configuring Logging 124
Configuring Logging Settings 124
Configuring the E-Mailing of Logs 126
Configuring Bonjour 128

Cisco RV110W Administration Guide 7
Contents
Configuring Date and Time Settings 128
Backing Up and Restoring the System 129
Backing Up the Configuration Settings 130
Restoring the Configuration Settings 131
Copying the Configuration Settings 131
Generating an Encryption Key 132
Upgrading Firmware or Change the Language 132
Restarting the Cisco RV110W 134
Restoring the Factory Defaults 134
Running the Setup Wizard 134
Chapter 8: Viewing the Cisco RV110W Status 136
Viewing the Dashboard 137
Viewing the System Summary 139
Viewing the Wireless Statistics 141
Viewing the VPN Status 142
Viewing the IPSec Connection Status 143
Viewing Logs 144
Viewing Connected Devices 145
Viewing Port Statistics 146
Viewing the GuestNet Status 147
Appendix A: Using Cisco QuickVPN 148
Overview 148
Before You Begin 148
Installing the Cisco QuickVPN Software 149
Installing from the CD-ROM 149
Downloading and Installing from the Internet 151
Using the Cisco QuickVPN Software 151
Appendix B: Where to Go From Here 154

1
Cisco RV110W Administration Guide 8
Introduction
This chapter provides information to familiarize you with the product features,
guide you through the installation process, and get started using the
browser-based Device Manager.
•Product Overview
•Getting to Know the Cisco RV110W
•Installing the Cisco RV110W
•Connecting the Equipment
•Using the Setup Wizard
•Verifying the Hardware Installation
•Connecting to Your Wireless Network
Product Overview
Thank you for choosing the Cisco Small Business RV110W Wireless-N VPN
Firewall.
The Cisco RV110W is an advanced Internet-sharing network solution for your
small business needs. It allows multiple computers in your office to share an
Internet connection through both wired and wireless connections.
The Cisco RV110W provides a Wireless-N access point, combined with support
for Virtual Private Network (VPN) clients to make remote access to your network
more secure.
The router 10/100 Fast Ethernet WAN interface connects directly to your
broadband DSL or Cable modem.

Introduction
Product Overview
Cisco RV110W Administration Guide 9
1
LAN Ethernet Interfaces
The Cisco RV110W provides four full-duplex 10/100 Fast Ethernet LAN interfaces
that can connect up to four devices. You can connect a Cisco Small Business
switch to one of the available ports to expand your network as needed.
Wireless Access Point
The Cisco RV110W wireless access point supports the 802.11n standard with
MIMO technology, which multiplies the effective data rate. This technology results
in better throughput and coverage than that provided by 802.11g networks.
Firewall and VPN Client Access
The Cisco RV110W incorporates a Stateful Packet Inspection (SPI)-based firewall
with Denial of Service (DoS) prevention and a Virtual Private Network (VPN)
engine for secure communication between mobile or remote workers and branch
offices.
The Cisco RV110W supports up to five client-to-gateway VPN tunnels to facilitate
branch office connectivity through encrypted virtual links. Users connecting
through a VPN tunnel are attached to your company network with secure access
to files, e-mail, and your intranet as if they were in the building.
Security
The Cisco RV110W implements WPA Personal, WPA Enterprise, WPA2 personal,
WPA2 Enterprise, and WEP Security, along with other security features including
the disabling of SSID broadcasts, MAC- based filtering, and allowing or denying
“time of day” access per SSID.
Quality of Service
The Cisco RV110W supports Wi-Fi Multimedia (WMM) and Wi-Fi Multimedia
Power Save (WMM-PS) for Quality of Service (QoS).
The Cisco RV110W also supports 802.1p, Differentiated Services Code Point
(DSCP), and Type of Service (ToS) for wired QoS, which can improve the quality of
your network when using delay-sensitive Voice over IP (VoIP) applications and
bandwidth-intensive video streaming applications.
Wireless Distribution System
The Cisco RV110W wireless access point supports Wireless Distribution System
(WDS), which allows the wireless coverage to be expanded without wires.

Introduction
Getting to Know the Cisco RV110W
Cisco RV110W Administration Guide 10
1
Virtual Networks
The Cisco RV110W also supports multiple Service Set Identifiers (SSIDs) for the
use of virtual networks (up to four separate virtual networks), with 802.1Q-based
VLAN support for traffic separation.
Configuration and Administration
With the Cisco RV110W embedded web server, you can configure the
Cisco RV110W settings using the browser-based Device Manager. The
Cisco RV110W supports Internet Explorer, Firefox, and Safari web browsers.
The Cisco RV110W also provides a Setup Wizard that allows you to easily and
quickly configure the Cisco RV110W basic settings.
Getting to Know the Cisco RV110W
Front Panel
Power The Power light is green to indicate the unit is powered
on. The light flashes green when the power is coming
on.
WPS The Wi-Fi Protected Setup (WPS) button is used to
configure wireless access for devices in your network
that are WPS-enabled. See Configuring WPS, page 77
for more information.

Introduction
Getting to Know the Cisco RV110W
Cisco RV110W Administration Guide 11
1
WAN The WAN (Internet) light is green when the
Cisco RV110W is connected to the Internet through
your cable or DSL modem. The light is off when the
Cisco RV110W is not connected to the Internet. The
light flashes green when it is sending or receiving data
Wireless The Wireless light is green when the wireless module is
enabled. The light is off when the wireless module is
disabled. The light flashes green when the firewall is
transmitting or receiving data on the wireless module.
LAN Ports The numbered lights correspond to the LAN ports on
the Cisco RV110W.
If the lights are continuously green, the Cisco RV110W
is connected to a device through the corresponding
port (1, 2, 3, or 4). The light for a port flashes green when
the firewall is actively sending or receiving data over
that port.
Power The Power light is green to indicate the unit is powered
on. The light flashes green when the power is coming
on.

Introduction
Getting to Know the Cisco RV110W
Cisco RV110W Administration Guide 12
1
Back Panel
RESET If the Cisco RV110W has problems connecting to
the Internet, press the RESET button for at least 3
but no more than 10 seconds with a paper clip or
similar object. This is similar to pressing the reset
button on your PC to reboot it.
If you are experiencing extreme problems with the
Cisco RV110W and have tried all other
troubleshooting measures, press and hold in the
RESET button for more than 10 seconds. This
reboots the unit and restores the factory defaults.
Changes you have previously made to the
Cisco RV110W settings are lost.
LAN (1–4) LAN connections to network devices, such as PCs,
print servers, or switches.
WAN The WAN (Internet) port is connected to your
Internet device, such as a cable or DSL modem.
POWER Press to turn the Cisco RV110W on or off.
12VDC Connect the provided 12V AC power adapter to
the 12VDC port.

Introduction
Installing the Cisco RV110W
Cisco RV110W Administration Guide 13
1
Installing the Cisco RV110W
Placement Tips
•Ambient Temperature—To prevent the firewall from overheating, do not
operate it in an area that exceeds an ambient temperature of 104°F (40°C).
•Air Flow—Be sure that there is adequate air flow around the firewall.
•Mechanical Loading—Be sure that the firewall is level and stable to avoid
any hazardous conditions.
Place the Cisco RV110W horizontally on a flat surface so that it sits on its rubber
feet.
Connecting the Equipment
You must connect a PC with an Ethernet cable for the purpose of the initial
configuration. After you complete the initial configuration, administrative tasks can
be performed by using a wireless connection.
STEP 1 Power off all equipment, including the cable or DSL modem, the PC, and the
Cisco RV110W.
STEP 2 You should already have an Ethernet cable connecting your PC to your current
cable or DSL modem. Unplug one end of the cable from your PC and plug it into
the port marked “WAN” on the unit.

Introduction
Connecting the Equipment
Cisco RV110W Administration Guide 14
1
STEP 3 Connect one end of a different Ethernet cable to one of the LAN (Ethernet) ports on
the back of the unit. (In this example, the LAN 1 port is used.) Connect the other
end to an Ethernet port on the PC that you will use to run the web-based Setup
Wizard and Device Manager.
STEP 4 Power on the cable or DSL modem and wait until the connection is active.
STEP 5 Connect the power adapter to the Cisco RV110W power port (12VDC).
!
CAUTION Use only the power adapter that is supplied with the unit. Using a different power
adapter could damage the unit.

Introduction
Using the Setup Wizard
Cisco RV110W Administration Guide 15
1
STEP 6 Plug the other end of the adapter into an electrical outlet. You may need to attach a
specific plug (supplied) for your country.
STEP 7 On the Cisco RV110W, push the POWER button in to turn on the firewall.
The power light on the front panel is green when the power adapter is connected
properly and the unit is turned on.
Using the Setup Wizard
The Setup Wizard and Device Manager are supported on Microsoft Internet
Explorer 6.0 or later, Mozilla Firefox 3.0 or later, and Apple Safari 3.0 or later.
To u s e t h e S e t u p W i z a r d :
STEP 1 Start the computer that you connected to the LAN1 port in Step 2 of the
Connecting the Equipment section.
Your computer becomes a DHCP client of the Cisco RV110W and receives an IP
address in the 192.168.1.xxx range.
STEP 2 Launch a web browser and enter 192.168.1.1 in the Address bar. This is the
default IP address of the Cisco RV110W.
A message appears about the site security certificate. The Cisco RV110W uses a
self-signed security certificate and this message appears because the
Cisco RV110W is not known to your computer.
STEP 3 Click Continue to this website (or the option shown on your particular web
browser) to go to the web site.
STEP 4 When the login page appears, enter the user name and password.

Introduction
Using the Getting Started Page
Cisco RV110W Administration Guide 16
1
The default user name is cisco. The default password is cisco. Passwords are
case sensitive.
STEP 5 Click Log In. The Setup Wizard starts.
STEP 6 Follow the on-screen instructions to set up the Cisco RV110W.
The Setup Wizard tries to automatically detect and configure your connection. If it
cannot, the Setup Wizard may ask you for information about your Internet
connection. You may need to contact your ISP to obtain this information.
NOTE: When using the Setup Wizard, you can only set up one wireless network, or
SSID. The Cisco RV110W supports up to four wireless networks. If you want to
configure additional wireless networks, use the web-based Device Manager. See
Configuring the Wireless Network.
After the Setup Wizard is done configuring the Cisco RV110W, you are required to
change the default password. We recommend that you use password complexity;
see Setting Password Complexity.
After changing the default password, the Getting Started page appears. See
Using the Getting Started Page for more information.
Using the Getting Started Page
The Getting Started page displays the most common Cisco RV110W
configuration tasks. Use the links on this page to jump to the relevant configuration
page.
By default, this page appears when you start the Device Manager. However, you
can change this behavior by checking Don’t show on start up at the bottom of the
page.

Introduction
Using the Getting Started Page
Cisco RV110W Administration Guide 17
1
Initial Settings
Quick Access
Device Status
Change Default
Administrator Password
Click to open the Users page where you can
change the administrator password. See
Configuring User Accounts.
Launch Setup Wizard Click to launch the Setup Wizard.
Configure WAN Settings Click to open the Internet Setup page. See
Configuring the WAN Settings.
Configure LAN Settings Click this link to open the LAN Configuration page.
See Configuring the LAN Settings.
Configure Wireless
Settings
Click to open the Basic Settings page. See
Configuring Basic Wireless Settings.
Upgrade Router
Firmware
Click to open the Firmware/Language Upgrade
page. See Upgrading Firmware or Change the
Language.
Add VPN Clients Click to open the VPN Clients page. See VPN
Clients.
Configure Remote
Management Access
Click to open the Basic Settings page. See
Configuring Basic Firewall Settings.
System Summary Click to open the System Summary page. See
Viewing the System Summary.
Wireless Status Click to open the Wireless Statistics page. See
Viewing the Wireless Statistics.
VPN Status Click to open the VPN Status page. See Viewing
the VPN Status.

Introduction
Using the Getting Started Page
Cisco RV110W Administration Guide 18
1
Other Resources
Navigating through the Pages
Use the navigation tree in the left pane to open the configuration pages.
Click a menu item on the left panel to expand it. Under it, click a menu name to
perform an action or display a sub-menu.
Support Click to open the Cisco support page.
Forums Click to visit Cisco online support forums.

Introduction
Using the Getting Started Page
Cisco RV110W Administration Guide 19
1
Saving Changes
When you finish making changes on a configuration page, click Save to save the
changes, or click Cancel to undo your changes.
Viewing the Help Files
To view more information about a configuration page, click the Help link near the
top right corner of the page.

Introduction
Verifying the Hardware Installation
Cisco RV110W Administration Guide 20
1
Configuration Next Steps
Although the Setup Wizard automatically configures the Cisco RV110W, we
recommend that you change some default settings to provide better security and
performance.
In addition, you may need to manually configure some settings. A suggested
outline of steps follows:
1. Change the idle timeout value—By default, The Device Manager logs you out
after 10 minutes of inactivity. This can be frustrating if you are trying to configure
your device. See Setting the Session Timeout Value.
2. (Optional) If you already have a DHCP server on your network, and you do not
want the Cisco RV110W to act as a DHCP server, see Configuring the LAN
Settings.
3. Configure your wireless network, especially wireless security. See Chapter 3,
“Configuring the Wireless Network.”
4. Configure your Virtual Private Network (VPN) using QuickVPN. The QuickVPN
software is found on the documentation and software CD that shipped with your
firewall. See Appendix A, “Using Cisco QuickVPN.”
Verifying the Hardware Installation
To verify the hardware installation, complete the following tasks:
•Check the LED states. They are described in Getting to Know the
Cisco RV110W.
•Connect a computer to an available LAN port and verify that you can
connect to a website on the Internet, such as www.cisco.com.
•Configure a device to connect to your wireless network and verify the
wireless network is functional. See Connecting to Your Wireless Network.