Cisco RV120W Instruction Manual

Cisco Small Business
RV 120W Wireless-N VPN Firewall
ADMINISTRATION
GUIDE

© 2009 Cisco Systems, Inc. All rights reserved. 78-19307-01
CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse, Cisco SensorBase, Cisco StackPower,
Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip
Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn,
Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, Flip Gift Card, and One Million Acts of Green are service marks; and Access
Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified
Internetwork Expert logo, Cisco IOS, Cisco Lumin, Cisco Nexus, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity,
Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS, iPhone, IronPort, the
IronPort logo, Laser Link, LightStream, Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, PCNow, PIX, PowerKEY,
PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet, Spectrum Expert, StackWise, WebEx, and the WebEx
logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0910R)

Cisco RV 120W Administration Guide 1
Contents
Chapter 1: Introduction 1
Product Overview 1
Getting to Know the Cisco RV 120W 3
Front Panel 3
Back Panel 4
Mounting the Cisco RV 120W 5
Installation Guidelines 5
Wall Mounting 5
Connecting the Equipment 7
Using the Setup Wizard 8
Starting the Wizard 8
Connecting Your Hardware 9
Entering Login and Internet Connection Information 13
Configuring Security 14
Manually Connecting Your System 16
Verifying the Hardware Installation 17
Connecting to Your Wireless Network 17
Getting Started in the Cisco RV 120W Device Manager 18
Logging In 18
Using the Getting Started Page 19
Navigating through the Pages 20
Saving Your Changes 21
Viewing the Help Files 22
Viewing Device Statistics 22
Viewing the System Summary 22
Viewing the Wireless Status 25
Viewing the IPsec Connection Status 26
Viewing the QuickVPN Connection Status 27
Viewing Logs 27
Viewing Available LAN Hosts 28
Viewing the Port Triggering Status 28
Viewing Port Statistics 28

Cisco RV 120W Administration Guide 2
Contents
Chapter 2: Configuring Networking 30
Configuring the Wide Area Network (WAN) 30
Configuring the WAN for an IPv4 Network 30
Configuring the Internet Connection Type 30
Configuring Internet Address Information 32
Configuring Domain Name System (DNS) Server Information 33
Configuring Maximum Transmit Unit (MTU) 33
Configuring the Cisco RV 120W Media Access Control (MAC) Address 33
Configuring the WAN for an IPv6 Network 34
Configuring a Static IP Address 34
Configuring DHCPv6 35
Creating PPPoE Profiles 35
Configuring the Local Area Network (LAN) 36
Changing the Default Cisco RV 120W IP Address 37
Configuring DHCP 37
Configuring the LAN DNS Proxy 38
Configuring Virtual LANs (VLANs) 39
Enabling VLANs 39
Creating a VLAN 39
Configuring Port VLANs 40
Associating the Wireless Port to VLANs 41
Configuring Multiple VLAN Subnets 42
Configuring IPv6 LAN Properties 43
Configuring IPv6 Address Pools 44
Configuring LAN Groups 45
Adding a Static IP Address for a Device on the LAN 45
Viewing DHCP Leased Clients 46
Configuring a DMZ Host 46
Configuring Internet Group Management Protocol (IGMP) 47
Configuring Routing 48
Choosing the Routing Mode 48
Viewing Routing Information 48
Configuring Static Routing 49
Configuring Dynamic Routing 50

Cisco RV 120W Administration Guide 3
Contents
Configuring Port Management 52
Configuring Dynamic DNS (DDNS) 53
Configuring IPv6 54
Configuring the Routing Mode 54
Configuring IPv6 Static Routing 54
Configuring RIP next generation (RIPng) 55
Configuring IPv6 to IPv4 Tunneling 56
Configuring 6to4 Tunneling 56
Configuring Intra-Site Automatic Tunnel Addressing Protocol Tunnels 56
Viewing IPv6 Tunnel Information 57
Configuring Router Advertisement 57
Chapter 3: Configuring the Wireless Network 60
A Note About Wireless Security 60
Wireless Security Tips 60
General Network Security Guidelines 62
Understanding the Cisco RV 120W’s Wireless Networks 63
Configuring Wireless Profiles 63
Configuring the Group Key Refresh Interval 65
Configuring RADIUS Authentication Parameters 66
Configuring Access Points 66
Enabling or Disabling APs 66
Editing an AP’s Properties 67
Using MAC Filtering 68
Viewing AP Status 68
Configuring the Wireless Radio Properties 70
Configuring Basic Wireless Radio Settings 70
Configuring Advanced Wireless Radio Settings 71
Configuring Wi-Fi Protected Setup 72
Configuring a Wireless Distribution System (WDS) 73

Cisco RV 120W Administration Guide 4
Contents
Chapter 4: Configuring the Firewall 74
Cisco RV 120W Firewall Features 74
Configuring Basic Firewall Settings 76
Protecting from Attacks 76
Configuring Universal Plug and Play (UPnP) 77
Viewing UPnP Information 78
Enabling Session Initiation Protocol Application-Level Gateway (SIP ALG) 78
Configuring the Default Outbound Policy 79
Configuring Firewall Rules 79
Creating a Firewall Rule 80
Managing Firewall Rules 84
Creating Custom Services 84
Creating Firewall Schedules 85
Blocking and Filtering Content and Applications 85
Blocking Web Applications and Components 86
Adding Trusted Domains 87
Adding Blocked Keywords 87
Configuring MAC Address Filtering 88
Configuring IP/MAC Address Binding 89
Firewall Rule Examples 90
Configuring Port Triggering 92
Configuring Port Forwarding 94
Restricting Sessions 97
Configuring Remote Management 98
Configuring One-to-One Network Address Translation (NAT) 99
Chapter 5: Configuring Virtual Private Networks (VPNs) and Security 101
Configuring VPNs 102
Creating Cisco QuickVPN Client Users 102
Using the VPN Wizard 102
Viewing the Default Values 104

Cisco RV 120W Administration Guide 5
Contents
Configuring IP Security Policies 105
Configuring IKE Policies 105
Configuring VPN Policies 108
Configuring VPN Clients 113
Monitoring VPN Tunnel Status 113
Configuring IPsec Users 114
Configuring VPN Passthrough 115
Configuring Security 115
Using Certificates for Authentication 115
Uploading CA Certificates 117
Uploading Self Certificates 117
Generating a Self Certificate Request 117
Downloading the Router’s Current Certificate 118
Using the Cisco RV 120W With a RADIUS Server 118
Configuring 802.1x Port-Based Authentication 119
Chapter 6: Configuring Quality of Service (QoS) 120
Configuring Bandwidth Profiles 120
Configuring Traffic Flows 121
Configuring Traffic Metering 122
Configuring 802.1p 124
Configuring 802.1p to Queue Mapping 125
Configuring 802.1p CoS to DSCP Remarking 125
Chapter 7: Administering Your Cisco RV 120W 126
Setting Password Complexity 126
Configuring User Accounts 127
Setting the Timeout Value 128
Configuring Simple Network Management (SNMP) 128
Editing SNMPv3 Users 128
Adding SNMP Traps 129
Configuring Access Control Rules 129
Configuring Additional SNMP Information 130

Cisco RV 120W Administration Guide 6
Contents
Using Diagnostic Tools 130
Using PING 131
Using Trace Route 131
Performing a DNS Lookup 131
Capturing and Tracing Packets 131
Configuring Logging 131
Configuring Local Logging 132
Configuring Remote Logging 133
Configuring the Logging Type and Notification 134
Configuring E-Mailing of Log Events 135
Configuring Discovery (Bonjour) 135
Configuring VLAN Associations 136
Configuring Date and Time Settings 136
Backing Up and Restoring the System 137
Upgrading Firmware 138
Rebooting the Cisco RV 120W 138
Restoring the Factory Defaults 138
Appendix A: Using Cisco QuickVPN for Windows 2000, XP, or Vista 139
Overview 139
Before You Begin 139
Installing the Cisco QuickVPN Software 140
Installing from the CD-ROM 140
Downloading and Installing from the Internet 142
Using the Cisco QuickVPN Software 142
Appendix B: Where to Go From Here 146

1
Cisco RV 120W Administration Guide 1
Introduction
This chapter provides information to familiarize you with the product features,
guide you through the installation process, and get started using the browser-
based Device Manager. It contains the following sections:
•Product Overview, page 1
•Getting to Know the Cisco RV 120W, page 3
•Mounting the Cisco RV 120W, page 5
•Connecting the Equipment, page 7
•Verifying the Hardware Installation, page 17
•Getting Started in the Cisco RV 120W Device Manager, page 18
Product Overview
Thank you for choosing the Cisco Small Business RV 120W Wireless-N VPN
Firewall. The Cisco RV 120W is an advanced Internet-sharing network solution for
your small business needs. It allows multiple computers in your office to share an
Internet connection through both wired and wireless connections.
The Cisco RV 120W provides a Wireless-N access point, combined with support
for Virtual Private Networks (VPNs) to make your network more secure. Its 10/100
Ethernet WAN interface connects directly to your broadband DSL or Cable
modem. There are four full-duplex 10/100 Ethernet LAN interfaces that can
connect up to four devices. The wireless access point supports the 802.11n
standard with MIMO technology, which multiplies the effective data rate. This
technology results in better throughput and coverage than provided by 802.11g
networks.

Introduction
Product Overview
Cisco RV 120W Administration Guide 2
1
The Cisco RV 120W incorporates a Stateful Packet Inspection (SPI)-based firewall
with Denial of Service (DoS) prevention and a Virtual Private Network (VPN)
engine for secure communication between mobile or remote workers and branch
offices. The Cisco RV 120W supports up to ten gateway-to-gateway IP Security
(IPsec) tunnels to facilitate branch office connectivity through encrypted virtual
links. Users connecting through a VPN tunnel are attached to your company’s
network with secure access to files, e-mail, and your intranet as if they were in the
building. You can also use the VPN capability to allow users on your small office
network to securely connect out to a corporate network
The Cisco RV 120W’s wireless access point supports Wireless Distribution
System (WDS), which allows the wireless coverage to be expanded without wires.
It also supports multiple SSIDs for the use of virtual networks (up to 4 separate
virtual networks), with 802.1Q-based VLAN support for traffic separation. The
Cisco RV 120W implements WPA2-PSK, WPA2-ENT, and WEP encryption, along
with other security features including the disabling of SSID broadcasts, MAC-
based filtering, and allowing or denying “time of day” access per SSID. The Cisco
RV 120W supports Wi-Fi Multimedia (WMM) and Wi-Fi Multimedia Power Save
(WMM-PS) for wireless Quality of Service (QoS). It supports 802.1p, Differentiated
Services Code Point (DSCP), and Type of Service (ToS) for wired QoS, which can
improve the quality of your network when using delay-sensitive Voice over IP
(VoIP) applications and bandwidth-intensive video streaming applications.
With the Cisco RV 120W’s embedded web server, its settings can be configured
using the browser-based Device Manager. The Cisco RV 120W supports Internet
Explorer, Firefox, and Safari web browsers. The Cisco RV 120W also provides a
setup wizard and VPN wizard. The setup wizard allows you to easily configure the
Cisco RV 120W’s basic settings. You can use the VPN wizard to easily configure
VPN tunnels.

Introduction
Getting to Know the Cisco RV 120W
Cisco RV 120W Administration Guide 3
1
Getting to Know the Cisco RV 120W
Front Panel
POWER—The Power LED lights up green to indicate the device is powered on.
Flashes green when the power is coming on or software is being upgraded.
WAN LED—The WAN (Internet) LED lights up green when the device is connected
to your cable or DSL modem. The LED flashes green when the device is sending
or receiving data over the WAN port.
WIRELESS—The Wireless LED lights up green when the wireless module is
enabled. The LED is off when the wireless module is disabled. The LED flashes
green when the device is transmitting or receiving data on the wireless module.
LAN—These four LEDs correspond to the four LAN (Ethernet) ports of the Cisco
RV 120W. If the LED is continuously lit green, the Cisco RV 120W is connected to a
device through the corresponding port (1, 2, 3, or 4). The LED for a port flashes
green when the Cisco RV 120W is actively sending or receiving data over that
port.

Introduction
Getting to Know the Cisco RV 120W
Cisco RV 120W Administration Guide 4
1
Back Panel
RESET Button—The Reset button has two functions:
•If the Cisco RV 120W is having problems connecting to the Internet, press
the RESET button for less than five seconds with a paper clip or a pencil tip.
This is similar to pressing the reset button on your PC to reboot it.
•If you are experiencing extreme problems with the Cisco RV 120W and
have tried all other troubleshooting measures, press and hold in the RESET
button for 10 seconds. This will restore the factory defaults and clear all of
the Cisco RV 120W settings.
LAN Ports (1-4)—These ports provide a LAN connection to network devices,
such as PCs, print servers, or additional switches.
WAN Port—The WAN port is connected to your Internet device, such as a cable or
DSL modem.
ON/OFF Power Switch—Press this button to turn the Cisco RV 120W on and off.
When the button is pushed in, power is on.
Power Port—The power port is where you connect the AC power cable.

Introduction
Mounting the Cisco RV 120W
Cisco RV 120W Administration Guide 5
1
Mounting the Cisco RV 120W
You can place your Cisco RV 120W on a desktop or mount it on a wall.
Installation Guidelines
•Ambient Temperature—To prevent the device from overheating, do not
operate it in an area that exceeds an ambient temperature of
104°F (40°C).
•Air Flow—Be sure that there is adequate air flow around the device.
•Mechanical Loading—Be sure that the device is level and stable to avoid
any hazardous conditions.
For desktop placement, place the Cisco RV 120W device horizontally on a flat
surface so that it sits on its four rubber feet.
Wall Mounting
STEP 1 Determine where you want to mount the device and install two screws (not
supplied) that are 2-7/16 in. apart (approximately 61 mm). Mounting screws should
have a head that is approximately 5.5 mm in diameter and 2 mm deep, with a shaft
that is at least15.5 mm long and approximately 3.5 mm wide. (Your wall may
require shorter or longer screws, or drywall anchors.)
Do not mount the screw heads flush with the wall; the screw heads must fit inside
the back of the device.
STEP 2 With the back panel pointing up (if installing vertically), line up the device so that
the wall-mount slots on the bottom of the device line up with the two screws.
195114
Wall
mount
slots
2-7/16

Introduction
Mounting the Cisco RV 120W
Cisco RV 120W Administration Guide 6
1
STEP 3 Place the wall-mount slots over the screws and slide the device down until the
screws fit snugly into the wall-mount slots.

Introduction
Connecting the Equipment
Cisco RV 120W Administration Guide 7
1
Connecting the Equipment
Before you begin the installation, make sure that you have the following equipment
and services:
Required
•Functional Internet Connection (Broadband DSL or cable modem).
•Ethernet cable for WAN (Internet) connection.
•PC with functional network adapter (Ethernet connection) to run the Setup
Wizard or the Device Manager. The Setup Wizard is supported on Microsoft
Windows 2000, Windows XP, Windows Vista, and Windows 7. You must
have Microsoft Core XML Services (MSXML) software installed on the PC to
run the Setup Wizard. MSXML is available from the following location:
http://www.microsoft.com/windows/downloads/
The Device Manager is supported on the following web browsers:
-Microsoft Internet Explorer 6.0 and later
-Mozilla Firefox 3.0 and later
-Apple Safari 3.0 or later.
•Ethernet cable (provided) to connect the PC to the router for configuration.
•Software CD containing Setup Wizard (provided).
Optional
•Uninterruptible Power Supply (UPS) to provide backup power to essential
devices (strongly recommended).
•Ethernet cables for LAN interfaces, if you want to connect additional
devices.
Cisco recommends that you use the Setup Wizard to connect and configure your
Cisco RV 120W. If you do not want to use the setup wizard, skip to the “Manually
Connecting Your System” section on page 16.

Introduction
Connecting the Equipment
Cisco RV 120W Administration Guide 8
1
Using the Setup Wizard
Follow these steps to use the Cisco RV 120W Setup Wizard. The Setup Wizard
displays on-screen instructions that guide you through the installation, but you may
find it useful to refer to this document during installation.
NOTE You must connect one PC with an Ethernet cable for the purpose of the initial
configuration. After you complete the initial configuration, administrative tasks can
be performed using a wireless connection.
Starting the Wizard
STEP 1 Make sure that all of the network hardware is powered off, including the
Cisco RV 120W and cable or DSL modem.
STEP 2 Insert the CD that shipped with the Cisco RV 120W into the PC you are using to
configure the Cisco RV 120W. The Setup Wizard automatically begins.
STEP 3 Click Start to begin the installation.
STEP 4 Click the check box to accept the software license agreement and click Next.
STEP 5 The Setup Wizard verifies the network adapter on your PC is functional. If you
receive an error, view your PC’s network connections to make sure the network
adapter is working and click Back to test the connection again.
Next:
•If your network adapter is functional and you have not yet connected your
hardware, the Install Router window appears. (See Connecting Your
Hardware, page 9.)
•If your network adapter is functional, you have already connected your
hardware, and your Internet connection has been detected, the Secure Your
Router Settings window appears. (See Configuring Security, page 14.)

Introduction
Connecting the Equipment
Cisco RV 120W Administration Guide 9
1
Connecting Your Hardware
STEP 1 You should have an Ethernet cable connecting your PC to the cable or DSL
modem. Unplug one end of the cable from your PC and plug it into the port marked
“WAN” on the device. Click Next.

Introduction
Connecting the Equipment
Cisco RV 120W Administration Guide 10
1
STEP 2 Connect one end of a different Ethernet cable to one of the LAN (Ethernet) ports on
the back of the device. (In this example, the LAN 2 port is used.) Connect the other
end to an Ethernet port on the PC that is running the Setup Wizard. Click Next.
STEP 3 Power on the cable or DSL modem and wait until the connection is active.

Introduction
Connecting the Equipment
Cisco RV 120W Administration Guide 11
1
STEP 4 Connect the power adapter to the Cisco RV 120W power port. Click Next.
!
CAUTION Use only the power adapter that is supplied with the device. Using a different
power adapter could damage the device.
STEP 5 Plug the other end of the adapter into an electrical outlet.

Introduction
Connecting the Equipment
Cisco RV 120W Administration Guide 12
1
STEP 6 On the Cisco RV 120W, push in the ON/OFF POWER SWITCH button. The Setup
Wizard searches for the Cisco RV 120W.
The POWER LED on the front panel lights up green when the power adapter is
connected properly and the device is turned on.
Next:
•If your hardware connection is successful, but the Setup Wizard needs
more information about your Internet connection, the Enter Username and
Password window appears. (See Entering Login and Internet Connection
Information, page 13.)
•If your hardware connection is successful and the Setup Wizard
successfully detects your Internet connection, the Configure Router
window displays. (See Configuring Security, page 14.)