Cisco RV120W Instruction Manual

Cisco Small Business
RV120W Wireless-N VPN Firewall
ADMINISTRATION
GUIDE

© 2011 Cisco Systems, Inc. All rights reserved. 78-19307-02
Revised June 2011
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found
at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply
a partnership relationship between Cisco and any other company. (1005R)

Cisco RV120W Administration Guide 1
Contents
Chapter 1: Introduction 1
Product Overview 1
LAN Ethernet Interfaces 2
Wireless Access Point 2
Firewall and VPN Client Access 2
Wireless Distribution System 2
Virtual Networks 2
Security 3
Quality of Service 3
Configuration and Administration 3
Getting to Know the Cisco RV120W 4
Front Panel 4
Back Panel 5
Mounting the Cisco RV120W 6
Installation Guidelines 6
Wall Mounting 6
Connecting the Equipment 8
Setting Up the Cisco RV120W Using the Setup Wizard 12
Using the Getting Started Page 13
Initial Settings 14
Quick Access 14
Device Status 15
Other Resources 15
Navigating through the Pages 15
Saving Your Changes 17
Viewing the Help Files 18
Connecting Devices to Your Wireless Network 18
18

Cisco RV120W Administration Guide 2
Contents
Chapter 2: Configuring Networking 19
Configuring the WAN (Internet) Settings 19
Configuring the IPv4 WAN (Internet) 20
Configuring Automatic Configuration (DHCP) 20
Configuring Static IP 21
Configuring PPPoE 21
Configuring PPTP 22
Configuring L2TP 23
Configuring MTU Settings 24
Configuring the MAC Address 24
Configuring PPPoE Profiles 25
Configuring the LAN (Local Network) Settings 27
Configuring IPv4 LAN (Local Network) Settings 27
Configuring the Host Name 27
Configuring the IP Address 27
Configuring DHCP 28
Configuring the DNS Proxy 29
Configuring Virtual LAN (VLAN) Membership 30
Enabling VLANs 30
Creating a VLAN 30
Configuring Multiple VLAN Subnets 31
Configuring Static DHCP 32
Configuring Advanced DHCP Settings 33
Configuring Automatic Configuration Download 33
Adding a DHCP Client to Configuration File Map 34
Viewing DHCP Leased Clients 34
Configuring Routing 34
Choosing the Routing Mode 34
Viewing Routing Information 35
Configuring Static Routes 37
Configuring Dynamic Routing 38
Configuring Port Management 40
Configuring Dynamic DNS (DDNS) 40

Cisco RV120W Administration Guide 3
Contents
Configuring IPv6 42
Configuring the IP Mode 42
Configuring IPv6 WAN Settings 42
Configuring DHCPv6 42
Configuring a Static IP Address 43
Configuring IPv6 LAN Properties 43
Configuring IPv6 Address Pools 45
Configuring IPv6 Routing 45
Configuring Dynamic Routing 45
Configuring Static Routing 46
Configuring Tunneling 47
Viewing IPv6 Tunnel Information 47
Configuring Intra-Site Automatic Tunnel Addressing
Protocol (ISATAP) Tunnels 48
Configuring Router Advertisement 49
Configuring Router Advertisement Prefixes 50
Chapter 3: Configuring the Wireless Network 51
A Note About Wireless Security 51
Wireless Security Tips 52
General Network Security Guidelines 53
Understanding the Cisco RV120W’s Wireless Networks 54
Configuring Basic Wireless Settings 54
Configuring Radio, Mode, and Channel Settings 54
Configuring Wireless Security and Other Settings 55
Configuring Security 56
Configuring MAC Filtering 58
Configuring Wi-Fi Multimedia 59
Configuring Wireless Network (SSID) Scheduling 60
Configuring Advanced Wireless Settings 61
Configuring Wi-Fi Protected Setup 62
Configuring a Wireless Distribution System (WDS) 63

Cisco RV120W Administration Guide 4
Contents
Chapter 4: Configuring the Firewall 65
Cisco RV120W Firewall Features 65
Configuring Access Rules 67
Configuring the Default Outbound Policy 67
Creating an Access Rule 67
Configuring Attack Prevention 71
Configuring Content Filtering 72
Enabling Content Filtering 72
Blocking Web Components 73
Adding Trusted Domains 74
Configuring URL Blocking 74
Configuring Port Triggering 75
Configuring Port Forwarding 76
Configuring a DMZ Host 80
Configuring Advanced Firewall Settings 80
Configuring One-to-One Network Address Translation (NAT) 80
Configuring MAC Address Filtering 81
Configuring IP/MAC Address Binding 82
Creating Custom Services 83
Creating Firewall Schedules 84
Configuring Sessions 84
Configuring Internet Group Management Protocol (IGMP) 85
Configuring LAN (Local Network) Groups 86
Enabling Session Initiation Protocol Application-Level Gateway (SIP ALG) 87
Firewall Configuration Examples 87
Chapter 5: Configuring Virtual Private Networks (VPNs) and Security 92
Configuring VPNs 92
Creating Cisco QuickVPN Client Users 93

Cisco RV120W Administration Guide 5
Contents
Configuring a Basic VPN 93
Viewing the Default VPN Settings 94
Configuring Advanced VPN Parameters 94
Configuring IKE Policies 95
Configuring VPN Policies 98
Configuring VPN Clients 103
Monitoring VPN Tunnel Status 104
Configuring VPN Users 105
Configuring a PPTP Server 105
Adding New VPN Users 106
Configuring VPN Passthrough 106
Configuring Security 107
Using Certificates for Authentication 107
Generating New Certificates 108
Importing a Certificate from a File 108
Exporting the Router’s Current Certificate 109
Using the Cisco RV120W With a RADIUS Server 109
Configuring 802.1x Port-Based Authentication 110
Chapter 6: Configuring Quality of Service (QoS) 112
Configuring WAN QoS Profiles 112
Configuring Profile Binding 114
Configuring CoS Settings 115
Mapping CoS Settings to DSCP Values 116
Chapter 7: Administering Your Cisco RV120W 117
Configuring Password Rules 118
Using the Management Interface 118
Configuring Web Access 119
Configuring Remote Management 119
Configuring User Accounts 120
Setting the Session Timeout Value 120

Cisco RV120W Administration Guide 6
Contents
Configuring Network Management 121
Configuring SNMP 121
Editing SNMPv3 Users 121
Adding SNMP Traps 122
Configuring Access Control Rules 122
Configuring Additional SNMP Information 123
Configuring the WAN Traffic Meter 123
Using Network Diagnostic Tools 125
Using PING 125
Using Traceroute 125
Performing a DNS Lookup 126
Capturing and Tracing Packets 126
Configuring Logging 126
Configuring Logging Policies 127
Configuring Firewall Logs 127
Configuring Remote Logging 128
Configuring Email Logging 129
Configuring the Discovery Settings 130
Configuring Bonjour 130
Configuring UPnP 131
Configuring Time Settings 132
Backing Up and Restoring the System 132
Upgrading Firmware 134
Rebooting the Cisco RV120W 134
Restoring the Factory Defaults 135
Chapter 8: Viewing the Cisco RV120W Status 136
Viewing the Dashboard 136
Viewing the System Summary 139
Viewing the Wireless Statistics 142
IPsec Connection Status 143
Viewing VPN Client Connection Status 144

Cisco RV120W Administration Guide 7
Contents
Viewing Logs 145
Viewing Available LAN Hosts 146
Viewing Port Triggering Status 147
Viewing Port Statistics 148
Viewing Open Ports 149
Appendix A: Using Cisco QuickVPN for Windows 7, 2000, XP, or Vista 150
Overview 150
Before You Begin 150
Installing the Cisco QuickVPN Software 151
Installing from the CD-ROM 151
Downloading and Installing from the Internet 151
Using the Cisco QuickVPN Software 152
Appendix B: Where to Go From Here 154

1
Cisco RV120W Administration Guide 1
Introduction
This chapter describes the features of the Cisco RV120W, guides you through the
installation process, and gets you started using the Device Manager, a browser-
based utility for configuring the Cisco RV120W.
•Product Overview, page 1
•Getting to Know the Cisco RV120W, page 4
•Mounting the Cisco RV120W, page 6
•Connecting the Equipment, page 8
•Setting Up the Cisco RV120W Using the Setup Wizard, page 12
•Using the Getting Started Page, page 13
•Navigating through the Pages, page 15
•Saving Your Changes, page 17
•Viewing the Help Files, page 18
•Connecting Devices to Your Wireless Network, page 18
Product Overview
Thank you for choosing the Cisco Small Business RV120W Wireless-N VPN
Firewall.
The Cisco RV120W is an advanced Internet-sharing network solution for your
small business needs. It allows multiple computers in your office to share an
Internet connection through both wired and wireless connections.
The Cisco RV120W provides a Wireless-N access point, combined with support
for Virtual Private Networks (VPNs) to make your network more secure. Its 10/100
Ethernet WAN interface connects directly to your broadband DSL or Cable
modem.