Cisco Small Business RV220W Instruction Manual

Cisco Small Business
RV220W Wireless-N Network Security Firewall
ADMINISTRATION
GUIDE

© 2011 Cisco Systems, Inc. All rights reserved. 78-19743-01
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found
at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply
a partnership relationship between Cisco and any other company. (1005R)

Cisco RV220W Administration Guide 3
Contents
Chapter 1: Introduction 10
Product Overview 10
Getting to Know the Cisco RV220W 11
Front Panel 11
Back Panel 12
Mounting the Cisco RV220W 13
Placement Tips 13
Wall Mounting 13
Attaching the Antennas 16
Connecting the Equipment 16
Configuring the RV220W 18
Logging In 19
Using the Getting Started Page 20
Navigating through the Pages 21
Saving Your Changes 22
Viewing the Help Files 23
Configuration Next Steps 24
Verifying the Hardware Installation 24
Connecting to Your Wireless Network 25
25
Chapter 2: Configuring Networking 26
Configuring the WAN 26
Configuring the WAN for an IPv4 Network 26
Configuring a DHCP Connection 27
Configuring a Static IP Connection 28
Configuring a Point-to-Point Protocol over Ethernet Connection 28
Configuring a Point-to-Point Tunneling Protocol Connection 30
Configuring a Layer 2 Tunneling Protocol Connection 31
Configuring Maximum Transmit Unit 32
Configuring the Cisco RV220W MAC Address 32
Configuring the WAN for an IPv6 Network 33
Setting the Routing Mode 33

Cisco RV220W Administration Guide 4
Contents
Configuring WAN Settings 33
Creating PPPoE Profiles 35
Configuring the LAN 36
Changing the Host Name of Your RV220W 36
Changing the Default Cisco RV220W IP Address 37
Configuring DHCP 38
Configuring the LAN DNS Proxy 39
Configuring VLANs 39
Enabling VLANs 39
Creating a VLAN 40
Configuring Port VLANs 41
Associating the Wireless Port to VLANs 42
Configuring Multiple VLAN Subnets 43
Configuring IPv6 LAN Properties 44
Configuring IPv6 Address Pools 46
Adding a Static IP Address for a Device on the LAN 46
Viewing DHCP Leased Clients 47
Configuring a DMZ Host 47
Configuring Internet Group Management Protocol 48
Configuring Allowed Networks 49
Configuring Jumbo Frame Support 49
Configuring Routing 50
Choosing the Routing Mode 50
Viewing Routing Information 51
Configuring Static Routing 52
Configuring Dynamic Routing 53
Configuring Port Management 55
Configuring Dynamic DNS 56
Configuring IPv6 57
Configuring the Routing Mode 57
Configuring IPv6 Static Routing 57
Configuring IPv6-to-IPv4 Tunneling 59
Configuring 6-to-4 Tunneling 59

Cisco RV220W Administration Guide 5
Contents
Viewing the IPv6 Tunnels Status 59
Configuring Intra-Site Automatic Tunnel Addressing Protocol Tunnels 59
Configuring Router Advertisement 60
Chapter 3: Configuring the Wireless Network 63
About Wireless Security 63
Wireless Security Tips 64
General Network Security Guidelines 65
Understanding the Cisco RV220W’s Wireless Networks 66
Configuring Wireless Profiles 66
Configuring the Group Key Refresh Interval 69
Configuring RADIUS Authentication Parameters 69
Configuring Wi-Fi Multimedia 70
Configuring Access Points 70
Enabling or Disabling APs 70
Editing an AP’s Properties 71
Using MAC Filtering 72
Viewing AP Status 73
Configuring the Wireless Radio Properties 74
Configuring Basic Wireless Radio Settings 74
Configuring Advanced Wireless Radio Settings 75
Configuring a Wireless Distribution System 77
Chapter 4: Configuring the Firewall 78
Cisco RV220W Firewall Features 78
Configuring Basic Firewall Settings 80
Protecting from Attacks 80
Configuring Universal Plug and Play 81
Viewing UPnP Information 82
Enabling Session Initiation Protocol Application-Level Gateway 83
Configuring the Default Outbound Policy 83
Configuring Firewall Rules 84
Creating a Firewall Rule 84

Cisco RV220W Administration Guide 6
Contents
Managing Firewall Rules 89
Creating Custom Services 89
Creating Firewall Schedules 90
Blocking and Filtering Content and Applications 91
Blocking Web Applications and Components 91
Adding Trusted Domains 92
Adding Blocked URLs 93
Configuring MAC Address Filtering 93
Configuring IP/MAC Address Binding 94
Configuring Port Triggering 95
Restricting Sessions 96
Configuring Remote Management 97
Configuring One-to-One Network Address Translation 98
Using Cisco ProtectLink Web 99
Configuring Approved Clients 100
Configuring Approved URLs 101
Configuring Overflow Control 101
Configuring Web Reputation 102
Configuring URL Filtering 102
Viewing Cisco ProtectLink License Information 103
103
Chapter 5: Configuring Virtual Private Networks and Security 104
Configuring VPNs 105
Creating Cisco QuickVPN Client Users 105
Using the VPN Wizard 106
Viewing the Default Values 107
Configuring IP Security Policies 107
Configuring IKE Policies 108
Configuring VPN Policies 112
Configuring VPN Clients 117
Monitoring VPN Tunnel Status 117

Cisco RV220W Administration Guide 7
Contents
Configuring IPsec Users 118
Configuring VPN Passthrough 119
Configuring VPN Using a PPTP Server 119
Configuring the SSL VPN Server 120
Configuring SSL VPN Portal Layouts 120
Configuring SSL VPN Policies 121
Identifying Network Resources 123
Configuring Port Forwarding 124
Configuring the SSL VPN Client 125
Configuring Client Routes 126
Using the SSL VPN Client Portal 126
Configuring Security 127
Using Certificates for Authentication 127
Uploading CA Certificates 128
Uploading Self Certificates 128
Generating a Self Certificate Request 129
Downloading the Router’s Current Certificate 129
Using the Cisco RV220W With a RADIUS Server 130
Configuring 802.1x Port-Based Authentication 131
Chapter 6: Configuring Quality of Service 132
Configuring Bandwidth Profiles 133
Configuring Traffic Selectors or Flows 134
Configuring Traffic Metering 135
Configuring 802.1p 137
Configuring 802.1p to Queue Mapping 137
Configuring 802.1p CoS to DSCP Remarking 138
Chapter 7: Administering Your Cisco RV220W 139
Setting Password Complexity 140
Configuring User Accounts 140
Configuring Domains 141
Configuring Groups 142
Configuring Users 143

Cisco RV220W Administration Guide 8
Contents
Configuring Simple Network Management 144
Editing SNMPv3 Users 144
Adding SNMP Traps 145
Configuring Access Control Rules 146
Configuring Additional SNMP Information 146
Using Diagnostic Tools 147
Using PING 147
Using Traceroute 147
Performing a DNS Lookup 147
Capturing and Tracing Packets 147
Configuring Logging 148
Configuring Local Logging 148
Configuring Remote Logging 149
Configuring the Logging Type and Notification 151
Configuring E-Mailing of Log Events 151
Configuring Bonjour Discovery 152
Configuring VLAN Associations 152
Configuring Date and Time Settings 153
Backing Up and Restoring the System 153
Importing a CSV File 154
Upgrading Firmware 157
Rebooting the Cisco RV220W 158
Restoring the Factory Defaults 158
Chapter 8: Viewing the RV220W Status 159
Viewing the System Summary 160
Viewing the Wireless Statistics 163
Viewing the IPsec Connection Status 165
Viewing the QuickVPN Connection Status 166
Viewing Logs 167
Viewing Available LAN Hosts 167

Cisco RV220W Administration Guide 9
Contents
Viewing the Port Triggering Status 168
Viewing Interface Statistics 168
Viewing Port Statistics 169
Viewing Active Users 170
Viewing the SSL VPN Connection Information Status 170
Appendix A: Using Cisco QuickVPN 172
Overview 172
Before You Begin 172
Installing the Cisco QuickVPN Software 173
Installing from the CD-ROM 173
Downloading and Installing from the Internet 175
Using the Cisco QuickVPN Software 175
Appendix B: Where to Go From Here 178
Product Resources 178

1
Cisco RV220W Administration Guide 10
Introduction
This chapter provides information to familiarize you with the product features,
guide you through the installation process, and get started using the browser-
based Device Manager. It contains the following sections:
•Product Overview, page 10
•Getting to Know the Cisco RV220W, page 11
•Mounting the Cisco RV220W, page 13
•Attaching the Antennas, page 16
•Connecting the Equipment, page 16
•Configuring the RV220W, page 18
•Verifying the Hardware Installation, page 24
•Connecting to Your Wireless Network, page 25
Product Overview
Thank you for choosing the Cisco Small Business RV220W Wireless-N Network
Security Firewall. The Cisco RV220W is an advanced Internet-sharing network
solution for your small business needs. It allows multiple computers in your office
to share an Internet connection through both wired and wireless connections.
The RV220W Network Security Firewall delivers high-performance, high security,
wired and wireless connectivity—to the Internet, other offices, and employees
working remotely—to speed file transfers and help improve the productivity of
employees in a small office. Hybrid VPN capabilities, supporting both IP Security
(IPsec) and Secure Sockets Layer (SSL) VPN, provide flexibility to connect remote
offices as if they were physically attached to the network and extend controlled
network access to partners and others. Business-class security and optional
cloud-based web threat protection help keep the network and business assets
safe.