Cisco Small Business RV220W Instruction Manual

Cisco Small Business
RV220W Wireless-N Network Security Firewall
ADMINISTRATION
GUIDE

© 2011 Cisco Systems, Inc. All rights reserved. 78-19743-01
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found
at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply
a partnership relationship between Cisco and any other company. (1005R)

Cisco RV220W Administration Guide 3
Contents
Chapter 1: Introduction 10
Product Overview 10
Getting to Know the Cisco RV220W 11
Front Panel 11
Back Panel 12
Mounting the Cisco RV220W 13
Placement Tips 13
Wall Mounting 13
Attaching the Antennas 16
Connecting the Equipment 16
Configuring the RV220W 18
Logging In 19
Using the Getting Started Page 20
Navigating through the Pages 21
Saving Your Changes 22
Viewing the Help Files 23
Configuration Next Steps 24
Verifying the Hardware Installation 24
Connecting to Your Wireless Network 25
25
Chapter 2: Configuring Networking 26
Configuring the WAN 26
Configuring the WAN for an IPv4 Network 26
Configuring a DHCP Connection 27
Configuring a Static IP Connection 28
Configuring a Point-to-Point Protocol over Ethernet Connection 28
Configuring a Point-to-Point Tunneling Protocol Connection 30
Configuring a Layer 2 Tunneling Protocol Connection 31
Configuring Maximum Transmit Unit 32
Configuring the Cisco RV220W MAC Address 32
Configuring the WAN for an IPv6 Network 33
Setting the Routing Mode 33

Cisco RV220W Administration Guide 4
Contents
Configuring WAN Settings 33
Creating PPPoE Profiles 35
Configuring the LAN 36
Changing the Host Name of Your RV220W 36
Changing the Default Cisco RV220W IP Address 37
Configuring DHCP 38
Configuring the LAN DNS Proxy 39
Configuring VLANs 39
Enabling VLANs 39
Creating a VLAN 40
Configuring Port VLANs 41
Associating the Wireless Port to VLANs 42
Configuring Multiple VLAN Subnets 43
Configuring IPv6 LAN Properties 44
Configuring IPv6 Address Pools 46
Adding a Static IP Address for a Device on the LAN 46
Viewing DHCP Leased Clients 47
Configuring a DMZ Host 47
Configuring Internet Group Management Protocol 48
Configuring Allowed Networks 49
Configuring Jumbo Frame Support 49
Configuring Routing 50
Choosing the Routing Mode 50
Viewing Routing Information 51
Configuring Static Routing 52
Configuring Dynamic Routing 53
Configuring Port Management 55
Configuring Dynamic DNS 56
Configuring IPv6 57
Configuring the Routing Mode 57
Configuring IPv6 Static Routing 57
Configuring IPv6-to-IPv4 Tunneling 59
Configuring 6-to-4 Tunneling 59

Cisco RV220W Administration Guide 5
Contents
Viewing the IPv6 Tunnels Status 59
Configuring Intra-Site Automatic Tunnel Addressing Protocol Tunnels 59
Configuring Router Advertisement 60
Chapter 3: Configuring the Wireless Network 63
About Wireless Security 63
Wireless Security Tips 64
General Network Security Guidelines 65
Understanding the Cisco RV220W’s Wireless Networks 66
Configuring Wireless Profiles 66
Configuring the Group Key Refresh Interval 69
Configuring RADIUS Authentication Parameters 69
Configuring Wi-Fi Multimedia 70
Configuring Access Points 70
Enabling or Disabling APs 70
Editing an AP’s Properties 71
Using MAC Filtering 72
Viewing AP Status 73
Configuring the Wireless Radio Properties 74
Configuring Basic Wireless Radio Settings 74
Configuring Advanced Wireless Radio Settings 75
Configuring a Wireless Distribution System 77
Chapter 4: Configuring the Firewall 78
Cisco RV220W Firewall Features 78
Configuring Basic Firewall Settings 80
Protecting from Attacks 80
Configuring Universal Plug and Play 81
Viewing UPnP Information 82
Enabling Session Initiation Protocol Application-Level Gateway 83
Configuring the Default Outbound Policy 83
Configuring Firewall Rules 84
Creating a Firewall Rule 84

Cisco RV220W Administration Guide 6
Contents
Managing Firewall Rules 89
Creating Custom Services 89
Creating Firewall Schedules 90
Blocking and Filtering Content and Applications 91
Blocking Web Applications and Components 91
Adding Trusted Domains 92
Adding Blocked URLs 93
Configuring MAC Address Filtering 93
Configuring IP/MAC Address Binding 94
Configuring Port Triggering 95
Restricting Sessions 96
Configuring Remote Management 97
Configuring One-to-One Network Address Translation 98
Using Cisco ProtectLink Web 99
Configuring Approved Clients 100
Configuring Approved URLs 101
Configuring Overflow Control 101
Configuring Web Reputation 102
Configuring URL Filtering 102
Viewing Cisco ProtectLink License Information 103
103
Chapter 5: Configuring Virtual Private Networks and Security 104
Configuring VPNs 105
Creating Cisco QuickVPN Client Users 105
Using the VPN Wizard 106
Viewing the Default Values 107
Configuring IP Security Policies 107
Configuring IKE Policies 108
Configuring VPN Policies 112
Configuring VPN Clients 117
Monitoring VPN Tunnel Status 117

Cisco RV220W Administration Guide 7
Contents
Configuring IPsec Users 118
Configuring VPN Passthrough 119
Configuring VPN Using a PPTP Server 119
Configuring the SSL VPN Server 120
Configuring SSL VPN Portal Layouts 120
Configuring SSL VPN Policies 121
Identifying Network Resources 123
Configuring Port Forwarding 124
Configuring the SSL VPN Client 125
Configuring Client Routes 126
Using the SSL VPN Client Portal 126
Configuring Security 127
Using Certificates for Authentication 127
Uploading CA Certificates 128
Uploading Self Certificates 128
Generating a Self Certificate Request 129
Downloading the Router’s Current Certificate 129
Using the Cisco RV220W With a RADIUS Server 130
Configuring 802.1x Port-Based Authentication 131
Chapter 6: Configuring Quality of Service 132
Configuring Bandwidth Profiles 133
Configuring Traffic Selectors or Flows 134
Configuring Traffic Metering 135
Configuring 802.1p 137
Configuring 802.1p to Queue Mapping 137
Configuring 802.1p CoS to DSCP Remarking 138
Chapter 7: Administering Your Cisco RV220W 139
Setting Password Complexity 140
Configuring User Accounts 140
Configuring Domains 141
Configuring Groups 142
Configuring Users 143

Cisco RV220W Administration Guide 8
Contents
Configuring Simple Network Management 144
Editing SNMPv3 Users 144
Adding SNMP Traps 145
Configuring Access Control Rules 146
Configuring Additional SNMP Information 146
Using Diagnostic Tools 147
Using PING 147
Using Traceroute 147
Performing a DNS Lookup 147
Capturing and Tracing Packets 147
Configuring Logging 148
Configuring Local Logging 148
Configuring Remote Logging 149
Configuring the Logging Type and Notification 151
Configuring E-Mailing of Log Events 151
Configuring Bonjour Discovery 152
Configuring VLAN Associations 152
Configuring Date and Time Settings 153
Backing Up and Restoring the System 153
Importing a CSV File 154
Upgrading Firmware 157
Rebooting the Cisco RV220W 158
Restoring the Factory Defaults 158
Chapter 8: Viewing the RV220W Status 159
Viewing the System Summary 160
Viewing the Wireless Statistics 163
Viewing the IPsec Connection Status 165
Viewing the QuickVPN Connection Status 166
Viewing Logs 167
Viewing Available LAN Hosts 167

Cisco RV220W Administration Guide 9
Contents
Viewing the Port Triggering Status 168
Viewing Interface Statistics 168
Viewing Port Statistics 169
Viewing Active Users 170
Viewing the SSL VPN Connection Information Status 170
Appendix A: Using Cisco QuickVPN 172
Overview 172
Before You Begin 172
Installing the Cisco QuickVPN Software 173
Installing from the CD-ROM 173
Downloading and Installing from the Internet 175
Using the Cisco QuickVPN Software 175
Appendix B: Where to Go From Here 178
Product Resources 178

1
Cisco RV220W Administration Guide 10
Introduction
This chapter provides information to familiarize you with the product features,
guide you through the installation process, and get started using the browser-
based Device Manager. It contains the following sections:
•Product Overview, page 10
•Getting to Know the Cisco RV220W, page 11
•Mounting the Cisco RV220W, page 13
•Attaching the Antennas, page 16
•Connecting the Equipment, page 16
•Configuring the RV220W, page 18
•Verifying the Hardware Installation, page 24
•Connecting to Your Wireless Network, page 25
Product Overview
Thank you for choosing the Cisco Small Business RV220W Wireless-N Network
Security Firewall. The Cisco RV220W is an advanced Internet-sharing network
solution for your small business needs. It allows multiple computers in your office
to share an Internet connection through both wired and wireless connections.
The RV220W Network Security Firewall delivers high-performance, high security,
wired and wireless connectivity—to the Internet, other offices, and employees
working remotely—to speed file transfers and help improve the productivity of
employees in a small office. Hybrid VPN capabilities, supporting both IP Security
(IPsec) and Secure Sockets Layer (SSL) VPN, provide flexibility to connect remote
offices as if they were physically attached to the network and extend controlled
network access to partners and others. Business-class security and optional
cloud-based web threat protection help keep the network and business assets
safe.

Introduction
Getting to Know the Cisco RV220W
Cisco RV220W Administration Guide 11
1
Getting to Know the Cisco RV220W
Front Panel
POWER—The Power light is green to indicate the unit is powered on. The light
flashes green when the RV220W starts up.
DIAG—If the DIAG light is off, the RV220W is ready. The light blinks red during
firmware upgrades.
DMZ—When the DMZ light is green, DMZ is enabled. When the light is off, DMZ is
disabled.
WIRELESS—The Wireless light is green when the wireless module is enabled. The
light is off when the wireless module is disabled. The light flashes green when the
RV220W is transmitting or receiving data on the wireless module.
LAN—Each of the four LAN (Ethernet) ports of the RV220W has a column in which
the lights are displayed. Lights appear in the rows marked 10, 100, and 1000 to
identify the type of Ethernet interface that is active on the RV220W. For example, if
the light appears next to 100 in the LAN1 column, the RV220W’s LAN1 port is using
a 100BASE-T connection. If the light appears next to 1000 in the LAN1 column, the
RV220W’s LAN1 port is using a 1000BASE-T (Gigabit Ethernet) connection.
If the lights are continuously green, the RV220W is connected to a device through
the corresponding port (1, 2, 3, or 4). The light for a port flashes green when the
RV220W is actively sending or receiving data over that port.
WAN—The WAN (Internet) light is green when the unit is connected to your cable
or DSL modem. The light flashes green when the unit is sending or receiving data
over the WAN port.

Introduction
Getting to Know the Cisco RV220W
Cisco RV220W Administration Guide 12
1
Back Panel
RESET Button—The RESET button has two functions:
•If the RV220W has problems connecting to the Internet, press the RESET
button for at least 3 seconds but no more than 10 seconds with a paper clip
or a pencil tip. This is similar to pressing the reset button on your PC to
reboot it.
•If you experience problems with the RV220W and have tried all other
troubleshooting measures, press and hold in the RESET button for more
than 10 seconds. This reboots the unit and restores the factory defaults.
Changes that you have made to the RV220W settings are lost.
WAN Port—The WAN port is connected to your Internet device, such as a cable
or DSL modem.
LAN Ports (1-4)—These ports provide a LAN connection to network devices,
such as PCs, print servers, or switches.
Power Port—The power port is where you connect the provided power adapter.
Power Switch—Press this button up (toward the line) to turn the device on. Press
this button down (toward the circle) to turn the device off.

Introduction
Mounting the Cisco RV220W
Cisco RV220W Administration Guide 13
1
Mounting the Cisco RV220W
You can place your Cisco RV220W on a desktop or mount it on a wall.
Placement Tips
•Ambient Temperature—To prevent the RV220W from overheating, do not
operate it in an area that exceeds an ambient temperature of 104°F (40°C).
•Air Flow—Be sure that there is adequate air flow around the RV220W.
•Mechanical Loading—Be sure that the RV220W is level and stable to avoid
any hazardous conditions.
For desktop placement, place the RV220W horizontally on a flat surface so that it
sits on its four rubber feet.
Wall Mounting
The RV220W can be wall-mounted. You will need the following (not supplied):
•2 screws as defined below
•2 drywall anchors (if installing onto drywall)
The dimensions for these parts are as follows:
WARNING Insecure mounting might damage the device or cause injury. Cisco is not
responsible for damages incurred by insecure wall-mounting.
10.30 to 0.32 in
7.7 to 8.2 mm
20.86 to 0.88 in
21.8 to 22.3 mm
30.26 to 0.28 in
6.5 to 7.1 mm
40.61 to 0.63 in
15.5 to 16 mm
1
2
4
3
196243

Introduction
Mounting the Cisco RV220W
Cisco RV220W Administration Guide 14
1
To mount the firewall to the wall:
STEP 1 Determine where you want to mount the firewall. Verify that the surface is smooth,
flat, dry, and sturdy. Take into account the dimensions of the RV220W and allow for
3 inches (76.2 mm) of clearance around it.
STEP 2 For horizontal mounting, drill two pilot holes into the surface 5-7/8 inches (150 mm)
apart. For vertical mounting, drill two pilot holes into the surface 4-1/4 inches
(108 mm) apart.
STEP 3 (Optional) If using drywall anchors, hammer into holes.
STEP 4 Insert a screw into each hole in the surface, leaving a gap between the surface
and the base of the screw head of at least 0.1 inches (3 mm). Do not mount the
screw heads flush with the surface; the screw heads must fit inside the back of the
unit.
RV220W
Wireless N Network Security Firewall
279937
Horizontal
Wall mount
slots
5-7/8"
Vertical
Wall mount
slots
4-1/4"

Introduction
Mounting the Cisco RV220W
Cisco RV220W Administration Guide 15
1
STEP 5 With the back panel pointing up (if installing horizontally), line up the unit so that the
wall-mount slots on the bottom of the unit line up with the two screws.
If installing vertically, hold the left side of the unit pointing up and line up the unit so
that the wall-mount slots on the bottom of the unit line up with the two screws.
279938
RV220W
Wireless N Network Security Firewall
POW ER DIAG DMZ W IRELESS
SmallBusine ss
RV 220W
LAN
100
10
RV220W
Wireless N Network Security Firewall
POWER
12VDC
1.
00A
WA
N
RESET LAN
1LAN
2LAN
3LAN
4
RV2
ork Security
DMZ
DMZ
WIREL
WIREL
V2
ty
Wireless N Networ
LESS
LESS
SmallBusine ss
RV 220W
LAN
100
10
RV220W
Wireless N Network Security Firewall
or
LE
LE
ork
EL
EL
ork
ELE
LE

Introduction
Attaching the Antennas
Cisco RV220W Administration Guide 16
1
Attaching the Antennas
The RV220W ships with two removable dual-band antennas.
To attach an external antenna:
STEP 1 Hold the antenna perpendicular to the round screw hole on the back of the unit.
STEP 2 Screw the antenna clockwise until it is firmly secured to the RV220W.
STEP 3 Repeat these steps to secure the second antenna.
STEP 4 Put the antennas in the “V” orientation.
Connecting the Equipment
Before you begin the installation, make sure that you have the following equipment
and services:
Required
•Functional Internet Connection (Broadband DSL or cable modem).
•Ethernet cable for WAN (Internet) connection.
•PC with functional network adapter (Ethernet connection) to run the Device
Manager. The Device Manager is supported on the following web browsers:
-Microsoft Internet Explorer 6.0 or later
-Mozilla Firefox 3.0 or later
-Apple Safari 3.0 or later
•Ethernet cable (provided) to connect the PC to the RV220W for
configuration.
Optional
•Uninterruptible Power Supply (UPS) to provide backup power to essential
devices (strongly recommended).
•Ethernet cables for LAN interfaces, if you want to connect additional
devices.

Introduction
Connecting the Equipment
Cisco RV220W Administration Guide 17
1
STEP 1 Connect one end of an Ethernet cable to the WAN port of the RV220W and the
other end to the Ethernet port of your cable or DSL modem.
STEP 2 Connect one end of a different Ethernet cable to one of the LAN (Ethernet) ports on
the back of the unit. (In this example, the LAN 2 port is used.) Connect the other
end to an Ethernet port on the PC that you will use to run the web-based Device
Manager.
STEP 3 Power on the cable or DSL modem and wait until the connection is active.

Introduction
Configuring the RV220W
Cisco RV220W Administration Guide 18
1
STEP 4 Connect the power adapter to the RV220W Power port.
!
CAUTION Use only the power adapter (12V, 1A) that is supplied with the unit. Using a different
power adapter could damage the unit.
STEP 5 Plug the other end of the adapter into an electrical outlet. You may need to use a
specific plug (supplied) for your country.
STEP 6 On the RV220W, push the power button to the on position to turn on the RV220W.
The POWER light on the front panel is green when the power adapter is
connected properly and the unit is turned on.
Configuring the RV220W
After connecting your equipment, use the web-based Device Manager to
configure your RV220W. The Cisco RV220W tries to automatically detect and
configure your Internet settings. However, in some cases you might need to
manually configure some settings using the Device Manager.
You should also, at a minimum, change the default administrator name and
password, and set up wireless security.

Introduction
Configuring the RV220W
Cisco RV220W Administration Guide 19
1
Logging In
STEP 1 Power on the PC that you connected to the LAN2 port in Step 2 of the Connecting
the Equipment section. Your PC becomes a DHCP client of the RV220W and
receives an IP address in the 192.168.1.xxx range.
NOTE The default gateway (LAN IP address) of the RV220W is 192.168.1.1.
Use this IP address to connect to the RV220W. Also, set your PC to obtain its
IP address from a DHCP server.
NOTE RV220W uses Bonjour to advertise its record information to any
browsing device attached to its network. As a result, the Bonjour and FindIt
applications running on the connected PC automatically discovers the
RV220W. The RV220W should be available and accessible from the Bonjour
and FindIt device lists on the connected PC.
STEP 2 Start a web browser on your PC.
STEP 3 In the Address bar, enter the IP address of the RV220W.
A message appears about the site’s security certificate. The RV220W uses a self
security certificate and this message appears because the RV220W is not known
to your PC.
STEP 4 You can safely click Continue (or the option shown on your particular web
browser) to go to the web site.
STEP 5 When the login page appears, enter the user name and password. The default
user name is cisco. The default password is cisco. Passwords are case sensitive.

Introduction
Configuring the RV220W
Cisco RV220W Administration Guide 20
1
NOTE For security reasons, change the default user name and password as soon as
possible. See the Configuring User Accounts section.
STEP 6 Click Log In.
Using the Getting Started Page
The Getting Started page displays some of the most common configuration tasks.
Click these underlined tasks to view the configuration windows. You can access
the following tasks from the Getting Started page:
Initial Settings
•Configure WAN Settings—See Configuring the WAN for an IPv4
Network, page 26.
•Configure LAN Settings—See Configuring the LAN, page 36.
•Review Wireless Profile and Set Security Settings—See Configuring
Access Points, page 70.
•Add VPN Clients—See Configuring IPsec Users, page 118.
Quick Access
•Upgrade Device Software—See Upgrading Firmware, page 157.
•Configure Site to Site VPN—See Using the VPN Wizard, page 106.
•Configure Remote Management Access—See Configuring Remote
Management, page 97.
Device Status
•System Summary—See Viewing the System Summary, page 160.
•Wireless Status—See Viewing the Wireless Statistics, page 163.
•VPN Status—See Viewing the IPsec Connection Status, page 165.
To get support for your device, click the Support link at the bottom of the page. To
visit the online support forums, click Forums.
To prevent the Getting Started page from showing when the Device Manager is
started, check the Don’t show this on start-up box.