Cisco Small Business RV220W Instruction Manual

Cisco Small Business
RV220W Wireless-N Network Security Firewall
ADMINISTRATION
GUIDE

© 2011 Cisco Systems, Inc. All rights reserved. 78-19743-01 D0
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco RV220W Administration Guide 3
Contents
Chapter 1: Introduction 11
Product Overview 11
Configuring the RV220W 12
Logging In 12
Setting Up the Cisco RV220W Using the Setup Wizard 13
Using the Getting Started Page 13
Features of the User Interface 14
Suggested Next Steps 15
Chapter 2: Configuring Networking 16
WAN Settings for IPv4 16
Configuring the IPv4 WAN Settings 17
PPPoE Profiles for Point-to-Point Protocol over Ethernet Connections 20
Managing PPPoE Profiles 20
Adding and Editing PPPoE Profile Settings 21
LAN Configuration for IPv4 22
IPv4 LAN (Local Network) 22
VLAN Membership 24
Multiple VLAN Subnets 26
Viewing the Multiple VLAN Subnets Table 26
Entering the Multiple VLAN Subnets Properties 26
Static DHCP 28
Advanced DHCP Configuration 29
DHCP Leased Clients 30
Jumbo Frames 30
Routing 31
Routing Mode 31
Routing Table 32
Static Routes 33
Managing Static Routes 33
Configuring Static Routes 34
Dynamic Routing 35
Port Management 37

Cisco RV220W Administration Guide 4
Contents
Dynamic DNS 38
IPv6 39
IP Mode 39
IPv6 WAN (Internet) 40
Configuring IPv6 LAN Properties 41
Configuring IPv6 Static Routing 43
Managing IPv6 Static Routes 43
Configuring an IPv6 Static Route 44
Configuring IPv6-to-IPv4 Tunneling 45
Configuring an ISATAP Tunnel 46
Configuring Router Advertisement 46
RADVD Advertisement Prefixes 48
Managing Advertisement Prefixes 48
Adding and Editing Advertisement Prefixes 49
Chapter 3: Configuring the Wireless Network 50
About Wireless Security 50
Wireless Security Tips 51
General Network Security Guidelines 52
Basic Settings 53
Security Settings for Wireless Networks 56
MAC Filtering for Wireless Network Access Control 58
Connected Clients 59
Wi-Fi Multimedia and Quality of Service Settings 60
SSID Schedule for Network Availability 61
Advanced Settings 62
Wireless Distribution System (WDS) 63
Chapter 4: Firewall 64
Cisco RV220W Firewall Features 64
Access Rules 66
Setting the Default Outbound Policy and Managing Access Rules 66
Adding and Editing Access Rules 67

Cisco RV220W Administration Guide 5
Contents
Changing Access Rule Priorities 71
Attack Prevention 72
Content Filtering 73
URL Blocking 75
Port Triggering 76
Managing Port Triggering Rules 77
Adding and Editing Port Triggering Rules 77
Port Forwarding 78
Managing Port Forwarding Rules 78
Adding or Editing a Port Forwarding Rule 79
DMZ Host 82
Advanced Firewall Settings 82
One-to-One Network Address Translation (NAT) 83
Managing One-to-One NAT Rules 83
Adding or Editing a One-to-One NAT Rule 84
MAC Address Filtering 85
IP/MAC Address Binding 86
Custom Services 87
Managing Custom Services 87
Adding or Editing a Custom Service 88
Schedules for Firewall Rules and Port Forwarding Rules 89
Managing Schedules 89
Adding or Editing a Schedule 90
Session Settings 91
Internet Group Management Protocol (IGMP) 92
Enabling IGMP and Managing the Allowed Networks Table 92
Adding or Editing the Allowed Networks 93
SIP ALG 93
Firewall Configuration Examples 94
Chapter 5: Cisco ProtectLink Web 98
Getting Started with Cisco ProtectLink Web 98
Global Settings for Approved URLs and Clients 99

Cisco RV220W Administration Guide 6
Contents
Approved Clients 99
Approved URLs 100
Web Protection 101
Overflow Control 101
Web Reputation 102
URL Filtering 103
Updating the ProtectLink License 104
Summary 104
Renewal 105
Chapter 6: Configuring Virtual Private Networks (VPNs) and Security 106
Configuring VPNs 107
Basic VPN Setup 109
Configuring Advanced VPN Parameters 111
Managing IKE and VPN Policies 112
Configuring IKE Policies 113
Configuring VPN Policies 117
Configuring VPN Users 122
Configuring VPN Passthrough 124
SSL VPN Server 124
Access Options for SSL VPN 125
Security Tips for SSL VPN 125
Elements of SSL VPN 126
Portal Layouts 126
Managing Portal Layouts 127
Adding or Editing a Portal Layout 127
SSL VPN Policies 129
About SSL VPN Policies 129
Managing SSL VPN Policies 129
Configuring an SSL VPN Policy 130
Resources for SSL VPN 132
Managing Resources 132
Configuring a Resource 132

Cisco RV220W Administration Guide 7
Contents
SSL VPN Port Forwarding 133
Managing Applications and Host Names for Port Forwarding 133
Configuring a TCP Application for SSL VPN Port Forwarding 134
Configuring Host Name Resolution for Port Forwarding 135
SSL VPN Tunnel Client Configuration 136
SSL VPN Client 136
Configured Client Routes for Split Tunnel Mode 138
Managing Client Routes 138
Configuring a Client Route 139
Viewing the SSL VPN Client Portal 139
Chapter 7: Configuring Security 141
Using SSL Certificates for Authentication 141
Importing a Trusted Certificate from a File 143
Importing an Active Self Certificate from a File 143
Generating a Certificate Request 144
Viewing a Certificate Request 145
Using the Cisco RV220W With a RADIUS Server 146
Managing RADIUS Server Configurations 146
Adding or Editing a RADIUS Server Configuration 147
Configuring 802.1x Port-Based Authentication 148
Chapter 8: Configuring Quality of Service 149
WAN QoS Profiles 149
Profile Binding 151
Managing Profile Binding Rules 151
Configuring a Profile Binding Rule 152
CoS Settings 153
CoS Settings for Traffic Forwarding Queues 153
CoS to DSCP Remarking 154
Chapter 9: Administering Your Cisco RV220W 155
Password Rules for Password Complexity 156

Cisco RV220W Administration Guide 8
Contents
Remote Management 157
User Management 158
Domains 158
Managing Domains 159
Configuring a Domain 159
Groups 161
Managing Groups for a Domain 161
Configuring a Group 162
Users 163
Managing Users 163
Configuring a User 164
User Log in Policies 165
User Log in Policies by Client Browser 166
User Log in Policies by IP Address 167
Network Management (SNMP) 169
SNMP Users and Trap Settings 169
Managing User Security Settings and Trap Settings 169
Configuring the User Security Settings for SNMP 170
Configuring SNMP Traps 171
SNMP System Information 171
WAN Traffic Meter 172
Diagnostics 174
Network Tools 174
Capture Packets 176
Logging 176
Logging Policies 176
Managing Logging Policies 177
Configuring a Logging Policy 177
Firewall Logs 178
Remote Logging Configuration 180
Discovery Settings 182
Discovery Settings for Bonjour 182
UPnP Discovery 183
Time Settings 184

Cisco RV220W Administration Guide 9
Contents
Backing Up or Restoring a Configuration 185
CSV File Import for User Accounts 186
Creating a CSV File 186
Importing a CSV File 189
Firmware Upgrade 189
Rebooting the Cisco RV220W 190
Restoring the Factory Defaults 190
Chapter 10: Viewing the RV220W Status 192
Viewing the Dashboard 193
Viewing the System Summary 196
Viewing the Wireless Statistics 199
Viewing the IPsec Connection Status 200
Viewing the VPN Client Connection Status 201
Viewing Logs 202
Viewing Available LAN Hosts 202
Viewing the Port Triggering Status 203
Viewing Interface Statistics 203
Viewing Port Statistics 204
Viewing Open Ports 206
Viewing Active Users 206
Viewing the SSL VPN Connection Information Status 207
Appendix A: Installing the Cisco RV220W 209
Getting to Know the Cisco RV220W 209
Front Panel 209
Back Panel 210
Mounting the Cisco RV220W 211
Placement Tips 211
Wall Mounting 211

Cisco RV220W Administration Guide 10
Contents
Attaching the Antennas 214
Connecting the Equipment 214
Verifying the Hardware Installation 216
Connecting to Your Wireless Network 217
Appendix B: Using Cisco QuickVPN 218
Overview 218
Before You Begin 218
Installing the Cisco QuickVPN Software 219
Installing from the CD-ROM 219
Downloading and Installing from the Internet 221
Using the Cisco QuickVPN Software 221
Appendix C: Glossary 224
Appendix D: Where to Go From Here 228