Cisco Small Business Pro series Instruction Manual

REVIEW DRAFT — CISCO CONFIDENTIAL
Cisco Small Business Pro
SRP521 Services Ready Platform VoIP Gateway
ADMINISTRATION
GUIDE

© 2009 Cisco Systems, Inc. All rights reserved. OL-20474-01
REVIEW DRAFT — CISCO CONFIDENTIAL
CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco Ironport, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco Nurse Connect, Cisco Stackpower,
Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flip Video, Flip Video
(Design), Flipshare (Design), Flip Ultra, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Store, and
Flip Gift Card are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP,
CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity,
Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS,
iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking
Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to
Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States
and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0907R)

SRP 521 VoIP Gateway Administration Guide 3
REVIEW DRAFT — CISCO CONFIDENTIAL
Contents
Chapter 1: Introduction to the Gateway 7
Feature Overview 7
Product Overview 7
SRP521 Front Panel 8
SRP521 Back Panel 9
Side Panels 10
Top View 11
Chapter 2: The Home Menu 12
Quick Setup Instructions 12
Starting the Setup Wizard 12
Chapter 3: Setting up the Interfaces of the Gateway 14
Setting up the WAN Interface 14
Internet Setup 14
Mobile Network 16
Connection Recovery 19
Setting up the LAN Interface 22
DHCP Server Pool Setting 22
Bridge/VLAN Setting 26
Port Setting 28
Setting up the Wireless LAN 29
Basic Wireless Settings 29
Wireless Protected Setup 32
WPS Method 1 32
WPS Method 2 32
WPS Method 3 33
Wireless Security 35
Wireless MAC Filter 38
Advanced Wireless Settings 40
WMM Setting 44
Using the Loopback Interface 45

SRP 521 VoIP Gateway Administration Guide 4
REVIEW DRAFT — CISCO CONFIDENTIAL
Contents
Chapter 4: Configuring the Network 47
Static Routing 47
RIP 49
Intervlan Routing 50
NAT 50
Setting 50
Single Port Forwarding 51
Port Range Forwarding 53
Port Range Triggering 54
ALG Control 56
QoS 56
Bandwidth Control 56
QoS Policy 57
QoS Settings 57
Firewall 59
Firewall Filter 59
Internet Access Control 61
PPPoE Relay 64
DDNS 65
IGMP 69
UPnP 70
CDP Setting 71
Chapter 5: Voice Settings 73
Info 73
System 74
Chapter 6: Configuring VPN 75
IKE Policy 75
IPSec Policy 77
GRE Tunnel 80

SRP 521 VoIP Gateway Administration Guide 5
REVIEW DRAFT — CISCO CONFIDENTIAL
Contents
VPN Passthrough 83
Chapter 7: Administration Settings 85
Web Access Management 85
Settings 85
Remote Access Rule 87
Remote Management 89
TR069 89
SNMP 91
Local TFTP 92
Time Setup 93
User List 95
Log 96
Factory Defaults 97
Firmware Upgrade 98
Backup & Restore 99
Backup Configuration 99
Restore Configuration 100
Reboot 101
Chapter 8: Using Gateway Diagnostics 103
Ping Test 103
Traceroute Test 104
Chapter 9: Viewing the Gateway Status 106
Router Settings 106
Firewall Status 108
Interface Information 110
Wireless Client Information 111
Mobile Network 112
DHCP Server Information 115

SRP 521 VoIP Gateway Administration Guide 6
REVIEW DRAFT — CISCO CONFIDENTIAL
Contents
QoS status 116
Routing table 117
ARP Table 119
CDP Neighbor Information 120
Appendix A: Where to Go From Here 121
Appendix B: Specifications 123

1
SRP 521 VoIP Gateway Administration Guide 7
REVIEW DRAFT — CISCO CONFIDENTIAL
Introduction to the Gateway
This chapter provides information to familiarize you with the product features and
get started using the web-based Configuration Utility.
•Feature Overview, page 7
•Product Overview, page 7
Feature Overview
Thank you for choosing the Cisco Small Business Pro SRP521Services Ready
Platform VoIP Gateway. The gateway has the features needed for small business.
Its WAN port and four LAN ports support 10/100 Mbps speeds, it has two ports to
connect to analog telephone Service (PSTN), and supports 802.11b/g/n wireless
networking.
Product Overview
The SRP521, a member of the Cisco Small Business Pro family, is a unified
communications solution for small businesses that provides voice, data, video,
security, and wireless capabilities.
With its web-based interface, the SRP521 is easy to setup and configure.

Introduction to the Gateway
Product Overview
SRP 521 VoIP Gateway Administration Guide 8
1
REVIEW DRAFT — CISCO CONFIDENTIAL
SRP521 Front Panel
LED Description
POWER/SYS Solid green indicates that the SRP521 is powered on.
Slow green flash indicates that the SRP521 is booting.
LAN Ports 1 to 4 Solid green indicates link. Green flash indicates link
traffic.
WAN Solid green indicates link. Green flash indicates link
traffic.
WIRELESS Solid green indicates the radio is operational. Green flash
indicates wireless traffic.
USB Solid green indicates USB device is operational. Green
flash indicates device failure or unsupported device.
WPS Solid green indicates WiFi Protected Setup success.
Slow green flash indicates setup in progress. Fast green
flash indicates a setup error.
276377
LANPOWER/SYS WAN PHONE USB WPSWIRELESS
Cisco Small Business Pro
SRP521
12 2143

Introduction to the Gateway
Product Overview
SRP 521 VoIP Gateway Administration Guide 9
1
REVIEW DRAFT — CISCO CONFIDENTIAL
SRP521 Back Panel
Feature Description
PHONE Ports Use these ports to connect analog phones.
FXO LINE Port Use this port to connect to the Public Switched Telephone
Network (PSTN) which is the analog telephone service
network that traditional phone service uses.
WAN Port Use this port to connect the SRP521 to your WAN or DSL
Internet connection.
LAN Ports 1 to 4 Use these ports to connect to a network device.
On/Off Switch Use this switch to power the SRP521 on or off.
12 V DC Power Use this port to connect the power adapter.
276375
12VDC
LAN (10/100)WAN (10/100)
21 1234
LINE (FXO)PHONE (FXS)
WAN
Port
On/Off
Switch
FXO
Line
Port
Phone
Ports
12V DC
Power
LAN
Ports

Introduction to the Gateway
Product Overview
SRP 521 VoIP Gateway Administration Guide 10
1
REVIEW DRAFT — CISCO CONFIDENTIAL
Side Panels
Feature Description
RESET Button Press this button for 10 seconds to reset the SRP521.
USB Port Use this port to connect a compatible 3G USB device. For
a list of compatible 3G USB modems please check the
support community at cisco.com/go/smallbizsupport.
Antenna SRP521 Wi-Fi antenna.
276380
USB
RESET
Reset
button
USB
connector
276381

Introduction to the Gateway
Product Overview
SRP 521 VoIP Gateway Administration Guide 11
1
REVIEW DRAFT — CISCO CONFIDENTIAL
Top View
Feature Description
WPS Button To automatically configure wireless security for devices
that support Wi-Fi Protected Setup (WPS), press and hold
this button until the WPS LED blinks.
NOTE The device being configured by WPS should be
physically close to the SRP521 because Wi-Fi
power is reduced during the setup.
276378
WPS Button

2
SRP 521 VoIP Gateway Administration Guide 12
REVIEW DRAFT — CISCO CONFIDENTIAL
The Home Menu
This chapter describes how to view Quick Setup instructions and how to start the
Setup Wizard.
•Quick Setup Instructions, page 12
•Starting the Setup Wizard, page 12
Quick Setup Instructions
The Quick Setup page presents a summary of the steps required to setup the
gateway, secure your network, and provide personal network settings. Many of
the steps contains hyperlinks that quickly take you to that highlighted item.
STEP 1 Click Home on the tab and then click Quick Setup in the navigation pane. The
Quick Steup page appears.
STEP 2 Optionally, you can click a hyperlink to jump to that page.
Starting the Setup Wizard
The Setup Wizard guides you through the basic steps required to configure your
Services Ready Platform for a Cisco Smart Business Communications System
(SBCS).
NOTE The Setup Wizard is helpful to configure your gateway the first time you install it.

The Home Menu
Starting the Setup Wizard
SRP 521 VoIP Gateway Administration Guide 13
2
REVIEW DRAFT — CISCO CONFIDENTIAL
STEP 1 Click Home on the tab and then click SetupWizard in the navigation pane. The
Setup Wizard page appears.
STEP 2 Follow the instructions in the Setup Wizard to configure your gateway.

3
SRP 521 VoIP Gateway Administration Guide 14
REVIEW DRAFT — CISCO CONFIDENTIAL
Setting up the Interfaces of the Gateway
You can use the Inteface Setup pages to setup the WAN, LAN, and Wireless LAN
interfaces.
•Setting up the WAN Interface, page 14
•Setting up the LAN Interface, page 22
•Setting up the Wireless LAN, page 29
•Using the Loopback Interface, page 45
Setting up the WAN Interface
Internet Setup
The settings for WAN networking are set on these pages. In most cases, you can
configure the gateway and get it working properly by using only the settings on
these pages.
NOTE After you configure interfaces settings, you should set a new password for the
gateway using the Adminstration > Access Setting page. This precaution increases
security, protecting the gateway from unauthorized changes. All users who try to
access the web-based Configuration Utility will be prompted for the password of
the gateway.
STEP 1 Click Interface Setup on the tab and then click WAN in the navigation pane. The
Internet Setup page appears.
STEP 2 To add or edit interfaces in the WAN Interface List, click the add or edit icons.
STEP 3 Adjust WAN Phy Settings as necessary.

Setting up the Interfaces of the Gateway
Setting up the WAN Interface
SRP 521 VoIP Gateway Administration Guide 15
3
REVIEW DRAFT — CISCO CONFIDENTIAL
STEP 4 To clone a MAC address to the gateway, click Enabled and then enter a MAC
address. To clone the MAC address of your computer, click the Clone Your PC’s
MAC button.
STEP 5 Click Submit to save your settings.
Field Description
WAN Interface List The WAN Interface list which shows the physical link, its
protocol, and itsIP address if one exists. In each entry,
you can create new sub-interface by clicking the Add
Subinterface button or the Edit button.
If you have more than one sub-interface, you can choose
ether one as the default routing interface by selecting
the Default Route radio button.

Setting up the Interfaces of the Gateway
Setting up the WAN Interface
16 SRP 521 VoIP Gateway Administration Guide
3
Mobile Network
You can configure your gateway to connect to a mobile network through the USB
interface. The gateway allows you to set the connect mode. You can configure an
automatic or manual connection. You also can use this page to view the current
connection status.
STEP 1 Click Interface Setup on the tab and then click Mobile Network in the navigation
pane. The Mobile Network page appears.
STEP 2 If necessary, change any global settings in the Global Settings area. The Card
Status field shows the status of your mobile card.
STEP 3 If necessary, change any mobile network settings in the Mobile Network Setup
area.
WAN Flow Control WAN flow control. To set flow control for the WAN, select
Enabled and click Submit. The default setting is
Disabled.
WAN Speed Duplex WAN Speed Duplex mode. Selections are Auto-
negotiate, 10 Half, 10 Full, 100 Half and 100 Full. To set
WAN speed duplex mode, choose the mode and click
Submit.The default setting is Auto-negotiate.
MAC Address
Clone
A MAC address is a 12-digit code assigned to a unique
piece of hardware for identification purposes. Some
ISPs require that you to register a MAC address in order
to access the Internet. If you do not wish to re-register
the MAC address with your ISP, you may assign the
MAC address that you have currently registered with
your ISP to the gateway with the MAC Address Clone
feature. To clone your MAC address, select Enabled,
click Clone Your PC’s MAC, and click Submit. The
default value is Disabled.
Details of WAN The Details of WAN area shows information about your
WAN.
Field Description

Setting up the Interfaces of the Gateway
Setting up the WAN Interface
SRP 521 VoIP Gateway Administration Guide 17
3
REVIEW DRAFT — CISCO CONFIDENTIAL
NOTE You must click the Manual option in the Configure Mode field to manually setup your
mobile network card.
STEP 4 Click Submit to save your settings.

Setting up the Interfaces of the Gateway
Setting up the WAN Interface
18 SRP 521 VoIP Gateway Administration Guide
3
Field Description
Connect Mode Auto or manual connect mode. Select Auto to enable
your modem to establish a connection automatically or
select Manual to connect or disconnect your modem
connection manually.
NOTE The Ethernet Connection Recovery and Interface
Connection Failover works only if the Connection
Mode is set to Auto. If you select Auto, you must
select Connect on Demand and Keep Alive. If you
select Connect on Demand option, you can
configure the gateway to terminate the Internet
connection after it has been inactive for a
specified period of time (Max Idle Time).
Connect on Demand enables the modem to
automatically re-establish a terminated connection
when a user attempts to access the Internet again. In the
Max Idle Time field, enter the number of minutes of
inactivity that can elapse before your Internet
connection terminates. The default is 5 minutes. The
gateway periodically checks your Internet connection. If
you are disconnected, then it will automatically re-
establish your connection. To use this option, select
Keep Alive. In the Redial Period field, specify how often
you want the gateway to check the Internet connection.
The default is 30 seconds.
Card Status The status of the card. If your Connect Mode is Manual,
there will be a button that you can click to connect or
disconnect your Modem.
Configure Mode Select Auto to allow the gateway to automatically detect
which card model was inserted and which carrier is
available. Select Manual to set up the connection
manually. The default setting is Auto.
Card Model This field displays the data card model that is inserted in
the USB drive.

Setting up the Interfaces of the Gateway
Setting up the WAN Interface
SRP 521 VoIP Gateway Administration Guide 19
3
REVIEW DRAFT — CISCO CONFIDENTIAL
Connection Recovery
An Internet connection can be established via the WAN port or a wireless modem
plugged into the USB port. While both Ethernet and USB interfaces may be
connected, only one of them can be used to establish a link at a time. Whenever
the Internet connection fails, the gateway automatically attempts to bring up
Carrier The mobile network service provider for the Internet
connection. This setting is required when you are using
HSDPA/UMTS/GPRS Internet service. Select the card
issue country from the first drop-down menu list, then
select the card issue provider from the second drop-
down list.
Access Point Name
(APN)
The Internet network to which the mobile device is
connecting to. Enter the access point name provided by
your mobile network service provider.
Dial Number The dial number for the Internet connection. Enter the
Dial Number provided by your mobile network service
provider.
User Name/
Password
Enter the user name and password provided by your
mobile network service provider.
SIM PIN The PIN code associated with your SIM card. Enter your
SIM PIN number here.
Server Name The name of the server for the Internet connection.
Authentication The type of authentication used by your service
provider. Select your authentication type, if you do not
know which type to use, use the default setting, Auto.
Service Type Select the most commonly available type of mobile data
service connection based on your area service signal. If
your location supports only one mobile data service,
you may set up for enhance build up connection. The
first selection will always search for HSPDA/3G/UMTS
service or switch to GPRS automatically only when it is
available.
Field Description

Setting up the Interfaces of the Gateway
Setting up the WAN Interface
20 SRP 521 VoIP Gateway Administration Guide
3
another connection on another interface. This feature is called Failover . Whenever
the Ethernet Internet connection recovers, the gateway automatically attempts to
bring back and recover the Ethernet Internet connection. This feature is called
Recovery .
STEP 1 Click Interface Setup on the tab and then click Connection Recovery in the
navigation pane. The Connection Recovery page appears.
STEP 2 If necessary, enable the Ethernet Connection Recovery feature by clicking
Enabled. When this option is enabled, the gateway sets the ethernet interface to
the highest priority. Enabling this feature also enables the Interface Connection
Failover feature. Whenever the Internet connection fails, the gateway automatically
attempts to bring up the mobile network connection on the USB interface (if
available). Whenever the Ethernet Internet connection recovers, the gateway
automatically attempts to bring back and recover the Ethernet Internet connection.
NOTE Your Mobile Connection Mode must be set to Auto to use the Ethernet Connection
Recovery feature.
STEP 3 If necessary, enter an ethernet timeout value.
STEP 4 Choose a site on which to perform failover validation in the Failover Validation Site
area, either use the gateway or enter the IP address for a custom site.
STEP 5 If necessary, change the priority of the WAN interfaces by clicking the Up or Down
buttons.
STEP 6 Click Submit to save your settings.