Cisco CVR100W Instruction Manual

Cisco Small Business
CVR100W Wireless-N VPN Router
ADMINISTRATION
GUIDE

© 2013 Cisco Systems, Inc. All rights reserved. OL-26942-02
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of
Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners.
The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco CVR100W Wireless-N VPN Router Administration Guide 1
Contents
Chapter 1: Introduction 7
Product Overview 7
LAN Ethernet Interface 8
Wireless Access Point 8
Security 8
Firewall and VPN Access 8
Wireless Distribution System 9
Quality of Service 9
Virtual Networks 9
Getting to Know the CVR100W 10
Front Panel 10
Back Panel 12
Default Settings 13
Installing the CVR100W 13
Placement Tips 13
Wall Mounting 14
Connecting the CVR100W 14
Getting Started with the Configuration 15
Changing the Default Administrative Password 16
Using the Connection Status Page 18
Using the Getting Started Page 19
Returning to the Connection Status Page 20
Changing Your Preferred Language 20
Viewing the Help Files 20
Verifying the Hardware Installation 20
Connecting to Your Wireless Network 21
Chapter 2: Viewing CVR100W Status 22
Viewing the Dashboard 22
Viewing System Summary 25
Viewing Connected Devices 27

Cisco CVR100W Wireless-N VPN Router Administration Guide 2
Contents
Viewing DHCP Leased Clients 28
Viewing Port Statistics 29
Viewing Wireless Statistics 30
Viewing Guest Network Status 31
Viewing VPN Status 32
Viewing Logs 33
Viewing IPsec Connection Status 34
Viewing CSC Information 35
Viewing NETSTAT Information 36
Chapter 3: Configuring Network 38
Configuring WAN Settings 38
Configuring Automatic Configuration (DHCP) 39
Configuring PPPoE 39
Configuring Static IP 40
Configuring Optional Settings 41
Cloning the MAC Address 42
Configuring LAN Settings 43
Configuring Basic LAN Settings 43
IPv4 43
Configuring DHCP 44
Configuring VLAN 45
Configuring Static DHCP 47
Configuring a DMZ Host 48
Configuring Routing 48
Configuring Operating Mode 48
Configuring Dynamic Routing 49
Configuring Static Routing 50
Configuring Inter-VLAN Routing 51
Viewing the Routing Table 51
Configuring Dynamic DNS 52

Cisco CVR100W Wireless-N VPN Router Administration Guide 3
Contents
Configuring IP Mode 53
Configuring IPv6 54
Configuring IPv6 WAN Settings 54
Setting the IP Mode 54
Configuring DHCPv6 55
Configuring a Static IP Address 55
Configuring IPv6 LAN Settings 56
Setting the IP Mode 56
Configuring IPv6 LAN Settings 56
Configuring DHCPv6 Settings 57
Configuring IPv6 Address Pools 58
Configuring IPv6 Static Routing 59
Configuring Routing (RIPng) 60
Configuring IPv6-to-IPv4 Tunneling 61
Viewing IPv6 Tunnel Status 61
Configuring Router Advertisement 61
Configuring Advertisement Prefixes 63
Chapter 4: Configuring Wireless Network 65
Wireless Security 65
Wireless Security Tips 65
General Network Security Guidelines 67
CVR100W Wireless Networks 67
Configuring Basic Wireless Settings 68
Configuring Wireless Radio Settings 68
Configuring Wireless Network Settings 69
Configuring Wireless Security 71
Configuring MAC Address Filtering 74
Configuring Time of Day Access 75
Configuring Guest Net 75
Configuring Cisco Simple Connect 76
Configuring Advanced Wireless Settings 79
Configuring WDS 82

Cisco CVR100W Wireless-N VPN Router Administration Guide 4
Contents
Configuring WPS 83
Chapter 5: Configuring Firewall 85
CVR100W Firewall Features 85
Access Rules 85
Port Forwarding 87
Configuring Basic Firewall Settings 87
Managing Firewall Schedules 89
Configuring Service Management 90
Configuring Access Control 91
Default Access Control Policy 91
Configuring Access Rules 91
Configuring Internet Access Rules 94
Configuring Single Port Forwarding 95
Configuring Port Range Forwarding 96
Configuring Port Range Triggering 97
Chapter 6: Configuring VPN 98
VPN Tunnel Types 98
Remote Access with Cisco QuickVPN 98
Site-to-Site VPN 99
Configuring VPN Clients 99
Creating and Managing QuickVPN Users 99
Importing VPN Client Settings 100
Configuring Basic VPN Setup 101
Viewing Default VPN Settings 101
Configuring Basic VPN Settings 102
Configuring Advanced VPN Setup 104
Configuring Global Advanced VPN Settings 104
Managing IKE Policies 105
Configuring VPN Policies 107

Cisco CVR100W Wireless-N VPN Router Administration Guide 5
Contents
Managing Certificates 111
Generating a New Certificate 111
Importing Certificates 112
Exporting Certificates for Admin 112
Exporting Certificates for Client 112
Configuring VPN Passthrough 113
Chapter 7: Configuring Quality of Service (QoS) 114
Configuring Bandwidth Management 114
Configuring Bandwidth 114
Configuring Bandwidth Priority 115
Configuring QoS Port-Based Settings 116
Configuring CoS Settings 117
Configuring DSCP Settings 117
Chapter 8: Administering Your CVR100W 119
Configuring Password Complexity 120
Configuring Administrator Account Settings 121
Configuring Remote Management 122
Configuring Port Management 123
Configuring Do-Not-Disturb Mode 124
Configuring System Time 124
Configuring Bonjour 125
Using Diagnostic Tools 126
Network Tools 126
Configuring Port Mirroring 127
Configuring Logging 128
Configuring Logging Settings 128
Configuring Remote Syslog Server 129
Backing Up and Restoring System Configuration 129
Backing Up Your Current Configuration 130

Cisco CVR100W Wireless-N VPN Router Administration Guide 6
Contents
Restoring Your Configuration from a Saved Configuration File 130
Upgrading Firmware 131
Rebooting the CVR100W 132
Restoring the Factory Defaults 132
Running the Setup Wizard 133
Chapter 9: Using Cisco Simple Connect 136
About Cisco Simple Connect 136
Configuring Cisco Simple Connect 138
Connecting to CSC Wireless Network 140
Customizing Your QR Code 141
Appendix A: Using Cisco QuickVPN 143
Before You Begin 143
Installing the Cisco QuickVPN Software 144
Using the Cisco QuickVPN Software 144
Appendix B: Where to Go From Here 148

1
Cisco CVR100W Wireless-N VPN Router Administration Guide 7
Introduction
This chapter provides information to familiarize you with the product features,
guide you through the installation process, and get started by using web-based
Configuration Utility. It includes the following sections:
•Product Overview
•Getting to Know the CVR100W
•Installing the CVR100W
•Connecting the CVR100W
•Getting Started with the Configuration
•Changing the Default Administrative Password
•Using the Connection Status Page
•Using the Getting Started Page
•Verifying the Hardware Installation
•Connecting to Your Wireless Network
Product Overview
Thank you for choosing the Cisco CVR100W Wireless-N VPN Router. The
CVR100W provides simple, affordable, secure business-class connectivity to the
Internet for small office/home office (SOHO) and remote professionals.
The CVR100W is an advanced Internet-sharing network solution for your small
business needs. It allows multiple computers in your office to share an Internet
connection through both wired and wireless connections.

Introduction
Product Overview
Cisco CVR100W Wireless-N VPN Router Administration Guide 8
1
LAN Ethernet Interface
The CVR100W provides four full-duplex 10/100 Fast Ethernet LAN interfaces that
can connect up to four devices. You can connect a Cisco Small Business switch to
one of the available ports to expand your network as needed.
Wireless Access Point
The CVR100W’s wireless access point supports the 802.11n standard with MIMO
technology, which multiplies the effective data rate. This technology results in
better throughput and coverage than that provided by 802.11g networks.
Security
The CVR100W implements WPA Personal, WPA Enterprise, WPA2 personal,
WPA2 Enterprise, and WEP Security, along with other security features, such as
SSID broadcast, MAC address filtering, and access control by schedule per SSID.
Firewall and VPN Access
The CVR100W incorporates a Stateful Packet Inspection (SPI)-based firewall with
Denial of Service (DoS) protection, URL filtering, and access control by schedule
to help keep business assets safe.
Up to three client-to-gateway VPN tunnels can be established by using QuickVPN
to allow mobile or remote workers to securely access your corporate resources
through encrypted virtual links. Users connecting through a VPN tunnel are
attached to your company’s network with secure access to files, e-mail, and your
intranet as if they were in the building.
The CVR100W supports site-to-site VPN for a single gateway-to-gateway VPN
tunnel. In this configuration, the CVR100W creates a secure connection to another
VPN-enabled router. For example, you can configure the CVR100W at a branch site
to connect to the router at the corporate site, so that the branch site can securely
access the corporate network. You could have a router like the Cisco RV220W that
supports ten site-to-site VPN tunnels and have a CVR100W at each remote site to
provide secure connectivity.

Introduction
Product Overview
Cisco CVR100W Wireless-N VPN Router Administration Guide 9
1
Wireless Distribution System
The CVR100W’s wireless access point supports Wireless Distribution System
(WDS), which allows the wireless coverage to be expanded without wires.
Quality of Service
The CVR100W supports Wi-Fi Multimedia (WMM) and Wi-Fi Multimedia Power
Save (WMM-PS) for quality of service (QoS).
The CVR100W also supports 802.1p, Differentiated Services Code Point (DSCP),
and class of service (CoS) for wired QoS, which can improve the quality of your
network when using delay-sensitive Voice over IP (VoIP) applications and
bandwidth-intensive video streaming applications.
Virtual Networks
The CVR100W supports multiple Service Set Identifiers (SSIDs) for the use of
virtual networks (up to four separate virtual networks), with 802.1q-based VLAN
support for traffic separation.

Introduction
Getting to Know the CVR100W
Cisco CVR100W Wireless-N VPN Router Administration Guide 10
1
Getting to Know the CVR100W
Before using the CVR100W, familiarize yourself with its buttons, lights, and
interfaces found in this section.
Front Panel
There are three buttons and eight lights on the front panel.
Do-Not-Disturb
Mode Button
This button turns on or turns off all lights. This button does not
affect the normal operation of the CVR100W.
•When this button is on, all lights on the front panel are off
and the Do-Not-Disturb Mode light on the back panel is
solid green.
•When this button is off, all lights on the front panel are on
and the Do-Not-Disturb Mode light on the back panel is
off.
WPS Button This button configures wireless access for devices in your
network that are WPS-enabled.
Wireless Button This button enables or disables the wireless module.

Introduction
Getting to Know the CVR100W
Cisco CVR100W Wireless-N VPN Router Administration Guide 11
1
LAN (1-4) The numbered lights correspond to the LAN ports on the back
panel of the CVR100W.
•Solid blue when the CVR100W is connected to a device
through the corresponding LAN port (1, 2, 3, or 4).
•Flashes blue when the CVR100W is sending or receiving
data over that LAN port.
•Off when the LAN port has no connection.
WPS •Solid blue when the WPS connection is configured.
•Flashes blue once per second when the WPS progress
is experiencing problems.
•Off when the WPS connection is configured or there is
no WPS connection.
Wireless •Solid blue when the wireless module is enabled with
100% Wi-Fi power.
•Solid amber when the wireless module is enabled with
50% Wi-Fi power.
•Flashes blue when the CVR100W is sending or receiving
data on the wireless module.
•Off when the wireless module is disabled.
WAN •Solid blue when the CVR100W is connected to the
Internet through your cable or DSL modem.
•Flashes blue when the CVR100W is sending or receiving
data through the WAN port.
•Off when the WAN port has no connection.
POWER •Solid blue when the CVR100W is powered on and is
operating normally.
•Flashes blue when the system is booting or the system
is upgrading the firmware.
•Off when the CVR100W is powered off.

Introduction
Getting to Know the CVR100W
Cisco CVR100W Wireless-N VPN Router Administration Guide 12
1
Back Panel
WAN The WAN (Internet) port is connected to your Internet device,
such as a cable or DSL modem.
LAN (1–4) These ports provide the LAN connection to network devices,
such as PCs, print servers, or switches.
RESET The RESET button has two functions:
•Reboot: If the CVR100W has problems connecting to
the Internet, press the RESET button for at least one
second but no more than five seconds with a paper clip
or a pencil tip.
•Restore to Factory Defaults: If you are experiencing
extreme problems with the CVR100W and have tried all
other troubleshooting measures, press and hold in the
RESET button for more than five seconds. This reboots
the unit and restores the factory defaults. The settings
that you have previously made to the CVR100W are lost.
12VDC The 12VDC port is where you connect the supplied power
adapter (12V/0.5 A).
Power Press this button to power the CVR100W on and off.
Do-Not-Disturb
Mode Light
•Solid green when the Do-Not-Disturb Mode button is
turned on and the CVR100W is operating normally.
•Flashes green when the Do-Not-Disturb Mode button is
turned on, but the Internet connection has problems.
•Off when the Do-Not-Disturb Mode button is turned off.

Introduction
Installing the CVR100W
Cisco CVR100W Wireless-N VPN Router Administration Guide 13
1
Default Settings
These are the default settings used when configuring your CVR100W for the first
time.
NOTE Press and hold the RESET button for more than five seconds to reboot the unit and
restore the factory defaults. Changes that you have previously made to the
CVR100W settings are lost.
Installing the CVR100W
You can place your CVR100W on a desktop or mount it on a wall.
Placement Tips
•Ambient Temperature—To prevent the CVR100W from overheating, do not
operate it in an area that exceeds an ambient temperature of 104°F (40°C).
•Air Flow—Be sure that there is adequate air flow around the CVR100W.
•Mechanical Loading—Be sure that the CVR100W is level and stable to
avoid any hazardous conditions.
Place the CVR100W horizontally on a flat surface so that it sits on its four rubber
feet.
Parameter Default Value
Username cisco
Password cisco
LAN IP 192.168.1.1
DHCP Range 192.168.1.100 to 192.168.1.149

Introduction
Connecting the CVR100W
Cisco CVR100W Wireless-N VPN Router Administration Guide 14
1
Wall Mounting
The CVR100W can be wall-mounted. The wall-mounting hardware is
user-supplied. The ports on the back panel must face either upward or downward
when mounting the CVR100W to a wall.
WARNING Insecure mounting might damage the device or cause injury. Cisco is not
responsible for damages incurred by insecure wall-mounting.
Connecting the CVR100W
By default, the wireless module of the CVR100W is enabled. For the initial
configuration, we recommend that you connect to the CVR100W with an Ethernet
cable. Of course, you can also use a wireless connection. To connect the PC to the
CVR100W's wireless network for the first time, use the default SSID name and
pre-shared key that are provided on the product label at the bottom of the
CVR100W. See Connecting to Your Wireless Network for more information.
STEP 1 Power off all equipment, including the cable or DSL modem, the PC that you will
use to connect to the CVR100W, and the CVR100W itself.
STEP 2 Connect the supplied power adapter to the 12VDC port on the back panel of the
CVR100W. Plug the other end of the power adapter into an electrical outlet. Make
sure that the POWER button is turned off.
!
CAUTION Use only the power adapter that is supplied with the unit. Using a different power
adapter could damage the unit.
STEP 3 Connection one end of an Ethernet cable to your cable or DSL modem. Connect
the other end to the WAN port on the back panel.
STEP 4 Connect one end of a different Ethernet cable to one of the LAN ports on the back
panel. Connect the other end to an Ethernet port on the PC that you will use to run
web-based Configuration Utility.
NOTE Skip this step if you want to connect the PC to the CVR100W through a
wireless connection.

Introduction
Getting Started with the Configuration
Cisco CVR100W Wireless-N VPN Router Administration Guide 15
1
STEP 5 Power on all connected devices, including the cable or DSL modem and the PC,
and wait until the connections are active.
STEP 6 Press the POWER button on the back panel to power on the CVR100W.
STEP 7 To connect the PC to your wireless network for the first time, you must configure
the wireless connection using the default SSID name and pre-shared key. See
Connecting to Your Wireless Network for more information.
A sample configuration is illustrated here.
Getting Started with the Configuration
The Setup Wizard and web-based Configuration Utility are supported on
Microsoft Internet Explorer 6.0 or later, Mozilla Firefox 3.0 or later, Apple Safari 3.0
or later, and Google Chrome 5.0 or later.
To log in to web-based Configuration Utility and complete the initial configuration
by using the Setup Wizard:
STEP 1 Start a computer that you connected to the CVR100W. The computer becomes a
DHCP client of the CVR100W and receives an IP address in the 192.168.1.xxx
range.
STEP 2 Launch a web browser and enter 192.168.1.1 in the address bar. This is the
default IP address of the CVR100W.
Power
Supply
Internet
Access
Devices
Network
Devices
Wireless
Devices

Introduction
Changing the Default Administrative Password
Cisco CVR100W Wireless-N VPN Router Administration Guide 16
1
NOTE The CVR100W automatically changes its IP address to 10.10.10.1 when its
default IP address conflicts with another device in your network.
STEP 3 When the login page appears, choose the language that you prefer to use in the
utility, and then enter the username and password.
The default username is cisco. The default password is cisco. Both username and
password are case sensitive.
STEP 4 Click Log In. The Setup Wizard will now launch.
STEP 5 Follow the on-screen prompts to complete the initial configuration. See Running
the Setup Wizard for more information on completing the Setup Wizard
configuration.
For security reasons, you must change the password from its default setting at
your first login. Please write this password down for future reference. A blank
password is not recommended.
Passwords should not contain dictionary words from any language or be the
default password. They should contain a mixture of uppercase and lowercase
letters, numbers, and symbols. Passwords must be at least 8 but no more than 64
characters in length.
After the Setup Wizard is complete, the Connection Status page appears. See
Using the Connection Status Page for more information.
Changing the Default Administrative Password
The administrative password protects your CVR100W from unauthorized access.
For security reasons, you must change the password from its default setting at
your first login.
You can change the default administrative password as instructed by the Setup
Wizard (see Running the Setup Wizard) or by following the instructions in the
Configuring Administrator Account Settings section. If you exit the Setup
Wizard without saving your settings at your first login by clicking Exit, the Change
Password window opens.
By default, the password strength enforcement is enabled on the CVR100W. The
Change Password window displays the minimum password complexity
requirements as follows:

Introduction
Changing the Default Administrative Password
Cisco CVR100W Wireless-N VPN Router Administration Guide 17
1
•Passwords cannot be the same as the username.
•Passwords cannot be the same as the current password.
•Passwords must be at least 8 but no more than 64 characters in length.
•Passwords must contain at least three of these character classes:
uppercase letters, lowercase letters, digits, and special characters.
NOTE You can modify the minimum password complexity requirements in the
Administration > Password Complexity page. See Configuring Administrator
Account Settings.
To enter a new password in the Change Password window:
STEP 1 Enter the following information:
•Old Password: Enter the current password.
•New Password: Enter a new password.
•Confirm Password: Enter the new password again for confirmation.
•Password Strength Meter: Displays the strength of the password that you
entered.
-Red: Password fails to meet the minimum complexity requirements.
-Yellow: Password meets the minimum requirements but the password
strength is weak.
-Green: Password is strong.
•Disable Password Strength Enforcement: Check to disable password
strength enforcement (nor recommended).
STEP 2 Click Save and Exit to save your changes.
The Connection Status page opens. You are required to log into the utility with the
new password before you do any other tasks.

Introduction
Using the Connection Status Page
Cisco CVR100W Wireless-N VPN Router Administration Guide 18
1
Using the Connection Status Page
The Connection Status page displays the current WAN, LAN, and WLAN status of
the CVR100W.
You can perform the following actions:
•To refresh the data on the screen, click Refresh.
•To log out the utility, click Log out.
•To launch the Setup Wizard, click Setup Wizard.
Field Description
WAN
Status Shows whether the WAN port obtains an IP address
successfully or not. If the WAN port is connected to the
Internet, the network addressing mode that you use to
connect to the Internet will be displayed.
IP IP address of the WAN port that is accessible from the
Internet.
Mask Subnet mask for the WAN port.
Gateway Default gateway for the WAN port.
DNS IP addresses for the primary DNS server and the
secondary DNS server.
LAN
Host Name of the LAN host that is connected to the
CVR100W.
IP IP address of the connected LAN host.
MAC MAC address of the connected LAN host.
WLAN
Wi-Fi Power Shows whether the Wi-Fi signal strength is 100%,
50%, or off.