Cisco CVR100W Instruction Manual

Cisco Small Business
CVR100W Wireless-N VPN Router
ADMINISTRATION
GUIDE

© 2013 Cisco Systems, Inc. All rights reserved. OL-26942-02
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of
Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners.
The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco CVR100W Wireless-N VPN Router Administration Guide 1
Contents
Chapter 1: Introduction 7
Product Overview 7
LAN Ethernet Interface 8
Wireless Access Point 8
Security 8
Firewall and VPN Access 8
Wireless Distribution System 9
Quality of Service 9
Virtual Networks 9
Getting to Know the CVR100W 10
Front Panel 10
Back Panel 12
Default Settings 13
Installing the CVR100W 13
Placement Tips 13
Wall Mounting 14
Connecting the CVR100W 14
Getting Started with the Configuration 15
Changing the Default Administrative Password 16
Using the Connection Status Page 18
Using the Getting Started Page 19
Returning to the Connection Status Page 20
Changing Your Preferred Language 20
Viewing the Help Files 20
Verifying the Hardware Installation 20
Connecting to Your Wireless Network 21
Chapter 2: Viewing CVR100W Status 22
Viewing the Dashboard 22
Viewing System Summary 25
Viewing Connected Devices 27

Cisco CVR100W Wireless-N VPN Router Administration Guide 2
Contents
Viewing DHCP Leased Clients 28
Viewing Port Statistics 29
Viewing Wireless Statistics 30
Viewing Guest Network Status 31
Viewing VPN Status 32
Viewing Logs 33
Viewing IPsec Connection Status 34
Viewing CSC Information 35
Viewing NETSTAT Information 36
Chapter 3: Configuring Network 38
Configuring WAN Settings 38
Configuring Automatic Configuration (DHCP) 39
Configuring PPPoE 39
Configuring Static IP 40
Configuring Optional Settings 41
Cloning the MAC Address 42
Configuring LAN Settings 43
Configuring Basic LAN Settings 43
IPv4 43
Configuring DHCP 44
Configuring VLAN 45
Configuring Static DHCP 47
Configuring a DMZ Host 48
Configuring Routing 48
Configuring Operating Mode 48
Configuring Dynamic Routing 49
Configuring Static Routing 50
Configuring Inter-VLAN Routing 51
Viewing the Routing Table 51
Configuring Dynamic DNS 52

Cisco CVR100W Wireless-N VPN Router Administration Guide 3
Contents
Configuring IP Mode 53
Configuring IPv6 54
Configuring IPv6 WAN Settings 54
Setting the IP Mode 54
Configuring DHCPv6 55
Configuring a Static IP Address 55
Configuring IPv6 LAN Settings 56
Setting the IP Mode 56
Configuring IPv6 LAN Settings 56
Configuring DHCPv6 Settings 57
Configuring IPv6 Address Pools 58
Configuring IPv6 Static Routing 59
Configuring Routing (RIPng) 60
Configuring IPv6-to-IPv4 Tunneling 61
Viewing IPv6 Tunnel Status 61
Configuring Router Advertisement 61
Configuring Advertisement Prefixes 63
Chapter 4: Configuring Wireless Network 65
Wireless Security 65
Wireless Security Tips 65
General Network Security Guidelines 67
CVR100W Wireless Networks 67
Configuring Basic Wireless Settings 68
Configuring Wireless Radio Settings 68
Configuring Wireless Network Settings 69
Configuring Wireless Security 71
Configuring MAC Address Filtering 74
Configuring Time of Day Access 75
Configuring Guest Net 75
Configuring Cisco Simple Connect 76
Configuring Advanced Wireless Settings 79
Configuring WDS 82

Cisco CVR100W Wireless-N VPN Router Administration Guide 4
Contents
Configuring WPS 83
Chapter 5: Configuring Firewall 85
CVR100W Firewall Features 85
Access Rules 85
Port Forwarding 87
Configuring Basic Firewall Settings 87
Managing Firewall Schedules 89
Configuring Service Management 90
Configuring Access Control 91
Default Access Control Policy 91
Configuring Access Rules 91
Configuring Internet Access Rules 94
Configuring Single Port Forwarding 95
Configuring Port Range Forwarding 96
Configuring Port Range Triggering 97
Chapter 6: Configuring VPN 98
VPN Tunnel Types 98
Remote Access with Cisco QuickVPN 98
Site-to-Site VPN 99
Configuring VPN Clients 99
Creating and Managing QuickVPN Users 99
Importing VPN Client Settings 100
Configuring Basic VPN Setup 101
Viewing Default VPN Settings 101
Configuring Basic VPN Settings 102
Configuring Advanced VPN Setup 104
Configuring Global Advanced VPN Settings 104
Managing IKE Policies 105
Configuring VPN Policies 107

Cisco CVR100W Wireless-N VPN Router Administration Guide 5
Contents
Managing Certificates 111
Generating a New Certificate 111
Importing Certificates 112
Exporting Certificates for Admin 112
Exporting Certificates for Client 112
Configuring VPN Passthrough 113
Chapter 7: Configuring Quality of Service (QoS) 114
Configuring Bandwidth Management 114
Configuring Bandwidth 114
Configuring Bandwidth Priority 115
Configuring QoS Port-Based Settings 116
Configuring CoS Settings 117
Configuring DSCP Settings 117
Chapter 8: Administering Your CVR100W 119
Configuring Password Complexity 120
Configuring Administrator Account Settings 121
Configuring Remote Management 122
Configuring Port Management 123
Configuring Do-Not-Disturb Mode 124
Configuring System Time 124
Configuring Bonjour 125
Using Diagnostic Tools 126
Network Tools 126
Configuring Port Mirroring 127
Configuring Logging 128
Configuring Logging Settings 128
Configuring Remote Syslog Server 129
Backing Up and Restoring System Configuration 129
Backing Up Your Current Configuration 130

Cisco CVR100W Wireless-N VPN Router Administration Guide 6
Contents
Restoring Your Configuration from a Saved Configuration File 130
Upgrading Firmware 131
Rebooting the CVR100W 132
Restoring the Factory Defaults 132
Running the Setup Wizard 133
Chapter 9: Using Cisco Simple Connect 136
About Cisco Simple Connect 136
Configuring Cisco Simple Connect 138
Connecting to CSC Wireless Network 140
Customizing Your QR Code 141
Appendix A: Using Cisco QuickVPN 143
Before You Begin 143
Installing the Cisco QuickVPN Software 144
Using the Cisco QuickVPN Software 144
Appendix B: Where to Go From Here 148

1
Cisco CVR100W Wireless-N VPN Router Administration Guide 7
Introduction
This chapter provides information to familiarize you with the product features,
guide you through the installation process, and get started by using web-based
Configuration Utility. It includes the following sections:
•Product Overview
•Getting to Know the CVR100W
•Installing the CVR100W
•Connecting the CVR100W
•Getting Started with the Configuration
•Changing the Default Administrative Password
•Using the Connection Status Page
•Using the Getting Started Page
•Verifying the Hardware Installation
•Connecting to Your Wireless Network
Product Overview
Thank you for choosing the Cisco CVR100W Wireless-N VPN Router. The
CVR100W provides simple, affordable, secure business-class connectivity to the
Internet for small office/home office (SOHO) and remote professionals.
The CVR100W is an advanced Internet-sharing network solution for your small
business needs. It allows multiple computers in your office to share an Internet
connection through both wired and wireless connections.

Introduction
Product Overview
Cisco CVR100W Wireless-N VPN Router Administration Guide 8
1
LAN Ethernet Interface
The CVR100W provides four full-duplex 10/100 Fast Ethernet LAN interfaces that
can connect up to four devices. You can connect a Cisco Small Business switch to
one of the available ports to expand your network as needed.
Wireless Access Point
The CVR100W’s wireless access point supports the 802.11n standard with MIMO
technology, which multiplies the effective data rate. This technology results in
better throughput and coverage than that provided by 802.11g networks.
Security
The CVR100W implements WPA Personal, WPA Enterprise, WPA2 personal,
WPA2 Enterprise, and WEP Security, along with other security features, such as
SSID broadcast, MAC address filtering, and access control by schedule per SSID.
Firewall and VPN Access
The CVR100W incorporates a Stateful Packet Inspection (SPI)-based firewall with
Denial of Service (DoS) protection, URL filtering, and access control by schedule
to help keep business assets safe.
Up to three client-to-gateway VPN tunnels can be established by using QuickVPN
to allow mobile or remote workers to securely access your corporate resources
through encrypted virtual links. Users connecting through a VPN tunnel are
attached to your company’s network with secure access to files, e-mail, and your
intranet as if they were in the building.
The CVR100W supports site-to-site VPN for a single gateway-to-gateway VPN
tunnel. In this configuration, the CVR100W creates a secure connection to another
VPN-enabled router. For example, you can configure the CVR100W at a branch site
to connect to the router at the corporate site, so that the branch site can securely
access the corporate network. You could have a router like the Cisco RV220W that
supports ten site-to-site VPN tunnels and have a CVR100W at each remote site to
provide secure connectivity.