Cisco QuickVPN - PC Instruction Manual

Cisco Small Business
RVS4000 4-Port Gigabit Security Router with VPN
ADMINISTRATION
GUIDE

© 2009 Cisco Systems, Inc. All rights reserved. OL-19755-01
CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the
Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting
To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems,
Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare,
GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound,
MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The
Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and
certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between
Cisco and any other company. (0812R)

Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide iii
Contents
About This Document 1
How to Use This Guide 1
Organization 1
Finding Information in PDF Files 2
Finding Text in a PDF 3
Finding Text in Multiple PDF Files 3
Chapter 1: Introduction 6
Chapter 2: Networking and Security Basics 7
An Introduction to LANs 7
The Use of IP Addresses 7
The Intrusion Prevention System (IPS) 9
Chapter 3: Planning Your Virtual Private Network (VPN) 11
Why do I need a VPN? 11
1) MAC Address Spoofing 12
2) Data Sniffing 12
3) Man in the middle attacks 12
What is a VPN? 12
VPN Router to VPN Router 13
Computer (using the Cisco QuickVPN Client software) to VPN Router 14
Chapter 4: Getting Started with the RVS4000 Router 16
Front Panel 16
Back Panel 17
Placement Options 18
Desktop Option 18
Stand Option 18
Wall Option 19
Installing the Router 20

Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide iv
Contents
Configuring the Router 21
Chapter 5: Setting Up and Configuring the Router 24
Setup 25
Setup > Summary 26
Setup > WAN 28
Setup > LAN 36
Setup > DMZ 40
Setup > MAC Address Clone 40
Setup > Advanced Routing 41
Setup > Time 43
Setup > IP Mode 44
Firewall 44
Firewall > Basic Settings 45
Firewall > IP Based ACL 46
Firewall > Internet Access Policy 50
Firewall > Single Port Forwarding 53
Firewall > Port Range Forwarding 54
Firewall > Port Range Triggering 55
ProtectLink 56
ProtectLink > ProtectLink Purchase 56
VPN 57
VPN > Summary 57
VPN > IPSec VPN 58
VPN > VPN Client Accounts 63
VPN > VPN Passthrough 65
QoS 65
QoS > Bandwidth Management 66
QoS > QoS Setup 68
QoS > DSCP Setup 69
Administration 70
Administration > Management 70

Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide v
Contents
Router Access 70
Administration > Log 72
Administration > Diagnostics 74
Administration > Backup & Restore 75
Administration > Factory Default 76
Administration > Reboot 77
Administration > Firmware Upgrade 77
IPS 78
IPS > Configuration 78
IPS > P2P/IM 79
IPS > Report 80
IPS > Information 82
L2 Switch 82
L2 > Create VLAN 82
L2 > VLAN Port Setting 84
L2 > VLAN Membership 85
L2 > RADIUS 86
L2 > Port Setting 87
L2 > Statistics 88
L2 > Port Mirroring 89
L2 > RSTP 90
Status 91
Status > Gateway 91
Status > Local Network 93
Chapter 6: Using the VPN Setup Wizard 95
VPN Setup Wizard 95
Before You Begin 95
Running the VPN Router Software Wizard 96
Building Your VPN Connection Remotely 105

Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide vi
Contents
Appendix A: Troubleshooting 113
Frequently Asked Questions 126
Appendix B: Using Cisco QuickVPN for Windows 2000, XP, or Vista 130
Overview 130
Before You Begin 130
Installing the Cisco QuickVPN Software 131
Installing from the CD-ROM 131
Downloading and Installing from the Internet 133
Using the Cisco QuickVPN Software 134
Distributing Certificates to QuickVPN Users 136
Appendix C: Configuring IPSec with a Windows 2000 or XP Computer 138
Introduction 138
Environment 139
Windows 2000 or Windows XP 139
RVS4000 139
How to Establish a Secure IPSec Tunnel 139
Establishing a Secure IPSec Tunnel 140
Appendix D: Gateway-to-Gateway VPN Tunnel 162
Overview 162
Before You Begin 162
Configuration when the Remote Gateway Uses a Static IP Address 163
Configuration when the Remote Gateway Uses a Dynamic IP Address 167
Configuration When Both Gateways Use Dynamic IP Addresses 172
Appendix E: Trend Micro ProtectLink Gateway Service 178
Overview 178
How to Access the Web-Based Utility 178
How to Purchase, Register, or Activate the Service 179

Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide vii
Contents
ProtectLink 179
How to Use the Service 181
ProtectLink > Web Protection 182
ProtectLink > Email Protection 186
ProtectLink > License 186
Appendix F: Specifications 188
Specifications 188
Performance 188
Setup/Config 188
Management 189
Security Features 189
QoS 189
Network 190
VPN 190
Routing 190
Layer 2 190
Environmental 191
Appendix G: Where to Go From Here 192
Product Resources 192
Related Documentation 193

Preface
Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide 1
About This Document
The focus of this guide is on the hardware and software features found on the
Cisco Small Business RVS4000 4-Port Gigabit Security Router with VPN.
Advanced configuration settings and security options are covered in this
administration guide.
How to Use This Guide
This administration guide has been designed to make understanding the router
easier. Look for the following items when reading this guide:
!
CAUTION This exclamation point indicates that caution should be used when performing a
step or a serious error may occur.
NOTE This checkmark indicates there is a note of interest and is something you should
pay special attention to while using the router.
Organization
This table describes the contents of each chapter in this document.
Chapter Title Description
Chapter 1 Introduction Introduces the product and this user
manual.
Chapter 2 Networking and
Security Basics
Introduces basic networking and
security concepts.
Chapter 3 Planning Your Virtual
Private Network (VPN)
Describes how to connect the
product.

Preface
Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide 2
Finding Information in PDF Files
The Cisco RVS4000 router documents are published as PDF files. The PDF Find/
Search tool within Adobe® Reader® lets you find information quickly and easily
online. You can perform the following tasks:
•Search an individual PDF file.
•Search multiple PDF files at once (for example, all PDFs in a specific folder
or disk drive).
Chapter 4 Getting Started with the
RVS4000 Router
Describes the physical features of
the RVS4000 router and provides
information for installing the router.
Chapter 5 Setting Up and
Configuring the Router
Describes how to set up the product
software.
Chapter 6 Using the VPN Setup
Wizard
Describes how to configure a
gateway-to-gateway VPN tunnel
between two VPN routers.
Appendix A Troubleshooting Provides solutions to problems that
may occur during the installation and
operation of the router.
Appendix B Using Cisco QuickVPN
for Windows 2000, XP, or
Vista
Explains how to install and use the
Cisco QuickVPN software
Appendix C Configuring IPSec with a
Windows 2000 or XP
Computer
Explains how to establish a secure
IPSec tunnel using preshared keys to
join a private network inside the
router and a Windows 2000 or XP
computer.
Appendix D Gateway-to-Gateway
VPN Tunnel
Explains how to configure an IPSec
VPN tunnel between two VPN
routers by example.
Appendix E Trend Micro ProtectLink
Gateway Service
Explains how to use the Trend Micro
ProtectLink Gateway service
Appendix F Specifications Provides product specifications.
Chapter Title Description

Preface
Cisco RVS4000 4-Port Gigabit Security Router with VPN Administration Guide 3
•Perform advanced searches.
Finding Text in a PDF
Follow this procedure to find text in a PDF file.
STEP 1 Enter your search terms in the Find text box on the toolbar.
NOTE By default, the Find tool is available at the right end of the Acrobat toolbar. If the
Find tool does not appear, choose Edit > Find.
STEP 2 Optionally, click the arrow next to the Find text box to refine your search by
choosing special options such as Whole Words Only.
STEP 3 Press Enter.
STEP 4 Acrobat displays the first instance of the search term.
STEP 5 Press Enter again to continue to more instances of the term.
Finding Text in Multiple PDF Files
The Search window lets you search for terms in multiple PDF files that are stored
on your computer or local network. The PDF files do not need to be open.
STEP 1 Start Acrobat Professional or Adobe Reader.
STEP 2 Choose Edit > Search, or click the arrow next to the Find box and then choose
Open Full Acrobat Search.