Cisco RV016 - Small Business - 10/100 VPN Router Instruction Manual

Cisco Small Business
RV0xx Series Routers
RV042 Dual WAN VPN Router
RV042G Gigabit Dual WAN VPN Router
RV082 Dual WAN VPN Router
RV016 Multi-WAN VPN Router
ADMINISTRATION
GUIDE

© 2011-2012 Cisco Systems, Inc. All rights reserved. 78-19576-01 B0
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco Small Business RV0xx Series Routers Administration Guide 3
Contents
Chapter 1: Introduction 7
RV0xx Series Router Features 7
Ports 9
Status Lights 10
Other Hardware Features 11
Default Settings 12
Mounting Options 12
Placement Tips 12
Desktop Placement 12
Wall Mounting 13
Rack Mounting RV082 or RV016 14
Connecting the Equipment 15
Getting Started with the Configuration 16
Troubleshooting Tips 17
Features of the User Interface 18
Chapter 2: Viewing System Summary Information 20
Chapter 3: Setup 26
Setting Up the Network 27
Changing the Administrator Username and Password 40
Setting the System Time 42
Setting Up a DMZ Host 43
Setting Up Port Forwarding and Port Triggering 44
Setting Up Universal Plug and Play (UPnP) 48
Setting Up One-to-One NAT 51
Cloning a MAC Address for the Router 53
Assigning a Dynamic DNS Host Name to a WAN Interface 55
Setting Up Advanced Routing 57
IPv6 Transition 61

Cisco Small Business RV0xx Series Routers Administration Guide 4
Contents
Chapter 4: DHCP 63
Setting Up the DHCP Server or DHCP Relay 63
Viewing the DHCP Status Information 70
Router Advertisement (IPv6) 71
Chapter 5: System Management 73
Setting Up Dual WAN and Multi-WAN Connections 73
Managing the Bandwidth Settings 81
Setting Up SNMP 84
Enabling Device Discovery with Bonjour 85
Using Built-In Diagnostic Tools 87
Restoring the Factory Default Settings 89
Upgrading the Firmware 90
Restarting the Router 91
Backing Up and Restoring the Settings 92
Chapter 6: Port Management 95
Configuring the Port Settings 95
Viewing the Status Information for a Port 97
Chapter 7: Firewall 99
Configuring the General Firewall Settings 99
Configuring Firewall Access Rules 103
Using Content Filters to Control Internet Access 110
Chapter 8: Cisco ProtectLink Web 113
Getting Started with Cisco ProtectLink Web 113
Specifying the Global Settings for Approved URLs and Clients 115
Approved URLs and Approved Clients 116
Enabling Web Protection for URL Filtering 117

Cisco Small Business RV0xx Series Routers Administration Guide 5
Contents
Updating the ProtectLink License 120
Chapter 9: VPN 122
Introduction to VPNs 122
Site to Site VPN (Gateway To Gateway) 123
Remote Access (Client To Gateway) 123
Remote Access with Cisco QuickVPN 125
Remote Access with PPTP 125
Viewing the Summary Information for VPN 126
Setting Up a Gateway to Gateway (Site to Site) VPN 130
Setting Up a Remote Access Tunnel for VPN Clients (Client To Gateway)
139
Managing VPN Users and Certificates 147
Setting Up VPN Passthrough 149
Setting Up PPTP Server 150
Chapter 10: Logging System Statistics 153
Setting Up the System Log and Alerts 153
Viewing the System Log 157
Chapter 11: Wizard 159
Appendix A: Glossary 161
Appendix B: Troubleshooting 165
Appendix C: Cisco QuickVPN for Windows 167
Introduction 167
Cisco QuickVPN Client Installation and Configuration 168
Using the Cisco QuickVPN Software 168

Cisco Small Business RV0xx Series Routers Administration Guide 6
Contents
Appendix D: Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Se-
ries Routers 170
Topology Options 170
VPN Hub and Spoke Topology 171
VPN Mesh Topology 172
Other Design Considerations 173
Configuring a VPN Tunnel on a Cisco RV0xx Series Router 175
Example: Sites with Static WAN IP Addresses 176
Example: Site with a Dynamic WAN IP Address 179
Appendix E: IPSec NAT Traversal 183
Overview 183
Appendix F: Bandwidth Management 186
Creation of New Services 186
Creation of New Bandwidth Management Rules 187
Appendix G: Specifications 189
RV042 189
RV042G 191
Cisco RV082 194
Cisco RV016 196
Appendix H: Where to Go From Here 199

1
Cisco Small Business RV0xx Series Routers Administration Guide 7
Introduction
Thank you for choosing a RV0xx Series VPN Router. This guide provides complete
information to help you configure and manage your router. This chapter includes
information to help you get started using your router. Refer to these topics:
•RV0xx Series Router Features, page 7
•Mounting Options, page 12
•Connecting the Equipment, page 15
•Getting Started with the Configuration, page 16
•Features of the User Interface, page 18
RV0xx Series Router Features
Cisco RV0xx Series dual WAN and multi-WAN VPN routers offer highly secure,
high-performance, reliable connectivity. All of these routers can support a second
Internet connection to ensure continuous connectivity or to increase available
bandwidth and balance traffic. Three models are available. A comparison is
provided below.
NOTE RV042, RV042G, and RV082 have one dedicated Internet port and a DMZ/Internet
port. RV016 has two dedicated Internet ports, one dedicated DMZ port, and five
dual-function ports that can be configured as LAN or Internet ports.
Model LAN
Ports
WAN/DMZ
Ports
RV042 and RV042G 42
RV082 82
RV016 8-13 2-7 Internet
1DMZ

Introduction
RV0xx Series Router Features
Cisco Small Business RV0xx Series Routers Administration Guide 8
1
RV042 and RV042G Ports
RV042 and RV042G Status Lights
RV082 Ports and Status Lights
RV016 Ports and Status Lights
278823
DMZ/Internet1 2 3 4 Internet
Cisco Small Business RV042
System DIAG DMZ/
Internet
DMZMode 1 2 3 4Internet
278822
278824
12 3 4
56 7 8
DMZ/Internet Internet
1234
5678
DIAG
System
Internet
DMZ
Internet DMZ Mode
Cisco Small Business
RV082
10/100
16-Port VPN Router
278826
Cisco Small Business
RV016
10/100
16-Port VPN
12345678
97 106 115 124 133 Internet 2 Internet 1 DMZ
12345678
910111213
7654321
DIAG
System
LAN/Act
LAN/Act
Internet/Act
Internet Internet
Dual-Function Ports
DMZ

Introduction
RV0xx Series Router Features
Cisco Small Business RV0xx Series Routers Administration Guide 9
1
Ports
Port Description
Internet (RV042
and RV082) or
Internet 1-2
(RV016)
Use this port to connect the router to a
broadband network device.
DMZ/Internet
(RV042 and
RV082)
Use this port to connect the router to either
a second broadband network device or a
DMZ host such as a web server or FTP
server. A DMZ allows public Internet traffic
to access a specified computer on your
network without exposing your LAN.
DMZ (RV016) Use this port to connect the router to a DMZ
host such as a web server or FTP server. A
DMZ allows public Internet traffic to access
a specified computer on your network
without exposing your LAN.
1-4 (RV042 and
RV042G) or 1-8
(RV082 and
RV016)
Use these numbered ports to connect
computers and other local network devices.
9-13 and 3-7 Dual
Function Ports
(RV016)
Use these numbered ports as LAN ports
(numbered 9-13) or configure them for use
as Internet ports (numbered 3-7). The status
is shown on the corresponding status lights:
LAN/Act 9-13 or Internet/Act 3-7.

Introduction
RV0xx Series Router Features
Cisco Small Business RV0xx Series Routers Administration Guide 10
1
Status Lights
Light Description
DIAG Lit—The router is preparing for use. Unlit—
The router is ready for use.
System Steady—The router is powered on.
Flashing—The router is running a
diagnostic test.
Internet (RV082,
RV042, RV042G)
or Internet 1-2
(RV016)
Steady—A device is connected to the
Internet port. Flashing—There is network
activity over the Internet port.
DMZ/Internet
(RV082, RV042,
RV042G) or DMZ
(RV016)
Steady—A device is connected to the
DMZ/Internet or DMZ port. Flashing—
There is network activity over the port.
DMZ Mode
(RV082, RV042,
RV042G)
Lit—The DMZ/Internet port is configured
as a DMZ. Unlit—The DMZ/Internet port is
configured as a secondary Internet
connection.
1-4, 1-8 Steady—A device is connected to the
numbered LAN port. Flashing—There is
network activity over the numbered port.
RV042G Gigabit
Ports
For the Internet, DMZ/Internet, and
numbered ports, the color indicates the
speed. Green—Gigabit. Amber—10/100M.
RV016 Dual-Function Ports:
LAN/Act 9-13 Lit if the port is configured as a LAN port.
Steady—A device is connected to the port.
Flashing—There is network activity over
the port.
Internet/Act 3-7
(RV016)
Lit if the port is configured as an Internet
port. Steady—A device is connected to the
port. Flashing—There is network activity
over the port.

Introduction
RV0xx Series Router Features
Cisco Small Business RV0xx Series Routers Administration Guide 11
1
Other Hardware Features
Feature Description
Reset The Reset button is an indented black
button. On the back panel of the RV042 and
RV042G, look for this button near the port
labeled 1. On the front panel of the RV082
and RV016, look for this button near the
Internet and DMZ ports .
•To restart the router or restore
connectivity: If the router is having
problems connecting to the Internet,
use the tip of a pen to press and hold
the Reset button for one second.
•To restore factory default settings:
If you are experiencing extreme
problems with the router and have
tried all other troubleshooting
measures, press and hold the Reset
button for 30 seconds to restore the
factory default settings. All
previously entered settings will be
abandoned.
Security Slot Use the security slot on the side panel to
attach a lock to protect the router from theft.
Power •RV042 and RV042G: Connect the
provided power adapter to the
power port on the side panel.
•RV082 and RV016: Connect the
provided AC power cable to the
power port on the back panel.

Introduction
Mounting Options
Cisco Small Business RV0xx Series Routers Administration Guide 12
1
Default Settings
Mounting Options
Placement Tips
•Ambient Temperature—To prevent the router from overheating, do not
operate it in an area that exceeds an ambient temperature of 104°F (40°C).
•Air Flow—Be sure that there is adequate air flow around the router.
•Mechanical Loading—Be sure that the router is level and stable to avoid
any hazardous conditions.
Desktop Placement
Place the router on a flat surface near an electrical outlet.
WARNING Do not place anything on top of the router; excessive weight could damage it.
Parameter Default Value
Username admin
Password admin
LAN IP 192.168.1.1
DHCP Range 192.168.1.100 to 149
Netmask 255.255.255.0

Introduction
Mounting Options
Cisco Small Business RV0xx Series Routers Administration Guide 13
1
Wall Mounting
The router has two wall-mount slots on the bottom panel. To mount the router on a
wall, you need mounting hardware (not included). Suggested hardware is
illustrated below (not true to scale).
WARNING Insecure mounting might damage the router or cause injury. Cisco is not
responsible for damages incurred by insecure wall-mounting.
WARNING For safety, ensure that the heat dissipation holes are facing sideways .
STEP 1 Drill two pilot holes into the surface.
•RV042 and RV042G: 58 mm apart
•RV082 and RV016: 94 mm apart
Suggested Hardware for
RV042 and RV042G
Suggested Hardware for
RV082 and RV016
5-5.5 mm 20-22 mm 6.5-7 mm 16.5-18.5
mm

Introduction
Mounting Options
Cisco Small Business RV0xx Series Routers Administration Guide 14
1
STEP 2 Insert a screw into each hole, leaving a gap between the surface and the base of
the screw head of 1 to 1.2 mm.
STEP 3 Place the router wall-mount slots over the screws and slide the router down until
the screws fit snugly into the wall-mount slots.
Rack Mounting RV082 or RV016
You can mount the RV082 or RV016 in a standard size, 19-inch (about 48 cm) wide
rack. The router requires 1 rack unit (RU) of space, which is 1.75 inches (44.45mm)
high. Mounting brackets are provided.
!
CAUTION Do not overload the power outlet or circuit when installing multiple devices in a
rack.
STEP 1 Place the router on a hard, flat surface.
STEP 2 Attach one of the supplied rack–mount brackets to one side of the router with the
supplied screws. Secure the bracket tightly.
STEP 3 Follow the same steps to attach the other bracket to the opposite side.
STEP 4 Use suitable screws to securely attach the brackets to any standard 19-inch rack.
1 2 3 4
5 6 7 8
DMZ/InternetInternet
123 4
5 6 7 8
DIAG
System
Internet
DMZ
InternetDMZ
Mode
CiscoSmall Business
RV082
10/100
16-PortVPN Router
278825
1
2
12 3 4
56 78
DMZ/Internet Internet
1234
56 7 8
DIAG
System
Internet
DMZ
InternetDMZ
Mode
CiscoSmall Business
RV082
10/100
16-PortVPN Router

Introduction
Connecting the Equipment
Cisco Small Business RV0xx Series Routers Administration Guide 15
1
Connecting the Equipment
STEP 1 Make sure that all network devices are powered off, including the router, PCs,
Ethernet switches, and broadband network device (DSL or cable modem).
STEP 2 To connect to your Internet service:
•RV042, RV042G, and RV082: Connect an Ethernet cable from the
broadband network device to the Internet port of the router.
RV042 and RV042G Internet Port
RV082 Internet Port
•RV016: Connect an Ethernet cable from the broadband network device to
the Internet 1 port of the router.
RV016 Internet 1 Port
STEP 3 To connect a secondary Internet service:
•RV042, RV042G, and RV082: Connect an Ethernet cable from the DMZ/
Internet port to a second broadband network device.
199619
DMZ/Internet1 2 3 4 Internet
199620
12 3 4
56 7 8
DMZ/Internet Internet
1234
5678
DIAG
System
Internet
DMZ
Internet DMZ Mode
Cisco Small Business
RV082
10/100
16-Port VPN Router
199621
Cisco Small Business
RV016
10/100
16-Port VPN
12345678
97 106 115 124 133 Internet 2 Internet 1 DMZ
12345678
910111213
7654321
DIAG
System
LAN/Act
LAN/Act
Internet/Act
Internet Internet
Dual-Function Ports DMZ

Introduction
Getting Started with the Configuration
Cisco Small Business RV0xx Series Routers Administration Guide 16
1
•RV016: Connect an Ethernet cable from the Internet 2 port to a second
broadband network device.
STEP 4 To connect a computer or server that will be a DMZ host:
•RV042, RV042G, and RV082: Connect an Ethernet cable from the DMZ/
Internet port to the DMZ host.
•RV016: Connect an Ethernet cable from the DMZ port to the DMZ host.
STEP 5 To connect other network devices, such as computers, print servers, or Ethernet
switches, connect an Ethernet cable from a numbered LAN port to the network
device.
STEP 6 Power on the broadband network device(s).
STEP 7 Use the power adapter (RV042 and RV042G) or the power cable (RV082 and
RV016) to connect the router to a power outlet. The System status light is green.
STEP 8 Power on the other network devices.
Getting Started with the Configuration
STEP 1 Connect a computer to a numbered LAN port on the router. Your PC will become a
DHCP client of the router and will receive an IP address in the 192.168.1.x range.
STEP 2 Start a web browser. To use the configuration utility, you need a PC with Internet
Explorer (version 6 and higher), Firefox, or Safari (for Mac).
STEP 3 In the address bar, enter the default IP address of the router: 192.168.1.1
STEP 4 When the login page appears, enter the default user name admin and the default
password admin (lowercase).
STEP 5 Click Login. The System Summary page appears.
The router’s default settings are sufficient for many small businesses. Your Internet
Service Provider may require additional settings. On the System Summary page,
check the WAN Status to see if the router was able to receive an IP Address. If not,
continue to the next step.

Introduction
Getting Started with the Configuration
Cisco Small Business RV0xx Series Routers Administration Guide 17
1
STEP 6 To use the setup wizard to configure your Internet connection, click Setup Wizard
on the System Summary page, or click Wizard in the navigation tree. In the Basic
Setup section, click Launch Now. Follow the on-screen instructions.
If your web browser displays a warning message about the pop-up window, allow
the blocked content.
STEP 7 To configure other settings, use the links in the navigation tree.
Cisco strongly recommends setting a strong administrator password to prevent
unauthorized access to your router. For more information about all settings, refer to
the online Help and the Cisco Small Business RV0xx Series VPN Router
Administration Guide.
Troubleshooting Tips
If you have trouble connecting to the Internet or the web-based configuration
utility:
•Verify that your web browser is not set to Work Offline.
•Check the Local Area Connection settings for your Ethernet adapter. The PC
needs to obtain an IP address through DHCP. Alternatively, it can have a
static IP address in the 192.168.1.x range with the default gateway set to
192.168.1.1 (the router’s default IP address).
•Verify that you entered the correct settings in the Wizard to set up your
Internet connection, including the username and password if required.
•Try resetting the modem and the router by powering off both devices. Next,
power on the modem and let it sit idle for about 2 minutes. Then power on
the router. You should now receive a WAN IP address.
•Check the DHCP IP address range of your modem. If the modem uses the
192.168.1.x range, disconnect the cable from the modem to the router, and
then launch the router configuration utility. In the navigation tree, choose
Setup > Network. Enter a new Device IP Address, such as 10.1.1.1 or
192.168.0.1. Alternatively, if you have a DSL modem, leave all settings as is
and instead ask your ISP to put the DSL modem into bridge mode.

Introduction
Features of the User Interface
Cisco Small Business RV0xx Series Routers Administration Guide 18
1
Features of the User Interface
The user interface is designed to make it easy for you to set up and manage your
router. Refer to these topics:
•Navigation, page 18
•Pop-Up Windows, page19
•Setup Wizards, page 19
•Saving the Settings, page19
•Help, page 19
•Logout, page 19
Navigation
The major modules of the configuration utility are represented by buttons in the
left navigation pane. Click a button to view more options. Click an option to open a
configuration page. The selected page appears in the main window of the
configuration utility.
1. Navigation tree
2. Configuration page
1 2

Introduction
Features of the User Interface
Cisco Small Business RV0xx Series Routers Administration Guide 19
1
Pop-Up Windows
Some links and buttons launch pop-up windows that display more information or
related configuration pages. If your web browser displays a warning message
about the pop-up window, allow the blocked content.
Setup Wizards
Two setup wizards make it easy to set up your Internet connection and/or DMZ
and to configure access rules for the WAN, LAN, and DMZ. You can use these
wizards or use the other pages of the configuration utility.
To open the Wizard page: Click the Setup Wizard button in the Configuration
section of the System Summary page. Alternatively, click Wizard in the navigation
tree. There are two wizards:
•Basic Setup: Click Launch Now to configure the basic settings for your
Internet connection and DMZ. Follow the on-screen instructions.
•Access Rule Setup: Click Launch Now to configure access rules for the
WAN, LAN, and DMZ. Follow the on-screen instructions.
Saving the Settings
Your settings on a configuration page are not saved until you click the Save button.
When you navigate to another page, any unsaved settings are abandoned.
To clear the settings without saving them, you can click the Cancel button.
Help
To view more information about the selected configuration page, click the Help link
near the top right corner of the configuration utility. If your web browser displays a
warning message about the pop-up window, allow the blocked content.
Logout
To exit the configuration utility, click the Logout link near the top right corner of the
configuration utility. The Login page appears. You can close the browser window.

2
Cisco Small Business RV0xx Series Routers Administration Guide 20
Viewing System Summary Information
The System Summary page appears after you log in to the configuration utility.
You also can view this page by clicking System Summary in the navigation tree.
Use this page to view information about the current status of the router and the
settings. Refer to these topics:
•System Information, page 21
•Cisco ProtectLink Web, page 21
•Configuration, page 22
•Port Statistics, page 22
•WAN Status, page 24
•Firewall Setting Status, page 25
•VPN Setting Status, page 25
•Log Setting Status, page 25