Cisco RV016 - Small Business - 10/100 VPN Router Instruction Manual

Cisco Small Business
RV0xx Series Routers
RV042 Dual WAN VPN Router
RV042G Gigabit Dual WAN VPN Router
RV082 Dual WAN VPN Router
RV016 Multi-WAN VPN Router
ADMINISTRATION
GUIDE

© 2011-2012 Cisco Systems, Inc. All rights reserved. 78-19576-01 B0
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco Small Business RV0xx Series Routers Administration Guide 3
Contents
Chapter 1: Introduction 7
RV0xx Series Router Features 7
Ports 9
Status Lights 10
Other Hardware Features 11
Default Settings 12
Mounting Options 12
Placement Tips 12
Desktop Placement 12
Wall Mounting 13
Rack Mounting RV082 or RV016 14
Connecting the Equipment 15
Getting Started with the Configuration 16
Troubleshooting Tips 17
Features of the User Interface 18
Chapter 2: Viewing System Summary Information 20
Chapter 3: Setup 26
Setting Up the Network 27
Changing the Administrator Username and Password 40
Setting the System Time 42
Setting Up a DMZ Host 43
Setting Up Port Forwarding and Port Triggering 44
Setting Up Universal Plug and Play (UPnP) 48
Setting Up One-to-One NAT 51
Cloning a MAC Address for the Router 53
Assigning a Dynamic DNS Host Name to a WAN Interface 55
Setting Up Advanced Routing 57
IPv6 Transition 61

Cisco Small Business RV0xx Series Routers Administration Guide 4
Contents
Chapter 4: DHCP 63
Setting Up the DHCP Server or DHCP Relay 63
Viewing the DHCP Status Information 70
Router Advertisement (IPv6) 71
Chapter 5: System Management 73
Setting Up Dual WAN and Multi-WAN Connections 73
Managing the Bandwidth Settings 81
Setting Up SNMP 84
Enabling Device Discovery with Bonjour 85
Using Built-In Diagnostic Tools 87
Restoring the Factory Default Settings 89
Upgrading the Firmware 90
Restarting the Router 91
Backing Up and Restoring the Settings 92
Chapter 6: Port Management 95
Configuring the Port Settings 95
Viewing the Status Information for a Port 97
Chapter 7: Firewall 99
Configuring the General Firewall Settings 99
Configuring Firewall Access Rules 103
Using Content Filters to Control Internet Access 110
Chapter 8: Cisco ProtectLink Web 113
Getting Started with Cisco ProtectLink Web 113
Specifying the Global Settings for Approved URLs and Clients 115
Approved URLs and Approved Clients 116
Enabling Web Protection for URL Filtering 117

Cisco Small Business RV0xx Series Routers Administration Guide 5
Contents
Updating the ProtectLink License 120
Chapter 9: VPN 122
Introduction to VPNs 122
Site to Site VPN (Gateway To Gateway) 123
Remote Access (Client To Gateway) 123
Remote Access with Cisco QuickVPN 125
Remote Access with PPTP 125
Viewing the Summary Information for VPN 126
Setting Up a Gateway to Gateway (Site to Site) VPN 130
Setting Up a Remote Access Tunnel for VPN Clients (Client To Gateway)
139
Managing VPN Users and Certificates 147
Setting Up VPN Passthrough 149
Setting Up PPTP Server 150
Chapter 10: Logging System Statistics 153
Setting Up the System Log and Alerts 153
Viewing the System Log 157
Chapter 11: Wizard 159
Appendix A: Glossary 161
Appendix B: Troubleshooting 165
Appendix C: Cisco QuickVPN for Windows 167
Introduction 167
Cisco QuickVPN Client Installation and Configuration 168
Using the Cisco QuickVPN Software 168

Cisco Small Business RV0xx Series Routers Administration Guide 6
Contents
Appendix D: Configuring a Gateway-to-Gateway VPN Tunnel Between RV0xx Se-
ries Routers 170
Topology Options 170
VPN Hub and Spoke Topology 171
VPN Mesh Topology 172
Other Design Considerations 173
Configuring a VPN Tunnel on a Cisco RV0xx Series Router 175
Example: Sites with Static WAN IP Addresses 176
Example: Site with a Dynamic WAN IP Address 179
Appendix E: IPSec NAT Traversal 183
Overview 183
Appendix F: Bandwidth Management 186
Creation of New Services 186
Creation of New Bandwidth Management Rules 187
Appendix G: Specifications 189
RV042 189
RV042G 191
Cisco RV082 194
Cisco RV016 196
Appendix H: Where to Go From Here 199

1
Cisco Small Business RV0xx Series Routers Administration Guide 7
Introduction
Thank you for choosing a RV0xx Series VPN Router. This guide provides complete
information to help you configure and manage your router. This chapter includes
information to help you get started using your router. Refer to these topics:
•RV0xx Series Router Features, page 7
•Mounting Options, page 12
•Connecting the Equipment, page 15
•Getting Started with the Configuration, page 16
•Features of the User Interface, page 18
RV0xx Series Router Features
Cisco RV0xx Series dual WAN and multi-WAN VPN routers offer highly secure,
high-performance, reliable connectivity. All of these routers can support a second
Internet connection to ensure continuous connectivity or to increase available
bandwidth and balance traffic. Three models are available. A comparison is
provided below.
NOTE RV042, RV042G, and RV082 have one dedicated Internet port and a DMZ/Internet
port. RV016 has two dedicated Internet ports, one dedicated DMZ port, and five
dual-function ports that can be configured as LAN or Internet ports.
Model LAN
Ports
WAN/DMZ
Ports
RV042 and RV042G 42
RV082 82
RV016 8-13 2-7 Internet
1DMZ

Introduction
RV0xx Series Router Features
Cisco Small Business RV0xx Series Routers Administration Guide 8
1
RV042 and RV042G Ports
RV042 and RV042G Status Lights
RV082 Ports and Status Lights
RV016 Ports and Status Lights
278823
DMZ/Internet1 2 3 4 Internet
Cisco Small Business RV042
System DIAG DMZ/
Internet
DMZMode 1 2 3 4Internet
278822
278824
12 3 4
56 7 8
DMZ/Internet Internet
1234
5678
DIAG
System
Internet
DMZ
Internet DMZ Mode
Cisco Small Business
RV082
10/100
16-Port VPN Router
278826
Cisco Small Business
RV016
10/100
16-Port VPN
12345678
97 106 115 124 133 Internet 2 Internet 1 DMZ
12345678
910111213
7654321
DIAG
System
LAN/Act
LAN/Act
Internet/Act
Internet Internet
Dual-Function Ports
DMZ

Introduction
RV0xx Series Router Features
Cisco Small Business RV0xx Series Routers Administration Guide 9
1
Ports
Port Description
Internet (RV042
and RV082) or
Internet 1-2
(RV016)
Use this port to connect the router to a
broadband network device.
DMZ/Internet
(RV042 and
RV082)
Use this port to connect the router to either
a second broadband network device or a
DMZ host such as a web server or FTP
server. A DMZ allows public Internet traffic
to access a specified computer on your
network without exposing your LAN.
DMZ (RV016) Use this port to connect the router to a DMZ
host such as a web server or FTP server. A
DMZ allows public Internet traffic to access
a specified computer on your network
without exposing your LAN.
1-4 (RV042 and
RV042G) or 1-8
(RV082 and
RV016)
Use these numbered ports to connect
computers and other local network devices.
9-13 and 3-7 Dual
Function Ports
(RV016)
Use these numbered ports as LAN ports
(numbered 9-13) or configure them for use
as Internet ports (numbered 3-7). The status
is shown on the corresponding status lights:
LAN/Act 9-13 or Internet/Act 3-7.

Introduction
RV0xx Series Router Features
Cisco Small Business RV0xx Series Routers Administration Guide 10
1
Status Lights
Light Description
DIAG Lit—The router is preparing for use. Unlit—
The router is ready for use.
System Steady—The router is powered on.
Flashing—The router is running a
diagnostic test.
Internet (RV082,
RV042, RV042G)
or Internet 1-2
(RV016)
Steady—A device is connected to the
Internet port. Flashing—There is network
activity over the Internet port.
DMZ/Internet
(RV082, RV042,
RV042G) or DMZ
(RV016)
Steady—A device is connected to the
DMZ/Internet or DMZ port. Flashing—
There is network activity over the port.
DMZ Mode
(RV082, RV042,
RV042G)
Lit—The DMZ/Internet port is configured
as a DMZ. Unlit—The DMZ/Internet port is
configured as a secondary Internet
connection.
1-4, 1-8 Steady—A device is connected to the
numbered LAN port. Flashing—There is
network activity over the numbered port.
RV042G Gigabit
Ports
For the Internet, DMZ/Internet, and
numbered ports, the color indicates the
speed. Green—Gigabit. Amber—10/100M.
RV016 Dual-Function Ports:
LAN/Act 9-13 Lit if the port is configured as a LAN port.
Steady—A device is connected to the port.
Flashing—There is network activity over
the port.
Internet/Act 3-7
(RV016)
Lit if the port is configured as an Internet
port. Steady—A device is connected to the
port. Flashing—There is network activity
over the port.