Cisco RVS4000 - Gigabit Security Router User manual

Data Sheet
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 4
Cisco RVS4000 4-port Gigabit Security Router: VPN
Cisco Small Business Routers
Highlights
●Secure, high-speed network access for small businesses
●Gigabit Ethernet connections enable rapid transfer of large files
●Advanced security, including intrusion prevention, helps keep assets safe
●Full IPsec VPN capabilities for up to five remote connections
Product Overview
The Cisco®RVS4000 Gigabit Security Router delivers affordable, highly secure network access and switching
capabilities at broadband speed to help enable employees of small businesses like yours safely connect to the
resources they need to be productive (Figure 1). Strong security features include a proven firewall with intrusion
prevention, virtual private network (VPN) capabilities, and an optional service that scans your email and helps fight
spam, viruses, and other threats. An integrated 4-port Gigabit Ethernet switch allows up to four devices to share
high-speed connectivity in the office.
Figure 1. Cisco RVS4000 Gigabit Security Router
Features and Benefits
The Cisco RVS4000 Gigabit Security Router offers:
●High-speed connectivity: Gigabit Ethernet connections on both WAN and LAN ports help you take full
advantage of your broadband connections, enabling your employees to send and receive large files quickly
and easily.
●Proven Stateful Packet Inspection (SPI) firewall with Intrusion Prevention System (IPS): Unlike standard
firewalls, which block incoming streams based only on the source or type of data, the intrusion prevention
system scans deep, enabling it to detect and block most worms, Trojan horses, and denial-of-service attacks
to help keep your business assets safe.
●VPN capabilities: IP Security (IPsec) VPN capabilities built into the RVS4000 enable your remote
employees, whether working from home or on the road, to connect to your office network using nearly any
VPN client to access files and transfer data as securely as if they were in the office.

Data Sheet
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 4
●Optional Trend Micro ProtectLink Gateway Security Service: This optional hosted service adds another
layer of protection to your network by scanning email and websites to help fight spam, virus, web threats, and
data leakage, without the drain on your office PCs caused by traditional security solutions.
●Improved traffic flow and network management: Flexible, built-in support for up to four 802.1Q virtual LAN
(VLAN) connections enable separation of network traffic to help improve traffic flow and overall network
management while enabling the RVS4000 to interoperate with other VLAN-capable switches (Figure 2).
Figure 2. Cisco RVS4000 Gigabit Security Router Port Connections
Product Specifications
Table 1 lists the basic product specifications for the RVS4000 Gigabit Security Router.
Table 1. Product Specifications
Feature Description
Routing ●Static routing
●Routing Information Protocol (RIPv1 and RIPv2)
●Inter-VLAN routing
Layer 2 ●Port-based and 802.1Q tag-based VLANs
●4 active VLANs (4094 range)
●One of five WAN/LAN ports can be mirrored to a selected LAN port
●Supports Rapid Spanning Tree Protocol (RSTP) for loop detection and faster reconfiguration
Network ●Dynamic Host Configuration Protocol (DHCP) Server, DHCP Client, DHCP Relay Agent
●DHCP Server supports static IP address based on MAC address
●Domain Name System (DNS) Relay, Dynamic DNS (DynDNS, TZO)
●Network Address Translation (NAT): Port Address Translation (PAT), Network Address Port Translation (NAPT),
Session Initial Protocol (SIP) Application Layer Gateway (ALG) support, NAT traversal
●Network edge software configurable on any IP address
IPv6 ●Dual-stack IPv4 and IPv6
●6 to 4
●Stateless address auto-configuration
●DHCP v6
●Intra Module Command Protocol (IMCP) v6
Security Access Control
●MAC-based, IP-based access control list (ACL)
Firewall
●SPI firewall
Content Filtering
●Static URL blocking or keyword blocking (included)
●Dynamic filtering through Trend Micro ProtectLink Gateway Security Service (optional)
Intrusion Prevention System (IPS)
●IP sweep detection
●Application anomaly detection (HTTP, FTP, Telnet, Remote Copy Protocol [RCP])
●Peer-to-peer control
●Instant messenger control
●Layer 3/Layer 4 protocol (IP, TCP, User Datagram Protocol [UDP], Internet Control Message Protocol [ICMP])
normalization

Data Sheet
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 3 of 4
Secure Management
●HTTPS
●Username/password
802.1X
●Port-based RADIUS authentication (Extensible Authentication Protocol multicast distributed switching [EAP-MDS],
Protected Extensible Authentication Protocol [PEAP])
VPN ●5 VPN tunnels for remote client access
●5 IPsec gateway-to-gateway tunnels for branch office connectivity
●Triple Data Encryption Standard (3DES) encryption
●Message Digest Algorithm 5 (MD5)/Secure Hash Algorithm (SHA1) authentication
●IPsec NAT=T
●VPN pass-through of Point-to-Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), IPsec
Quality of Service ●Service-based bandwidth management supports rate control and priority
●Port-based prioritization on LAN port; application-based on WAN port
●4 queues
Management ●Simple Network Management Protocol (SNMP) version 1, 2c
●Event logging: local, syslog, email alerts
●Firmware upgradable through web browser
●Flash, RAM diagnostics
●Built-in web user interface for browser-based configuration
Performance NAT throughput: 800 Mbps when IPS is disabled
Warranty Information
This Cisco Small Business product comes with 3-year limited hardware warranty with return to factory replacement and a 90-day limited software
warranty. In addition, Cisco offers software application updates for bug fixes and telephone technical support at no charge for the first 12 months
following the date of purchase. To download software updates, go to http://www.cisco.com/go/smallbiz.
System Specifications
Table 2 lists the system specifications of the RVS4000 Gigabit Security Router.
Table 2. System Specifications
Feature Description
WAN Gigabit Ethernet (10/100/1000) WAN port
LAN 4-port, full-duplex 10/100/1000 Ethernet switch
Physical dimensions and
weight
●W x D x H = 6.69 in. x 1.61 in. x 6.69 in. (170 mm x 41 mm x 170 mm)
●Weight: 0.84 lb (0.38 kg)
Power 12V 1A
Approvals and compliance ●IEEE 802.3/802.3u
●IEEE 802.1X (security authorization)
●RFC 791 (IPv4)
●RFC 2460 (IPv6)
●RFC 1058 (RIPv1)
●RFC 1723 (RIPv2)
Certification ●FCC Class B
●CE
●ICES-003
Environmental operating
range
●Operating temperature: 0º to 40ºC (32º to 104º F)
●Storage temperature: -20º to 70ºC (-4º to 158ºF)
●Operating humidity: 10 to 85% relative humidity (noncondensing)
●Storage humidity: 5 to 90% relative humidity (noncondensing)

Data Sheet
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 4 of 4
Configuration Requirements
Table 3 lists the minimum requirements that must be in place in order to install or use the product.
Table 3. System Requirements
Feature Description
Network adapter Network adapter with Ethernet network cable installed per PC
Web-based configuration Java/cookies/SSL-enabled web browser
Ordering Information
Table 4 lists ordering information for the Cisco RVS4000 Gigabit Security Router and optional Trend Micro
ProtectLink Gateway Security Service.
Table 4. Ordering Information
Part Number Product Name
RVS4000 Cisco RVS4000 Gigabit Security Router (USA)
RVS4000-AU Cisco RVS4000 Gigabit Security Router (Australia/New Zealand)
RVS4000-EU Cisco RVS4000 Gigabit Security Router (Europe)
RVS4000-UK Cisco RVS4000 Gigabit Security Router (United Kingdom)
RVS4000-AS Cisco RVS4000 Gigabit Security Router (Asia Pacific)
RVS4000-SG Cisco RVS4000 Gigabit Security Router (Singapore)
RVS4000-LA Cisco RVS4000 Gigabit SecurityRouter (Latin America)
Security Service
LBATMPG05 1-year subscription to Trend Micro ProtectLink GatewaySecurityService
Printed in USA C78-496735-01 09/09