Cisco Small Business RV215W Instruction Manual

REVIEW DRAFT — CISCO CONFIDENTIAL
Cisco Small Business
RV215W Wireless-N VPN Firewall
ADMINISTRATION
GUIDE

Cisco RV110W Administration Guide 2
Contents
Chapter 1: Introduction 7
Using the Setup Wizard 7
Configuration Next Steps 8
Using the Getting Started Page 8
Chapter 2: Configuring Networking 11
Configuring the WAN Settings 11
Configuring DHCP 11
Configuring Static IP 12
Configuring PPPoE 12
Configuring PPTP 14
Configuring L2TP 15
Configuring Optional Settings 17
Configuring the LAN Settings 17
Changing the Default Cisco RV215W IP Address 18
Configuring DHCP 19
Configuring VLANs 20
Configuring Static DHCP 22
Viewing DHCP Leased Clients 23
Configuring a DMZ Host 23
Configuring RSTP 24
Port Management 25
Cloning the MAC Address 27
Configuring Routing 27
Configuring the Operating Mode 27
Configuring Dynamic Routing 28
Configuring Static Routing 29
Configuring Inter-VLAN Routing 30
Viewing the Routing Table 30
Configuring Dynamic DNS 31
Configuring the IP Mode 32

Cisco RV110W Administration Guide 3
Contents
Configuring IPv6 33
Configuring the WAN for an IPv6 Network 33
Configuring IPv6 LAN Settings 37
Configuring IPv6 Static Routing 40
Configuring Routing (RIPng) 41
Configuring Tunneling 42
Viewing IPv6 Tunnel Status 43
Configuring Router Advertisement 43
Configuring Advertisement Prefixes 45
Connecting to a Mobile Network 47
Failover and Recovery 50
Chapter 3: Configuring the Wireless Network 53
Wireless Security 53
Wireless Security Tips 53
General Network Security Guidelines 55
Cisco RV215W Wireless Networks 55
Configuring Basic Wireless Settings 56
Editing the Wireless Network Settings 58
Configuring the Security Mode 59
Configuring MAC Filtering 62
Configuring Time of Day Access 63
Configuring the Wireless Guest Network 64
Configuring Advanced Wireless Settings 66
Configuring WDS 69
Configuring WPS 70
Chapter 4: Configuring the Firewall 71
Cisco RV215W Firewall Features 71
Configuring Basic Firewall Settings 73
Configuring Remote Management 75

Cisco RV110W Administration Guide 4
Contents
Configuring Universal Plug and Play 76
Managing Firewall Schedules 77
Adding or Editing a Firewall Schedule 77
Configuring Services Management 77
Configuring Access Rules 78
Adding Access Rules 79
Creating an Internet Access Policy 82
Adding or Editing an Internet Access Policy 82
Configuring Port Forwarding 83
Configuring Single Port Forwarding 84
Configuring Port Range Forwarding 85
Configuring Port Range Triggering 85
Chapter 5: Configuring VPN 87
VPN Tunnel Types 87
VPN Clients 88
Configuring PPTP 88
Configuring NetBIOS Over VPN 89
Creating and Managing PPTP Users 89
Creating and Managing QuickVPN Users 90
Importing VPN Client Settings 91
Configuring Basic VPN Settings (Site-to-Site VPN) 92
Viewing Default Values 93
Configuring Advanced VPN Parameters 94
Managing IKE Policies 94
Managing VPN Policies 95
Adding or Editing IKE Policies 95
Adding or Editing VPN Policies 97
Configuring Certificate Management 100
Configuring VPN Passthrough 101
Chapter 6: Configuring Quality of Service (QoS) 103

Cisco RV110W Administration Guide 5
Contents
Configuring Bandwidth Management 103
Configuring Bandwidth 103
Configuring Bandwidth Priority 104
Configuring QoS Port-Based Settings 105
Configuring CoS Settings 106
Configuring DSCP Settings 106
Chapter 7: Administering Your Cisco RV215W 108
Setting Password Complexity 109
Configuring User Accounts 110
Setting the Session Timeout Value 111
Configuring Simple Network Management (SNMP) 111
Configuring SNMP System Information 111
Editing SNMPv3 Users 112
Configuring the SNMP Traps 113
Using Diagnostic Tools 114
Network Tools 114
Configuring Port Mirroring 116
Configuring Logging 116
Configuring Logging Settings 116
Configuring the E-Mailing of Logs 118
Configuring Bonjour 120
Configuring Date and Time Settings 120
Backing Up and Restoring the System 121
Backing Up the Configuration Settings 122
Restoring the Configuration Settings 123
Copying the Configuration Settings 123
Generating an Encryption Key 124
Upgrading Firmware or Change the Language 124
Restarting the Cisco RV215W 126
Restoring the Factory Defaults 126

Cisco RV110W Administration Guide 6
Contents
Running the Setup Wizard 126
Chapter 8: Viewing the Cisco RV215W Status 127
Viewing the Dashboard 128
Viewing the System Summary 130
Viewing the Wireless Statistics 132
Viewing the VPN Status 133
Viewing the IPSec Connection Status 134
Viewing Logs 135
Viewing Connected Devices 136
Viewing Port Statistics 137
Viewing the GuestNet Status 138
Appendix A: Using Cisco QuickVPN 139
Overview 139
Before You Begin 139
Installing the Cisco QuickVPN Software 140
Installing from the CD-ROM 140
Downloading and Installing from the Internet 142
Using the Cisco QuickVPN Software 142
Appendix B: Where to Go From Here 145

1
Cisco RV215W Wireless-N VPN Firewall Administration Guide 1
Draft Version 1—Cisco Confidential
Getting Started
The Getting Started page displays the most common Cisco RV215W
configuration tasks. Use the links on this page to jump to the relevant configuration
page.
This page appears every time you start the Device Manager. To change this
behavior, check Don’t show on start up.
Initial Settings
Change Default
Administrator Password
Displays the Users page where you can change
the administrator password and set up a guest
account. See Configuring User Accounts.
Launch Setup Wizard Launches the Setup Wizard. Follow the on-screen
instructions.
Configure WAN Settings Opens the Internet Setup page to change
parameters such as the router host name. See
Configuring the WAN Settings.
Configure LAN Settings Opens the LAN Configuration page to modify the
LAN parameters, such as the management IP
address. See Configuring the LAN Settings.
Configure Wireless
Settings
Open the Basic Settings page to manage the
radio. See Configuring Basic Wireless Settings.

Getting Started
Cisco RV215W Wireless-N VPN Firewall Administration Guide 2
1
Draft Version 1—Cisco Confidential
Quick Access
Device Status
Other Resources
Saving Changes
When you finish making changes on a configuration page, click Save to save the
changes in Flash memory, or click Cancel to undo your changes.
Upgrade Router
Firmware
Open the Firmware/Language Upgrade page to
update the router firmware or language pack. See
Upgrading Firmware or Change the Language.
Add VPN Clients Opens the VPN Clients page to manage virtual
private networks. See VPN Clients.
Configure Remote
Management Access
Opens the Basic Settings page to enable the basic
features of the router. See Configuring Basic
Firewall Settings.
System Summary Displays the System Summary page that shows
the state of the router. See Viewing the System
Summary.
Wireless Status Displays the Wireless Statistics page that shows
the state of the radio. See Viewing the Wireless
Statistics.
VPN Status Displays the VPN Status page that lists the VPN
managed by this router. See Viewing the VPN
Status.
Support Click to open the Cisco support page.
Forums Click to visit Cisco online support forums.

Getting Started
Connecting to Your Wireless Network
Cisco RV215W Wireless-N VPN Firewall Administration Guide 3
1
Draft Version 1—Cisco Confidential
Connecting to Your Wireless Network
To connect a device (such as a computer) to your wireless network, configure the
wireless connection on the device with the wireless security information you
configured for the Cisco RV215W by using the Setup Wizard.
The following steps are provided as an example; it might be necessary to
configure your device differently. For instructions that are specific to your device,
consult its documentation.
STEP 1 Open the wireless connection settings window or program for your device.
Your computer might have special software installed to manage wireless
connections, or you might find the wireless connections under the Control Panel in
the Network Connections or Network and Internet window. (The location
depends on your operating system.)
STEP 2 Enter the network name (SSID) you chose for your network in the Setup Wizard.
STEP 3 Choose the type of encryption and enter the security key that you specified in the
Setup Wizard.
If you did not enable security (not recommended), leave the wireless encryption
fields that were configured with the security type and passphrase blank.
STEP 4 Verify your wireless connection and save your settings.

2
Cisco RV215W Wireless-N VPN Firewall Administration Guide 4
Draft Version 2—Cisco Confidential
Viewing the Status
Viewing the Dashboard
The Dashboard page provides important router information.
To view the Dashboard, click Status > Dashboard.
To change the refresh rate of the statistics and parameter values displayed, select
the frequency from the Refresh Rate drop-down menu.
To display an interactive view of the router back panel, click Show Panel View.
The back panel view shows you the ports that are connected to a device (lit
green).
•To view a port connection information, mouse-over the port.
•To refresh the port information, click Refresh.
•To close the port information window, click Close.
The Dashboard page displays the following:
Device Information
•System Name—Name of the device.
•Firmware Version—Firmware version the device is currently running.
•Serial Number—Serial number of the device.
Resource Utilization
•CPU—CPU utilization.
•Memory—Memory utilization.
•Current Time—Time of day.
•System Up Time—How long the system has been running.

Viewing the Status
Viewing the Dashboard
Cisco RV215W Wireless-N VPN Firewall Administration Guide 5
2
Draft Version 2—Cisco Confidential
Syslog Summary
Indicates whether logging is enabled for these event categories:
•Emergency
•Alert
•Critical
•Error
•Warning
To view the logs, click details. For more information see Viewing Logs.
To manage logs, click manage logging. For more information see Configuring
Logging Settings.
LAN (Local Network) Interface
•MAC Address—The MAC address of the device.
•IPv4 Address—Management IP address of the device.
•IPv6 Address—Management IP address of the device (when IPv6 is
enabled).
•DHCP Server—Status of the device IPv4 DHCP server (enabled or
disabled).
•DHCPv6 Server—Status of the router IPv6 DHCP server (enabled or
disabled).
To view the LAN settings, click details. For more information, see Configuring the
LAN Settings.
WAN (Mobile Network) Information
•IPv4 Address—IPv4 address of the USB port.
•State—State of the mobile network WAN connection (up or down).
To view the WAN settings, click details. For more information see Configuring the
WAN Settings.
WAN (Internet) Information
•IPv4 Address—IPv4 address of the router WAN port.
•IPv6 Address—IPv6 address of the router WAN port, if IPv6 is enabled.

Viewing the Status
Viewing the System Summary
Cisco RV215W Wireless-N VPN Firewall Administration Guide 6
2
Draft Version 2—Cisco Confidential
•State—State of the wired WAN connection (up or down).
To view the WAN settings, click details. For more information see Configuring the
WAN Settings.
Wireless Networks
Lists the status of the four wireless network SSIDs.
To view the router wireless settings, click details. For more information see
Viewing the Wireless Statistics.
VPN
•QuickVPN Users—Number of QuickVPN users.
•PPTP Users—Number of Point-to-Point Tunneling Protocol (PPTP) users.
Viewing the System Summary
The System Summary page displays a summary of the device values, such as the
firmware version and serial number.
To view a summary of system settings, choose Status > System Summary.
To jump to the related window, click the underscored parameter. For example, to
modify the LAN IP address, click LAN IP. The LAN Configuration window displays.
Click Refresh to obtain the latest information.
The System Summary page displays this information:
System Information
•Firmware Version—Current software version the device is running.
•Firmware MD5 Checksum—The message-digest algorithm used to verify
the integrity of files.
•Locale—The language installed on the router.
•Language Version—The version of the installed language pack. The
language pack version should be compatible with the currently- installed
firmware. In some cases, an older language pack may be used with a newer
firmware image. The router will check the language pack version to see if it
is compatible with the current firmware version.

Viewing the Status
Viewing the System Summary
Cisco RV215W Wireless-N VPN Firewall Administration Guide 7
2
Draft Version 2—Cisco Confidential
•Language MD5 Checksum—The MD5 checksum of the language pack.
•CPU Model—Chipset of CPU currently used.
•Serial Number—Serial number of the device.
•System Up Time—How long the system has been running.
•Current Time—Time of day.
•PID VID—Product ID and version ID of the device.
IPv4 Configuration
•LAN IP—LAN IP address of the device.
•WAN IP—WAN IP address of the device. You can release the current IP
address and obtain a new one by clicking Release or Renew.
•Gateway—IP address of the gateway to which the is connected (for
example, the cable modem).
•Mode—Displays Gateway if NAT is enabled, or Router.
•DNS 1—Primary DNS server IP address of the WAN port.
•DNS 2—Secondary DNS server IP address of the WAN port.
•DDNS—Indicates whether the Dynamic DNS is enabled or disabled.
IPv6 Configuration
•LAN IP—LAN IP address of the device.
•WAN IP—WAN IP address of the device.
•Gateway—IP address of the gateway to which the is connected (for
example, the cable modem).
•NTP—Network Time Protocol server (hostname or IPv6 address).
•Prefix Delegation—IPv6 prefix returned from the device at the ISP that is
given to IP addresses on the .
•DNS 1—IP address of the primary DNS server.
•DNS 2—IP address of the secondary DNS server.
Wireless Summary
•SSID 1—Public name of the first wireless network.

Viewing the Status
Viewing the Wireless Statistics
Cisco RV215W Wireless-N VPN Firewall Administration Guide 8
2
Draft Version 2—Cisco Confidential
-Security—Security setting for SSID 1.
•SSID 2—Public name of the second wireless network.
-Security—Security setting for SSID 2.
•SSID 3—Public name of the third wireless network.
-Security—Security setting for SSID 3.
•SSID 4—Public name of the fourth wireless network.
-Security—Security setting for SSID 4.
Firewall Setting Status
•Dos (Denial of Service)—Indicates whether DoS prevention is on or off.
•Block WAN Request—Indicates whether WAN request blocking is on or off.
•Remote Management—Indicates whether or not the Device Manager can
be accessed remotely.
VPN Setting Status
•QuickVPN Connections Available—Number of available QuickVPN
connections.
•PPTP VPN Connections Available—Number of available PPTP VPN
connections.
•Connected QuickVPN Users—Number of connected QuickVPN users.
•Connected PPTP VPN Users—Number of connected PPTP VPN users.
Viewing the Wireless Statistics
The Wireless Statistics page shows wireless statistics for the device radio.
To view wireless statistics, choose Status > Wireless Statistics.
To change the refresh rate, choose a refresh rate from the Refresh Rate drop-
down menu.

Viewing the Status
Viewing the VPN Status
Cisco RV215W Wireless-N VPN Firewall Administration Guide 9
2
Draft Version 2—Cisco Confidential
To show the bytes in kilobytes (KB) and the numerical data in rounded up values,
check Show Simplified Statistic Data and click Save. By default, byte data is
displayed in bytes and other numerical data is displayed in long form.
To reset the wireless statistics counters, click Clear Count. Also the counters are
reset when the device is rebooted.
The Wireless Statistics page displays this information:
Viewing the VPN Status
The VPN page displays the status of VPN connections.
To view VPN user connection status, choose Status > VPN Status.
The VPN page displays this information:
SSID Name The name of the wireless network.
Packet Number of received and sent wireless packets
reported to the radio over all configured and active
SSIDs.
Byte Number of received and sent bytes of information
reported to the radio, over all configured SSIDs.
Error Number of received and sent sent packet errors
reported to the radio, over all configured SSIDs.
Dropped Number of received and sent packets dropped by the
radio, over all configured SSIDs.
Multicast Number of multicast packets sent over this radio.
Collisions Number of packet collisions reported to the router.
Username The username of the VPN user associated with the
QuickVPN or PPTP tunnel.
Remote IP Displays the IP address of the remote QuickVPN client.
This could be a NAT/Public IP if the client is behind the
NAT router.

Viewing the Status
Viewing the IPSec Connection Status
Cisco RV215W Wireless-N VPN Firewall Administration Guide 10
2
Draft Version 2—Cisco Confidential
You can change the status of a connection to either establish or disconnect the
configured VPN client.
To terminate an active VPN connection, click Disconnect.
Viewing the IPSec Connection Status
The IPSec Connection status shows the status of active VPN policies on the
Cisco RV215W. (These policies are configured on the VPN > Advanced VPN
Setup page.) To view the IPSec connection status:
STEP 1 Choose Status > IPSec Connection Status.
STEP 2 The table displays the following information:
•Refresh Rate—Choose the rate at which you want the data display to clear
and display the newest data.
•Show Simplified Statistic Data—By default, byte data is displayed in bytes
and other numerical data is displayed in long form. To show the bytes in
kilobytes (KB) and the numerical data in rounded up form, check Show
Simplified Statistic Data.
•Policy Name—Name of the VPN policy for which data is displayed.
•Local or Remote—Displays the local and remote IP addresses.
•Start Time and End Time—Displays the start and end times of the IPSec
connections.
Status Displays the current status of QuickVPN client.
OFFLINE means that QuickVPN tunnel is not initiated or
established by the VPN user. ONLINE means that the
QuickVPN Tunnel, is initiated or established by the VPN
user, is active.
Start Time Time of the VPN user established a connection.
End Time Time of the VPN user ended a connection.
Duration (Seconds) Duration of time between the VPN user establishing
and ending a connection.
Protocol Protocol the user uses, QuickVPN or PPTP.

Viewing the Status
Viewing Logs
Cisco RV215W Wireless-N VPN Firewall Administration Guide 11
2
Draft Version 2—Cisco Confidential
•Duration—Displays the elapsed time for which the connection is or was
active.
•Packet—Displays the received (Rx) and transmitted (Tx) packets on the
connection.
•Byte—Displays the received (Rx) and transmitted (Tx) bytes on the
connection.
•State—Displays the state of the connection (for example, active or not
connected).
•Action—Displays actions you can perform on the connection (for example,
disconnect).
STEP 3 If you made any changes, click Save.
Viewing Logs
The View Logs page displays the Cisco RV215W logs.
To view the logs, choose Status > View Logs.
To display the latest log entries, click Refresh Logs.
To filter logs or specify the severity of logs to display, check the boxes next to the
log type and click Go. Note that all log types above a selected log type are
automatically included and you cannot deselect them. For example, choosing
“error” logs automatically includes emergency, alert, and critical logs in addition to
error logs.
The event severity levels are listed from the highest severity to the lowest severity,
as follows:
•Emergency—System is not usable.
•Alert—Action is needed.
•Critical—System is in a critical condition.
•Error—System is in error condition.
•Warning—System warning occurred.
•Notification—System is functioning properly, but a system notice occurred.

Viewing the Status
Viewing Connected Devices
Cisco RV215W Wireless-N VPN Firewall Administration Guide 12
2
Draft Version 2—Cisco Confidential
•Informational—Device information.
•Debugging—Provides detailed information about an event.
To delete all entries in the log window, click Clear Logs.
To save all log messages from the firewall to the local hard drive, click Save Logs.
To specify the number of entries to show per page, choose a number from the
drop-down menu.
Use the page navigation buttons to move between log pages.
Viewing Connected Devices
The Connected Devices page displays information about the active devices
connected to the Cisco RV215W.
The IPv4 ARP Table displays information from devices that have responded to the
address resolution protocol (ARP) request. If a device does not respond to the
request, it is removed from the list.
The IPv6 NDP Table displays all IPv6 neighbor discover protocol (NDP) devices
connected to the local link.
To view connected devices, choose Status > Connected Devices.
To specify the types of interfaces to display, select a value from the Filter drop-
down menu:
All—All devices connected to the router.
Wireless—All devices connected through the wireless interface.
Wired—All devices connected through the Ethernet ports on the router.
WDS—All Wireless Distribution System (WDS) device connected to the router.

Viewing the Status
Viewing Port Statistics
Cisco RV215W Wireless-N VPN Firewall Administration Guide 13
2
Draft Version 2—Cisco Confidential
Viewing Port Statistics
The Port Statistics page displays port detailed activity.
To view port statistics, choose Status > Port Statistics.
To cause the page to re-read the statistics from the router and refresh the page,
choose a refresh rate from the Refresh Rate drop-down menu.
To show the bytes in kilobytes (KB) and the numerical data in rounded up form,
check Show Simplified Statistic Data and click Save. By default, byte data is
displayed in bytes and other numerical data is displayed in long form.
To reset the port statistics counters, click Clear Count.
The Port Statistics page displays this information:
Viewing the GuestNet Status
The guest network statistics displays information about the wireless guest
network configured on the Cisco RV215W.
To view the guest network status, choose Status > GuestNet Status. The following
information is displayed:
•Host Name—Device connected to the guest network.
Interface Name of the network interface.
Packet Number of received/sent packets.
Byte Number of received/sent bytes of information per second.
Error Number of received/sent packet errors.
Dropped Number of received/sent packets that were dropped.
Multicast Number of multicast packets sent over this radio.
Collisions Number of signal collisions that occurred on this port. A
collision occurs when the port tries to send data at the
same time as a port on another router or computer that is
connected to this port.

Viewing the Status
Viewing the Mobile Status
Cisco RV215W Wireless-N VPN Firewall Administration Guide 14
2
Draft Version 2—Cisco Confidential
•IP Address—IP address assigned to the connected device.
•MAC Address—MAC or hardware address of the connected device.
•Time Left—Time remaining that the device can be connected to the guest
network. (Time limits are configured in the Wireless > Basic Settings >
Guest Net Settings page.)
•Action—Actions you can perform on the connected device (for example,
disconnect).
Viewing the Mobile Status
The mobile network statistics about the mobile 3G/4G network and
communication device (dongle) configured on the Cisco RV215W.
To view the mobile network status, choose Status > MobileNetwork. The following
information is displayed:
•Connection—Device connected to the guest network.
•Internet IP Address—IP address assigned to the USB device.
•Subnet Mask—Subnet mask of the USB device.
•Default Gateway—IP address of the default gateway.
•Connection Up Time—How long the link has been up.
•Current Session Usage—Volume of data being received (Rx) and
transmitted (Tx) on the mobile link.
•Manufacturer—Card manufacturer name.
•Card Model—Card model number.
•Card Firmware—Card firmware version.
•SIM Status—Subscriber identification module (SIM) status.
•IMS—The unique identification associated with the GSM, UMTS or LTE
network mobile phone users.
•Carrier—Mobile network carrier.
•Service Type—Type of service accessed.
•Signal Strength—Strength of the wireless mobile network signal.