Cisco WRV210 - Wireless-G VPN Router Instruction Manual

Cisco Small Business
WRV210 Wireless-G VPN Router with RangeBooster
ADMINISTRATION
GUIDE

© 2009 Cisco Systems, Inc. All rights reserved. OL-20252-01
CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco Ironport, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco Nurse Connect, Cisco Stackpower,
Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flip Video, Flip Video
(Design), Flipshare (Design), Flip Ultra, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Store, and
Flip Gift Card are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP,
CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity,
Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS,
iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking
Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to
Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States
and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0907R)

Cisco Small Business WRV210 Administration Guide 3
Contents
Chapter 1: Introduction 6
Product Overview 6
Features 6
Front Panel 7
Back Panel 8
Initial Installation 8
Placement Options 9
Desktop Option 9
Wall Option 9
Connecting the Equipment 9
Verifying the Hardware Installation 11
Configuring the Internet Connection 12
Securing the Wireless Network 13
Getting Started in the Configuration Utility 16
Logging In 16
Navigating through the Pages 17
Saving Your Changes 17
Viewing the Help Files 17
Chapter 2: Setting Up the Network 18
Configuring the Basic Settings 18
Localizing the Configuration Utility 19
Setting Up the Internet Connection 20
Setting Up the Local Network 23
Adjusting the Time Settings 24
Setting Up Virtual LANs 25
Using DDNS to Map Domain Names to Your Network 26
DynDNS.org Setup 27
TZO.com Setup 28
Cloning a MAC Address for Your Internet Connection 29
Setting Up Advanced Routing 30
Configuring Dynamic Routing 31

Cisco Small Business WRV210 Administration Guide 4
Contents
Setting Up Static Routing 32
Chapter 3: Configuring the Wireless Network 34
A Note About Wireless Security 34
Wireless Security Tips 34
General Network Security Guidelines 36
Enabling Your Wireless Networks 37
Wireless > Wireless Security 39
Controlling Access to the Wireless Network 43
Adjusting the Advanced Wireless Settings 45
Configuring a Wireless Distribution System (WDS) 47
Chapter 4: Configuring the Firewall 49
Preventing Attacks 50
Enabling Port Forwarding to Allow Access to Services 51
Using Port Triggering to Allow Access to Applications 54
Configuring a DMZ to Allow Access to All Ports of a Server 55
Restricting Users’ Access to the Internet 57
Blocking Web Access with URL Filtering 59
Chapter 5: Configuring a Virtual Private Network (VPN) 61
Managing the VPN Users and Certificates 61
Managing the VPN Users 63
Managing VPN Certificates 65
Configuring VPN Passthrough 66
VPN > IPSec VPN 68
Monitoring the IPSec VPN Tunnels 73
Chapter 6: Configuring Quality of Service (QoS) 75
Configuring QoS Settings for Specified Applications 75
Priority Queue QoS Type 76

Cisco Small Business WRV210 Administration Guide 5
Contents
Bandwidth Allocation QoS 77
Configuring QoS Settings for Specified Ports 78
Chapter 7: Administration 80
Managing Access and Configuring Other Management Options 80
Resetting the Admin Password 81
Managing LAN and WAN Access to the Configuration Utility 82
Configuring SNMP Settings for Status Reporting 84
Configuring Universal Plug and Play (UPnP) Settings 85
Backing and Restoring a Configuration 86
Setting Up Alerts and System Logs 87
Performing Diagnostic Tests 89
Reverting to the Factory Default Settings 91
Upgrading the Firmware 92
Rebooting the Router 94
Chapter 8: Monitoring the Status of the Network 95
Monitoring the Router Status 96
Monitoring the LAN 97
Monitoring the Wireless Network 99
Monitoring the System Performance 100
Monitoring the QuickVPN Clients 102
Appendix A: Specifications 103
Appendix B: Where to Go From Here 107

1
Cisco Small Business WRV210 Administration Guide 6
Introduction
This chapter provides information to familiarize you with the product features,
guide you through the installation process, and get started using the web-based
Configuration Utility.
•Product Overview, page 6
•Initial Installation, page 8
•Getting Started in the Configuration Utility, page 16
Product Overview
Thank you for choosing the Wireless-G VPN Router with RangeBooster. The
WRV210 is a VPN router with a Wireless-G access point for small offices and
home offices. The 10/100 Ethernet WAN interface connects directly to your
broadband DSL or Cable modem. For the LAN interface, there is a built-in 4-port,
full-duplex 10/100 Ethernet switch that can connect up to four devices.
Features
The wireless Access Point supports 802.11b/g and incorporates RangeBooster
technology, which utilizes a MIMO antennae configuration to provide increased
coverage and reliability over standard 802.11g.
The WRV210 has the advanced security functions needed for business
networking. It has a SPI based firewall with DoS prevention, but also a Virtual
Private Networking (VPN) engine for secure communication between mobile or
remote workers and branch offices. For your wired and wireless local area
network, there is support for multiple SSIDs and VLANs for traffic separation. The
WRV210 Wireless Access Point implements WPA2-PSK, WPA2-ENT, and WEP
encryption, along with other security features including enabling/disabling SSID
Broadcasts and MAC-based filtering.

Introduction
Product Overview
Cisco Small Business WRV210 Administration Guide 7
1
Wireless networking in business environments requires additional flexibility. The
WRV210 has the capability to expand or reduce the area of your wireless network.
There is support for Wireless Distribution System (WDS), which allows the
wireless coverage to be expanded without wires through wireless bridging
between it and select Cisco Small Business stand-alone access points. That,
along with the ability to increase or decrease the RF output power, allows for
optimal wireless coverage.
Front Panel
POWER—(Green) The Power LED lights up when the Router is powered on.
DMZ—(Green) The DMZ LED lights up when the Router has an available DMZ port.
If the LED is flashing, the Router is sending or receiving data over the DMZ port.
INTERNET—(Green) The Internet LED lights up when the Router is connected to
your cable or DSL modem. If the LED is flashing, the Router is sending or receiving
data over the Internet port.
WIRELESS—(Green) The Wireless LED lights up whenever there is a successful
wireless connection. If the LED is flashing, the Router is actively sending or
receiving data over the wireless network.
1-4 (ETHERNET)—(Green) These four LEDs correspond to the four Ethernet ports
of the Router. If the LED is continuously lit, the Router is connected to a device
through the corresponding port (1, 2, 3, or 4). If the LED is flashing, the Router is
actively sending or receiving data over that port.

Introduction
Initial Installation
Cisco Small Business WRV210 Administration Guide 8
1
Back Panel
POWER—The Power port is where you connect the AC power cable.
RESET—The Reset button has two functions.
•If pressed for one second, the Reset button causes a warm reboot—the
Router restarts without losing any of the current configuration settings.
•If pressed for approximately 15 seconds, the Reset button resets the
Router’s factory defaults.
You can also restore the factory defaults from the Administration > Factory Defaults
screen of the Router’s Configuration Utility.
INTERNET—The Internet port connects to your cable or DSL modem.
1-4 (ETHERNET)—The four Ethernet ports connect to your PCs and other network
devices.
Initial Installation
Follow the instructions below to connect the equipment and configure the Internet
connection and wireless network.
•“Placement Options” on page 9
•Connecting the Equipment, page 9
•Verifying the Hardware Installation, page 11
•Configuring the Internet Connection, page 12

Introduction
Initial Installation
Cisco Small Business WRV210 Administration Guide 9
1
•Securing the Wireless Network, page 13
Placement Options
You can place the router horizontally on a desktop or mount it on the wall.
Desktop Option
For desktop placement, place the router horizontally on a surface so it sits on its
four rubber feet.
Wall Option
To mount the router on the wall, follow these steps.
STEP 1 Determine where you want to mount the router.
STEP 2 Install two screws (not supplied) 2-9/16 in. apart (approximately 6.45 cm.) Leave
about 1/8 in. (about 3 mm) of the head exposed.
STEP 3 With the back panel pointing up (if installing vertically), position the router so that
the wall-mount crisscross slots on the bottom panel line up with the two screws.
STEP 4 Place the wall-mount slots over the screws and slide the router down until the
screws fit snugly into the wall-mount slots.
Connecting the Equipment
STEP 1 Make sure that all of the network hardware is powered off, including the Router,
PCs, and cable or DSL modem.
STEP 2 Connect one end of an Ethernet network cable to one of the LAN ports (labeled 1-
4) on the back of the Router, and the other end to an Ethernet port on a PC.
193817
Wall
m
ount
slots
2-9/16

Introduction
Initial Installation
Cisco Small Business WRV210 Administration Guide 10
1
NOTE You must connect one computer with an Ethernet cable for the purpose of
the initial configuration. After you complete the initial configuration,
administrative tasks can be performed from a wireless connection.
STEP 3 Repeat the previous step to connect more PCs, a switch, or other network devices
to the Router.
STEP 4 Connect an Ethernet network cable from the cable or DSL modem to the Internet
port on the Router’s back panel.