Cisco Systems RV320K9NA User Manual

Cisco Small BusinessRV320/RV325 Gigabit Dual WAN VPN RouterADMINISTRATION GUIDE

Getting StartedFeatures of the User Interface10 Cisco Small Business RV320/RV325 Administration Guide1

VPNVPN Passthrough100 Cisco Small Business RV320/RV325 Administration Guide8VPN PassthroughVPN Passthrough allows VPN clients to pass through this rou

9Cisco Small Business RV320/RV325 Administration Guide 101 Certificate Management A digital certificate certifies the ownership of a public key by the

Certificate ManagementMy Certificate102 Cisco Small Business RV320/RV325 Administration Guide9Exporting or Displaying a Certificate or Private KeyThe

Certificate ManagementTrusted SSL CertificateCisco Small Business RV320/RV325 Administration Guide 1039 Trusted SSL CertificateSecure Sockets Layer (S

Certificate ManagementCertificate Generator104 Cisco Small Business RV320/RV325 Administration Guide9To export or display a certificate, click the Exp

Certificate ManagementCSR AuthorizationCisco Small Business RV320/RV325 Administration Guide 1059 • Key Encryption Length—Length of the key.• Valid Du

Certificate ManagementCSR Authorization106 Cisco Small Business RV320/RV325 Administration Guide9

10Cisco Small Business RV320/RV325 Administration Guide 107 Log Logs document the status of the system, either by using traps or periodically.System L

LogSystem Log108 Cisco Small Business RV320/RV325 Administration Guide10Configure email NotificationTo configure E-mail notification, check Enable and

LogSystem LogCisco Small Business RV320/RV325 Administration Guide 10910 Configure the LogsTo trigger log entries, select the events:• Syn Flooding—TC

2Cisco Small Business RV320/RV325 Administration Guide 11 System SummaryThe System Summary displays information about the current status of the device

LogSystem Statistics110 Cisco Small Business RV320/RV325 Administration Guide10Additional Information (Log Buttons)If the web browser displays a warni

11Cisco Small Business RV320/RV325 Administration Guide 111 SSL VPNA SSL VPN (Secure Sockets Layer virtual private network) allows users to establish

SSL VPNStatus112 Cisco Small Business RV320/RV325 Administration Guide11StatusProvides the status of the SSL VPN tunnels. A user can be logged out fro

SSL VPNGroup ManagementCisco Small Business RV320/RV325 Administration Guide 11311 Delete a GroupTo delete a group, click the name of the group that y

SSL VPNGroup Management114 Cisco Small Business RV320/RV325 Administration Guide11• My Desktop—Enables RDP5 and VNC. Remote Desktop Protocol Client En

SSL VPNResource ManagementCisco Small Business RV320/RV325 Administration Guide 11511 Resource ManagementSSL VPN supports common Microsoft terminal se

SSL VPNAdvanced Setting116 Cisco Small Business RV320/RV325 Administration Guide11Advanced SettingAdvanced SSL VPN settings limit the range of IP addr

12Cisco Small Business RV320/RV325 Administration Guide 117 Wizard From the Wizard page, you can launch the Basic Setup wizard that guides you through

WizardAccess Rule Setup118 Cisco Small Business RV320/RV325 Administration Guide12

13Cisco Small Business RV320/RV325 Administration Guide 119 User ManagementUser management controls domain and user access, primarily used for PPTP, C

System SummaryConfiguration (Wizard)12 Cisco Small Business RV320/RV325 Administration Guide2Configuration (Wizard)To access the Internet connection s

User Management120 Cisco Small Business RV320/RV325 Administration Guide13• LDAP—Lightweight Directory Access Protocol.- Domain—Domain name users sele

14Cisco Small Business RV320/RV325 Administration Guide 121 Where to Go From HereSupportCisco Small Business Support Communitywww.cisco.com/go/smallbi

Where to Go From Here122 Cisco Small Business RV320/RV325 Administration Guide14Cisco and the Cisco logo are trademarks or registered trademarks of Ci

System SummaryIPv4 and IPv6Cisco Small Business RV320/RV325 Administration Guide 132 • VLAN—VLAN ID of this port. There are two predefined VLANs: 25 a

System SummarySecurity Status14 Cisco Small Business RV320/RV325 Administration Guide2Security StatusThis section displays the status of the security

System SummarySSL VPN StatusCisco Small Business RV320/RV325 Administration Guide 152 • PPTP Tunnel(s) Used—Point-to-Point Tunneling Protocol (PPTP) t

System SummaryLog Setting Status16 Cisco Small Business RV320/RV325 Administration Guide2

3Cisco Small Business RV320/RV325 Administration Guide 17 SetupUse the Setup > Network page to set up your LAN, WAN (Internet), DMZ, and so forth.

SetupSetup Network18 Cisco Small Business RV320/RV325 Administration Guide3Adding or Editing an IPv4 NetworkBy default one IPv4 LAN subnetwork is conf

SetupSetup NetworkCisco Small Business RV320/RV325 Administration Guide 193 To configure WAN Connection Settings, select a WAN interface and click Edi

78-20928-02

SetupSetup Network20 Cisco Small Business RV320/RV325 Administration Guide3- Configure to RA and DHCPv6 automatically—Provide Stateless and Stateful I

SetupSetup NetworkCisco Small Business RV320/RV325 Administration Guide 213 PPPoEChoose this option if your ISP uses PPPoE (Point-to-Point Protocol ov

SetupSetup Network22 Cisco Small Business RV320/RV325 Administration Guide3To configure the IPv6 parameters, check Enable. The DHCPv6 client process a

SetupSetup NetworkCisco Small Business RV320/RV325 Administration Guide 233 • Connection Timers—Connection is disconnected after a period of inactivit

SetupSetup Network24 Cisco Small Business RV320/RV325 Administration Guide3Stateless Address Autoconfiguration (IPv6)Choose this option if your ISP us

SetupSetup NetworkCisco Small Business RV320/RV325 Administration Guide 253 IPv6 in IPv4 Tunnel (IPv6)Choose this option if your ISP uses IPv6 in IPv4

SetupSetup Network26 Cisco Small Business RV320/RV325 Administration Guide36to4 Tunnel (IPv6)Choose this option to establish an auto-tunnel in an IPv4

SetupSetup NetworkCisco Small Business RV320/RV325 Administration Guide 273 IPv6 Rapid Deployment (6rd) Tunnel (IPv6)Choose this option if your ISP us

SetupSetup Network28 Cisco Small Business RV320/RV325 Administration Guide3USB1 or USB2 Port SettingsUSB port configuration manages the connection bet

SetupSetup NetworkCisco Small Business RV320/RV325 Administration Guide 293 Setting Failover and RecoveryWhile both an Ethernet and mobile network lin

Cisco Small Business RV320/RV325 Administration Guide 3 ContentsChapter 1: Getting Started 7Using the Getting Started Window 7Features of the User In

SetupSetup Network30 Cisco Small Business RV320/RV325 Administration Guide3- Extra Charge—Cost in dollars if a given period of time is exceeded.- Stop

SetupDMZ EnableCisco Small Business RV320/RV325 Administration Guide 313 DMZ EnableA DMZ is a subnetwork that is open to the public but behind the fir

SetupPassword32 Cisco Small Business RV320/RV325 Administration Guide3!CAUTION The password cannot be recovered if it is lost or forgotten. If the pas

SetupTimeCisco Small Business RV320/RV325 Administration Guide 333 When Minimum Password Complexity - Enable is checked, the Password Strength Meter i

SetupDMZ Host34 Cisco Small Business RV320/RV325 Administration Guide3To configure NTP and time settings, choose Setup > Time. • Time Zone—Time zon

Setup(Port) ForwardingCisco Small Business RV320/RV325 Administration Guide 353 Use this function to establish a web server or FTP server. Make sure t

Setup(Port) Forwarding36 Cisco Small Business RV320/RV325 Administration Guide3• Port Range—Range of port numbers reserved for this service. STEP 4 C

SetupPort Address TranslationCisco Small Business RV320/RV325 Administration Guide 373 Port Address TranslationPort Address Translation (PAT) is an ex

SetupSetting Up One-to-One NAT38 Cisco Small Business RV320/RV325 Administration Guide3Adding or Editing a Service NameTo add or edit an entry on the

SetupMAC Address CloningCisco Small Business RV320/RV325 Administration Guide 393 To enable this feature, check Enable.To add an entry to the list, cl

Cisco Small Business RV320/RV325 Administration Guide 4 ContentsAdvanced Routing 41Configuring Dynamic Routing 41Configuring Static Routing 42Inbound

SetupAssigning Dynamic DNS to a WAN Interface40 Cisco Small Business RV320/RV325 Administration Guide3Assigning Dynamic DNS to a WAN InterfaceDynamic

SetupAdvanced RoutingCisco Small Business RV320/RV325 Administration Guide 413 Advanced RoutingThis feature enables dynamic routing and adds static ro

SetupAdvanced Routing42 Cisco Small Business RV320/RV325 Administration Guide3(VLSM). RIPv1 also lacks support for router authentication, making it vu

SetupInbound Load BalanceCisco Small Business RV320/RV325 Administration Guide 433 To delete an entry from the list, click the entry that you want to

SetupUSB Device Update44 Cisco Small Business RV320/RV325 Administration Guide3STEP 6 Click SPF Settings to add SPF text. SPF (Sender Policy Framewor

4Cisco Small Business RV320/RV325 Administration Guide 45 DHCPDynamic Host Configuration Protocol (DHCP) is a network protocol that is used to configu

DHCPDHCP Setup46 Cisco Small Business RV320/RV325 Administration Guide4DHCP SetupDHCP Setup configures DHCP for IPv4 or IPv6. It also allows some devi

DHCPDHCP SetupCisco Small Business RV320/RV325 Administration Guide 474 • Client Lease Time—Amount of time in minutes that a network user is allowed t

DHCPViewing the DHCP Status48 Cisco Small Business RV320/RV325 Administration Guide4• DHCP Relay—Passes DHCP requests and replies from another DHCP se

DHCPOption 82Cisco Small Business RV320/RV325 Administration Guide 494 • DHCP Available—Number of dynamic IP addresses available.• Total—Total number

Cisco Small Business RV320/RV325 Administration Guide 5 ContentsPort Status 70Traffic Statistics 71VLAN Membership 71QoS:CoS/DSCP Setting 72DSCP Mark

DHCPIP and MAC Binding50 Cisco Small Business RV320/RV325 Administration Guide4IP and MAC BindingWhen the device is configured as a DHCP server or for

DHCPDNS Local DatabaseCisco Small Business RV320/RV325 Administration Guide 514 Edit or Delete Bound Entries To Edit the settings, select an entry i

DHCPRouter Advertisement (IPv6)52 Cisco Small Business RV320/RV325 Administration Guide4To change the TCP/IP connection settings, for example, on a PC

DHCPRouter Advertisement (IPv6)Cisco Small Business RV320/RV325 Administration Guide 534 enter the Advertisement Interval; the interval at which Route

DHCPRouter Advertisement (IPv6)54 Cisco Small Business RV320/RV325 Administration Guide4

5Cisco Small Business RV320/RV325 Administration Guide 55 System ManagementSystem Management configures advanced settings, such as diagnostic tools, a

System ManagementDual WAN Connections56 Cisco Small Business RV320/RV325 Administration Guide5• Downstream—Maximum downstream bandwidth provided by yo

System ManagementBandwidth ManagementCisco Small Business RV320/RV325 Administration Guide 575 To enable the protocol binding, check the box to enable

System ManagementBandwidth Management58 Cisco Small Business RV320/RV325 Administration Guide5Maximum Bandwidth Provided by ISPEnter the maximum bandw

System ManagementSNMPCisco Small Business RV320/RV325 Administration Guide 595 • Priority—Choose the priority for this service: High or Low. Default p

Cisco Small Business RV320/RV325 Administration Guide 6 ContentsChapter 10: Log 107System Log 107System Statistics 110Processes 110Chapter 11: SSL VP

System ManagementSNMP60 Cisco Small Business RV320/RV325 Administration Guide5• Trap Community Name—Password sent with each trap to the SNMP manager.

System ManagementDiscovery-BonjourCisco Small Business RV320/RV325 Administration Guide 615 STEP 5 Click Save.To add or edit a user:STEP 1 Click Add

System ManagementLLDP Properties62 Cisco Small Business RV320/RV325 Administration Guide5LLDP PropertiesLink Layer Discovery Protocol (LLDP) is a vend

System ManagementUsing DiagnosticsCisco Small Business RV320/RV325 Administration Guide 635 Using DiagnosticsThe Diagnostic page accesses two built-in

System ManagementFirmware Upgrade64 Cisco Small Business RV320/RV325 Administration Guide5Firmware UpgradeThis feature downloads the firmware for your

System ManagementRestartCisco Small Business RV320/RV325 Administration Guide 655 Alternatively, you can choose a language in the following ways:• On

System ManagementBackup and Restore66 Cisco Small Business RV320/RV325 Administration Guide5Backup and RestoreConfiguration files can be imported, exp

System ManagementBackup and RestoreCisco Small Business RV320/RV325 Administration Guide 675 STEP 3 Click Save and choose a file location. Optionally

System ManagementBackup and Restore68 Cisco Small Business RV320/RV325 Administration Guide5

6Cisco Small Business RV320/RV325 Administration Guide 69 Port ManagementUse Port Management to configure port settings and view the status of the por

1Cisco Small Business RV320/RV325 Administration Guide 7 Getting StartedThank you for choosing a Cisco RV320. This chapter includes information to hel

Port ManagementPort Status70 Cisco Small Business RV320/RV325 Administration Guide6• Disable—Check this box to disable a port. By default, all ports a

Port ManagementTraffic StatisticsCisco Small Business RV320/RV325 Administration Guide 716 Traffic StatisticsTo open this page, select Port Management

Port ManagementQoS:CoS/DSCP Setting72 Cisco Small Business RV320/RV325 Administration Guide6QoS:CoS/DSCP SettingThis option groups traffic by classes

Port Management802.1X ConfigurationCisco Small Business RV320/RV325 Administration Guide 736 802.1X ConfigurationPort-based network access control use

Port Management802.1X Configuration74 Cisco Small Business RV320/RV325 Administration Guide6

7Cisco Small Business RV320/RV325 Administration Guide 75 FirewallThe primary objective of a firewall is to control the incoming and outgoing network

FirewallAccess Rules76 Cisco Small Business RV320/RV325 Administration Guide7• Remote Management—Allows remote management of the device when enabled.

FirewallAccess RulesCisco Small Business RV320/RV325 Administration Guide 777 Adding an Access Rule to the IPv4 Access Rule TableTo add (or edit) an I

FirewallContent Filter78 Cisco Small Business RV320/RV325 Administration Guide7STEP 6 Select the Source Interface from the drop-down menu.STEP 7 Sel

FirewallContent FilterCisco Small Business RV320/RV325 Administration Guide 797 STEP 3 Enter a word in the Keyword column.STEP 4 Click Save.Acceptin

Getting StartedFeatures of the User Interface8 Cisco Small Business RV320/RV325 Administration Guide1STEP 7 To configure other settings, use the link

FirewallContent Filter80 Cisco Small Business RV320/RV325 Administration Guide7

8Cisco Small Business RV320/RV325 Administration Guide 81 VPNA VPN is a connection between two endpoints in different networks that allows private dat

VPNSummary82 Cisco Small Business RV320/RV325 Administration Guide8• Domain Name 1 through 4—If this router has a static IP address and a registered d

VPNGateway to GatewayCisco Small Business RV320/RV325 Administration Guide 838 • Remote Client—IP address and subnet mask of the Remote Client. • Deta

VPNGateway to Gateway84 Cisco Small Business RV320/RV325 Administration Guide8• Enable—Check this box to enable the VPN tunnel, or uncheck it to disab

VPNGateway to GatewayCisco Small Business RV320/RV325 Administration Guide 858 - Dynamic IP + E-mail Addr.(USER FQDN) Authentication—This router has a

VPNGateway to Gateway86 Cisco Small Business RV320/RV325 Administration Guide8Remote Group Setup Enter the settings for the Remote Group Setup for thi

VPNGateway to GatewayCisco Small Business RV320/RV325 Administration Guide 878 • Local Security Group Type—LAN resources that can use this tunnel. The

VPNGateway to Gateway88 Cisco Small Business RV320/RV325 Administration Guide8• Perfect Forward Secrecy—When Perfect Forward Secrecy (PFS) is enabled,

VPNGateway to GatewayCisco Small Business RV320/RV325 Administration Guide 898 Advanced Settings for IKE with Preshared Key and IKE with CertificateFo

Getting StartedFeatures of the User InterfaceCisco Small Business RV320/RV325 Administration Guide 91 HelpTo view information about the selected confi

VPNGateway to Gateway90 Cisco Small Business RV320/RV325 Administration Guide8• NAT Traversal—Network Address Translation (NAT) enables users with pri

VPNClient to GatewayCisco Small Business RV320/RV325 Administration Guide 918 • Split DNS—Sends some of the DNS requests to one DNS server and other D

VPNClient to Gateway92 Cisco Small Business RV320/RV325 Administration Guide8• Easy VPN—Allows remote users to connect this device by using Cisco VPN

VPNClient to GatewayCisco Small Business RV320/RV325 Administration Guide 938 Configuring Easy VPNEnter the following information:• Name—Name to descr

VPNClient to Gateway94 Cisco Small Business RV320/RV325 Administration Guide8Local Group SetupEnter the following information:• Local Security Gateway

VPNClient to GatewayCisco Small Business RV320/RV325 Administration Guide 958 • Local Security Group Type—Specify the LAN resources that can access th

VPNClient to Gateway96 Cisco Small Business RV320/RV325 Administration Guide8• IP + Email Address (USER FQDN) Authentication—Client has a static IP ad

VPNClient to GatewayCisco Small Business RV320/RV325 Administration Guide 978 IPSec SetupFor encryption to be successful, the two ends of a VPN tunnel

VPNClient to Gateway98 Cisco Small Business RV320/RV325 Administration Guide8• Preshared Key—Preshared key to use to authenticate the remote IKE peer.

VPNClient to GatewayCisco Small Business RV320/RV325 Administration Guide 998 • AH Hash Algorithm—Authentication Header (AH) protocol describes the pa