Resumen del contenido incluido en la página 1
ADMINISTRATION
GUIDE
Cisco Small Business
RV320/RV325 Gigabit Dual WAN VPN Router
Resumen del contenido incluido en la página 2
78-20928-02
Resumen del contenido incluido en la página 3
Contents Chapter 1: Getting Started 7 Using the Getting Started Window 7 Features of the User Interface 8 Chapter 2: System Summary 11 System Information 11 Configuration (Wizard) 12 Port Activity 12 IPv4 and IPv6 13 Security Status 14 VPN Setting Status 14 SSL VPN Status 15 Log Setting Status 15 Chapter 3: Setup 17 Setup Network 17 IP Mode 17 WAN1 or WAN2 Port Settings 18 USB1 or USB2 Port Settings 28 3G/4G Connection 28 Setting Failover and Recovery 29 DMZ Enable 31 Password 31 Time 33 DMZ H
Resumen del contenido incluido en la página 4
Contents Advanced Routing 41 Configuring Dynamic Routing 41 Configuring Static Routing 42 Inbound Load Balance 43 USB Device Update 44 Chapter 4: DHCP 45 DHCP Setup 46 Viewing the DHCP Status 48 Option 82 49 IP and MAC Binding 50 DNS Local Database 51 Router Advertisement (IPv6) 52 Chapter 5: System Management 55 Dual WAN Connections 55 Bandwidth Management 57 SNMP 59 Configuring SNMP 59 Discovery-Bonjour 61 LLDP Properties 62 Using Diagnostics 63 Factory Default 63 Firmware Upgrade 64 Languag
Resumen del contenido incluido en la página 5
Contents Port Status 70 Traffic Statistics 71 VLAN Membership 71 QoS:CoS/DSCP Setting 72 DSCP Marking 72 802.1X Configuration 73 Chapter 7: Firewall 75 General 75 Access Rules 76 Content Filter 78 Chapter 8: VPN 81 Summary 81 Gateway to Gateway 83 Add a New Tunnel 83 Local Group Setup 84 Advanced Settings for IKE with Preshared Key and IKE with Certificate 89 Client to Gateway 91 Advanced Settings for IKE with Preshared Key and IKE with Certificate 98 VPN Passthrough 100 PPTP Server 100 Chapte
Resumen del contenido incluido en la página 6
Contents Chapter 10: Log 107 System Log 107 System Statistics 110 Processes 110 Chapter 11: SSL VPN 111 Status 112 Group Management 112 Resource Management 115 Advanced Setting 116 Chapter 12: Wizard 117 Basic Setup 117 Access Rule Setup 117 Chapter 13: User Management 119 Cisco Small Business RV320/RV325 Administration Guide 6
Resumen del contenido incluido en la página 7
1 Getting Started Thank you for choosing a Cisco RV320. This chapter includes information to help you get started using your device. Using the Getting Started Window The default settings are sufficient for many small businesses. Network demands or your Internet Service Provider (ISP) might require modification of the settings. To use the web interface, you need a PC with Internet Explorer (version 6 and higher), Firefox, or Safari (for Mac). To launch the web interface: STEP 1 Connect a P
Resumen del contenido incluido en la página 8
Getting Started Features of the User Interface 1 STEP 7 To configure other settings, use the links in the navigation tree. Troubleshooting Tips If you have trouble connecting to the Internet or the web-based web interface: • Verify that your web browser is not set to Work Offline. • Check the local area network connection settings for your Ethernet adapter. The PC should obtain an IP address through DHCP. Alternatively, the PC can have a static IP address in the 192.168.1.x range with the def
Resumen del contenido incluido en la página 9
Getting Started Features of the User Interface 1 Help To view information about the selected configuration page, click Help near the top right corner of the web interface. If your web browser displays a warning message about the pop-up window, allow the blocked content. Logout To exit the web interface, click Logout near the top right corner of the web interface. The Login page appears. Cisco Small Business RV320/RV325 Administration Guide 9
Resumen del contenido incluido en la página 10
Getting Started Features of the User Interface 1 10 Cisco Small Business RV320/RV325 Administration Guide
Resumen del contenido incluido en la página 11
2 System Summary The System Summary displays information about the current status of the device connections, status, settings, and logs. System Information System information descriptions: • Serial Number—Serial number of the device. • Firmware version—Version number of the installed firmware. • PID VID—Version number of the hardware. • MD5 Checksum—A value used for file validation. • LAN IPv4/ Subnet Mask—IPv4 management IP address and subnet mask of the device. • LAN IPv6/ Prefix—IPv6 mana
Resumen del contenido incluido en la página 12
System Summary Configuration (Wizard) 2 Configuration (Wizard) To access the Internet connection setup wizard and be prompted through the process, click Setup Wizard to launch the Wizard. Port Activity Port Activity identifies the port interfaces and indicates the status of each port: • Port ID—Port label. • Interface—Type of interface: LAN, WAN, or DMZ. Multiple WAN interfaces are indicated by a number, such as WAN1 or WAN2. • Status—Status of the port: Disabled (red), Enabled (black), or Co
Resumen del contenido incluido en la página 13
System Summary IPv4 and IPv6 2 • VLAN—VLAN ID of this port. There are two predefined VLANs: 25 and 100. VLAN 25 can be used for guest VLAN access and VLAN 100 can be used for Voice traffic. By default, VLAN 25 and VLAN 100 are not enabled. • Receive Packet Count—Number of packets received on this port. • Receive Packet Byte Count—Number of bytes received on this port. • Transmit Packet Count—Number of packets transmitted by this port. • Transmit Packet Byte Count—Number of bytes transmitted
Resumen del contenido incluido en la página 14
System Summary Security Status 2 Security Status This section displays the status of the security features: • SPI (Stateful Packet Inspection)—Status of the firewall: On (green) or Off (red). Tracks the state of network connections, such as TCP streams and UDP communication, traveling across it. The firewall distinguishes legitimate packets for different types of connections. Only packets matching a known active connection are allowed past the firewall; other packets are rejected. • DoS (Den
Resumen del contenido incluido en la página 15
System Summary SSL VPN Status 2 • PPTP Tunnel(s) Used—Point-to-Point Tunneling Protocol (PPTP) tunnels in use. PPTP is a method for implementing virtual private networks. PPTP uses a control channel over TCP and a Generic Routing Encapsulation (GRE) tunnel to encapsulate PPP packets. • PPTP Tunnel(s) Available—PPTP tunnels available. SSL VPN Status An SSL VPN can connect from locations where IPsec otherwise conflicts with Network Address Translation (NAT) and the firewall rules: • SSL VPN
Resumen del contenido incluido en la página 16
System Summary Log Setting Status 2 16 Cisco Small Business RV320/RV325 Administration Guide
Resumen del contenido incluido en la página 17
3 Setup Use the Setup > Network page to set up your LAN, WAN (Internet), DMZ, and so forth. Setup Network To open the Network page, click Setup > Network. Some ISPs require that you assign a hostname and domain name to identify your device. Default values are provided, but they can be changed as needed: • Host Name—Keep the default setting or enter a hostname specified by your ISP. • Domain Name—Keep the default setting or enter a domain name specified by your ISP. IP Mode Choose the type
Resumen del contenido incluido en la página 18
Setup Setup Network 3 Adding or Editing an IPv4 Network By default one IPv4 LAN subnetwork is configured, 192.168.1.1. One subnetwork is usually sufficient for most small businesses. The firewall denies access if a LAN device source IP address is on a subnetwork that is not specifically allowed. You can allow traffic from other subnetworks and use this device as an edge router that provides Internet connectivity to a network. STEP 1 Click the IPv4 tab to display the Multiple Subnet table. S
Resumen del contenido incluido en la página 19
Setup Setup Network 3 To configure WAN Connection Settings, select a WAN interface and click Edit. WAN Connection Settings appears. Select the WAN Connection Type from the menu and modify the related parameters as described in these sections: Obtain an IP Automatically Choose this option if your ISP dynamically assigns an IP address to the device. (Most cable modem subscribers use this connection type.) The ISP assigns the device IP address for this port, including the DNS server IP addre
Resumen del contenido incluido en la página 20
Setup Setup Network 3 - Configure to RA and DHCPv6 automatically—Provide Stateless and Stateful IPv6 addresses for LAN-side PCs. Static IP Choose this option if your ISP assigned a permanent IP address to your account. Enter the settings provided by your ISP: • Specify WAN IP Address—IP address that your ISP assigned to your account. • Subnet Mask (IPv4)—Subnetwork mask. • Default Gateway Address—IP address of the default gateway. To specify a DNS server, enter the IP address of DNS Server 1.
