Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list
of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their
respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Contents
Chapter 4: Introduction9
Verifying the Hardware Installation9
Using Setup Wizard10
Configuration Next Steps11
Using the Getting Started Page11
Saving Changes13
Connecting to Your Wireless Network13
Chapter 5: Viewing the Device Status14
Viewing the Dashboard14
Viewing the System Summary16
Viewing Wireless Statistics19
Viewing the VPN Status20
Viewing the IPSec Connection Status21
Viewing Logs22
Viewing Connected Devices23
Viewing Port Statistics23
Viewing the Guest Network Status24
Viewing the Mobile Network Status25
Editing the Wireless Network Settings71
Configuring the Security Mode72
Configuring MAC Filtering75
Configuring Time of Day Access76
Configuring the Wireless Guest Network76
Setup Wizard and Device Manager are supported on Microsoft Internet Explorer
6.0 or later, Mozilla Firefox 3.0 or later, and Apple Safari 3.0 or later.
To use Setup Wizard:
STEP 1 Start the computer that you connected to a LAN port.
Your compute r becom es a DH CP cl ien t of the d evice and r eceiv es an I P ad dr ess in
the 192.168.1.xxx range.
STEP 2 Launch a web browser and enter 192.168.1.1 in the Address bar. This is the
default IP address of the device.
A message appears about the site security certificate. The device uses a self-
signed security certificate and this message appears because the device is not
known to your computer.
4
STEP 3 Click Continue to this website (or the option shown on your particular web
browser) to go to the web site. The login page displays.
STEP 4 Enter the user name and password.
The default user name is cisco. The default password is cisco. Passwords are
case sensitive .
STEP 5 Click Log In. Setup Wizard starts.
STEP 6 Follow the on-screen instructions to set up the device.
Setup Wizard tries to automatically detect and configure your connection. If it
cannot, Setup Wizard might ask you for information about your Internet connection.
You might need to contact your ISP to obtain this information.
After Setup Wizard is done configuring the device, you are required to change the
default password. Follow the on-screen instructions. After changing the default
password, the Getting Started page appears.
SupportClick to open the Cisco support page.
ForumsClick to visit Cisco online support forums.
Saving Changes
When you finish making changes on a configuration page, click Save to save the
changes in flash memory, or click Cancel to undo your changes.
Connecting to Your Wireless Network
4
To connect a client device (such as a computer) to your wireless network,
configure the wireless connection on the device with the wireless security
information you configured for your device using Setup Wizard.
The following steps are provided as an example; it might be necessary to
configure client device differently. For instructions that are specific to the client
device, consult the device documentation.
STEP 1 Open the wireless connection settings window or program for your device.
Your computer might have special software installed to manage wireless
connections, or you might find the wireless connections under the Control Panel in
the Network Connections or Network and Internet window. (The location
depends on your operating system.)
STEP 2 Enter the network name (SS I D) you chose for your network in Setup Wizard.
STEP 3 Choose the type of encryption and enter the security key that you specified in
Setup Wizard.
If you did not enable security (not recommended), leave the wireless encryption
fields that were configured with the security type and passphrase blank.
STEP 4 Verify your wireless connection and save your settings.
This chapter describes how to view real-time statistics and other information
about the device.
•Viewing the Dashboard
•Viewing the System Summary
•Viewing Wireless Statistics
5
•Viewing the VPN Status
•Viewing Logs
•Viewing Connected Devices
•Viewing Port Statistics
Viewing the Dashboard
The Dashboard page provides important router information.
To view the Dashboard, choose Status > Dashboard.
To change the refresh rate of the statistics and parameter values displa y ed, select
the frequency from the Refresh Rate drop-down menu.
To display an interactive view of the router back panel, click Show Panel View.
The back panel view shows you the ports that are connected to a device (lit
green).
•To view a port connection information, mouse-over the port.
•To refresh the port information, click Refresh.
•To close the port information window, click Close.
Click Refresh to obtain the latest information.
The System Summary page displays this information:
System Information
5
•Firmware Version—Current software version the device is running.
•Firmware MD5 Checksum—The message-digest algorithm used to verify
the integrity of files.
•Locale—The language installed on the router.
•Language Version—The version of the installed language pack. The
language pack version should be compatible with the currently installed
firmware. In some cases, an older language pack may be used with a newer
firmware image. The router will check the language pack version to see if it
is compatible with the current firmware version.
•Language MD5 Checksum—The MD5 checksum of the language pack.
•CPU Model—Chipset of CPU currently used.
•Serial Number—Serial number of the device.
•System Up Time—How long the system has been running.
•Current Time—Time of day.
•PID VID—Product ID and version ID of the device.
IPv4 Configuration
•LAN IP—LAN IP address of the device.
•WAN IP—WAN IP address of the device. You can release the current IP
address and obtain a new one by clicking Release or Renew.
•Gateway—IP address of the gateway to w hich the device is connected (for
example, the cable modem).
•Mode—Displays Gateway if NAT is enabled, or Router.
•DNS 1—Primary DNS server IP address of the WAN port.
•DNS 2—Secondary DNS server IP address of the WAN port.
•DDNS—Indicates whether the Dynamic DNS is enabled or disabled.
•PPTP VPN Connections Available—Number of available PPTP VPN
connections.
•Connected QuickVPN Users—Number of connected QuickVPN users.
•Connected PPTP VPN Users—Number of connected PPTP VPN users.
Viewing Wireless Statistics
The Wireless Statistics page shows wireless statistics for the device radio.
To view wireless statistics, choose Status > Wireless Statistics.
To change the refresh rate, choose a refresh rate from the Refresh Rate drop-
down menu.
5
To show the bytes in kilobytes (KB) and the numerical data in rounded-up values,
check Show Simplified Statistic Data and click Save. By default, byte data is
displayed in bytes and other numerical data is displayed in long form.
To reset the wireless statistics counters, click Clear Count. Also the counters are
reset when the device is rebooted.
The Wireless Statistics page displays this information:
SSID NameThe name of the wireless network.
PacketNumber of received and sent wireless packets
reported to the radio over all configured and active
SSIDs.
ByteNumber of received and sent bytes of information
reported to the radio, over all configured SSIDs.
ErrorNumber of received and sent packet errors reported to
the radio, over all configured SSIDs.
DroppedNumber of received and sent packets dropped by the
radio, over all configured SSIDs.
MulticastNumber of multicast packets sent over this radio.
CollisionsNumber of packet collisions reported to the router.
The VPN page displays the status of VPN connections.
To view VPN user connection status, choose Status > VPN Status.
The VPN page displays this information:
UsernameThe username of the VPN user associated with the
Remote IPDisplays the IP address of the remote QuickVPN client.
5
QuickVPN PPTP tunnel.
This could be a NAT/Public IP if the client is behind the
NAT router.
StatusDisplays the current status of the QuickVPN client.
OFFLINE means that the QuickVPN tunnel is not
initiated or established by the VPN user. ONLINE
means that the QuickVPN tunnel initiated or
established by the VPN user, is active.
Start TimeTime when the VPN user e stablished a connection.
End TimeTime when the VPN user ended a connection.
Duration (Seconds)Duration of time between the VPN user establishing
and ending a connection.
ProtocolProtocol that the user uses.
You can change the status of a connection to either establish or disconnect the
configured VPN client.
To terminate an active VPN connection, click Disconnect.
The IPsec connection status shows the status of active VPN policies on the
device. (These policies are configured on the VPN > Advanced VPN Setup page.)
To view the IPsec connection status:
STEP 1 Choose Status > IPSec Connection Status. The table displays the following
information:
•Refresh Rate—Choose the rate at which you want the data display to clear
and display the newest data.
•Show Simplified Statistic Data—By default, byte data is displayed in bytes
and other numerical data is displayed in long form. To show the bytes in
kilobytes (KB) and the numerical data in rounded-up form, check Show
Simplified Statistic Data.
5
•Policy Name—Name of the VPN policy for which data is displayed.
•Local or Remote—Displays the local and remote IP addresses.
•Start Time and End Time—Displays the start and end times of the IPsec
connections.
•Duration—Displays the elapsed time for which the connection is or was
active.
•Packet—Displays the received (Rx) and transmitted (Tx) packets on the
connection.
•Byte—Displays the received (Rx) and transmitted (Tx) bytes on the
connection.
•State—Displays the state of the connection (for example, active or not
connected).
•Action—Displays actions you can perform on the connection (for example,
disconnect).
•Ext Action—Displays if you can switch between the primary and the
secondary VPN connections. If the Rollback enable check box on the
Advanced VPN Parameters page is checked, the Switch button is dimmed.
The View Logs page displays the device logs.
To view the logs, choose Status > View Logs.
To display the latest log entries, click Refresh Logs.
To filter logs or specify the severity of logs to display, check the boxes next to the
log type and click Go. Note that all log types above a selected log type are
automatically included and you cannot deselect them. For example, choosing error
logs automatically includes emergency, alert, and critical logs in addition to error
logs.
The event severity levels are list ed from the highest severity to the lowest severity ,
as follows:
5
•Emergency—System is not usable.
•Alert—Action is needed.
•Critical—System is in a critical condition.
•Error—System is in error condition.
•Warning—System warning occurred.
•Notification—System is functioning properly, but a system notice occurred.
•Informational—Device information.
•Debugging—Provides detailed information about an event.
To delete all entries in the log window, click Clear Logs.
To save all log messages from the firewall to the local hard drive, click Save Logs.
To save log messages to an external USB device, click Save Log to USB.
To specify the number of entries to show per page, choose a number from the
drop-down menu.
Use the page navigation buttons to move between log pages.
The Connected Device s page displays information about the active devices
connected to the device.
The IPv4 ARP Table displays information from devices that have responded to the
device Address Resolution Protocol (ARP) request. If a device does not respond to
the request, it is removed from the list.
The IPv6 NDP Table displays all IPv6 Neighbor Discover Protocol (NDP) devices
connected to the device local link.
To view connected devices, choose Status > Connected Devices.
To specify the types of interfaces to display, select a value from the Filter drop-
down menu:
5
All—All devices connected to the router.
Wireless—All devices connected through the wireless interface.
Wired—All devices connected through the Ethernet ports on the router.
WDS—All Wireless Distribution System (WDS) device connected to the router.
Viewing Port Statistics
The Port Statistics page displays port detailed activity.
To view port statistics, choose Status > Port Statistics.
To cause the page to re-read the statistics from the router and refresh the page,
choose a refresh rate from the Refresh Rate drop-down menu.
To show the bytes in kilobytes (KB) and the numerical data in rounded-up form,
check Show Simplified Statistic Data and click Save. By default, byte data is
displayed in bytes and other numerical data is displayed in long form.
To reset the port statistics counters, click Clear Count.
The Port Statistics page displays this information:
InterfaceName of the network interface.
PacketNumber of received/sent packets.
ByteNumber of received/sent bytes of information per second.
ErrorNumber of received/sent packet errors.
DroppedNumber of received/sent packets that were dropped.
MulticastNumber of multicast packets sent over this radio.
CollisionsNumber of signal collisions that occurred on this port. A
5
collision occurs when the port tries to send data at the
same time as a port on another router or computer that is
connected to this port.
Viewing the Guest Network Status
The guest network statistics displays information about the wireless guest
network configured on the device.
To view the guest network status, choose Status > GuestNet Status. The following
information is displayed:
•Host Name—Device connected to the guest network.
•IP Address—IP address assigned to the connected device.
•MAC Address—MAC or hardware address of the connected device.
•Time Left—Time remaining that the device can be connected to the guest
network. (Time limits are configured in the Wireless > Basic Settings > Guest Net Settings page.)
•Action—Actions you can perform on the connected device (for example,
An Internet connection can be established through the WAN port or a wireless
modem installed in the USB port. This section describes configuration of the W AN,
mobile network, and failover and recovery.
Configuring the Wired WAN Connections
Configuring WAN properties for an IPv4 network differs depending on which type
of Internet connection you have.
Configuring DHCP
If your Internet Service Provider (ISP) uses the Dynamic Host Control Protocol
(DHCP) to assign you an IP address, you receive an IP address that is dynamically
generated each time you log in.
6
To configure the DHCP WAN settings:
STEP 1 Choose Networking > WAN.
STEP 2 From the Internet Connection Type drop-down menu, select Automatic
Configuration - DHCP.
STEP 3 Click Save.
Configuring Static IP
If your ISP assigned you a permanent IP address, perform the following steps to
configure your WAN settings:
STEP 1 Choose Networking > WAN.
STEP 2 From the Internet Connection Type drop-down menu, choose Static IP.
STEP 3 Enter this information:
Internet IP AddressIP address of the firewall WAN port.
Subnet maskSubnet mask of the firewall WAN port.
STEP 1 Choose Networking > WAN.
STEP 2 From the Internet Connection Type drop-down menu, choose PPPoE.
6
Default GatewayIP address of the default gateway.
Static DNS 1IP address of the primary DNS server.
Static DNS 2IP address of the secondary DNS server.
Configuring PPPoE
To configure the Point-to-Point Protocol over Ethernet (PPPoE) settings:
STEP 3 Enter the following information (you might need to contact your ISP to obtain your
PPPoE login information):
UsernameThe username assigned by the ISP.
PasswordThe password assigned by the ISP.
Connect on DemandSelect this option if your ISP charges based on the
amount of time that you are connected. When you
select this option, the Internet connection is on only
when traffic is present. If the connection is idle—
that is, no traffic is flowing—the conne ction is
closed. If you click Connect on Demand, enter the
number of minutes after which the connection
shuts off in the Max Idle Time field.
Keep AliveWhen you select this option, the Internet
connection is always on. In the redial period field,
enter the number of seconds after which the
device attempts to reconnect if it is disconnected.
Authentication TypeAuto-negotiation—The server sends a
configuration request specifying the security
algorithm set on it. The devic e then sends back
authentication credentials with the security type
sent by the server.
PAP—Password Authentication Protocol (PAP),
used by Point-to-Point Protocol to connect to the
ISP.
CHAP—Challenge Handshake Authentication
Protocol (CHAP) requires that both the client and
server know the plaintext of the secret to use ISP
services.
MS-CHAP or MS-CHAPv2—The Microsoft
version of CHAP, used to access ISP services.
STEP 4 Click Save.
Configuring PPTP
To configure the PPTP settings:
STEP 1 Choose Networking > WAN.
STEP 2 From the Internet Connection Type drop-down menu, choose PPTP.
STEP 3 Enter this information:
Internet IP AddressIP address of the WAN port.
Subnet maskSubnet mask of the WAN port.
Default Gateway IP address of the default gateway.
PPTP ServerIP address of the Point-To-Point Tunneling Protocol
(PPTP) server.
UsernameThe username assigned to you by the ISP.
PasswordThe password assigned to you by the ISP.