Digi IX10 Manual de usuario

IX10

User Guide

Revision history—90002399

Revision Date Description

A October 2020 Initial release of the IX10 User Guide.

IX10 User Guide 2

Revision Date Description

B December 2020 Release of Digi IX10 firmware version 20.11:

nModem firmware update commands added to the Admin

CLI.

nNetwork bridging enhanced to use the MAC address of

the first active device listed in Network >Bridges >

Bridge name >Devices as the MAC address for the

bridged interface.

nIPsec enhancements:

lSupport for full IPsec IPv6 tunnels: IPv6-over-IPv4, or

IPv4-over-IPv6 tunnels.

lIPsec tunnels are now treated like network

interfaces, which allows tunnels to be selected for

routing and routing priority and access control lists.

lIPSec tunnels now wait for Surelink tests, if

configured, to pass prior to initiating outbound

tunnels.

nModbus gateway enhancements:

lStatus >Modbus gateway page in the Web UI

displays information about modbus clients and

servers connected to the gateway.

lshow modbus command displays information about

the the Modbus gateway service.

nSerial port enhancements:

lSerial port logging options added for starting,

stopping, and viewing serial port activity.

lOption added to the System >Serial configuration

page to copy serial port settings.

nPolicy-based routing enhancements:

lAdded a DSCP option to match the routing rule by the

type of DSCP field in the packet.

lAdded a Defaultroute option for matching policy-

based routes to the device's active default route.

nPython pip support for installing external modules and

libraries.

nLink speed and duplex options added to Ethernet port

configuration.

nssh and telnet commands added to Admin CLI.

nServices >Ping responder allows you to control the

interfaces and firewall zones on which the DAL device will

respond to ICMP requests.

nEnhanced policy-based routing:

IX10 User Guide 3

Revision Date Description

lAdded a DSCP option to match the routing rule by the

type of DSCP field in the packet.

lAdded a Defaultroute option for matching policy-

based routes to the device's active default route.

nAdded a link to User Guide under the User menu in the

Web UI.

Trademarks and copyright

Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United

States and other countries worldwide. All other trademarks mentioned in this document are the

property of their respective owners.

Disclaimers

Information in this document is subject to change without notice and does not represent a

commitment on the part of Digi International. Digi provides this document “as is,” without warranty of

any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or

merchantability for a particular purpose. Digi may make improvements and/or changes in this manual

or in the product(s) and/or the program(s) described in this manual at any time.

Warranty

To view product warranty information, go to the following website:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contacting Digi technical support for help, gather the following

information:

Product name and model

Product serial number (s)

Firmware version

Operating system/browser (if applicable)

Logs (from time of reported issue)

Trace (if possible)

Description of issue

Steps to reproduce

Contact Digi technical support: Digi offers multiple technical support plans and service packages.

Feedback

To provide feedback on this document, email your comments to

IX10 User Guide 4

techcomm@digi.com

Include the document title and part number (IX10 User Guide, 90002399 B) in the subject line of your

email.

IX10 User Guide 5

Contents

Revision history—90002399 2

What's new in Digi IX10 version 20.11

Digi IX10 Quick start

Quick start using the Digi Remote Manager mobile app 15

Step 1: What's in the box 15

Step 2: Gather accessories 16

Step 3: Connect 17

Step 4: Configure 19

Digi IX10 hardware reference

Digi IX10 features and specifications 20

IX10 accessories 20

IX10 front and side views 20

IX10 LEDs 21

Power (PWR) 22

SIM 22

LTE 22

Signal quality indicators 23

Ethernet Link and Activity 23

Signal quality bars explained 24

IX10 power supply requirements 25

Digi IX10 serial connector pinout 25

10-pin serial cabling options 25

Hardware setup

Install SIM cards 27

SIM removal 27

Tips for improving cellular signal strength 27

Connect data cables 28

Mount the IX10 device 28

Attach to a mounting surface by using the two mounting tabs 28

Attach to DIN rail with clip 28

IX10 User Guide 6

IX10 User Guide 7

Configuration and management

Review IX10 default settings 32

Local WebUI 32

Digi Remote Manager 32

Default interface configuration 32

Other default configuration settings 33

Change the default password for the admin user 33

Configuration methods 35

Using Digi Remote Manager 35

Access Digi Remote Manager 36

Using the web interface 36

Log out of the web interface 37

Using the command line 38

Access the command line interface 38

Exit the command line interface 39

Interfaces

Wireless Wide Area Networks (WWANs) 41

Configure SureLink active recovery to detect modem failures 41

Configure the device to reboot when a failure is detected 47

Disable SureLink 52

Using cellular modems in a Wireless WAN (WWAN) 56

Configure a Wireless Wide Area Network (WWAN) 72

Show WWAN status and statistics 80

Delete a WWAN. 81

Local Area Networks (LANs) 83

About Local Area Networks (LANs) 84

Configure a LAN 84

Show LAN status and statistics 89

Delete a LAN 90

DHCP servers 91

Create a Virtual LAN (VLAN) route 106

Serial port

Configure the serial port 109

Show serial status and statistics 120

Log serial port messages 121

Routing

IP routing 123

Configure a static route 124

Delete a static route 126

Policy-based routing 128

Configure a routing policy 128

Routing services 135

Configure routing services 136

Show the routing table 138

Dynamic DNS 139

IX10 User Guide 8

Configure dynamic DNS 139

Virtual Router Redundancy Protocol (VRRP) 143

VRRP+ 144

Configure VRRP 144

Configure VRRP+ 147

Example: VRRP/VRRP+ configuration 154

Configure device one (master device) 154

Configure device two (backup device) 158

Show VRRP status and statistics 164

Virtual Private Networks (VPN)

IPsec 167

IPsec data protection 167

IPsec modes 167

Internet Key Exchange (IKE) settings 167

Authentication 168

Configure an IPsec tunnel 168

Configure IPsec failover 188

Configure SureLink active recovery for IPsec 191

Show IPsec status and statistics 197

Debug an IPsec configuration 198

OpenVPN 201

Configure an OpenVPN server 202

Configure an OpenVPN Authentication Group and User 210

Configure an OpenVPN client by using an .ovpn file 214

Configure an OpenVPN client without using an .ovpn file 216

Configure active recovery for OpenVPN 221

Show OpenVPN server status and statistics 228

Show OpenVPN client status and statistics 229

Generic Routing Encapsulation (GRE) 230

Configuring a GREtunnel 230

Show GRE tunnels 234

Example: GRE tunnel over an IPSec tunnel 235

NEMO 249

Configure a NEMO tunnel 249

Show NEMO status 254

Services

Allow remote access for web administration and SSH 257

Configure the web administration service 260

Configure SSHaccess 269

Use SSH with key authentication 275

Generating SSH key pairs 275

Configure telnet access 277

Configure DNS 281

Simple Network Management Protocol (SNMP) 287

SNMP Security 287

Configure Simple Network Management Protocol (SNMP) 287

Download MIBs 291

Modbus gateway 292

Configure the Modbus gateway 293

Show Modbus gateway status and statistics 306

IX10 User Guide 9

System time 309

Configure the system time 309

Network Time Protocol 311

Configure the device as an NTP server 312

Configure a multicast route 316

Enable service discovery (mDNS) 318

Use the iPerf service 321

Example performance test using Iperf3 325

Configure the ping responder service 325

Example performance test using Iperf3 329

Applications

Configure applications to run automatically 331

Task one: Upload the application 331

Task two: Configure the application to run automatically 333

Run a Python application at the shell prompt 337

Start an interactive Python session 339

Digidevice module 340

Use digidevice.cli to execute CLI commands 341

Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 342

Use digidevice.config for device configuration 344

Use Python to respond to Digi Remote Manager SCI requests 347

Use digidevice runtime to access the runtime database 355

Use Python to upload the device name to Digi Remote Manager 357

Use Python to send and receive SMS messages 359

Use Python to access serial ports 361

Use the Paho MQTTpython library 362

Stop a script that is currently running 365

Show script information 366

User authentication

IX10 user authentication 369

User authentication methods 369

Add a new authentication method 371

Delete an authentication method 373

Rearrange the position of authentication methods 374

Authentication groups 376

Change the access rights for a predefined group 377

Add an authentication group 379

Delete an authentication group 383

Local users 385

Change a local user's password 386

Configure a local user 387

Delete a local user 394

Terminal Access Controller Access-Control System Plus (TACACS+) 396

TACACS+ user configuration 397

TACACS+ server failover and fallback to local authentication 398

Configure your IX10 device to use a TACACS+ server 398

Remote Authentication Dial-In User Service (RADIUS) 404

RADIUS user configuration 405

RADIUS server failover and fallback to local configuration 405

Configure your IX10 device to use a RADIUS server 406

IX10 User Guide 10

LDAP 411

LDAP user configuration 412

LDAP server failover and fallback to local configuration 413

Configure your IX10 device to use an LDAP server 413

Disable shell access 418

Set the idle timeout for IX10 users 419

Example user configuration 421

Example 1: Administrator user with local authentication 421

Example 2: RADIUS, TACACS+, and local authentication for one user 423

Firewall

Firewall configuration 430

Create a custom firewall zone 430

Configure the firewall zone for a network interface 432

Delete a custom firewall zone 433

Port forwarding rules 434

Configure port forwarding 435

Delete a port forwarding rule 439

Packet filtering 441

Configure packet filtering 441

Enable or disable a packet filtering rule 444

Delete a packet filtering rule 446

Configure custom firewall rules 447

Configure Quality of Service options 449

System administration

Review device status 460

Configure system information 461

Update system firmware 463

Manage firmware updates using Digi Remote Manager 463

Certificate management for firmware images 463

Downgrading 463

Dual boot behavior 466

Update cellular module firmware 467

Update modem firmware over the air (OTA) 468

Update modem firmware by using a local firmware file 470

Reboot your IX10 device 471

Reboot your device immediately 471

Schedule reboots of your device 471

Reset the device to factory defaults 472

Configuration files 476

Save configuration changes 476

Save configuration to a file 477

Restore the device configuration 478

Schedule system maintenance tasks 481

Disable device encryption 487

Re-enable cryptography after it has been disabled. 488

Configure the speed of your Ethernet port 490

Otros manuales para IX10

Tabla de contenidos

Otros manuales de Enrutador de red de Digi

Digi

Digi IR4420 Manual de usuario

Digi

Digi TransPort WR41 Manual de usuario

Digi

Digi TransPort WR11 Manual de usuario

Digi

Digi SR44-E Manual de usuario

Digi

Digi TransPort WR54 Guía de aplicación

Digi

Digi ConnectPort X4 H Manual de usuario

Digi

Digi TransPort LR54 Manual de usuario

Digi

Digi 6330-MX Manual de usuario

Digi

Digi Connect WAN Sync Edge 10 Manual de usuario

Digi

Digi Connect EZ 4 Manual de usuario

Digi

Digi Connect IT 4 Manual de usuario

Digi

Digi IX10 Manual de usuario

Digi

Digi IX14 Manual de usuario

Digi

Digi TX64 Manual de usuario

Digi

Digi IX20-WAG4 Manual de usuario

Digi

Digi 34 Instrucciones de instalación y funcionamiento

Digi

Digi TransPort WR41 Manual de usuario

Digi

Digi TransPort WR11 XT Manual de usuario

Digi

Digi Transport DR64-H Manual de usuario

Digi

Digi TransPort WR11 Manual de usuario

Digi

Digi Connect Series Guía del usuario

Digi

Digi CR4110 Manual de usuario

Digi

Digi Connect Series Guía del usuario

Digi

Digi TransPort WR21 Manual de usuario

Manuales populares de Enrutador de red de otras marcas

Allnet

Allnet ALL0333AU Manual de usuario

HomeSeer

HomeSeer HT-SEL Manual de usuario

Sercomm

Sercomm Genesis OC3505D Manual de usuario

Billion

Billion BIPAC 5102 Series Manual de usuario

TP-Link

TP-Link TD-8817 Manual de usuario

Motorola

Motorola MR1900 Manual de usuario

Cisco

Cisco NCS 540 Manual

XAVi

XAVi X8821e Manual de usuario

BEC

BEC 6200WZL Manual de usuario

MikroTik

MikroTik hAP ac3 Series Manual de usuario

Korenix

Korenix JetNet 5428G Series Manual de usuario

NETGEAR

NETGEAR FS526T - Switch Manual de usuario

Korenix

Korenix JetNet 5710G Series Manual de usuario

Automated Logic

Automated Logic ZN551 Manual del propietario

Cisco

Cisco ASR 1000 Series Manual del operador

EnGenius

EnGenius ESR-9710 Manual de usuario

Cisco

Cisco 805 Series Instrucciones de funcionamiento y seguridad

LevelOne

LevelOne FBR-1416 Manual de usuario