Digi IX30 Manual de usuario

IX30

User Guide

Firmware version 22.11

Revision history—90002452

Revision Date Description

A May 2022 Initial release of the IX30 User Guide.

B June 2022 Release of Digi IX30 firmware version 22.5:

n5G enhancements:

lAdded 5G slice support for configuring the slice

type for the 5G modems.

nAdded WAN Bonding as an add-on feature via Digi

Remote Manager for bonding multiple outbound

Internet connections together for increased maximum

throughput or data redundancy.

nSurelink enhancements:

lEnabled Surelink reset_modem action by default on

cellular interfaces and set fail count to three.

lUpdated Surelink reset_modem action to

automatically power cycle the modem in the event

that the modem fails to reset.

nSerial port support enhancements:

lAdded serial PPP dial-in mode to handle AT-based

connection requests from a device connected to a

serial port and provide IPv4 networking to the

device.

lAdded suppport for Realport serial mode.

nAdded the ability to configure CPU performance and

power consumption.

nAdded cellular APN and cellular connection duration as

datapoints sent to Digi Remote Manager.

nWi-Fi scanner enhancements:

lAdded support for sending an HTTP or TCP stream

of results from the Wi-Fi scanner to one or more

remote servers.

nSCEP enhancements:

lNew SCEP client settings and underlying

functionality to support connecting to additional

SCEP servers.

lAdded show scep Admin CLI command to show

the sync status, expiration dates, and additional

details of any configured SCEP clients.

nVPN enhancements:

IX30 User Guide 2

Revision Date Description

lInclude the hostname of the device in the client

.ovpn file listed on the Status → OpenVPN → Servers

page in the web UI.

nLocation services enhancements:

lNew settings to control the NMEA message content

that the devices sends when there is no valid fix

from any of the configured location sources.

C September 2022 Release of Digi IX30 firmware version 22.8:

nCellular modem enhancements:

lAdded modem ota download and system

firmware ota download commands for

downloading cellular modem and device firmware.

lAdded cellular carrier name and PLMN ID to the

Modems Status page in the Web UI.

lEnhanced access technology options to set the

modem to 5G-only, including setting to 5G SA-only,

NSA-only, or both NSA/SA-modes.

nVPN enhancements:

lAdded Dynamic Multipoint VPN (DMVPN) support.

lAdded a Strict routing setting to IPsec tunnels that

routes packets through the tunnel if both the

source IP and destination IP match the IPsec

tunnel’s policies. This makes IPsec behave like a

policy-based VPN, rather than a route-based VPN.

lAdded the Microsoft version of the Challenge-

Handshake Authentication Protocol (MS-CHAPv2) as

an option for L2TP network servers authentication

methods.

nContainer support:

lContainer support now a premium feature, enabled

through Digi Remote Manager.

lAdded new metrics for sending container status,

name, CPU load, and disk usage as datapoints to

DigiRM.

nAdded support for running a PPPoE server when an

interface is in IP passthrough mode.

nAdded ability to specify DFS channels for Wi-Fi client

background scanning when DFS client support is

enabled.

nAdded a show eth Admin CLI command to show the

link status of each Ethernet port.

nAdded a poweroff CLI command to perform a graceful

IX30 User Guide 3

Revision Date Description

shutdown of the device without automatically

rebooting.

nAdded the ability to turn off all LEDs on the device to

reduce power consumption.

D December 2022 Release of Digi IX30 firmware version 22.11:

nUpdated the Linux kernel to version 5.19.

nThe intelliFlow feature now integrates with Digi Remote

Manager to provide aggregated insights and analytics

for all Digi devices in your environment.

nAdded an MQTTbroker service, including support for:

lMultiple MQTT clients with unique topics and

authentication credentials.

lPre-shared key encryption with multiple

configurable keys.

lPattern filtering for topic access control.

nAdded support for Next-hop routing protocol (NHRP).

nAdded support for mGREtunnels.

nAdded support for ICMP redirect messages.

nAdded a polling interval to control how often the

cellular modem is polled for signal strength and other

status.

nNew commands: tail and grep.

nAdd Timeout option to modem Carrier Scan window in

the Web UI.

nAdded advanced watchdog to:

lMonitor critical services and reboot the device if

those services fail.

lMonitor memory usage and log errors or reboot the

device based on current memory usage.

nAdded the ability to have serial port data written to the

system log.

lRemoved options in the local web UI and Admin CLI

for manually starting, stopping, and clearing serial

logs. These actions are now controlled under the

data logging configuration settings.

Trademarks and copyright

Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States

and other countries worldwide. All other trademarks mentioned in this document are the property of

their respective owners.

IX30 User Guide 4

Disclaimers

Information in this document is subject to change without notice and does not represent a

commitment on the part of Digi International. Digi provides this document “as is,” without warranty of

any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or

merchantability for a particular purpose. Digi may make improvements and/or changes in this manual

or in the product(s) and/or the program(s) described in this manual at any time.

Warranty

To view product warranty information, go to the following website:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contacting Digi technical support for help, gather the following

information:

Product name and model

Product serial number (s)

Firmware version

Operating system/browser (if applicable)

Logs (from time of reported issue)

Trace (if possible)

Description of issue

Steps to reproduce

Contact Digi technical support: Digi offers multiple technical support plans and service packages.

Feedback

To provide feedback on this document, email your comments to

[email protected]

Include the document title and part number (IX30 User Guide, 90002452 C) in the subject line of your

email.

IX30 User Guide 5

Contents

Revision history—90002452 2

What's new in Digi IX30 version 22.11

Digi IX30 Quick start

Step 1: Connect your device 19

Step 2: Connect DC power 21

Step 3: Set up access to Digi Remote Manager 21

Step 4: Register your device 21

Step 5: Complete setup 22

Step 6: Configure cellular APN 22

Digi IX30 hardware reference

Digi IX30 features and specifications 23

IX30 accessories 23

IX30 front view 24

IX30 LEDs 25

POWER 25

LTE 25

Signal quality indicators 26

Ethernet Link and Activity 27

Signal quality bars explained 27

IX30 power supply requirements 28

Digi IX30 serial connector pinout 28

IX30 serial pinouts 30

IX30 RS-232 pinout 31

IX30 RS-422 pinout 31

IX30 RS-485 pinout 31

Configuration for extreme thermal conditions 32

QR code definition 34

Hardware setup

Install SIM cards 36

Apply Dielectric Grease over SIMContacts 36

SIM removal 37

Tips for improving cellular signal strength 37

Connect data cables 37

IX30 User Guide 6

IX30 User Guide 7

Firmware configuration

Review IX30 default settings 39

Local WebUI 39

Digi Remote Manager 39

Default interface configuration 39

Other default configuration settings 40

Change the default password for the admin user 41

Configuration methods 42

Using Digi Remote Manager 43

Using the local web interface 43

Log out of the web interface 44

Use the local RESTAPI to configure the IX30 device 44

Use the GETmethod to return device configuration information 45

Use the POST method to modify device configuration parameters and list arrays 47

Use the DELETE method to remove items from a list array 47

Using the command line 49

Access the command line interface 49

Exit the command line interface 50

Central management

Digi Remote Manager support 52

Certificate-based enhanced security 52

Configure your device for Digi Remote Manager support 52

Collect device health data and set the sample interval 59

Enable event log upload to Digi Remote Manager 62

Log into Digi Remote Manager 64

Use Digi Remote Manager to view and manage your device 65

Add a device to Digi Remote Manager 65

Configure multiple IX30 devices by using Digi Remote Manager configurations 66

View Digi Remote Manager connection status 67

Learn more 68

Interfaces

Wide Area Networks (WANs) 70

Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 71

Configure WAN/WWAN priority and default route metrics 71

WAN/WWAN failover 74

Configure SureLink active recovery to detect WAN/WWAN failures 75

Configure the device to reboot when a failure is detected 86

Disable SureLink 94

Example: Use a ping test for WAN failover from Ethernet to cellular 99

Using Ethernet devices in a WAN 102

Using cellular modems in a Wireless WAN (WWAN) 102

Configure a Wide Area Network (WAN) 127

Configure a Wireless Wide Area Network (WWAN) 135

Show WAN and WWAN status and statistics 145

Delete a WAN or WWAN 147

Default outbound WAN/WWAN ports 149

Local Area Networks (LANs) 150

About Local Area Networks (LANs) 151

IX30 User Guide 8

Configure a Local Area Network (LAN) 151

Configure the WAN/ETH1 port as a LAN or in a bridge 158

Change the default LAN subnet 166

Show LAN status and statistics 168

Delete a LAN 169

DHCP servers 171

Default services listening on LANports 188

Configure an interface to operate in passthrough mode. 188

Virtual LANs (VLANs) 195

Create a trunked VLAN route 196

Create a VLAN using switchport mode 198

Bridging 201

Configure a bridge 202

Show Surelink status and statistics 205

Show Surelink status for all interfaces 205

Show Surelink status for a specific interface 205

Show Surelink status for all IPsec tunnels 206

Show Surelink status for a specific IPsec tunnel 206

Show Surelink status for all OpenVPN clients 207

Show Surelink status for a specific OpenVPN client 207

Serial port

Default serial port configuration 209

Serial mode options 209

View serial port information 209

Default serial port configuration 209

Configure Login mode 210

Configure Remote Access mode 213

Configure Application mode 229

Configure PPP dial-in mode 231

Configure UDP serial mode 238

Configure Modbus mode 249

Configure RealPort mode using the Digi Navigator 252

Installation and configuration process 252

Digi Navigator features 252

Install the Digi Navigator 253

Configure RealPort on a Digi device from the Digi Navigator 254

Digi Navigator application features 256

Electrical Signalling Mode 259

Change the electrical signalling mode to RS-232 260

Change the electrical signalling mode to RS-422 261

Change the electrical signalling mode to RS-485 263

Advanced RealPort configuration without using the Digi Navigator 265

Windows Operating System 265

Linux Operating System 265

Download the RealPort driver 266

Configure RealPort on your laptop 266

Configure the serial port for RealPort mode 268

Configure the RealPort service 270

Show serial status and statistics 271

Log serial port messages 271

IX30 User Guide 9

Routing

IP routing 275

Configure a static route 276

Delete a static route 279

Policy-based routing 281

Configure a routing policy 282

Example: Dual WAN policy-based routing 290

Example: Domain-based routing with dual WAN 292

Example: Route traffic to a specific WAN interface based on the client MACaddress 295

Routing services 301

Configure routing services 302

Show the routing table 304

Dynamic DNS 306

Configure dynamic DNS 306

Virtual Router Redundancy Protocol (VRRP) 311

VRRP+ 311

Configure VRRP 312

Configure VRRP+ 315

Example: VRRP/VRRP+ configuration 323

Configure device one (master device) 324

Configure device two (backup device) 328

Show VRRP status and statistics 334

Virtual Private Networks (VPN)

IPsec 338

IPsec data protection 338

IPsec mode 338

IPsec modes 338

Internet Key Exchange (IKE) settings 338

Authentication 339

Configure an IPsec tunnel 339

Configure IPsec failover 366

Configure SureLink active recovery for IPsec 369

Show IPsec status and statistics 376

Debug an IPsec configuration 377

Configure a Simple Certificate Enrollment Protocol client 379

Example: SCEP client configuration with Fortinet SCEP server 386

Show SCEP client status and information 391

OpenVPN 393

Configure an OpenVPN server 394

Configure an OpenVPN Authentication Group and User 403

Configure an OpenVPN client by using an .ovpn file 407

Configure an OpenVPN client without using an .ovpn file 410

Configure SureLink active recovery for OpenVPN 414

Show OpenVPN server status and statistics 423

Show OpenVPN client status and statistics 424

Generic Routing Encapsulation (GRE) 426

Configuring a GREtunnel 426

Show GRE tunnels 431

Example: GRE tunnel over an IPSec tunnel 432

L2TP 447

Configure a PPP-over-L2TP tunnel 447

IX30 User Guide 10

Configure SureLink active recovery for PPP-over-L2TP 457

L2TP with IPsec 465

Show L2TP tunnel status 465

L2TPv3 Ethernet 467

Configure an L2TPv3 tunnel 467

Show L2TPV3 tunnel status 472

NEMO 473

Configure a NEMO tunnel 473

Show NEMO status 479

Services

Allow remote access for web administration and SSH 482

Configure the web administration service 486

Configure SSHaccess 496

Use SSH with key authentication 504

Generating SSH key pairs 504

Configure telnet access 507

Configure DNS 512

Show DNS server 518

WANbonding 519

Simple Network Management Protocol (SNMP) 524

SNMP Security 524

Configure Simple Network Management Protocol (SNMP) 524

Download MIBs 529

Location information 531

Configure the location service 532

Configure the device to use a user-defined static location 534

Configure the device to accept location messages from external sources 536

Forward location information to a remote host 541

Configure geofencing 547

Show location information 560

Modbus gateway 561

Configure the Modbus gateway 562

Show Modbus gateway status and statistics 575

System time 579

Configure the system time 579

Manually set the system date and time 583

Network Time Protocol 583

Configure the device as an NTP server 584

Show status and statistics of the NTP server 589

Configure a multicast route 590

Ethernet network bonding 593

Enable service discovery (mDNS) 598

Use the MQTTbroker service 602

Show MQTTbroker information 612

Use the iPerf service 613

Example performance test using iPerf3 618

Configure the ping responder service 618

Example performance test using iPerf3 622

Applications

Develop Python applications 625

Tabla de contenidos

Otros manuales de Enrutador de red de Digi

Digi

Digi TransPort WR44 R Manual de usuario

Digi

Digi TX40 Manual de usuario

Digi

Digi TransPort WR44 RR Manual de usuario

Digi

Digi TransPort WR11 Manual de usuario

Digi

Digi CR4110 Manual de usuario

Digi

Digi XPressWireless Manual de usuario

Digi

Digi SR44-E Manual de usuario

Digi

Digi Transport DR64-H Manual de usuario

Digi

Digi IX14 Manual de usuario

Digi

Digi TransPort WR11 Manual del operador

Digi

Digi Connect IT 4 Manual de usuario

Digi

Digi TransPort Manual de usuario

Digi

Digi AnywhereUSB Series Manual de usuario

Digi

Digi TransPort WR41 Manual de usuario

Digi

Digi 6310-DX Manual de usuario

Digi

Digi TransPort WR64 Manual de usuario

Digi

Digi WR44v1 Manual de usuario

Digi

Digi TransPort WR54 Guía de aplicación

Digi

Digi EX40 Manual de usuario

Digi

Digi TX64 Manual de usuario

Digi

Digi TX54 Manual de usuario

Digi

Digi TransPort WR31 Instrucciones de instalación

Digi

Digi TransPort WR31 Manual de usuario

Digi

Digi ConnectPort X2e ZB Manual de usuario

Manuales populares de Enrutador de red de otras marcas

Allnet

Allnet ALL0333AU Manual de usuario

HomeSeer

HomeSeer HT-SEL Manual de usuario

Sercomm

Sercomm Genesis OC3505D Manual de usuario

Billion

Billion BIPAC 5102 Series Manual de usuario

TP-Link

TP-Link TD-8817 Manual de usuario

Motorola

Motorola MR1900 Manual de usuario

Cisco

Cisco NCS 540 Manual

XAVi

XAVi X8821e Manual de usuario

BEC

BEC 6200WZL Manual de usuario

MikroTik

MikroTik hAP ac3 Series Manual de usuario

Korenix

Korenix JetNet 5428G Series Manual de usuario

NETGEAR

NETGEAR FS526T - Switch Manual de usuario

Korenix

Korenix JetNet 5710G Series Manual de usuario

Automated Logic

Automated Logic ZN551 Manual del propietario

Cisco

Cisco ASR 1000 Series Manual del operador

EnGenius

EnGenius ESR-9710 Manual de usuario

Cisco

Cisco 805 Series Instrucciones de funcionamiento y seguridad

LevelOne

LevelOne FBR-1416 Manual de usuario