Digi IX15 Manuel utilisateur

Digi IX15

Gateway

User Guide

Firmware version 22.2

Revision history—90002400

Revision Date Description

September

2021

Release of Digi IX15 firmware version 21.8:

nAdded LXC container support for running localized containers on

the device.

nAdded support for maintenance windows triggers to control

when a device is available for Digi Remote Manager maintenance

activity.

nVPNenhancements:

lAdded support for L2TPv3 tunneling.

lNew option to enable, disable, or force IPsec IKE

fragmentation.

nImproved options for creating a custom default configuration:

lsystem backup CLI commands for generating a custom

default config file based on the active config settings on the

device.

lNew section on the File System page of the Web UI for

loading a configuration backup file as the custom default

config

lNew persistent files folder accessible through Digi Remote

Manager where users can upload a configuration backup.

lAdded ability to clear a custom default configuration by

performing by pressing the ERASE button, waiting for the

device to reboot, then pressing the ERASE again.

nAdded ability to override or edit SSH server options.

nAdded options for filtering Wi-Fi scanner results based off of MAC

addresses or RSSI signal strength.

nAdded options for sending local device event logs to Digi Remote

Manager.

nNew system time CLI command for manually setting the local

date and time.

nNew firewall packet filter options to allow/deny packets based off

of a range of source or destination MAC addresses.

nNew monitoring metrics upload CLI command to send on-

demand health metrics to Digi Remote Manager.

nAdded support for the configuration of custom scripts that will be

run manually, and a new system script start CLI command to

run manual scripts.

nNew "Find me" feature that flashes cellular-related LEDs to help

locate the device onsite and a new system find-me command.

Digi IX15 Gateway User Guide 2

Revision Date Description

nAdded datapoint.upload_multiple function to digidevice python

module for uploading multiple datapoints to DigiRM at once.

nAdded clear dhcp-lease command to remove all dynamic DHCP

leases or certain DHCP leases based on MAC address or IP

address.

nAdded speedtest command for performing on-demand iPerf or

nuttcp speedtests.

nLocal users are now required to be assigned to an authentication

group.

nNew Network → Advanced → Sequential DHCP address allocation

configuration setting for controlling if DHCP addresses are

assigned sequentially or randomly (disabled by default).

nAdded ability to control if DHCP addresses are assigned

sequentially or randomly (disabled by default).

nAdded 802.1x port-based network access control, configurable

per network interface.

November

2021

Added the pyinstall command. Added Install Python packages and

IX15 BLE configurator sections. Added the IX15 BLE Configuration

demo.

December

2021

Release of Digi IX15 firmware version 21.11:

nConfiguration option to allow for automatic update of new

firmware (disabled by default).

nUser authentication enhancements:

lAdded TACACS+ command authorization and accounting for

Admin CLI commands.

lAdded a new username alias to provide an alternate

username that allows for special characters in the username.

nVPNenhancements:

lAdded support for PPP-over-L2TP tunnels.

lChanged default IPsec IKE DH group to 14 for enhanced

compatibility with industry standard settings.

nLocation services enhancements:

lNew option for Location service to specify the talker ID used

in NMEA mesage strings.

lInclude the mode indicator field in NMEA messages

constructed when a GPS fix isn’t obtained.

nSureLink enhancments:

lAdded new settings under cellular Surelink options to have

the device reset the cellular modem if a specified number of

Surelink tests fail

lAdded show surelink Admin CLI command.

Digi IX15 Gateway User Guide 3

Revision Date Description

nSerial port enhancements:

lNew option to add and configure an external USB-to-serial

adapter.

lDisable serial history in remote access mode by default.

nSupport for sending analog and digial I/O health metrics to Digi

Remote Manager.

nAdded show containers Admin CLI command.

March 2022 Release of Digi IX15 firmware version 22.2:

nVPNenhancements:

lRenamed VPN >IPsec >Tunnels >Policies >Local network

setting to Local traffic selector and added Remote traffic

selector.

lAdded a Dynamic option to the Local traffic selector to

configuration of a local network by protocol and/or port

instead of a network address range.

lAdded Protocol and Port match criteria for Local traffic

selector and Remote traffic selector.

lAdded VPN >IPsec >Advanced >Debug level to specify the

logging verbosity of IPsec messages in the device system

logs.

nEnhancements to communications with Digi Remote Manager:

lEnhanced security for communications with Digi Remote

Manager by using client-side certificates.

lThe default URL for the device's Remote Manager connection

is now edp12.devicecloud.com. This URL is required to utilize

the client-side certificate support.

nNew Switch SIM SureLink action for WWAN interfaces, which

allows SureLink to be configured to switch to the alternate SIM if

the modem is connected but SureLink test are failing.

lNew Switch SIM fail count option to determine how many

SureLink failures are required prior to switching to the

alternate SIM.

nNew Socket ID string option to send the configured text to the

remote server(s) when a TCP socket connection is opened to the

serial port.

nNew cat Admin CLI command for displaying file contents.

C March 2022 Added translated safety instructions.

Trademarks and copyright

Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States

and other countries worldwide. All other trademarks mentioned in this document are the property of

their respective owners.

Digi IX15 Gateway User Guide 4

Disclaimers

Information in this document is subject to change without notice and does not represent a

commitment on the part of Digi International. Digi provides this document “as is,” without warranty of

any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or

merchantability for a particular purpose. Digi may make improvements and/or changes in this manual

or in the product(s) and/or the program(s) described in this manual at any time.

Warranty

To view product warranty information, go to the following website:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contacting Digi technical support for help, gather the following

information:

Product name and model

Product serial number (s)

Firmware version

Operating system/browser (if applicable)

Logs (from time of reported issue)

Trace (if possible)

Description of issue

Steps to reproduce

Contact Digi technical support: Digi offers multiple technical support plans and service packages.

Feedback

To provide feedback on this document, email your comments to

[email protected]

Include the document title and part number (Digi IX15 Gateway User Guide, 90002400 C) in the subject

line of your email.

Digi IX15 Gateway User Guide 5

Contents

Revision history—90002400 2

Digi IX15 Gateway User Guide

Overview 20

What's new in Digi IX15 version 22.2 20

IX15 compatibility with S2C XBee devices 21

Zigbee 21

DigiMesh 23

802.15.4 25

Related documents 26

Safety instructions

Safety instructions 28

XBee adapter, gateways, and routers 28

И нс т рук ции з а бе з оп а с нос т 28

Sigurnosne upute 29

Bezpečnostní instrukce 29

Sikkerhedsinstruktioner 30

Veiligheidsinstructies 31

Ohutusjuhised 31

Turvallisuusohjeet 32

Consignes de sécurité 32

Sicherheitshinweise 33

Ο δ ηγ ίες ασ φαλε ίας 34

Biztonsági utasítások 34

Istruzioni di sicurezza 35

Drošības instrukcijas 36

Saugos instrukcijos 36

Sikkerhetsinstruksjoner 37

Instrukcje bezpieczeństwa 37

Instruções de segurança 38

Instructiuni de siguranta 39

Bezpečnostné inštrukcie 39

Varnostna navodila 40

Adaptador XBee, puertas de enlace y enrutadores 40

Säkerhets instruktioner 41

Digi IX15 Gateway User Guide 6

Digi IX15 Gateway User Guide 7

Digi IX15 Quick start

Step 1: What's in the box 43

Step 2: Gather accessories 43

Step 3: Connect 44

Step 4: Configure 49

Step 5: Next steps 49

Get started

Step 1: Requirements 51

Step 2: Setup the hardware 51

Step 3: Program an XBee profile 51

Step 4: Join nodes to the IX15 network 53

Step 5: Review your XBee network 54

Next steps 54

Digi IX15 hardware reference

Digi IX15 features and specifications 57

IX15 accessories 57

IX15 front and side views 57

IX15 LEDs 59

Power (PWR) 59

SIM 59

LTE 59

XBee 60

Signal quality indicators 61

Ethernet Link and Activity 61

Signal quality bars explained 61

IX15 power supply requirements 62

Power consumption 63

Power consumption use cases 63

Results 64

Digi IX15 serial connector pinout 65

10-pin serial cabling options 65

Antenna specifications for the cellular modem 65

Antenna specifications for the XBee RF Module 66

QR code definition 66

Hardware setup

Install SIM cards 69

Apply Dielectric Grease over SIMContacts 69

SIM removal 70

Tips for improving cellular signal strength 70

Connect data cables 70

Mount the IX15 device 70

Attach to a mounting surface by using the mounting tabs 71

Attach to DIN rail with clip 71

Digi IX15 Gateway User Guide 8

Configuration and management

Review IX15 default settings 75

Local WebUI 75

Digi Remote Manager 75

Default interface configuration 75

Other default configuration settings 76

Change the default password for the admin user 76

Configuration methods 78

Using Digi Remote Manager 80

Access Digi Remote Manager 80

Using the web interface 80

Log out of the web interface 81

Use the local RESTAPI to configure the IX15 device 81

Use the GETmethod to return device configuration information 81

Use the POST method to modify device configuration parameters and list arrays 83

Use the DELETE method to remove items from a list array 84

Using the command line 86

Access the command line interface 86

Exit the command line interface 87

Manage an XBee network

Review the current XBee network state 89

Discover the XBee network 89

Configure active discovery 89

One-shot discovery 93

Configure and update an XBee network 93

What is an XBee profile? 94

Manage XBee profiles 94

Upload the XBee profile 95

Apply XBee profiles 95

Configure a sleeping network to work with the IX15 96

Export your network 98

Bluetooth Low Energy

Configure Bluetooth Low Energy 99

IX15 BLE configurator 102

Verify BLE connectivity 102

Power management

Configure a power profile 105

Suspend mode 109

Configure wake up sources 109

Enter suspend mode 111

Disable interfaces on suspend 112

Digi IX15 Gateway User Guide 9

Interfaces

Wireless Wide Area Networks (WWANs) 116

Configure SureLink active recovery to detect modem failures 116

Configure the device to reboot when a failure is detected 126

Disable SureLink 133

Using cellular modems in a Wireless WAN (WWAN) 137

Configure a Wireless Wide Area Network (WWAN) 156

Show WWAN status and statistics 165

Delete a WWAN. 167

Configure a Wide Area Network (WAN) 168

Local Area Networks (LANs) 177

About Local Area Networks (LANs) 178

Configure a LAN 178

Show LAN status and statistics 185

Delete a LAN 187

DHCP servers 189

Create a Virtual LAN (VLAN) route 205

Show Surelink status and statistics 208

Show Surelink status for all interfaces 208

Show Surelink status for a specific interface 208

Show Surelink status for all IPsec tunnels 209

Show Surelink status for a specific IPsec tunnel 209

Show Surelink status for all OpenVPN clients 210

Show Surelink status for a specific OpenVPN client 210

Serial port

Configure Login mode 212

Configure Remote Access mode 215

Configure Application mode 219

Configure UDP serial mode 221

Configure Modbus mode 226

Show serial status and statistics 230

Log serial port messages 230

Routing

IP routing 233

Configure a static route 234

Delete a static route 237

Policy-based routing 238

Configure a routing policy 239

Routing services 247

Configure routing services 247

Show the routing table 250

Dynamic DNS 251

Configure dynamic DNS 251

Virtual Router Redundancy Protocol (VRRP) 257

VRRP+ 257

Configure VRRP 257

Configure VRRP+ 261

Example: VRRP/VRRP+ configuration 268

Configure device one (master device) 269

Digi IX15 Gateway User Guide 10

Configure device two (backup device) 273

Show VRRP status and statistics 279

Virtual Private Networks (VPN)

IPsec 283

IPsec data protection 283

IPsec mode 283

IPsec modes 283

Internet Key Exchange (IKE) settings 283

Authentication 284

Configure an IPsec tunnel 284

Configure IPsec failover 311

Configure SureLink active recovery for IPsec 314

Show IPsec status and statistics 321

Debug an IPsec configuration 322

Configure a Simple Certificate Enrollment Protocol client 324

Example: SCEP client configuration with Fortinet SCEP server 328

Disable hardware cryptographic acceleration 333

OpenVPN 336

Configure an OpenVPN server 337

Configure an OpenVPN Authentication Group and User 346

Configure an OpenVPN client by using an .ovpn file 350

Configure an OpenVPN client without using an .ovpn file 353

Configure SureLink active recovery for OpenVPN 357

Show OpenVPN server status and statistics 365

Show OpenVPN client status and statistics 366

Generic Routing Encapsulation (GRE) 368

Configuring a GREtunnel 368

Show GRE tunnels 373

Example: GRE tunnel over an IPSec tunnel 374

L2TP 389

Configure a PPP-over-L2TP tunnel 389

Configure SureLink active recovery for PPP-over-L2TP 399

L2TP with IPsec 406

Show L2TP tunnel status 407

L2TPv3 Ethernet 408

Configure an L2TPv3 tunnel 409

Show L2TPV3 tunnel status 413

NEMO 414

Configure a NEMO tunnel 415

Show NEMO status 420

Services

Allow remote access for web administration and SSH 423

Configure the web administration service 427

Configure SSHaccess 437

Use SSH with key authentication 445

Generating SSH key pairs 445

Configure telnet access 448

Configure DNS 453

Show DNS server 459

Simple Network Management Protocol (SNMP) 460

Autres manuels pour IX15

Table des matières

Autres manuels Digi Porte

Digi

Digi 90001268 B Manuel utilisateur

Digi

Digi Wi-Point 3G Guide de l'utilisateur

Digi

Digi ConnectPort X4 Manuel utilisateur

Digi

Digi ConnectPort X4 Series Manuel utilisateur

Digi

Digi ConnectPort X2e ZB Manuel utilisateur

Digi

Digi ConnectPort X4 H Manuel utilisateur

Digi

Digi ConnectPort X4 Manuel utilisateur

Digi

Digi Wi-Point 3G Guide de l'utilisateur

Digi

Digi Smart Manuel utilisateur

Digi

Digi XBee Manuel utilisateur

Digi

Digi X4K-Z1U-00011-A1 Manuel utilisateur

Digi

Digi ConnectPort X2e Wi-Fi SmartEnergy Manuel utilisateur

Digi

Digi IX15 Manuel utilisateur

Digi

Digi Xbee Gateway ZB Manuel utilisateur

Digi

Digi ConnectPort X Series Manuel utilisateur

Digi

Digi Connect Sensor Instructions générales

Digi

Digi ConnectPort X2e ZB Manuel utilisateur

Digi

Digi M2M Manuel utilisateur

Digi

Digi TM-WIFI440-Z Manuel utilisateur

Digi

Digi ConnectPort X4 IA Manuel utilisateur

Digi

Digi ConnectPort X4 Manuel utilisateur

Digi

Digi Connect Sensor+ Manuel utilisateur

Digi

Digi ConnectPort X4 Manuel utilisateur

Digi

Digi ConnectPort X3 Series Manuel utilisateur

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZYWALL2 ET 2WE Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur