Digi IX14 Manuel utilisateur

IX14

User Guide

Revision history—90002291

Revision Date Description

A January 2019 Initial release of DigiIX14 firmware version 19.1.

B September 2019 DigiIX14 firmware version 19.8 release.

IX14 User Guide 2

Revision history—90002291

IX14 User Guide 3

Revision Date Description

C November 2019 DigiIX14 firmware version 20.2 release.

This firmware release includes the following features and

enhancements:

nRe-themed web UI with improved navigation and

functionality. New functionality includes:

lNew Dashboard overview page.

lThe ability to view local filesystem contents.

lAccess configuration settings from status pages.

lEnhanced for use on hand-held and mobile devices.

nDefault user changed from root to admin.

lIf you have a configured user named admin prior to

upgrading to 19.11.72.58, it will not be affected by the

upgrade.

lIf you do not have a configured user named admin

prior to upgrading to 19.11.72.58, an admin user

account will be created with the same credentials

and configuration settings as the root user.

lIf your root user account has been modified from the

factory default settings, it will not be affected by the

upgrade.

lIf you restore the device to factory default settings

after upgrading to 19.11.72.58, only the admin user

will exist. If you have a root user and perform a

factory default, log in with the admin user instead of

root, using the same default password printed on the

bottom of the device.

nNew network analyzer and packet capture tool.

nSIM slot prioritization and SIM slot failback.

nIPsec enhancements:

lPreferred tunnel option to configure a tunnel to be a

primary or failover tunnel.

lAbility to use the device's MAC address or serial

number as its local endpoint ID.

nDHCP hostname option to allow the device to advertise

its hostname to the DHCP server upon connection.

nReceive encrypted SMS commands from Digi Remote

Manager.

nAbility in OpenVPN to push routes in subnet mode.

nNew Edge firewall zone to prevent the device's DNS

services from being advertised on the network, while still

allowing SSH and web UI access.

nRemoved the 192.168.210.254 default IP gateway.

Revision history—90002291

IX14 User Guide 4

Revision Date Description

nSupport for sending RFC2136-compatible DNS updates to

external DNS servers.

D February 2020 DigiIX14 firmware version 20.2 release.

Trademarks and copyright

Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United

States and other countries worldwide. All other trademarks mentioned in this document are the

property of their respective owners.

Disclaimers

Information in this document is subject to change without notice and does not represent a

commitment on the part of Digi International. Digi provides this document “as is,” without warranty of

any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or

merchantability for a particular purpose. Digi may make improvements and/or changes in this manual

or in the product(s) and/or the program(s) described in this manual at any time.

Warranty

To view product warranty information, go to the following website:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contacting Digi technical support for help, gather the following

information:

Product name and model

Product serial number (s)

Firmware version

Operating system/browser (if applicable)

Logs (from time of reported issue)

Trace (if possible)

Description of issue

Steps to reproduce

Contact Digi technical support: Digi offers multiple technical support plans and service packages.

Feedback

To provide feedback on this document, email your comments to

techcomm@digi.com

Revision history—90002291

IX14 User Guide 5

Include the document title and part number (IX14 User Guide, 90002291 C) in the subject line of your

email.

Contents

Revision history—90002291 2

What's new in Digi IX14 version 20.2

Digi IX14 hardware reference

IX14 features and specifications 14

IX14 front view 14

IX14 back view 14

IX14 power supply requirements 15

IX14 LEDs 15

Digi IX14 serial connector pinout 16

IX14 accessory kits 17

IX14 antennas 17

IX14 quick start

Quick start with Digi Remote Manager mobile app

Step 1: What's in the box 19

Step 2: Gather accessories 19

Step 3: Connect hardware 20

Step 4: Quick setup using the Digi Remote Manager mobile app 21

Next steps 21

Quick start with IX14 local WebUI

Step 1: What's in the box 22

Step 2: Gather accessories 22

Step 3: Connect hardware 23

Step 4: Sign up for Digi Remote Manager 24

Step 5: Access the IX14 local web interface 24

Step 6: Configure cellular connection using the web interface 25

Step 7: Add your IX14 to your Digi Remote Manager account 25

Next steps 26

IX14 User Guide 6

IX14 User Guide 7

Reset the device to factory defaults

Hardware setup

Install SIM cards 28

Attach and position antennas 28

Connect the WAN/ETH1 port 29

Connect the serial port 29

Power on the IX14 29

Configuration and management

Review IX14 default settings 30

Reset default password for the default admin user 30

Configuration methods 32

Using Digi Remote Manager 32

Access Digi Remote Manager 33

Using the web interface 33

Log out of the web interface 34

Using the command line 35

Access the command line interface 35

Exit the command line interface 36

Initial configuration

Configure cellular modem APNs 38

Change the default LAN subnet 41

Change the LAN address type 42

Configure SIM PIN 44

Configure system settings 44

Enable or disable Bluetooth service 52

User authentication

IX14 user authentication 56

User authentication methods 56

Add a new authentication method 58

Delete an authentication method 60

Rearrange the position of authentication methods 62

Authentication groups 64

Change the access rights for a predefined group 66

Add an authentication group 68

Delete an authentication group 72

Local users 75

Change a local user's password 76

Configure a local user 78

Delete a local user 85

Terminal Access Controller Access-Control System Plus (TACACS+) 88

TACACS+ user configuration 89

TACACS+ server failover and fallback to local authentication 90

Configure your IX14 device to use a TACACS+ server 90

IX14 User Guide 8

Remote Authentication Dial-In User Service (RADIUS) 95

RADIUS user configuration 96

RADIUS server failover and fallback to local configuration 96

Configure your IX14 device to use a RADIUS server 97

Disable shell access 101

Set the idle timeout for IX14 users 103

Example user configuration 106

Example 1: Administrator user with local authentication 106

Example 2: RADIUS, TACACS+, and local authentication for one user 108

Firewall

Firewall configuration 116

Create a custom firewall zone 116

Configure the firewall zone for a network interface 118

Delete a custom firewall zone 120

Port forwarding rules 122

Configure port forwarding 122

Delete a port forwarding rule 127

Packet filtering 130

Configure packet filtering 130

Enable or disable a packet filtering rule 134

Delete a packet filtering rule 136

Configure custom firewall rules 138

Configure Quality of Service options 140

System administration

Review device status 152

Configure system information 153

Update system firmware 155

Manage firmware updates using Digi Remote Manager 155

Certificate management for firmware images 155

Update cellular module firmware 157

Reboot your IX14 device 158

Reboot your device immediately 159

Schedule reboots of your device 159

Reset the device to factory defaults 161

Configuration files 165

Save configuration changes 165

Save configuration to a file 166

Restore the device configuration 168

Schedule system maintenance tasks 170

Create a Virtual LAN (VLAN) route 177

Serial port 180

Configure the serial port 180

Show serial status and statistics 184

Services

Allow remote access for web administration and SSH 186

Configure the web administration service 190

Configure SSHaccess 198

IX14 User Guide 9

Use SSH with key authentication 204

Generating SSH key pairs 204

Configure telnet access 207

Configure DNS 212

Simple Network Management Protocol (SNMP) 219

SNMP Security 219

Configure Simple Network Management Protocol (SNMP) 219

Download MIBs 224

System time 225

Configure the system time 225

Network Time Protocol 228

Configure the device as an NTP server 228

Configure a multicast route 235

Enable service discovery (mDNS) 237

Use the iPerf service 241

Example performance test using Iperf3 245

Applications

Configure applications to run automatically 248

Task one: Upload the application 248

Task two: Configure the application to run automatically 250

Run a Python application at the shell prompt 254

Start an interactive Python session 256

Digidevice module 258

Use digidevice.cli to execute CLI commands 259

Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 260

Use digidevice.config for device configuration 262

Use Python to respond to Digi Remote Manager SCI requests 264

Use digidevice runtime to access the runtime database 273

Using Python to upload the device name to Digi Remote Manager 275

Central management with Digi Remote Manager

Digi Remote Manager support 279

Configure Digi Remote Manager 279

Collect device health data and set the sample interval 283

Log into Digi Remote Manager 285

Use Digi Remote Manager to view and manage your device 286

Add a device to Digi Remote Manager 287

View Digi Remote Manager connection status 287

Use the Digi Remote Manager mobile app 288

Configure multiple devices using profiles 289

Learn more 289

Monitoring

intelliFlow 291

Enable intelliFlow 291

Use intelliFlow to display average CPU and RAMusage 294

Use intelliFlow to display top data usage information 295

Use intelliFlow to display data usage by host over time 297

Configure NetFlow Probe 298

IX14 User Guide 10

Virtual Private Networks (VPN)

IPsec 304

IPsec data protection 304

IPsec modes 304

Internet Key Exchange (IKE) settings 304

Authentication 305

Configure an IPsec tunnel 305

Configure IPsec failover 327

Configure SureLink active recovery for IPsec 328

Show IPsec status and statistics 335

OpenVPN 337

Configure an OpenVPN server 338

Configure an OpenVPN Authentication Group and User 347

Configure an OpenVPN client by using an .ovpn file 352

Configure an OpenVPN client without using an .ovpn file 355

Configure active recovery for OpenVPN 360

Show OpenVPN server status and statistics 367

Show OpenVPN client status and statistics 368

Generic Routing Encapsulation (GRE) 369

Configuring a GREtunnel 369

Show GRE tunnels 375

Example: GRE tunnel over an IPSec tunnel 376

Diagnostics

Generate a support report 394

View system event logs 396

View System Logs 396

View Event Logs 399

Configure syslog servers 401

Configure options for the event and system logs 403

Analyze network traffic 408

Configure packet capture for the network analyzer 409

Example filters for capturing data traffic 413

Capture packets from the command line 414

Stop capturing packets 415

Show captured traffic data 416

Save captured data traffic to a file 417

Download captured data to your PC 418

Clear captured data 419

Use the ping command to troubleshoot network connections 421

Ping to check internet connection 421

Stop ping commands 421

Use the traceroute command to diagnose IProuting problems 421

Routing

IP routing 424

Configure a static route 425

Delete a static route 428

Policy-based routing 430

Configure a routing policy 431

Routing services 438

Autres manuels pour IX14

Table des matières

Autres manuels Digi Routeur réseau

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi TransPort WR11 Manuel utilisateur

Digi

Digi SR44-E Manuel utilisateur

Digi

Digi Digi TransPort WR Manuel utilisateur

Digi

Digi ConnectPort X4 Manuel utilisateur

Digi

Digi 6330-MX Manuel utilisateur

Digi

Digi TA2020B Manuel utilisateur

Digi

Digi TransPort LR54 Manuel utilisateur

Digi

Digi WR44v1 Manuel utilisateur

Digi

Digi TransPort LR54-AA401 Manuel utilisateur

Digi

Digi Connect IT 4 Manuel utilisateur

Digi

Digi TX64 Manuel utilisateur

Digi

Digi WR41v1 Manuel utilisateur

Digi

Digi IX40 Manuel utilisateur

Digi

Digi TX64 Manuel utilisateur

Digi

Digi TransPort WR21 Manuel utilisateur

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi TransPort WR31 Instructions d'installation

Digi

Digi TransPort WR44 Manuel utilisateur

Digi

Digi TransPort WR11 Manuel utilisateur

Digi

Digi IX10 Manuel utilisateur

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi ConnectPort X4 H Manuel utilisateur

Digi

Digi TX54 Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité

LevelOne

LevelOne FBR-1416 Manuel utilisateur