Digi TX40 Manuel utilisateur

Table des matières

Autres manuels Digi Routeur réseau

Digi

Digi IX14 Manuel utilisateur

Digi

Digi 6350-SR Manuel utilisateur

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi TransPort WR64 Manuel utilisateur

Digi

Digi 34 Instructions d'installation et d'utilisation

Digi

Digi TransPort WR11 XT Manuel utilisateur

Digi

Digi Connect Series Guide de l'utilisateur

Digi

Digi TransPort WR64 Manuel utilisateur

Digi

Digi IR4420 Manuel utilisateur

Digi

Digi ConnectPort X4 H Manuel utilisateur

Digi

Digi TransPort WR31 Instructions d'installation

Digi

Digi CR4110 Manuel utilisateur

Digi

Digi DR6410 Manuel utilisateur

Digi

Digi TX64 Manuel utilisateur

Digi

Digi Connect Series Guide de l'utilisateur

Digi

Digi TA2020B Manuel utilisateur

Digi

Digi IX40 Manuel utilisateur

Digi

Digi Connect IT 4 Manuel utilisateur

Digi

Digi ConnectPort WAN GPS Manuel utilisateur

Digi

Digi Digi Connect WAN Guide de l'utilisateur

Digi

Digi TransPort WR11 Manuel utilisateur

Digi

Digi 6310-DX Manuel utilisateur

Digi

Digi SR44-E Manuel utilisateur

Digi

Digi IX20-WAG4 Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité

LevelOne

LevelOne FBR-1416 Manuel utilisateur

TX40

User Guide

Firmwareversion 23.9

Revision history—90002528

Revision Date Description

A October 2023 Release of Digi TX40firmwareversion 23.9:

nRegister adeviceto DRM:

lAdded alink to theDashboard of thelocal web UI

to register and add thedeviceto Digi Remote

Manager.

nUpdated Dashboard:

lUpdated thelayout of theDashboard pageof the

web UI to combinethenetwork interfaceand

cellular modem detailsinto a single Network

Activity panel.

nHotspot improvement:

lImproved support for integration with

HotspotSystems, including:

oPSD2SessGarden

oLogin/Logout URL

oConfigurableremotewebserver FQDN

nPrimary Responder:

lAdded Primary Responder modesetting to lock

down thedeviceto comply with AT&TFirstNet and

Verizon Response.

nDomain allow list:

lAdded aDomain allow list featureto control what

domainsareaccessiblethrough theDigi device.

nFallback:

lAdded afallback server settingto control which

DNSserver isused asthefallback in theevent that

no configured or DHCP-obtained DNSserversare

available.

nMACsec tunnel:

lAdded information about addinga MACsectunnel.

Trademarksand copyright

Digi, Digi International, and theDigi logo aretrademarksor registered trademarksin theUnited States

and other countriesworldwide. All other trademarksmentioned in thisdocument aretheproperty of

their respectiveowners.

© 2023 Digi International Inc. All rightsreserved.

TX40User Guide 2

Disclaimers

Information in thisdocument issubject to change without noticeand doesnot represent a

commitment on thepart of Digi International. Digi providesthisdocument “asis,” without warranty of

any kind, expressed or implied, including, but not limited to, theimplied warrantiesof fitnessor

merchantability for a particular purpose. Digi may make improvementsand/or changesin thismanual

or in theproduct(s) and/or theprogram(s) described in thismanual at any time.

Warranty

To view product warranty information, go to the followingwebsite:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contactingDigi technical support for help, gather thefollowing

information:

 Product nameand model

 Product serial number (s)

 Firmwareversion

 Operatingsystem/browser (if applicable)

 Logs(from timeof reported issue)

 Trace(if possible)

 Description of issue

 Stepsto reproduce

Contact Digi technical support: Digi offersmultipletechnical support plansand servicepackages.

Contact usat +1952.912.3444 or visit usat www.digi.com/support.

Feedback

To provide feedback on thisdocument, email your commentsto

techcomm@digi.com

Includethedocument title and part number (TX40 User Guide, 90002528 n) in the subject lineof your

email.

TX40User Guide 3

Contents

What'snew in Digi TX40version 23.9

Digi TX40Quick Start

Step 1: Connect your device 18

Step 2: Connect DCpower 18

Step 3: Set up accessto Digi RemoteManager 19

Step 4: Register your device 19

Step 5: Complete setup 19

Step 6: Configurecellular APN 20

Digi TX40hardwarereference

TX40 key features 21

TX40hardwarespecifications 21

TX40front view 21

TX40LEDs 22

WWAN 22

Wi-Fi 22

GNSSService 23

Power 23

Ethernet 1-2Link and Activity (on rear panel) 23

TX40back view 23

TX405Gantennas 24

Supported cellular bandsfor each antennaport 24

Digi TX40serial connector pinout 26

QRcodedefinition 26

Hardwaresetup

Install SIMcards 29

Apply Dielectric Greaseover SIM Contacts 29

Tipsfor improvingcellular signal strength 29

Connect datacables 29

Connect antennas 30

Mount theTX40 to amountingsurface 30

Connect power 30

Mount and ground chassis 31

TX40electrical rating 31

TX40power connector 32

TX40User Guide 4

TX40User Guide 5

Firmwareconfiguration

Review TX40default settings 34

Local WebUI 34

Digi RemoteManager 34

Default interfaceconfiguration 34

Other default configuration settings 36

Primary Responder mode 37

Differencesbetween standard firmware operation and Primary Responder mode 37

Enable Primary Responder mode 37

Changethedefault password for theadmin user 39

Changethedefault SSIDsand pre-shared keysfor thepreconfigured Wi-Fi accesspoints 41

Configuration methods 43

UsingDigi RemoteManager 43

Usingthelocal web interface 44

Logout of theweb interface 44

Usethelocal REST API to configuretheTX40device 45

UsetheGET method to return deviceconfiguration information 45

UsethePOSTmethod to modify device configuration parametersand list arrays 47

UsetheDELETEmethod to removeitemsfrom a list array 48

Usingthecommand line 49

Accessthecommand lineinterface 49

Login to thecommand lineinterface 49

Exit thecommand lineinterface 50

Central management

Digi RemoteManager support 52

Certificate-based enhanced security 52

Configureyour devicefor Digi RemoteManager support 52

Collect devicehealth data and set thesampleinterval 59

Enableevent logupload to Digi RemoteManager 62

Reach Digi RemoteManager on aprivatenetwork 64

Pinholemethod 64

Proxy server method 64

VPNTunnel method 64

Loginto Digi RemoteManager 65

UseDigi RemoteManager to view and manage your device 66

Add adeviceto RemoteManager 66

Add adeviceto RemoteManager usinginformation from thelabel 66

Add adeviceto RemoteManager usingyour RemoteManager login credentials 67

Configuremultiple TX40 devicesby using Digi Remote Manager configurations 68

View Digi RemoteManager connection status 69

Learn more 70

Interfaces

WideAreaNetworks(WANs) 72

Wide Area Networks(WANs) and WirelessWideArea Networks(WWANs) 73

ConfigureWAN/WWAN priority and default route metrics 73

WAN/WWANfailover 76

ConfigureSureLink activerecovery to detect WAN/WWANfailures 77

Configurethedeviceto reboot when a failureisdetected 93

DisableSureLink 106

TX40User Guide 6

Example: Use aping test for WANfailover from Ethernet to cellular 115

UsingEthernet devicesin aWAN 117

Usingcellular modemsin aWirelessWAN(WWAN) 118

Configurea WideAreaNetwork (WAN) 143

Configurea WirelessWideAreaNetwork (WWAN) 151

Show WANand WWANstatusand statistics 162

DeleteaWANor WWAN 164

Default outbound WAN/WWANports 165

Local Area Networks(LANs) 166

About Local AreaNetworks(LANs) 167

Configurea Local AreaNetwork (LAN) 167

ConfiguretheWAN/ETH1port asaLANor in a bridge 174

Changethedefault LANsubnet 183

Example: Configure two LANs 184

Show LANstatusand statistics 193

DeleteaLAN 195

DHCPservers 196

Default serviceslisteningon LAN ports 213

Configurean interfaceto operatein passthrough mode. 213

Virtual LANs(VLANs) 219

Createa trunked VLANroute 220

Createa VLANusingswitchport mode 221

Bridging 224

Edit thepreconfigured LANbridge 225

Configurea bridge 228

Show SureLink statusand statistics 231

Show SureLink State 231

Show SureLink statusfor all interfaces 231

Show SureLink statusfor aspecific interface 232

Show SureLink statusfor all IPsectunnels 232

Show SureLink statusfor aspecific IPsectunnel 233

Show SureLink statusfor all OpenVPNclients 233

Show SureLink statusfor aspecific OpenVPNclient 234

Configurea TCPconnection timeout 234

Serial port

Default serial port configuration 236

Serial modeoptions 236

Add aUSB serial port 236

View serial port information 236

Default serial port configuration 236

ConfigureLogin mode 237

ConfigureRemoteAccessmode 240

ConfigureApplication mode 256

ConfigurePPPdial-in mode 258

ConfigureUDPserial mode 265

ConfigureModem emulator mode 276

ConfigureModbusmode 279

Add aUSBserial port 281

Show serial statusand statistics 295

Review theserial port messagelog 295

TX40User Guide 7

Wi-Fi

Wi-Fi configuration 298

Default accesspoint SSIDand password 298

Default Wi-Fi configuration 298

ConfiguretheWi-Fi radio'schannel 300

ConfiguretheWi-Fi radio to support DFSchannelsin client mode 302

Required configuration items 302

ConfiguretheWi-Fi radio'sband and protocol 304

ConfiguretheWi-Fi radio'stransmit power 306

Configurean open Wi-Fi accesspoint 308

Configurea Wi-Fi accesspoint with personal security 314

Configurea Wi-Fi accesspoint with enterprisesecurity 323

IsolateWi-Fi clients 330

Isolateclientsconnected to thesameaccesspoint 331

Isolateclientsconnected to different accesspoints 332

Configurea Wi-Fi client and add client networks 338

Show Wi-Fi accesspoint statusand statistics 348

Show Wi-Fi client statusand statistics 349

Hotspot

Hotspot authentication modes 352

Hotspot DHCPserver 353

Hotspot security 353

Hotspot configuration 354

Enablehotspot usingthedefault configuration 355

Changethedefault hotspot SSID 358

Changethedefault hotspot IPaddressand subnet 360

Changethedefault hotspot bandwidth limits 363

Add an Ethernet port to thedefault hotspot 365

Usepolicy routes with hotspot 368

Createa new hotspot 368

Configurethehotspot to uselocal shared password authentication 381

Configurethehotspot to useRADIUS shared password authentication 383

Configurethehotspot to useRADIUSusersauthentication 387

Configurethehotspot to useHotspotSystem authentication 390

Show hotspot statusand statistics 394

Customize thehotspot login page 396

Edit samplehotspot HTMLpages 397

Upload custom hotspot HTMLpages 398

Restorehotspot default samplepages 400

Hotspot RADIUSattributes 401

Routing

IProuting 403

Configurea static route 404

Deleteastatic route 407

Policy-based routing 408

Configurea routingpolicy 409

Example: Dual WANpolicy-based routing 416

Example: Domain-based routing with dual WAN 418

Example: Routetraffic to aspecificWANinterfacebased on theclient MAC address 421

TX40User Guide 8

Routing services 427

Configureroutingservices 428

Show theroutingtable 430

DynamicDNS 431

Configuredynamic DNS 431

Virtual Router Redundancy Protocol (VRRP) 436

VRRP+ 436

ConfigureVRRP 437

ConfigureVRRP+ 440

Example: VRRP/VRRP+configuration 447

Configuredeviceone(master device) 448

Configuredevicetwo (backup device) 452

Show VRRPstatusand statistics 458

Virtual PrivateNetworks(VPN)

IPsec 461

IPsec data protection 461

IPsec mode 461

IPsec modes 461

Internet Key Exchange (IKE) settings 461

Authentication 462

Configurean IPsec tunnel 462

ConfigureIPsec failover 490

ConfigureSureLink activerecovery for IPsec 493

Show IPsec statusand statistics 509

Debugan IPsec configuration 510

Configurea SimpleCertificateEnrollment Protocol client 511

Example: SCEPclient configuration with Fortinet SCEPserver 518

Show SCEPclient statusand information 523

OpenVPN 525

Configurean OpenVPNserver 526

Configurean OpenVPNAuthentication Group and User 535

Configurean OpenVPNclient by using an .ovpn file 539

Configurean OpenVPNclient without usingan .ovpn file 542

ConfigureSureLink activerecovery for OpenVPN 546

Show OpenVPNserver statusand statistics 563

Show OpenVPNclient statusand statistics 564

GenericRoutingEncapsulation (GRE) 566

Configuringa GRE tunnel 566

Show GREtunnels 571

Example: GREtunnel over an IPSec tunnel 572

DynamicMultipoint VPN(DMVPN) 586

Configurea DMVPNspoke 587

L2TP 593

Configurea PPP-over-L2TPtunnel 593

L2TPwith IPsec 603

Show L2TPtunnel status 603

L2TPv3Ethernet 605

Configurean L2TPv3tunnel 605

Show L2TPV3tunnel status 609

MACsec 611

Configurea MACsectunnel 611

NEMO 613

Configurea NEMOtunnel 614

TX40User Guide 9

Show NEMOstatus 618

Services

Allow remoteaccessfor web administration and SSH 621

Configuretheweb administration service 624

ConfigureSSH access 633

UseSSHwith key authentication 640

Generating SSH key pairs 640

Configuretelnet access 643

ConfigureDNS 648

Show DNSserver 653

WAN bonding 654

UseDigi RemoteManager to enable and configureWANbondingon multipledevices 655

ConfigureWAN bondingon your local device 658

Show WANbondingstatusand statistics 663

SimpleNetwork Management Protocol (SNMP) 666

SNMPSecurity 666

ConfigureSimpleNetwork Management Protocol (SNMP) 666

Download MIBs 671

Location information 673

Configurethelocation service 674

Configuretheinternal GNSSmodule 676

Useadead reckoningexternal USBGNSSreceiver 678

Configurethedeviceto use auser-defined static location 680

Configurethedeviceto accept location messagesfrom external sources 682

Forward location information to aremotehost 687

Configuregeofencing 694

Show location information 706

Modbusgateway 707

ConfiguretheModbusgateway 708

Show Modbusgateway statusand statistics 721

System time 724

Configurethesystem time 724

Manually set the system date and time 728

Network TimeProtocol 728

Configurethedeviceasan NTPserver 729

Show statusand statisticsof theNTPserver 734

Configurea multicast route 735

Ethernet network bonding 737

Enable service discovery (mDNS) 742

Information Technology for Public Transport (ITxPT) support 745

ConfiguretheITxPTservice 746

UsetheMQTT broker service 753

Show MQTT broker information 763

UsetheiPerf service 764

Example performancetest usingiPerf3 768

Configurethepingresponder service 769

Example performancetest usingiPerf3 772

Applications

Develop Python applications 774

Install Python 775

TX40User Guide 10

Set up theTX40for Python development 776

Createand test aPython application 777

Python modules 781

Set up theTX40 to automatically run your applications 814

Configurescriptsto run automatically 815

Show script information 821

Stop a script that iscurrently running 822

Start an interactivePython session 823

Run aPython application at theshell prompt 824

Configurescriptsto run manually 826

Task one: Upload the application 826

Task two: Configure the application to run automatically 828

Start a manual script 831

User authentication

TX40user authentication 834

User authentication methods 834

Add anew authentication method 836

Deletean authentication method 838

Rearrangetheposition of authentication methods 839

Authentication groups 841

Changetheaccessrightsfor apredefined group 843

Add an authentication group 845

Deletean authentication group 849

Local users 851

Changealocal user'spassword 852

Configurea local user 854

Deletealocal user 861

Terminal AccessController Access-Control System Plus(TACACS+) 864

TACACS+user configuration 865

TACACS+server failover and fallback to local authentication 866

Configureyour TX40deviceto useaTACACS+server 866

RemoteAuthentication Dial-In User Service(RADIUS) 872

RADIUSuser configuration 873

RADIUSserver failover and fallback to local configuration 873

Configureyour TX40deviceto useaRADIUSserver 874

LDAP 877

LDAPuser configuration 879

LDAPserver failover and fallback to local configuration 880

Configureyour TX40deviceto usean LDAPserver 880

Configureserial authentication 885

Disableshell access 887

Set theidletimeout for TX40users 889

Example user configuration 891

Example 1: Administrator user with local authentication 891

Example 2: RADIUS, TACACS+, and local authentication for oneuser 893

Firewall

Firewall configuration 901

Createa custom firewall zone 901

Configurethefirewall zonefor a network interface 903

Deleteacustom firewall zone 904