Digi TX64 Manuel utilisateur

TX64

User Guide

Revision history—90002348

Revision Date Description

A November 2019 Initial release of DigiTX64 firmware version 19.11.

B February 2020 Release of DigiTX64 firmware version 20.2:

nDigi SureLinkTM support (formerly known as active

recovery).

lEnabled by default on preconfigured WANs and

WWANs.

nRole-based user access.

lAllow shell option added to authentication.

lRead-only access option added to user

configuration.

Trademarks and copyright

Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United

States and other countries worldwide. All other trademarks mentioned in this document are the

property of their respective owners.

Disclaimers

Information in this document is subject to change without notice and does not represent a

commitment on the part of Digi International. Digi provides this document “as is,” without warranty of

any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or

merchantability for a particular purpose. Digi may make improvements and/or changes in this manual

or in the product(s) and/or the program(s) described in this manual at any time.

Warranty

To view product warranty information, go to the following website:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contacting Digi technical support for help, gather the following

information:

Product name and model

Product serial number (s)

Firmware version

Operating system/browser (if applicable)

Logs (from time of reported issue)

Trace (if possible)

TX64 User Guide 2

Description of issue

Steps to reproduce

Contact Digi technical support: Digi offers multiple technical support plans and service packages.

Feedback

To provide feedback on this document, email your comments to

techcomm@digi.com

Include the document title and part number (TX64 User Guide, 90002348 B) in the subject line of your

email.

TX64 User Guide 3

Contents

Revision history—90002348 2

What's new in Digi TX64 version 20.2

Digi TX64 Quick start

Quick start using the Digi Remote Manager mobile app 14

Step 1: What's in the box 14

Step 2: Gather accessories 15

Step 3: Connect 16

Step 4: Power up 16

Step 5: Configure 16

Digi TX64 hardware reference

TX64 key features 17

TX64 hardware specifications 17

TX64 front view 17

TX64 LEDs 18

Power 18

GNSS Service 18

Wi-Fi1 Service 18

Wi-Fi2 Service 18

WWAN1/WWAN2 Signal 18

WWAN1/WWAN2 Service 18

Ethernet 1-4 Link and Activity (on rear panel) 19

Power sensor and button behavior 19

TX64 back view 19

Digi TX64 serial connector pinout 20

Hardware setup

Install SIM cards 22

Tips for improving cellular signal strength 22

Connect data cables 22

Connect antennas 22

Mount the TX64 to a mounting surface 23

Connect power 23

Mount and ground chassis 24

TX64 electrical rating 24

TX64 User Guide 4

TX64 User Guide 5

TX64 power connector 25

Configuration and management

Review TX64 default settings 27

Local WebUI 27

Digi Remote Manager 27

Default interface configuration 27

Other default configuration settings 29

Reset default password for the default admin user 30

Configuration methods 31

Using Digi Remote Manager 32

Access Digi Remote Manager 32

Using the web interface 32

Log out of the web interface 34

Using the command line 35

Access the command line interface 35

Exit the command line interface 36

Interfaces

Wide Area Networks (WANs) 38

Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 39

Configure WAN/WWAN priority and default route metrics 39

WAN/WWAN failover 42

Configure SureLink active recovery to detect WAN/WWAN failures 43

Configure the device to reboot when a failure is detected 50

Disable SureLink 56

Example: Use a ping test for WAN failover from Ethernet to cellular 60

Using Ethernet devices in a WAN 64

Using cellular modems in a Wireless WAN (WWAN) 64

Configure a Wide Area Network (WAN) 80

Configure a Wireless Wide Area Network (WWAN) 87

Show WAN and WWAN status and statistics 96

Delete a WAN or WWAN. 98

Local Area Networks (LANs) 100

About Local Area Networks (LANs) 101

Configure a LAN 101

Example: Configure two LANs 108

Show LAN status and statistics 117

Delete a LAN 118

DHCP servers 119

Create a Virtual LAN (VLAN) route 136

Bridging 140

Edit the preconfigured LAN1 bridge 141

Configure a bridge 144

Serial port

Configure the serial port 149

Show serial status and statistics 153

TX64 User Guide 6

Wi-Fi

Wi-Fi configuration 155

Default Wi-Fi configuration 155

Configure the Wi-Fi module channel 156

Configure the Wi-Fi module band and protocol 158

Configure a Wi-Fi access point with no security 160

Configure a Wi-Fi access point with personal security 166

Configure a Wi-Fi access point with enterprise security 172

Show Wi-Fi access point status and statistics 179

Configure a Wi-Fi client and add client networks 180

Show Wi-Fi client status and statistics 187

Hotspot

Hotspot authentication modes 190

Hotspot DHCP server 191

Hotspot security 191

Hotspot configuration 192

Enable hotspot using the default configuration 193

Change the default hotspot SSID 198

Change the default hotspot IP address and subnet 200

Change the default hotspot bandwidth limits 203

Add an Ethernet port to the default hotspot 205

Create a new hotspot 208

Configure the hotspot to use local shared password authentication 221

Configure the hotspot to use RADIUSshared password authentication 223

Configure the hotspot to use RADIUS users authentication 227

Configure the hotspot to use HotspotSystem authentication 231

Show hotspot status and statistics 234

Customize the hotspot login page 236

Edit sample hotspot HTML pages 237

Upload custom hotspot HTML pages 238

Restore hotspot default sample pages 240

Hotspot RADIUS attributes 241

Routing

IP routing 243

Configure a static route 244

Delete a static route 247

Policy-based routing 249

Configure a routing policy 250

Example: Dual WAN policy-based routing 258

Example: Route traffic to a specific WAN interface based on the client MACaddress 261

Routing services 266

Configure routing services 267

Show the routing table 269

Dynamic DNS 271

Configure dynamic DNS 271

Virtual Router Redundancy Protocol (VRRP) 277

Configure VRRP 277

Show VRRP status and statistics 281

TX64 User Guide 7

Virtual Private Networks (VPN)

IPsec 283

IPsec data protection 283

IPsec modes 283

Internet Key Exchange (IKE) settings 283

Authentication 284

Configure an IPsec tunnel 284

Configure IPsec failover 306

Configure SureLink active recovery for IPsec 307

Show IPsec status and statistics 314

Configure a Simple Certificate Enrollment Protocol client 315

Example: SCEP client configuration with Fortinet SCEP server 320

OpenVPN 325

Configure an OpenVPN server 326

Configure an OpenVPN Authentication Group and User 335

Configure an OpenVPN client by using an .ovpn file 340

Configure an OpenVPN client without using an .ovpn file 343

Configure active recovery for OpenVPN 348

Show OpenVPN server status and statistics 355

Show OpenVPN client status and statistics 356

Generic Routing Encapsulation (GRE) 357

Configuring a GREtunnel 357

Show GRE tunnels 363

Example: GRE tunnel over an IPSec tunnel 364

Services

Allow remote access for web administration and SSH 382

Configure the web administration service 386

Configure SSHaccess 394

Use SSH with key authentication 401

Generating SSH key pairs 401

Configure telnet access 404

Configure DNS 409

Simple Network Management Protocol (SNMP) 416

SNMP Security 416

Configure Simple Network Management Protocol (SNMP) 416

Download MIBs 421

Location information 422

Configure the location server 423

Enable or disable the internal GNSS module 427

Use a dead reckoning external USB GNSS receiver 429

Configure the device to accept location messages from external sources 430

Forward location information to a remote host 436

Show location information 443

System time 444

Configure the system time 444

Network Time Protocol 447

Configure the device as an NTP server 447

Configure a multicast route 453

Enable service discovery (mDNS) 456

Use the iPerf service 459

Example performance test using Iperf3 464

TX64 User Guide 8

Applications

Configure applications to run automatically 467

Task one: Upload the application 467

Task two: Configure the application to run automatically 469

Run a Python application at the shell prompt 473

Start an interactive Python session 475

Digidevice module 477

Use digidevice.cli to execute CLI commands 478

Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 479

Use digidevice.config for device configuration 481

Use Python to respond to Digi Remote Manager SCI requests 483

Use digidevice runtime to access the runtime database 492

Using Python to upload the device name to Digi Remote Manager 494

The digidevice led submodule 496

User authentication

TX64 user authentication 500

User authentication methods 500

Add a new authentication method 502

Delete an authentication method 504

Rearrange the position of authentication methods 506

Authentication groups 508

Change the access rights for a predefined group 510

Add an authentication group 512

Delete an authentication group 516

Local users 519

Change a local user's password 520

Configure a local user 522

Delete a local user 529

Terminal Access Controller Access-Control System Plus (TACACS+) 532

TACACS+ user configuration 533

TACACS+ server failover and fallback to local authentication 534

Configure your TX64 device to use a TACACS+ server 534

Remote Authentication Dial-In User Service (RADIUS) 539

RADIUS user configuration 540

RADIUS server failover and fallback to local configuration 540

Configure your TX64 device to use a RADIUS server 541

Disable shell access 545

Set the idle timeout for TX64 users 547

Example user configuration 550

Example 1: Administrator user with local authentication 550

Example 2: RADIUS, TACACS+, and local authentication for one user 552

Firewall

Firewall configuration 560

Create a custom firewall zone 560

Configure the firewall zone for a network interface 562

Delete a custom firewall zone 564

Port forwarding rules 566

Configure port forwarding 566

Delete a port forwarding rule 571

TX64 User Guide 9

Packet filtering 574

Configure packet filtering 574

Enable or disable a packet filtering rule 578

Delete a packet filtering rule 580

Configure custom firewall rules 582

Configure captive portals 585

Delete captive portals 589

Configure Quality of Service options 590

Web filtering 602

Configure web filtering with Cisco Umbrella 602

Configure web filtering with manual DNS servers 605

Verify your web filtering configuration 608

Show web filter service information 611

System administration

Review device status 613

Configure system information 614

Update system firmware 616

Manage firmware updates using Digi Remote Manager 616

Certificate management for firmware images 616

Update cellular module firmware 618

Reboot your TX64 device 619

Reboot your device immediately 619

Schedule reboots of your device 620

Reset the device to factory defaults 621

Configure power delays for power ignition sensor 624

Configure power button behavior 626

Configure automatic reboot behavior for temporary power drop 629

Configuration files 631

Save configuration changes 631

Save configuration to a file 632

Restore the device configuration 633

Schedule system maintenance tasks 636

Monitoring

intelliFlow 644

Enable intelliFlow 644

Use intelliFlow to display average CPU and RAMusage 647

Use intelliFlow to display top data usage information 648

Use intelliFlow to display data usage by host over time 650

Configure NetFlow Probe 651

Enable the Bluetooth scanner 656

Display the output of the Bluetooth scanner. 661

Enable the Wi-Fi scanner 663

Required configuration 663

Additional configuration 663

Display the output of the Wi-Fi scanner. 669

Central management with Digi Remote Manager

Digi Remote Manager support 673

TX64 User Guide 10

Configure Digi Remote Manager 673

Collect device health data and set the sample interval 677

Log into Digi Remote Manager 679

Use Digi Remote Manager to view and manage your device 680

Add a device to Digi Remote Manager 681

View Digi Remote Manager connection status 681

Use the Digi Remote Manager mobile app 682

Configure multiple devices using profiles 683

Learn more 683

File system

The TX64 local file system 685

Display directory contents 685

Create a directory 686

Display file contents 687

Copy a file or directory 687

Move or rename a file or directory 688

Delete a file or directory 689

Upload and download files 690

Upload and download files by using the WebUI 690

Upload and download files by using the Secure Copy command 691

Upload and download files using SFTP 692

Diagnostics

Generate a support report 695

View system event logs 696

View System Logs 696

View Event Logs 699

Configure syslog servers 701

Configure options for the event and system logs 703

Analyze network traffic 708

Configure packet capture for the network analyzer 709

Example filters for capturing data traffic 713

Capture packets from the command line 714

Stop capturing packets 715

Show captured traffic data 716

Save captured data traffic to a file 717

Download captured data to your PC 718

Clear captured data 719

Use the ping command to troubleshoot network connections 721

Ping to check internet connection 721

Stop ping commands 721

Use the traceroute command to diagnose IProuting problems 721

Digi TX64 regulatory and safety statements

RF exposure statement 723

Federal Communication (FCC) Part 15 Class B 723

Radio Frequency Interference (RFI) (FCC 15.105) 723

European Community - CE Mark Declaration of Conformity (DoC) 723

CE mark (Europe) 724

Autres manuels pour TX64

Table des matières

Autres manuels Digi Routeur réseau

Digi

Digi TX54 Manuel utilisateur

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi HR4420i Manuel utilisateur

Digi

Digi 6330-MX Manuel utilisateur

Digi

Digi IX20 Manuel utilisateur

Digi

Digi Digi TransPort WR Manuel utilisateur

Digi

Digi TransPort WR64 Guide d'application

Digi

Digi TransPort LR54 Manuel utilisateur

Digi

Digi EX40 Manuel utilisateur

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi TX40 Manuel utilisateur

Digi

Digi ConnectPort X4 H Manuel utilisateur

Digi

Digi IX40 Manuel utilisateur

Digi

Digi 6350-SR Manuel utilisateur

Digi

Digi 6310-DX Manuel utilisateur

Digi

Digi XLR PRO Manuel utilisateur

Digi

Digi 6330-MX Manuel utilisateur

Digi

Digi IR4420 Manuel utilisateur

Digi

Digi TransPort WR11 XT Manuel utilisateur

Digi

Digi TransPort WR11 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi XPress Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité

LevelOne

LevelOne FBR-1416 Manuel utilisateur