Digi TX64 Manuel utilisateur

TX64

User Guide

Revision history—90002348

Revision Date Description

A November 2019 Initial release of DigiTX64 firmware version 19.11.

B February 2020 Release of DigiTX64 firmware version 20.2:

nDigi SureLinkTM support (formerly known as active

recovery).

lEnabled by default on preconfigured WANs and

WWANs.

nRole-based user access.

lAllow shell option added to authentication.

lRead-only access option added to user configuration.

TX64 User Guide 2

Revision Date Description

C June, 2020 Release of Digi TX64 firmware version 20.5:

nSupport for LDAP user authentication.

nPreconfigured Wi-Fi SSIDand password enabled by

default.

lThe default SSID for both of the access points is:

Digi-TX64-serial_number

lDefault password is the unique password as found on

the device's label.

You will need to change the SSIDand password before

any configuration changes can be saved.

nWi-Fi client isolation options.

nFirmware installation from the Digi firmware server.

nEnhanced Digi Remote Manager support:

lSupport for remote proxy server for Digi Remote

Manager.

lWatchdog support for connection to Digi Remote

Manager.

lLocally authenticate CLI option added to Digi

Remote Manager configuration to control whether a

user is required to provide device-level authentication

when accessing the console of the device through

Digi Remote Manager.

lAdded a randomized two minute delay window for

uploading health metrics to the Digi Remote Manager

to avoid situations where multiple devices are

uploading metrics at the same time.

nEnhanced Python support:

lSupport for the Python serial module to allow

programmatic access to serial ports.

lSupport for the Python HID module to allow

programmatic access to a USB Human Interface

Device (HID) from within a Python script.

nApplication mode for serial ports to allow for Python

programmatic control.

Trademarks and copyright

Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United

States and other countries worldwide. All other trademarks mentioned in this document are the

property of their respective owners.

TX64 User Guide 3

Disclaimers

Information in this document is subject to change without notice and does not represent a

commitment on the part of Digi International. Digi provides this document “as is,” without warranty of

any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or

merchantability for a particular purpose. Digi may make improvements and/or changes in this manual

or in the product(s) and/or the program(s) described in this manual at any time.

Warranty

To view product warranty information, go to the following website:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contacting Digi technical support for help, gather the following

information:

Product name and model

Product serial number (s)

Firmware version

Operating system/browser (if applicable)

Logs (from time of reported issue)

Trace (if possible)

Description of issue

Steps to reproduce

Contact Digi technical support: Digi offers multiple technical support plans and service packages.

Feedback

To provide feedback on this document, email your comments to

techcomm@digi.com

Include the document title and part number (TX64 User Guide, 90002348 C) in the subject line of your

email.

TX64 User Guide 4

Contents

Revision history—90002348 2

What's new in Digi TX64 version 20.5

Digi TX64 Quick start

Quick start using the Digi Remote Manager mobile app 15

Step 1: What's in the box 15

Step 2: Gather accessories 16

Step 3: Connect 17

Step 4: Power up 18

Step 5: Configure 18

Digi TX64 hardware reference

TX64 key features 19

TX64 hardware specifications 19

TX64 front view 19

TX64 LEDs 20

Power 20

GNSS Service 20

Wi-Fi1 Service 20

Wi-Fi2 Service 20

WWAN1/WWAN2 Signal 20

WWAN1/WWAN2 Service 20

Ethernet 1-4 Link and Activity (on rear panel) 21

Power sensor and button behavior 21

TX64 back view 21

Digi TX64 serial connector pinout 22

Hardware setup

Install SIM cards 24

Tips for improving cellular signal strength 24

Connect data cables 24

Connect antennas 24

Mount the TX64 to a mounting surface 25

Connect power 25

Mount and ground chassis 26

TX64 electrical rating 26

TX64 User Guide 5

TX64 User Guide 6

TX64 power connector 27

Configuration and management

Review TX64 default settings 29

Local WebUI 29

Digi Remote Manager 29

Default interface configuration 29

Other default configuration settings 31

Reset default password for the default admin user 32

Reset default SSIDs and pre-shared keys for the preconfigured Wi-Fi access points 33

Configuration methods 35

Using Digi Remote Manager 36

Access Digi Remote Manager 36

Using the web interface 36

Log out of the web interface 37

Using the command line 38

Access the command line interface 38

Exit the command line interface 39

Interfaces

Wide Area Networks (WANs) 41

Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 42

Configure WAN/WWAN priority and default route metrics 42

WAN/WWAN failover 45

Configure SureLink active recovery to detect WAN/WWAN failures 46

Configure the device to reboot when a failure is detected 53

Disable SureLink 59

Example: Use a ping test for WAN failover from Ethernet to cellular 63

Using Ethernet devices in a WAN 67

Using cellular modems in a Wireless WAN (WWAN) 67

Configure a Wide Area Network (WAN) 82

Configure a Wireless Wide Area Network (WWAN) 89

Show WAN and WWAN status and statistics 98

Delete a WAN or WWAN. 99

Local Area Networks (LANs) 102

About Local Area Networks (LANs) 103

Configure a LAN 103

Example: Configure two LANs 110

Show LAN status and statistics 118

Delete a LAN 120

DHCP servers 121

Create a Virtual LAN (VLAN) route 137

Bridging 141

Edit the preconfigured LAN1 bridge 142

Configure a bridge 145

Serial port

Configure the serial port 150

Add a USB serial port 160

TX64 User Guide 7

Show serial status and statistics 174

Wi-Fi

Wi-Fi configuration 177

Default access point SSID and password 177

Default Wi-Fi configuration 177

Configure the Wi-Fi module channel 179

Configure the Wi-Fi module band and protocol 181

Configure a Wi-Fi access point with no security 183

Configure a Wi-Fi access point with personal security 189

Configure a Wi-Fi access point with enterprise security 195

Isolate Wi-Fi clients 203

Isolate clients connected to the same access point 203

Isolate clients connected to different access points 204

Show Wi-Fi access point status and statistics 211

Configure a Wi-Fi client and add client networks 212

Show Wi-Fi client status and statistics 219

Hotspot

Hotspot authentication modes 222

Hotspot DHCP server 223

Hotspot security 223

Hotspot configuration 224

Enable hotspot using the default configuration 225

Change the default hotspot SSID 230

Change the default hotspot IP address and subnet 232

Change the default hotspot bandwidth limits 235

Add an Ethernet port to the default hotspot 237

Create a new hotspot 240

Configure the hotspot to use local shared password authentication 252

Configure the hotspot to use RADIUSshared password authentication 254

Configure the hotspot to use RADIUS users authentication 258

Configure the hotspot to use HotspotSystem authentication 262

Show hotspot status and statistics 266

Customize the hotspot login page 267

Edit sample hotspot HTML pages 269

Upload custom hotspot HTML pages 270

Restore hotspot default sample pages 272

Hotspot RADIUS attributes 273

Routing

IP routing 275

Configure a static route 276

Delete a static route 279

Policy-based routing 281

Configure a routing policy 281

Example: Dual WAN policy-based routing 290

Example: Route traffic to a specific WAN interface based on the client MACaddress 293

Routing services 298

Configure routing services 299

TX64 User Guide 8

Show the routing table 301

Dynamic DNS 303

Configure dynamic DNS 303

Virtual Router Redundancy Protocol (VRRP) 309

Configure VRRP 309

Show VRRP status and statistics 313

Virtual Private Networks (VPN)

IPsec 315

IPsec data protection 315

IPsec modes 315

Internet Key Exchange (IKE) settings 315

Authentication 316

Configure an IPsec tunnel 316

Configure IPsec failover 338

Configure SureLink active recovery for IPsec 339

Show IPsec status and statistics 346

Configure a Simple Certificate Enrollment Protocol client 347

Example: SCEP client configuration with Fortinet SCEP server 351

OpenVPN 357

Configure an OpenVPN server 358

Configure an OpenVPN Authentication Group and User 367

Configure an OpenVPN client by using an .ovpn file 371

Configure an OpenVPN client without using an .ovpn file 374

Configure active recovery for OpenVPN 378

Show OpenVPN server status and statistics 385

Show OpenVPN client status and statistics 386

Generic Routing Encapsulation (GRE) 388

Configuring a GREtunnel 388

Show GRE tunnels 394

Example: GRE tunnel over an IPSec tunnel 395

Services

Allow remote access for web administration and SSH 412

Configure the web administration service 416

Configure SSHaccess 424

Use SSH with key authentication 430

Generating SSH key pairs 430

Configure telnet access 433

Configure DNS 438

Simple Network Management Protocol (SNMP) 445

SNMP Security 445

Configure Simple Network Management Protocol (SNMP) 445

Download MIBs 450

Location information 451

Configure the location server 452

Enable or disable the internal GNSS module 456

Use a dead reckoning external USB GNSS receiver 458

Configure the device to accept location messages from external sources 459

Forward location information to a remote host 465

Show location information 472

System time 473

TX64 User Guide 9

Configure the system time 473

Network Time Protocol 476

Configure the device as an NTP server 476

Configure a multicast route 482

Enable service discovery (mDNS) 485

Use the iPerf service 488

Example performance test using Iperf3 493

Applications

Configure applications to run automatically 496

Task one: Upload the application 496

Task two: Configure the application to run automatically 498

Run a Python application at the shell prompt 502

Start an interactive Python session 504

Digidevice module 506

Use digidevice.cli to execute CLI commands 507

Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 508

Use digidevice.config for device configuration 510

Use Python to respond to Digi Remote Manager SCI requests 512

Use digidevice runtime to access the runtime database 521

Using Python to upload the device name to Digi Remote Manager 523

The digidevice led submodule 525

Hid module 527

Help for the hid module 528

Use Python to access serial ports 528

User authentication

TX64 user authentication 531

User authentication methods 531

Add a new authentication method 533

Delete an authentication method 535

Rearrange the position of authentication methods 537

Authentication groups 539

Change the access rights for a predefined group 540

Add an authentication group 542

Delete an authentication group 546

Local users 548

Change a local user's password 549

Configure a local user 551

Delete a local user 558

Terminal Access Controller Access-Control System Plus (TACACS+) 560

TACACS+ user configuration 561

TACACS+ server failover and fallback to local authentication 562

Configure your TX64 device to use a TACACS+ server 562

Remote Authentication Dial-In User Service (RADIUS) 568

RADIUS user configuration 569

RADIUS server failover and fallback to local configuration 569

Configure your TX64 device to use a RADIUS server 570

LDAP 575

LDAP user configuration 576

LDAP server failover and fallback to local configuration 577

Configure your TX64 device to use an LDAP server 577

TX64 User Guide 10

Disable shell access 582

Set the idle timeout for TX64 users 583

Example user configuration 586

Example 1: Administrator user with local authentication 586

Example 2: RADIUS, TACACS+, and local authentication for one user 588

Firewall

Firewall configuration 596

Create a custom firewall zone 596

Configure the firewall zone for a network interface 598

Delete a custom firewall zone 600

Port forwarding rules 601

Configure port forwarding 601

Delete a port forwarding rule 606

Packet filtering 609

Configure packet filtering 609

Enable or disable a packet filtering rule 613

Delete a packet filtering rule 615

Configure custom firewall rules 617

Configure captive portals 619

Delete captive portals 623

Configure Quality of Service options 624

Web filtering 635

Configure web filtering with Cisco Umbrella 635

Configure web filtering with manual DNS servers 638

Verify your web filtering configuration 641

Show web filter service information 643

System administration

Review device status 646

Configure system information 647

Update system firmware 649

Manage firmware updates using Digi Remote Manager 649

Certificate management for firmware images 650

Update cellular module firmware 652

Reboot your TX64 device 653

Reboot your device immediately 653

Schedule reboots of your device 654

Reset the device to factory defaults 655

Configure power delays for power ignition sensor 658

Configure power button behavior 660

Configure automatic reboot behavior for temporary power drop 663

Configuration files 665

Save configuration changes 665

Save configuration to a file 666

Restore the device configuration 667

Schedule system maintenance tasks 670

Monitoring

intelliFlow 678

Autres manuels pour TX64

Table des matières

Autres manuels Digi Routeur réseau

Digi

Digi 34 Instructions d'installation et d'utilisation

Digi

Digi TransPort LR54 Manuel utilisateur

Digi

Digi TransPort WR21 Manuel utilisateur

Digi

Digi ConnectPort X2e ZB Manuel utilisateur

Digi

Digi IX40 Manuel utilisateur

Digi

Digi IR4420 Manuel utilisateur

Digi

Digi TransPort WR21 Manuel utilisateur

Digi

Digi Connect EZ 4 Manuel utilisateur

Digi

Digi TransPort WR31 Manuel utilisateur

Digi

Digi Connect IT 4 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Digi

Digi TA2020B Manuel utilisateur

Digi

Digi IX20-WAG4 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Digi

Digi TransPort WR31 Manuel utilisateur

Digi

Digi TransPort WR41 Manuel utilisateur

Digi

Digi TransPort WR54 Guide d'application

Digi

Digi TransPort WR64 Manuel utilisateur

Digi

Digi CR4110 Manuel utilisateur

Digi

Digi TransPort WR44 v2 Manuel utilisateur

Digi

Digi TransPort WR11 Manuel de l'opérateur

Digi

Digi TX54 Manuel utilisateur

Digi

Digi ConnectPort X4 Manuel utilisateur

Digi

Digi ConnectPort WAN GPS Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité

LevelOne

LevelOne FBR-1416 Manuel utilisateur