Name: Digi Connect EZ Mini
Brand: Digi
Rating: 5 (1 reviews)

To Next Page

To Previous Page

Firewall

This chapter contains the following topics:

Firewall configuration 565

Port forwarding rules 570

Packet filtering 577

Configure custom firewall rules 584

Configure Quality of Service options 586

Web filtering 595

Digi Connect EZ Mini User Guide

564

Table of Contents7
Digi Connect EZ Mini User Guide17
Digi Connect EZ Mini17
Get Started with Connect EZ18
Step 1: Verify Product Components18
Included Equipment18
Step 2: Connect the Power Supply19
Step 3: Connect to Site Network Using an Ethernet LAN20
Step 4: Discover the IP Address Using the Digi Navigator20
Step 5: Configure Realport from the Digi Navigator21
Step 6: Connect to the Web UI and Update the Connect EZ Firmware22
Step 7: Connect to Digi Remote Manager23
Connect Equipment to the Connect EZ Serial Port24
Connect Equipment to a Serial Port24
Serial Connector Pinout: Connect EZ Mini24
Serial Status Page25
Hardware27
Top Panel and Leds27
Bottom Panel28
Back Panel29
Change the Password on the Connect EZ30
Mount the Connect EZ Device30
Attach to a Mounting Surface Using the Two Mounting Tabs30
Attach to DIN Rail with Clip31
Power Loss and Connect EZ Configuration31
Use the ERASE Button to Reset Your Device to the Factory Defaults32
Discover the IP Address Using the Digi Navigator32
Discover the Device's IP Address: Additional Methods33
Discover the IP Address Using a Micro USB Cable33
Manually Configure the PC and Assign an IP Address to the Device33
Connect to the Local Web UI on the Connect EZ35
Device Label Sticker Sample36
Firmware Configuration39
Review Connect EZ Default Settings39
Local Webui39
Digi Remote Manager39
Default Interface Configuration39
Other Default Configuration Settings39
Change the Default Password for the Admin User40
Configuration Methods41
Using Digi Remote Manager42
Access Digi Remote Manager42
Using the Local Web Interface43
Log out of the Web Interface43
Use the Local REST API to Configure the Connect EZ Device43
Use the GET Method to Return Device Configuration Information43
Use the POST Method to Modify Device Configuration Parameters and List Arrays46
Use the DELETE Method to Remove Items from a List Array46
Access the Terminal Screen from the Web UI47
Using the Command Line49
Access the Command Line Interface49
Log in to the Command Line Interface49
Exit the Command Line Interface50
Interfaces51
Define a Static IP Address51
IP Address and Netmask52
Wide Area Networks (Wans)52
Wide Area Networks (Wans)53
Configure WAN Priority and Default Route Metrics53
Configure Surelink Active Recovery to Detect WAN Failures55
Configure the Device to Reboot When a Failure Is Detected69
Disable Surelink76
Configure a Wide Area Network (WAN)85
Show WAN Status and Statistics90
Delete a WAN92
Show Surelink Status and Statistics93
Show Surelink State94
Show Surelink Status for All Interfaces94
Show Surelink Status for a Specific Interface95
Show Surelink Status for All Ipsec Tunnels95
Show Surelink Status for a Specific Ipsec Tunnel96
Show Surelink Status for All Openvpn Clients96
Show Surelink Status for a Specific Openvpn Client97
Configure a TCP Connection Timeout97
Serial Port99
Default Serial Port Configuration99
Serial Mode Options99
View Serial Port Information99
Configure Login Mode100
Configure Remote Access Mode105
Configure Application Mode121
Configure PPP Dial-In Mode124
Configure UDP Serial Mode131
Configure Modem Emulator Mode142
Configure Modbus Mode145
Configure Realport Mode Using the Digi Navigator149
Installation and Configuration Process149
Digi Navigator Features150
Install the Digi Navigator150
Configure Realport on a Digi Device from the Digi Navigator151
Digi Navigator Device Discovery Process153
Services Used to Discover a Device When Connected to a Network153
Digi Navigator Application Features158
Advanced Realport Configuration Without Using the Digi Navigator161
Windows Operating System162
Linux Operating System162
Download the Realport Driver162
Configure Realport on Your Laptop162
Configure the Serial Port for Realport Mode164
Configure the Realport Service169
Show Serial Status and Statistics169
Review the Serial Port Message Log170
Virtual Private Networks (VPN)172
Ipsec173
Ipsec Data Protection173
Ipsec Mode173
Ipsec Modes173
Internet Key Exchange (IKE) Settings173
Authentication174
Configure an Ipsec Tunnel174
Configure Ipsec Failover201
Configure Surelink Active Recovery for Ipsec204
Show Ipsec Status and Statistics220
Debug an Ipsec Configuration221
Configure a Simple Certificate Enrollment Protocol Client222
Example: SCEP Client Configuration with Fortinet SCEP Server229
Show SCEP Client Status and Information234
Openvpn237
Configure an Openvpn Server238
Configure an Openvpn Authentication Group and User247
Configure an Openvpn Client by Using an .Ovpn File251
Configure an Openvpn Client Without Using an .Ovpn File254
Configure Surelink Active Recovery for Openvpn258
Show Openvpn Server Status and Statistics274
Show Openvpn Client Status and Statistics275
Generic Routing Encapsulation (GRE)277
Configuring a GRE Tunnel277
Show GRE Tunnels282
Example: GRE Tunnel over an Ipsec Tunnel283
Dynamic Multipoint VPN (DMVPN)298
Configure a DMVPN Spoke299
L2Tp305
Configure a PPP-Over-L2TP Tunnel305
L2TP with Ipsec315
Show L2TP Tunnel Status315
L2Tpv3 Ethernet317
Configure an L2Tpv3 Tunnel317
Show L2TPV3 Tunnel Status321
Allow Remote Access for Web Administration and SSH324
Configure the Web Administration Service327
Configure SSH Access337
Use SSH with Key Authentication344
Generating SSH Key Pairs344
Configure Telnet Access347
Configure DNS352
Show DNS Server357
Simple Network Management Protocol (SNMP)359
SNMP Security359
Configure Simple Network Management Protocol (SNMP)359
Download Mibs363
Location Information365
Configure the Location Service366
Configure the Device to Use a User-Defined Static Location368
Configure the Device to Accept Location Messages from External Sources370
Forward Location Information to a Remote Host374
Configure Geofencing381
Show Location Information393
Modbus Gateway394
Configure the Modbus Gateway395
Show Modbus Gateway Status and Statistics408
System Time412
Configure the System Time412
Manually Set the System Date and Time416
Network Time Protocol416
Configure the Device as an NTP Server417
Show Status and Statistics of the NTP Server422
Configure a Multicast Route423
Enable Service Discovery (Mdns)426
Use the Iperf Service429
Example Performance Test Using Iperf3433
Configure the Ping Responder Service433
Example Performance Test Using Iperf3437
Develop Python Applications439
Set up the Connect EZ for Python Development440
Create and Test a Python Application440
Python Modules444
Set up the Connect EZ to Automatically Run Your Applications479
Configure Scripts to Run Automatically479
Show Script Information486
Stop a Script that Is Currently Running487
Start an Interactive Python Session488
Run a Python Application at the Shell Prompt489
Configure Scripts to Run Manually490
Task One: Upload the Application491
Task Two: Configure the Application to Run Automatically492
Start a Manual Script496
User Authentication499
Connect EZ User Authentication499
User Authentication Methods499
Add a New Authentication Method501
Delete an Authentication Method503
Rearrange the Position of Authentication Methods504
Authentication Groups506
Change the Access Rights for a Predefined Group508
Add an Authentication Group510
Delete an Authentication Group514
Local Users516
Change a Local User's Password517
Configure a Local User519
Delete a Local User527
Terminal Access Controller Access-Control System Plus (TACACS+)529
TACACS+ User Configuration530
TACACS+ Server Failover and Fallback to Local Authentication531
Configure Your Connect EZ Device to Use a TACACS+ Server531
Remote Authentication Dial-In User Service (RADIUS)536
RADIUS User Configuration537
RADIUS Server Failover and Fallback to Local Configuration537
Configure Your Connect EZ Device to Use a RADIUS Server538
Ldap541
LDAP User Configuration543
LDAP Server Failover and Fallback to Local Configuration544
Configure Your Connect EZ Device to Use an LDAP Server544
Configure Serial Authentication549
Disable Shell Access551
Set the Idle Timeout for Connect EZ Users553
Example User Configuration555
Example 1: Administrator User with Local Authentication555
Example 2: RADIUS, TACACS+, and Local Authentication for One User557
Firewall564
Firewall Configuration565
Create a Custom Firewall Zone565
Configure the Firewall Zone for a Network Interface567
Delete a Custom Firewall Zone568
Port Forwarding Rules570
Configure Port Forwarding570
Delete a Port Forwarding Rule575
Packet Filtering577
Configure Packet Filtering577
Enable or Disable a Packet Filtering Rule581
Delete a Packet Filtering Rule582
Configure Custom Firewall Rules584
Configure Quality of Service Options586
Web Filtering595
Configure Web Filtering with Cisco Umbrella595
Configure Web Filtering with Manual DNS Servers598
Verify Your Web Filtering Configuration601
Show Web Filter Service Information603
System Administration605
Review Device Status605
Configure System Information606
Update System Firmware608
Manage Firmware Updates Using Digi Remote Manager608
Certificate Management for Firmware Images609
Downgrading609
Dual Boot Behavior613
Reboot Your Connect EZ Device614
Reboot Your Device Immediately614
Schedule Reboots of Your Device615
Erase Device Configuration and Reset to Factory Defaults616
Custom Factory Default Settings619
Locate the Device by Using the Find Me Feature622
Configuration Files623
Save Configuration Changes623
Save Configuration to a File624
Restore the Device Configuration625
Schedule System Maintenance Tasks628
Disable Device Encryption633
Re-Enable Cryptography after It Has Been Disabled634
Configure the Speed of Your Ethernet Port635
Configure the System Watchdog637
Monitoring640
Intelliflow641
Enable Intelliflow642
Configure Service Types644
Configure Domain Name Groups646
Use Intelliflow to Display Average CPU and RAM Usage649
Use Intelliflow to Display Top Data Usage Information650
Use Intelliflow to Display Data Usage by Host over Time652
Configure Netflow Probe653
Central Management659
Digi Remote Manager Support659
Certificate-Based Enhanced Security659
Configure Your Device for Digi Remote Manager Support659
Collect Device Health Data and Set the Sample Interval666
Enable Event Log Upload to Digi Remote Manager668
Log into Digi Remote Manager670
Use Digi Remote Manager to View and Manage Your Device671
Add a Device to Digi Remote Manager671
Configure Multiple Connect EZ Devices by Using Digi Remote Manager Configurations672
View Digi Remote Manager Connection Status673
Learn more673
File System675
The Connect EZ Local File System675
Display Directory Contents675
Create a Directory676
Display File Contents677
Copy a File or Directory677
Move or Rename a File or Directory678
Delete a File or Directory679
Upload and Download Files680
Upload and Download Files by Using the Webui680
Upload and Download Files by Using the Secure Copy Command681
Upload and Download Files Using SFTP682
Perform a Speedtest685
Generate a Support Report685
Support Report Overview686
View System and Event Logs690
View System Logs690
View Event Logs692
Configure Syslog Servers695
Configure Options for the Event and System Logs697
Analyze Network Traffic702
Configure Packet Capture for the Network Analyzer703
Example Filters for Capturing Data Traffic712
Capture Packets from the Command Line713
Stop Capturing Packets714
Show Captured Traffic Data715
Save Captured Data Traffic to a File716
Download Captured Data to Your PC717
Clear Captured Data718
Use the Ping Command to Troubleshoot Network Connections720
Ping to Check Internet Connection720
Stop Ping Commands720
Use the Traceroute Command to Diagnose IP Routing Problems720
Digi Connect EZ Regulatory and Safety Statements722
RF Exposure Statement722
Federal Communication (FCC) Part 15 Class a722
European Community - CE Mark Declaration of Conformity (Doc)722
CE and UKCA OEM Labeling Requirements722
CE Labeling Requirements722
UK Conformity Assessed (UKCA) Labeling Requirements723
Rohs Compliance Statement724
Cautionary Statements for Connect EZ724
Residential Environment Warnings724
Product Disposal Instructions724
Command Line Interface727
Access the Command Line Interface727
Log in to the Command Line Interface727
Exit the Command Line Interface728
Execute a Command from the Web Interface728
Display Help for Commands and Parameters729
The Help Command729
The Question Mark (?) Command729
Display Help for Individual Commands730
Use the Tab Key or the Space Bar to Display Abbreviated Help731
Auto-Complete Commands and Parameters731
Available Commands732
Use the Scp Command733
Display Status and Statistics Using the Show Command734
Show Config735
Show System735
Show Network735
Device Configuration Using the Command Line Interface736
Execute Configuration Commands at the Root Admin CLI Prompt736
Display Help for the Config Command from the Root Admin CLI Prompt736
Configuration Mode738
Enable Configuration Mode738
Enter Configuration Commands in Configuration Mode738
Save Changes and Exit Configuration Mode739
Exit Configuration Mode Without Saving Changes739
Configuration Actions739
Display Command Line Help in Configuration Mode740
Move Within the Configuration Schema743
Manage Elements in Lists744
The Revert Command746
Enter Strings in Configuration Commands748
Example: Create a New User by Using the Command Line748
Command Line Reference751
Analyzer Clear752
Analyzer Save752
Analyzer Start753
Analyzer Stop753
Clear Dhcp-Lease Ip-Address753
Clear Dhcp-Lease Mac753
Grep754
Help754
Mkdir756
Monitoring756
Monitoring Metrics Upload756
More756
Ping757
Poweroff757
Reboot757
Scp759
Show Analyzer759
Show Arp759
Show Cloud759
Show Config760
Show Dhcp-Lease760
Show Dns760
Show Eth760
Show Event760
Show Hotspot761
Show Ipsec761
Show L2Tp Lac761
Show L2Tp Lns761
Show L2Tpeth762
Show Location762
Show Log762
Show Manufacture762
Show Modbus-Gateway762
Show Mqtt763
Show Nemo763
Show Network763
Show Ntp763
Show Openvpn Client764
Show Openvpn Server764
Show Route764
Show Scep-Client764
Show Scripts765
Show Serial765
Show Surelink Interface765
Show Surelink Ipsec765
Show Surelink Openvpn765
Show Surelink State766
Show System766
Show Usb766
Show Version766
Show Vrrp767
Show Web-Filter767
Speedtest767
Ssh767
System Backup768
System Disable-Cryptography768
System Duplicate-Firmware768
System Factory-Erase768
System Find-Me769
System Firmware Ota Check769
System Firmware Ota List769
System Firmware Ota Update769
System Firmware Update770
System Power Ignition Off_Delay770
System Restore770
System Script Start770
System Script Stop770
System Serial Restart771
System Serial Save771
System Serial Show771
System Support-Report771
System Time Set772
System Time Sync772
System Time Test772
Tail772
Telnet773
Traceroute773

Digi Connect EZ Mini User Manual

Table of Contents

Questions and Answers:

Digi Connect EZ Mini Specifications

Related product manuals

Brand	Digi
Model	Connect EZ Mini
Category	Server
Language	English