Home
Digi
Network Router
IX30
Digi IX30 User Manual
5
of 1
of 1 rating
1031 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
Virtual
Private
Networks
(VPN)
Virtual
Private
Networks
(VPNs)
are
used
to
securely
connect
two
private
networks
together
so
that
devices
can
connect
from
one
network
to
the
other
using
secure
channels.
This
chapter
contains
the
following
topics:
IPsec
338
OpenVPN
393
Generic
Routing
Encapsulation
(GRE)
426
L2TP
447
L2TPv3
Ethernet
467
NEMO
473
IX30
User
Guide
337
336
338
Table of Contents
Revision History-90002452
2
Table of Contents
6
What's New in Digi IX30 Version 22.11
18
Digi IX30 Quick Start
19
Step 1: Connect Your Device
19
Step 2: Connect DC Power
21
Step 3: Set up Access to Digi Remote Manager
21
Step 4: Register Your Device
21
Step 5: Complete Setup
22
Step 6: Configure Cellular APN
22
Digi IX30 Hardware Reference
23
Digi IX30 Features and Specifications
23
IX30 Accessories
23
IX30 Front View
24
IX30 Leds
25
Power
25
Lte
25
Signal Quality Indicators
26
Ethernet Link and Activity
27
Signal Quality Bars Explained
27
IX30 Power Supply Requirements
28
Digi IX30 Serial Connector Pinout
28
IX30 Serial Pinouts
30
IX30 RS-232 Pinout
31
IX30 RS-422 Pinout
31
IX30 RS-485 Pinout
31
Configuration for Extreme Thermal Conditions
32
QR Code Definition
34
Hardware Setup
35
Install SIM Cards
36
Apply Dielectric Grease over SIM Contacts
36
SIM Removal
37
Tips for Improving Cellular Signal Strength
37
Connect Data Cables
37
Firmware Configuration
39
Review IX30 Default Settings
39
Local Webui
39
Digi Remote Manager
39
Default Interface Configuration
39
Other Default Configuration Settings
40
Change the Default Password for the Admin User
41
Configuration Methods
42
Using Digi Remote Manager
43
Using the Local Web Interface
43
Log out of the Web Interface
44
Use the Local REST API to Configure the IX30 Device
44
Use the GET Method to Return Device Configuration Information
45
Use the POST Method to Modify Device Configuration Parameters and List Arrays
47
Use the DELETE Method to Remove Items from a List Array
47
Using the Command Line
49
Access the Command Line Interface
49
Log in to the Command Line Interface
49
Exit the Command Line Interface
50
Central Management
51
Digi Remote Manager Support
52
Certificate-Based Enhanced Security
52
Configure Your Device for Digi Remote Manager Support
52
Collect Device Health Data and Set the Sample Interval
59
Enable Event Log Upload to Digi Remote Manager
62
Log into Digi Remote Manager
64
Use Digi Remote Manager to View and Manage Your Device
65
Add a Device to Digi Remote Manager
65
Configure Multiple IX30 Devices by Using Digi Remote Manager Configurations
66
View Digi Remote Manager Connection Status
67
Learn more
68
Interfaces
69
Wide Area Networks (Wans)
70
Wide Area Networks (Wans) and Wireless Wide Area Networks (Wwans)
71
Configure WAN/WWAN Priority and Default Route Metrics
71
WAN/WWAN Failover
74
Configure Surelink Active Recovery to Detect WAN/WWAN Failures
75
Configure the Device to Reboot When a Failure Is Detected
86
Disable Surelink
94
Example: Use a Ping Test for WAN Failover from Ethernet to Cellular
99
Using Ethernet Devices in a WAN
102
Using Cellular Modems in a Wireless WAN (WWAN)
102
Configure a Wide Area Network (WAN)
127
Configure a Wireless Wide Area Network (WWAN)
135
Show WAN and WWAN Status and Statistics
145
Delete a WAN or WWAN
147
Default Outbound WAN/WWAN Ports
149
Local Area Networks (Lans)
150
About Local Area Networks (Lans)
151
Configure a Local Area Network (LAN)
151
Configure the WAN/ETH1 Port as a LAN or in a Bridge
158
Change the Default LAN Subnet
166
Show LAN Status and Statistics
168
Delete a LAN
169
DHCP Servers
171
Default Services Listening on LAN Ports
188
Configure an Interface to Operate in Passthrough Mode
188
Virtual Lans (Vlans)
195
Create a Trunked VLAN Route
196
Create a VLAN Using Switchport Mode
198
Bridging
201
Configure a Bridge
202
Show Surelink Status and Statistics
205
Show Surelink Status for All Interfaces
205
Show Surelink Status for a Specific Interface
205
Show Surelink Status for All Ipsec Tunnels
206
Show Surelink Status for a Specific Ipsec Tunnel
206
Show Surelink Status for All Openvpn Clients
207
Show Surelink Status for a Specific Openvpn Client
207
Serial Port
209
Default Serial Port Configuration
209
Serial Mode Options
209
View Serial Port Information
209
Configure Login Mode
210
Configure Remote Access Mode
213
Configure Application Mode
229
Configure PPP Dial-In Mode
231
Configure UDP Serial Mode
238
Configure Modbus Mode
249
Configure Realport Mode Using the Digi Navigator
252
Installation and Configuration Process
252
Digi Navigator Features
252
Install the Digi Navigator
253
Configure Realport on a Digi Device from the Digi Navigator
254
Digi Navigator Application Features
256
Electrical Signalling Mode
259
Change the Electrical Signalling Mode to
260
Change the Electrical Signalling Mode to
263
Advanced Realport Configuration Without Using the Digi Navigator
265
Windows Operating System
265
Linux Operating System
265
Download the Realport Driver
266
Configure Realport on Your Laptop
266
Configure the Serial Port for Realport Mode
268
Configure the Realport Service
270
Show Serial Status and Statistics
271
Log Serial Port Messages
271
Routing
274
IP Routing
275
Configure a Static Route
276
Delete a Static Route
279
Policy-Based Routing
281
Configure a Routing Policy
282
Example: Dual WAN Policy-Based Routing
290
Example: Domain-Based Routing with Dual WAN
292
Example: Route Traffic to a Specific WAN Interface Based on the Client MAC Address
295
Routing Services
301
Configure Routing Services
302
Show the Routing Table
304
Dynamic DNS
306
Configure Dynamic DNS
306
Virtual Router Redundancy Protocol (VRRP)
311
Vrrp
311
Configure VRRP
312
Configure VRRP
315
Example: VRRP/VRRP+ Configuration
323
Configure Device One (Master Device)
324
Configure Device Two (Backup Device)
328
Show VRRP Status and Statistics
334
Virtual Private Networks (VPN)
337
Ipsec
338
Ipsec Data Protection
338
Ipsec Mode
338
Ipsec Modes
338
Internet Key Exchange (IKE) Settings
338
Authentication
339
Configure an Ipsec Tunnel
339
Configure Ipsec Failover
366
Configure Surelink Active Recovery for Ipsec
369
Show Ipsec Status and Statistics
376
Debug an Ipsec Configuration
377
Configure a Simple Certificate Enrollment Protocol Client
379
Example: SCEP Client Configuration with Fortinet SCEP Server
386
Show SCEP Client Status and Information
391
Openvpn
393
Configure an Openvpn Server
394
Configure an Openvpn Authentication Group and User
403
Configure an Openvpn Client by Using an .Ovpn File
407
Configure an Openvpn Client Without Using an .Ovpn File
410
Configure Surelink Active Recovery for Openvpn
414
Show Openvpn Server Status and Statistics
423
Show Openvpn Client Status and Statistics
424
Generic Routing Encapsulation (GRE)
426
Configuring a GRE Tunnel
426
Show GRE Tunnels
431
Example: GRE Tunnel over an Ipsec Tunnel
432
L2Tp
447
Configure a PPP-Over-L2TP Tunnel
447
Configure Surelink Active Recovery for PPP-Over-L2TP
457
L2TP with Ipsec
465
Show L2TP Tunnel Status
465
L2Tpv3 Ethernet
467
Configure an L2Tpv3 Tunnel
467
Show L2TPV3 Tunnel Status
472
Nemo
473
Configure a NEMO Tunnel
473
Show NEMO Status
479
Allow Remote Access for Web Administration and SSH
482
Configure the Web Administration Service
486
Configure SSH Access
496
Use SSH with Key Authentication
504
Generating SSH Key Pairs
504
Configure Telnet Access
507
Configure DNS
512
Show DNS Server
518
WAN Bonding
519
Simple Network Management Protocol (SNMP)
524
SNMP Security
524
Configure Simple Network Management Protocol (SNMP)
524
Download Mibs
529
Location Information
531
Configure the Location Service
532
Configure the Device to Use a User-Defined Static Location
534
Configure the Device to Accept Location Messages from External Sources
536
Forward Location Information to a Remote Host
541
Configure Geofencing
547
Show Location Information
560
Modbus Gateway
561
Configure the Modbus Gateway
562
Show Modbus Gateway Status and Statistics
575
System Time
579
Configure the System Time
579
Manually Set the System Date and Time
583
Network Time Protocol
583
Configure the Device as an NTP Server
584
Show Status and Statistics of the NTP Server
589
Configure a Multicast Route
590
Ethernet Network Bonding
593
Enable Service Discovery (Mdns)
598
Use the MQTT Broker Service
602
Show MQTT Broker Information
612
Use the Iperf Service
613
Example Performance Test Using Iperf3
618
Configure the Ping Responder Service
618
Example Performance Test Using Iperf3
622
Develop Python Applications
625
Set up the IX30 for Python Development
626
Create and Test a Python Application
626
Python Modules
628
The Use(Led) Function
662
Releasing the Leds to System Control
662
Use Python to Control the Color of Multi-Colored Leds
662
Example: Set the LTE Connection Indicator to Flashing Purple
664
Set up the IX30 to Automatically Run Your Applications
672
Configure Scripts to Run Automatically
672
Show Script Information
679
Stop a Script that Is Currently Running
680
Start an Interactive Python Session
681
Run a Python Application at the Shell Prompt
682
Configure Scripts to Run Manually
683
Task One: Upload the Application
684
Task Two: Configure the Application to Run Automatically
685
Start a Manual Script
689
User Authentication
691
IX30 User Authentication
692
User Authentication Methods
692
Add a New Authentication Method
694
Delete an Authentication Method
696
Rearrange the Position of Authentication Methods
698
Authentication Groups
700
Change the Access Rights for a Predefined Group
701
Add an Authentication Group
703
Delete an Authentication Group
708
Local Users
710
Change a Local User's Password
711
Configure a Local User
713
Delete a Local User
720
Terminal Access Controller Access-Control System Plus (TACACS+)
723
TACACS+ User Configuration
724
TACACS+ Server Failover and Fallback to Local Authentication
725
Configure Your IX30 Device to Use a TACACS+ Server
725
Remote Authentication Dial-In User Service (RADIUS)
730
RADIUS User Configuration
731
RADIUS Server Failover and Fallback to Local Configuration
731
Configure Your IX30 Device to Use a RADIUS Server
732
Ldap
736
LDAP User Configuration
737
LDAP Server Failover and Fallback to Local Configuration
738
Configure Your IX30 Device to Use an LDAP Server
738
Configure Serial Authentication
743
Disable Shell Access
745
Set the Idle Timeout for IX30 Users
747
Example User Configuration
750
Example 1: Administrator User with Local Authentication
750
Example 2: RADIUS, TACACS+, and Local Authentication for One User
753
Firewall Configuration
761
Create a Custom Firewall Zone
761
Configure the Firewall Zone for a Network Interface
763
Delete a Custom Firewall Zone
765
Port Forwarding Rules
766
Configure Port Forwarding
766
Delete a Port Forwarding Rule
771
Packet Filtering
774
Configure Packet Filtering
774
Enable or Disable a Packet Filtering Rule
778
Delete a Packet Filtering Rule
780
Configure Custom Firewall Rules
782
Configure Quality of Service Options
784
Web Filtering
795
Configure Web Filtering with Cisco Umbrella
795
Configure Web Filtering with Manual DNS Servers
798
Verify Your Web Filtering Configuration
801
Show Web Filter Service Information
803
Use Digi Remote Manager to Deploy and Run Containers
805
Use an Automation to Start the Container
808
Upload a New LXC Container
810
Configure a Container
810
Starting and Stopping the Container
814
Starting the Container
814
Stopping the Container
815
View the Status of Containers
815
Show Status of All Containers
816
Show Status of a Specific Container
816
Schedule a Script to Run in the Container
817
Create a Custom Container
819
Create the Custom Container File
820
Test the Custom Container File
820
Digital Input/Output and Analog Input
822
Digital Input/Output and Analog Input Connections
823
I/O Connector Pin Assignments
823
IX30 Digital Input/Output: Representative Circuit
824
IX30 Analog Input: Representative Circuit
824
Example Digital and Analog I/O Wiring
825
Digital Input with Pullup
825
Digital Input Without Pullup
825
Digital Output
825
Analog Input, 4-20Ma Input Mode
826
Analog Input, 0-10V Input Mode
826
Digital and Analog I/O Specifications
826
Digital I/O Specifications
826
Digital Input Specifications
826
Digital Output
827
Analog Input Specifications
827
Voltage Input Mode (Default)
827
Configure Digital Input/Output Ports
827
Change the Output State of Digital I/O Ports
830
Configure Analog Input Ports
831
Calibrate Analog Input Ports
833
Send Digital and Analog I/O Monitoring Information to a Remote Server
834
Send Digital and Analog I/O Monitoring Information to Digi Remote Manager
837
Show Digital I/O and Analog Input Status and Statistics
840
Review Device Status
843
Configure System Information
844
Update System Firmware
846
Manage Firmware Updates Using Digi Remote Manager
847
Certificate Management for Firmware Images
847
Downgrading
847
Dual Boot Behavior
851
Update Cellular Module Firmware
852
Update Modem Firmware over the Air (OTA)
853
Update Modem Firmware by Using a Local Firmware File
855
Reboot Your IX30 Device
856
Reboot Your Device Immediately
856
Schedule Reboots of Your Device
857
Erase Device Configuration and Reset to Factory Defaults
859
Configure the IX30 Device to Use Custom Factory Default Settings
862
Locate the Device by Using the Find Me Feature
864
Configure a Power Profile
865
Configuration Files
868
Save Configuration Changes
868
Save Configuration to a File
869
Restore the Device Configuration
871
Schedule System Maintenance Tasks
873
Disable Device Encryption
879
Re-Enable Cryptography after It Has Been Disabled
879
Configure the Speed of Your Ethernet Ports
881
Configure the System Watchdog
883
Intelliflow
888
Enable Intelliflow
889
Configure Service Types
891
Configure Domain Name Groups
893
Use Intelliflow to Display Average CPU and RAM Usage
896
Use Intelliflow to Display Top Data Usage Information
897
Use Intelliflow to Display Data Usage by Host over Time
899
Configure Netflow Probe
900
File System
906
The IX30 Local File System
906
Display Directory Contents
906
Create a Directory
907
Display File Contents
908
Copy a File or Directory
908
Move or Rename a File or Directory
909
Delete a File or Directory
910
Upload and Download Files
911
Upload and Download Files by Using the Webui
911
Upload and Download Files by Using the Secure Copy Command
912
Upload and Download Files Using SFTP
913
Perform a Speedtest
916
Generate a Support Report
916
Support Report Overview
917
View System and Event Logs
921
View System Logs
921
View Event Logs
923
Configure Syslog Servers
926
Configure Options for the Event and System Logs
928
Analyze Network Traffic
934
Configure Packet Capture for the Network Analyzer
935
Example Filters for Capturing Data Traffic
944
Capture Packets from the Command Line
945
Stop Capturing Packets
946
Show Captured Traffic Data
947
Save Captured Data Traffic to a File
949
Download Captured Data to Your PC
949
Clear Captured Data
951
Use the Ping Command to Troubleshoot Network Connections
952
Ping to Check Internet Connection
952
Stop Ping Commands
952
Use the Traceroute Command to Diagnose IP Routing Problems
952
Digi IX30 Regulatory and Safety Statements
954
RF Exposure Statement
954
Federal Communication (FCC) Part 15 Class B
954
Radio Frequency Interference (RFI) (FCC 15.105)
954
European Community - CE Mark Declaration of Conformity (Doc)
954
Maximum Transmit Power for Radio Frequencies
956
Innovation, Science, and Economic Development Canada (IC) Certifications
956
Rohs Compliance Statement
957
Special Safety Notes for Wireless Routers
957
Product Disposal Instructions
958
English
960
Bulgarian--Бъ Л Га Рс Ки
961
Croatian--Hrvatski
962
French--Français
963
Greek--Ε Λλην Ικά
964
Hungarian--Magyar
965
Italian--Italiano
966
Latvian--Latvietis
967
Lithuanian--Lietuvis
968
Polish--Polskie
969
Portuguese--Português
970
Slovak--Slovák
971
Slovenian--Esloveno
972
Spanish--Español
973
Digiix30 Certifications
973
International EMC (Electromagnetic Compatibility) and Safety Standards
973
Command Line Interface
976
Access the Command Line Interface
976
Log in to the Command Line Interface
976
Exit the Command Line Interface
977
Execute a Command from the Web Interface
977
Display Help for Commands and Parameters
979
The Help Command
979
The Question Mark (?) Command
979
Display Help for Individual Commands
980
Use the Tab Key or the Space Bar to Display Abbreviated Help
981
Auto-Complete Commands and Parameters
981
Available Commands
982
Use the Scp Command
983
Display Status and Statistics Using the Show Command
985
Show Config
985
Show System
985
Show Network
986
Device Configuration Using the Command Line Interface
986
Execute Configuration Commands at the Root Admin CLI Prompt
986
Display Help for the Config Command from the Root Admin CLI Prompt
986
Configuration Mode
988
Enable Configuration Mode
988
Enter Configuration Commands in Configuration Mode
988
Save Changes and Exit Configuration Mode
989
Exit Configuration Mode Without Saving Changes
989
Configuration Actions
989
Display Command Line Help in Configuration Mode
990
Move Within the Configuration Schema
993
Manage Elements in Lists
994
The Revert Command
996
Enter Strings in Configuration Commands
998
Example: Create a New User by Using the Command Line
998
Command Line Reference
1001
Analyzer Clear
1002
Analyzer Save
1003
Analyzer Start
1003
Analyzer Stop
1003
Clear Dhcp-Lease Ip-Address
1003
Clear Dhcp-Lease Mac
1004
Container Create
1004
Container Delete
1004
Grep
1005
Help
1005
Mkdir
1007
Modem at
1007
Modem At-Interactive
1007
Modem Firmware Check
1007
Modem Firmware List
1007
Modem Firmware Ota Check
1008
Modem Firmware Ota Download
1008
Modem Firmware Ota List
1008
Modem Firmware Ota Update
1008
Modem Firmware Update
1009
Modem Pin Change
1009
Modem Pin Disable
1009
Modem Pin Enable
1010
Modem Pin Status
1010
Modem Pin Unlock
1010
Modem Puk Status
1010
Modem Puk Unlock
1011
Modem Reset
1011
Modem Scan
1011
Modem Sim-Slot
1011
Monitoring
1012
Monitoring Metrics Upload
1012
More
1012
Ping
1013
Poweroff
1013
Reboot
1013
Scp
1015
Show Analyzer
1015
Show Arp
1015
Show Cloud
1015
Show Config
1016
Show Containers
1016
Show Dhcp-Lease
1016
Show Dns
1016
Show Eth
1016
Show Event
1017
Show Hotspot
1017
Show Ipsec
1017
Show L2Tp Lac
1017
Show L2Tp Lns
1018
Show L2Tpeth
1018
Show Location
1018
Show Log
1018
Show Manufacture
1018
Show Modbus-Gateway
1019
Show Modem
1019
Show Mqtt
1019
Show Nemo
1019
Show Network
1020
Show Ntp
1020
Show Openvpn Client
1020
Show Openvpn Server
1020
Show Route
1021
Show Scep-Client
1021
Show Scripts
1021
Show Serial
1021
Show Surelink Interface
1021
Show Surelink Ipsec
1022
Show Surelink Openvpn
1022
Show System
1022
Show Usb
1022
Show Version
1023
Show Vrrp
1023
Show Web-Filter
1023
Speedtest
1023
Ssh
1024
System Backup
1024
System Disable-Cryptography
1024
System Duplicate-Firmware
1025
System Factory-Erase
1025
System Find-Me
1025
System Firmware Ota Check
1025
System Firmware Ota List
1025
System Firmware Ota Update
1026
System Firmware Update
1026
System Power Ignition Off_Delay
1026
System Restore
1026
System Script Start
1027
System Script Stop
1027
System Serial Clear
1027
System Serial Restart
1027
System Serial Save
1027
System Serial Show
1028
System Serial Start
1028
System Serial Stop
1028
System Support-Report
1028
System Time Set
1029
System Time Sync
1029
System Time Test
1029
Tail
1029
Telnet
1030
Traceroute
1030
5
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Digi IX30 and is the answer not in the manual?
Ask a question
Digi IX30 Specifications
General
Brand
Digi
Model
IX30
Category
Network Router
Language
English
Related product manuals
Digi IX10
996 pages
Digi IX14
828 pages
Digi IR4420
7 pages
Digi Connect IT 4
964 pages
Digi Connect WAN 3G IA
1 page
Digi WR54
33 pages
Digi TransPort
813 pages
Digi Connect Series
174 pages
Digi TransPort WR31
866 pages
Digi AnywhereUSB/14
81 pages
Digi TransPort WR11
948 pages
Digi AnywhereUSB Series
81 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General
