Digi 6300-CX User manual

6300-CX
User Guide
User Guide

Revision history—90002316
Revision Date Description
A January 2019 Initial release of Digi-branded version of the 6300-CX User
Guide.
B February 2020 Release of Digi 6300-CX firmware version 20.02.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
6300-CX User Guide 2

[e-mail]
Include the document title and part number (6300-CX User Guide, 90002316 B) in the subject line of
your email.
6300-CX User Guide 3

Contents
Revision history—90002316 2
What's new in Digi 6300-CX version 20.2
Digi 6300-CX Quick start
Quick start using the Digi Remote Manager mobile app 12
Step 1: What's in the box 13
Step 2: Connect 15
Step 3: Power up 15
Step 4: Configure 16
Digi 6300-CX hardware reference
Hardware features 17
Device status LEDs 18
Signal quality bars explained 19
Hardware setup
Site survey 22
Site survey troubleshooting 22
Physical installation 23
Connecting to the site network with local power 23
Install SIM cards 23
Tips for improving cellular signal strength 23
Mount the 6300-CX device 24
Configuration and management
Review 6300-CX default settings 26
Local WebUI 26
Digi Remote Manager 26
Default interface configuration 26
Reset default password for the default admin user 27
Enable router mode 29
Configuration methods 31
Using Digi Remote Manager 32
Access Digi Remote Manager 32
6300-CX User Guide 4

6300-CX User Guide 5
Configure the device to use aView for central management 32
Using the web interface 36
Log out of the web interface 37
Using the command line 38
Access the command line interface 38
Log in to the command line interface 38
Exit the command line interface 39
Interfaces
Wireless Wide Area Networks (WWANs) 41
Configure SureLink active recovery to detect modem failures 41
Configure the device to reboot when a failure is detected 47
Disable SureLink 52
Using cellular modems in a Wireless WAN (WWAN) 56
Configure a Wireless Wide Area Network (WWAN) 69
Show WWAN status and statistics 77
Delete a WWAN. 79
Local Area Networks (LANs) 81
About Local Area Networks (LANs) 82
Configure a LAN 82
Show LAN status and statistics 87
Delete a LAN 89
DHCP servers 91
Create a Virtual LAN (VLAN) route 107
Routing
IP routing 111
Configure a static route 112
Delete a static route 115
Policy-based routing 117
Configure a routing policy 118
Routing services 126
Configure routing services 126
Show the routing table 129
Dynamic DNS 130
Configure dynamic DNS 130
Virtual Router Redundancy Protocol (VRRP) 136
Configure VRRP 136
Show VRRP status and statistics 140
Virtual Private Networks (VPN)
IPsec 143
IPsec data protection 143
IPsec modes 143
Internet Key Exchange (IKE) settings 143
Authentication 144
Configure an IPsec tunnel 144
Configure IPsec failover 166
Configure SureLink active recovery for IPsec 167
Show IPsec status and statistics 174

6300-CX User Guide 6
OpenVPN 176
Configure an OpenVPN server 177
Configure an OpenVPN Authentication Group and User 187
Configure an OpenVPN client by using an .ovpn file 191
Configure an OpenVPN client without using an .ovpn file 194
Configure active recovery for OpenVPN 198
Show OpenVPN server status and statistics 206
Show OpenVPN client status and statistics 207
Generic Routing Encapsulation (GRE) 208
Configuring a GREtunnel 208
Show GRE tunnels 213
Example: GRE tunnel over an IPSec tunnel 214
Services
Allow remote access for web administration and SSH 232
Configure the web administration service 236
Configure SSHaccess 244
Use SSH with key authentication 250
Generating SSH key pairs 250
Configure telnet access 253
Configure DNS 258
Simple Network Management Protocol (SNMP) 265
SNMP Security 265
Configure Simple Network Management Protocol (SNMP) 265
Download MIBs 270
System time 271
Configure the system time 271
Network Time Protocol 274
Configure the device as an NTP server 274
Configure a multicast route 280
Enable service discovery (mDNS) 283
Use the iPerf service 286
Example performance test using Iperf3 291
Applications
Configure applications to run automatically 294
Task one: Upload the application 294
Task two: Configure the application to run automatically 296
Run a Python application at the shell prompt 300
Start an interactive Python session 302
Digidevice module 304
Use digidevice.cli to execute CLI commands 305
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 306
Use digidevice.config for device configuration 308
Use Python to respond to Digi Remote Manager SCI requests 310
Use digidevice runtime to access the runtime database 319
Using Python to upload the device name to Digi Remote Manager 321
User authentication
6300-CX user authentication 325

6300-CX User Guide 7
User authentication methods 325
Add a new authentication method 327
Delete an authentication method 329
Rearrange the position of authentication methods 331
Authentication groups 333
Change the access rights for a predefined group 335
Add an authentication group 337
Delete an authentication group 341
Local users 344
Change a local user's password 345
Configure a local user 347
Delete a local user 354
Terminal Access Controller Access-Control System Plus (TACACS+) 357
TACACS+ user configuration 358
TACACS+ server failover and fallback to local authentication 359
Configure your 6300-CX device to use a TACACS+ server 359
Remote Authentication Dial-In User Service (RADIUS) 364
RADIUS user configuration 365
RADIUS server failover and fallback to local configuration 365
Configure your 6300-CX device to use a RADIUS server 366
Disable shell access 370
Set the idle timeout for 6300-CX users 372
Example user configuration 374
Example 1: Administrator user with local authentication 374
Example 2: RADIUS, TACACS+, and local authentication for one user 376
Firewall
Firewall configuration 384
Create a custom firewall zone 384
Configure the firewall zone for a network interface 386
Delete a custom firewall zone 388
Port forwarding rules 390
Configure port forwarding 390
Delete a port forwarding rule 395
Packet filtering 398
Configure packet filtering 398
Enable or disable a packet filtering rule 402
Delete a packet filtering rule 404
Configure custom firewall rules 406
Configure Quality of Service options 408
System administration
Review device status 422
Configure system information 423
Update system firmware 425
Manage firmware updates using Digi Remote Manager 425
Certificate management for firmware images 425
Update cellular module firmware 428
Reboot your 6300-CX device 429
Reboot your device immediately 430
Schedule reboots of your device 430
Reset the device to factory defaults 432

6300-CX User Guide 8
Configuration files 436
Save configuration changes 436
Save configuration to a file 437
Restore the device configuration 438
Schedule system maintenance tasks 441
Monitoring
intelliFlow 449
Enable intelliFlow 449
Use intelliFlow to display average CPU and RAMusage 452
Use intelliFlow to display top data usage information 453
Use intelliFlow to display data usage by host over time 455
Configure NetFlow Probe 456
Central management with Digi Remote Manager
Digi Remote Manager support 462
Configure Digi Remote Manager 462
Collect device health data and set the sample interval 466
Log into Digi Remote Manager 468
Use Digi Remote Manager to view and manage your device 469
Add a device to Digi Remote Manager 470
View Digi Remote Manager connection status 470
Use the Digi Remote Manager mobile app 471
Configure multiple devices using profiles 472
Learn more 472
File system
The 6300-CX local file system 474
Display directory contents 474
Create a directory 475
Display file contents 476
Copy a file or directory 476
Move or rename a file or directory 477
Delete a file or directory 478
Upload and download files 479
Upload and download files by using the WebUI 479
Upload and download files by using the Secure Copy command 480
Upload and download files using SFTP 481
Diagnostics
Generate a support report 484
View system event logs 486
View System Logs 486
View Event Logs 489
Configure syslog servers 491
Configure options for the event and system logs 493
Analyze network traffic 498
Configure packet capture for the network analyzer 499
Example filters for capturing data traffic 503

6300-CX User Guide 9
Capture packets from the command line 504
Stop capturing packets 505
Show captured traffic data 505
Save captured data traffic to a file 507
Download captured data to your PC 508
Clear captured data 509
Use the ping command to troubleshoot network connections 510
Ping to check internet connection 510
Stop ping commands 510
Use the traceroute command to diagnose IProuting problems 510
Regulatory guide
End user license agreement
Command line interface
Access the command line interface 514
Log in to the command line interface 514
Exit the command line interface 515
Execute a command from the web interface 515
Display help for commands and parameters 516
The help command 516
The question mark (?) command 516
Display help for individual commands 517
Use the Tab key or the space bar to display abbreviated help 518
Auto-complete commands and parameters 518
Available commands 519
Use the scp command 520
Display status and statistics using the show command 521
show config 521
show system 522
show network 522
Device configuration using the command line interface 522
Execute configuration commands at the root Admin CLI prompt 523
Display help for the config command from the root Admin CLI prompt 523
Configuration mode 525
Enable configuration mode 525
Enter configuration commands in configuration mode 525
Save changes and exit configuration mode 526
Exit configuration mode without saving changes 526
Configuration actions 526
Display command line help in configuration mode 527
Move within the configuration schema 529
Manage elements in lists 530
The revert command 532
Enter strings in configuration commands 534
Example: Create a new user by using the command line 534
Command line reference 537
analyzer 538
cp 540
help 541
ls 542

6300-CX User Guide 10
mkdir 543
modem 544
more 549
mv 550
ping 551
reboot 552
rm 553
scp 554
show 555
system 563
traceroute 565
update 568
Antenna notes and solutions
Antenna terminology 568
Physical specifications 568
Antennas tested by Digi 569
Extra-small IoT paddle antennas 569
Large external MIMO antenna (outdoor rated) 570
Flat MIMO antenna #1 570
Flat MIMO antenna #2 571
Paddle extender 571

What's new in Digi 6300-CX version 20.2
Release of Digi 6300-CX firmware version 20.02.
6300-CX User Guide 11

Digi 6300-CX Quick start
Note Devices manufactured with firmware version 20.2.xor greater are configured by default to use
the Digi Remote Manager for cloud-based central device management. For information about
configuring the device to use aView for central management instead, see Configure the device to use
aView for central management.
Quick start using the Digi Remote Manager mobile app
After connecting your hardware and powering up, you can use the Digi Remote Manager mobile app to
quickly install your 6300-CX into your Digi Remote Manager account.
Here's how:
If you already have a Digi Remote Manager account:
1. Download the Digi Remote Manager mobile app from the App Store (iPhone) or Google Play
(Android).
2. Click Log in or Sign Up and log in to your account.
3. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
4. Follow the prompts to complete your 6300-CX registration.
If you need to sign up for a Digi Remote Manager account:
1. Click here to create a new account. You'll receive an email with login instructions.
2. On your smartphone or tablet, download the Digi Remote Manager mobile app from the App
Store (iPhone) or Google Play (Android).
3. Open the Digi Remote Manager mobile app, click Log in and log into your new account.
4. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
5. Follow the prompts to complete your 6300-CX registration.
6300-CX User Guide 12

Digi 6300-CX Quick start Step 1: What's in the box
6300-CX User Guide 13
Step 1: What's in the box
Item Description
6300-CX unit
Cellular antennas (2)
Power supply
Temporary battery
pack
Ethernet cables:
n1 x 18 inch
n1 x 156 inch

Digi 6300-CX Quick start Step 1: What's in the box
6300-CX User Guide 14
Item Description
Passive power-over-
Ethernet injector
Mounting bracket
Ceiling rail clips,
narrow (2)
Ceiling rail clips,
wide (2)
Screws (2)
Drywall anchors (2)
Zipties (2)
Adhesive strips (2)

Digi 6300-CX Quick start Step 2: Connect
6300-CX User Guide 15
Step 2: Connect
a. Install SIM card(s). See Install SIM cards.
b. Attach antenna(s).
c. Use an Ethernet cable to connect the WANport to your PC.
Step 3: Power up
a. Connect DC power.
b. Once power has been connect, the device will initialize and attempt to connect to the cellular
network. Device initialization may take 30-60 seconds. By default your 6300-CX will attempt to
use DHCP to establish an internet connection through its cellular modem.

Digi 6300-CX Quick start Step 4: Configure
6300-CX User Guide 16
CAUTION! If the Network Status LED is flashing red or yellow, do not remove power.
Step 4: Configure
a. On the PC connected to the 6300-CX, open a browser and go to http://192.168.210.1.
b. Log into the 6300-CX:
User name: Use the default user name: admin.
Password: Use the unique password printed on the bottom label of the device (or the printed
label included in the package).
Note If your device was manufactured prior to the release of firmware version 19.11.x, the
default user name may be root.
Ethernet port default configuration
Port 1 is configured as a LAN port and will issue a single passthrough IP Address using DHCP based on
the IP received from the cellular connection.
Note By default, the 6300-CX device is in cellular passthrough mode. See Enable router mode for
instructions regarding how to configure the 6300-CX device to provide internet connectivity to more
than one connected device at a time.

Digi 6300-CX hardware reference
Hardware features
1. SIM slot
2. WAN Port
3. RESETButton
The RESET button is used to perform a device reset, and it has three modes:
a. Configuration reset: Pressing the RESET button one time will reset the device
configurations to the factory default. It will not remove any automatically generated
certificates and keys.
b. Full device reset: After the device reboots from the first button press, press the RESET
button again before the device is connected to the internet to also remove generated
certificates/keys.
c. Firmware reversion: Press and hold the RESET button and then power on the device to
boot to the version of firmware that was used prior to the current version.
4. Power Socket
6300-CX User Guide 17

Digi 6300-CX hardware reference Device status LEDs
6300-CX User Guide 18
5. Network activity indicator
6. Wireless signal quality indicator
For a detailed list of 6300-CX hardware specifications, see Digi 6300-CX specifications.
Device status LEDs
Once power has been established, your device will initialize and attempt to connect to the network.
Device initialization may take 30-60 seconds. By default your 6300-CX will attempt to use DHCP to
establish an Internet connection either through its cellular modem or the ethernet port .
1. Network status is indicated by the color-coded LTE light.

Digi 6300-CX hardware reference Device status LEDs
6300-CX User Guide 19
2. Indicator lights on the wireless quality indicator show you the cellular network signal strength.
The weighted dBm measurements are negative numbers, meaning the smaller negative values
denote a larger number. For example, a -85 is a better signal than -90.
Note See Signal quality bars explained for more information regarding how signal strength is
calculated and subsequently displayed via the LED indicators.
Signal quality bars explained
The signal status bars for the Digi 6300-CX measure more than simply signal strength. The value
reported by the 4G LTE signal bars is calculated using an algorithm that takes into consideration the
Reference Signals Received Power (RSRP), the Signal-to-noise ratio (SNR), and the Received Signal
Strength Indication (RSSI) to provide an accurate indicator of the quality of the signal that the device
is receiving.
For 3G networks (including HSPA+) and 2G networks, the signal strength bars are determined by the
RSSI value.
4G LTE algorithms
For 4G LTE, the 6300-CX device determines the RSRP, SNR, and RSSI values separately and uses the
following algorithms to display the signal quality:
RSRP > -85, rsrp_bars=5
-95 < RSRP <= -85, rsrp_bars=4
-105 < RSRP <= -95, rsrp_bars=3
-115 < RSRP <= -105, rsrp_bars=2
-199 < RSRP <= -115, if we're connected to the cellular network, rsrp_bars=1,
if not rsrp_bars=0
If RSRP <= -199, the device uses the RSSI as the value with the same algorithm:
SNR >= 13, snr_bars=5
4.5 <= SNR < 13, snr_bars=4
1 <= SNR < 4, snr_bars=3
-3 < SNR < 1, snr_bars=2
-99 < SNR <= -3, if we're connected to the cellular network, snr_bars=1, if not
snr_bars=0
Once the snr_bars and rsrp_bars values are determined, the device uses the lesser of the two as the
reported signal a bars.
3G algorithm
For 3G, the 6300-CX determines RSSI signal strength:

Digi 6300-CX hardware reference Device status LEDs
6300-CX User Guide 20
RSSI > -80, bars=5
-90 < RSSI <= -80, bars=4
-100 < RSSI <= -90, bars=3
-106 < RSSI <= -100, bars=2
RSSI <= -106, if we're connected to the cellular network, bars=1, if not bars=0
bars is then reported as the signal strength bars.
2G algorithm
For 2G, the 6300-CX determines RSSI signal strength:
RSSI > -80, bars=5
-89 < RSSI <= -80, bars=4
-98 < RSSI <= -89, bars=3
-104 < RSSI <= -98, bars=2
RSSI <= -104, if we're connected to the cellular network, bars=1, if not bars=0
bars is then reported as the signal strength bars.