Digi 6310-DX User manual

6310-DX
User Guide
User Guide
Firmware version 22.2

Revision history—90002313
Revision Date Description
F March 2021 Release of Digi 6310-DX firmware version 21.2:
nLocation services added, including:
lThe ability to define a static latitude and longitude
as a location for the device.
lGNSSsupport through the cellular modem
(requires the CM07 COREmodem).
lReporting location information as health metrics to
Digi Remote Manager.
lGeo-fencing: Allow you to define one or more
circular or polygonal geo-fence areas and then
perform a set of actions when the device enters or
leaves that area.
lPython support for location information through
the digidevice.location python module.
nCellular modem carrier scanning and locking:
lNew modem scan CLI command for listing
available carriers for the current modem and SIM.
lManual carrier selection option to allow you to lock
the SIM to a specific carrier.
nEnhanced serial support:
lCertificate management control for TCP and
autoconnect serial port setups.
lAutoconnect.
nLocal RESTAPI for automated configuration of the
device.
nSupport for remote CLI commands through Digi
Remote Manager.
nSupport for automatically checking for device and
modem firmware updates.
G June 2021 Release of Digi 6310-DX firmware version 21.5:
nWi-Fi enhancements:
lAdded support for WPA3 Wi-Fi encryption:
oWPA2/WPA3 Personal
oWPA3 Enhanced Open
oWPA3 Personal
lAdded support for WPA and WPA/WPA2 mised
6310-DX User Guide 2

Revision Date Description
mode with TKIP.
nCellular enhancements:
lAdded support for modem firmware update to the
Admin CLI.
lAdded support for over-the-air (OTA) modem
firmware update to check, list, and update to new
modem firmware from the Digi firmware server.
lAdded the ability to scan for cellular carriers on the
Modem status page and the ability select a
particular PLMN/network to use.
nAdded commands for over-the-air (OTA) system
firmware update to check, list, and update to new
firmware from the Digi firmware server.
nAdded a show dns command to the Admin CLI to
display active DNS servers and their associated
interface.
nAdded a show ntp command to the Admin CLI to
display the status of the NTP service.
nExpanded Port forwarding option to support a range of
ports, including one-to-one and many-to-one port
mappings.
nAdded options to control packet filtering for the
network analyzer.
nVPN enhancements:
lIPsec enhancements:
oAdded support for multiple remote endpoints
and the ability to use round-robin or to
randomly select an endpoint to establish a
tunnel to.
oAdded configurable options to control IKE
transmit interval, tunnel retry interval, and
tunnel retry timeout.
lLDAP enhancements:
oAdded a login attribute to provide the ability to
match the attribute set on an Active Directory
server.
nSureLink enhancements
lAdded the ability to configure how many times a
SureLink test must run, and must fail, before the
interface is restarted or the device is rebooted.
lAdded the ability to configure how many times a
SureLink test must pass before an interface is
6310-DX User Guide 3

Revision Date Description
considered to be working.
lAdded the ability to test another interface's status.
nSNMPv2 supported added.
nSimple Certificate Enrollment Protocol (SCEP)
supported added.
nUpdated python to version 3.6.13.
nAdded the default digi.device local domain.
H September 2021 Release of Digi 6310-DX firmware version 21.8:
nAdded LXC container support for running localized
containers on the device.
nAdded support for maintenance windows triggers to
control when a device is available for Digi Remote
Manager maintenance activity.
nVPNenhancements:
lAdded support for L2TPv3 tunneling.
lNew option to enable, disable, or force IPsec IKE
fragmentation.
nImproved options for creating a custom default
configuration:
lsystem backup CLI commands for generating a
custom default config file based on the active
config settings on the device.
lNew section on the File System page of the Web UI
for loading a configuration backup file as the
custom default config
lNew persistent files folder accessible through Digi
Remote Manager where users can upload a
configuration backup.
lAdded ability to clear a custom default
configuration by performing by pressing the ERASE
button, waiting for the device to reboot, then
pressing the ERASE again.
nAdded ability to override or edit SSH server options.
nAdded options for filtering Wi-Fi scanner results based
off of MAC addresses or RSSI signal strength.
nAdded options for sending local device event logs to
Digi Remote Manager.
nNew system time CLI command for manually setting
the local date and time.
nNew firewall packet filter options to allow/deny
packets based off of a range of source or destination
6310-DX User Guide 4

Revision Date Description
MAC addresses.
nNew monitoring metrics upload CLI command to
send on-demand health metrics to Digi Remote
Manager.
nAdded support for the configuration of custom scripts
that will be run manually, and a new system script
start CLI command to run manual scripts.
nNew "Find me" feature that flashes cellular-related
LEDs to help locate the device onsite and a new
system find-me command.
nEnabled passthrough mode on both cellular and wired
WAN connections by default.
nAdded datapoint.upload_multiple function to
digidevice python module for uploading multiple
datapoints to DigiRM at once.
nAdded clear dhcp-lease command to remove all
dynamic DHCP leases or certain DHCP leases based on
MAC address or IP address.
nAdded speedtest command for performing on-demand
iPerf or nuttcp speedtests.
nLocal users are now required to be assigned to an
authentication group.
nNew Network → Advanced → Sequential DHCP address
allocation configuration setting for controlling if DHCP
addresses are assigned sequentially or randomly
(disabled by default).
nAdded ability to control if DHCP addresses are assigned
sequentially or randomly (disabled by default).
nAdded 802.1x port-based network access control,
configurable per network interface.
J December 2021 Release of Digi 6310-DX firmware version 21.11:
nConfiguration option to allow for automatic update of
new firmware (disabled by default).
nUser authentication enhancements:
lAdded TACACS+ command authorization and
accounting for Admin CLI commands.
lAdded a new username alias to provide an
alternate username that allows for special
characters in the username.
nVPNenhancements:
lAdded support for PPP-over-L2TP tunnels.
6310-DX User Guide 5

Revision Date Description
lChanged default IPsec IKE DH group to 14 for
enhanced compatibility with industry standard
settings.
nLocation services enhancements:
lNew option for Location service to specify the
talker ID used in NMEA mesage strings.
lInclude the mode indicator field in NMEA messages
constructed when a GPS fix isn’t obtained.
nSureLink enhancments:
lAdded new settings under cellular Surelink options
to have the device reset the cellular modem if a
specified number of Surelink tests fail
lAdded show surelink Admin CLI command.
nSerial port enhancements:
lNew option to add and configure an external USB-
to-serial adapter.
lDisable serial history in remote access mode by
default.
nSupport for sending analog and digial I/O health
metrics to Digi Remote Manager.
nAdded show containers Admin CLI command.
K March 2022 Release of Digi 6310-DX firmware version 22.2:
nVPNenhancements:
lRenamed VPN >IPsec >Tunnels >Policies >Local
network setting to Local traffic selector and
added Remote traffic selector.
lAdded a Dynamic option to the Local traffic
selector to configuration of a local network by
protocol and/or port instead of a network address
range.
lAdded Protocol and Port match criteria for Local
traffic selector and Remote traffic selector.
lAdded VPN >IPsec >Advanced >Debug level to
specify the logging verbosity of IPsec messages in
the device system logs.
nEnhancements to communications with Digi Remote
Manager:
lEnhanced security for communications with Digi
Remote Manager by using client-side certificates.
lThe default URL for the device's Remote Manager
connection is now edp12.devicecloud.com. This
6310-DX User Guide 6

Revision Date Description
URL is required to utilize the client-side certificate
support.
nNew Switch SIM SureLink action for WWAN interfaces,
which allows SureLink to be configured to switch to the
alternate SIM if the modem is connected but SureLink
test are failing.
lNew Switch SIM fail count option to determine
how many SureLink failures are required prior to
switching to the alternate SIM.
nNew Socket ID string option to send the configured
text to the remote server(s) when a TCP socket
connection is opened to the serial port.
nNew cat Admin CLI command for displaying file
contents.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
© 2022 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
6310-DX User Guide 7

Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[email protected]
Include the document title and part number (6310-DX User Guide, 90002313 H) in the subject line of
your email.
6310-DX User Guide 8

Contents
Revision history—90002313 2
What's new in Digi 6310-DX version 22.2
Digi 6310-DX Quick start
Step 1: What's in the box 21
Step 2: Connect 23
Step 3: Power up 24
Step 4: Configure 24
Digi 6310-DX hardware reference
Hardware features 26
Device status LEDs 27
Signal quality indicators 28
Signal quality bars explained 28
LTE status indicators 29
QR code definition 30
Hardware setup
Site survey 32
Site survey troubleshooting 32
Physical installation 32
Connecting to the site network with local power 32
Install SIM cards in the Plug-in LTE modem 33
Apply Dielectric Grease over SIMContacts 33
Tips for improving cellular signal strength 34
Mount the 6310-DX device 34
Network integration 35
Enable router mode 35
Configuration and management
Review 6310-DX default settings 39
Local WebUI 39
Digi Remote Manager 39
Default interface configuration 39
6310-DX User Guide 9

6310-DX User Guide 10
Change the default password for the admin user 40
Enable router mode 42
Configuration methods 44
Using Digi Remote Manager 45
Access Digi Remote Manager 45
Configure the device to use aView for central management 45
Using the web interface 49
Log out of the web interface 51
Use the local RESTAPI to configure the 6310-DX device 51
Use the GETmethod to return device configuration information 51
Use the POST method to modify device configuration parameters and list arrays 53
Use the DELETE method to remove items from a list array 54
Using the command line 56
Access the command line interface 56
Log in to the command line interface 56
Exit the command line interface 57
Interfaces
Wide Area Networks (WANs) 59
Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 60
Configure WAN/WWAN priority and default route metrics 60
WAN/WWAN failover 63
Configure SureLink active recovery to detect WAN/WWAN failures 64
Configure the device to reboot when a failure is detected 75
Disable SureLink 83
Example: Use a ping test for WAN failover from Ethernet to cellular 87
Using Ethernet devices in a WAN 91
Using cellular modems in a Wireless WAN (WWAN) 91
Configure a Wide Area Network (WAN) 115
Configure a Wireless Wide Area Network (WWAN) 124
Show WAN and WWAN status and statistics 134
Delete a WAN or WWAN 136
Default outbound WAN/WWAN ports 137
Local Area Networks (LANs) 138
About Local Area Networks (LANs) 139
Configure a LAN 139
Show LAN status and statistics 147
Delete a LAN 149
DHCP servers 151
Create a Virtual LAN (VLAN) route 167
Default services listening on LANports 170
Bridging 171
Configure a bridge 172
Show Surelink status and statistics 175
Show Surelink status for all interfaces 175
Show Surelink status for a specific interface 176
Show Surelink status for all IPsec tunnels 176
Show Surelink status for a specific IPsec tunnel 177
Show Surelink status for all OpenVPN clients 177
Show Surelink status for a specific OpenVPN client 178