Digi EX12 User manual

EX12
User Guide
Firmware version 22.8

Revision history—90002364
Revision Date Description
GSeptember 2021 Release of Digi EX12 firmware version 21.8:
nAdded LXC container support for running localized
containers on the device.
nAdded support for maintenance windows triggers to
control when a device is available for Digi Remote
Manager maintenance activity.
nVPNenhancements:
lAdded support for L2TPv3 tunneling.
lNew option to enable, disable, or force IPsec IKE
fragmentation.
nImproved options for creating a custom default
configuration:
lsystem backup CLI commands for generating a
custom default config file based on the active
config settings on the device.
lNew section on the File System page of the Web UI
for loading a configuration backup file as the
custom default config
lNew persistent files folder accessible through Digi
Remote Manager where users can upload a
configuration backup.
lAdded ability to clear a custom default
configuration by performing by pressing the ERASE
button, waiting for the device to reboot, then
pressing the ERASE again.
nAdded ability to override or edit SSH server options.
nAdded options for filtering Wi-Fi scanner results based
off of MAC addresses or RSSI signal strength.
nAdded options for sending local device event logs to
Digi Remote Manager.
nNew system time CLI command for manually setting
the local date and time.
nNew firewall packet filter options to allow/deny packets
based off of a range of source or destination MAC
addresses.
nNew monitoring metrics upload CLI command to send
on-demand health metrics to Digi Remote Manager.
nAdded support for the configuration of custom scripts
Digi EX12 User Guide 2

Revision Date Description
that will be run manually, and a new system script
start CLI command to run manual scripts.
nNew "Find me" feature that flashes cellular-related
LEDs to help locate the device onsite and a new system
find-me command.
nAdded datapoint.upload_multiple function to
digidevice python module for uploading multiple
datapoints to DigiRM at once.
nAdded clear dhcp-lease command to remove all
dynamic DHCP leases or certain DHCP leases based on
MAC address or IP address.
nAdded speedtest command for performing on-demand
iPerf or nuttcp speedtests.
nLocal users are now required to be assigned to an
authentication group.
nNew Network → Advanced → Sequential DHCP address
allocation configuration setting for controlling if DHCP
addresses are assigned sequentially or randomly
(disabled by default).
nAdded ability to control if DHCP addresses are assigned
sequentially or randomly (disabled by default).
nAdded 802.1x port-based network access control,
configurable per network interface.
HDecember 2021 Release of Digi EX12 firmware version 21.11:
nConfiguration option to allow for automatic update of
new firmware (disabled by default).
nUser authentication enhancements:
lAdded TACACS+ command authorization and
accounting for Admin CLI commands.
lAdded a new username alias to provide an
alternate username that allows for special
characters in the username.
nVPNenhancements:
lAdded support for PPP-over-L2TP tunnels.
lChanged default IPsec IKE DH group to 14 for
enhanced compatibility with industry standard
settings.
nLocation services enhancements:
lNew option for Location service to specify the talker
ID used in NMEA mesage strings.
lInclude the mode indicator field in NMEA messages
Digi EX12 User Guide 3

Revision Date Description
constructed when a GPS fix isn’t obtained.
nSureLink enhancments:
lAdded new settings under cellular Surelink options
to have the device reset the cellular modem if a
specified number of Surelink tests fail
lAdded show surelink Admin CLI command.
nSerial port enhancements:
lNew option to add and configure an external USB-
to-serial adapter.
lDisable serial history in remote access mode by
default.
nSupport for sending analog and digial I/O health
metrics to Digi Remote Manager.
nAdded show containers Admin CLI command.
JMarch 2022 Release of Digi EX12 firmware version 22.2:
nVPNenhancements:
lRenamed VPN >IPsec >Tunnels >Policies >Local
network setting to Local traffic selector and
added Remote traffic selector.
lAdded a Dynamic option to the Local traffic
selector to configuration of a local network by
protocol and/or port instead of a network address
range.
lAdded Protocol and Port match criteria for Local
traffic selector and Remote traffic selector.
lAdded VPN >IPsec >Advanced >Debug level to
specify the logging verbosity of IPsec messages in
the device system logs.
nEnhancements to communications with Digi Remote
Manager:
lEnhanced security for communications with Digi
Remote Manager by using client-side certificates.
lThe default URL for the device's Remote Manager
connection is now edp12.devicecloud.com. This
URL is required to utilize the client-side certificate
support.
nNew Switch SIM SureLink action for WWAN interfaces,
which allows SureLink to be configured to switch to the
alternate SIM if the modem is connected but SureLink
test are failing.
lNew Switch SIM fail count option to determine
Digi EX12 User Guide 4

Revision Date Description
how many SureLink failures are required prior to
switching to the alternate SIM.
nNew Socket ID string option to send the configured
text to the remote server(s) when a TCP socket
connection is opened to the serial port.
nNew cat Admin CLI command for displaying file
contents.
KJune 2022 Release of Digi EX12 firmware version 22.5:
n5G enhancements:
lAdded 5G slice support for configuring the slice
type for the 5G modems.
nAdded the ability to install a Python live image, to
provide Python support that was removed as part of
the base firmware with release 21.11.x.
nSurelink enhancements:
lEnabled Surelink reset_modem action by default on
cellular interfaces and set fail count to three.
lUpdated Surelink reset_modem action to
automatically power cycle the modem in the event
that the modem fails to reset.
nSerial port support enhancements:
lAdded serial PPP dial-in mode to handle AT-based
connection requests from a device connected to a
serial port and provide IPv4 networking to the
device.
nAdded cellular APN and cellular connection duration as
datapoints sent to Digi Remote Manager.
nWi-Fi scanner enhancements:
lAdded support for sending an HTTP or TCP stream
of results from the Wi-Fi scanner to one or more
remote servers.
nSCEP enhancements:
lNew SCEP client settings and underlying
functionality to support connecting to additional
SCEP servers.
lAdded show scep Admin CLI command to show
the sync status, expiration dates, and additional
details of any configured SCEP clients.
nVPN enhancements:
lInclude the hostname of the device in the client
.ovpn file listed on the Status → OpenVPN → Servers
Digi EX12 User Guide 5

Revision Date Description
page in the web UI.
nLocation services enhancements:
lNew settings to control the NMEA message content
that the devices sends when there is no valid fix
from any of the configured location sources.
LSeptember 2022 Release of Digi EX12 firmware version 22.8:
nCellular modem enhancements:
lAdded modem ota download and system
firmware ota download commands for
downloading cellular modem and device firmware.
lAdded cellular carrier name and PLMN ID to the
Modems Status page in the Web UI.
lEnhanced access technology options to set the
modem to 5G-only, including setting to 5G SA-only,
NSA-only, or both NSA/SA-modes.
nVPN enhancements:
lAdded Dynamic Multipoint VPN (DMVPN) support.
lAdded a Strict routing setting to IPsec tunnels that
routes packets through the tunnel if both the
source IP and destination IP match the IPsec
tunnel’s policies. This makes IPsec behave like a
policy-based VPN, rather than a route-based VPN.
lAdded the Microsoft version of the Challenge-
Handshake Authentication Protocol (MS-CHAPv2) as
an option for L2TP network servers authentication
methods.
nContainer support:
lContainer support now a premium feature, enabled
through Digi Remote Manager.
lAdded new metrics for sending container status,
name, CPU load, and disk usage as datapoints to
DigiRM.
nAdded support for running a PPPoE server when an
interface is in IP passthrough mode.
nAdded ability to specify DFS channels for Wi-Fi client
background scanning when DFS client support is
enabled.
nAdded a show eth Admin CLI command to show the
link status of each Ethernet port.
nAdded a poweroff CLI command to perform a graceful
shutdown of the device without automatically
rebooting.
Digi EX12 User Guide 6

Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
© 2022 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[email protected]
Include the document title and part number (Digi EX12 User Guide, 90002364 L) in the subject line of
your email.
Digi EX12 User Guide 7

Contents
Revision history—90002364 2
What's new in Digi EX12 version 22.8
Digi EX12 Quick Start
Step 1: Connect your device 20
Step 2: Connect DC power 21
Step 3: Set up access to Digi Remote Manager 21
Step 4: Register your device 22
Step 5: Complete setup 22
Step 6: Configure cellular APN 22
Digi EX12 hardware reference
Hardware features 23
Device status LEDs 24
Signal quality bars explained 26
LTE status indicators 27
Serial port pinout and use 27
QR code definition 28
Hardware setup
Site survey 30
Site survey troubleshooting 30
EX12 power installation 30
Connecting to the site network with local power 30
Connecting to the site network with remote power 31
Remote power troubleshooting 31
Install SIM cards 31
Apply Dielectric Grease over SIMContacts 32
SIM removal 33
Tips for improving cellular signal strength 33
Connect data cables 33
Mount the EX12 device 33
Network integration 34
Digi EX12 User Guide 8

Digi EX12 User Guide 9
Firmware configuration
Review EX12 default settings 36
Local WebUI 36
Digi Remote Manager 36
Default interface configuration 36
Change the default password for the admin user 37
Configuration methods 39
Using Digi Remote Manager 40
Configure the device to use aView for central management 40
Using the local web interface 44
Log out of the web interface 45
Use the local RESTAPI to configure the EX12 device 45
Use the GETmethod to return device configuration information 46
Use the POST method to modify device configuration parameters and list arrays 48
Use the DELETE method to remove items from a list array 48
Using the command line 50
Access the command line interface 50
Log in to the command line interface 50
Exit the command line interface 51
Central management
Digi Remote Manager support 53
Certificate-based enhanced security 53
Configure your device for Digi Remote Manager support 53
Collect device health data and set the sample interval 60
Enable event log upload to Digi Remote Manager 63
Log into Digi Remote Manager 65
Use Digi Remote Manager to view and manage your device 66
Add a device to Digi Remote Manager 66
Configure multiple EX12 devices by using Digi Remote Manager configurations 67
View Digi Remote Manager connection status 68
Learn more 69
Interfaces
Wide Area Networks (WANs) 71
Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 72
Configure WAN/WWAN priority and default route metrics 72
WAN/WWAN failover 75
Configure SureLink active recovery to detect WAN/WWAN failures 76
Configure the device to reboot when a failure is detected 87
Disable SureLink 96
Example: Use a ping test for WAN failover from Ethernet to cellular 100
Using Ethernet devices in a WAN 103
Using cellular modems in a Wireless WAN (WWAN) 103
Configure a Wide Area Network (WAN) 128
Configure a Wireless Wide Area Network (WWAN) 136
Show WAN and WWAN status and statistics 146
Delete a WAN or WWAN 148
Default outbound WAN/WWAN ports 150
Local Area Networks (LANs) 151
About Local Area Networks (LANs) 152

Digi EX12 User Guide 10
Configure a Local Area Network (LAN) 152
Change the default LAN subnet 159
Show LAN status and statistics 161
Delete a LAN 163
DHCP servers 164
Create a Virtual LAN (VLAN) route 182
Default services listening on LANports 185
Configure an interface to operate in passthrough mode. 185
Bridging 192
Configure a bridge 193
Show Surelink status and statistics 196
Show Surelink status for all interfaces 196
Show Surelink status for a specific interface 197
Show Surelink status for all IPsec tunnels 197
Show Surelink status for a specific IPsec tunnel 198
Show Surelink status for all OpenVPN clients 198
Show Surelink status for a specific OpenVPN client 199
Serial port
Default serial port configuration 200
Serial mode options 200
View serial port information 200
Default serial port configuration 200
Configure Login mode 201
Configure Remote Access mode 203
Configure Application mode 219
Configure PPP dial-in mode 221
Configure UDP serial mode 228
Configure Modbus mode 238
Show serial status and statistics 242
Log serial port messages 242
Routing
IP routing 246
Configure a static route 247
Delete a static route 250
Policy-based routing 252
Configure a routing policy 253
Example: Dual WAN policy-based routing 261
Example: Domain-based routing with dual WAN 264
Example: Route traffic to a specific WAN interface based on the client MACaddress 267
Routing services 272
Configure routing services 273
Show the routing table 276
Dynamic DNS 277
Configure dynamic DNS 278
Virtual Router Redundancy Protocol (VRRP) 283
VRRP+ 284
Configure VRRP 284
Configure VRRP+ 288
Example: VRRP/VRRP+ configuration 295
Configure device one (master device) 296