Digi IX15 User manual

Digi IX15
Gateway
User Guide
Firmware version 21.2

Revision history—90002400
Revision Date Description
A May 2021 Initial release of the Digi IX15 Gateway User Guide.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
© 2021 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[email protected]
Digi IX15 Gateway User Guide 2

Include the document title and part number (Digi IX15 Gateway User Guide, 90002400 A) in the subject
line of your email.
Digi IX15 Gateway User Guide 3

Contents
Revision history—90002400 2
Digi IX15 Quick start
Step 1: What's in the box 13
Step 2: Gather accessories 13
Step 3: Connect 14
Step 4: Configure 19
Step 5: Next steps 19
Get started
Step 1: Requirements 21
Step 2: Setup the hardware 21
Step 3: Program an XBee profile 21
Step 4: Join nodes to the IX15 network 23
Step 5: Review your XBee network 24
Next steps 24
Digi IX15 hardware reference
Digi IX15 features and specifications 27
IX15 accessories 27
IX15 front and side views 27
IX15 LEDs 29
Power (PWR) 29
SIM 29
LTE 29
XBee 30
Signal quality indicators 31
Ethernet Link and Activity 31
Signal quality bars explained 31
IX15 power supply requirements 32
Power consumption 33
Power consumption use cases 33
Results 34
Digi IX15 serial connector pinout 35
10-pin serial cabling options 35
Antenna specifications for the cellular modem 35
Antenna specifications for the XBee RF Module 36
Digi IX15 Gateway User Guide 4

Digi IX15 Gateway User Guide 5
Hardware setup
Install SIM cards 38
SIM removal 38
Tips for improving cellular signal strength 38
Connect data cables 39
Mount the IX15 device 39
Attach to a mounting surface by using the mounting tabs 39
Attach to DIN rail with clip 39
Configuration and management
Review IX15 default settings 43
Local WebUI 43
Digi Remote Manager 43
Default interface configuration 43
Other default configuration settings 44
Change the default password for the admin user 44
Configuration methods 46
Using Digi Remote Manager 48
Access Digi Remote Manager 48
Using the web interface 48
Log out of the web interface 49
Using the command line 50
Access the command line interface 50
Log in to the command line interface 50
Exit the command line interface 51
Manage an XBee network
Review the current XBee network state 53
Discover the XBee network 53
Configure active discovery 53
One-shot discovery 57
Configure and update an XBee network 57
What is an XBee profile? 58
Manage XBee profiles 58
Upload the XBee profile 59
Apply XBee profiles 59
Configure a sleeping network to work with the IX15 60
Export your network 62
Bluetooth Low Energy
Configure Bluetooth Low Energy 63
Verify BLE connectivity 66
Power management
Configure a power profile 69
Suspend mode 73
Configure wake up sources 73

Digi IX15 Gateway User Guide 6
Enter suspend mode 75
Disable interfaces on suspend 76
Interfaces
Wireless Wide Area Networks (WWANs) 80
Configure SureLink active recovery to detect modem failures 80
Configure the device to reboot when a failure is detected 86
Disable SureLink 93
Using cellular modems in a Wireless WAN (WWAN) 97
Configure a Wireless Wide Area Network (WWAN) 115
Show WWAN status and statistics 123
Delete a WWAN. 125
Local Area Networks (LANs) 127
About Local Area Networks (LANs) 128
Configure a LAN 128
Show LAN status and statistics 133
Delete a LAN 135
DHCP servers 137
Create a Virtual LAN (VLAN) route 153
Serial port
Configure the serial port 156
Show serial status and statistics 168
Log serial port messages 169
Routing
IP routing 171
Configure a static route 172
Delete a static route 175
Policy-based routing 176
Configure a routing policy 177
Routing services 185
Configure routing services 185
Show the routing table 188
Dynamic DNS 189
Configure dynamic DNS 189
Virtual Router Redundancy Protocol (VRRP) 195
VRRP+ 195
Configure VRRP 195
Configure VRRP+ 199
Example: VRRP/VRRP+ configuration 206
Configure device one (master device) 207
Configure device two (backup device) 211
Show VRRP status and statistics 217
Virtual Private Networks (VPN)
IPsec 221
IPsec data protection 221
IPsec modes 221

Digi IX15 Gateway User Guide 7
Internet Key Exchange (IKE) settings 221
Authentication 222
Configure an IPsec tunnel 222
Configure IPsec failover 244
Configure SureLink active recovery for IPsec 247
Show IPsec status and statistics 254
Debug an IPsec configuration 255
OpenVPN 257
Configure an OpenVPN server 258
Configure an OpenVPN Authentication Group and User 267
Configure an OpenVPN client by using an .ovpn file 272
Configure an OpenVPN client without using an .ovpn file 275
Configure SureLink active recovery for OpenVPN 279
Show OpenVPN server status and statistics 287
Show OpenVPN client status and statistics 288
Generic Routing Encapsulation (GRE) 289
Configuring a GREtunnel 289
Show GRE tunnels 294
Example: GRE tunnel over an IPSec tunnel 295
NEMO 310
Configure a NEMO tunnel 311
Show NEMO status 316
Services
Allow remote access for web administration and SSH 319
Configure the web administration service 323
Configure SSHaccess 333
Use SSH with key authentication 339
Generating SSH key pairs 339
Configure telnet access 342
Configure DNS 347
Simple Network Management Protocol (SNMP) 354
SNMP Security 354
Configure Simple Network Management Protocol (SNMP) 354
Download MIBs 359
Location information 360
Configure the location service 361
Configure the device to use a user-defined static location 363
Configure the device to accept location messages from external sources 365
Forward location information to a remote host 369
Configure geofencing 376
Show location information 388
Modbus gateway 389
Configure the Modbus gateway 390
Show Modbus gateway status and statistics 403
System time 406
Configure the system time 406
Network Time Protocol 409
Configure the device as an NTP server 409
Configure a multicast route 415
Enable service discovery (mDNS) 418
Use the iPerf service 421
Example performance test using iPerf3 426
Configure the ping responder service 427

Digi IX15 Gateway User Guide 8
Example performance test using iPerf3 430
Applications
Develop Python applications 433
Set up the IX15 for Python development 433
Create and test a Python application 434
End-to-end demos 435
Python modules 435
Set up the IX15 to automatically run your applications 467
Configure applications to run automatically 467
Show script information 474
Stop a script that is currently running 475
Start an interactive Python session 476
Run a Python application at the shell prompt 476
Install third party Python modules 478
Python migration guide 478
Programming IDE 479
Python version 479
Deployment 503
User authentication
IX15 user authentication 506
User authentication methods 506
Add a new authentication method 508
Delete an authentication method 510
Rearrange the position of authentication methods 512
Authentication groups 514
Change the access rights for a predefined group 516
Add an authentication group 518
Delete an authentication group 523
Local users 525
Change a local user's password 526
Configure a local user 528
Delete a local user 536
Terminal Access Controller Access-Control System Plus (TACACS+) 538
TACACS+ user configuration 539
TACACS+ server failover and fallback to local authentication 540
Configure your IX15 device to use a TACACS+ server 540
Remote Authentication Dial-In User Service (RADIUS) 544
RADIUS user configuration 545
RADIUS server failover and fallback to local configuration 545
Configure your IX15 device to use a RADIUS server 546
LDAP 550
LDAP user configuration 551
LDAP server failover and fallback to local configuration 552
Configure your IX15 device to use an LDAP server 552
Disable shell access 557
Set the idle timeout for IX15 users 559
Example user configuration 561
Example 1: Administrator user with local authentication 561
Example 2: RADIUS, TACACS+, and local authentication for one user 563

Digi IX15 Gateway User Guide 9
Firewall
Firewall configuration 571
Create a custom firewall zone 571
Configure the firewall zone for a network interface 573
Delete a custom firewall zone 575
Port forwarding rules 576
Configure port forwarding 576
Delete a port forwarding rule 581
Packet filtering 584
Configure packet filtering 584
Enable or disable a packet filtering rule 588
Delete a packet filtering rule 590
Configure custom firewall rules 592
Configure Quality of Service options 594
System administration
Review device status 606
Configure system information 607
Update system firmware 609
Manage firmware updates using Digi Remote Manager 609
Certificate management for firmware images 610
Downgrading 610
Dual boot behavior 612
Update cellular module firmware 613
Update modem firmware over the air (OTA) 614
Update modem firmware by using a local firmware file 616
Reboot your IX15 device 617
Reboot your device immediately 618
Schedule reboots of your device 618
Erase device configuration and reset to factory defaults 620
Configure the IX15 device to use custom factory default settings 623
Configuration files 625
Save configuration changes 625
Save configuration to a file 626
Restore the device configuration 627
Schedule system maintenance tasks 630
Disable device encryption 637
Re-enable cryptography after it has been disabled. 638
Configure the speed of your Ethernet port 640
Monitoring
intelliFlow 644
Enable intelliFlow 644
Use intelliFlow to display average CPU and RAMusage 647
Use intelliFlow to display top data usage information 648
Use intelliFlow to display data usage by host over time 650
Configure NetFlow Probe 651

Digi IX15 Gateway User Guide 10
Central management
Digi Remote Manager support 657
Configure Digi Remote Manager 657
Collect device health data and set the sample interval 663
Log into Digi Remote Manager 667
Use Digi Remote Manager to view and manage your device 668
Add a device to Digi Remote Manager 669
View Digi Remote Manager connection status 669
Use the Digi Remote Manager mobile app 670
Configure multiple devices using profiles 671
Amazon AWS IoT 671
Microsoft Azure 671
Learn more 672
File system
The IX15 local file system 674
Display directory contents 674
Create a directory 675
Display file contents 676
Copy a file or directory 676
Move or rename a file or directory 677
Delete a file or directory 678
Upload and download files 679
Upload and download files by using the WebUI 679
Upload and download files by using the Secure Copy command 680
Upload and download files using SFTP 681
Command line interface
Access the command line interface 684
Log in to the command line interface 684
Exit the command line interface 685
Execute a command from the web interface 685
Display help for commands and parameters 686
The help command 686
The question mark (?) command 686
Display help for individual commands 687
Use the Tab key or the space bar to display abbreviated help 688
Auto-complete commands and parameters 688
Available commands 689
XBee-specific commands 690
Manage an XBee network 691
Configure individual XBee parameters 693
Apply XBee profiles 696
Use the scp command 697
Display status and statistics using the show command 699
show config 699
show system 699
show network 700
Device configuration using the command line interface 700
Execute configuration commands at the root Admin CLI prompt 700
Display help for the config command from the root Admin CLI prompt 701

Digi IX15 Gateway User Guide 11
Configuration mode 702
Enable configuration mode 702
Enter configuration commands in configuration mode 703
Save changes and exit configuration mode 703
Exit configuration mode without saving changes 703
Configuration actions 704
Display command line help in configuration mode 704
Move within the configuration schema 707
Manage elements in lists 708
The revert command 710
Enter strings in configuration commands 712
Example: Create a new user by using the command line 712
Command line reference 715
analyzer 716
cp 717
help 718
ls 719
mkdir 720
modem 721
modem puk status [imei STRING] [name STRING] 726
modem scan [imeiSTRING] [nameSTRING] 727
more 729
mv 730
ping 731
powerctrl 732
reboot 733
rm 734
scp 735
show 736
ssh 743
system 745
traceroute 749
xbee 751
Diagnostics
Generate a support report 756
View system and event logs 757
View System Logs 757
View Event Logs 759
Configure syslog servers 761
Configure options for the event and system logs 764
Analyze network traffic 769
Configure packet capture for the network analyzer 770
Example filters for capturing data traffic 774
Capture packets from the command line 775
Stop capturing packets 776
Show captured traffic data 777
Save captured data traffic to a file 778
Download captured data to your PC 779
Clear captured data 780
Use the ping command to troubleshoot network connections 782
Ping to check internet connection 782
Stop ping commands 782
Use the traceroute command to diagnose IProuting problems 782

Digi IX15 Gateway User Guide 12
Server Command Interface (SCI)
Discover and retrieve the XBee network 785
Retrieve XBee device settings 786
Configure XBee device settings 788
Retrieve XBee device settings 788
Execute arbitrary commands 789
Read the value of an XBee setting 789
Set the value of an XBee setting 790
Execute a special XBee command 791
Update an XBee device profile 792
Reset an XBee device to factory defaults 793
Troubleshooting
System log 796
Configure XBee log level 796
Display the system log 796
Recover the local XBee 797
xbeemgmt tool 797
FAQ
Get the IX15 IP 800
A remote XBee is not listed in the IX15 network 800
PyCharm: My IX15 is not listed in Digi Device Selector 800
Digi IX15 regulatory and safety statements
RF exposure statement 803
FCC (USA) exposure notice 803
FCC Part 15 Class A 803
Radio Frequency Interference (RFI) (FCC 15.105) 803
European Community - CE Mark Declaration of Conformity (DoC) 803
Maximum transmit power for radio frequencies 804
RoHS compliance statement 805
ISED (Innovation, Science and Economic Development Canada) 805
RF Exposure 805
Antennas 805
Japan (TELEC) 805
Safety statements 806
Digi IX15 Gateway Hazardous Locations information 807
Special conditions for safe use 807
Class I Division 2, Groups A,B,C,D Temperature Code: T4 807
Special safety notes for wireless routers 808
Product disposal instructions 808
Digi IX15 certifications
International EMC (Electromagnetic Compatibility) and safety standards 810

Digi IX15 Quick start
The following steps guide you through the setup of your DigiIX15 device.
Step 1: What's in the box
When you open the IX15 package, look for the following:
nDigi IX15 device
The IX15 has a product label on the bottom of the device. The label includes product
identification information and the default password assigned to the device. The IX15 also
includes a terminal connector for the power supply installed in the power input.
nInsert cards
nDigi IX15 label
There is a printed copy of the product label on the bottom of your device. You can affix this
label to the top or side of the device such that you can access the label after the device is
mounted, or store the label in a safe place for future reference.
Step 2: Gather accessories
You may purchase accessories with the IX15 device, or you can provide your own.
Here is the list of accessories used in this Quick start:
Digi IX15 Gateway User Guide 13

Digi IX15 Quick start Step 3: Connect
Digi IX15 Gateway User Guide 14
Cellular antennas
Two cellular antennas.
Included in IX15 Accessory kit (76002107)—the kit may be ordered
separately.
RF antenna
One RF antenna for XBee.
Included in IX15 Accessory kit (76002107)—the kit may be ordered
separately.
Power supply
9-30 V
Included in IX15 Accessory kit (76002107)—the kit may be ordered
separately.
Laptop or personal computer
Use an Ethernet cable to connect your IX15 to a laptop or PC.
SIM card(s)
If you intend to configure cellular WWAN access at this time, acquire
SIM cards as needed. Note the carrier, network Access Point Name
(APN), and SIM pin—if any—for each card.
Ethernet cable.
One—Included in IX15 Accessory kit (76002107)—the kit may be
ordered separately.
Step 3: Connect
1. Insert SIM card(s)
Insert your activated SIM (2FF) card(s) provided by your cellular carrier into the device:
i. Use a small Phillips screw driver to remove the SIM slot cover.

Digi IX15 Quick start Step 3: Connect
Digi IX15 Gateway User Guide 15
ii. For high-vibration environments, apply a thin layer of dielectric grease to the SIM contacts.
Note If the IX15 device is used in an environment with high vibration levels, SIM card contact fretting
may cause unexpected SIM card failures. To protect the SIM cards, Digi strongly recommends that you
apply a thin layer of dielectric grease to the SIM contacts prior to installing the SIM cards.
a. Insert the SIM card(s) into the SIM sockets. Insert the end of each SIM card with the chamfered
corner positioned as indicated. Push the SIM in until it clicks into place.

Digi IX15 Quick start Step 3: Connect
Digi IX15 Gateway User Guide 16
b. After SIM cards are installed, replace the SIM slot cover.
2. Attach antennas
Connect IX15-compatible cellular antennas to the WWAN1-1 and WWAN1-2 antenna connectors
on the back of the device.
Connect the RF antenna to the XBee antenna connector.
Position the antennas for the best reception.

Digi IX15 Quick start Step 3: Connect
Digi IX15 Gateway User Guide 17
3. Use an Ethernet cable to connect the IX15 ETH port to your PC.
4. Connect DC power and power on the IX15 device. The IX15 is intended to be powered by a
certified power supply with output rated at either 12 VDC/0.75 A or 24 VDC/0.375 A minimum.
See IX15 power supply requirements.

Digi IX15 Quick start Step 3: Connect
Digi IX15 Gateway User Guide 18
5. Wait until a cellular connection has been established.
nThe Power LED is solid green as the device prepares to boot up.
nWhen the Power LED turns to solid turquoise, the IX15 is ready.
When connecting for the first time, it could take several minutes for the IX15 device to connect to the
cellular network while it attempts to determine the APN required for the connection.
nIndicator LEDs blink to show status during startup.
nVerify that the LTE LED on the front of the IX15 shows either green or blue—solid or flashing—
for proper operation.
nVerify that the signal strength indicator on the front of the IX15 shows two or more bars.
CAUTION! If your laptop or PC is connected to the ETH port on the IX15 and the IX15 has a
cellular internet connection established, the laptop or PC will likely automatically switch
from its Wi-Fi internet connection to its Ethernet port. This will result in the IX15 routing all
internet data to and from the laptop or PC. This could result in excessive data charges to the
cellular data account associated with the SIM card in the IX15. To interface with the IX15 via
LAN while maintaining internet through the laptop or PC Wi-Fi, follow the standard procedure
for changing the priority order of network adapters in the laptop or PC.
You can also change the configuration of the Ethernet port to WAN, connect the IX15 to the
internet by providing an internet connection to the WAN-configured Ethernet port, and
configure the device over Digi Remote Manager. For instructions on configuring the ETH port
for WAN, see Configure a Wide Area Network (WAN).

Digi IX15 Quick start Step 4: Configure
Digi IX15 Gateway User Guide 19
Note If your SIM card has an APN that is not recognized by the IX15 device, skip this step and
configure the APN following the procedure in Configure cellular modem APNs.
Step 4: Configure
This section describes how to configure the device by using the local Web UI. You can also use Digi
Remote Manager to configure the device, including using a Digi Remote Manager device configuration
to automatically update the device. See the Digi Remote Manager User Guide.
1. On the PC connected to the IX15 , open a browser and go to 192.168.2.1.
Note The device is also accessible at the default IP address of 192.168.210.1. However, because this
IP address does not use a DHCP server, to connect to this address you must configure your local PC
with an appropriate static IP address—for example, 192.168.210.2.
2. Log into the IX15:
User name: Use the default user name: admin.
Password: Use the unique password printed on the bottom label of the device—or the printed
label included in the package.
3. When you first log into the WebUI or the command line, you must change the password for the
admin user. See Change the default password for the admin user for the admin user for
instructions.
Step 5: Next steps
Once you have setup your IX15, it is time to start working with your device and discover all its features
following the Get started guide.

Get started
This section guides you through your first steps with the Digi IX15 Gateway.
You will connect your hardware, program the IX15 XBee with a profile, and create an XBee network.
Step 1: Requirements 21
Step 2: Setup the hardware 21
Step 3: Program an XBee profile 21
Step 4: Join nodes to the IX15 network 23
Step 5: Review your XBee network 24
Next steps 24
Digi IX15 Gateway User Guide 20