Digi IX15 User manual

Digi IX15
Gateway
User Guide
Firmware version 22.2

Revision history—90002400
Revision Date Description
September
2021
Release of Digi IX15 firmware version 21.8:
nAdded LXC container support for running localized containers on
the device.
nAdded support for maintenance windows triggers to control
when a device is available for Digi Remote Manager maintenance
activity.
nVPNenhancements:
lAdded support for L2TPv3 tunneling.
lNew option to enable, disable, or force IPsec IKE
fragmentation.
nImproved options for creating a custom default configuration:
lsystem backup CLI commands for generating a custom
default config file based on the active config settings on the
device.
lNew section on the File System page of the Web UI for
loading a configuration backup file as the custom default
config
lNew persistent files folder accessible through Digi Remote
Manager where users can upload a configuration backup.
lAdded ability to clear a custom default configuration by
performing by pressing the ERASE button, waiting for the
device to reboot, then pressing the ERASE again.
nAdded ability to override or edit SSH server options.
nAdded options for filtering Wi-Fi scanner results based off of MAC
addresses or RSSI signal strength.
nAdded options for sending local device event logs to Digi Remote
Manager.
nNew system time CLI command for manually setting the local
date and time.
nNew firewall packet filter options to allow/deny packets based off
of a range of source or destination MAC addresses.
nNew monitoring metrics upload CLI command to send on-
demand health metrics to Digi Remote Manager.
nAdded support for the configuration of custom scripts that will be
run manually, and a new system script start CLI command to
run manual scripts.
nNew "Find me" feature that flashes cellular-related LEDs to help
locate the device onsite and a new system find-me command.
Digi IX15 Gateway User Guide 2

Revision Date Description
nAdded datapoint.upload_multiple function to digidevice python
module for uploading multiple datapoints to DigiRM at once.
nAdded clear dhcp-lease command to remove all dynamic DHCP
leases or certain DHCP leases based on MAC address or IP
address.
nAdded speedtest command for performing on-demand iPerf or
nuttcp speedtests.
nLocal users are now required to be assigned to an authentication
group.
nNew Network → Advanced → Sequential DHCP address allocation
configuration setting for controlling if DHCP addresses are
assigned sequentially or randomly (disabled by default).
nAdded ability to control if DHCP addresses are assigned
sequentially or randomly (disabled by default).
nAdded 802.1x port-based network access control, configurable
per network interface.
November
2021
Added the pyinstall command. Added Install Python packages and
IX15 BLE configurator sections. Added the IX15 BLE Configuration
demo.
December
2021
Release of Digi IX15 firmware version 21.11:
nConfiguration option to allow for automatic update of new
firmware (disabled by default).
nUser authentication enhancements:
lAdded TACACS+ command authorization and accounting for
Admin CLI commands.
lAdded a new username alias to provide an alternate
username that allows for special characters in the username.
nVPNenhancements:
lAdded support for PPP-over-L2TP tunnels.
lChanged default IPsec IKE DH group to 14 for enhanced
compatibility with industry standard settings.
nLocation services enhancements:
lNew option for Location service to specify the talker ID used
in NMEA mesage strings.
lInclude the mode indicator field in NMEA messages
constructed when a GPS fix isn’t obtained.
nSureLink enhancments:
lAdded new settings under cellular Surelink options to have
the device reset the cellular modem if a specified number of
Surelink tests fail
lAdded show surelink Admin CLI command.
Digi IX15 Gateway User Guide 3

Revision Date Description
nSerial port enhancements:
lNew option to add and configure an external USB-to-serial
adapter.
lDisable serial history in remote access mode by default.
nSupport for sending analog and digial I/O health metrics to Digi
Remote Manager.
nAdded show containers Admin CLI command.
March 2022 Release of Digi IX15 firmware version 22.2:
nVPNenhancements:
lRenamed VPN >IPsec >Tunnels >Policies >Local network
setting to Local traffic selector and added Remote traffic
selector.
lAdded a Dynamic option to the Local traffic selector to
configuration of a local network by protocol and/or port
instead of a network address range.
lAdded Protocol and Port match criteria for Local traffic
selector and Remote traffic selector.
lAdded VPN >IPsec >Advanced >Debug level to specify the
logging verbosity of IPsec messages in the device system
logs.
nEnhancements to communications with Digi Remote Manager:
lEnhanced security for communications with Digi Remote
Manager by using client-side certificates.
lThe default URL for the device's Remote Manager connection
is now edp12.devicecloud.com. This URL is required to utilize
the client-side certificate support.
nNew Switch SIM SureLink action for WWAN interfaces, which
allows SureLink to be configured to switch to the alternate SIM if
the modem is connected but SureLink test are failing.
lNew Switch SIM fail count option to determine how many
SureLink failures are required prior to switching to the
alternate SIM.
nNew Socket ID string option to send the configured text to the
remote server(s) when a TCP socket connection is opened to the
serial port.
nNew cat Admin CLI command for displaying file contents.
C March 2022 Added translated safety instructions.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
Digi IX15 Gateway User Guide 4

© 2022 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[email protected]
Include the document title and part number (Digi IX15 Gateway User Guide, 90002400 C) in the subject
line of your email.
Digi IX15 Gateway User Guide 5

Contents
Revision history—90002400 2
Digi IX15 Gateway User Guide
Overview 20
What's new in Digi IX15 version 22.2 20
IX15 compatibility with S2C XBee devices 21
Zigbee 21
DigiMesh 23
802.15.4 25
Related documents 26
Safety instructions
Safety instructions 28
XBee adapter, gateways, and routers 28
И нс т рук ции з а бе з оп а с нос т 28
Sigurnosne upute 29
Bezpečnostní instrukce 29
Sikkerhedsinstruktioner 30
Veiligheidsinstructies 31
Ohutusjuhised 31
Turvallisuusohjeet 32
Consignes de sécurité 32
Sicherheitshinweise 33
Ο δ ηγ ίες ασ φαλε ίας 34
Biztonsági utasítások 34
Istruzioni di sicurezza 35
Drošības instrukcijas 36
Saugos instrukcijos 36
Sikkerhetsinstruksjoner 37
Instrukcje bezpieczeństwa 37
Instruções de segurança 38
Instructiuni de siguranta 39
Bezpečnostné inštrukcie 39
Varnostna navodila 40
Adaptador XBee, puertas de enlace y enrutadores 40
Säkerhets instruktioner 41
Digi IX15 Gateway User Guide 6

Digi IX15 Gateway User Guide 7
Digi IX15 Quick start
Step 1: What's in the box 43
Step 2: Gather accessories 43
Step 3: Connect 44
Step 4: Configure 49
Step 5: Next steps 49
Get started
Step 1: Requirements 51
Step 2: Setup the hardware 51
Step 3: Program an XBee profile 51
Step 4: Join nodes to the IX15 network 53
Step 5: Review your XBee network 54
Next steps 54
Digi IX15 hardware reference
Digi IX15 features and specifications 57
IX15 accessories 57
IX15 front and side views 57
IX15 LEDs 59
Power (PWR) 59
SIM 59
LTE 59
XBee 60
Signal quality indicators 61
Ethernet Link and Activity 61
Signal quality bars explained 61
IX15 power supply requirements 62
Power consumption 63
Power consumption use cases 63
Results 64
Digi IX15 serial connector pinout 65
10-pin serial cabling options 65
Antenna specifications for the cellular modem 65
Antenna specifications for the XBee RF Module 66
QR code definition 66
Hardware setup
Install SIM cards 69
Apply Dielectric Grease over SIMContacts 69
SIM removal 70
Tips for improving cellular signal strength 70
Connect data cables 70
Mount the IX15 device 70
Attach to a mounting surface by using the mounting tabs 71
Attach to DIN rail with clip 71

Digi IX15 Gateway User Guide 8
Configuration and management
Review IX15 default settings 75
Local WebUI 75
Digi Remote Manager 75
Default interface configuration 75
Other default configuration settings 76
Change the default password for the admin user 76
Configuration methods 78
Using Digi Remote Manager 80
Access Digi Remote Manager 80
Using the web interface 80
Log out of the web interface 81
Use the local RESTAPI to configure the IX15 device 81
Use the GETmethod to return device configuration information 81
Use the POST method to modify device configuration parameters and list arrays 83
Use the DELETE method to remove items from a list array 84
Using the command line 86
Access the command line interface 86
Log in to the command line interface 86
Exit the command line interface 87
Manage an XBee network
Review the current XBee network state 89
Discover the XBee network 89
Configure active discovery 89
One-shot discovery 93
Configure and update an XBee network 93
What is an XBee profile? 94
Manage XBee profiles 94
Upload the XBee profile 95
Apply XBee profiles 95
Configure a sleeping network to work with the IX15 96
Export your network 98
Bluetooth Low Energy
Configure Bluetooth Low Energy 99
IX15 BLE configurator 102
Verify BLE connectivity 102
Power management
Configure a power profile 105
Suspend mode 109
Configure wake up sources 109
Enter suspend mode 111
Disable interfaces on suspend 112

Digi IX15 Gateway User Guide 9
Interfaces
Wireless Wide Area Networks (WWANs) 116
Configure SureLink active recovery to detect modem failures 116
Configure the device to reboot when a failure is detected 126
Disable SureLink 133
Using cellular modems in a Wireless WAN (WWAN) 137
Configure a Wireless Wide Area Network (WWAN) 156
Show WWAN status and statistics 165
Delete a WWAN. 167
Configure a Wide Area Network (WAN) 168
Local Area Networks (LANs) 177
About Local Area Networks (LANs) 178
Configure a LAN 178
Show LAN status and statistics 185
Delete a LAN 187
DHCP servers 189
Create a Virtual LAN (VLAN) route 205
Show Surelink status and statistics 208
Show Surelink status for all interfaces 208
Show Surelink status for a specific interface 208
Show Surelink status for all IPsec tunnels 209
Show Surelink status for a specific IPsec tunnel 209
Show Surelink status for all OpenVPN clients 210
Show Surelink status for a specific OpenVPN client 210
Serial port
Configure Login mode 212
Configure Remote Access mode 215
Configure Application mode 219
Configure UDP serial mode 221
Configure Modbus mode 226
Show serial status and statistics 230
Log serial port messages 230
Routing
IP routing 233
Configure a static route 234
Delete a static route 237
Policy-based routing 238
Configure a routing policy 239
Routing services 247
Configure routing services 247
Show the routing table 250
Dynamic DNS 251
Configure dynamic DNS 251
Virtual Router Redundancy Protocol (VRRP) 257
VRRP+ 257
Configure VRRP 257
Configure VRRP+ 261
Example: VRRP/VRRP+ configuration 268
Configure device one (master device) 269

Digi IX15 Gateway User Guide 10
Configure device two (backup device) 273
Show VRRP status and statistics 279
Virtual Private Networks (VPN)
IPsec 283
IPsec data protection 283
IPsec mode 283
IPsec modes 283
Internet Key Exchange (IKE) settings 283
Authentication 284
Configure an IPsec tunnel 284
Configure IPsec failover 311
Configure SureLink active recovery for IPsec 314
Show IPsec status and statistics 321
Debug an IPsec configuration 322
Configure a Simple Certificate Enrollment Protocol client 324
Example: SCEP client configuration with Fortinet SCEP server 328
Disable hardware cryptographic acceleration 333
OpenVPN 336
Configure an OpenVPN server 337
Configure an OpenVPN Authentication Group and User 346
Configure an OpenVPN client by using an .ovpn file 350
Configure an OpenVPN client without using an .ovpn file 353
Configure SureLink active recovery for OpenVPN 357
Show OpenVPN server status and statistics 365
Show OpenVPN client status and statistics 366
Generic Routing Encapsulation (GRE) 368
Configuring a GREtunnel 368
Show GRE tunnels 373
Example: GRE tunnel over an IPSec tunnel 374
L2TP 389
Configure a PPP-over-L2TP tunnel 389
Configure SureLink active recovery for PPP-over-L2TP 399
L2TP with IPsec 406
Show L2TP tunnel status 407
L2TPv3 Ethernet 408
Configure an L2TPv3 tunnel 409
Show L2TPV3 tunnel status 413
NEMO 414
Configure a NEMO tunnel 415
Show NEMO status 420
Services
Allow remote access for web administration and SSH 423
Configure the web administration service 427
Configure SSHaccess 437
Use SSH with key authentication 445
Generating SSH key pairs 445
Configure telnet access 448
Configure DNS 453
Show DNS server 459
Simple Network Management Protocol (SNMP) 460