Digi IX10 User manual

IX10
User Guide
User Guide

Revision history—90002399
Revision Date Description
A October 2020 Initial release of the IX10 User Guide.
IX10 User Guide 2

Revision Date Description
B December 2020 Release of Digi IX10 firmware version 20.11:
nModem firmware update commands added to the Admin
CLI.
nNetwork bridging enhanced to use the MAC address of
the first active device listed in Network >Bridges >
Bridge name >Devices as the MAC address for the
bridged interface.
nIPsec enhancements:
lSupport for full IPsec IPv6 tunnels: IPv6-over-IPv4, or
IPv4-over-IPv6 tunnels.
lIPsec tunnels are now treated like network
interfaces, which allows tunnels to be selected for
routing and routing priority and access control lists.
lIPSec tunnels now wait for Surelink tests, if
configured, to pass prior to initiating outbound
tunnels.
nModbus gateway enhancements:
lStatus >Modbus gateway page in the Web UI
displays information about modbus clients and
servers connected to the gateway.
lshow modbus command displays information about
the the Modbus gateway service.
nSerial port enhancements:
lSerial port logging options added for starting,
stopping, and viewing serial port activity.
lOption added to the System >Serial configuration
page to copy serial port settings.
nPolicy-based routing enhancements:
lAdded a DSCP option to match the routing rule by the
type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-
based routes to the device's active default route.
nPython pip support for installing external modules and
libraries.
nLink speed and duplex options added to Ethernet port
configuration.
nssh and telnet commands added to Admin CLI.
nServices >Ping responder allows you to control the
interfaces and firewall zones on which the DAL device will
respond to ICMP requests.
nEnhanced policy-based routing:
IX10 User Guide 3

Revision Date Description
lAdded a DSCP option to match the routing rule by the
type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-
based routes to the device's active default route.
nAdded a link to User Guide under the User menu in the
Web UI.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
IX10 User Guide 4

[e-mail]
Include the document title and part number (IX10 User Guide, 90002399 B) in the subject line of your
email.
IX10 User Guide 5

Contents
Revision history—90002399 2
What's new in Digi IX10 version 20.11
Digi IX10 Quick start
Quick start using the Digi Remote Manager mobile app 15
Step 1: What's in the box 15
Step 2: Gather accessories 16
Step 3: Connect 17
Step 4: Configure 19
Digi IX10 hardware reference
Digi IX10 features and specifications 20
IX10 accessories 20
IX10 front and side views 20
IX10 LEDs 21
Power (PWR) 22
SIM 22
LTE 22
Signal quality indicators 23
Ethernet Link and Activity 23
Signal quality bars explained 24
IX10 power supply requirements 25
Digi IX10 serial connector pinout 25
10-pin serial cabling options 25
Hardware setup
Install SIM cards 27
SIM removal 27
Tips for improving cellular signal strength 27
Connect data cables 28
Mount the IX10 device 28
Attach to a mounting surface by using the two mounting tabs 28
Attach to DIN rail with clip 28
IX10 User Guide 6

IX10 User Guide 7
Configuration and management
Review IX10 default settings 32
Local WebUI 32
Digi Remote Manager 32
Default interface configuration 32
Other default configuration settings 33
Change the default password for the admin user 33
Configuration methods 35
Using Digi Remote Manager 35
Access Digi Remote Manager 36
Using the web interface 36
Log out of the web interface 37
Using the command line 38
Access the command line interface 38
Log in to the command line interface 38
Exit the command line interface 39
Interfaces
Wireless Wide Area Networks (WWANs) 41
Configure SureLink active recovery to detect modem failures 41
Configure the device to reboot when a failure is detected 47
Disable SureLink 52
Using cellular modems in a Wireless WAN (WWAN) 56
Configure a Wireless Wide Area Network (WWAN) 72
Show WWAN status and statistics 80
Delete a WWAN. 81
Local Area Networks (LANs) 83
About Local Area Networks (LANs) 84
Configure a LAN 84
Show LAN status and statistics 89
Delete a LAN 90
DHCP servers 91
Create a Virtual LAN (VLAN) route 106
Serial port
Configure the serial port 109
Show serial status and statistics 120
Log serial port messages 121
Routing
IP routing 123
Configure a static route 124
Delete a static route 126
Policy-based routing 128
Configure a routing policy 128
Routing services 135
Configure routing services 136
Show the routing table 138
Dynamic DNS 139

IX10 User Guide 8
Configure dynamic DNS 139
Virtual Router Redundancy Protocol (VRRP) 143
VRRP+ 144
Configure VRRP 144
Configure VRRP+ 147
Example: VRRP/VRRP+ configuration 154
Configure device one (master device) 154
Configure device two (backup device) 158
Show VRRP status and statistics 164
Virtual Private Networks (VPN)
IPsec 167
IPsec data protection 167
IPsec modes 167
Internet Key Exchange (IKE) settings 167
Authentication 168
Configure an IPsec tunnel 168
Configure IPsec failover 188
Configure SureLink active recovery for IPsec 191
Show IPsec status and statistics 197
Debug an IPsec configuration 198
OpenVPN 201
Configure an OpenVPN server 202
Configure an OpenVPN Authentication Group and User 210
Configure an OpenVPN client by using an .ovpn file 214
Configure an OpenVPN client without using an .ovpn file 216
Configure active recovery for OpenVPN 221
Show OpenVPN server status and statistics 228
Show OpenVPN client status and statistics 229
Generic Routing Encapsulation (GRE) 230
Configuring a GREtunnel 230
Show GRE tunnels 234
Example: GRE tunnel over an IPSec tunnel 235
NEMO 249
Configure a NEMO tunnel 249
Show NEMO status 254
Services
Allow remote access for web administration and SSH 257
Configure the web administration service 260
Configure SSHaccess 269
Use SSH with key authentication 275
Generating SSH key pairs 275
Configure telnet access 277
Configure DNS 281
Simple Network Management Protocol (SNMP) 287
SNMP Security 287
Configure Simple Network Management Protocol (SNMP) 287
Download MIBs 291
Modbus gateway 292
Configure the Modbus gateway 293
Show Modbus gateway status and statistics 306

IX10 User Guide 9
System time 309
Configure the system time 309
Network Time Protocol 311
Configure the device as an NTP server 312
Configure a multicast route 316
Enable service discovery (mDNS) 318
Use the iPerf service 321
Example performance test using Iperf3 325
Configure the ping responder service 325
Example performance test using Iperf3 329
Applications
Configure applications to run automatically 331
Task one: Upload the application 331
Task two: Configure the application to run automatically 333
Run a Python application at the shell prompt 337
Start an interactive Python session 339
Digidevice module 340
Use digidevice.cli to execute CLI commands 341
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 342
Use digidevice.config for device configuration 344
Use Python to respond to Digi Remote Manager SCI requests 347
Use digidevice runtime to access the runtime database 355
Use Python to upload the device name to Digi Remote Manager 357
Use Python to send and receive SMS messages 359
Use Python to access serial ports 361
Use the Paho MQTTpython library 362
Stop a script that is currently running 365
Show script information 366
User authentication
IX10 user authentication 369
User authentication methods 369
Add a new authentication method 371
Delete an authentication method 373
Rearrange the position of authentication methods 374
Authentication groups 376
Change the access rights for a predefined group 377
Add an authentication group 379
Delete an authentication group 383
Local users 385
Change a local user's password 386
Configure a local user 387
Delete a local user 394
Terminal Access Controller Access-Control System Plus (TACACS+) 396
TACACS+ user configuration 397
TACACS+ server failover and fallback to local authentication 398
Configure your IX10 device to use a TACACS+ server 398
Remote Authentication Dial-In User Service (RADIUS) 404
RADIUS user configuration 405
RADIUS server failover and fallback to local configuration 405
Configure your IX10 device to use a RADIUS server 406

IX10 User Guide 10
LDAP 411
LDAP user configuration 412
LDAP server failover and fallback to local configuration 413
Configure your IX10 device to use an LDAP server 413
Disable shell access 418
Set the idle timeout for IX10 users 419
Example user configuration 421
Example 1: Administrator user with local authentication 421
Example 2: RADIUS, TACACS+, and local authentication for one user 423
Firewall
Firewall configuration 430
Create a custom firewall zone 430
Configure the firewall zone for a network interface 432
Delete a custom firewall zone 433
Port forwarding rules 434
Configure port forwarding 435
Delete a port forwarding rule 439
Packet filtering 441
Configure packet filtering 441
Enable or disable a packet filtering rule 444
Delete a packet filtering rule 446
Configure custom firewall rules 447
Configure Quality of Service options 449
System administration
Review device status 460
Configure system information 461
Update system firmware 463
Manage firmware updates using Digi Remote Manager 463
Certificate management for firmware images 463
Downgrading 463
Dual boot behavior 466
Update cellular module firmware 467
Update modem firmware over the air (OTA) 468
Update modem firmware by using a local firmware file 470
Reboot your IX10 device 471
Reboot your device immediately 471
Schedule reboots of your device 471
Reset the device to factory defaults 472
Configuration files 476
Save configuration changes 476
Save configuration to a file 477
Restore the device configuration 478
Schedule system maintenance tasks 481
Disable device encryption 487
Re-enable cryptography after it has been disabled. 488
Configure the speed of your Ethernet port 490

IX10 User Guide 11
Monitoring
intelliFlow 494
Enable intelliFlow 494
Use intelliFlow to display average CPU and RAMusage 497
Use intelliFlow to display top data usage information 498
Use intelliFlow to display data usage by host over time 500
Configure NetFlow Probe 501
Central management
Digi Remote Manager support 507
Configure Digi Remote Manager 507
Collect device health data and set the sample interval 512
Log into Digi Remote Manager 515
Use Digi Remote Manager to view and manage your device 516
Add a device to Digi Remote Manager 517
View Digi Remote Manager connection status 517
Use the Digi Remote Manager mobile app 518
Configure multiple devices using profiles 518
Learn more 519
File system
The IX10 local file system 521
Display directory contents 521
Create a directory 522
Display file contents 523
Copy a file or directory 523
Move or rename a file or directory 524
Delete a file or directory 525
Upload and download files 526
Upload and download files by using the WebUI 526
Upload and download files by using the Secure Copy command 527
Upload and download files using SFTP 528
Diagnostics
Generate a support report 531
View system and event logs 532
View System Logs 532
View Event Logs 534
Configure syslog servers 536
Configure options for the event and system logs 538
Analyze network traffic 543
Configure packet capture for the network analyzer 544
Example filters for capturing data traffic 548
Capture packets from the command line 549
Stop capturing packets 549
Show captured traffic data 550
Save captured data traffic to a file 552
Download captured data to your PC 552
Clear captured data 554

IX10 User Guide 12
Use the ping command to troubleshoot network connections 555
Ping to check internet connection 555
Stop ping commands 555
Use the traceroute command to diagnose IProuting problems 555
Digi IX10 regulatory and safety statements
RF exposure statement 557
Federal Communication (FCC) Part 15 Class B 557
Radio Frequency Interference (RFI) (FCC 15.105) 557
European Community - CE Mark Declaration of Conformity (DoC) 557
CE mark (Europe) 558
Maximum transmit power for radio frequencies 559
Innovation, Science, and Economic Development Canada (IC) certifications 559
RoHS compliance statement 560
Safety statements 560
Special safety notes for wireless routers 561
Product disposal instructions 562
DigiIX10 Certifications
International EMC (Electromagnetic Compatibility) and safety standards 562
Command line interface
Access the command line interface 565
Log in to the command line interface 565
Exit the command line interface 566
Execute a command from the web interface 566
Display help for commands and parameters 567
The help command 567
The question mark (?) command 567
Display help for individual commands 568
Use the Tab key or the space bar to display abbreviated help 568
Auto-complete commands and parameters 568
Available commands 570
Use the scp command 571
Display status and statistics using the show command 572
show config 572
show system 573
show network 573
Device configuration using the command line interface 573
Execute configuration commands at the root Admin CLI prompt 574
Display help for the config command from the root Admin CLI prompt 574
Configuration mode 576
Enable configuration mode 576
Enter configuration commands in configuration mode 576
Save changes and exit configuration mode 576
Exit configuration mode without saving changes 577
Configuration actions 577
Display command line help in configuration mode 578
Move within the configuration schema 580
Manage elements in lists 581

IX10 User Guide 13
The revert command 583
Enter strings in configuration commands 585
Example: Create a new user by using the command line 585
Command line reference 588
analyzer 589
cp 590
help 591
ls 592
mkdir 593
modem 594
modem puk status [imei STRING] [name STRING] 599
more 602
mv 603
ping 604
reboot 606
rm 607
scp 608
show 609
ssh 616
system 618
traceroute 622

What's new in Digi IX10 version 20.11
Release of Digi IX10 firmware version 20.11:
nModem firmware update commands added to the Admin CLI.
nNetwork bridging enhanced to use the MAC address of the first active device listed in Network
>Bridges >Bridge name >Devices as the MAC address for the bridged interface.
nIPsec enhancements:
lSupport for full IPsec IPv6 tunnels: IPv6-over-IPv4, or IPv4-over-IPv6 tunnels.
lIPsec tunnels are now treated like network interfaces, which allows tunnels to be selected
for routing and routing priority and access control lists.
lIPSec tunnels now wait for Surelink tests, if configured, to pass prior to initiating outbound
tunnels.
nModbus gateway enhancements:
lStatus >Modbus gateway page in the Web UI displays information about modbus clients
and servers connected to the gateway.
lshow modbus command displays information about the the Modbus gateway service.
nSerial port enhancements:
lSerial port logging options added for starting, stopping, and viewing serial port activity.
lOption added to the System >Serial configuration page to copy serial port settings.
nPolicy-based routing enhancements:
lAdded a DSCP option to match the routing rule by the type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-based routes to the device's active
default route.
nPython pip support for installing external modules and libraries.
nLink speed and duplex options added to Ethernet port configuration.
nssh and telnet commands added to Admin CLI.
nServices >Ping responder allows you to control the interfaces and firewall zones on which
the DAL device will respond to ICMP requests.
nEnhanced policy-based routing:
lAdded a DSCP option to match the routing rule by the type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-based routes to the device's active
default route.
nAdded a link to User Guide under the User menu in the Web UI.
IX10 User Guide 14

Digi IX10 Quick start
The following steps guide you through the setup of your DigiIX10 device.
Quick start using the Digi Remote Manager mobile app
After connecting your hardware and powering up, you can use the Digi Remote Manager mobile app to
quickly install your IX10 into your Digi Remote Manager account.
Here's how:
If you already have a Digi Remote Manager account:
1. Download the Digi Remote Manager mobile app from the App Store (iPhone) or Google Play
(Android).
2. Click Log in or Sign Up and log in to your account.
3. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
4. Follow the prompts to complete your IX10 registration.
If you need to sign up for a Digi Remote Manager account:
1. Click here to create a new account. You'll receive an email with login instructions.
2. On your smartphone or tablet, download the Digi Remote Manager mobile app from the App
Store (iPhone) or Google Play (Android).
3. Open the Digi Remote Manager mobile app, click Log in and log into your new account.
4. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
5. Follow the prompts to complete your IX10 registration.
Step 1: What's in the box
When you open the IX10 package, look for the following:
IX10 User Guide 15

Digi IX10 Quick start Step 2: Gather accessories
IX10 User Guide 16
nDigi IX10 device
The Digi IX10 has a product label on the bottom of the device. The label includes product
identification information and the default password assigned to the device. The IX10 also
includes a terminal connector for the power supply installed in the power input.
nInsert cards
nDigi IX10 label
Printed copy of the product label on the bottom of your device. You can affix this label to the
top or side of the device such that you can access the label after the device is mounted, or
store the label in a safe place for future reference.
Step 2: Gather accessories
Accessories may be purchased with the IX10 device, or you can provide your own.
Here's the list of accessories used in this Quick start:
Antennas
Two cellular antennas, ordered separately.
Power supply
Ordered separately.
DIN rail clip
Ordered separately. For optionally clipping the IX10 to a DIN rail.
DIN rail mounting bracket
Ordered separately. For optionally mounting the IX10 to a DIN rail.
Laptop or personal computer
Use an Ethernet cable to connect your IX10 to a laptop or PC.

Digi IX10 Quick start Step 3: Connect
IX10 User Guide 17
SIM card(s)
If you intend to configure cellular WWAN access at this time, acquire SIM
cards as needed. Note the carrier, network APN (Access Point Name),
and SIM pin (if any) for each card.
Ethernet cable
Smart phone or tablet
Optional: Use a smart phone or table to to automatically register your
IX10 in your Digi Remote Manager account and connect to your cellular
network. See Quick start using the Digi Remote Manager mobile app.
Step 3: Connect
1. Insert SIM card(s)
Insert your activated SIM (2FF) card(s) provided by your cellular carrier into the device:
a. Use a screw driver to remove the SIM slot cover.
b. For high-vibration environments, apply a thin layer of dielectric grease to the SIM contacts.
Note If the IX10 device is used in an environment with high vibration levels, SIM card
contact fretting may cause unexpected SIM card failures. To protect the SIM cards, Digi
strongly recommends that you apply a thin layer of dielectric grease to the SIM contacts
prior to installing the SIM cards.

Digi IX10 Quick start Step 3: Connect
IX10 User Guide 18
c. Insert the SIM card(s) into the SIM sockets. Insert the end of each SIM card with the
chamfered corner positioned as indicated. Push the SIM in until it clicks into place.
d. After SIM cards are installed, replace the SIM slot cover.
2. Attach cellular antennas
Securely tighten each antenna using the barrel connector at the base of the antenna.
3. Connect DC power
4. Wait until a cellular connection has been established.
When connecting for the first time, it could take several minutes for the IX10 device to connect
to the cellular network while it attempts to determine the APN required for the connection.
nIndicator LEDs blink to show status during startup.
nVerify that the LTE LED on the front of the IX10 shows either green or blue (solid or
flashing) for proper operation.
nVerify that the signal strength indicator on the front of the IX10 shows 2 or more bars.
Note If your SIM card has an APN that is not recognized by the IX10 device, skip this step and
configure the APN following the procedure at Configure cellular modem APNs.
5. If you intend to configure Ethernet WAN access at this time, use an Ethernet cable to connect
the IX10's WAN/ETH1 port to a hub with access to the Internet.
6. Use an Ethernet cable to connect the IX10 ETH port to your PC.

Digi IX10 Quick start Step 4: Configure
IX10 User Guide 19
Step 4: Configure
This section describes how to configure the device by using the local Web UI. You can also use Digi
Remote Manager to configure the device, including using a Digi RMdevice configuration to
automatically update the device. See the Digi Remote Manager User Guide.
1. On the PC connected to the IX10, open a browser and go to 192.168.2.1.
The device is also accessible at the default IP address of 192.168.210.1. However, because this
IP address does not use a DHCP server, to connect to this address you must configure your
local PC with an appropriate static IP address (for example, 192.168.210.2).
2. Log into the IX10:
User name: Use the default user name: admin.
Password: Use the unique password printed on the bottom label of the device (or the printed
label included in the package).
When you first log into the WebUI or the command line, you must change the password for the
admin user. See Change the default password for the admin user for instructions.

Digi IX10 hardware reference
Digi IX10 features and specifications
The Digi IX10 key features include:
nIndustrial grade components.
nOperating temperatures:
-40C to +70C/-4F to +158F.
nLTE CAT 4 modem with two SIMslots.
n10/100 BaseT Ethernet port for high-speed connectivity.
For a detailed list of IX10 hardware specifications, see
https://www.digi.com/products/networking/cellular-routers/industrial/digi-ix10#specifications.
IX10 accessories
When accessories are purchased with the IX10 device, the following are provided:
nCellular antennas.
nPower supply.
nEthernet cable.
nDIN rail mounting bracket,
nDINrail mounting clip,
IX10 front and side views
The following figure shows the front view of the IX10.
IX10 User Guide 20