Digi IX10 User manual

IX10
User Guide
Firmware version 23.3

Revision history—90002399
Revision Date Description
G March 2022 Release of Digi IX10 firmware version 22.2:
nVPNenhancements:
lRenamed VPN >IPsec >Tunnels >Policies >Local
network setting to Local traffic selector and
added Remote traffic selector.
lAdded a Dynamic option to the Local traffic
selector to configuration of a local network by
protocol and/or port instead of a network address
range.
lAdded Protocol and Port match criteria for Local
traffic selector and Remote traffic selector.
lAdded VPN >IPsec >Advanced >Debug level to
specify the logging verbosity of IPsec messages in
the device system logs.
nAdded Realport support.
nEnhancements to communications with Digi Remote
Manager:
lEnhanced security for communications with Digi
Remote Manager by using client-side certificates.
lThe default URL for the device's Remote Manager
connection is now edp12.devicecloud.com. This
URL is required to utilize the client-side certificate
support.
nNew Switch SIM SureLink action for WWAN interfaces,
which allows SureLink to be configured to switch to the
alternate SIM if the modem is connected but SureLink
test are failing.
lNew Switch SIM fail count option to determine
how many SureLink failures are required prior to
switching to the alternate SIM.
nNew Socket ID string option to send the configured
text to the remote server(s) when a TCP socket
connection is opened to the serial port.
nNew cat Admin CLI command for displaying file
contents.
H June 2022 Release of Digi IX10 firmware version 22.5:
n5G enhancements:
lAdded 5G slice support for configuring the slice
IX10 User Guide 2

Revision Date Description
type for the 5G modems.
nSurelink enhancements:
lEnabled Surelink reset_modem action by default on
cellular interfaces and set fail count to three.
lUpdated Surelink reset_modem action to
automatically power cycle the modem in the event
that the modem fails to reset.
nSerial port support enhancements:
lAdded serial PPP dial-in mode to handle AT-based
connection requests from a device connected to a
serial port and provide IPv4 networking to the
device.
lAdded suppport for Realport serial mode.
nAdded the ability to configure CPU performance and
power consumption.
nAdded cellular APN and cellular connection duration as
datapoints sent to Digi Remote Manager.
nWi-Fi scanner enhancements:
lAdded support for sending an HTTP or TCP stream
of results from the Wi-Fi scanner to one or more
remote servers.
nSCEP enhancements:
lNew SCEP client settings and underlying
functionality to support connecting to additional
SCEP servers.
lAdded show scep Admin CLI command to show
the sync status, expiration dates, and additional
details of any configured SCEP clients.
nVPN enhancements:
lInclude the hostname of the device in the client
.ovpn file listed on the Status → OpenVPN → Servers
page in the web UI.
nLocation services enhancements:
lNew settings to control the NMEA message content
that the devices sends when there is no valid fix
from any of the configured location sources.
I Not used.
J September 2022 Release of Digi IX10 firmware version 22.8:
nCellular modem enhancements:
lAdded modem ota download and system
firmware ota download commands for
IX10 User Guide 3

Revision Date Description
downloading cellular modem and device firmware.
lAdded cellular carrier name and PLMN ID to the
Modems Status page in the Web UI.
lEnhanced access technology options to set the
modem to 5G-only, including setting to 5G SA-only,
NSA-only, or both NSA/SA-modes.
nVPN enhancements:
lAdded Dynamic Multipoint VPN (DMVPN) support.
lAdded a Strict routing setting to IPsec tunnels that
routes packets through the tunnel if both the
source IP and destination IP match the IPsec
tunnel’s policies. This makes IPsec behave like a
policy-based VPN, rather than a route-based VPN.
lAdded the Microsoft version of the Challenge-
Handshake Authentication Protocol (MS-CHAPv2) as
an option for L2TP network servers authentication
methods.
nContainer support:
lContainer support now a premium feature, enabled
through Digi Remote Manager.
lAdded new metrics for sending container status,
name, CPU load, and disk usage as datapoints to
DigiRM.
nAdded support for running a PPPoE server when an
interface is in IP passthrough mode.
nAdded ability to specify DFS channels for Wi-Fi client
background scanning when DFS client support is
enabled.
nAdded a show eth Admin CLI command to show the
link status of each Ethernet port.
nAdded a poweroff CLI command to perform a graceful
shutdown of the device without automatically
rebooting.
nAdded the ability to turn off all LEDs on the device to
reduce power consumption.
K December 2022 Release of Digi IX10 firmware version 22.11:
nUpdated the Linux kernel to version 5.19.
nThe intelliFlow feature now integrates with Digi Remote
Manager to provide aggregated insights and analytics
for all Digi devices in your environment.
nAdded an MQTTbroker service, including support for:
IX10 User Guide 4

Revision Date Description
lMultiple MQTT clients with unique topics and
authentication credentials.
lPre-shared key encryption with multiple
configurable keys.
lPattern filtering for topic access control.
nAdded support for Next-hop routing protocol (NHRP).
nAdded support for mGREtunnels.
nAdded support for ICMP redirect messages.
nAdded a polling interval to control how often the
cellular modem is polled for signal strength and other
status.
nNew commands: tail and grep.
nAdd Timeout option to modem Carrier Scan window in
the Web UI.
nAdded advanced watchdog to:
lMonitor critical services and reboot the device if
those services fail.
lMonitor memory usage and log errors or reboot the
device based on current memory usage.
nAdded the ability to have serial port data written to the
system log.
lRemoved options in the local web UI and Admin CLI
for manually starting, stopping, and clearing serial
logs. These actions are now controlled under the
data logging configuration settings.
L May 2023 Release of Digi IX10 firmware version 23.3:
nSurelink:
lRedesigned Surelink configuration settings.
lAdded show surelink state Admin CLI command to
display the overall pass/fail status of enabled
Surelink tests.
nNew configuration settings for LXC containers:
lStart on boot to configure the container to start
when the system boots.
lRestart timeout to configure the container to
restart if it stops.
lOptional parameters to include optional
parameters for the container.
lMounted directories to setup shared directories
between the host filesystem and the container.
IX10 User Guide 5

Revision Date Description
nAdded a AT&T LWM2M support setting to enable or
disable AT&T lightweight M2M on cellular modems.
nVPN:
lDMVPN phase 1 spoke support with NHRP or mGRE,
including compatibility with Cisco DMVPN hubs.
lAdded support for SHA2 ciphers for IKEv2 IPsec
tunnels.
nDisabled mDNS by default for improved cellular
performance.
nIf the device has a configured System >Name, it is now
displayed on the Dashboard.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
© 2023 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
IX10 User Guide 6

Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[email protected]
Include the document title and part number (IX10 User Guide, 90002399 L) in the subject line of your
email.
IX10 User Guide 7

Contents
Revision history—90002399 2
What's new in Digi IX10 version 23.3
Digi IX10 Quick start
Step 1: What's in the box 21
Step 2: Gather accessories 21
Step 3: Connect 22
Apply Dielectric Grease over SIMContacts 23
Step 4: Configure 24
Digi IX10 hardware reference
Digi IX10 features and specifications 26
IX10 accessories 26
IX10 front and side views 26
IX10 LEDs 27
Power (PWR) 28
SIM 28
LTE 28
Signal quality indicators 29
Ethernet Link and Activity 30
Signal quality bars explained 30
IX10 power supply requirements 31
Digi IX10 serial connector pinout 31
10-pin serial cabling options 32
QR code definition 32
Hardware setup
Install SIM cards 35
Apply Dielectric Grease over SIMContacts 35
SIM removal 36
Tips for improving cellular signal strength 36
Connect data cables 36
Mount the IX10 device 36
Attach to a mounting surface by using the mounting tabs 37
Attach to DIN rail with clip 37
IX10 User Guide 8

IX10 User Guide 9
Firmware configuration
Review IX10 default settings 41
Local WebUI 41
Digi Remote Manager 41
Default interface configuration 41
Other default configuration settings 42
Change the default password for the admin user 42
Configuration methods 44
Using Digi Remote Manager 45
Using the local web interface 45
Log out of the web interface 46
Use the local RESTAPI to configure the IX10 device 46
Use the GETmethod to return device configuration information 46
Use the POST method to modify device configuration parameters and list arrays 48
Use the DELETE method to remove items from a list array 49
Using the command line 51
Access the command line interface 51
Log in to the command line interface 51
Exit the command line interface 52
Central management
Digi Remote Manager support 54
Certificate-based enhanced security 54
Configure your device for Digi Remote Manager support 54
Collect device health data and set the sample interval 61
Enable event log upload to Digi Remote Manager 64
Log into Digi Remote Manager 66
Use Digi Remote Manager to view and manage your device 67
Add a device to Digi Remote Manager 67
Configure multiple IX10 devices by using Digi Remote Manager configurations 68
View Digi Remote Manager connection status 69
Learn more 69
Interfaces
Wireless Wide Area Networks (WWANs) 71
Configure SureLink active recovery to detect modem failures 71
Configure the device to reboot when a failure is detected 88
Disable SureLink 101
Using cellular modems in a Wireless WAN (WWAN) 110
Configure a Wireless Wide Area Network (WWAN) 129
Show WWAN status and statistics 139
Delete a WWAN. 140
Local Area Networks (LANs) 143
About Local Area Networks (LANs) 144
Configure a LAN 144
Change the default LAN subnet 151
Change the LAN address type 152
Show LAN status and statistics 154
Delete a LAN 155
DHCP servers 157
Virtual LANs (VLANs) 175

IX10 User Guide 10
Create a trunked VLAN route 176
Create a VLAN using switchport mode 178
Show SureLink status and statistics 180
Show SureLink State 180
Show SureLink status for all interfaces 181
Show SureLink status for a specific interface 181
Show SureLink status for all IPsec tunnels 182
Show SureLink status for a specific IPsec tunnel 182
Show SureLink status for all OpenVPN clients 183
Show SureLink status for a specific OpenVPN client 183
Serial port
Default serial port configuration 185
Serial mode options 185
View serial port information 185
Default serial port configuration 185
Configure Login mode 186
Configure Remote Access mode 190
Configure Application mode 206
Configure PPP dial-in mode 208
Configure UDP serial mode 215
Configure Modbus mode 226
Configure RealPort mode using the Digi Navigator 229
Installation and configuration process 230
Digi Navigator features 230
Install the Digi Navigator 230
Configure RealPort on a Digi device from the Digi Navigator 231
Digi Navigator application features 233
Advanced RealPort configuration without using the Digi Navigator 236
Windows Operating System 237
Linux Operating System 237
Download the RealPort driver 237
Configure RealPort on your laptop 237
Configure the serial port for RealPort mode 239
Configure the RealPort service 243
Show serial status and statistics 243
Review the serial port message log 244
Routing
IP routing 247
Configure a static route 248
Delete a static route 251
Policy-based routing 253
Configure a routing policy 253
Example: Dual WAN policy-based routing 261
Example: Domain-based routing with dual WAN 264
Example: Route traffic to a specific WAN interface based on the client MACaddress 267
Routing services 273
Configure routing services 273
Show the routing table 276
Dynamic DNS 277
Configure dynamic DNS 278