Digi IX14 User manual

IX14
User Guide
Firmware version 22.2

Revision history—90002291
Revision Date Description
H March 2021 Release of Digi IX14 firmware version 21.2:
nLocation services added, including:
lThe ability to define a static latitude and longitude
as a location for the device.
lReporting location information as health metrics to
Digi Remote Manager.
lGeo-fencing: Allow you to define one or more
circular or polygonal geo-fence areas and then
perform a set of actions when the device enters or
leaves that area.
lPython support for location information through
the digidevice.location python module.
nCellular modem carrier scanning and locking:
lNew modem scan CLI command for listing
available carriers for the current modem and SIM.
lManual carrier selection option to allow you to lock
the SIM to a specific carrier.
nEnhanced serial support:
lCertificate management control for TCP and
autoconnect serial port setups.
lAutoconnect.
nLocal RESTAPI for automated configuration of the
device.
nSupport for remote CLI commands through Digi
Remote Manager.
nSupport for automatically checking for device and
modem firmware updates.
J June 2021 Release of Digi IX14 firmware version 21.5:
nWi-Fi enhancements:
lAdded support for WPA3 Wi-Fi encryption:
oWPA2/WPA3 Personal
IX14 User Guide 2

Revision history—90002291
IX14 User Guide 3
Revision Date Description
oWPA3 Enhanced Open
oWPA3 Personal
lAdded support for WPA and WPA/WPA2 mised
mode with TKIP.
nCellular enhancements:
lAdded support for modem firmware update to the
Admin CLI.
lAdded support for over-the-air (OTA) modem
firmware update to check, list, and update to new
modem firmware from the Digi firmware server.
lAdded the ability to scan for cellular carriers on the
Modem status page and the ability select a
particular PLMN/network to use.
nAdded commands for over-the-air (OTA) system
firmware update to check, list, and update to new
firmware from the Digi firmware server.
nAdded a show dns command to the Admin CLI to
display active DNS servers and their associated
interface.
nAdded a show ntp command to the Admin CLI to
display the status of the NTP service.
nExpanded Port forwarding option to support a range of
ports, including one-to-one and many-to-one port
mappings.
nAdded options to control packet filtering for the
network analyzer.
nVPN enhancements:
lIPsec enhancements:
oAdded support for multiple remote endpoints
and the ability to use round-robin or to
randomly select an endpoint to establish a
tunnel to.
oAdded configurable options to control IKE
transmit interval, tunnel retry interval, and
tunnel retry timeout.
lLDAP enhancements:
oAdded a login attribute to provide the ability to
match the attribute set on an Active Directory
server.
nSureLink enhancements
lAdded the ability to configure how many times a
SureLink test must run, and must fail, before the

Revision history—90002291
IX14 User Guide 4
Revision Date Description
interface is restarted or the device is rebooted.
lAdded the ability to configure how many times a
SureLink test must pass before an interface is
considered to be working.
lAdded the ability to test another interface's status.
nSNMPv2 supported added.
nSimple Certificate Enrollment Protocol (SCEP)
supported added.
nUpdated python to version 3.6.13.
nAdded the default digi.device local domain.
K September 2021 Release of Digi IX14 firmware version 21.8:
nAdded LXC container support for running localized
containers on the device.
nAdded support for maintenance windows triggers to
control when a device is available for Digi Remote
Manager maintenance activity.
nVPNenhancements:
lAdded support for L2TPv3 tunneling.
lNew option to enable, disable, or force IPsec IKE
fragmentation.
nImproved options for creating a custom default
configuration:
lsystem backup CLI commands for generating a
custom default config file based on the active
config settings on the device.
lNew section on the File System page of the Web UI
for loading a configuration backup file as the
custom default config
lNew persistent files folder accessible through Digi
Remote Manager where users can upload a
configuration backup.
lAdded ability to clear a custom default
configuration by performing by pressing the RESET
button, waiting for the device to reboot, then
pressing the RESET again.
nAdded ability to override or edit SSH server options.
nAdded options for filtering Wi-Fi scanner results based
off of MAC addresses or RSSI signal strength.
nAdded options for sending local device event logs to
Digi Remote Manager.
nNew system time CLI command for manually setting

Revision history—90002291
IX14 User Guide 5
Revision Date Description
the local date and time.
nNew firewall packet filter options to allow/deny
packets based off of a range of source or destination
MAC addresses.
nNew monitoring metrics upload CLI command to
send on-demand health metrics to Digi Remote
Manager.
nAdded support for the configuration of custom scripts
that will be run manually, and a new system script
start CLI command to run manual scripts.
nNew "Find me" feature that flashes cellular-related
LEDs to help locate the device onsite and a new
system find-me command.
nAdded datapoint.upload_multiple function to
digidevice python module for uploading multiple
datapoints to DigiRM at once.
nAdded clear dhcp-lease command to remove all
dynamic DHCP leases or certain DHCP leases based on
MAC address or IP address.
nAdded speedtest command for performing on-demand
iPerf or nuttcp speedtests.
nLocal users are now required to be assigned to an
authentication group.
nNew Network → Advanced → Sequential DHCP address
allocation configuration setting for controlling if DHCP
addresses are assigned sequentially or randomly
(disabled by default).
nAdded ability to control if DHCP addresses are assigned
sequentially or randomly (disabled by default).
nAdded 802.1x port-based network access control,
configurable per network interface.
L December 2021 Release of Digi IX14 firmware version 21.11:
nConfiguration option to allow for automatic update of
new firmware (disabled by default).
nUser authentication enhancements:
lAdded TACACS+ command authorization and
accounting for Admin CLI commands.
lAdded a new username alias to provide an
alternate username that allows for special
characters in the username.
nVPNenhancements:
lAdded support for PPP-over-L2TP tunnels.

Revision history—90002291
IX14 User Guide 6
Revision Date Description
lChanged default IPsec IKE DH group to 14 for
enhanced compatibility with industry standard
settings.
nLocation services enhancements:
lNew option for Location service to specify the
talker ID used in NMEA mesage strings.
lInclude the mode indicator field in NMEA messages
constructed when a GPS fix isn’t obtained.
nSureLink enhancments:
lAdded new settings under cellular Surelink options
to have the device reset the cellular modem if a
specified number of Surelink tests fail
lAdded show surelink Admin CLI command.
nSerial port enhancements:
lNew option to add and configure an external USB-
to-serial adapter.
lDisable serial history in remote access mode by
default.
nSupport for sending analog and digial I/O health
metrics to Digi Remote Manager.
nAdded show containers Admin CLI command.
M March 2022 Release of Digi IX14 firmware version 22.2:
nVPNenhancements:
lRenamed VPN >IPsec >Tunnels >Policies >Local
network setting to Local traffic selector and
added Remote traffic selector.
lAdded a Dynamic option to the Local traffic
selector to configuration of a local network by
protocol and/or port instead of a network address
range.
lAdded Protocol and Port match criteria for Local
traffic selector and Remote traffic selector.
lAdded VPN >IPsec >Advanced >Debug level to
specify the logging verbosity of IPsec messages in
the device system logs.
nEnhancements to communications with Digi Remote
Manager:
lEnhanced security for communications with Digi
Remote Manager by using client-side certificates.
lThe default URL for the device's Remote Manager
connection is now edp12.devicecloud.com. This

Revision history—90002291
IX14 User Guide 7
Revision Date Description
URL is required to utilize the client-side certificate
support.
nNew Switch SIM SureLink action for WWAN interfaces,
which allows SureLink to be configured to switch to the
alternate SIM if the modem is connected but SureLink
test are failing.
lNew Switch SIM fail count option to determine
how many SureLink failures are required prior to
switching to the alternate SIM.
nNew Socket ID string option to send the configured
text to the remote server(s) when a TCP socket
connection is opened to the serial port.
nNew cat Admin CLI command for displaying file
contents.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
© 2022 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)

Revision history—90002291
IX14 User Guide 8
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[email protected]
Include the document title and part number (IX14 User Guide, 90002291 K) in the subject line of your
email.

Contents
Revision history—90002291 2
What's new in Digi IX14 version 22.2
Digi IX14 Quick start
Step 1: What's in the box 20
Step 2: Gather accessories 20
Step 3: Connect hardware 21
Step 4: Sign up for Digi Remote Manager 22
Step 5: Access the IX14 local web interface 22
Step 6: Configure cellular connection using the web interface 23
Step 7: Add your IX14 to your Digi Remote Manager account 23
Next steps 23
Reset the device to factory defaults
Digi IX14 hardware reference
IX14 features and specifications 25
IX14 front view 25
IX14 back view 25
IX14 power supply requirements 26
IX14 LEDs 26
Digi IX14 serial connector pinout 27
IX14 accessory kits 28
IX14 antennas 28
Hardware setup
Install SIM cards 30
Apply Dielectric Grease over SIMContacts 30
Attach and position antennas 31
Connect the WAN/ETH1 port 32
Connect the serial port 32
Power on the IX14 32
QR code definition 32
IX14 User Guide 9

IX14 User Guide 10
Configuration and management
Review IX14 default settings 34
Change the default password for the admin user 34
Configuration methods 36
Using Digi Remote Manager 37
Access Digi Remote Manager 37
Using the web interface 37
Log out of the web interface 38
Use the local RESTAPI to configure the IX14 device 38
Use the GETmethod to return device configuration information 39
Use the POST method to modify device configuration parameters and list arrays 41
Use the DELETE method to remove items from a list array 41
Using the command line 43
Access the command line interface 43
Log in to the command line interface 43
Exit the command line interface 44
Initial configuration
Configure cellular modem APNs 47
Change the default LAN subnet 51
Change the LAN address type 52
Configure SIM PIN 54
Configure system settings 54
Enable or disable Bluetooth service 61
Interfaces
Wireless Wide Area Networks (WWANs) 66
Configure SureLink active recovery to detect modem failures 66
Configure the device to reboot when a failure is detected 76
Disable SureLink 84
Using cellular modems in a Wireless WAN (WWAN) 88
Configure a Wireless Wide Area Network (WWAN) 105
Show WWAN status and statistics 114
Delete a WWAN. 116
Local Area Networks (LANs) 119
About Local Area Networks (LANs) 120
Configure a LAN 120
Show LAN status and statistics 127
Delete a LAN 129
DHCP servers 131
Create a Virtual LAN (VLAN) route 147
Show Surelink status and statistics 149
Show Surelink status for all interfaces 149
Show Surelink status for a specific interface 149
Show Surelink status for all IPsec tunnels 150
Show Surelink status for a specific IPsec tunnel 150
Show Surelink status for all OpenVPN clients 151
Show Surelink status for a specific OpenVPN client 151
Serial port 153
Default serial port configuration 153
Serial mode options 153