Digi IX14 User manual

IX14
User Guide

Revision history—90002291
Revision Date Description
A January 2019 Initial release of DigiIX14 firmware version 19.1.
B September 2019 DigiIX14 firmware version 19.8 release.
IX14 User Guide 2

Revision history—90002291
IX14 User Guide 3
Revision Date Description
C November 2019 DigiIX14 firmware version 20.2 release.
This firmware release includes the following features and
enhancements:
nRe-themed web UI with improved navigation and
functionality. New functionality includes:
lNew Dashboard overview page.
lThe ability to view local filesystem contents.
lAccess configuration settings from status pages.
lEnhanced for use on hand-held and mobile devices.
nDefault user changed from root to admin.
lIf you have a configured user named admin prior to
upgrading to 19.11.72.58, it will not be affected by the
upgrade.
lIf you do not have a configured user named admin
prior to upgrading to 19.11.72.58, an admin user
account will be created with the same credentials
and configuration settings as the root user.
lIf your root user account has been modified from the
factory default settings, it will not be affected by the
upgrade.
lIf you restore the device to factory default settings
after upgrading to 19.11.72.58, only the admin user
will exist. If you have a root user and perform a
factory default, log in with the admin user instead of
root, using the same default password printed on the
bottom of the device.
nNew network analyzer and packet capture tool.
nSIM slot prioritization and SIM slot failback.
nIPsec enhancements:
lPreferred tunnel option to configure a tunnel to be a
primary or failover tunnel.
lAbility to use the device's MAC address or serial
number as its local endpoint ID.
nDHCP hostname option to allow the device to advertise
its hostname to the DHCP server upon connection.
nReceive encrypted SMS commands from Digi Remote
Manager.
nAbility in OpenVPN to push routes in subnet mode.
nNew Edge firewall zone to prevent the device's DNS
services from being advertised on the network, while still
allowing SSH and web UI access.
nRemoved the 192.168.210.254 default IP gateway.

Revision history—90002291
IX14 User Guide 4
Revision Date Description
nSupport for sending RFC2136-compatible DNS updates to
external DNS servers.
D February 2020 DigiIX14 firmware version 20.2 release.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[e-mail]

Revision history—90002291
IX14 User Guide 5
Include the document title and part number (IX14 User Guide, 90002291 C) in the subject line of your
email.

Contents
Revision history—90002291 2
What's new in Digi IX14 version 20.2
Digi IX14 hardware reference
IX14 features and specifications 14
IX14 front view 14
IX14 back view 14
IX14 power supply requirements 15
IX14 LEDs 15
Digi IX14 serial connector pinout 16
IX14 accessory kits 17
IX14 antennas 17
IX14 quick start
Quick start with Digi Remote Manager mobile app
Step 1: What's in the box 19
Step 2: Gather accessories 19
Step 3: Connect hardware 20
Step 4: Quick setup using the Digi Remote Manager mobile app 21
Next steps 21
Quick start with IX14 local WebUI
Step 1: What's in the box 22
Step 2: Gather accessories 22
Step 3: Connect hardware 23
Step 4: Sign up for Digi Remote Manager 24
Step 5: Access the IX14 local web interface 24
Step 6: Configure cellular connection using the web interface 25
Step 7: Add your IX14 to your Digi Remote Manager account 25
Next steps 26
IX14 User Guide 6

IX14 User Guide 7
Reset the device to factory defaults
Hardware setup
Install SIM cards 28
Attach and position antennas 28
Connect the WAN/ETH1 port 29
Connect the serial port 29
Power on the IX14 29
Configuration and management
Review IX14 default settings 30
Reset default password for the default admin user 30
Configuration methods 32
Using Digi Remote Manager 32
Access Digi Remote Manager 33
Using the web interface 33
Log out of the web interface 34
Using the command line 35
Access the command line interface 35
Log in to the command line interface 35
Exit the command line interface 36
Initial configuration
Configure cellular modem APNs 38
Change the default LAN subnet 41
Change the LAN address type 42
Configure SIM PIN 44
Configure system settings 44
Enable or disable Bluetooth service 52
User authentication
IX14 user authentication 56
User authentication methods 56
Add a new authentication method 58
Delete an authentication method 60
Rearrange the position of authentication methods 62
Authentication groups 64
Change the access rights for a predefined group 66
Add an authentication group 68
Delete an authentication group 72
Local users 75
Change a local user's password 76
Configure a local user 78
Delete a local user 85
Terminal Access Controller Access-Control System Plus (TACACS+) 88
TACACS+ user configuration 89
TACACS+ server failover and fallback to local authentication 90
Configure your IX14 device to use a TACACS+ server 90

IX14 User Guide 8
Remote Authentication Dial-In User Service (RADIUS) 95
RADIUS user configuration 96
RADIUS server failover and fallback to local configuration 96
Configure your IX14 device to use a RADIUS server 97
Disable shell access 101
Set the idle timeout for IX14 users 103
Example user configuration 106
Example 1: Administrator user with local authentication 106
Example 2: RADIUS, TACACS+, and local authentication for one user 108
Firewall
Firewall configuration 116
Create a custom firewall zone 116
Configure the firewall zone for a network interface 118
Delete a custom firewall zone 120
Port forwarding rules 122
Configure port forwarding 122
Delete a port forwarding rule 127
Packet filtering 130
Configure packet filtering 130
Enable or disable a packet filtering rule 134
Delete a packet filtering rule 136
Configure custom firewall rules 138
Configure Quality of Service options 140
System administration
Review device status 152
Configure system information 153
Update system firmware 155
Manage firmware updates using Digi Remote Manager 155
Certificate management for firmware images 155
Update cellular module firmware 157
Reboot your IX14 device 158
Reboot your device immediately 159
Schedule reboots of your device 159
Reset the device to factory defaults 161
Configuration files 165
Save configuration changes 165
Save configuration to a file 166
Restore the device configuration 168
Schedule system maintenance tasks 170
Create a Virtual LAN (VLAN) route 177
Serial port 180
Configure the serial port 180
Show serial status and statistics 184
Services
Allow remote access for web administration and SSH 186
Configure the web administration service 190
Configure SSHaccess 198

IX14 User Guide 9
Use SSH with key authentication 204
Generating SSH key pairs 204
Configure telnet access 207
Configure DNS 212
Simple Network Management Protocol (SNMP) 219
SNMP Security 219
Configure Simple Network Management Protocol (SNMP) 219
Download MIBs 224
System time 225
Configure the system time 225
Network Time Protocol 228
Configure the device as an NTP server 228
Configure a multicast route 235
Enable service discovery (mDNS) 237
Use the iPerf service 241
Example performance test using Iperf3 245
Applications
Configure applications to run automatically 248
Task one: Upload the application 248
Task two: Configure the application to run automatically 250
Run a Python application at the shell prompt 254
Start an interactive Python session 256
Digidevice module 258
Use digidevice.cli to execute CLI commands 259
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 260
Use digidevice.config for device configuration 262
Use Python to respond to Digi Remote Manager SCI requests 264
Use digidevice runtime to access the runtime database 273
Using Python to upload the device name to Digi Remote Manager 275
Central management with Digi Remote Manager
Digi Remote Manager support 279
Configure Digi Remote Manager 279
Collect device health data and set the sample interval 283
Log into Digi Remote Manager 285
Use Digi Remote Manager to view and manage your device 286
Add a device to Digi Remote Manager 287
View Digi Remote Manager connection status 287
Use the Digi Remote Manager mobile app 288
Configure multiple devices using profiles 289
Learn more 289
Monitoring
intelliFlow 291
Enable intelliFlow 291
Use intelliFlow to display average CPU and RAMusage 294
Use intelliFlow to display top data usage information 295
Use intelliFlow to display data usage by host over time 297
Configure NetFlow Probe 298

IX14 User Guide 10
Virtual Private Networks (VPN)
IPsec 304
IPsec data protection 304
IPsec modes 304
Internet Key Exchange (IKE) settings 304
Authentication 305
Configure an IPsec tunnel 305
Configure IPsec failover 327
Configure SureLink active recovery for IPsec 328
Show IPsec status and statistics 335
OpenVPN 337
Configure an OpenVPN server 338
Configure an OpenVPN Authentication Group and User 347
Configure an OpenVPN client by using an .ovpn file 352
Configure an OpenVPN client without using an .ovpn file 355
Configure active recovery for OpenVPN 360
Show OpenVPN server status and statistics 367
Show OpenVPN client status and statistics 368
Generic Routing Encapsulation (GRE) 369
Configuring a GREtunnel 369
Show GRE tunnels 375
Example: GRE tunnel over an IPSec tunnel 376
Diagnostics
Generate a support report 394
View system event logs 396
View System Logs 396
View Event Logs 399
Configure syslog servers 401
Configure options for the event and system logs 403
Analyze network traffic 408
Configure packet capture for the network analyzer 409
Example filters for capturing data traffic 413
Capture packets from the command line 414
Stop capturing packets 415
Show captured traffic data 416
Save captured data traffic to a file 417
Download captured data to your PC 418
Clear captured data 419
Use the ping command to troubleshoot network connections 421
Ping to check internet connection 421
Stop ping commands 421
Use the traceroute command to diagnose IProuting problems 421
Routing
IP routing 424
Configure a static route 425
Delete a static route 428
Policy-based routing 430
Configure a routing policy 431
Routing services 438