Digi IX14 User manual

IX14
User Guide

Revision history—90002291
Revision Date Description
A January 2019 Initial release of DigiIX14 firmware version 19.1.
B September 2019 DigiIX14 firmware version 19.8 release.
IX14 User Guide 2

Revision history—90002291
IX14 User Guide 3
Revision Date Description
C November 2019 DigiIX14 firmware version 20.2 release.
This firmware release includes the following features and
enhancements:
nRe-themed web UI with improved navigation and
functionality. New functionality includes:
lNew Dashboard overview page.
lThe ability to view local filesystem contents.
lAccess configuration settings from status pages.
lEnhanced for use on hand-held and mobile devices.
nDefault user changed from root to admin.
lIf you have a configured user named admin prior to
upgrading to 19.11.72.58, it will not be affected by the
upgrade.
lIf you do not have a configured user named admin
prior to upgrading to 19.11.72.58, an admin user
account will be created with the same credentials
and configuration settings as the root user.
lIf your root user account has been modified from the
factory default settings, it will not be affected by the
upgrade.
lIf you restore the device to factory default settings
after upgrading to 19.11.72.58, only the admin user
will exist. If you have a root user and perform a
factory default, log in with the admin user instead of
root, using the same default password printed on the
bottom of the device.
nNew network analyzer and packet capture tool.
nSIM slot prioritization and SIM slot failback.
nIPsec enhancements:
lPreferred tunnel option to configure a tunnel to be a
primary or failover tunnel.
lAbility to use the device's MAC address or serial
number as its local endpoint ID.
nDHCP hostname option to allow the device to advertise
its hostname to the DHCP server upon connection.
nReceive encrypted SMS commands from Digi Remote
Manager.
nAbility in OpenVPN to push routes in subnet mode.
nNew Edge firewall zone to prevent the device's DNS
services from being advertised on the network, while still
allowing SSH and web UI access.
nRemoved the 192.168.210.254 default IP gateway.

Revision history—90002291
IX14 User Guide 4
Revision Date Description
nSupport for sending RFC2136-compatible DNS updates to
external DNS servers.
D February 2020 DigiIX14 firmware version 20.2 release.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[e-mail]

Revision history—90002291
IX14 User Guide 5
Include the document title and part number (IX14 User Guide, 90002291 C) in the subject line of your
email.

Contents
Revision history—90002291 2
What's new in Digi IX14 version 20.2
Digi IX14 hardware reference
IX14 features and specifications 14
IX14 front view 14
IX14 back view 14
IX14 power supply requirements 15
IX14 LEDs 15
Digi IX14 serial connector pinout 16
IX14 accessory kits 17
IX14 antennas 17
IX14 quick start
Quick start with Digi Remote Manager mobile app
Step 1: What's in the box 19
Step 2: Gather accessories 19
Step 3: Connect hardware 20
Step 4: Quick setup using the Digi Remote Manager mobile app 21
Next steps 21
Quick start with IX14 local WebUI
Step 1: What's in the box 22
Step 2: Gather accessories 22
Step 3: Connect hardware 23
Step 4: Sign up for Digi Remote Manager 24
Step 5: Access the IX14 local web interface 24
Step 6: Configure cellular connection using the web interface 25
Step 7: Add your IX14 to your Digi Remote Manager account 25
Next steps 26
IX14 User Guide 6

IX14 User Guide 7
Reset the device to factory defaults
Hardware setup
Install SIM cards 28
Attach and position antennas 28
Connect the WAN/ETH1 port 29
Connect the serial port 29
Power on the IX14 29
Configuration and management
Review IX14 default settings 30
Reset default password for the default admin user 30
Configuration methods 32
Using Digi Remote Manager 32
Access Digi Remote Manager 33
Using the web interface 33
Log out of the web interface 34
Using the command line 35
Access the command line interface 35
Log in to the command line interface 35
Exit the command line interface 36
Initial configuration
Configure cellular modem APNs 38
Change the default LAN subnet 41
Change the LAN address type 42
Configure SIM PIN 44
Configure system settings 44
Enable or disable Bluetooth service 52
User authentication
IX14 user authentication 56
User authentication methods 56
Add a new authentication method 58
Delete an authentication method 60
Rearrange the position of authentication methods 62
Authentication groups 64
Change the access rights for a predefined group 66
Add an authentication group 68
Delete an authentication group 72
Local users 75
Change a local user's password 76
Configure a local user 78
Delete a local user 85
Terminal Access Controller Access-Control System Plus (TACACS+) 88
TACACS+ user configuration 89
TACACS+ server failover and fallback to local authentication 90
Configure your IX14 device to use a TACACS+ server 90

IX14 User Guide 8
Remote Authentication Dial-In User Service (RADIUS) 95
RADIUS user configuration 96
RADIUS server failover and fallback to local configuration 96
Configure your IX14 device to use a RADIUS server 97
Disable shell access 101
Set the idle timeout for IX14 users 103
Example user configuration 106
Example 1: Administrator user with local authentication 106
Example 2: RADIUS, TACACS+, and local authentication for one user 108
Firewall
Firewall configuration 116
Create a custom firewall zone 116
Configure the firewall zone for a network interface 118
Delete a custom firewall zone 120
Port forwarding rules 122
Configure port forwarding 122
Delete a port forwarding rule 127
Packet filtering 130
Configure packet filtering 130
Enable or disable a packet filtering rule 134
Delete a packet filtering rule 136
Configure custom firewall rules 138
Configure Quality of Service options 140
System administration
Review device status 152
Configure system information 153
Update system firmware 155
Manage firmware updates using Digi Remote Manager 155
Certificate management for firmware images 155
Update cellular module firmware 157
Reboot your IX14 device 158
Reboot your device immediately 159
Schedule reboots of your device 159
Reset the device to factory defaults 161
Configuration files 165
Save configuration changes 165
Save configuration to a file 166
Restore the device configuration 168
Schedule system maintenance tasks 170
Create a Virtual LAN (VLAN) route 177
Serial port 180
Configure the serial port 180
Show serial status and statistics 184
Services
Allow remote access for web administration and SSH 186
Configure the web administration service 190
Configure SSHaccess 198

IX14 User Guide 9
Use SSH with key authentication 204
Generating SSH key pairs 204
Configure telnet access 207
Configure DNS 212
Simple Network Management Protocol (SNMP) 219
SNMP Security 219
Configure Simple Network Management Protocol (SNMP) 219
Download MIBs 224
System time 225
Configure the system time 225
Network Time Protocol 228
Configure the device as an NTP server 228
Configure a multicast route 235
Enable service discovery (mDNS) 237
Use the iPerf service 241
Example performance test using Iperf3 245
Applications
Configure applications to run automatically 248
Task one: Upload the application 248
Task two: Configure the application to run automatically 250
Run a Python application at the shell prompt 254
Start an interactive Python session 256
Digidevice module 258
Use digidevice.cli to execute CLI commands 259
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 260
Use digidevice.config for device configuration 262
Use Python to respond to Digi Remote Manager SCI requests 264
Use digidevice runtime to access the runtime database 273
Using Python to upload the device name to Digi Remote Manager 275
Central management with Digi Remote Manager
Digi Remote Manager support 279
Configure Digi Remote Manager 279
Collect device health data and set the sample interval 283
Log into Digi Remote Manager 285
Use Digi Remote Manager to view and manage your device 286
Add a device to Digi Remote Manager 287
View Digi Remote Manager connection status 287
Use the Digi Remote Manager mobile app 288
Configure multiple devices using profiles 289
Learn more 289
Monitoring
intelliFlow 291
Enable intelliFlow 291
Use intelliFlow to display average CPU and RAMusage 294
Use intelliFlow to display top data usage information 295
Use intelliFlow to display data usage by host over time 297
Configure NetFlow Probe 298

IX14 User Guide 10
Virtual Private Networks (VPN)
IPsec 304
IPsec data protection 304
IPsec modes 304
Internet Key Exchange (IKE) settings 304
Authentication 305
Configure an IPsec tunnel 305
Configure IPsec failover 327
Configure SureLink active recovery for IPsec 328
Show IPsec status and statistics 335
OpenVPN 337
Configure an OpenVPN server 338
Configure an OpenVPN Authentication Group and User 347
Configure an OpenVPN client by using an .ovpn file 352
Configure an OpenVPN client without using an .ovpn file 355
Configure active recovery for OpenVPN 360
Show OpenVPN server status and statistics 367
Show OpenVPN client status and statistics 368
Generic Routing Encapsulation (GRE) 369
Configuring a GREtunnel 369
Show GRE tunnels 375
Example: GRE tunnel over an IPSec tunnel 376
Diagnostics
Generate a support report 394
View system event logs 396
View System Logs 396
View Event Logs 399
Configure syslog servers 401
Configure options for the event and system logs 403
Analyze network traffic 408
Configure packet capture for the network analyzer 409
Example filters for capturing data traffic 413
Capture packets from the command line 414
Stop capturing packets 415
Show captured traffic data 416
Save captured data traffic to a file 417
Download captured data to your PC 418
Clear captured data 419
Use the ping command to troubleshoot network connections 421
Ping to check internet connection 421
Stop ping commands 421
Use the traceroute command to diagnose IProuting problems 421
Routing
IP routing 424
Configure a static route 425
Delete a static route 428
Policy-based routing 430
Configure a routing policy 431
Routing services 438

IX14 User Guide 11
Configure routing services 439
Show the routing table 442
Dynamic DNS 444
Configure dynamic DNS 444
Virtual Router Redundancy Protocol (VRRP) 450
Configure VRRP 450
Show VRRP status and statistics 454
File system
The IX14 local file system 457
Display directory contents 457
Create a directory 458
Display file contents 459
Copy a file or directory 459
Move or rename a file or directory 460
Delete a file or directory 461
Upload and download files 462
Upload and download files by using the WebUI 462
Upload and download files by using the Secure Copy command 463
Upload and download files using SFTP 464
Digi IX14 regulatory and safety statements
RF exposure statement 467
Federal Communication (FCC) Part 15 Class B 467
Radio Frequency Interference (RFI) (FCC 15.105) 467
European Community - CE Mark Declaration of Conformity (DoC) 467
CE mark (Europe) 467
Maximum transmit power for radio frequencies 469
Innovation, Science, and Economic Development Canada (IC) certifications 469
RoHS compliance statement 470
Safety statements 470
Special safety notes for wireless routers 471
Product disposal instructions 472
Command line interface
Access the command line interface 475
Log in to the command line interface 475
Exit the command line interface 476
Execute a command from the web interface 476
Display help for commands and parameters 477
The help command 477
The question mark (?) command 477
Display help for individual commands 478
Use the Tab key or the space bar to display abbreviated help 479
Auto-complete commands and parameters 479
Available commands 480
Use the scp command 481
Display status and statistics using the show command 482
show config 482
show system 483

IX14 User Guide 12
show network 483
Device configuration using the command line interface 484
Execute configuration commands at the root Admin CLI prompt 484
Display help for the config command from the root Admin CLI prompt 484
Configuration mode 486
Enable configuration mode 486
Enter configuration commands in configuration mode 486
Save changes and exit configuration mode 487
Exit configuration mode without saving changes 487
Configuration actions 487
Display command line help in configuration mode 488
Move within the configuration schema 491
Manage elements in lists 491
The revert command 494
Enter strings in configuration commands 495
Example: Create a new user by using the command line 496
Command line reference 498
analyzer 499
cp 501
help 502
ls 503
mkdir 504
modem 505
more 510
mv 511
ping 512
reboot 513
rm 514
scp 515
show 516
system 524
traceroute 526
update 529

What's new in Digi IX14 version 20.2
DigiIX14 firmware version 20.2 release.
IX14 User Guide 13

Digi IX14 hardware reference
IX14 features and specifications
IX14 is a compact LTE CAT1 machine-to-machine (M2M) router suitable for a broad range of
applications in rugged industrial environments. Key features include:
nIndustrial grade components (operating temperatures from -29° F to +165° F/-34° C to +74° C)
nLTE Category 1 cellular network speed up to 10 Mbps
nLAN speed 10/100 BaseT
See IX14 specifications for a detailed list of IX14 hardware specifications.
IX14 front view
Connector/port Description
SIM door See Install SIM cards.
Reset button See Reset the device to factory defaults
LEDs See IX14 LEDs.
IX14 back view
IX14 User Guide 14

Digi IX14 hardware reference IX14 power supply requirements
IX14 User Guide 15
Port/connector Description
WAN/ETH1 See Connect the WAN/ETH1 port.
SERIAL1 See Connect the serial port and Configure the serial port.
Power See Power on the IX14.
WWAN1-1
WWAN1-2
See Attach and position antennas.
IX14 power supply requirements
IX14 is intended to be powered by a certified power supply with output rated at either 12 VDC/0.75 A
or 24 c󴐎󱞡󲏊󱳔󲇉i󱣓󲃉t󱣎󲋘󱞡󱓊󲃚󴳵󳦫󳓵󴏗Aor

Digi IX14 hardware reference Digi IX14 serial connector pinout
IX14 User Guide 16
Solid light green
Good signal (-75 dBm to -64 dBm)
Solid green
Excellent signal. (-63 dBm to -51 dBm)
WWAN service Off
No cellular service
Flashing yellow
Attempting to make a cellular connection
Solid yellow
Connected to 2G or 3G
Solid green
Connected to 4G
WAN/ETH1 port Solid yellow
100 Mbps connection; Off for no connection
Solid green
Valid link detected; Flashing for Ethernet activity
Digi IX14 serial connector pinout
The IX14 is a DTE device. The pinout for the DB9 serial connector is as follows:
Signal name RS232 signal
DTE signal
direction DB9 pin number
Transmit Data TxD In 3
Receive Data RxD Out 2
Ready To Send RTS In 7
Clear to Send CTS Out 8
Data Set Ready DSR Out 6
Ground GND N/A 5
Data Carrier Detect DCD Out 1
Data Terminal Ready DTR In 4
Ring Indicate RI Out 9

Digi IX14 hardware reference IX14 accessory kits
IX14 User Guide 17
IX14 accessory kits
Digi offers the following IX14 accessories and accessory kits:
Digi part number Description
76002078 Power supply: Standard temp AC/DC power
76002079 Power supply: Extended temp AC/DC power supply
76002080 Accessory kit
Standard temp AC/DC power supply
Ethernet cable
Cellular antennas (2)
76002081 Accessory kit:
Extended temp AC/DC power supply
Ethernet cable
Cellular antennas (2)
See IX14 product page and click Part numbers and accessories for details.
IX14 antennas
IX14 obtained complete certification by using the antenna described here. Use an antenna that
matches these specifications to maintain the product certification. You can use antennas of the same
type but operating with a lower gain.
Attribute Property
Frequency Range 699 MHz to 2690 MHz
Impedance 50 Ohm
VSWR ≤3:1
Gain 3 dBi (0 dBi at 900 MHz)
Polarization Linear
Admitted Power > 24 dBm

IX14 quick start
Congratulations on your IX14 purchase. Begin by selecting how you want to get started.
nQuick start with Digi Remote Manager mobile app
If you have a smart phone or tablet, use the Digi Remote Manager mobile app to quickly set up
your Digi IX14. Go to Quick start with Digi Remote Manager mobile app.
nQuick start with IX14 local WebUI
If you do not have a smart phone or tablet, access the IX14 local WebUI to manually set up your
IX14. Go to Quick start with IX14 local WebUI.
IX14 User Guide 18

Quick start with Digi Remote Manager mobile app
The following steps guide you through IX14 setup using the Digi Remote Manager mobile app.
Note If you do not have a smart phone or tablet, access the IX14 local WebUI to manually set up your
IX14. Go to Quick start with IX14 local WebUI.
Step 1: What's in the box
When you open the IX14 package, look for the following:
nDigi IX14 device
The Digi IX14 has a product label on the bottom of the device. The label includes product
identification information and the default password assigned to the device.
nWelcome card
Provides a link to this Quick start.
nDigi IX14 label
Printed copy of the product label on the bottom of your device. You can affix this label to the
top or side of the device such that you can access the label after the device is mounted or store
the label in a safe place for future reference.
Note A subscription to Digi Remote Manager is bundled with your IX14 purchase. See Digi Remote
Manager product page to learn about Digi Remote Manager features.
Step 2: Gather accessories
Note Digi offers several IX14 accessory kits so you can purchase exactly what you need to support
your IX14. See IX14 accessory kits for details or go to IX14 support.
Here's the list of accessories used in this Quick start:
Antennas
Use antennas provided by a Digi accessory kit or use alternate antennas that
comply with the IX14 antenna requirements.
IX14 User Guide 19

Quick start with Digi Remote Manager mobile app Step 3: Connect hardware
IX14 User Guide 20
Phillips-head screwdriver
Use a #1 Phillips-head screwdriver to remove and replace the SIM door when
installing SIM cards.
Power supply
Use a power supply provided by a Digi accessory kit or use an alternate power
supply that complies with the power supply requirements.
SIM card(s)
Acquire SIM cards as needed. Note the carrier, network APN (Access Point
Name), and SIM pin (if any) for each card.
Laptop or personal computer
Use an Ethernet cable to connect the IX14 WAN/ETH1 port to a laptop or PC to
access the local web interface via a browser.
Step 3: Connect hardware
a. Install SIM card(s). See Install SIM cards.
b. Attach antenna(s). See Attach and position antennas.
c. Power on the IX14 by connecting a DC power source. See IX14 power supply requirements for
power supply requirements.
d. Power LED is solid blue as the device prepares to boot up.
e. Power LED flashes blue as the device boots up.