Digi IX20-WAG4 User manual

IX20
User Guide
Firmware version 21.8

Revision history—90002381
IX20 User Guide 2

Revision Date Description
C September 2020 Release of Digi IX20 firmware version 20.8:
nSupport for NEMO/DMNR virtual private networks.
nSupport for serial Modbus Gateway.
nSupport for Ethernet network bonding.
nSupport for VRRP+, an extension to the VRRP standard
that uses network probing to monitor connections
through VRRP-enabled devices.
nCloud service enhancements:
lReduced data usage for reporting health metrics to
Digi Remote Manager.
Added Monitoring >Device Health >Only report
changed values to Digi Remote Manager option
to control sending metrics to Digi Remote Manager
on the basis of whether the values have changed
since they were last reported.
lAdded Monitoring >Device Health >Data point
tuning configuration options to fine tune what
datapoints are uploaded as health metrics to Digi
Remote Manager.
lAdded the ability to select Digi aView as the cloud
service.
nAdded the ability to duplicate firmware to copy the
active firmware to the secondary firmware partition.
nMoved the update firmware CLI command to system
firmware update.
nAdded new Authoritative option under TACACS+,
RADIUS, and LDAP user authentication methods to
prevent falling back to additional authentication
methods.
nCisco Umbrella content filtering.
nWi-Fi enhancements:
lAdded new options under Network >Wi-Fi to
control Tx Power of the Wi-Fi module.
lAdded support for multiple RADIUS servers for
WPA2 Enterprise.
nAdded options under System >Log >Server list to
allow users to specify the TCP/UDP protocol and port of
the remote syslog server.
nSerial port enhancements:
lAdded configuration option under Serial >TCP
connection to specify encrypted connection types.
lAdded configuration option under Serial >
IX20 User Guide 3

Revision Date Description
TCP/Telnet/SSH connections to enable/disable
TCP keep-alive messages and nodelay.
nEnhanced SMS support:
lAdded System >Scheduled tasks >Allow
scheduled scripts parameter to allow custom
python scripts to handle sending/receiving SMS
messages
lAdded the digidevice.sms python module for
sending/receiving SMS messages in a custom
python script.
nMQTT client support via Paho Python module.
nAdded a random unprivileged port for performing ntp
time syncs if standard port 123 fails.
nScripting enhancements:
lAdded a Status >Scripts page in the web UI and
show scripts command to the Admin CLI to view
custom scripts and applications configured in the
device, along with their status.
Added the system scripts stop command to the
Admin CLI to stop a custom script or application.
IX20 User Guide 4

Revision Date Description
D December 2020 Release of Digi IX20 firmware version 20.11:
nModem firmware update commands added to the
Admin CLI.
nNetwork bridging enhanced to use the MAC address of
the first active device listed in Network >Bridges >
Bridge name >Devices as the MAC address for the
bridged interface.
nIPsec enhancements:
lSupport for full IPsec IPv6 tunnels: IPv6-over-IPv4,
or IPv4-over-IPv6 tunnels.
lIPsec tunnels are now treated like network
interfaces, which allows tunnels to be selected for
routing and routing priority and access control lists.
lIPSec tunnels now wait for Surelink tests, if
configured, to pass prior to initiating outbound
tunnels.
nModbus gateway enhancements:
lStatus >Modbus gateway page in the Web UI
displays information about modbus clients and
servers connected to the gateway.
lshow modbus command displays information
about the the Modbus gateway service.
nSerial port enhancements:
lSerial port logging options added for starting,
stopping, and viewing serial port activity.
lOption added to the System >Serial configuration
page to copy serial port settings.
nPolicy-based routing enhancements:
lAdded a DSCP option to match the routing rule by
the type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-
based routes to the device's active default route.
nPython pip support for installing external modules and
libraries.
nService >Location added to enable location services.
Requires either GPS from the cellular modem, or an
external GNSS module connected via serial to the
device.
nLink speed and duplex options added to Ethernet port
configuration.
nssh and telnet commands added to Admin CLI.
IX20 User Guide 5

Revision Date Description
nServices >Ping responder allows you to control the
interfaces and firewall zones on which the DAL device
will respond to ICMP requests.
nEnhanced policy-based routing:
lAdded a DSCP option to match the routing rule by
the type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-
based routes to the device's active default route.
nAdded a link to User Guide under the User menu in the
Web UI.
IX20 User Guide 6

Revision Date Description
EMarch 2021 Release of Digi IX20 firmware version 21.2:
nLocation services added, including:
lThe ability to define a static latitude and longitude
as a location for the device.
lGNSSsupport through the cellular modem (requires
the CM07 COREmodem).
lReporting location information as health metrics to
Digi Remote Manager.
lGeo-fencing: Allow you to define one or more
circular or polygonal geo-fence areas and then
perform a set of actions when the device enters or
leaves that area.
lPython support for location information through
the digidevice.location python module.
nCellular modem carrier scanning and locking:
lNew modem scan CLI command for listing available
carriers for the current modem and SIM.
lManual carrier selection option to allow you to lock
the SIM to a specific carrier.
nEnhanced serial support:
lCertificate management control for TCP and
autoconnect serial port setups.
lAutoconnect.
nEnhanced Wi-Fi support:
lSupport 5GHz DFS Wi-Fi channels in client mode.
Only available for devices with 5GHz Wi-Fi radio
support.
lAdded 5GHz frequencies to the list of channels that
can be scanned for client-mode Wi-Fi background
scanning.
nLocal RESTAPI for automated configuration of the
device.
nSupport for remote CLI commands through Digi Remote
Manager.
nSupport for automatically checking for device and
modem firmware updates.
IX20 User Guide 7

Revision Date Description
FJune 2021 Release of Digi IX20 firmware version 21.5:
nWi-Fi enhancements:
lAdded support for WPA3 Wi-Fi encryption:
oWPA2/WPA3 Personal
oWPA3 Enhanced Open
oWPA3 Personal
lAdded support for WPA and WPA/WPA2 mised
mode with TKIP.
nCellular enhancements:
lAdded support for modem firmware update to the
Admin CLI.
lAdded support for over-the-air (OTA) modem
firmware update to check, list, and update to new
modem firmware from the Digi firmware server.
lAdded the ability to scan for cellular carriers on the
Modem status page and the ability select a
particular PLMN/network to use.
nAdded commands for over-the-air (OTA) system
firmware update to check, list, and update to new
firmware from the Digi firmware server.
nAdded a show dns command to the Admin CLI to
display active DNS servers and their associated
interface.
nAdded a show ntp command to the Admin CLI to
display the status of the NTP service.
nExpanded Port forwarding option to support a range of
ports, including one-to-one and many-to-one port
mappings.
nAdded options to control packet filtering for the
network analyzer.
nVPN enhancements:
lIPsec enhancements:
oAdded support for multiple remote endpoints
and the ability to use round-robin or to randomly
select an endpoint to establish a tunnel to.
oAdded configurable options to control IKE
transmit interval, tunnel retry interval, and
tunnel retry timeout.
lLDAP enhancements:
oAdded a login attribute to provide the ability to
match the attribute set on an Active Directory
IX20 User Guide 8

Revision Date Description
server.
nSureLink enhancements
lAdded the ability to configure how many times a
SureLink test must run, and must fail, before the
interface is restarted or the device is rebooted.
lAdded the ability to configure how many times a
SureLink test must pass before an interface is
considered to be working.
lAdded the ability to test another interface's status.
nSNMPv2 supported added.
nSimple Certificate Enrollment Protocol (SCEP)
supported added.
nUpdated python to version 3.6.13.
nAdded the default digi.device local domain.
IX20 User Guide 9

Revision Date Description
GSeptember 2021 Release of Digi IX20 firmware version 21.8:
nAdded LXC container support for running localized
containers on the device.
nAdded support for maintenance windows triggers to
control when a device is available for Digi Remote
Manager maintenance activity.
nWi-Fi enhancements:
lRemoved requirement to set a Wi-Fi SSID and
passphrase to initially configure the device.
lAdded support for 40Mhz channel bandwidth on
2.4GHz.
nVPNenhancements:
lAdded support for L2TPv3 tunneling.
lNew option to enable, disable, or force IPsec IKE
fragmentation.
nImproved options for creating a custom default
configuration:
lsystem backup CLI commands for generating a
custom default config file based on the active
config settings on the device.
lNew section on the File System page of the Web UI
for loading a configuration backup file as the
custom default config
lNew persistent files folder accessible through Digi
Remote Manager where users can upload a
configuration backup.
lAdded ability to clear a custom default
configuration by performing by pressing the ERASE
button, waiting for the device to reboot, then
pressing the ERASE again.
nAdded ability to override or edit SSH server options.
nAdded options for filtering Wi-Fi scanner results based
off of MAC addresses or RSSI signal strength.
nAdded options for sending local device event logs to
Digi Remote Manager.
nNew system time CLI command for manually setting
the local date and time.
nNew firewall packet filter options to allow/deny packets
based off of a range of source or destination MAC
addresses.
nNew monitoring metrics upload CLI command to send
on-demand health metrics to Digi Remote Manager.
IX20 User Guide 10