Digi IX20 User manual

IX20
User Guide
Firmwareversion 23.9

Revision history—90002381
Revision Date Description
K June2022 Releaseof Digi IX20firmwareversion 22.5:
n5Genhancements:
lAdded 5Gslicesupport for configuringtheslice
typefor the5Gmodems.
nAdded WANBondingasan add-on featureviaDigi
RemoteManager for bondingmultipleoutbound
Internet connectionstogether for increased maximum
throughput or dataredundancy.
nSurelink enhancements:
lEnabled Surelink reset_modem action by default
on cellular interfacesand set fail count to three.
lUpdated Surelink reset_modem action to
automatically power cycle the modem in the event
that themodem failsto reset.
nSerial port support enhancements:
lAdded serial PPPdial-in modeto handle AT-based
connection requestsfrom adeviceconnected to a
serial port and provide IPv4networkingto the
device.
nAdded the ability to configure CPUperformance and
power consumption.
nAdded cellular APNand cellular connection duration as
datapointssent to Digi RemoteManager.
nWi-Fi scanner enhancements:
lAdded support for sendingan HTTPor TCPstream
of resultsfrom theWi-Fi scanner to oneor more
remoteservers.
nSCEPenhancements:
lNew SCEPclient settingsand underlying
functionality to support connectingto additional
SCEPservers.
lAdded show scep Admin CLI command to show
the syncstatus, expiration dates, and additional
detailsof any configured SCEPclients.
nVPNenhancements:
lIncludethehostnameof thedevicein theclient
IX20User Guide 2

Revision Date Description
.ovpn filelisted on theStatus→OpenVPN→Servers
pagein theweb UI.
nLocation servicesenhancements:
lNew settingsto control theNMEAmessagecontent
that thedevicessendswhen thereisno valid fix
from any of theconfigured location sources.
L September 2022 Releaseof Digi IX20firmwareversion 22.8:
nCellular modem enhancements:
lAdded modem ota download and system
firmware ota download commandsfor
downloadingcellular modem and devicefirmware.
lAdded cellular carrier nameand PLMNIDto the
ModemsStatuspagein theWeb UI.
lEnhanced accesstechnology optionsto set the
modem to 5G-only, includingsettingto 5GSA-only,
NSA-only, or both NSA/SA-modes.
nVPNenhancements:
lAdded Dynamic Multipoint VPN (DMVPN) support.
lAdded aStrict routingsettingto IPsec tunnelsthat
routespacketsthrough thetunnel if both the
sourceIPand destination IPmatch theIPsec
tunnel’spolicies. ThismakesIPsec behavelikea
policy-based VPN, rather than aroute-based VPN.
lAdded theMicrosoft version of theChallenge-
Handshake Authentication Protocol (MS-CHAPv2) as
an option for L2TPnetwork serversauthentication
methods.
nContainer support:
lContainer support now a premium feature, enabled
through Digi RemoteManager.
lAdded new metricsfor sendingcontainer status,
name, CPUload, and disk usageasdatapointsto
DigiRM.
nAdded support for runninga PPPoEserver when an
interfaceisin IPpassthrough mode.
nAdded ability to specify DFSchannelsfor Wi-Fi client
background scanningwhen DFSclient support is
enabled.
nAdded ashow eth Admin CLI command to show the
link statusof each Ethernet port.
nAdded apoweroff CLI command to perform a graceful
shutdown of thedevicewithout automatically
IX20User Guide 3

Revision Date Description
rebooting.
nAdded theability to turn off all LEDson thedevice to
reducepower consumption.
M December 2022 Releaseof Digi IX20firmwareversion 22.11:
nUpdated theLinuxkernel to version 5.19.
nTheintelliFlow featurenow integrateswith Digi Remote
Manager to provide aggregated insightsand analytics
for all Digi devicesin your environment.
nAdded an MQTT broker service, includingsupport for:
lMultiple MQTTclientswith uniquetopicsand
authentication credentials.
lPre-shared key encryption with multiple
configurablekeys.
lPattern filteringfor topic accesscontrol.
nAdded FIPSmode, to provideFederal Information
Processing Standards(FIPS) 140-2compliance.
nAdded support for Next-hop routingprotocol (NHRP).
nAdded support for mGRE tunnels.
nAdded support for ICMPredirect messages.
nAdded a pollinginterval to control how often the
cellular modem ispolled for signal strength and other
status.
nNew commands: tail and grep.
nAdd Timeout option to modem Carrier Scan window
in theWeb UI.
nAdded advanced watchdogto:
lMonitor critical servicesand reboot thedeviceif
thoseservicesfail.
lMonitor memory usage and logerrorsor reboot the
device based on current memory usage.
nAdded theability to haveserial port datawritten to the
system log.
lRemoved optionsin thelocal web UI and Admin CLI
for manually starting, stopping, and clearing serial
logs. Theseactionsare now controlled under the
dataloggingconfiguration settings.
N May 2023 Releaseof Digi IX20firmwareversion 23.3:
nSurelink:
lRedesigned Surelink configuration settings.
IX20User Guide 4

Revision Date Description
lAdded show surelink state Admin CLI command
to display the overall pass/fail statusof enabled
Surelink tests.
nWANbonding
lAdded optionsfor WANbondingconfiguration to
set modesfor thebonded tunnel and for each
bonded interface.
lAdded new show wan-bondingAdmin CLI
command.
nNew configuration settingsfor LXCcontainers:
lStart on boot to configurethecontainer to start
when thesystem boots.
lRestart timeout to configurethecontainer to
restart if it stops.
lOptional parametersto includeoptional
parametersfor thecontainer.
lMounted directoriesto setup shared directories
between thehost filesystem and thecontainer.
nAdded aAT&T LWM2M support settingto enableor
disableAT&Tlightweight M2Mon cellular modems.
nVPN:
lDMVPNphase1spokesupport with NHRPor mGRE,
including compatibility with Cisco DMVPNhubs.
lAdded support for SHA2 ciphersfor IKEv2IPsec
tunnels.
nDisabled mDNSby default for improved cellular
performance.
nIf thedevicehasaconfigured System >Name, it isnow
displayed on theDashboard.
P July 2023 Releaseof DigiIX20firmwareversion 23.6:
nSerial port options:
lFor PPP Dial-in mode, added the Default Route
option to control whether adefault routegets
added for thePPPinterface.
lDocumented thenew Modem emulator mode,
which allowsserial portsto act asadial-up modem
emulator for handlingincomingATdial-ins.
nAdvanced Watchdogoptions:
lAdded System >Advanced Watchdog optionsto
all devices.
nDigi RemoteManager support:
IX20User Guide 5

Revision Date Description
lEach timeadeviceconnectsto Digi Remote
Manager after the deviceboots(or re-boots), the
device now immediately uploadsall health metrics.
nVPN:
lAdded new Enable open routingconfiguration
setting (VPN>IP tunnels) to enablepackets
destined for an addresswhich isnot explicitly in
theroutingtableto exit theIPtunnel.
nNetworking:
lAdded new TCP retries2 configuration setting
(Network >Advanced) to control thenumber of
timesan unacknowledged TCPdatapacket will be
retransmitted beforetheconnection isconsidered
lost.
R October 2023 Releaseof Digi IX20firmwareversion 23.9:
nRegister adeviceto DRM:
lAdded a link to theDashboard of thelocal web UI
to register and add thedeviceto Digi Remote
Manager.
nUpdated Dashboard:
lUpdated thelayout of theDashboard pageof the
web UI to combinethenetwork interfaceand
cellular modem detailsinto a singleNetwork
Activity panel.
nHotspot improvement:
lImproved support for integration with
HotspotSystems, including:
oPSD2SessGarden
oLogin/Logout URL
oConfigurableremotewebserver FQDN
nPrimary Responder:
lAdded Primary Responder modesetting to lock
down thedevice to comply with AT&TFirstNet and
Verizon Response.
nDomain allow list:
lAdded a Domain allow list featureto control what
domainsareaccessiblethrough theDigi device.
nFallback:
lAdded a fallback server settingto control which
DNSserver isused asthefallback in theevent that
IX20User Guide 6

Revision Date Description
no configured or DHCP-obtained DNSserversare
available.
nMACsectunnel:
lAdded information about addingaMACsec tunnel.
Trademarksand copyright
Digi, Digi International, and theDigi logo aretrademarksor registered trademarksin theUnited States
and other countriesworldwide. All other trademarksmentioned in thisdocument aretheproperty of
their respectiveowners.
© 2023 Digi International Inc. All rightsreserved.
Disclaimers
Information in thisdocument issubject to changewithout noticeand doesnot represent a
commitment on thepart of Digi International. Digi providesthisdocument “asis,” without warranty of
any kind, expressed or implied, including, but not limited to, theimplied warrantiesof fitnessor
merchantability for a particular purpose. Digi may makeimprovements and/or changesin thismanual
or in theproduct(s) and/or theprogram(s) described in thismanual at any time.
Warranty
To view product warranty information, go to thefollowing website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
 Product nameand model
 Product serial number (s)
 Firmwareversion
 Operatingsystem/browser (if applicable)
 Logs(from timeof reported issue)
 Trace(if possible)
 Description of issue
 Stepsto reproduce
Contact Digi technical support: Digi offersmultiple technical support plansand service packages.
Contact usat +1952.912.3444or visit usat www.digi.com/support.
Feedback
To provide feedback on thisdocument, email your commentsto
[e-mail]
IX20User Guide 7

Includethedocument title and part number (IX20 User Guide, 90002381N) in thesubject line of your
email.
IX20User Guide 8

Contents
What'snew in Digi IX20version 23.9
Digi IX20Quick Start
Step 1: Connect your device 23
Apply Dielectric Greaseover SIM Contacts 24
Step 2: Connect DCpower 26
Step 3: Set up accessto Digi Remote Manager 26
Step 4: Register your device 26
Step 5: Complete setup 26
Step 6: Configure cellular APN 27
Digi IX20hardwarereference
Digi IX20featuresand specifications 28
IX20accessories 28
IX20front view 28
IX20LEDs 29
Power 30
INT 30
Wi-Fi Service(IX20Wmodel only) 30
SIM1 31
SIM2 31
LTE 31
Signal quality indicators 32
Ethernet Link and Activity 32
Signal quality barsexplained 33
IX20 power supply requirements 34
Digi IX20serial connector pinout 34
Configuration for extremethermal conditions 34
QRcodedefinition 36
Hardwaresetup
Install SIMcardsin thePlug-in LTEmodem 39
Apply Dielectric Greaseover SIM Contacts 40
Tipsfor improvingcellular signal strength 40
Connect data cables 41
Mount theIX20device 41
Attach to a mounting surface by using the mounting tabs 41
IX20User Guide 9

IX20User Guide 10
Attach to DINrail with clip 41
Attach to DINrail with bracket 42
Firmwareconfiguration
Review IX20default settings 45
Local WebUI 45
Digi RemoteManager 45
Default interfaceconfiguration 45
Other default configuration settings 46
Primary Responder mode 47
Differencesbetween standard firmware operation and Primary Responder mode 47
Enable Primary Responder mode 47
Changethedefault password for theadmin user 49
Change the default SSIDand pre-shared key for thepreconfigured Wi-Fi accesspoint 51
Configuration methods 53
UsingDigi Remote Manager 53
Usingthelocal web interface 54
Logout of theweb interface 55
Usethelocal REST API to configuretheIX20device 55
UsetheGET method to return deviceconfiguration information 55
Usethe POSTmethod to modify device configuration parametersand list arrays 57
UsetheDELETEmethod to removeitemsfrom a list array 58
Usingthecommand line 60
Accessthecommand lineinterface 60
Login to thecommand lineinterface 60
Exit thecommand lineinterface 61
Central management
Digi RemoteManager support 63
Certificate-based enhanced security 63
Configureyour devicefor Digi RemoteManager support 63
Collect devicehealth dataand set thesampleinterval 70
Enable event logupload to Digi RemoteManager 73
Reach Digi RemoteManager on aprivatenetwork 75
Pinholemethod 75
Proxy server method 75
VPNTunnel method 76
Loginto Digi RemoteManager 76
UseDigi Remote Manager to view and manageyour device 77
Add a deviceto RemoteManager 77
Add a deviceto RemoteManager usinginformation from thelabel 77
Add adeviceto RemoteManager usingyour RemoteManager login credentials 78
Configuremultiple IX20 devices by using Digi Remote Manager configurations 79
View Digi Remote Manager connection status 80
Learn more 81
Interfaces
WideArea Networks(WANs) 83
Wide Area Networks(WANs) and WirelessWide AreaNetworks(WWANs) 84
ConfigureWAN/WWANpriority and default route metrics 84

IX20User Guide 11
WAN/WWANfailover 87
ConfigureSureLink activerecovery to detect WAN/WWANfailures 88
Configurethedeviceto reboot when a failure isdetected 105
DisableSureLink 118
Example: Usea ping test for WANfailover from Ethernet to cellular 127
UsingEthernet devicesin a WAN 130
Usingcellular modemsin aWirelessWAN(WWAN) 131
Configurea WideAreaNetwork (WAN) 157
Configurea WirelessWideAreaNetwork (WWAN) 165
Show WANand WWANstatusand statistics 177
Deletea WANor WWAN 178
Default outbound WAN/WWANports 180
Local AreaNetworks(LANs) 181
About Local AreaNetworks(LANs) 182
Configurea Local AreaNetwork (LAN) 182
ConfiguretheWAN/ETH1port asaLANor in a bridge 190
Changethedefault LANsubnet 199
Show LANstatusand statistics 201
Deletea LAN 202
DHCPservers 204
Default serviceslisteningon LAN ports 221
Configurean interfaceto operate in passthrough mode. 221
Virtual LANs(VLANs) 228
Create atrunked VLANroute 229
Create aVLANusingswitchport mode 231
Bridging 234
Edit thepreconfigured ETH2bridge 235
Configurea bridge 238
Show SureLink statusand statistics 241
Show SureLink State 241
Show SureLink statusfor all interfaces 242
Show SureLink statusfor a specificinterface 243
Show SureLink statusfor all IPsec tunnels 243
Show SureLink statusfor a specificIPsec tunnel 244
Show SureLink statusfor all OpenVPNclients 244
Show SureLink statusfor a specificOpenVPNclient 245
Configurea TCPconnection timeout 245
Serial port
Default serial port configuration 247
Serial modeoptions 247
View serial port information 247
Default serial port configuration 247
ConfigureLogin mode 248
ConfigureRemoteAccessmode 251
ConfigureApplication mode 268
ConfigurePPPdial-in mode 270
ConfigureUDPserial mode 277
ConfigureModem emulator mode 288
ConfigureModbusmode 291
ConfigureRealPort modeusingtheDigi Navigator 294
Installation and configuration process 294
Digi Navigator features 294
Install theDigi Navigator 295

IX20User Guide 12
ConfigureRealPort on aDigi devicefrom theDigi Navigator 296
Digi Navigator application features 298
Advanced RealPort configuration without usingtheDigi Navigator 301
WindowsOperatingSystem 301
LinuxOperatingSystem 301
Download theRealPort driver 301
ConfigureRealPort on your laptop 302
Configuretheserial port for RealPort mode 304
ConfiguretheRealPort service 307
Show serial statusand statistics 308
Review theserial port messagelog 308
Wi-Fi
Wi-Fi configuration 312
Default accesspoint SSIDand password 312
Default Wi-Fi configuration 312
ConfiguretheWi-Fi radio'schannel 314
ConfiguretheWi-Fi radio to support DFSchannelsin client mode 316
Required configuration items 316
ConfiguretheWi-Fi radio'sband and protocol 318
ConfiguretheWi-Fi radio'stransmit power 320
Configurean open Wi-Fi accesspoint 322
Configurea Wi-Fi accesspoint with personal security 328
Configurea Wi-Fi accesspoint with enterprisesecurity 335
IsolateWi-Fi clients 342
Isolateclientsconnected to thesameaccesspoint 342
Isolateclientsconnected to different accesspoints 344
Configurea Wi-Fi client and add client networks 350
Show Wi-Fi accesspoint statusand statistics 359
Show Wi-Fi client statusand statistics 361
Hotspot 363
Hotspot authentication modes 364
Hotspot DHCPserver 365
Hotspot security 365
Hotspot configuration 366
Show hotspot statusand statistics 408
Customizethehotspot login page 410
Hotspot RADIUSattributes 415
Routing
IProuting 417
Configurea static route 418
Deletea static route 421
Policy-based routing 423
Configurea routingpolicy 424
Example: Dual WANpolicy-based routing 432
Example: Domain-based routingwith dual WAN 435
Example: Route trafficto aspecific WANinterfacebased on theclient MAC address 438
Routingservices 444
Configureroutingservices 444
Show theroutingtable 447
DynamicDNS 449

IX20User Guide 13
Configuredynamic DNS 449
Virtual Router Redundancy Protocol (VRRP) 454
VRRP+ 455
ConfigureVRRP 455
ConfigureVRRP+ 459
Example: VRRP/VRRP+configuration 466
Configuredeviceone(master device) 467
Configuredevicetwo (backup device) 471
Show VRRPstatusand statistics 477
Virtual PrivateNetworks(VPN)
IPsec 481
IPsecdataprotection 481
IPsecmode 481
IPsecmodes 481
Internet Key Exchange (IKE) settings 481
Authentication 482
Configurean IPsec tunnel 482
ConfigureIPsecfailover 510
ConfigureSureLink activerecovery for IPsec 513
Show IPsecstatusand statistics 529
Debugan IPsecconfiguration 530
Configurea Simple CertificateEnrollment Protocol client 532
Example: SCEPclient configuration with Fortinet SCEPserver 539
Show SCEPclient statusand information 544
OpenVPN 546
Configurean OpenVPNserver 547
Configurean OpenVPNAuthentication Group and User 556
Configurean OpenVPNclient by using an .ovpn file 560
Configurean OpenVPNclient without usingan .ovpn file 563
ConfigureSureLink activerecovery for OpenVPN 567
Show OpenVPNserver statusand statistics 585
Show OpenVPNclient statusand statistics 586
Generic RoutingEncapsulation (GRE) 588
Configuringa GRE tunnel 588
Show GREtunnels 593
Example: GREtunnel over an IPSec tunnel 594
DynamicMultipoint VPN(DMVPN) 608
Configurea DMVPNspoke 609
L2TP 615
Configurea PPP-over-L2TPtunnel 616
L2TPwith IPsec 625
Show L2TPtunnel status 626
L2TPv3Ethernet 627
Configurean L2TPv3tunnel 628
Show L2TPV3tunnel status 632
MACsec 633
Configurea MACsec tunnel 634
NEMO 636
Configurea NEMOtunnel 637
Show NEMOstatus 642

IX20User Guide 14
Services
Allow remoteaccessfor web administration and SSH 645
Configuretheweb administration service 649
ConfigureSSH access 659
UseSSHwith key authentication 667
Generating SSH key pairs 667
Configuretelnet access 670
ConfigureDNS 675
Show DNSserver 681
WAN bonding 682
UseDigi Remote Manager to enable and configureWANbondingon multipledevices 683
ConfigureWAN bondingon your local device 686
Show WANbondingstatusand statistics 692
SimpleNetwork Management Protocol (SNMP) 694
SNMPSecurity 694
ConfigureSimpleNetwork Management Protocol (SNMP) 694
Download MIBs 699
Location information 701
Configurethelocation service 702
Enableor disablemodem GNSS support 704
Configurethedeviceto useauser-defined static location 706
Configurethedeviceto accept location messagesfrom external sources 708
Forward location information to a remotehost 713
Configuregeofencing 719
Show location information 732
Modbusgateway 733
ConfiguretheModbusgateway 734
Show Modbusgateway statusand statistics 747
System time 751
Configurethesystem time 751
Manually set thesystem dateand time 755
Network TimeProtocol 755
Configurethedeviceasan NTPserver 756
Show statusand statisticsof theNTPserver 761
Configurea multicast route 762
Ethernet network bonding 765
Enable service discovery (mDNS) 770
UsetheMQTT broker service 774
Show MQTT broker information 784
UsetheiPerf service 785
Exampleperformancetest usingiPerf3 790
Configurethepingresponder service 790
Exampleperformancetest usingiPerf3 794
Applications
Develop Python applications 797
Set up theIX20for Python development 798
Create and test aPython application 798
Python modules 802
Theuse(led) function 830
ReleasingtheLEDsto system control 831
UsePython to control thecolor of multi-colored LEDs 831

IX20User Guide 15
Example: Set theLTEconnection indicator to flashing purple 833
Set up theIX20 to automatically run your applications 841
Configurescriptsto run automatically 841
Show script information 849
Stop a script that iscurrently running 849
Start an interactivePython session 851
Run aPython application at theshell prompt 851
Configurescriptsto run manually 853
Task one: Upload theapplication 853
Task two: Configuretheapplication to run automatically 855
Start amanual script 859
User authentication
IX20user authentication 862
User authentication methods 862
Add anew authentication method 864
Deletean authentication method 866
Rearrangetheposition of authentication methods 868
Authentication groups 870
Changetheaccessrightsfor apredefined group 872
Add an authentication group 874
Deletean authentication group 879
Local users 881
Changealocal user'spassword 882
Configurea local user 884
Deletea local user 892
Terminal AccessController Access-Control System Plus(TACACS+) 894
TACACS+user configuration 895
TACACS+server failover and fallback to local authentication 896
Configureyour IX20deviceto useaTACACS+server 896
RemoteAuthentication Dial-In User Service(RADIUS) 901
RADIUSuser configuration 902
RADIUSserver failover and fallback to local configuration 902
Configureyour IX20deviceto useaRADIUSserver 903
LDAP 906
LDAPuser configuration 908
LDAPserver failover and fallback to local configuration 909
Configureyour IX20deviceto usean LDAPserver 909
Configureserial authentication 914
Disableshell access 916
Set theidletimeout for IX20 users 918
Exampleuser configuration 921
Example 1: Administrator user with local authentication 921
Example 2: RADIUS, TACACS+, and local authentication for oneuser 924
Firewall
Firewall configuration 932
Create acustom firewall zone 932
Configurethefirewall zonefor a network interface 934
Deletea custom firewall zone 936
Port forwardingrules 937
Configureport forwarding 937

IX20User Guide 16
Deletea port forwardingrule 942
Packet filtering 945
Configurepacket filtering 945
Enableor disableapacket filteringrule 949
Deletea packet filteringrule 951
Configurecustom firewall rules 953
Configurecaptiveportals 956
Deletecaptiveportals 960
ConfigureQuality of Service options 961
Web filtering 972
Configureweb filteringwith Cisco Umbrella 973
Configureweb filteringwith manual DNSservers 975
Verify your web filtering configuration 978
Show web filter serviceinformation 981
Containers
UseDigi Remote Manager to deploy and run containers 983
Usean automation to start thecontainer 986
Upload anew LXCcontainer 987
Configurea container 988
Startingand stoppingthecontainer 993
Startingthecontainer 993
Stoppingthecontainer 994
View thestatusof containers 994
Show statusof all containers 995
Show statusof aspecific container 995
Scheduleascript to run in thecontainer 996
Create acustom container 998
Create thecustom container file 999
Test thecustom container file 999
System administration
Review devicestatus 1002
Configuresystem information 1003
Updatesystem firmware 1005
ManagefirmwareupdatesusingDigi RemoteManager 1006
Certificatemanagement for firmwareimages 1006
Downgrading 1006
Dual boot behavior 1010
Updatecellular modulefirmware 1011
Updatemodem firmwareover theair (OTA) 1012
Updatemodem firmware by using alocal firmware file 1014
Reboot your IX20device 1015
Reboot your deviceimmediately 1015
Schedulerebootsof your device 1016
Erase deviceconfiguration and reset to factory defaults 1018
Custom factory default settings 1021
Locate thedevice by using the Find Me feature 1023
Configurea power profile 1024
EnableFIPSmode 1027
Configuration files 1030
Saveconfiguration changes 1030

IX20User Guide 17
Saveconfiguration to a file 1031
Restorethedeviceconfiguration 1032
Schedulesystem maintenancetasks 1035
Disabledeviceencryption 1041
Re-enable cryptography after it hasbeen disabled. 1041
Configurethespeed of your Ethernet ports 1043
Configurethesystem watchdog 1045
Monitoring
intelliFlow 1050
EnableintelliFlow 1051
Configureservicetypes 1053
Configuredomain namegroups 1055
UseintelliFlow to display averageCPUand RAM usage 1058
UseintelliFlow to display top data usage information 1059
UseintelliFlow to display data usage by host over time 1061
ConfigureNetFlow Probe 1062
Filesystem
TheIX20local filesystem 1068
Display directory contents 1068
Create adirectory 1069
Display file contents 1070
Copy afile or directory 1070
Moveor renameafileor directory 1071
Deletea fileor directory 1072
Upload and download files 1073
Upload and download filesby using theWebUI 1073
Upload and download filesby using theSecure Copy command 1074
Upload and download filesusingSFTP 1075
Diagnostics
Perform aspeedtest 1078
Generateasupport report 1078
Support report overview 1079
View system and event logs 1083
View System Logs 1083
View Event Logs 1085
Configuresyslogservers 1088
Configureoptionsfor theevent and system logs 1090
Analyzenetwork traffic 1096
Configurepacket capturefor thenetwork analyzer 1097
Examplefiltersfor capturingdatatraffic 1106
Capturepacketsfrom thecommand line 1107
Stop capturingpackets 1108
Show captured trafficdata 1109
Savecaptured data trafficto a file 1111
Download captured data to your PC 1111
Clear captured data 1113
Usethepingcommand to troubleshoot network connections 1114

IX20User Guide 18
Pingto check internet connection 1114
Stop pingcommands 1114
Usethetraceroutecommand to diagnoseIP routingproblems 1114
Digi IX20regulatory and safety statements
RFexposurestatement 1116
Federal Communication (FCC) Part 15 ClassB 1116
Radio Frequency Interference (RFI) (FCC15.105) 1116
European Community - CEMark Declaration of Conformity (DoC) 1117
IFETEL 1117
Maximum transmit power for radio frequencies 1118
Innovation, Science, and Economic Development Canada (IC) certifications 1118
RoHScompliancestatement 1119
Special safety notesfor wirelessrouters 1119
Product disposal instructions 1120
Safety warnings
English 1121
Bulgarian--български 1121
Croatian--Hrvatski 1122
French--Français 1123
Greek--Ελληνικά 1123
Hungarian--Magyar 1124
Italian--Italiano 1124
Latvian--Latvietis 1125
Lithuanian--Lietuvis 1126
Polish--Polskie 1126
Portuguese--Português 1127
Slovak--Slovák 1127
Slovenian--Esloveno 1128
Spanish--Español 1129
Digi IX20Certifications
International EMC(Electromagnetic Compatibility) and safety standards 1129
Command lineinterface
Accessthecommand lineinterface 1132
Login to thecommand lineinterface 1132
Exit thecommand lineinterface 1133
Executeacommand from theweb interface 1133
Display help for commandsand parameters 1135
Thehelp command 1135
Thequestion mark (?) command 1135
Display help for individual commands 1136
Usethe Tab key or the space bar to display abbreviated help 1137
Auto-completecommandsand parameters 1137
Availablecommands 1138
Usethescp command 1139
Display statusand statisticsusing the show command 1141

IX20User Guide 19
show config 1141
show system 1141
show network 1142
Deviceconfiguration usingthecommand lineinterface 1142
Executeconfiguration commandsat theroot Admin CLI prompt 1142
Display help for the config command from theroot Admin CLI prompt 1142
Configuration mode 1144
Enableconfiguration mode 1144
Enter configuration commandsin configuration mode 1144
Savechangesand exit configuration mode 1145
Exit configuration modewithout savingchanges 1145
Configuration actions 1145
Display command linehelp in configuration mode 1146
Movewithin theconfiguration schema 1149
Manageelementsin lists 1150
Therevert command 1152
Enter stringsin configuration commands 1154
Example: Create anew user by using thecommand line 1154
Command linereference 1157
analyzer clear 1159
analyzer save 1159
analyzer start 1159
analyzer stop 1159
cat 1160
clear dhcp-leaseip-address 1160
clear dhcp-leasemac 1160
container create 1160
container delete 1160
cp 1161
grep 1161
help 1161
ls 1162
mkdir 1163
modem at 1163
modem at-interactive 1163
modem firmwarecheck 1163
modem firmwarelist 1163
modem firmwareotacheck 1164
modem firmwareotadownload 1164
modem firmwareotalist 1164
modem firmwareotaupdate 1164
modem firmwareupdate 1165
modem pin change 1165
modem pin disable 1165
modem pin enable 1166
modem pin status 1166
modem pin unlock 1166
modem puk status 1166
modem puk unlock 1167
modem reset 1167
modem scan 1167
modem sim-slot 1167
monitoring 1168
monitoringmetricsupload 1168
more 1168

IX20User Guide 20
mv 1168
ping 1169
poweroff 1169
reboot 1169
rm 1169
scp 1171
show analyzer 1171
show arp 1171
show cloud 1171
show config 1172
show containers 1172
show dhcp-lease 1172
show dns 1172
show eth 1172
show event 1173
show hotspot 1173
show ipsec 1173
show l2tp lac 1173
show l2tp lns 1174
show l2tpeth 1174
show location 1174
show log 1174
show manufacture 1174
show modbus-gateway 1175
show modem 1175
show mqtt 1175
show nemo 1175
show network 1176
show ntp 1176
show openvpn client 1176
show openvpn server 1176
show route 1177
show scep-client 1177
show scripts 1177
show serial 1177
show surelink interface 1177
show surelink ipsec 1178
show surelink openvpn 1178
show surelink state 1178
show system 1178
show usb 1179
show version 1179
show vrrp 1179
show wan-bonding 1179
show web-filter 1179
show wifi ap 1180
show wifi client 1180
show wifi-scanner 1180
show wifi-scanner blocklist 1181
show wifi-scanner candidates 1181
show wifi-scanner log 1181
speedtest 1181
ssh 1182
system backup 1182
system disable-cryptography 1182