Digi IX20 User manual

IX20
User Guide
Firmwareversion 23.9

Revision history—90002381
Revision Date Description
K June2022 Releaseof Digi IX20firmwareversion 22.5:
n5Genhancements:
lAdded 5Gslicesupport for configuringtheslice
typefor the5Gmodems.
nAdded WANBondingasan add-on featureviaDigi
RemoteManager for bondingmultipleoutbound
Internet connectionstogether for increased maximum
throughput or dataredundancy.
nSurelink enhancements:
lEnabled Surelink reset_modem action by default
on cellular interfacesand set fail count to three.
lUpdated Surelink reset_modem action to
automatically power cycle the modem in the event
that themodem failsto reset.
nSerial port support enhancements:
lAdded serial PPPdial-in modeto handle AT-based
connection requestsfrom adeviceconnected to a
serial port and provide IPv4networkingto the
device.
nAdded the ability to configure CPUperformance and
power consumption.
nAdded cellular APNand cellular connection duration as
datapointssent to Digi RemoteManager.
nWi-Fi scanner enhancements:
lAdded support for sendingan HTTPor TCPstream
of resultsfrom theWi-Fi scanner to oneor more
remoteservers.
nSCEPenhancements:
lNew SCEPclient settingsand underlying
functionality to support connectingto additional
SCEPservers.
lAdded show scep Admin CLI command to show
the syncstatus, expiration dates, and additional
detailsof any configured SCEPclients.
nVPNenhancements:
lIncludethehostnameof thedevicein theclient
IX20User Guide 2

Revision Date Description
.ovpn filelisted on theStatus→OpenVPN→Servers
pagein theweb UI.
nLocation servicesenhancements:
lNew settingsto control theNMEAmessagecontent
that thedevicessendswhen thereisno valid fix
from any of theconfigured location sources.
L September 2022 Releaseof Digi IX20firmwareversion 22.8:
nCellular modem enhancements:
lAdded modem ota download and system
firmware ota download commandsfor
downloadingcellular modem and devicefirmware.
lAdded cellular carrier nameand PLMNIDto the
ModemsStatuspagein theWeb UI.
lEnhanced accesstechnology optionsto set the
modem to 5G-only, includingsettingto 5GSA-only,
NSA-only, or both NSA/SA-modes.
nVPNenhancements:
lAdded Dynamic Multipoint VPN (DMVPN) support.
lAdded aStrict routingsettingto IPsec tunnelsthat
routespacketsthrough thetunnel if both the
sourceIPand destination IPmatch theIPsec
tunnel’spolicies. ThismakesIPsec behavelikea
policy-based VPN, rather than aroute-based VPN.
lAdded theMicrosoft version of theChallenge-
Handshake Authentication Protocol (MS-CHAPv2) as
an option for L2TPnetwork serversauthentication
methods.
nContainer support:
lContainer support now a premium feature, enabled
through Digi RemoteManager.
lAdded new metricsfor sendingcontainer status,
name, CPUload, and disk usageasdatapointsto
DigiRM.
nAdded support for runninga PPPoEserver when an
interfaceisin IPpassthrough mode.
nAdded ability to specify DFSchannelsfor Wi-Fi client
background scanningwhen DFSclient support is
enabled.
nAdded ashow eth Admin CLI command to show the
link statusof each Ethernet port.
nAdded apoweroff CLI command to perform a graceful
shutdown of thedevicewithout automatically
IX20User Guide 3

Revision Date Description
rebooting.
nAdded theability to turn off all LEDson thedevice to
reducepower consumption.
M December 2022 Releaseof Digi IX20firmwareversion 22.11:
nUpdated theLinuxkernel to version 5.19.
nTheintelliFlow featurenow integrateswith Digi Remote
Manager to provide aggregated insightsand analytics
for all Digi devicesin your environment.
nAdded an MQTT broker service, includingsupport for:
lMultiple MQTTclientswith uniquetopicsand
authentication credentials.
lPre-shared key encryption with multiple
configurablekeys.
lPattern filteringfor topic accesscontrol.
nAdded FIPSmode, to provideFederal Information
Processing Standards(FIPS) 140-2compliance.
nAdded support for Next-hop routingprotocol (NHRP).
nAdded support for mGRE tunnels.
nAdded support for ICMPredirect messages.
nAdded a pollinginterval to control how often the
cellular modem ispolled for signal strength and other
status.
nNew commands: tail and grep.
nAdd Timeout option to modem Carrier Scan window
in theWeb UI.
nAdded advanced watchdogto:
lMonitor critical servicesand reboot thedeviceif
thoseservicesfail.
lMonitor memory usage and logerrorsor reboot the
device based on current memory usage.
nAdded theability to haveserial port datawritten to the
system log.
lRemoved optionsin thelocal web UI and Admin CLI
for manually starting, stopping, and clearing serial
logs. Theseactionsare now controlled under the
dataloggingconfiguration settings.
N May 2023 Releaseof Digi IX20firmwareversion 23.3:
nSurelink:
lRedesigned Surelink configuration settings.
IX20User Guide 4

Revision Date Description
lAdded show surelink state Admin CLI command
to display the overall pass/fail statusof enabled
Surelink tests.
nWANbonding
lAdded optionsfor WANbondingconfiguration to
set modesfor thebonded tunnel and for each
bonded interface.
lAdded new show wan-bondingAdmin CLI
command.
nNew configuration settingsfor LXCcontainers:
lStart on boot to configurethecontainer to start
when thesystem boots.
lRestart timeout to configurethecontainer to
restart if it stops.
lOptional parametersto includeoptional
parametersfor thecontainer.
lMounted directoriesto setup shared directories
between thehost filesystem and thecontainer.
nAdded aAT&T LWM2M support settingto enableor
disableAT&Tlightweight M2Mon cellular modems.
nVPN:
lDMVPNphase1spokesupport with NHRPor mGRE,
including compatibility with Cisco DMVPNhubs.
lAdded support for SHA2 ciphersfor IKEv2IPsec
tunnels.
nDisabled mDNSby default for improved cellular
performance.
nIf thedevicehasaconfigured System >Name, it isnow
displayed on theDashboard.
P July 2023 Releaseof DigiIX20firmwareversion 23.6:
nSerial port options:
lFor PPP Dial-in mode, added the Default Route
option to control whether adefault routegets
added for thePPPinterface.
lDocumented thenew Modem emulator mode,
which allowsserial portsto act asadial-up modem
emulator for handlingincomingATdial-ins.
nAdvanced Watchdogoptions:
lAdded System >Advanced Watchdog optionsto
all devices.
nDigi RemoteManager support:
IX20User Guide 5

Revision Date Description
lEach timeadeviceconnectsto Digi Remote
Manager after the deviceboots(or re-boots), the
device now immediately uploadsall health metrics.
nVPN:
lAdded new Enable open routingconfiguration
setting (VPN>IP tunnels) to enablepackets
destined for an addresswhich isnot explicitly in
theroutingtableto exit theIPtunnel.
nNetworking:
lAdded new TCP retries2 configuration setting
(Network >Advanced) to control thenumber of
timesan unacknowledged TCPdatapacket will be
retransmitted beforetheconnection isconsidered
lost.
R October 2023 Releaseof Digi IX20firmwareversion 23.9:
nRegister adeviceto DRM:
lAdded a link to theDashboard of thelocal web UI
to register and add thedeviceto Digi Remote
Manager.
nUpdated Dashboard:
lUpdated thelayout of theDashboard pageof the
web UI to combinethenetwork interfaceand
cellular modem detailsinto a singleNetwork
Activity panel.
nHotspot improvement:
lImproved support for integration with
HotspotSystems, including:
oPSD2SessGarden
oLogin/Logout URL
oConfigurableremotewebserver FQDN
nPrimary Responder:
lAdded Primary Responder modesetting to lock
down thedevice to comply with AT&TFirstNet and
Verizon Response.
nDomain allow list:
lAdded a Domain allow list featureto control what
domainsareaccessiblethrough theDigi device.
nFallback:
lAdded a fallback server settingto control which
DNSserver isused asthefallback in theevent that
IX20User Guide 6

Revision Date Description
no configured or DHCP-obtained DNSserversare
available.
nMACsectunnel:
lAdded information about addingaMACsec tunnel.
Trademarksand copyright
Digi, Digi International, and theDigi logo aretrademarksor registered trademarksin theUnited States
and other countriesworldwide. All other trademarksmentioned in thisdocument aretheproperty of
their respectiveowners.
© 2023 Digi International Inc. All rightsreserved.
Disclaimers
Information in thisdocument issubject to changewithout noticeand doesnot represent a
commitment on thepart of Digi International. Digi providesthisdocument “asis,” without warranty of
any kind, expressed or implied, including, but not limited to, theimplied warrantiesof fitnessor
merchantability for a particular purpose. Digi may makeimprovements and/or changesin thismanual
or in theproduct(s) and/or theprogram(s) described in thismanual at any time.
Warranty
To view product warranty information, go to thefollowing website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
 Product nameand model
 Product serial number (s)
 Firmwareversion
 Operatingsystem/browser (if applicable)
 Logs(from timeof reported issue)
 Trace(if possible)
 Description of issue
 Stepsto reproduce
Contact Digi technical support: Digi offersmultiple technical support plansand service packages.
Contact usat +1952.912.3444or visit usat www.digi.com/support.
Feedback
To provide feedback on thisdocument, email your commentsto
[e-mail]
IX20User Guide 7

Includethedocument title and part number (IX20 User Guide, 90002381N) in thesubject line of your
email.
IX20User Guide 8

Contents
What'snew in Digi IX20version 23.9
Digi IX20Quick Start
Step 1: Connect your device 23
Apply Dielectric Greaseover SIM Contacts 24
Step 2: Connect DCpower 26
Step 3: Set up accessto Digi Remote Manager 26
Step 4: Register your device 26
Step 5: Complete setup 26
Step 6: Configure cellular APN 27
Digi IX20hardwarereference
Digi IX20featuresand specifications 28
IX20accessories 28
IX20front view 28
IX20LEDs 29
Power 30
INT 30
Wi-Fi Service(IX20Wmodel only) 30
SIM1 31
SIM2 31
LTE 31
Signal quality indicators 32
Ethernet Link and Activity 32
Signal quality barsexplained 33
IX20 power supply requirements 34
Digi IX20serial connector pinout 34
Configuration for extremethermal conditions 34
QRcodedefinition 36
Hardwaresetup
Install SIMcardsin thePlug-in LTEmodem 39
Apply Dielectric Greaseover SIM Contacts 40
Tipsfor improvingcellular signal strength 40
Connect data cables 41
Mount theIX20device 41
Attach to a mounting surface by using the mounting tabs 41
IX20User Guide 9

IX20User Guide 10
Attach to DINrail with clip 41
Attach to DINrail with bracket 42
Firmwareconfiguration
Review IX20default settings 45
Local WebUI 45
Digi RemoteManager 45
Default interfaceconfiguration 45
Other default configuration settings 46
Primary Responder mode 47
Differencesbetween standard firmware operation and Primary Responder mode 47
Enable Primary Responder mode 47
Changethedefault password for theadmin user 49
Change the default SSIDand pre-shared key for thepreconfigured Wi-Fi accesspoint 51
Configuration methods 53
UsingDigi Remote Manager 53
Usingthelocal web interface 54
Logout of theweb interface 55
Usethelocal REST API to configuretheIX20device 55
UsetheGET method to return deviceconfiguration information 55
Usethe POSTmethod to modify device configuration parametersand list arrays 57
UsetheDELETEmethod to removeitemsfrom a list array 58
Usingthecommand line 60
Accessthecommand lineinterface 60
Login to thecommand lineinterface 60
Exit thecommand lineinterface 61
Central management
Digi RemoteManager support 63
Certificate-based enhanced security 63
Configureyour devicefor Digi RemoteManager support 63
Collect devicehealth dataand set thesampleinterval 70
Enable event logupload to Digi RemoteManager 73
Reach Digi RemoteManager on aprivatenetwork 75
Pinholemethod 75
Proxy server method 75
VPNTunnel method 76
Loginto Digi RemoteManager 76
UseDigi Remote Manager to view and manageyour device 77
Add a deviceto RemoteManager 77
Add a deviceto RemoteManager usinginformation from thelabel 77
Add adeviceto RemoteManager usingyour RemoteManager login credentials 78
Configuremultiple IX20 devices by using Digi Remote Manager configurations 79
View Digi Remote Manager connection status 80
Learn more 81
Interfaces
WideArea Networks(WANs) 83
Wide Area Networks(WANs) and WirelessWide AreaNetworks(WWANs) 84
ConfigureWAN/WWANpriority and default route metrics 84