Digi TransPort LR54 User manual

LR54
User Guide
Firmware version 22.8

Revision history—90002386
Revision Date Description
J September 2021 Release of Digi LR54 firmware version 21.8:
nAdded LXC container support for running localized
containers on the device.
nAdded support for maintenance windows triggers to
control when a device is available for Digi Remote
Manager maintenance activity.
nWi-Fi enhancements:
lRemoved requirement to set a Wi-Fi SSID and
passphrase to initially configure the device.
lAdded support for 40Mhz channel bandwidth on
2.4GHz.
nVPNenhancements:
lAdded support for L2TPv3 tunneling.
lNew option to enable, disable, or force IPsec IKE
fragmentation.
nImproved options for creating a custom default
configuration:
lsystem backup CLI commands for generating a
custom default config file based on the active
config settings on the device.
lNew section on the File System page of the Web UI
for loading a configuration backup file as the
custom default config
lNew persistent files folder accessible through Digi
Remote Manager where users can upload a
configuration backup.
lAdded ability to clear a custom default
configuration by performing by pressing the RESET
button, waiting for the device to reboot, then
pressing the RESET again.
nAdded ability to override or edit SSH server options.
nAdded options for filtering Wi-Fi scanner results based
off of MAC addresses or RSSI signal strength.
nAdded options for sending local device event logs to
Digi Remote Manager.
nNew system time CLI command for manually setting
the local date and time.
nNew firewall packet filter options to allow/deny packets
LR54 User Guide 2

Revision Date Description
based off of a range of source or destination MAC
addresses.
nNew monitoring metrics upload CLI command to send
on-demand health metrics to Digi Remote Manager.
nAdded support for the configuration of custom scripts
that will be run manually, and a new system script
start CLI command to run manual scripts.
nNew "Find me" feature that flashes cellular-related
LEDs to help locate the device onsite and a new system
find-me command.
nAdded datapoint.upload_multiple function to
digidevice python module for uploading multiple
datapoints to DigiRM at once.
nAdded clear dhcp-lease command to remove all
dynamic DHCP leases or certain DHCP leases based on
MAC address or IP address.
nAdded speedtest command for performing on-demand
iPerf or nuttcp speedtests.
nLocal users are now required to be assigned to an
authentication group.
nNew Network → Advanced → Sequential DHCP address
allocation configuration setting for controlling if DHCP
addresses are assigned sequentially or randomly
(disabled by default).
nAdded ability to control if DHCP addresses are assigned
sequentially or randomly (disabled by default).
nAdded 802.1x port-based network access control,
configurable per network interface.
K December 2021 Release of Digi LR54 firmware version 21.11:
nConfiguration option to allow for automatic update of
new firmware (disabled by default).
nUser authentication enhancements:
lAdded TACACS+ command authorization and
accounting for Admin CLI commands.
lAdded a new username alias to provide an
alternate username that allows for special
characters in the username.
nWi-Fi enhancements:
lPKI certificate-based authentication for
WPA2/WPA3 Enterprise Wi-Fi client connections,
including options for SCEP client integration for
automatic certificate generation.
LR54 User Guide 3

Revision Date Description
lImproved Wi-Fi scanning tool on the Status page to
automatically setup the underlying basic client-
mode settings so the device can scan for nearby
APs without requiring the user to first configure the
client-mode settings.
nVPNenhancements:
lAdded support for PPP-over-L2TP tunnels.
lChanged default IPsec IKE DH group to 14 for
enhanced compatibility with industry standard
settings.
nLocation services enhancements:
lNew option for Location service to specify the talker
ID used in NMEA mesage strings.
lInclude the mode indicator field in NMEA messages
constructed when a GPS fix isn’t obtained.
nSureLink enhancments:
lAdded new settings under cellular Surelink options
to have the device reset the cellular modem if a
specified number of Surelink tests fail
lAdded show surelink Admin CLI command.
nSerial port enhancements:
lNew option to add and configure an external USB-
to-serial adapter.
lDisable serial history in remote access mode by
default.
nSupport for sending analog and digial I/O health
metrics to Digi Remote Manager.
nAdded show containers Admin CLI command.
L March 2022 Release of Digi LR54 firmware version 22.2:
nVPNenhancements:
lRenamed VPN >IPsec >Tunnels >Policies >Local
network setting to Local traffic selector and
added Remote traffic selector.
lAdded a Dynamic option to the Local traffic
selector to configuration of a local network by
protocol and/or port instead of a network address
range.
lAdded Protocol and Port match criteria for Local
traffic selector and Remote traffic selector.
lAdded VPN >IPsec >Advanced >Debug level to
specify the logging verbosity of IPsec messages in
LR54 User Guide 4

Revision Date Description
the device system logs.
nEnhancements to communications with Digi Remote
Manager:
lEnhanced security for communications with Digi
Remote Manager by using client-side certificates.
lThe default URL for the device's Remote Manager
connection is now edp12.devicecloud.com. This
URL is required to utilize the client-side certificate
support.
nNew Switch SIM SureLink action for WWAN interfaces,
which allows SureLink to be configured to switch to the
alternate SIM if the modem is connected but SureLink
test are failing.
lNew Switch SIM fail count option to determine
how many SureLink failures are required prior to
switching to the alternate SIM.
nNew Socket ID string option to send the configured
text to the remote server(s) when a TCP socket
connection is opened to the serial port.
nNew cat Admin CLI command for displaying file
contents.
M June 2022 Release of Digi LR54 firmware version 22.5:
n5G enhancements:
lAdded 5G slice support for configuring the slice
type for the 5G modems.
nSurelink enhancements:
lEnabled Surelink reset_modem action by default on
cellular interfaces and set fail count to three.
lUpdated Surelink reset_modem action to
automatically power cycle the modem in the event
that the modem fails to reset.
nSerial port support enhancements:
lAdded serial PPP dial-in mode to handle AT-based
connection requests from a device connected to a
serial port and provide IPv4 networking to the
device.
nAdded cellular APN and cellular connection duration as
datapoints sent to Digi Remote Manager.
nWi-Fi scanner enhancements:
lAdded support for sending an HTTP or TCP stream
of results from the Wi-Fi scanner to one or more
remote servers.
LR54 User Guide 5

Revision Date Description
nSCEP enhancements:
lNew SCEP client settings and underlying
functionality to support connecting to additional
SCEP servers.
lAdded show scep Admin CLI command to show
the sync status, expiration dates, and additional
details of any configured SCEP clients.
nVPN enhancements:
lInclude the hostname of the device in the client
.ovpn file listed on the Status → OpenVPN → Servers
page in the web UI.
nLocation services enhancements:
lNew settings to control the NMEA message content
that the devices sends when there is no valid fix
from any of the configured location sources.
N September 2022 Release of Digi LR54 firmware version 22.8:
nCellular modem enhancements:
lAdded modem ota download and system
firmware ota download commands for
downloading cellular modem and device firmware.
lAdded cellular carrier name and PLMN ID to the
Modems Status page in the Web UI.
lEnhanced access technology options to set the
modem to 5G-only, including setting to 5G SA-only,
NSA-only, or both NSA/SA-modes.
nVPN enhancements:
lAdded Dynamic Multipoint VPN (DMVPN) support.
lAdded a Strict routing setting to IPsec tunnels that
routes packets through the tunnel if both the
source IP and destination IP match the IPsec
tunnel’s policies. This makes IPsec behave like a
policy-based VPN, rather than a route-based VPN.
lAdded the Microsoft version of the Challenge-
Handshake Authentication Protocol (MS-CHAPv2) as
an option for L2TP network servers authentication
methods.
nContainer support:
lContainer support now a premium feature, enabled
through Digi Remote Manager.
lAdded new metrics for sending container status,
name, CPU load, and disk usage as datapoints to
DigiRM.
LR54 User Guide 6

Revision Date Description
nAdded support for running a PPPoE server when an
interface is in IP passthrough mode.
nAdded ability to specify DFS channels for Wi-Fi client
background scanning when DFS client support is
enabled.
nAdded a show eth Admin CLI command to show the
link status of each Ethernet port.
nAdded a poweroff CLI command to perform a graceful
shutdown of the device without automatically
rebooting.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
© 2022 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
LR54 User Guide 7

Feedback
To provide feedback on this document, email your comments to
[email protected]
Include the document title and part number (LR54 User Guide, 90002386 N) in the subject line of your
email.
LR54 User Guide 8

Contents
Revision history—90002386 2
What's new in Digi LR54 version 22.8
Digi LR54 Quick Start
Step 1: Connect your device 22
Step 2: Connect DC power 23
Step 3: Set up access to Digi Remote Manager 23
Step 4: Register your device 23
Step 5: Complete setup 24
Step 6: Configure cellular APN 24
Digi LR54 hardware reference
LR54 key features 25
Digi LR54 front and back views 25
Digi LR54 LEDs 26
Digi LR54 serial connector pinout 27
QR code definition 27
Hardware setup
Install SIM cards 30
Apply Dielectric Grease over SIMContacts 30
Tips for improving cellular signal strength 31
Digi LR54 Mounting options 31
Attach mounting brackets to the device 31
Mount the Digi LR54 on a wall 32
Hang the Digi LR54 on a wall 32
Connect data cables 33
Connect antennas 33
LR54 power connector 33
Firmware configuration
Review LR54 default settings 35
Local WebUI 35
Digi Remote Manager 35
LR54 User Guide 9

LR54 User Guide 10
Default interface configuration 35
Other default configuration settings 38
Change the default password for the admin user 38
Reset default SSIDs and pre-shared keys for the preconfigured Wi-Fi access points 40
Configuration methods 42
Using Digi Remote Manager 43
Using the local web interface 43
Log out of the web interface 44
Use the local RESTAPI to configure the LR54 device 44
Use the GETmethod to return device configuration information 45
Use the POST method to modify device configuration parameters and list arrays 47
Use the DELETE method to remove items from a list array 47
Using the command line 49
Access the command line interface 49
Log in to the command line interface 49
Exit the command line interface 50
Central management
Digi Remote Manager support 52
Certificate-based enhanced security 52
Configure your device for Digi Remote Manager support 52
Collect device health data and set the sample interval 59
Enable event log upload to Digi Remote Manager 62
Log into Digi Remote Manager 64
Use Digi Remote Manager to view and manage your device 65
Add a device to Digi Remote Manager 65
Configure multiple LR54 devices by using Digi Remote Manager configurations 66
View Digi Remote Manager connection status 67
Learn more 68
Interfaces
Wide Area Networks (WANs) 70
Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 71
Configure WAN/WWAN priority and default route metrics 71
WAN/WWAN failover 74
Configure SureLink active recovery to detect WAN/WWAN failures 75
Configure the device to reboot when a failure is detected 86
Disable SureLink 95
Example: Use a ping test for WAN failover from Ethernet to cellular 99
Using Ethernet devices in a WAN 102
Using cellular modems in a Wireless WAN (WWAN) 102
Configure a Wide Area Network (WAN) 126
Configure a Wireless Wide Area Network (WWAN) 134
Show WAN and WWAN status and statistics 145
Delete a WAN or WWAN 146
Default outbound WAN/WWAN ports 148
Local Area Networks (LANs) 149
About Local Area Networks (LANs) 150
Configure a Local Area Network (LAN) 150
Change the default LAN subnet 158
Example: Configure two LANs 159
Show LAN status and statistics 169