Digi TransPort LR54 User manual

LR54
User Guide
Firmware version 21.5

Revision history—90002386
Revision Date Description
B Not released.
C June 2020 Initial release of DigiLR54 firmware version 20.5.
LR54 User Guide 2

Revision Date Description
D September 2020 Release of Digi LR54 firmware version 20.8:
nSupport for NEMO/DMNR virtual private networks.
nSupport for serial Modbus Gateway.
nSupport for Ethernet network bonding.
nSupport for VRRP+, an extension to the VRRP standard
that uses network probing to monitor connections
through VRRP-enabled devices.
nCloud service enhancements:
lReduced data usage for reporting health metrics to
Digi Remote Manager.
Added Monitoring >Device Health >Only report
changed values to Digi Remote Manager option
to control sending metrics to Digi Remote Manager
on the basis of whether the values have changed
since they were last reported.
lAdded Monitoring >Device Health >Data point
tuning configuration options to fine tune what
datapoints are uploaded as health metrics to Digi
Remote Manager.
lAdded the ability to select Digi aView as the cloud
service.
nAdded the ability to duplicate firmware to copy the
active firmware to the secondary firmware partition.
nMoved the update firmware CLI command to system
firmware update.
nAdded new Authoritative option under TACACS+,
RADIUS, and LDAP user authentication methods to
prevent falling back to additional authentication
methods.
nCisco Umbrella content filtering.
nWi-Fi enhancements:
lAdded new options under Network >Wi-Fi to
control Tx Power of the Wi-Fi module.
lAdded support for multiple RADIUS servers for
WPA2 Enterprise.
nAdded options under System >Log >Server list to
allow users to specify the TCP/UDP protocol and port of
the remote syslog server.
nSerial port enhancements:
lAdded configuration option under Serial >TCP
connection to specify encrypted connection types.
lAdded configuration option under Serial >
LR54 User Guide 3

Revision Date Description
TCP/Telnet/SSH connections to enable/disable
TCP keep-alive messages and nodelay.
nEnhanced SMS support:
lAdded System >Scheduled tasks >Allow
scheduled scripts parameter to allow custom
python scripts to handle sending/receiving SMS
messages
lAdded the digidevice.sms python module for
sending/receiving SMS messages in a custom
python script.
nMQTT client support via Paho Python module.
nAdded a random unprivileged port for performing ntp
time syncs if standard port 123 fails.
nScripting enhancements:
lAdded a Status >Scripts page in the web UI and
show scripts command to the Admin CLI to view
custom scripts and applications configured in the
device, along with their status.
Added the system scripts stop command to the
Admin CLI to stop a custom script or application.
LR54 User Guide 4

Revision Date Description
E December 2020 Release of Digi LR54 firmware version 20.11:
nModem firmware update commands added to the
Admin CLI.
nNetwork bridging enhanced to use the MAC address of
the first active device listed in Network >Bridges >
Bridge name >Devices as the MAC address for the
bridged interface.
nIPsec enhancements:
lSupport for full IPsec IPv6 tunnels: IPv6-over-IPv4,
or IPv4-over-IPv6 tunnels.
lIPsec tunnels are now treated like network
interfaces, which allows tunnels to be selected for
routing and routing priority and access control lists.
lIPSec tunnels now wait for Surelink tests, if
configured, to pass prior to initiating outbound
tunnels.
nModbus gateway enhancements:
lStatus >Modbus gateway page in the Web UI
displays information about modbus clients and
servers connected to the gateway.
lshow modbus command displays information
about the the Modbus gateway service.
nSerial port enhancements:
lSerial port logging options added for starting,
stopping, and viewing serial port activity.
lOption added to the System >Serial configuration
page to copy serial port settings.
nPolicy-based routing enhancements:
lAdded a DSCP option to match the routing rule by
the type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-
based routes to the device's active default route.
nPython pip support for installing external modules and
libraries.
nLink speed and duplex options added to Ethernet port
configuration.
nssh and telnet commands added to Admin CLI.
nServices >Ping responder allows you to control the
interfaces and firewall zones on which the DAL device
will respond to ICMP requests.
nEnhanced policy-based routing:
LR54 User Guide 5

Revision Date Description
lAdded a DSCP option to match the routing rule by
the type of DSCP field in the packet.
lAdded a Defaultroute option for matching policy-
based routes to the device's active default route.
nAdded a link to User Guide under the User menu in the
Web UI.
F March 2021 Release of Digi LR54 firmware version 21.2:
nLocation services added, including:
lThe ability to define a static latitude and longitude
as a location for the device.
lReporting location information as health metrics to
Digi Remote Manager.
lGeo-fencing: Allow you to define one or more
circular or polygonal geo-fence areas and then
perform a set of actions when the device enters or
leaves that area.
lPython support for location information through
the digidevice.location python module.
nCellular modem carrier scanning and locking:
lNew modem scan CLI command for listing available
carriers for the current modem and SIM.
lManual carrier selection option to allow you to lock
the SIM to a specific carrier.
nEnhanced serial support:
lCertificate management control for TCP and
autoconnect serial port setups.
lAutoconnect.
nEnhanced Wi-Fi support:
lSupport 5GHz DFS Wi-Fi channels in client mode.
Only available for devices with 5GHz Wi-Fi radio
support.
lAdded 5GHz frequencies to the list of channels that
can be scanned for client-mode Wi-Fi background
scanning.
nLocal RESTAPI for automated configuration of the
device.
nSupport for remote CLI commands through Digi Remote
Manager.
nSupport for automatically checking for device and
modem firmware updates.
LR54 User Guide 6

Revision Date Description
G April 2021 Added IFETEL certification.
LR54 User Guide 7

Revision Date Description
H June 2021 Release of Digi LR54 firmware version 21.5:
nWi-Fi enhancements:
lAdded support for WPA3 Wi-Fi encryption:
oWPA2/WPA3 Personal
oWPA3 Enhanced Open
oWPA3 Personal
lAdded support for WPA and WPA/WPA2 mised
mode with TKIP.
nCellular enhancements:
lAdded support for modem firmware update to the
Admin CLI.
lAdded support for over-the-air (OTA) modem
firmware update to check, list, and update to new
modem firmware from the Digi firmware server.
lAdded the ability to scan for cellular carriers on the
Modem status page and the ability select a
particular PLMN/network to use.
nAdded comands for over-the-air (OTA) system firmware
update to check, list, and update to new firmware from
the Digi firmware server.
nAdded a show dns command to the Admin CLI to
display active DNS servers and their associated
interface.
nAdded a show ntp command to the Admin CLI to
display the status of the NTP service.
nExpanded Port forwarding option to support a range of
ports, including one-to-one and many-to-one port
mappings.
nAdded options to control packet filtering for the
network analyzer.
nVPN enhancements:
lIPsec enhancements:
oAdded support for multiple remote endpoints
and the ability to use round-robin or to randomly
select an endpoint to establish a tunnel to.
oAdded configurable options to control IKE
transmit interval, tunnel retry interval, and
tunnel retry timeout.
lLDAP enhancements:
oAdded a login attribute to provide the ability to
match the attribute set on an Active Directory
LR54 User Guide 8

Revision Date Description
server.
nSureLink enhancements
lAdded the ability to configure how many times a
SureLink test must run, and must fail, before the
interface is restarted or the device is rebooted.
lAdded the ability to configure how many times a
SureLink test must pass before an interface is
considered to be working.
lAdded the ability to test another interface's status.
nSNMPv2 supported added.
nUpdated python to version 3.6.13.
nAdded the default digi.device local domain.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States
and other countries worldwide. All other trademarks mentioned in this document are the property of
their respective owners.
© 2021 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
LR54 User Guide 9

Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[email protected]
Include the document title and part number (LR54 User Guide, 90002386 H) in the subject line of your
email.
LR54 User Guide 10

Contents
Revision history—90002386 2
What's new in Digi LR54 version 21.5
Digi LR54 Quick Start
Step 1: Connect your device 22
Step 2: Connect DC power 23
Step 3: Set up access to Digi Remote Manager 23
Step 4: Register your device 23
Step 5: Complete setup 24
Step 6: Configure cellular APN 24
Digi LR54 hardware reference
LR54 key features 25
Digi LR54 hardware specifications 25
Digi LR54 front and back views 25
Digi LR54 LEDs 26
Digi LR54 serial connector pinout 27
Hardware setup
Install SIM cards 29
Tips for improving cellular signal strength 29
Digi LR54 Mounting options 29
Attach mounting brackets to the device 30
Mount the Digi LR54 on a wall 31
Hang the Digi LR54 on a wall 31
Connect data cables 31
Connect antennas 31
Digi LR54 Mounting options 32
Attach mounting brackets to the device 32
Mount the Digi LR54 on a wall 33
Hang the Digi LR54 on a wall 33
Configuration and management
Review LR54 default settings 36
LR54 User Guide 11

LR54 User Guide 12
Local WebUI 36
Digi Remote Manager 36
Default interface configuration 36
Other default configuration settings 39
Change the default password for the admin user 39
Reset default SSIDs and pre-shared keys for the preconfigured Wi-Fi access points 41
Configuration methods 43
Using Digi Remote Manager 44
Access Digi Remote Manager 44
Using the web interface 44
Log out of the web interface 45
Using the command line 46
Access the command line interface 46
Log in to the command line interface 46
Exit the command line interface 47
Interfaces
Wide Area Networks (WANs) 49
Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 50
Configure WAN/WWAN priority and default route metrics 50
WAN/WWAN failover 53
Configure SureLink active recovery to detect WAN/WWAN failures 54
Configure the device to reboot when a failure is detected 62
Disable SureLink 71
Example: Use a ping test for WAN failover from Ethernet to cellular 75
Using Ethernet devices in a WAN 78
Using cellular modems in a Wireless WAN (WWAN) 78
Configure a Wide Area Network (WAN) 101
Configure a Wireless Wide Area Network (WWAN) 108
Show WAN and WWAN status and statistics 119
Delete a WAN or WWAN 120
Default outbound WAN/WWAN ports 122
Local Area Networks (LANs) 123
About Local Area Networks (LANs) 124
Configure a LAN 124
Example: Configure two LANs 131
Show LAN status and statistics 141
Delete a LAN 143
DHCP servers 145
Create a Virtual LAN (VLAN) route 161
Default services listening on LANports 164
Bridging 165
Edit the preconfigured LAN1 bridge 166
Configure a bridge 169
Serial port
Configure the serial port 174
Configure UDP serial mode 186
Show serial status and statistics 189
Log serial port messages 189

LR54 User Guide 13
Wi-Fi
Wi-Fi configuration 192
Default access point SSID and password 192
Default Wi-Fi configuration 192
Configure the Wi-Fi radio's channel 194
Configure the Wi-Fi radio to support DFS channels in client mode 196
Required configuration items 196
Configure the Wi-Fi radio's band and protocol 198
Configure the Wi-Fi radio's transmit power 200
Configure an open Wi-Fi access point 202
Configure a Wi-Fi access point with personal security 209
Configure a Wi-Fi access point with enterprise security 216
Isolate Wi-Fi clients 225
Isolate clients connected to the same access point 225
Isolate clients connected to different access points 226
Configure a Wi-Fi client and add client networks 233
Show Wi-Fi access point status and statistics 240
Show Wi-Fi client status and statistics 241
Hotspot
Hotspot authentication modes 244
Hotspot DHCP server 245
Hotspot security 245
Hotspot configuration 246
Enable hotspot using the default configuration 247
Change the default hotspot SSID 252
Change the default hotspot IP address and subnet 254
Change the default hotspot bandwidth limits 257
Add an Ethernet port to the default hotspot 259
Use policy routes with hotspot 261
Create a new hotspot 262
Configure the hotspot to use local shared password authentication 275
Configure the hotspot to use RADIUSshared password authentication 277
Configure the hotspot to use RADIUS users authentication 281
Configure the hotspot to use HotspotSystem authentication 285
Show hotspot status and statistics 288
Customize the hotspot login page 291
Edit sample hotspot HTML pages 292
Upload custom hotspot HTML pages 293
Restore hotspot default sample pages 295
Hotspot RADIUS attributes 296
Routing
IP routing 298
Configure a static route 299
Delete a static route 302
Policy-based routing 304
Configure a routing policy 304
Example: Dual WAN policy-based routing 313
Example: Route traffic to a specific WAN interface based on the client MACaddress 316
Routing services 321

LR54 User Guide 14
Configure routing services 322
Show the routing table 325
Dynamic DNS 327
Configure dynamic DNS 327
Virtual Router Redundancy Protocol (VRRP) 333
VRRP+ 333
Configure VRRP 334
Configure VRRP+ 337
Example: VRRP/VRRP+ configuration 345
Configure device one (master device) 346
Configure device two (backup device) 350
Show VRRP status and statistics 356
Virtual Private Networks (VPN)
IPsec 359
IPsec data protection 359
IPsec modes 359
Internet Key Exchange (IKE) settings 359
Authentication 360
Configure an IPsec tunnel 360
Configure IPsec failover 385
Configure SureLink active recovery for IPsec 388
Show IPsec status and statistics 395
Debug an IPsec configuration 396
Configure a Simple Certificate Enrollment Protocol client 397
Example: SCEP client configuration with Fortinet SCEP server 401
OpenVPN 407
Configure an OpenVPN server 408
Configure an OpenVPN Authentication Group and User 417
Configure an OpenVPN client by using an .ovpn file 421
Configure an OpenVPN client without using an .ovpn file 424
Configure SureLink active recovery for OpenVPN 428
Show OpenVPN server status and statistics 436
Show OpenVPN client status and statistics 437
Generic Routing Encapsulation (GRE) 439
Configuring a GREtunnel 439
Show GRE tunnels 444
Example: GRE tunnel over an IPSec tunnel 445
NEMO 460
Configure a NEMO tunnel 461
Show NEMO status 467
Services
Allow remote access for web administration and SSH 470
Configure the web administration service 473
Configure SSHaccess 483
Use SSH with key authentication 489
Generating SSH key pairs 489
Configure telnet access 492
Configure DNS 497
Show DNS server 503
Simple Network Management Protocol (SNMP) 504

LR54 User Guide 15
SNMP Security 504
Configure Simple Network Management Protocol (SNMP) 504
Download MIBs 509
Location information 510
Configure the location service 511
Configure the device to use a user-defined static location 513
Configure the device to accept location messages from external sources 515
Forward location information to a remote host 519
Configure geofencing 525
Show location information 537
Modbus gateway 538
Configure the Modbus gateway 539
Show Modbus gateway status and statistics 552
System time 555
Configure the system time 555
Network Time Protocol 558
Show status and statistics of the NTP server 558
Configure the device as an NTP server 559
Configure a multicast route 565
Ethernet network bonding 568
Enable service discovery (mDNS) 570
Use the iPerf service 574
Example performance test using iPerf3 578
Configure the ping responder service 579
Example performance test using iPerf3 583
Applications
Configure applications to run automatically 585
Task one: Upload the application 585
Task two: Configure the application to run automatically 587
Run a Python application at the shell prompt 591
Start an interactive Python session 593
Digidevice module 595
Use digidevice.cli to execute CLI commands 596
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 597
Use digidevice.config for device configuration 599
Use Python to respond to Digi Remote Manager SCI requests 602
Use digidevice runtime to access the runtime database 610
Use Python to upload the device name to Digi Remote Manager 612
Use Python to access the device location data 614
The digidevice led submodule 618
Use Python to send and receive SMS messages 620
Use the Human Interface Device (HID) module 623
Help for the hid module 624
Use Python to access serial ports 625
Use the Paho MQTTpython library 626
Use the local RESTAPI to configure the LR54 device 629
Use the GETmethod to return device configuration information 629
Use the POST method to modify device configuration parameters and add items to a list
array 631
Use the DELETE method to remove items from a list array 632
Stop a script that is currently running 633
Show script information 633

LR54 User Guide 16
User authentication
LR54 user authentication 636
User authentication methods 636
Add a new authentication method 638
Delete an authentication method 640
Rearrange the position of authentication methods 642
Authentication groups 644
Change the access rights for a predefined group 645
Add an authentication group 647
Delete an authentication group 651
Local users 653
Change a local user's password 654
Configure a local user 656
Delete a local user 664
Terminal Access Controller Access-Control System Plus (TACACS+) 666
TACACS+ user configuration 667
TACACS+ server failover and fallback to local authentication 668
Configure your LR54 device to use a TACACS+ server 668
Remote Authentication Dial-In User Service (RADIUS) 672
RADIUS user configuration 673
RADIUS server failover and fallback to local configuration 673
Configure your LR54 device to use a RADIUS server 674
LDAP 677
LDAP user configuration 679
LDAP server failover and fallback to local configuration 680
Configure your LR54 device to use an LDAP server 680
Configure serial authentication 685
Disable shell access 687
Set the idle timeout for LR54 users 689
Example user configuration 692
Example 1: Administrator user with local authentication 692
Example 2: RADIUS, TACACS+, and local authentication for one user 694
Firewall
Firewall configuration 702
Create a custom firewall zone 702
Configure the firewall zone for a network interface 704
Delete a custom firewall zone 706
Port forwarding rules 707
Configure port forwarding 707
Delete a port forwarding rule 712
Packet filtering 715
Configure packet filtering 715
Enable or disable a packet filtering rule 719
Delete a packet filtering rule 721
Configure custom firewall rules 723
Configure captive portals 725
Delete captive portals 729
Configure Quality of Service options 730

LR54 User Guide 17
System administration
Review device status 743
Configure system information 744
Update system firmware 746
Manage firmware updates using Digi Remote Manager 746
Certificate management for firmware images 747
Downgrading 747
Dual boot behavior 750
How to recover a LR54 that will not boot 751
Update cellular module firmware 752
Update modem firmware over the air (OTA) 753
Update modem firmware by using a local firmware file 755
Reboot your LR54 device 756
Reboot your device immediately 756
Schedule reboots of your device 757
Erase device configuration and reset to factory defaults 759
Configure the LR54 device to use custom factory default settings 762
Configuration files 764
Save configuration changes 764
Save configuration to a file 765
Restore the device configuration 766
Schedule system maintenance tasks 769
Disable device encryption 776
Re-enable cryptography after it has been disabled. 777
Configure the speed of your Ethernet ports 779
Monitoring
intelliFlow 783
Enable intelliFlow 783
Use intelliFlow to display average CPU and RAMusage 786
Use intelliFlow to display top data usage information 787
Use intelliFlow to display data usage by host over time 789
Configure NetFlow Probe 790
Central management
Digi Remote Manager support 796
Configure Digi Remote Manager 796
Collect device health data and set the sample interval 803
Log into Digi Remote Manager 806
Use Digi Remote Manager to view and manage your device 807
Add a device to Digi Remote Manager 808
View Digi Remote Manager connection status 808
Use the Digi Remote Manager mobile app 809
Configure multiple devices using profiles 810
Learn more 810
File system
The LR54 local file system 812
Display directory contents 812

LR54 User Guide 18
Create a directory 813
Display file contents 814
Copy a file or directory 814
Move or rename a file or directory 815
Delete a file or directory 816
Upload and download files 817
Upload and download files by using the WebUI 817
Upload and download files by using the Secure Copy command 818
Upload and download files using SFTP 819
Diagnostics
Generate a support report 822
View system and event logs 823
View System Logs 823
View Event Logs 825
Configure syslog servers 827
Configure options for the event and system logs 829
Analyze network traffic 834
Configure packet capture for the network analyzer 835
Example filters for capturing data traffic 844
Capture packets from the command line 845
Stop capturing packets 846
Show captured traffic data 847
Save captured data traffic to a file 848
Download captured data to your PC 849
Clear captured data 850
Use the ping command to troubleshoot network connections 852
Ping to check internet connection 852
Stop ping commands 852
Use the traceroute command to diagnose IProuting problems 852
Digi LR54 regulatory and safety statements
RF exposure statement 854
Federal Communication (FCC) Part 15 Class B 854
Radio Frequency Interference (RFI) (FCC 15.105) 854
European Community - CE Mark Declaration of Conformity (DoC) 854
IFETEL 855
Maximum transmit power for radio frequencies 856
Innovation, Science, and Economic Development Canada (IC) certifications 856
RoHS compliance statement 857
Safety statements 857
Special safety notes for wireless routers 858
Product disposal instructions 859
DigiLR54 Certifications
International EMC (Electromagnetic Compatibility) and safety standards 860
Command line interface
Access the command line interface 862

LR54 User Guide 19
Log in to the command line interface 862
Exit the command line interface 863
Execute a command from the web interface 863
Display help for commands and parameters 864
The help command 864
The question mark (?) command 864
Display help for individual commands 865
Use the Tab key or the space bar to display abbreviated help 866
Auto-complete commands and parameters 866
Available commands 867
Use the scp command 868
Display status and statistics using the show command 869
show config 869
show system 870
show network 870
Device configuration using the command line interface 870
Execute configuration commands at the root Admin CLI prompt 871
Display help for the config command from the root Admin CLI prompt 871
Configuration mode 873
Enable configuration mode 873
Enter configuration commands in configuration mode 873
Save changes and exit configuration mode 874
Exit configuration mode without saving changes 874
Configuration actions 874
Display command line help in configuration mode 875
Move within the configuration schema 877
Manage elements in lists 878
The revert command 880
Enter strings in configuration commands 882
Example: Create a new user by using the command line 882
Example: Configure multiple WANs and LANs by using the command line 884
Command line reference 894
analyzer 895
cp 896
help 897
ls 898
mkdir 899
modem 900
modem puk status [imei STRING] [name STRING] 905
modem scan [imeiSTRING] [nameSTRING] 906
more 908
mv 909
ping 910
reboot 912
rm 913
scp 914
show 915
ssh 923
system 925
traceroute 929

What's new in Digi LR54 version 21.5
Release of Digi LR54 firmware version 21.5:
nWi-Fi enhancements:
lAdded support for WPA3 Wi-Fi encryption:
oWPA2/WPA3 Personal
oWPA3 Enhanced Open
oWPA3 Personal
lAdded support for WPA and WPA/WPA2 mised mode with TKIP.
nCellular enhancements:
lAdded support for modem firmware update to the Admin CLI.
lAdded support for over-the-air (OTA) modem firmware update to check, list, and update to
new modem firmware from the Digi firmware server.
lAdded the ability to scan for cellular carriers on the Modem status page and the ability
select a particular PLMN/network to use.
nAdded comands for over-the-air (OTA) system firmware update to check, list, and update to
new firmware from the Digi firmware server.
nAdded a show dns command to the Admin CLI to display active DNS servers and their
associated interface.
nAdded a show ntp command to the Admin CLI to display the status of the NTP service.
nExpanded Port forwarding option to support a range of ports, including one-to-one and many-
to-one port mappings.
nAdded options to control packet filtering for the network analyzer.
nVPN enhancements:
lIPsec enhancements:
oAdded support for multiple remote endpoints and the ability to use round-robin or to
randomly select an endpoint to establish a tunnel to.
oAdded configurable options to control IKE transmit interval, tunnel retry interval, and
tunnel retry timeout.
lLDAP enhancements:
oAdded a login attribute to provide the ability to match the attribute set on an Active
Directory server.
nSureLink enhancements
LR54 User Guide 20