Digi TransPort LR54 User manual

Digi TransPort® WR Routers
for models LR54, WR54, and WR64
User Guide

Revision history—90002282
Revision Date Description
B April 2018 Updated to support Digi TransPort firmware version 4.2.0.22.
This release focuses on support for using a TransPort router in
transit scenarios. Feature enhancements include:
nWi-Fi client and access point mode support and
enhancements. See Wi-Fi interfaces.
nHotspot configuration enhancements, including support
for HotspotSystem. See Hotspot.
nIPv6 support.
nHealth reporting enhancements. See Enable health
reporting and set sample interval.
nLocation (GNSS) enhancements. See location and show
location.
nPower configuration support. See Configure power
delays for power ignition sensor and Configure Power
button power down behavior.
C May 2018 DigiTransPort version 4.2.1 includes the following:
nHotspot configuration enhancements, including support
setting the DHCP lease time. See Hotspot.
nSupport for creating policy-based rules. See routing-rule
and show routing-rule.
D September 2018 DigiTransPort version 4.3 includes the following new features
and enhancements:
nSupport for the DigiTransPort LR54
nSupport for Dynamic Mobile Network Routing (DMNR)
nSupport for Generic Routing Encapsulation (GRE)
nSupport for cellular SIM pin management
nSupport for DHCP relay
nSupport for IPsec XAuth authentication
Digi TransPort WR Routers User Guide 2

Revision Date Description
E October 2018 Digi TransPort version 4.4 includes the following new features
and enhancements:
nSupport for Network Time Protocol (NTP) server
nEnhanced location information:
lSupport for receiving NMEA and TAIP messages from
external location information sources
lSupport for forwarding NMEAand TAIP messages to
an external host
nIPsec updates:
lIKEv2 support
lMultiple subnet support
lSHA384 ESP and IKE support (WR64 only)
lAES GCM ESP and IKE support (WR64 only)
lDiffie-Hellman group 20 ESP and IKE support
F December 2018 Digi TransPort version 4.5 includes the following new features
and enhancements:
nSupport for the Digi TransPort WR54.
nSupport for PySerial.
nSupport for DHCP static IP mapping.
nSupport for configuration of DHCP options.
Applicable models
Digi TransPort version 4.5 supports the following Digi TransPort routers:
nDigi TransPort LR54
See Digi TransPort LR54 Hardware Reference
nDigi TransPort WR54
See Digi TransPort WR54 Hardware Reference
nDigi TransPort WR64
See Digi TransPort WR64 Hardware Reference
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2018 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
Digi TransPort WR Routers User Guide 3

any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[e-mail]
Include the document title and part number (Digi TransPort WR Routers User Guide, 90002282 F) in
the subject line of your email.
Digi TransPort WR Routers User Guide 4

Contents
Applicable models 3
What's new in Digi TransPort version 4.5
Configuration and management
Using the web interface 16
Log in to the web interface 16
Log out of the web interface 16
Using the command line 17
Access the command line interface 17
Log in to the command line interface 17
Exit the command line interface 17
Execute a command from the web interface 18
Display command and parameter help using the ? character 18
Revert command settings using the ! character 19
Auto-complete commands and parameters 19
Enter configuration commands 19
Display status and statistics using show commands 20
Enter strings in configuration commands 20
Interfaces
Ethernet interfaces 22
Configure Ethernet interfaces 22
Show Ethernet status and statistics 23
Cellular interfaces 26
Configure cellular interfaces 26
Show cellular status and statistics 27
Unlock a SIM card 29
Signal strength for 4G cellular connections 29
Signal strength for 3G and 2G cellular connections 29
Tips for improving cellular signal strength 30
Wi-Fi interfaces 31
Configure the Wi-Fi module channel 32
Configure the Wi-Fi module band and protocol 32
Configure a Wi-Fi access point with no security 33
Configure a Wi-Fi access point with enterprise security 34
Show Wi-Fi access point status and statistics 36
Configure a Wi-Fi client and add client networks 37
Digi TransPort WR Routers User Guide 5

Digi TransPort WR Routers User Guide 6
Show Wi-Fi client status and statistics 39
Serial interface 40
Configure the serial interface 40
Show serial status and statistics 42
Local Area Networks (LANs)
About Local Area Networks (LANs) 44
Configure a LAN 45
Show LAN status and statistics 46
Delete a LAN 48
DHCP servers 48
Configure a DHCP server 48
Show DHCP server settings 53
DHCP relay 53
Wide Area Networks (WANs)
Using Ethernet interfaces in a WAN 56
Using cellular interfaces in a WAN 56
WAN priority and default route metrics 57
WAN failover 57
Active vs. passive failure detection 58
Configure a Wide Area Network (WAN) 61
Assigning priority to WANs 61
Configuring a WANfor IPv6 61
Show WAN status and statistics 64
Delete a WAN 66
IPv6
Common IPv6 address types 67
Auto address assignment 68
Prefix delegation 69
More information on IPv6 69
Configure a LAN for IPv6 69
Enable IPv6 on a LAN 69
Show LAN IPv6 status 70
Configure a WAN for IPv6 71
Enable IPv6 on a WAN 71
Configure prefix delegation on a WAN 71
Show WAN IPv6 status 72
Security
Local users 74
User access levels 74
Configure a user 75
Delete a user 77
Change a user's password 77
Firewall management with IP filters 79
IPfilter source and destination options 79
IP filter criteria options 80

Digi TransPort WR Routers User Guide 7
IP filter rule priority 80
Add an IP filter rule 80
Delete an IP filter rule 81
Edit an IP filter rule 81
Enable or disable an IP filter rule 82
Show IP filter rules 82
IP filter examples 84
Certificate and key management 88
Create a private key file 88
Create a Diffie Hellman key file 88
List private key files 88
Upload a private key file 89
Delete a private key file 89
Create a certificate signing request (CSR) 89
Remote Authentication Dial-In User Service (RADIUS) 90
Set up a RADIUS server 90
Set up a RADIUS backup server 90
Use the local-auth parameter 90
Configure a RADIUS server 91
Hotspot
Hotspot authentication modes 95
Selecting a LAN to be used by the hotspot 96
Hotspot DHCP server 96
Hotspot security 96
Hotspot configuration 97
Enable the hotspot using the default configuration 98
Configure the hotspot with click-through authentication 102
Configure the hotspot with a local shared password 108
Configure the hotspot with a RADIUSshared password 114
Configure the hotspot with RADIUS users authentication 122
Configure the hotspot to use HotspotSystem 130
Show hotspot status and statistics 135
Show current hotspot configuration 135
Customize the hotspot login page 136
Edit sample hotspot html pages 137
Upload custom hotspot HTML pages 137
Use a remote webserver 139
Hotspot RADIUS attributes 139
Services and applications
Location information 142
Enable the GNSS module 142
Configure the device to accept location messages from external sources 142
Forward location information to a remote host 145
Show location information 149
Auto-run commands 151
Python 152
Run a Python application at the command line 152
Show running Python applications 152
Stop a Python application 152
Run an interactive Python session 153

Digi TransPort WR Routers User Guide 8
Configure a Python application to run automatically at startup 153
Digidevice module 155
Log messages for Python applications 157
Port forwarding 158
Add a port forwarding rule 158
Delete a port forwarding rule 159
Enable or disable a port forwarding rule 159
Show port forwarding rules 160
Using an SSH server 160
Configure a Secure Shell (SSH) server 160
Use SSHto connect to the TransPort command-line interface 160
Terminate an SSH connection 161
Using SSH with key authentication 161
Using SSH with certificate authentication 162
Example: Use an SSL certificate authentication 164
Example: Use an SSL certificate authentication with shared account 165
Remote management
Remote Manager 168
Configure Digi Remote Manager 168
Show Digi Remote Manager connection status 170
Enable health reporting and set sample interval 170
Using Simple Network Management Protocol (SNMP) 171
Configure SNMPv1 and SNMPv2 172
Configure SNMPv3 172
Routing
IP routing 175
Configure general IP settings 175
Configure a static route 176
Show the IPv4 routing table 177
Delete a static route 177
Routing rules 178
Dynamic DNS 180
Configure dynamic DNS 180
Web filtering (OpenDNS) 181
Configure web filtering using Cisco Umbrella 181
Clear device ID 182
Dynamic Mobile Network Routing (DMNR) 182
Configure Verizon DMNR 182
Show DMNR status 183
Quality of Service (QoS) 184
Configure QoS 184
Show QoS configuration and status 186
Virtual Router Redundancy Protocol (VRRP) 187
Configure VRRP protocol 187
Show VRRP status and statistics 189
Virtual Private Networks (VPN)
IPsec 191

Digi TransPort WR Routers User Guide 9
Configure an IPsec tunnel 192
Example: IPsec tunnel between a TransPort LR54 and TransPort WR44 196
Debug an IPsec configuration 198
Show IPsec status and statistics 199
IPsec XAuth authentication 199
OpenVPN 203
Configure an OpenVPN server for routing mode and certificate authentication 204
Configure an OpenVPN server to use username and password authentication 207
Configure an OpenVPN server to use RADIUS authentication 208
Configure an OpenVPN client for routing mode and certificate authentication 209
Configure an OpenVPN client to use username and password authentication 211
Configure ciphers and digests for use on the OpenVPN tunnel 212
Configure keepalives on the OpenVPN tunnels 213
Configure renegotiation on the OpenVPN tunnels 214
Configure pushing routes to OpenVPN clients 215
Configure an OpenVPN client and server for bridge mode 216
Show OpenVPN server status and statistics 217
Show OpenVPN client status and statistics 217
Debug an OpenVPN tunnel 218
Example: OpenVPN tunnel in routing mode with username and password authentication 219
Example: OpenVPN tunnel in bridging mode using certificate authentication 220
Generic Routing Encapsulation (GRE) 221
Configuring a GREtunnel 221
Show GRE tunnels 224
Example: GRE tunnel over an IPSec tunnel 225
System settings
Configure system settings 231
Show system information 233
System date and time 233
Network Time Protocol 234
Set the date and time manually 238
Set the time zone and Daylight Saving Time 238
Show system date and time 238
Configure Power button power down behavior 239
Configure power delays for power ignition sensor 239
Update system firmware 240
Certificate management for firmware images 241
Manage firmware updates using Digi Remote Manager 242
Failover and recovery during system update 242
How to recover a WR54, LR54, or LR54-FIPS that will not boot 243
Update cellular module firmware 244
Reboot the device 244
Reset the device to factory defaults 246
Configuration files
Default configuration files 248
Configuration file sections 248
Shared configuration files and device-specific passwords 249
Save configuration settings to a file 249
Switch configuration files 249
Use multiple configuration files to test configurations on remote devices 250

Digi TransPort WR Routers User Guide 10
File system
File system 253
Create a directory 253
Display directory contents 254
Change the current directory 254
Delete a directory 255
Display file contents 256
Copy a file 256
Rename a file 257
Delete a file 258
Upload and download files 259
Diagnostics and troubleshooting
Logs 262
Configure options for event and system logs 262
Configure syslog servers 263
Display logs 264
Find and filter log file entries 265
Save logs to a file 265
Download log files 266
Clear logs 266
Event log levels 266
Analyze traffic 267
Capture data traffic 267
Example filters for capturing data traffic 268
Show captured data traffic 269
Clear captured data traffic 270
Save captured data traffic to a file 270
Use the "ping" command to troubleshoot network connections 271
Stop ping commands 271
Ping to check internet connection 271
Use the "traceroute" command to diagnose IProuting problems 271
Use the "show tech-support" command 272
Troubleshooting 274
Ethernet LED does not illuminate 274
Device cannot communicate on WAN/ETH1 port 275
Device cannot communicate on ETH2, ETH3, or ETH4 ports 277
Verify cellular connectivity 279
Check cellular signal strength 283
Verify serial connectivity 283
Web reference
Dashboard 288
DMNR page 289
File system page 290
Firewall page 291
GRE page 293
Cellular locked pin page 294
Device preferences page 296
Hotspot page 297
Interfaces—cellular page 300

Digi TransPort WR Routers User Guide 11
Interfaces—Ethernet page 302
Interfaces—Wi-Fi page 303
IPsec Tunnels page 307
IPsec XAuth Users page 309
Local Networks page 310
Location page 312
Location Client page 312
Log configuration page 314
Log viewer page 315
New GRE tunnel page 316
New Wide Area Network (WAN) page 317
OpenVPN client page 321
OpenVPN route management page 324
OpenVPN server page 325
OpenVPN user management page 328
Port forwarding page 329
Python autostart page 330
Quality of Service (QoS) queues page 331
Quality of Service (QoS) WANs page 333
RADIUS page 334
Digi Remote Manager page 336
Syslog server configuration page 337
User Management page 338
VRRP page 339
Wide Area Network (WAN) page—Cellular 341
Wide Area Network (WAN) page—Ethernet 343
Wide Area Network (WAN) page 345
Command reference
? (Display command help) 349
! (Revert command settings) 350
analyzer 351
atcommand 352
autorun 353
cd 354
cellular 355
clear 358
cloud 360
copy 362
date 363
defroute 364
del 365
dhcp-host 365
dhcp-option 365
dhcp-server 367
dir 369
dmnr 370
dsl 371
dynamic-dns 372
eth 373
exit 374
firewall 375
firewall6 376
gpio-analog 377

Digi TransPort WR Routers User Guide 12
gpio-digital 378
gpio-calibrate 379
gre 380
hotspot 381
ip 384
ip-filter 385
ipsec 387
lan 391
location 393
location-client 394
mkdir 395
more 396
openvpn-client 397
openvpn-route 400
openvpn-server 401
openvpn-user 405
ping 406
pki 408
port-forward 410
power 412
pwd 413
python 414
python-autostart 415
qos-filter 416
qos-queue 418
radius 419
reboot 421
rename 422
rmdir 423
route 424
routing-rule 425
save 427
serial 428
show analyzer 429
show cellular 430
show cloud 433
show config 434
show dhcp 435
show dmnr 435
show eth 436
show firewall 439
show firewall6 440
show gre 441
show hotspot 442
show ip-filter 443
show ipsec 444
show ipstats 446
show lan 448
show location 450
show log 451
show openvpn-client 452
show openvpn-server 454
show port-forward 455
show python 456
show route 457

Digi TransPort WR Routers User Guide 13
show routing-rule 458
show serial 459
show system 460
show tech-support 462
show usb 463
show vrrp 464
show wan 465
show web-filter 467
show wifi-ap 468
show wifi-client 471
snmp 474
snmp-community 475
snmp-user 476
sntp 477
ssh 478
syslog 479
system 480
traceroute 483
unlock 484
update 485
user 487
vrrp 488
wan 489
web-filter 492
wifi-ap 493
wifi-client 495
wifi-client-network 496
wifi-module 497
xauth-user 498
Advanced topics
Using firewall and firewall6 commands 500
Using the firewall command 500
TransPort firewalls based on iptables firewall 500
Tables and chains in firewall rules 500
Policy rules 501
Default firewall configuration 502
Allow SSH access on a WAN 503
Allow SSH access for only a specific source IP address 503
Allow HTTPS access on a WAN 504
Allow HTTPS access on a WAN from only a specific source IPaddress 504
Add a firewall rule 504
Update a firewall rule 506
Delete a firewall rule 506
Show firewall rules and counters 507
Understanding system firewall rules 510
Who should read this section 510
What are system firewall rules? 510
User priority chains 510
Testing new firewall rules 511
Using the autorun command to force firewall rule precedence 511
System chains 512
Migration of rules from older firmware 512
Future releases 512

What's new in Digi TransPort version 4.5
Digi TransPort version 4.5 includes the following new features and enhancements:
nSupport for the Digi TransPort WR54.
nSupport for PySerial.
nSupport for DHCP static IP mapping.
nSupport for configuration of DHCP options.
Digi TransPort WR Routers User Guide 14

Configuration and management
Using the web interface 16
Using the command line 17
Digi TransPort WR Routers User Guide 15

Configuration and management Using the web interface
Digi TransPort WR Routers User Guide 16
Using the web interface
The first time you power on a TransPort device, the Getting Started Wizard steps you through the
process of initial configuration. After the wizard completes, the next time you access the device, a
login prompt appears. See Log in to the web interface for login instructions.
After you log in, the TransPort Dashboard appears. The Dashboard provides a snapshot of current
activity for the device. See Dashboard for details.
In this guide, task topics how how to perform tasks:
Web
Shows how to perform a task using the web interface.
Command line
Shows how to perform a task using the command line interface.
Log in to the web interface
The first time you access a TransPort device, the Getting Started Wizard runs. The wizard steps
through initial device configuration. After you run the Getting Started Wizard, the next time you access
the device, a login prompt for the web interface appears.
1. Open a browser and enter the default address for the TransPort device: http://192.168.1.1.
The Device Login prompt appears.
2. Enter your username and password, and click Login.
Note If you did not change the username or password during initial setup, use the default
username admin and the unique password printed on the device label. The device label is also
attached to the bottom of the device.
The TransPort Dashboard appears. See Dashboard.
Log out of the web interface
nClick the Logout button in the upper right corner of the web interface.

Configuration and management Using the command line
Digi TransPort WR Routers User Guide 17
Using the command line
Digi TransPort provides a command-line interface you can use to configure the device, display status
and statistics, as well as update firmware and manage device files. See Command reference for
details on all available commands.
In this guide, task topics how how to perform tasks:
Web
Shows how to perform a task using the web interface.
Command line
Shows how to perform a task using the command line interface.
Access the command line interface
You can access the TransPort device using the serial1 interface or SSH connection. You can use open-
source terminal software, such as PuTTY and TeraTerm.
Alternatively, you can open the command line interface in the web interface via the Device Console:
nOn the menu, click System > Device Console. The Device Console appears.
Log in to the command line interface
1. Connect to the TransPort device via the Serial 1 interface or with a SSH connection.
nFor Serial connections, the baud rate is 115200,8data bits, no parity, 1stop bit, and no
flow control.
nFor SSH connections, the default IP address of the device is 192.168.1.1.
2. At the login prompt, enter the username and password. The default username is admin. The
unique password for your device is printed on the device label.
Username: admin
Password: **********
A welcome message appears, followed by the current access permission level for your username and
the timeout for the command session, followed by the systemcommand prompt.
Welcome admin
Access Level: super
Timeout : 3600 seconds
digi.router>
Exit the command line interface
Enter the exit command.

Configuration and management Using the command line
Digi TransPort WR Routers User Guide 18
Execute a command from the web interface
1. On the menu, click System > Device console. The device console appears.
digi.router>
2. To display the currently supported list of commands for the device, type the question mark (?)
character after the system prompt:
digi.router> ?
3. To display help for a specific command, enter the command followed by the question mark (?)
character.
For example, to get help for the pki command, enter:
digi.router> pki ?
Display command and parameter help using the ? character
The question mark (?) character can display help text for all commands, individual commands, and
command parameters. For example:
digi.router> eth ?
Configures an Ethernet interface
Syntax:
eth <1 - 4> <parameter> <value>
Available Parameters:
Parameter Description
----------------------------------------------------------------------------
description Ethernet interface description
duplex Ethernet interface duplex mode
mtu Ethernet interface MTU
speed Ethernet interface speed
state Enables or disables Ethernet interface
digi.router> eth
To display help on parameters, enter the command, the interface number as needed, and parameter
name, followed by the ?character. For example, to display help for the eth command speed
parameter, enter:
digi.router> eth 1 speed ?
Syntax : eth 1 speed <value>
Description : Ethernet interface speed
Current Value : auto
Valid Values : auto, 10, 100, 1000
Default value : auto
digi.router> eth 1 speed
To use the ?character in a parameter value, enclose it within "characters. For example, to display the
help text for the system command's description parameter:

Configuration and management Using the command line
Digi TransPort WR Routers User Guide 19
digi.router> system 1 description ?
To set the system command description parameter to ?:
digi.router> system 1 description "?"
Revert command settings using the ! character
To revert command settings to their defaults, use the exclamation mark (!) character.
To revert the default setting of the interfaces parameter on the lan command, enter:
digi.router> lan 1 interfaces !
To use the !character in a parameter value, enclose it within "characters. For example, to reset the
Wi-Fi SSID to the default (blank):
wifi 1 ssid !
To set the Wi-Fi SSID to !abc:
wifi 1 ssid "!abc"
Auto-complete commands and parameters
When entering a command and parameter, pressing the Tab key causes the command-line interface
to auto-complete as much of the command and parameter as possible.
Auto-complete applies to these command elements only :
nCommand names. For example, entering cell<Tab> auto-completes the command as cellular
nParameter names. For example:
lping int<Tab> auto-completes the parameter as interface
lsystem loc<Tab>auto-completes the parameter as location.
nParameter values, where the value is one of an enumeration or an on|off type; for example, eth
1 duplex auto|full|half
Auto-complete does not function for:
nParameter values that are string types
nInteger values
nFile names
nSelect parameters passed to commands that perform an action
Enter configuration commands
Configuration commands configure settings for various device features. Configuration commands
have the following format:
<command> <instance> <parameter> <value>
Where <instance> is the index number associated with the feature. For example, this command
configures the eth1 Ethernet interface:

Configuration and management Using the command line
Digi TransPort WR Routers User Guide 20
digi.router> eth 1 ip-address 10.1.2.3
For commands with only one instance, you do not need to enter the instance. For example:
digi.router> system timeout 100
Display status and statistics using show commands
The TransPort show commands display status and statistics for various features.
For example:
nshow config displays all the current configuration settings for the device. This is a particularly
useful during initial device startup after running the Getting Started Wizard, or when
troubleshooting the device.
nshow system displays system information and statistics for the device, including CPU usage.
nshow eth displays status and statistics for specific or all Ethernet interfaces.
nshow cellular displays status and statistics for specific or all cellular interfaces.
Enter strings in configuration commands
For string parameters, if the string value contains a space, the value must be enclosed in quotation
marks; For example, to assign a descriptive name for the device using the system command, enter:
digi.router> system description "HQ router"