Digi TX54 User manual

TX54
User Guide

Revision history—90002357
Revision Date Description
A November 2019 Initial release of DigiTX54 firmware version 19.11.
B Februrary 2020 Release of DigiTX54 firmware version 20.2:
nDigi SureLinkTM support (formerly known as active
recovery).
lEnabled by default on preconfigured WANs and
WWANs.
nRole-based user access.
lAllow shell option added to authentication.
lRead-only access option added to user
configuration.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
TX54 User Guide 2

Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[e-mail]
Include the document title and part number (TX54 User Guide, 90002357 B) in the subject line of your
email.
TX54 User Guide 3

Contents
Revision history—90002357 2
What's new in Digi TX54 version 20.2
Digi TX54 Quick start
Quick start using the Digi Remote Manager mobile app 14
Step 1: What's in the box 14
Step 2: Gather accessories 15
Step 3: Connect 16
Step 4: Power up 16
Step 5: Configure 16
Digi TX54 hardware reference
Digi TX54 features and specifications 17
TX54 accessories 17
TX54 front view 17
TX54 LEDs 18
Single cellular models 18
Dual cellular models 18
Dual Wi-Fi models 18
Power 18
GNSS Service 19
Wi-Fi Service (single Wi-Fi models) 19
Wi-Fi1 Service (dual Wi-Fi models) 19
Wi-Fi2 Service (dual Wi-Fi models) 19
WWAN Signal 19
WWAN Service 19
Ethernet 1-4 Link and Activity (on rear panel) 19
Power sensor and button behavior 20
TX54 back view 20
Digi TX54 serial connector pinout 20
Hardware setup
Install SIM cards 23
Tips for improving cellular signal strength 23
Connect data cables 23
Connect antennas 23
TX54 User Guide 4

TX54 User Guide 5
Mount the TX54 to a mounting surface 24
Connect power 24
Mount and ground chassis 25
TX54 electrical rating 26
TX54 power connector 26
Battery power management 26
Configuration and management
Review TX54 default settings 28
Local WebUI 28
Digi Remote Manager 28
Default interface configuration 28
Other default configuration settings 31
Reset default password for the default admin user 31
Configuration methods 33
Using Digi Remote Manager 35
Access Digi Remote Manager 35
Using the web interface 35
Log out of the web interface 36
Using the command line 37
Access the command line interface 37
Log in to the command line interface 37
Exit the command line interface 38
Interfaces
Wide Area Networks (WANs) 40
Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 41
Configure WAN/WWAN priority and default route metrics 41
WAN/WWAN failover 44
Configure SureLink active recovery to detect WAN/WWAN failures 45
Configure the device to reboot when a failure is detected 52
Disable SureLink 58
Example: Use a ping test for WAN failover from Ethernet to cellular 62
Using Ethernet devices in a WAN 66
Using cellular modems in a Wireless WAN (WWAN) 66
Configure a Wide Area Network (WAN) 82
Configure a Wireless Wide Area Network (WWAN) 89
Show WAN and WWAN status and statistics 98
Delete a WAN or WWAN. 101
Local Area Networks (LANs) 103
About Local Area Networks (LANs) 104
Configure a LAN 104
Example: Configure two LANs 111
Show LAN status and statistics 120
Delete a LAN 122
DHCP servers 123
Create a Virtual LAN (VLAN) route 139
Bridging 143
Edit the preconfigured LAN1 bridge 144
Configure a bridge 147

TX54 User Guide 6
Serial port
Configure the serial port 152
Show serial status and statistics 156
Wi-Fi
Wi-Fi configuration 158
Default Wi-Fi configuration 159
Configure the Wi-Fi module channel 160
Configure the Wi-Fi module band and protocol 162
Configure a Wi-Fi access point with no security 164
Configure a Wi-Fi access point with personal security 171
Configure a Wi-Fi access point with enterprise security 177
Show Wi-Fi access point status and statistics 184
Configure a Wi-Fi client and add client networks 185
Show Wi-Fi client status and statistics 192
Hotspot
Hotspot authentication modes 195
Hotspot DHCP server 196
Hotspot security 196
Hotspot configuration 197
Enable hotspot using the default configuration 198
Change the default hotspot SSID 203
Change the default hotspot IP address and subnet 205
Change the default hotspot bandwidth limits 208
Add an Ethernet port to the default hotspot 210
Create a new hotspot 213
Configure the hotspot to use local shared password authentication 226
Configure the hotspot to use RADIUSshared password authentication 227
Configure the hotspot to use RADIUS users authentication 232
Configure the hotspot to use HotspotSystem authentication 236
Show hotspot status and statistics 239
Customize the hotspot login page 242
Edit sample hotspot HTML pages 243
Upload custom hotspot HTML pages 244
Restore hotspot default sample pages 246
Hotspot RADIUS attributes 247
Routing
IP routing 249
Configure a static route 250
Delete a static route 253
Policy-based routing 255
Configure a routing policy 256
Example: Dual WAN policy-based routing 264
Example: Route traffic to a specific WAN interface based on the client MACaddress 267
Routing services 272
Configure routing services 273
Show the routing table 276

TX54 User Guide 7
Dynamic DNS 278
Configure dynamic DNS 278
Virtual Router Redundancy Protocol (VRRP) 283
Configure VRRP 283
Show VRRP status and statistics 287
Virtual Private Networks (VPN)
IPsec 290
IPsec data protection 290
IPsec modes 290
Internet Key Exchange (IKE) settings 290
Authentication 291
Configure an IPsec tunnel 291
Configure IPsec failover 313
Configure SureLink active recovery for IPsec 314
Show IPsec status and statistics 321
Configure a Simple Certificate Enrollment Protocol client 322
Example: SCEP client configuration with Fortinet SCEP server 326
OpenVPN 332
Configure an OpenVPN server 333
Configure an OpenVPN Authentication Group and User 343
Configure an OpenVPN client by using an .ovpn file 347
Configure an OpenVPN client without using an .ovpn file 350
Configure active recovery for OpenVPN 355
Show OpenVPN server status and statistics 362
Show OpenVPN client status and statistics 363
Generic Routing Encapsulation (GRE) 364
Configuring a GREtunnel 364
Show GRE tunnels 370
Example: GRE tunnel over an IPSec tunnel 371
Services
Allow remote access for web administration and SSH 389
Configure the web administration service 393
Configure SSHaccess 401
Use SSH with key authentication 408
Generating SSH key pairs 408
Configure telnet access 411
Configure DNS 416
Simple Network Management Protocol (SNMP) 423
SNMP Security 423
Configure Simple Network Management Protocol (SNMP) 423
Download MIBs 428
Location information 429
Configure the location server 430
Enable or disable the internal GNSS module 434
Use a dead reckoning external USB GNSS receiver 436
Configure the device to accept location messages from external sources 437
Forward location information to a remote host 443
Show location information 450
System time 451
Configure the system time 451

TX54 User Guide 8
Network Time Protocol 454
Configure the device as an NTP server 454
Configure a multicast route 460
Enable service discovery (mDNS) 463
Use the iPerf service 466
Example performance test using Iperf3 471
Applications
Configure applications to run automatically 474
Task one: Upload the application 474
Task two: Configure the application to run automatically 476
Run a Python application at the shell prompt 480
Start an interactive Python session 482
Digidevice module 484
Use digidevice.cli to execute CLI commands 485
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 486
Use digidevice.config for device configuration 488
Use Python to respond to Digi Remote Manager SCI requests 490
Use digidevice runtime to access the runtime database 499
Using Python to upload the device name to Digi Remote Manager 501
The digidevice led submodule 503
User authentication
TX54 user authentication 507
User authentication methods 507
Add a new authentication method 509
Delete an authentication method 511
Rearrange the position of authentication methods 513
Authentication groups 515
Change the access rights for a predefined group 517
Add an authentication group 519
Delete an authentication group 523
Local users 526
Change a local user's password 527
Configure a local user 529
Delete a local user 536
Terminal Access Controller Access-Control System Plus (TACACS+) 538
TACACS+ user configuration 539
TACACS+ server failover and fallback to local authentication 540
Configure your TX54 device to use a TACACS+ server 540
Remote Authentication Dial-In User Service (RADIUS) 545
RADIUS user configuration 546
RADIUS server failover and fallback to local configuration 546
Configure your TX54 device to use a RADIUS server 547
Disable shell access 551
Set the idle timeout for TX54 users 553
Example user configuration 555
Example 1: Administrator user with local authentication 555
Example 2: RADIUS, TACACS+, and local authentication for one user 557

TX54 User Guide 9
Firewall
Firewall configuration 565
Create a custom firewall zone 565
Configure the firewall zone for a network interface 567
Delete a custom firewall zone 569
Port forwarding rules 570
Configure port forwarding 570
Delete a port forwarding rule 575
Packet filtering 578
Configure packet filtering 578
Enable or disable a packet filtering rule 582
Delete a packet filtering rule 584
Configure custom firewall rules 586
Configure captive portals 589
Delete captive portals 593
Configure Quality of Service options 594
Web filtering 605
Configure web filtering with Cisco Umbrella 605
Configure web filtering with manual DNS servers 608
Verify your web filtering configuration 611
Show web filter service information 614
System administration
Review device status 616
Configure system information 617
Update system firmware 619
Manage firmware updates using Digi Remote Manager 619
Certificate management for firmware images 619
Update cellular module firmware 622
Reboot your TX54 device 623
Reboot your device immediately 623
Schedule reboots of your device 624
Reset the device to factory defaults 626
Configure power delays for power ignition sensor 628
Configure power button behavior 630
Configure power input voltage 632
Configuration files 635
Save configuration changes 635
Save configuration to a file 636
Restore the device configuration 637
Schedule system maintenance tasks 640
Monitoring
intelliFlow 648
Enable intelliFlow 648
Use intelliFlow to display average CPU and RAMusage 651
Use intelliFlow to display top data usage information 652
Use intelliFlow to display data usage by host over time 654
Configure NetFlow Probe 655
Enable the Bluetooth scanner 660
Display the output of the Bluetooth scanner. 665

TX54 User Guide 10
Enable the Wi-Fi scanner 667
Required configuration 667
Additional configuration 667
Display the output of the Wi-Fi scanner. 673
Central management with Digi Remote Manager
Digi Remote Manager support 677
Configure Digi Remote Manager 677
Collect device health data and set the sample interval 681
Log into Digi Remote Manager 683
Use Digi Remote Manager to view and manage your device 684
Add a device to Digi Remote Manager 685
View Digi Remote Manager connection status 685
Use the Digi Remote Manager mobile app 686
Configure multiple devices using profiles 687
Learn more 687
File system
The TX54 local file system 689
Display directory contents 689
Create a directory 690
Display file contents 691
Copy a file or directory 691
Move or rename a file or directory 692
Delete a file or directory 693
Upload and download files 694
Upload and download files by using the WebUI 694
Upload and download files by using the Secure Copy command 695
Upload and download files using SFTP 696
Diagnostics
Generate a support report 699
View system event logs 700
View System Logs 700
View Event Logs 703
Configure syslog servers 705
Configure options for the event and system logs 707
Analyze network traffic 712
Configure packet capture for the network analyzer 713
Example filters for capturing data traffic 717
Capture packets from the command line 718
Stop capturing packets 719
Show captured traffic data 719
Save captured data traffic to a file 721
Download captured data to your PC 722
Clear captured data 723
Use the ping command to troubleshoot network connections 724
Ping to check internet connection 724
Stop ping commands 724
Use the traceroute command to diagnose IProuting problems 724

TX54 User Guide 11
Digi TX54 regulatory and safety statements
RF exposure statement 726
Federal Communication (FCC) Part 15 Class B 726
Radio Frequency Interference (RFI) (FCC 15.105) 726
European Community - CE Mark Declaration of Conformity (DoC) 726
CE mark (Europe) 727
ANATEL (Brazil) 728
Maximum transmit power for radio frequencies 729
Innovation, Science, and Economic Development Canada (IC) certifications 729
RoHS compliance statement 730
Safety statements 730
Special safety notes for wireless routers 731
Product disposal instructions 732
DigiTX54 Certifications
International EMC (Electromagnetic Compatibility) and safety standards 733
Command line interface
Access the command line interface 735
Log in to the command line interface 735
Exit the command line interface 736
Execute a command from the web interface 736
Display help for commands and parameters 737
The help command 737
The question mark (?) command 737
Display help for individual commands 738
Use the Tab key or the space bar to display abbreviated help 739
Auto-complete commands and parameters 739
Available commands 741
Use the scp command 742
Display status and statistics using the show command 743
show config 743
show system 744
show network 744
Device configuration using the command line interface 745
Execute configuration commands at the root Admin CLI prompt 745
Display help for the config command from the root Admin CLI prompt 745
Configuration mode 747
Enable configuration mode 747
Enter configuration commands in configuration mode 747
Save changes and exit configuration mode 748
Exit configuration mode without saving changes 748
Configuration actions 748
Display command line help in configuration mode 749
Move within the configuration schema 752
Manage elements in lists 752
The revert command 755
Enter strings in configuration commands 756
Example: Create a new user by using the command line 757
Example: Configure multiple WANs and LANs by using the command line 758
Command line reference 769

TX54 User Guide 12
analyzer 770
cp 772
help 773
ls 774
mkdir 775
modem 776
more 781
mv 782
ping 783
reboot 784
rm 785
scp 786
show 787
system 795
traceroute 797
update 800

What's new in Digi TX54 version 20.2
Release of DigiTX54 firmware version 20.2:
nDigi SureLinkTM support (formerly known as active recovery).
lEnabled by default on preconfigured WANs and WWANs.
nRole-based user access.
lAllow shell option added to authentication.
lRead-only access option added to user configuration.
TX54 User Guide 13

Digi TX54 Quick start
The following steps guide you through the setup of your DigiTX54 device.
Quick start using the Digi Remote Manager mobile app
After connecting your hardware and powering up, you can use the Digi Remote Manager mobile app to
quickly install your TX54 into your Digi Remote Manager account.
Here's how:
If you already have a Digi Remote Manager account:
1. Download the Digi Remote Manager mobile app from the App Store (iPhone) or Google Play
(Android).
2. Click Log in or Sign Up and log in to your account.
3. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
4. Follow the prompts to complete your TX54 registration.
If you need to sign up for a Digi Remote Manager account:
1. Click here to create a new account. You'll receive an email with login instructions.
2. On your smartphone or tablet, download the Digi Remote Manager mobile app from the App
Store (iPhone) or Google Play (Android).
3. Open the Digi Remote Manager mobile app, click Log in and log into your new account.
4. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
5. Follow the prompts to complete your TX54 registration.
Step 1: What's in the box
When you open the TX54 package, look for the following:
nDigi TX54 device
The Digi TX54 has a product label on the bottom of the device. The label includes product
identification information and the default password assigned to the device.
nWelcome card
Provides a link to this Quick start.
TX54 User Guide 14

Digi TX54 Quick start Step 2: Gather accessories
TX54 User Guide 15
nDigi TX54 label
Printed copy of the product label on the bottom of your device. You can affix this label to the
top or side of the device such that you can access the label after the device is mounted or store
the label in a safe place for future reference.
Step 2: Gather accessories
Digi offers several TX54 accessory kits so you can purchase exactly what you need to support your
TX54. See TX54 support for a list of accessory kits.
Here's the list of accessories used in this Quick start:
Antennas
Use antennas provided by a Digi accessory kit or use alternate antennas that
comply with the TX54 antenna requirements.
Ethernet cable(s)
nIf you intend to configure Ethernet WANaccess at this time, use an
Ethernet cable to connect the TX54 WAN/ETH1 port to a WAN.
nUse an Ethernet cable to connect the TX54 ETH2 port to a laptop or PC to
access the local web interface via a browser.
Phillips-head screwdriver
Use a #1 Phillips-head screwdriver to remove and replace the SIM gasket cover
when installing SIM cards.
Power supply
Use a power supply provided by a Digi accessory kit or use an alternate power
supply that complies with the power supply requirements.
Laptop or personal computer
Use an Ethernet cable to connect your TX54 to a laptop or PC.
SIM card(s)
If you intend to configure cellular WWAN access at this time, acquire SIM cards as
needed. Note the carrier, network APN (Access Point Name), and SIM pin (if any)
for each card.
Smart phone or tablet
Optional: Use a smart phone or table to to automatically register your TX54 in
your Digi Remote Manager account and connect to your cellular network. See
Quick start using the Digi Remote Manager mobile app.

Digi TX54 Quick start Step 3: Connect
TX54 User Guide 16
Step 3: Connect
a. If you intend to configure cellular WWAN access at this time, Install SIM cards.
b. Attach antenna(s).
c. If you intend to configure Ethernet WAN access at this time, use an Ethernet cable to connect
the TX54 WAN/ETH1 port to a hub with access to the Internet.
d. Use an Ethernet cable to connect the TX54 ETH2 port to your PC.
Step 4: Power up
a. Connect DC power.
Note If you need help understanding power requirements, see TX54 power connector.
b. Indicator LEDs blink to show status during startup.
c. Wait for the power LED to stop blinking. The device is ready.
Step 5: Configure
a. On the PC connected to the TX54, open a browser and go to 192.168.2.1.
b. Log into the TX54:
User name: Use the default user name: admin.
Password: Use the unique password printed on the bottom label of the device (or the printed
label included in the package).

Digi TX54 hardware reference
Digi TX54 features and specifications
The Digi TX54 key features include:
nLTE-CAT 11 cellular with dual SIM for carrier failover/flexibility.
n802.11ac Wi-Fi with support for hotspots and content filtering.
n4 gigabit Ethernet ports for high-speed connectivity.
For a detailed list of TX54 hardware specifications, see TX54 specifications.
TX54 accessories
Digi offers the following TX54 accessories and accessory kits:
Digi part number Description
24000140 Power supply: Standard temp AC/DC power for installations up
to +40° C
76002079 Power supply: Extended temp AC/DC power supply for
installations up to +70° C
76002081 Accessory kit:
Extended temp AC/DC power supply for
installations up to +70° C
Ethernet cable
Cellular antennas (2)
Note For installations up to +74° C, use TRACO Power TPP-30-112J, TPP-30-115J, TPP-30-124J, and
TEX120-112.
TX54 front view
The following figure shows the front view of the TX54 dual cellular model. Other models will look
slightly different.
TX54 User Guide 17

Digi TX54 hardware reference TX54 LEDs
TX54 User Guide 18
Item Decription
SIM gasket See Install SIM cards
LEDs See TX54 LEDs
Power button See Power sensor and button behavior
TX54 LEDs
The TX54 LEDs are located on the top front panel. The number of LEDs varies by model. During bootup,
the front-panel LEDs light up in sequence to indicate boot progress.
Single cellular models
Dual cellular models
Dual Wi-Fi models
Power
nOff: No power.
nBlinking Blue: Unit is powering on.
nBlue: Unit has power.

Digi TX54 hardware reference TX54 LEDs
TX54 User Guide 19
GNSS Service
nSolid Green: GNSS is enabled and has a valid fix.
nBlinking Green: GNSS is enabled but does not have a valid fix.
nOff: GNSS is not enabled.
Wi-Fi Service (single Wi-Fi models)
nSolid Green: Wi-Fi access points or Wi-Fi clients are enabled.
nOff: No Wi-Fi access points or Wi-Fi clients are enabled.
Wi-Fi1 Service (dual Wi-Fi models)
nSolid Green: Wi-Fi access points or Wi-Fi clients using Wi-Fi1 radio are enabled.
nOff: No Wi-Fi access points or Wi-Fi clients using Wi-Fi1 radio are enabled.
Wi-Fi2 Service (dual Wi-Fi models)
nSolid Green: Wi-Fi access points or Wi-Fi clients using Wi-Fi2 radio are enabled.
nOff: No Wi-Fi access points or Wi-Fi clients using Wi-Fi2 radio are enabled.
WWAN Signal
Indicates strength of cellular signal.
nOff: No service.
nYellow: Poor / Fair signal.
nGreen: Good / Excellent signal.
WWAN Service
Indicates the presence and level of cellular service running on the device.
nOff: No service.
nBlinking Green: 2G/3G/4G connection is coming up.
nSolid Yellow: 2G or 3G connection is up.
nSolid Green: 4G connection is up.
Ethernet 1-4 Link and Activity (on rear panel)
The LEDs on the WAN/ETH1,ETH2,ETH3, and ETH4 ports indicate that the Ethernet network interface
is up and there is activity on the network interface.

Digi TX54 hardware reference Power sensor and button behavior
TX54 User Guide 20
Left LED (on top of port connector)
nOff: No Ethernet link detected.
nBlinking amber: Indicates Ethernet traffic.
Right LED (on top of port connector)
nOff: No Ethernet link detected.
nSolid green: 10/100 Mbps link detected.
nSolid amber: 1000 Mbps link detected.
Power sensor and button behavior
The TX54 has an ignition sensor that can automatically power on the device when the ignition line is
on.
You can also power on the TX54 using the Power button. If the TX54 does not automatically restart
when the power ignition sense is on, press the Power button to restore power.
TX54 back view
The following figure shows the back view of the TX54 dual cellular model. Other models will look
slightly different.
nAntenna connectors
nWAN/ETH1
nETH2/ETH3/ETH4
nUSB 3.0
nSerial
nPower
Digi TX54 serial connector pinout
The TX54 is a DTE device. The pinout for the DB9 serial connector is as follows:
Signal name RS232 signal
DTE signal
direction DB9 pin number
Transmit Data TxD In 3
Receive Data RxD Out 2
Ready To Send RTS In 7