Digi TX64 User manual

TX64
User Guide

Revision history—90002348
Revision Date Description
A November 2019 Initial release of DigiTX64 firmware version 19.11.
B February 2020 Release of DigiTX64 firmware version 20.2:
nDigi SureLinkTM support (formerly known as active
recovery).
lEnabled by default on preconfigured WANs and
WWANs.
nRole-based user access.
lAllow shell option added to authentication.
lRead-only access option added to user
configuration.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
TX64 User Guide 2

Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[e-mail]
Include the document title and part number (TX64 User Guide, 90002348 B) in the subject line of your
email.
TX64 User Guide 3

Contents
Revision history—90002348 2
What's new in Digi TX64 version 20.2
Digi TX64 Quick start
Quick start using the Digi Remote Manager mobile app 14
Step 1: What's in the box 14
Step 2: Gather accessories 15
Step 3: Connect 16
Step 4: Power up 16
Step 5: Configure 16
Digi TX64 hardware reference
TX64 key features 17
TX64 hardware specifications 17
TX64 front view 17
TX64 LEDs 18
Power 18
GNSS Service 18
Wi-Fi1 Service 18
Wi-Fi2 Service 18
WWAN1/WWAN2 Signal 18
WWAN1/WWAN2 Service 18
Ethernet 1-4 Link and Activity (on rear panel) 19
Power sensor and button behavior 19
TX64 back view 19
Digi TX64 serial connector pinout 20
Hardware setup
Install SIM cards 22
Tips for improving cellular signal strength 22
Connect data cables 22
Connect antennas 22
Mount the TX64 to a mounting surface 23
Connect power 23
Mount and ground chassis 24
TX64 electrical rating 24
TX64 User Guide 4

TX64 User Guide 5
TX64 power connector 25
Configuration and management
Review TX64 default settings 27
Local WebUI 27
Digi Remote Manager 27
Default interface configuration 27
Other default configuration settings 29
Reset default password for the default admin user 30
Configuration methods 31
Using Digi Remote Manager 32
Access Digi Remote Manager 32
Using the web interface 32
Log out of the web interface 34
Using the command line 35
Access the command line interface 35
Log in to the command line interface 35
Exit the command line interface 36
Interfaces
Wide Area Networks (WANs) 38
Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 39
Configure WAN/WWAN priority and default route metrics 39
WAN/WWAN failover 42
Configure SureLink active recovery to detect WAN/WWAN failures 43
Configure the device to reboot when a failure is detected 50
Disable SureLink 56
Example: Use a ping test for WAN failover from Ethernet to cellular 60
Using Ethernet devices in a WAN 64
Using cellular modems in a Wireless WAN (WWAN) 64
Configure a Wide Area Network (WAN) 80
Configure a Wireless Wide Area Network (WWAN) 87
Show WAN and WWAN status and statistics 96
Delete a WAN or WWAN. 98
Local Area Networks (LANs) 100
About Local Area Networks (LANs) 101
Configure a LAN 101
Example: Configure two LANs 108
Show LAN status and statistics 117
Delete a LAN 118
DHCP servers 119
Create a Virtual LAN (VLAN) route 136
Bridging 140
Edit the preconfigured LAN1 bridge 141
Configure a bridge 144
Serial port
Configure the serial port 149
Show serial status and statistics 153

TX64 User Guide 6
Wi-Fi
Wi-Fi configuration 155
Default Wi-Fi configuration 155
Configure the Wi-Fi module channel 156
Configure the Wi-Fi module band and protocol 158
Configure a Wi-Fi access point with no security 160
Configure a Wi-Fi access point with personal security 166
Configure a Wi-Fi access point with enterprise security 172
Show Wi-Fi access point status and statistics 179
Configure a Wi-Fi client and add client networks 180
Show Wi-Fi client status and statistics 187
Hotspot
Hotspot authentication modes 190
Hotspot DHCP server 191
Hotspot security 191
Hotspot configuration 192
Enable hotspot using the default configuration 193
Change the default hotspot SSID 198
Change the default hotspot IP address and subnet 200
Change the default hotspot bandwidth limits 203
Add an Ethernet port to the default hotspot 205
Create a new hotspot 208
Configure the hotspot to use local shared password authentication 221
Configure the hotspot to use RADIUSshared password authentication 223
Configure the hotspot to use RADIUS users authentication 227
Configure the hotspot to use HotspotSystem authentication 231
Show hotspot status and statistics 234
Customize the hotspot login page 236
Edit sample hotspot HTML pages 237
Upload custom hotspot HTML pages 238
Restore hotspot default sample pages 240
Hotspot RADIUS attributes 241
Routing
IP routing 243
Configure a static route 244
Delete a static route 247
Policy-based routing 249
Configure a routing policy 250
Example: Dual WAN policy-based routing 258
Example: Route traffic to a specific WAN interface based on the client MACaddress 261
Routing services 266
Configure routing services 267
Show the routing table 269
Dynamic DNS 271
Configure dynamic DNS 271
Virtual Router Redundancy Protocol (VRRP) 277
Configure VRRP 277
Show VRRP status and statistics 281

TX64 User Guide 7
Virtual Private Networks (VPN)
IPsec 283
IPsec data protection 283
IPsec modes 283
Internet Key Exchange (IKE) settings 283
Authentication 284
Configure an IPsec tunnel 284
Configure IPsec failover 306
Configure SureLink active recovery for IPsec 307
Show IPsec status and statistics 314
Configure a Simple Certificate Enrollment Protocol client 315
Example: SCEP client configuration with Fortinet SCEP server 320
OpenVPN 325
Configure an OpenVPN server 326
Configure an OpenVPN Authentication Group and User 335
Configure an OpenVPN client by using an .ovpn file 340
Configure an OpenVPN client without using an .ovpn file 343
Configure active recovery for OpenVPN 348
Show OpenVPN server status and statistics 355
Show OpenVPN client status and statistics 356
Generic Routing Encapsulation (GRE) 357
Configuring a GREtunnel 357
Show GRE tunnels 363
Example: GRE tunnel over an IPSec tunnel 364
Services
Allow remote access for web administration and SSH 382
Configure the web administration service 386
Configure SSHaccess 394
Use SSH with key authentication 401
Generating SSH key pairs 401
Configure telnet access 404
Configure DNS 409
Simple Network Management Protocol (SNMP) 416
SNMP Security 416
Configure Simple Network Management Protocol (SNMP) 416
Download MIBs 421
Location information 422
Configure the location server 423
Enable or disable the internal GNSS module 427
Use a dead reckoning external USB GNSS receiver 429
Configure the device to accept location messages from external sources 430
Forward location information to a remote host 436
Show location information 443
System time 444
Configure the system time 444
Network Time Protocol 447
Configure the device as an NTP server 447
Configure a multicast route 453
Enable service discovery (mDNS) 456
Use the iPerf service 459
Example performance test using Iperf3 464

TX64 User Guide 8
Applications
Configure applications to run automatically 467
Task one: Upload the application 467
Task two: Configure the application to run automatically 469
Run a Python application at the shell prompt 473
Start an interactive Python session 475
Digidevice module 477
Use digidevice.cli to execute CLI commands 478
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 479
Use digidevice.config for device configuration 481
Use Python to respond to Digi Remote Manager SCI requests 483
Use digidevice runtime to access the runtime database 492
Using Python to upload the device name to Digi Remote Manager 494
The digidevice led submodule 496
User authentication
TX64 user authentication 500
User authentication methods 500
Add a new authentication method 502
Delete an authentication method 504
Rearrange the position of authentication methods 506
Authentication groups 508
Change the access rights for a predefined group 510
Add an authentication group 512
Delete an authentication group 516
Local users 519
Change a local user's password 520
Configure a local user 522
Delete a local user 529
Terminal Access Controller Access-Control System Plus (TACACS+) 532
TACACS+ user configuration 533
TACACS+ server failover and fallback to local authentication 534
Configure your TX64 device to use a TACACS+ server 534
Remote Authentication Dial-In User Service (RADIUS) 539
RADIUS user configuration 540
RADIUS server failover and fallback to local configuration 540
Configure your TX64 device to use a RADIUS server 541
Disable shell access 545
Set the idle timeout for TX64 users 547
Example user configuration 550
Example 1: Administrator user with local authentication 550
Example 2: RADIUS, TACACS+, and local authentication for one user 552
Firewall
Firewall configuration 560
Create a custom firewall zone 560
Configure the firewall zone for a network interface 562
Delete a custom firewall zone 564
Port forwarding rules 566
Configure port forwarding 566
Delete a port forwarding rule 571

TX64 User Guide 9
Packet filtering 574
Configure packet filtering 574
Enable or disable a packet filtering rule 578
Delete a packet filtering rule 580
Configure custom firewall rules 582
Configure captive portals 585
Delete captive portals 589
Configure Quality of Service options 590
Web filtering 602
Configure web filtering with Cisco Umbrella 602
Configure web filtering with manual DNS servers 605
Verify your web filtering configuration 608
Show web filter service information 611
System administration
Review device status 613
Configure system information 614
Update system firmware 616
Manage firmware updates using Digi Remote Manager 616
Certificate management for firmware images 616
Update cellular module firmware 618
Reboot your TX64 device 619
Reboot your device immediately 619
Schedule reboots of your device 620
Reset the device to factory defaults 621
Configure power delays for power ignition sensor 624
Configure power button behavior 626
Configure automatic reboot behavior for temporary power drop 629
Configuration files 631
Save configuration changes 631
Save configuration to a file 632
Restore the device configuration 633
Schedule system maintenance tasks 636
Monitoring
intelliFlow 644
Enable intelliFlow 644
Use intelliFlow to display average CPU and RAMusage 647
Use intelliFlow to display top data usage information 648
Use intelliFlow to display data usage by host over time 650
Configure NetFlow Probe 651
Enable the Bluetooth scanner 656
Display the output of the Bluetooth scanner. 661
Enable the Wi-Fi scanner 663
Required configuration 663
Additional configuration 663
Display the output of the Wi-Fi scanner. 669
Central management with Digi Remote Manager
Digi Remote Manager support 673

TX64 User Guide 10
Configure Digi Remote Manager 673
Collect device health data and set the sample interval 677
Log into Digi Remote Manager 679
Use Digi Remote Manager to view and manage your device 680
Add a device to Digi Remote Manager 681
View Digi Remote Manager connection status 681
Use the Digi Remote Manager mobile app 682
Configure multiple devices using profiles 683
Learn more 683
File system
The TX64 local file system 685
Display directory contents 685
Create a directory 686
Display file contents 687
Copy a file or directory 687
Move or rename a file or directory 688
Delete a file or directory 689
Upload and download files 690
Upload and download files by using the WebUI 690
Upload and download files by using the Secure Copy command 691
Upload and download files using SFTP 692
Diagnostics
Generate a support report 695
View system event logs 696
View System Logs 696
View Event Logs 699
Configure syslog servers 701
Configure options for the event and system logs 703
Analyze network traffic 708
Configure packet capture for the network analyzer 709
Example filters for capturing data traffic 713
Capture packets from the command line 714
Stop capturing packets 715
Show captured traffic data 716
Save captured data traffic to a file 717
Download captured data to your PC 718
Clear captured data 719
Use the ping command to troubleshoot network connections 721
Ping to check internet connection 721
Stop ping commands 721
Use the traceroute command to diagnose IProuting problems 721
Digi TX64 regulatory and safety statements
RF exposure statement 723
Federal Communication (FCC) Part 15 Class B 723
Radio Frequency Interference (RFI) (FCC 15.105) 723
European Community - CE Mark Declaration of Conformity (DoC) 723
CE mark (Europe) 724

TX64 User Guide 11
Maximum transmit power for radio frequencies 725
Innovation, Science, and Economic Development Canada (IC) certifications 725
RoHS compliance statement 726
Safety statements 726
Special safety notes for wireless routers 727
Product disposal instructions 728
DigiTX64 Certifications
International EMC (Electromagnetic Compatibility) and safety standards 729
Command line interface
Access the command line interface 731
Log in to the command line interface 731
Exit the command line interface 732
Execute a command from the web interface 732
Display help for commands and parameters 733
The help command 733
The question mark (?) command 733
Display help for individual commands 734
Use the Tab key or the space bar to display abbreviated help 735
Auto-complete commands and parameters 735
Available commands 737
Use the scp command 738
Display status and statistics using the show command 739
show config 739
show system 740
show network 740
Device configuration using the command line interface 741
Execute configuration commands at the root Admin CLI prompt 741
Display help for the config command from the root Admin CLI prompt 741
Configuration mode 743
Enable configuration mode 743
Enter configuration commands in configuration mode 743
Save changes and exit configuration mode 744
Exit configuration mode without saving changes 744
Configuration actions 744
Display command line help in configuration mode 745
Move within the configuration schema 748
Manage elements in lists 748
The revert command 751
Enter strings in configuration commands 752
Example: Create a new user by using the command line 753
Example: Configure multiple WANs and LANs by using the command line 754
Command line reference 765
analyzer 766
cp 768
help 769
ls 770
mkdir 771
modem 772
more 777
mv 778

TX64 User Guide 12
ping 779
reboot 780
rm 781
scp 782
show 783
system 791
traceroute 793
update 796

What's new in Digi TX64 version 20.2
Release of DigiTX64 firmware version 20.2:
nDigi SureLinkTM support (formerly known as active recovery).
lEnabled by default on preconfigured WANs and WWANs.
nRole-based user access.
lAllow shell option added to authentication.
lRead-only access option added to user configuration.
TX64 User Guide 13

Digi TX64 Quick start
The following steps guide you through the setup of your DigiTX64 device.
Quick start using the Digi Remote Manager mobile app
After connecting your hardware and powering up, you can use the Digi Remote Manager mobile app to
quickly install your TX64 into your Digi Remote Manager account.
Here's how:
If you already have a Digi Remote Manager account:
1. Download the Digi Remote Manager mobile app from the App Store (iPhone) or Google Play
(Android).
2. Click Log in or Sign Up and log in to your account.
3. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
4. Follow the prompts to complete your TX64 registration.
If you need to sign up for a Digi Remote Manager account:
1. Click here to create a new account. You'll receive an email with login instructions.
2. On your smartphone or tablet, download the Digi Remote Manager mobile app from the App
Store (iPhone) or Google Play (Android).
3. Open the Digi Remote Manager mobile app, click Log in and log into your new account.
4. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
5. Follow the prompts to complete your TX64 registration.
Step 1: What's in the box
When you open the TX64 package, look for the following:
nDigi TX64 device
The Digi TX64 has a product label on the bottom of the device. The label includes product
identification information and the default password assigned to the device.
nWelcome card
Provides a link to this Quick start.
TX64 User Guide 14

Digi TX64 Quick start Step 2: Gather accessories
TX64 User Guide 15
nDigi TX64 label
Printed copy of the product label on the bottom of your device. You can affix this label to the
top or side of the device such that you can access the label after the device is mounted or store
the label in a safe place for future reference.
Step 2: Gather accessories
Digi offers several TX64 accessory kits so you can purchase exactly what you need to support your
TX64. See TX64 support for a list of accessory kits.
Here's the list of accessories used in this Quick start:
Antennas
Use antennas provided by a Digi accessory kit or use alternate antennas that
comply with the TX64 antenna requirements.
Ethernet cable(s)
nIf you intend to configure Ethernet WANaccess at this time, use an
Ethernet cable to connect the TX64 WAN/ETH1 port to a WAN.
nUse an Ethernet cable to connect the TX64 ETH2 port to a laptop or PC to
access the local web interface via a browser.
Phillips-head screwdriver
Use a #1 Phillips-head screwdriver to remove and replace the SIM gasket cover
when installing SIM cards.
Power supply
Use a power supply provided by a Digi accessory kit or use an alternate power
supply that complies with the power supply requirements.
Laptop or personal computer
Use an Ethernet cable to connect your TX64 to a laptop or PC.
SIM card(s)
If you intend to configure cellular WWAN access at this time, acquire SIM cards as
needed. Note the carrier, network APN (Access Point Name), and SIM pin (if any)
for each card.
Smart phone or tablet
Optional: Use a smart phone or table to to automatically register your TX64 in
your Digi Remote Manager account and connect to your cellular network. See
Quick start using the Digi Remote Manager mobile app.

Digi TX64 Quick start Step 3: Connect
TX64 User Guide 16
Step 3: Connect
a. If you intend to configure cellular WWAN access at this time, Install SIM cards.
b. Attach antenna(s).
c. If you intend to configure Ethernet WAN access at this time, use an Ethernet cable to connect
the TX64 WAN/ETH1 port to a hub with access to the Internet.
d. Use an Ethernet cable to connect the TX64 ETH2 port to your PC.
Step 4: Power up
a. Connect DC power.
Note If you need help understanding power requirements, see TX64 power connector.
b. Indicator LEDs blink to show status during startup.
c. Wait for the power LED to stop blinking. The device is ready.
Step 5: Configure
a. On the PC connected to the TX64, open a browser and go to 192.168.2.1.
b. Log into the TX64:
User name: Use the default user name: admin.
Password: Use the unique password printed on the bottom label of the device (or the printed
label included in the package).

Digi TX64 hardware reference
TX64 key features
The Digi TX64 is an LTE-Advanced (LTE-A) router. Key features include:
nWired Gigabit Ethernet (4-port) for onboard systems.
nSegmented private versus public data communication across dual 600 Mbps CAT11 cellular.
nVideo offload over 1.7 Gbps 802.11ac Wi-Fi backhaul.
nPassenger Wi-Fi over 867 Mbps 802.11ac access point.
nSuperior network performance management through Digi Remote Manager.
nGlobal deployment support.
TX64 hardware specifications
For a detailed list of TX64 hardware specifications, see Digi TX64 specifications.
TX64 front view
The following figure shows front view of the TX64.
Item Decription
SIM gasket See Install SIM cards.
LEDs See TX64 LEDs.
Power button See Power sensor and button behavior.
TX64 User Guide 17

Digi TX64 hardware reference TX64 LEDs
TX64 User Guide 18
TX64 LEDs
The TX64 LEDs are located on the top front panel. The number of LEDs varies by model. During bootup,
the front-panel LEDs light up in sequence to indicate boot progress.
Power
nOff: No power.
nBlinking Blue: Unit is powering on.
nBlue: Unit has power.
GNSS Service
nSolid Green: GNSS is enabled and has a valid fix.
nBlinking Green: GNSS is enabled but does not have a valid fix.
nOff: GNSS is not enabled.
Wi-Fi1 Service
nSolid Green: Wi-Fi access points or Wi-Fi clients using Wi-Fi1 radio are enabled.
nOff: No Wi-Fi access points or Wi-Fi clients using Wi-Fi1 radio are enabled.
Wi-Fi2 Service
nSolid Green: Wi-Fi access points or Wi-Fi clients using Wi-Fi2 radio are enabled.
nOff: No Wi-Fi access points or Wi-Fi clients using Wi-Fi2 radio are enabled.
WWAN1/WWAN2 Signal
Indicates strength of cellular signal.
nOff: No service.
nYellow: Poor / Fair signal.
nGreen: Good / Excellent signal.
WWAN1/WWAN2 Service
Indicates the presence and level of cellular service running on the device.
nOff: No service.
nBlinking Green: 2G/3G/4G connection is coming up.
nSolid Yellow: 2G or 3G connection is up.
nSolid Green: 4G connection is up.

Digi TX64 hardware reference Power sensor and button behavior
TX64 User Guide 19
Ethernet 1-4 Link and Activity (on rear panel)
The LEDs on the WAN/ETH1,ETH2,ETH3, and ETH4 ports indicate that the Ethernet network interface
is up and there is activity on the network interface.
Left LED (on top of port connector)
nOff: No Ethernet link detected.
nBlinking amber: Indicates Ethernet traffic.
Right LED (on top of port connector)
nOff: No Ethernet link detected.
nSolid green: 10/100 Mbps link detected.
nSolid amber: 1000 Mbps link detected.
Power sensor and button behavior
The TX64 has an ignition sensor that can automatically power on the device when the ignition line is
on.
You can also power on the TX64 using the Power button. If the TX64 does not automatically restart
when the power ignition sense is on, press the Power button to restore power.
TX64 back view
The following figure shows the back view of the TX64.
nAntenna connectors
nWAN/ETH1
nETH2/ETH3/ETH4
nUSB 3.0

Digi TX64 hardware reference Digi TX64 serial connector pinout
TX64 User Guide 20
nSerial
nPower
Digi TX64 serial connector pinout
The TX64 is a DTE device. The pinout for the DB9 serial connector is as follows:
Signal name RS232 signal
DTE signal
direction DB9 pin number
Transmit Data TxD In 3
Receive Data RxD Out 2
Ready To Send RTS In 7
Clear to Send CTS Out 8
Data Set Ready DSR Out 6
Ground GND N/A 5
Data Carrier Detect DCD Out 1
Data Terminal Ready DTR In 4
Ring Indicate RI Out 9