Digi Connect IT 4 User manual

Digi Connect IT® 4
User Guide
User Guide

Revision history—90002355
Revision Date Description
A July 2019 Initial release.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2019 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Send comments
Documentation feedback: To provide feedback on this document, send your comments to
[e-mail].
Customer support
Digi Technical Support: Digi offers multiple technical support plans and service packages to help our
customers get the most out of their Digi product. For information on Technical Support plans and
pricing, contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Digi Connect IT® 4 User Guide 2

Contents
Digi Connect IT® 4 User Guide
Get started with Connect IT 4
Verify product components 8
Included equipment 8
Required additional equipment 9
Cellular ONLY: Insert the CORE module 10
Prerequisites 10
Connect the hardware to a network 10
Connect hardware and connect to a cellular network 11
Connect hardware and connect to site network using an Ethernet LAN 11
Connect equipment to the Connect IT serial ports
Serial port pinout and use 13
Configure Connect IT using Remote Manager
Before you begin 15
Enable local management for Connect IT 4 16
Create a Remote Manager account and add devices 16
Create a Remote Manager account 16
Log in to Remote Manager 17
Add a Connect IT to your inventory 17
Update the firmware on Connect IT from Remote Manager 18
View identifying information about the Connect IT on the Home page 19
Access the Remote Manager configuration page 19
Schedule system maintenance from Remote Manager 20
Configure FIPS mode from Remote Manager 22
Configure VPN using Remote Manager 23
Configure an IPsec tunnel for a VPN from Remote Manager 23
Configure an OpenVPN server from Remote Manager 23
Configure an IP tunnel for a VPN from Remote Manager 24
View system status information from Remote Manager 25
View Connect IT summary dashboard 25
View Connect IT connection history 25
Digi Connect IT® 4 User Guide 3

Digi Connect IT® 4 User Guide 4
Configure Connect IT using the web user interface
Log in to the Connect IT web UI 27
Manage users, groups, password, and two-factor authentication from the web UI 27
Configure idle timeout from the web UI 27
Add a new user from the web UI 28
Add a user group from the web UI 28
Configure the user groups from the web UI 28
Change a Connect IT password from the web UI 30
Configure the user groups from the web UI 30
Configure two-factor authentication from the web UI 31
Configure authentication methods from the web UI 32
Update Connect IT firmware 33
Download the Connect IT firmware to your PC 33
Configure connection to Remote Manager from the web UI 33
Update modem firmware 34
Configure a serial port 34
Configure the connection settings for a serial port 34
Monitor serial port changes 35
Enable a Telnet connection on the serial port 36
Enable a TCP connection on the serial port 37
Enable an SSH connection on the serial port 38
Configure the modem in the Connect IT 39
Configure the modem 39
Define a custom APN 42
Configure an IPpassthrough for the modem 42
Configure a custom gateway for the modem 44
Configure an IPv4 network interface for the modem 44
Configure an IPv6 network interface for the modem 45
Configure the network from the web UI 47
Configure FIPS mode from the web UI 47
Configure VPN from the web UI 48
Configure an IPsec tunnel for a VPN from the web UI 48
Configure an OpenVPN server from the web UI 49
Configure an IP tunnel for a VPN from the web UI 49
Back up, restore, and delete the configuration 50
Back up the Connect IT configuration 50
Restore the Connect IT configuration 50
Delete the Connect IT configuration 50
Configure the firewall from the web UI 50
Configure services from the web UI 51
Monitor the data from the Connect IT 52
Reboot from the web UI 53
Immediately reboot the Connect IT 53
Schedule a reboot from the web UI 53
Schedule system maintenance from the web UI 53
Synchronize system time from the web UI 55
View Connect IT status information 55
Download an archive of the supported MIBs 55
Download a support report file 56
Configure and view events and logs in the web UI 56
View events information 56
Configure log messages from the web UI 56
View system log information 57

Digi Connect IT® 4 User Guide 5
Troubleshooting
Cellular network fallback 59
Reset your device to the factory defaults 59
Tips for improving cellular signal strength 59
Download a support report 59
Hardware
Connect IT 4 hardware and LEDs 60
Front panel and LEDs 60
Back panel 61
Signal strength 62
Exchange power tips 62
Select SIM card 63
Regulatory and safety information
FCC certifications 64
USA 64
INDUSTRY CANADA - CAN ICES-3(A)/NMB-3(A) 64
European Union 64
Safety warnings 64

Digi Connect IT® 4 User Guide
This guide provides reference and usage information for the Connect IT.
The 4 provides out-of-band management for remote network or infrastructure devices. Cellular
connectivity, available as standard in some models and as an option in other models, provides fast
reliable cellular connections without additional equipment. All connections are encrypted for security.
Digi Connect IT® 4 User Guide 6

Get started with Connect IT 4
This section explains what comes with each Connect IT model, how to install the necessary software,
and how to connect the hardware.
1. Verify product components.
2. Cellular ONLY: Insert the CORE module.
3. Connect the hardware to a network.
4. Access the device from the web UI.
5. Update the firmware on the Connect IT from the web UI.
6. Change the password from the web UI.
7. Administrators only: Additional configuration to the Connect IT can be done in Remote Manager
or in the Connect IT's web user interface.
nConfigure Connect IT using Remote Manager
nConfigure Connect IT using the web user interface
8. Connect equipment to the Connect IT serial ports.
Digi Connect IT® 4 User Guide 7

Get started with Connect IT 4 Verify product components
Digi Connect IT® 4 User Guide 8
Verify product components
Verify that you have the following included equipment.
Included equipment
Equipment Description
Digi Connect IT 4
For detailed information about the front and back panels, see
Connect IT 4 hardware and LEDs.
Power supply kit If you purchased the USvariant (-OUS) you will receive a USplug
adapter.
If you purchased the global variant (-GLB) you will receive the
Universal power supply kit.
For instructions about exchanging power tips, see Exchange
power tips.
Antennas (2)

Get started with Connect IT 4 Verify product components
Digi Connect IT® 4 User Guide 9
Equipment Description
COREmodule
This is included with some versions of the Connect IT 4 modules.
See
Connect hardware and connect to a cellular network.
COREmodule cover and cover
screws (2)
Mounting screws
These are used to mount the Connect IT 4 to a wall or another
surface.
Required additional equipment
Equipment Description
Ethernet cable CAT 5/6 Ethernet cable
The cable is used to connect your PC to the Connect IT 4 for initial
configuration.
See Connect hardware and connect to site network using an
Ethernet LAN.
SIMcard An activated SIM card provided by your cellular network operator.
You can insert up to two SIMcards in the CORE module. See
Cellular ONLY: Insert the CORE module.
The Connect IT 4 supports the standard mini-SIM cards (2FF).
Note This is required only if you are using a COREmodule to
connect to a cellular network. See Connect hardware and connect
to a cellular network.

Get started with Connect IT 4 Cellular ONLY: Insert the CORE module
Digi Connect IT® 4 User Guide 10
Cellular ONLY: Insert the CORE module
Note If you are connecting to a network using an Ethernet connection, you can skip this section. See
Connect hardware and connect to site network using an Ethernet LAN.
This section explains how to connect the COREmodule and cellular antennas to the Connect IT
hardware.
Prerequisites
nActivated SIM card from your cellular network provider.
nCORE module. This may be included with your device. If it is not, you must purchase one
separately.
To connect the hardware and connect to the cellular network:
1. Insert your activated SIM card into the COREmodule. The notched end of SIM card should be
inserted first, with the gold metal contacts facing down. You will hear a click once the SIM is
completely inserted.
Note If one SIM card is being used, insert the SIMcard into the SIM 1 slot.
2. Insert the COREmodule into the device.
a. Orient the device so the front of the device is facing you.
b. Remove the COREmodule slot cover from the left side of the device.
c. Insert the COREmodule into the slot. Make sure the pin holes on the back of the
module match the location of the pins in the slot.
d. Push the module into the slot.
e. Push the white handle down until you hear it click.
f. Optionally, you can screw one of the COREmodule cover screws into the center of
the handle.
g. Place the white CORE module cover over the end of the device. Make sure that the
antenna labels are oriented correctly.
h. Push the cover in place.
3. Attach both of the included antennas. While gripping the metal connector section with your
thumb and forefinger, tighten until secure. Do not tighten the antenna by holding any part of
the plastic antenna housing.
Note Attaching both antennas ensures maximum performance. If a single antenna solution is
required, it must be attached to the antenna port labeled MAIN.
Connect the hardware to a network
These sections explain how to connect to either a cellular network using the COREmodule or to a site
network using an Ethernet cable.

Get started with Connect IT 4 Connect the hardware to a network
Digi Connect IT® 4 User Guide 11
Note This is required if you want to automatically connect the Connect IT to Digi® Remote Manager.
For more information, see Configure Connect IT using Remote Manager.
nConnect hardware and connect to a cellular network
nConnect hardware and connect to site network using an Ethernet LAN
Connect hardware and connect to a cellular network
This section explains how to connect the Connect IT hardware and then connect to a cellular network,
using a CORE module.
Note By default, the device uses a cellular network. As an alternative, you can also use an Ethernet
LAN connection. See Connect hardware and connect to site network using an Ethernet LAN.
To connect the hardware and connect to the cellular network:
1. Insert a COREmodule with an activated SIM card. See Cellular ONLY: Insert the CORE module.
2. Connect the power supply unit to the device.
3. Verify the cellular network signal strength indicator on the front of the 4 shows two or more
bars for proper operation. See Signal strength.
Connect hardware and connect to site network using an Ethernet
LAN
This section explains how to connect the Connect IT hardware and then connect to a site network,
using an Ethernet cable.
Prerequisites
nCAT5/6 Ethernet cable, which must be purchased separately.
To connect the hardware and connect to a site network:
1. Plug the power supply unit into an AC power outlet and connect the other end to the Power
plug on the 4.
2. Connect one end of an Ethernet cable to your site gateway.
3. Connect the other end of the Ethernet cable to the Ethernet LAN port on the 4.

Get started with Connect IT 4 Connect the hardware to a network
Digi Connect IT® 4 User Guide 12

Connect equipment to the Connect IT serial ports
After your device is connected and powered up, you can connect equipment to the device using the
serial ports.
The serial ports on the 4 provide console access to connected critical equipment through the cellular
network or a connected Ethernet LAN. You can connect up to 4 network devices to the 4 serial ports.
For pinout information, see Serial port pinout and use.
You must use a cable with an RJ45 connector to connect to the 4 with a RJ45, DB9F or DB9M
connector, as determined by your device type, to terminate to your device. Consult the user guide for
the device you are connecting to the 4 to determine the connector type, cable type, and pinout
positions for your specific device.
The serial ports are enabled by default. The network devices connected to the serial ports may be
accessed using Remote Manager, the local web UI, TCP, telnet, or SSH connections. TCP, telnet and
SSH connections to serial ports are disabled by default and must be enabled by a device-specific
configuration.
Serial port pinout and use
The RS232 standard requires support for baud rates up to 9600 baud on shielded multicore cable up
to 50 feet (15 meters) long. For the 4, the use of standard CAT 5 cables enables serial communication
at all baud rates up to 50 feet. CAT5 unshielded twisted pair cable lengths much longer than 50 feet
have been verified at 9600 baud but are non-standard and are not guaranteed.
Digi Connect IT® 4 User Guide 13

Connect equipment to the Connect IT serial ports Serial port pinout and use
Digi Connect IT® 4 User Guide 14
The 4 RS232 serial ports are DTE and have the following pin configuration.
Pin Description Signal
Pin 1 RTS Request to send Output from 4
Pin 2 DCD Data carrier detect Input to 4
Pin 3 RXD Receive data Input to 4
Pin 4/5 Ground Signal ground
Pin 6 TXD Transmit data Output from 4
Pin 7 DTR Data terminal ready Output from 4
Pin 8 CTS Clear to send Input to 4
Note Ring indicate (RI) and data set ready (DSR) are not implemented.
The serial ports use a female RJ45 jack to enable connection using UTP Ethernet cabling.

Configure Connect IT using Remote Manager
The following actions are typically only performed by your network administrator.
Before you begin
Connect to Remote Manager
You must configure your computer to connect to the Connect IT, and then enable the Connect IT to
connect to Remote Manager. You have the following options:
nConnect the Connect IT 4 to your network When the Connect IT4 has an internet
connection, the Connect IT 4 will download its configuration settings from the legacy Digi
aView portal by default. This configuration then automatically re-configure the Connect IT 4 to
sync with Digi Remote Manager. For instructions, see Connect the hardware to a network.
nIf you do not connect the Connect IT 4 to your network, you can configure your computer to
connect to the Connect IT 4, and then manually enable the Connect IT 4 to connect to the Digi
Remote Manager. For instructions, see Enable local management for Connect IT 4.
Create a Remote Manager account
You must create a Remote Manager account and add your Connect IT devices to your Remote
Manager inventory.
Note For more detailed information about using Remote Manager, see the Digi Remote Manager User
Guide.
Digi Connect IT® 4 User Guide 15

Configure Connect IT using Remote Manager Enable local management for Connect IT 4
Digi Connect IT® 4 User Guide 16
Enable local management for Connect IT 4
You can manually enable local management for Connect IT to be able to connect to Remote Manager.
Note This process should be completed only if you did not connect the Connect IT 4 to your network,
which automatically re-configures the Connect IT 4 to sync with Digi Remote Manager. For
instructions on connecting the Connect IT to the network, see Connect the hardware to a network.
1. Log in to the Connect IT web UI.
2. Select the Configuration option in the left pane.
3. Expand the Central management section.
4. De-select the Enable central management option.
5. In the Users section at the bottom of the screen, re-enter the password.
6. Click Save.
7. Log out of the Connect IT web UI.
8. Log in to the Connect IT web UIagain.
9. Select the Configuration option in the left pane.
10. Expand the Central management section.
a. Select the Enable central management option.
b. From the Service list box, select the Digi Remote Manager option.
c. In the Management server field, enter the URLfor Remote Manager.
11. Click Save.
Create a Remote Manager account and add devices
To be able to use Remote Manager, you must create a Remote Manager account and add your
Connect IT devices to the device list. You should also verify that the device is enabled to connect to
Remote Manager.
Create a Remote Manager account
Before you can use Remote Manager, you must create a free trial account.
Account owner
Part of creating the Remote Manager account is creating the first user account in Remote Manager.
The first user becomes the account owner, who may not be a particular person, but a role within your
organization. You may want to choose a user name that reflects a role rather than an actual person.
See Determine the Account owner.
1. Go to www.digi.com/remotemanager.
2. Click 30-Day Free Trial.
3. Complete the registration form, making note of the your user name and password for future
reference.
Note This first account is the account owner for Remote Manager.

Configure Connect IT using Remote Manager Create a Remote Manager account and add devices
Digi Connect IT® 4 User Guide 17
4. Review and accept the Terms of Service.
5. Enter the image code in the text field.
6. Click Start Free Trial. An account confirmation screen appears.
7. Check your email inbox for your account activation link.
8. Click the account activation link in your email.
9. You can now log in to your Remote Manager account and begin adding devices to your device
inventory.
Log in to Remote Manager
After you have created your Remote Manager account, you can log in.
Note See Create a Remote Manager account for instructions on how to create an account.
1. In a web browser, type https://remotemanager.digi.com.
2. Type your login credentials in the Username and Password fields.
Note If you have forgotten your credentials, click Forgot Username or Password and follow
the online instructions. See Forgot user name or password.
3. Click Log in.
Add a Connect IT to your inventory
This topic explains how to add a Connect ITto Remote Manager.
Note You can also add multiple devices using a CSV file. See Add multiple devices using a CSV file.
1. Log in to Remote Manager.
2. Click Device Management > Devices.
3. Click Add Devices. The Add Devices dialog appears.

Configure Connect IT using Remote Manager Update the firmware on Connect IT from Remote Manager
Digi Connect IT® 4 User Guide 18
4. For each device you want to add:
a. From the drop-down menu, select the device identifier type to use for the device:
MAC address,IMEI #, or Device ID. Typically, you can find the MAC address or IMEI
number on the device label.
Note If a device has both a MAC address and an IMEI #, you must use the MAC address to
add the device.
b. Type in the device identifier.
c. In the Install Code field, enter the installation code found on the device label. If you
attempt to add a device that requires an installation code with a missing or
incorrect code, you receive an error message. For devices that were not
manufactured with an associated installation code, the installation code is optional.
d. Click Add. The device is added to the device list box.
e. Repeat this process to add additional devices.
5. When you have finished entering devices, review the listed devices. If necessary, use Remove
to remove any incorrect entries.
6. Click OK to add all the listed devices to your Remote Manager inventory.
7. After a few minutes, click the refresh icon in the toolbar to refresh the device list. The new
devices appear in your device inventory.
8. Information about the added device is saved in the event log. Click Admin > Event Log to
display the Event log view.
Update the firmware on Connect IT from Remote Manager
You can update the firmware on Connect IT from Remote Manager. You must first get the current
firmware file, and then you can upload it to the device.
1. Download the Connect IT firmware to your PC.
2. Log in to your Remote Manager account.
3. Click Device Management.
4. From the list of devices, click on the Connect IT for which you want to update the firmware.
5. In the toolbar, click More > Update Firmware. The Update Firmware dialog appears.
6. Click Browse to select the firmware file you just downloaded.
7. Click Update Firmware to immediately update the firmware.
Note By default, the firmware will update when you click the Update Firmware button. If you
want to schedule when you want the update to occur, click the gear icon to display the options.
See Schedule an action in the Digi Remote Manager User Guide for detailed information about
the schedule options.

Configure Connect IT using Remote
Manager
View identifying information about the Connect IT on the Home
page
Digi Connect IT® 4 User Guide 19
View identifying information about the Connect IT on the Home
page
You can display information about Connect IT in the Home page, such as the IPaddress, global
address, and the Connect ITdevice ID. From this page you can also view the data stream and device
file.
1. Log into your Remote Manager account.
2. Click the Device Management tab.
3. Click Devices.
4. From the list of devices, find the Connect IT for which you want to view identifying information.
Note You can use the search bar to search for the Connect IT by an identifier, such as the MAC
address, device ID, or device type.
5. Double-click on the device or click Properties in the toolbar. The Home page for the Connect IT
appears.
Access the Remote Manager configuration page
You can display basic identification and version information about the selected Connect IT in the
configuration Home page. You can also configure the device from this page.
Note The configuration options in Remote Manager are the same as the configuration options in the
web user interface.
1. Log into your Remote Manager account.
2. Click Device Management >Devices.
3. Click Devices.
4. From the list of devices, click the Connect IT that you want to configure.
5. In the toolbar, click Configure.
As an alternative, click Properties in the toolbar and then from the Home page, click Edit
Device Configuration.
6. The configuration Home page appears, and shows basic identification and version information
about the selected Connect IT.

Configure Connect IT using Remote Manager Schedule system maintenance from Remote Manager
Digi Connect IT® 4 User Guide 20
7. You can use the links in the toolbar to manage the Connect IT.
nHome: Click Home to return to the configuration Home page.
nConfig: Click Config to display configuration menu options:
lAuthentication
lCentral management
lFirewall
lMonitoring
lNetwork
lSerial
lServices
lSystem
lVPN
nStatus: Click Status to display a system status menu option:
lCommunications
lSystem
Schedule system maintenance from Remote Manager
You can schedule the system to run a set of system maintenance tasks to run within a specified time
window. You can also schedule a custom script to run at the specified time and frequency.
Note If you are scheduling a custom script, you must have previously created the script.
For example, you can specify a start time of 10:00 and a duration window of 2 hours. In this example,
the system maintenance can take place and custom scripts run at any time between 10:00 and 12:00.
1. Log into your Remote Manager account.
2. Access the Remote Manager configuration page.
3. Click Config > System in the toolbar. The System page appears.
4. Expand the Schedule Tasks section.