Digi Connect IT Mini User manual

Digi Connect IT® Mini
User Guide
User Guide

Revision history—90002358
Revision Date Description
A August 2019 Initial release.
B September 2019 Added information for Remote Power
Management.
Additional edits.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2019 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Send comments
Documentation feedback: To provide feedback on this document, send your comments to
[e-mail].
Customer support
Digi Technical Support: Digi offers multiple technical support plans and service packages to help our
customers get the most out of their Digi product. For information on Technical Support plans and
pricing, contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Digi Connect IT® Mini User Guide 2

Contents
Digi Connect IT® Mini User Guide
Get started with Connect IT Mini
Verify product components 8
Included equipment 8
Required additional equipment 9
Connect the hardware to a network 9
Connect hardware and connect to a cellular network 9
Connect hardware and connect to site network using an Ethernet port 10
Connect equipment to the Connect IT serial ports
Serial connector pinout 11
Connect equipment to the Connect IT Mini USB port
Configure the Connect IT Mini
Change a Connect IT password 15
Manage users and groups 15
Create a group 15
Configure an access control group 15
Create a user profile and assign an access control group 16
Configure two-factor authentication for a user 17
Update the firmware on the Connect IT 17
Update Connect IT firmware from the local web user interface 17
Update the firmware on Connect IT from Remote Manager 17
Download the Connect IT firmware to your PC 18
Configure authentication methods 18
Configure idle timeout 19
Update modem firmware from the local web user interface 19
Configure Remote Power Management 19
Configure the Connect IT to connect to a power controller 20
Create an access control group for power management and assign to users 22
View power controller status and manage power (Administrators) 22
Control the outlet power from a terminal (all users) 23
Configure a serial port 24
Configure the connection settings for a serial port 24
Digi Connect IT® Mini User Guide 3

Digi Connect IT® Mini User Guide 4
Monitor serial port changes 25
Enable a Telnet connection on the serial port 25
Enable a TCP connection on the serial port 26
Enable an SSH connection on the serial port 27
Configure a modem 28
Configure the modem 28
Define a custom APN list 32
Configure a custom gateway for the modem 32
Configure an IPv4 network interface for the modem 33
Configure an IPv6 network interface for the modem 34
Configure the network 35
Configure the Connect IT name from the local web user interface 36
Configure a VPN 37
Configure an IPsec tunnel for a VPN 37
Configure an OpenVPN server 37
Configure an IP tunnel for a VPN 38
Back up, restore, and delete the configuration 38
Back up the Connect IT configuration 38
Restore the Connect IT configuration 39
Delete the Connect IT configuration 39
Configure the firewall 39
Configure services 40
Monitor the data from the Connect IT 41
Reboot the Connect IT 41
Immediately reboot the Connect IT from the local web user interface 42
Immediately reboot the Connect IT from Remote Manager 42
Schedule a reboot from the local web user interface 42
Schedule system maintenance 43
Synchronize system time 44
View Connect IT status information 45
Download an archive of the supported MIBs 45
Download a support report file 45
Configure and view events and logs 46
View events information 46
Configure log messages 46
View system log information 47
Work with the web UI (web user interface)
Log in to the local web userinterface or Remote Manager 48
Access a screen in the local web user interface or Remote Manager 48
Add an item 48
Access the Terminal screen 49
Access help 49
Save your changes 49
Log in to the Connect IT local web user interface 49
Manually configure PCto connect to the Connect IT 50
Log in to Remote Manager and access the Configuration screen 51
Troubleshooting
Reset your device to the factory defaults 54
Tips for improving cellular signal strength 54

Digi Connect IT® Mini User Guide 5
Hardware
Connect IT Mini hardware and LEDs 55
Front panel and LEDs 55
Left side of the Connect IT Mini 56
Right side of the Connect IT Mini 57
Signal strength 57
Exchange power tips 58
Regulatory and safety information
FCC certifications 59
USA 59
European Union 59
Safety warnings 59

Digi Connect IT® Mini User Guide
This guide provides reference and usage information for the Connect IT Mini.
The Mini provides out-of-band management for remote network or infrastructure devices. Cellular
connectivity, available as standard in some models and as an option in other models, provides fast
reliable cellular connections without additional equipment. All connections are encrypted for security.
Digi Connect IT® Mini User Guide 6

Get started with Connect IT Mini
This section explains what comes with each Connect IT model, how to install the necessary software,
and how to connect the hardware.
1. Verify product components.
2. Connect the hardware to a network.
3. Access the device from the web UI.
4. Update Connect IT firmware from the local web user interface.
5. Change a Connect IT password.
6. Administrators only: Additional configuration to the Connect IT can be done in Remote Manager
or in the Connect IT's local web user interface. Configure the Connect IT Mini.
7. Connect equipment to the Connect IT serial ports.
8. Connect equipment to the Connect IT Mini USB port.
Digi Connect IT® Mini User Guide 7

Get started with Connect IT Mini Verify product components
Digi Connect IT® Mini User Guide 8
Verify product components
Verify that you have the following included equipment.
Included equipment
Equipment Description
Digi Connect IT Mini
For detailed information about the front and back panels, see
Connect IT Mini hardware and LEDs.
Power supply kit If you purchased the USvariant (-OUS) you will receive a USplug
adapter.
If you purchased the global variant (-GLB) you will receive the
Universal power supply kit.
For instructions about exchanging power tips, see Exchange
power tips.
Antenna Antenna for use with an LTEmodem.

Get started with Connect IT Mini Connect the hardware to a network
Digi Connect IT® Mini User Guide 9
Required additional equipment
Equipment Description
Ethernet cable CAT 5/6 Ethernet cable
The cable is used to connect your PC to the Connect IT for initial
configuration.
See Connect hardware and connect to site network using an
Ethernet port.
SIMcard An activated SIM card provided by your cellular network operator.
The Connect IT supports the standard mini-SIM cards (2FF).
Note This is required only if you are connecting to a cellular
network. See Connect hardware and connect to a cellular
network.
Connect the hardware to a network
These sections explain how to connect to either a cellular network or to a site network using an
Ethernet cable.
nConnect hardware and connect to a cellular network
nConnect hardware and connect to site network using an Ethernet port
Connect hardware and connect to a cellular network
This section explains how to connect the Connect IT hardware and then connect to a cellular network.
Prerequisites
nActivated SIM card from your cellular network provider.
nThe Connect IT Mini supports a standard mini-SIM (2FF).
Note By default, the device uses a cellular network. As an alternative, you can also use an Ethernet
LAN connection. See Connect hardware and connect to site network using an Ethernet port.
To connect the hardware and connect to the cellular network:
1. Make sure that the Connect IT is powered down and not connected to a power supply.
2. Insert your activated SIM card into the SIM slot, which is on the left side of the Connect IT. The
notched end of SIM card should be inserted first, with the gold metal contacts facing down. You
will hear a click once the SIM is completely inserted.
3. Attach the included antenna. While gripping the metal connector section with your thumb and
forefinger, tighten until secure. Do not tighten the antenna by holding any part of the plastic
antenna housing.
4. Connect the power supply unit to the device.
5. Verify the cellular network signal strength indicator on the front of the Mini shows two or more
bars for proper operation. See Signal strength.

Get started with Connect IT Mini Connect the hardware to a network
Digi Connect IT® Mini User Guide 10
Connect hardware and connect to site network using an Ethernet
port
This section explains how to connect the Connect IT hardware and then connect to a site network,
using an Ethernet cable.
Prerequisites
nCAT5/6 Ethernet cable, which must be purchased separately.
To connect the hardware and connect to a site network:
1. Plug the power supply unit into an AC power outlet and connect the other end to the PWR plug
on the Mini.
2. Connect one end of an Ethernet cable to your site gateway.
3. Connect the other end of the Ethernet cable to the ETH port on the Mini.

Connect equipment to the Connect IT serial ports
After your device is connected and powered up, you can connect equipment to the device using the
serial ports.
The serial port on the Connect IT Mini provide console access to connected critical equipment through
the cellular network, and optionally through a connected Ethernet LAN. Connect your network device
to the Connect IT serial port. For pinout information, see Serial connector pinout.
You must use a cable with an RJ45 connector to connect to the Connect IT Mini with a RJ45, DB9F or
DB9M connector, as determined by your device type, to terminate to your device. Consult the user
guide for the device you are connecting to the Connect IT to determine the connector type, cable type,
and pinout positions for your specific device.
The serial port is enabled by default. The network devices connected to the serial ports may be
accessed using Remote Manager, the local web user interface, TCP, telnet, or SSH connections. TCP,
telnet and SSH connections to serial ports are disabled by default and must be enabled by a device-
specific configuration.
Serial connector pinout
The RS232 standard requires support for baud rates up to 9600 baud on shielded multi-core cable up
to 50 feet (15 meters) long. For the Connect IT Mini the use of standard CAT 5 cables enables serial
communication at all baud rates up to 50 feet. CAT5 unshielded twisted pair cable lengths much
longer than 50 feet have been verified at 9600 baud but are non-standard and are not guaranteed.
The Digi Connect IT Mini RS232 serial port is DTE and has the following pin configuration.
Digi Connect IT® Mini User Guide 11

Connect equipment to the Connect IT serial ports Serial connector pinout
Digi Connect IT® Mini User Guide 12
Console port and
DTE mode Signal name Description
1 RTS Request to send Output from
Connect IT Mini
2DCD Data carrier detect Input to Connect IT
Mini
3 RXD Receive data Input to Connect IT
Mini Signal
4/5 GND Ground Ground
6 TXD Transmit data Output from
Connect IT Mini
7 DTR Data terminal ready Output from
Connect IT Mini
8 CTS Clear to send Input to Connect IT
Mini
Note Ring Indicate (RI) and Data Set Ready (DSR) are not implemented.
The serial port uses a female RJ45 jack to enable connection using UTP Ethernet cabling.

Connect equipment to the Connect IT Mini USB port
The USB port on the Connect IT Mini can provide console access to USB-based console ports or host a
USB device. The Connect IT Mini has a TYPE A port. You should reference your device to select the
proper USB cable.
Digi Connect IT® Mini User Guide 13

Configure the Connect IT Mini
You can configure the Connect IT Mini in either web UI method: the local web user interface or
Remote Manager. Once you have selected a web UI option and logged in, the features and page layout
are the same in both the local web user interface and Remote Manager.
Change a Connect IT password 15
Manage users and groups 15
Update the firmware on the Connect IT 17
Configure authentication methods 18
Configure idle timeout 19
Update modem firmware from the local web user interface 19
Configure Remote Power Management 19
Configure a serial port 24
Configure a modem 28
Configure the network 35
Configure the Connect IT name from the local web user interface 36
Configure a VPN 37
Back up, restore, and delete the configuration 38
Configure the firewall 39
Configure services 40
Monitor the data from the Connect IT 41
Reboot the Connect IT 41
Schedule system maintenance 43
Synchronize system time 44
View Connect IT status information 45
Download an archive of the supported MIBs 45
Download a support report file 45
Configure and view events and logs 46
Digi Connect IT® Mini User Guide 14

Configure the Connect IT Mini Change a Connect IT password
Digi Connect IT® Mini User Guide 15
Change a Connect IT password
You can change either the root password or the user password for the Connect IT.
1. Log in to manage the Connect IT.
2. Access the Configuration >Authentication screen.
3. Expand the Users section.
4. Determine for whom you want to change the password.
nExpand the root section to change the root password for the Connect IT.
nExpand a section with a user name to change the password that user would use when
logging on to the Connect IT.
5. In the Password field, enter a new password.
6. Select the Show option if you want the password to display in the field. If you don't select this
option, a series of dots displays.
7. Click Save or Apply.
Manage users and groups
Users and groups work together to enable access to the desired serial ports and other features.
Groups are assigned to user profiles and the users in the group inherit the access rights specified for
that group.
Create a group
You can create a group that represents a set of users that should have the same access rights. After a
group has been created, you should configure it to allow access to the desired serial ports and
features. Users inherit the rights specified for that group.
1. Log in to manage the Connect IT.
2. Access the Configuration >Authentication screen.
3. Expand the Groups section.
4. Click Add or +.
5. In the Add Group field, enter the group name.
6. Click Add or OK. The new group is immediately added to the list of groups.
7. Click Save or Apply.
8. Configure an access control group.
Configure an access control group
You can configure an access control group to allow access to the desired serial ports and features.
Note The users to which this group is assigned inherit the access rights configured for the group. For
information about assigning a group to a user, see Create a user profile and assign an access control
group.

Configure the Connect IT Mini Manage users and groups
Digi Connect IT® Mini User Guide 16
1. Log in to manage the Connect IT.
2. Access the Configuration >Authentication screen.
3. Expand the Groups section.
4. Expand the group that you want to configure: admin,serial, or a user group that you have
added.
5. Configure the group as desired.
Setting Description
Admin access When selected, members assigned to this group have full access to
configure all of the features on the Connect IT. One admin group is
available by default.
Shell access When selected, members of this group can access a Linus shell on this
Connect IT.
Serial access When selected, members of this group have access to the set of ports listed
in the Serial ports section. One serial group is available by default.
Serial ports A list of ports to which members of this group may access.
The Serial access option must be selected for the users in this group to
have access to the ports.
1. Click Add or +. A new port row is added.
2. From the Port list box, select the appropriate port.
OpenVPN access When selected, allows members of this group access the specified
OpenVPN tunnels listed in the OpenVPN section.
OpenVPN A list of OpenVPN tunnels to which members of this group may access.
The OpenVPN access option must be selected for the users in this group to
have access to the tunnels. You must have previously added at least one
OpenVPN tunnel.
1. Click Add or +. A new tunnel row is added.
2. From the Tunnel list box, select the appropriate tunnel.
Nagios access When selected, allows members of this group to query the device for
service status for Nagios.
6. Click Save or Apply.
Create a user profile and assign an access control group
You can create a new user profile and assign a log in password.
1. Log in to manage the Connect IT.
2. Access the Configuration >Authentication screen.
3. Expand the Users section.
4. Click Add or +to add a new user name.

Configure the Connect IT Mini Update the firmware on the Connect IT
Digi Connect IT® Mini User Guide 17
5. Select Enable. If the user profile is not enabled, the user will not be able to log in.
6. Enter the password for this user in the Password field.
If the Show option is selected, the password appears in the field. If it is not selected, a series of
dots appear.
7. Assign the user to a group.
a. Expand the Groups section.
b. Click Add or +.
c. From the Group list box, select the desired group.
8. Click Save or Apply.
Configure two-factor authentication for a user
You can configure two-factor authentication for a user.
1. Log in to manage the Connect IT.
2. Access the Configuration >Authentication screen.
3. Expand the Users section.
4. Expand the group that you want to configure for two-factor authentication.
5. Expand the Two-factor authentication section.
6. Click Enable.
7. Complete the fields in the section.
8. Click Save or Apply.
Update the firmware on the Connect IT
You can update the firmware on the Connect IT from either Remote Manger or the local web user
interface.
Update Connect IT firmware from the local web user interface
You can update the firmware on the Connect IT. Before you begin, you must download the desired
version of the firmware onto your PC.
1. Download the Connect IT firmware to your PC.
2. Log in to the Connect IT local web user interface.
3. Select the System tab in the left pane.
4. In the Device Firmware section, click Choose File.
5. Browse for and select the firmware file downloaded to your PC.
6. Click Update Firmware.
Update the firmware on Connect IT from Remote Manager
You can update the firmware on Connect IT from Remote Manager. You must first get the current
firmware file, and then you can upload it to the device.

Configure the Connect IT Mini Configure authentication methods
Digi Connect IT® Mini User Guide 18
1. Log in to your Remote Manager account.
2. Click Try Remote Manager 3.0 preview in the top right of the screen.
3. Click Devices in the left pane.
4. Select the device you want to update.
5. In the toolbar, click Actions >Update Firmware. The Update Firmware pane displays.
6. From the list box, select the appropriate firmware option.
nThe most current firmware file.
nUpload Firmware File: Select this option if you want to use a firmware file other than
the most current file. If you choose this option, you should Download the Connect IT
firmware to your PC.
7. Click Update to immediately update the firmware.
Download the Connect IT firmware to your PC
1. Go to www.digi.com/support.
2. Scroll down to the Support Downloads section.
3. Click Firmware Updates.
4. In the Filter the list box, enter Connect IT. As you type, matches display.
5. Click Connect IT.
6. From the Firmware Updates section, select the version you want to download. The file is
downloaded to a folder on your computer. Make a note of the folder path and name.
Configure authentication methods
You can configure a list of the authentication methods to use when authenticating access to services
on the Connect IT. The methods are attempted in the list order until the first successful
authentication result is returned. A user fails authentication when no method succeeds.
1. Log in to manage the Connect IT.
2. Access the Configuration >Authentication screen.
3. Expand the Methods section. One method is included by default. The Local users option is
selected by default.
4. You can add additional methods.
a. Click Add or +. The new row is immediately added to the list of methods.
b. From the Method list box, select the method that you want to use for
authentication:
nLocal users: Authenticate using the users defined with the configuration.
nTACACS+: Authenticate using an external TACACS+ server. If you choose this
option, make sure you have configured an external TACACS+ server, in Step
5.

Configure the Connect IT Mini Configure idle timeout
Digi Connect IT® Mini User Guide 19
5. Configure an external TACACS+ server. This allows access to services on this Connect IT to be
authenticated externally, which is useful for central management of users.
Note This step is required only if you chose the TACACS+ option in Step 4.
Expand each sub-section and complete the fields in each of the sections. To display information
about what you should enter in each field, click the down arrow and then Help next to each
field.
6. Click Save or Apply.
Configure idle timeout
You can configure the length of time after which users are disconnected from services. If you do not
enter a value, the idle timeouts feature is disabled, and the user will not be disconnected from
services.
1. Log in to manage the Connect IT.
2. Access the Configuration >Authentication screen.
3. In the Idle timeout field, enter the length of time after which users are disconnected from
services. Leave this field blank to disable this feature.
Syntax:number{w|d|h|m|s}
4. Click Save or Apply.
Update modem firmware from the local web user interface
You can update the modem firmware on the Connect IT. Before you begin, you must download the
desired version of the modem firmware onto your PC.
1. Download the Connect IT firmware to your PC.
2. Log in to the Connect IT local web user interface.
3. Select the System tab in the left pane.
4. Scroll down to the Modem Firmware section.
5. Click Choose File.
6. Browse for and select the modem firmware file downloaded to your PC.
7. Click Upload & Install Firmware.
Configure Remote Power Management
The remote power management feature allows you control outlets on a power controller using serial
or network interfaces. As you manage a device which is connected to a serial port on the Connect IT,
you can also control the power outlets you have associated with that serial port.
Follow this process to configure a power controller and an access control group for power
management:
1. Configure the Connect IT to connect to a power controller
2. Create an access control group for power management and assign to users

Configure the Connect IT Mini Configure Remote Power Management
Digi Connect IT® Mini User Guide 20
You can control power from the local web UI or from a terminal console. Power control consists of
three basic functions: on, off, and power cycle.
nView power controller status and manage power (Administrators)
nControl the outlet power from a terminal (all users)
Configure the Connect IT to connect to a power controller
You can configure the Connect IT to connect to the power controller. During this process, you must
decide which method you want to use to make the connection: serial or TCP.
nSerial Connection
To use a serial port, you must configure a serial port on the Connect IT to communicate with a
power controller. You can then connect the power controller to the serial port on the Connect
IT using a serial cable.
1. Review the serial settings for your power controller. You will use this information to
configure the Connect IT.
2. Verify that your serial cable has the correct pinout. See Serial connector pinout.
3. Configure a serial port for Power Management.
4. Connect a power controller to the Connect IT serial port.
5. Configure communication with a power controller. Choose Serial as the connection
type.
nNetwork Connection
Configure communication with a power controller. Choose TCP as the connection type.
Configure a serial port for Power Management
You can configure a serial port on the Connect IT to communicate with the power controller.
1. Log in to manage the Connect IT.
2. Access the Configuration >Serial screen.
3. Expand the port that you want to configure for use with the power controller.
4. Select Enable.
5. From the Serial mode list box, select the Power management option.
6. In the Label field, enter a descriptive name for the port.
7. The entries in the following fields must match the information for the power controller. Refer
to your power controller manual for the correct entries: Baud rate,Data bits,Parity,Stop
bits, and Flow control.
8. Click Save or Apply.
Connect a power controller to the Connect IT serial port
After you have configured a serial port on the Connect IT and configured the power controller, you
should connect the Connect IT and the power controller with a serial cable.