Digi IX14 User manual

IX14
User Guide

Revision history—90002291
Revision Date Description
A January 2019 Initial release of DigiIX14 firmware version 19.1.x.
B September 2019 DigiIX14 firmware version 19.8.xrelease.
IX14 User Guide 2

Revision history—90002291
IX14 User Guide 3
Revision Date Description
C November 2019 DigiIX14 firmware version 19.11.xrelease.
This firmware release includes the following features and
enhancements:
nRe-themed web UI with improved navigation and
functionality. New functionality includes:
lNew Dashboard overview page.
lThe ability to view local filesystem contents.
lAccess configuration settings from status pages.
lEnhanced for use on hand-held and mobile devices.
nDefault user changed from root to admin.
lIf you have a configured user named admin prior to
upgrading to 20.8.22.32, it will not be affected by the
upgrade.
lIf you do not have a configured user named admin
prior to upgrading to 20.8.22.32, an admin user
account will be created with the same credentials
and configuration settings as the root user.
lIf your root user account has been modified from the
factory default settings, it will not be affected by the
upgrade.
lIf you restore the device to factory default settings
after upgrading to 20.8.22.32, only the admin user
will exist. If you have a root user and perform a
factory default, log in with the admin user instead of
root, using the same default password printed on the
bottom of the device.
nNew network analyzer and packet capture tool.
nSIM slot prioritization and SIM slot failback.
nIPsec enhancements:
lPreferred tunnel option to configure a tunnel to be a
primary or failover tunnel.
lAbility to use the device's MAC address or serial
number as its local endpoint ID.
nDHCP hostname option to allow the device to advertise
its hostname to the DHCP server upon connection.
nReceive encrypted SMS commands from Digi Remote
Manager.
nAbility in OpenVPN to push routes in subnet mode.
nNew Edge firewall zone to prevent the device's DNS
services from being advertised on the network, while still
allowing SSH and web UI access.
nRemoved the 192.168.210.254 default IP gateway.

Revision history—90002291
IX14 User Guide 4
Revision Date Description
nSupport for sending RFC2136-compatible DNS updates to
external DNS servers.
D February 2020 Release of DigiIX14 firmware version 20.2.
E June 2020 Release of Digi IX14 firmware version 20.5:
nSupport for LDAP user authentication.
nFirmware installation from the Digi firmware server.
nEnhanced Digi Remote Manager support:
lSupport for remote proxy server for Digi Remote
Manager.
lWatchdog support for connection to Digi Remote
Manager.
lLocally authenticate CLI option added to Digi
Remote Manager configuration to control whether a
user is required to provide device-level authentication
when accessing the console of the device through
Digi Remote Manager.
lAdded a randomized two minute delay window for
uploading health metrics to the Digi Remote Manager
to avoid situations where multiple devices are
uploading metrics at the same time.
nEnhanced Python support:
lSupport for the Python serial module to allow
programmatic access to serial ports.
lSupport for the Python HID module to allow
programmatic access to a USB Human Interface
Device (HID) from within a Python script.
nApplication mode for serial ports to allow for Python
programmatic control.

Revision history—90002291
IX14 User Guide 5
Revision Date Description
F September 2020 Release of Digi IX14 firmware version 20.8:
nSupport for NEMO/DMNR virtual private networks.
nSupport for serial Modbus Gateway.
nSupport for VRRP+, an extension to the VRRP standard
that uses network probing to monitor connections
through VRRP-enabled devices.
nCloud service enhancements:
lReduced data usage for reporting health metrics to
Digi Remote Manager.
Added Monitoring >Device Health >Only report
changed values to Digi Remote Manager option to
control sending metrics to Digi Remote Manager on
the basis of whether the values have changed since
they were last reported.
lAdded Monitoring >Device Health >Data point
tuning configuration options to fine tune what
datapoints are uploaded as health metrics to Digi
Remote Manager.
lAdded the ability to select Digi aView as the cloud
service.
nAdded the ability to duplicate firmware to copy the active
firmware to the secondary firmware partition.
nMoved the update firmware CLI command to system
firmware update.
nAdded new Authoritative option under TACACS+,
RADIUS, and LDAP user authentication methods to
prevent falling back to additional authentication
methods.
nCisco Umbrella content filtering.
nAdded options under System >Log >Server list to allow
users to specify the TCP/UDP protocol and port of the
remote syslog server.
nSerial port enhancements:
lAdded configuration option under Serial >TCP
connection to specify encrypted connection types.
lAdded configuration option under Serial >
TCP/Telnet/SSH connections to enable/disable TCP
keep-alive messages and nodelay.
nEnhanced SMS support:
lAdded System >Scheduled tasks >Allow
scheduled scripts parameter to allow custom
python scripts to handle sending/receiving SMS

Revision history—90002291
IX14 User Guide 6
Revision Date Description
messages
lAdded the digidevice.sms python module for
sending/receiving SMS messages in a custom python
script.
nMQTT client support via Paho Python module.
nAdded a random unprivileged port for performing ntp
time syncs if standard port 123 fails.
nScripting enhancements:
lAdded a Status >Scripts page in the web UI and
show scripts command to the Admin CLI to view
custom scripts and applications configured in the
device, along with their status.
Added the system scripts stop command to the
Admin CLI to stop a custom script or application.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)

Revision history—90002291
IX14 User Guide 7
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[e-mail]
Include the document title and part number (IX14 User Guide, 90002291 F) in the subject line of your
email.

Contents
Revision history—90002291 2
What's new in Digi IX14 version 20.8
Digi IX14 hardware reference
IX14 features and specifications 18
IX14 front view 18
IX14 back view 18
IX14 power supply requirements 19
IX14 LEDs 19
Digi IX14 serial connector pinout 20
IX14 accessory kits 21
IX14 antennas 21
Digi IX14 quick start
Quick start with Digi Remote Manager mobile app
Step 1: What's in the box 23
Step 2: Gather accessories 23
Step 3: Connect hardware 24
Step 4: Quick setup using the Digi Remote Manager mobile app 25
Next steps 25
Quick start with IX14 local WebUI
Step 1: What's in the box 26
Step 2: Gather accessories 26
Step 3: Connect hardware 27
Step 4: Sign up for Digi Remote Manager 28
Step 5: Access the IX14 local web interface 28
Step 6: Configure cellular connection using the web interface 29
Step 7: Add your IX14 to your Digi Remote Manager account 29
Next steps 30
IX14 User Guide 8

IX14 User Guide 9
Reset the device to factory defaults
Hardware setup
Install SIM cards 32
Attach and position antennas 32
Connect the WAN/ETH1 port 33
Connect the serial port 33
Power on the IX14 33
Configuration and management
Review IX14 default settings 34
Change the default password for the admin user 34
Configuration methods 36
Using Digi Remote Manager 37
Access Digi Remote Manager 37
Using the web interface 37
Log out of the web interface 38
Using the command line 39
Access the command line interface 39
Log in to the command line interface 39
Exit the command line interface 40
Initial configuration
Configure cellular modem APNs 42
Change the default LAN subnet 46
Change the LAN address type 47
Configure SIM PIN 49
Configure system settings 49
Enable or disable Bluetooth service 56
Interfaces
Wireless Wide Area Networks (WWANs) 60
Configure SureLink active recovery to detect modem failures 60
Configure the device to reboot when a failure is detected 66
Disable SureLink 72
Using cellular modems in a Wireless WAN (WWAN) 75
Configure a Wireless Wide Area Network (WWAN) 88
Show WWAN status and statistics 96
Delete a WWAN. 97
Local Area Networks (LANs) 100
About Local Area Networks (LANs) 101
Configure a LAN 101
Show LAN status and statistics 106
Delete a LAN 108
DHCP servers 109
Create a Virtual LAN (VLAN) route 125

IX14 User Guide 10
User authentication
IX14 user authentication 129
User authentication methods 129
Add a new authentication method 131
Delete an authentication method 133
Rearrange the position of authentication methods 135
Authentication groups 137
Change the access rights for a predefined group 139
Add an authentication group 141
Delete an authentication group 145
Local users 148
Change a local user's password 149
Configure a local user 151
Delete a local user 158
Terminal Access Controller Access-Control System Plus (TACACS+) 161
TACACS+ user configuration 162
TACACS+ server failover and fallback to local authentication 163
Configure your IX14 device to use a TACACS+ server 163
Remote Authentication Dial-In User Service (RADIUS) 169
RADIUS user configuration 170
RADIUS server failover and fallback to local configuration 170
Configure your IX14 device to use a RADIUS server 171
LDAP 176
LDAP user configuration 177
LDAP server failover and fallback to local configuration 178
Configure your IX14 device to use an LDAP server 178
Disable shell access 183
Set the idle timeout for IX14 users 185
Example user configuration 187
Example 1: Administrator user with local authentication 187
Example 2: RADIUS, TACACS+, and local authentication for one user 189
Firewall
Firewall configuration 197
Create a custom firewall zone 197
Configure the firewall zone for a network interface 199
Delete a custom firewall zone 201
Port forwarding rules 203
Configure port forwarding 203
Delete a port forwarding rule 208
Packet filtering 211
Configure packet filtering 211
Enable or disable a packet filtering rule 215
Delete a packet filtering rule 217
Configure custom firewall rules 219
Configure Quality of Service options 220
System administration
Review device status 233
Configure system information 234
Update system firmware 236

IX14 User Guide 11
Manage firmware updates using Digi Remote Manager 236
Certificate management for firmware images 237
Dual boot behavior 239
Update cellular module firmware 240
Reboot your IX14 device 241
Reboot your device immediately 242
Schedule reboots of your device 242
Reset the device to factory defaults 244
Configuration files 248
Save configuration changes 248
Save configuration to a file 249
Restore the device configuration 250
Schedule system maintenance tasks 253
Create a Virtual LAN (VLAN) route 260
Serial port 263
Configure the serial port 263
Show serial status and statistics 280
Services
Allow remote access for web administration and SSH 283
Configure the web administration service 287
Configure SSHaccess 294
Use SSH with key authentication 300
Generating SSH key pairs 300
Configure telnet access 303
Configure DNS 308
Simple Network Management Protocol (SNMP) 315
SNMP Security 315
Configure Simple Network Management Protocol (SNMP) 315
Download MIBs 320
Configure the Modbus gateway 320
Configure gateway servers 322
Configure clients 324
System time 335
Configure the system time 335
Network Time Protocol 338
Configure the device as an NTP server 338
Configure a multicast route 344
Enable service discovery (mDNS) 346
Use the iPerf service 350
Example performance test using Iperf3 354
Applications
Configure applications to run automatically 357
Task one: Upload the application 357
Task two: Configure the application to run automatically 359
Run a Python application at the shell prompt 363
Start an interactive Python session 365
Digidevice module 367
Use digidevice.cli to execute CLI commands 368
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 369
Use digidevice.config for device configuration 371

IX14 User Guide 12
Use Python to respond to Digi Remote Manager SCI requests 373
Use digidevice runtime to access the runtime database 382
Use Python to upload the device name to Digi Remote Manager 384
Use Python to send and receive SMS messages 386
Use Python to access serial ports 388
Use the Paho MQTTpython library 389
Stop a script that is currently running 392
Show script information 393
Central management
Digi Remote Manager support 397
Configure Digi Remote Manager 397
Collect device health data and set the sample interval 403
Log into Digi Remote Manager 407
Use Digi Remote Manager to view and manage your device 408
Add a device to Digi Remote Manager 409
View Digi Remote Manager connection status 409
Use the Digi Remote Manager mobile app 410
Configure multiple devices using profiles 411
Learn more 411
Monitoring
intelliFlow 413
Enable intelliFlow 413
Use intelliFlow to display average CPU and RAMusage 416
Use intelliFlow to display top data usage information 417
Use intelliFlow to display data usage by host over time 419
Configure NetFlow Probe 420
Virtual Private Networks (VPN)
IPsec 426
IPsec data protection 426
IPsec modes 426
Internet Key Exchange (IKE) settings 426
Authentication 427
Configure an IPsec tunnel 427
Configure IPsec failover 449
Configure SureLink active recovery for IPsec 450
Show IPsec status and statistics 457
OpenVPN 459
Configure an OpenVPN server 460
Configure an OpenVPN Authentication Group and User 469
Configure an OpenVPN client by using an .ovpn file 473
Configure an OpenVPN client without using an .ovpn file 476
Configure active recovery for OpenVPN 480
Show OpenVPN server status and statistics 487
Show OpenVPN client status and statistics 488
Generic Routing Encapsulation (GRE) 490
Configuring a GREtunnel 490
Show GRE tunnels 495

IX14 User Guide 13
Example: GRE tunnel over an IPSec tunnel 496
NEMO 511
Configure a NEMO tunnel 512
Show NEMO status 518
Diagnostics
Generate a support report 521
View system event logs 522
View System Logs 522
View Event Logs 525
Configure syslog servers 527
Configure options for the event and system logs 530
Analyze network traffic 535
Configure packet capture for the network analyzer 536
Example filters for capturing data traffic 540
Capture packets from the command line 541
Stop capturing packets 542
Show captured traffic data 543
Save captured data traffic to a file 544
Download captured data to your PC 545
Clear captured data 546
Use the ping command to troubleshoot network connections 548
Ping to check internet connection 548
Stop ping commands 548
Use the traceroute command to diagnose IProuting problems 548
Routing
IP routing 551
Configure a static route 552
Delete a static route 555
Policy-based routing 557
Configure a routing policy 558
Routing services 565
Configure routing services 566
Show the routing table 569
Dynamic DNS 571
Configure dynamic DNS 571
Virtual Router Redundancy Protocol (VRRP) 577
VRRP+ 577
Configure VRRP 578
Configure VRRP+ 581
Example: VRRP/VRRP+ configuration 589
Configure device one (master device) 589
Configure device two (backup device) 594
Show VRRP status and statistics 600
File system
The IX14 local file system 603
Display directory contents 603
Create a directory 604

IX14 User Guide 14
Display file contents 605
Copy a file or directory 605
Move or rename a file or directory 606
Delete a file or directory 607
Upload and download files 608
Upload and download files by using the WebUI 608
Upload and download files by using the Secure Copy command 609
Upload and download files using SFTP 610
Digi IX14 regulatory and safety statements
RF exposure statement 613
Federal Communication (FCC) Part 15 Class B 613
Radio Frequency Interference (RFI) (FCC 15.105) 613
European Community - CE Mark Declaration of Conformity (DoC) 613
CE mark (Europe) 613
Maximum transmit power for radio frequencies 615
Innovation, Science, and Economic Development Canada (IC) certifications 615
RoHS compliance statement 616
Safety statements 616
Special safety notes for wireless routers 617
Product disposal instructions 618
Command line interface
Access the command line interface 621
Log in to the command line interface 621
Exit the command line interface 622
Execute a command from the web interface 622
Display help for commands and parameters 623
The help command 623
The question mark (?) command 623
Display help for individual commands 624
Use the Tab key or the space bar to display abbreviated help 625
Auto-complete commands and parameters 625
Available commands 626
Use the scp command 627
Display status and statistics using the show command 628
show config 628
show system 629
show network 629
Device configuration using the command line interface 630
Execute configuration commands at the root Admin CLI prompt 630
Display help for the config command from the root Admin CLI prompt 630
Configuration mode 632
Enable configuration mode 632
Enter configuration commands in configuration mode 632
Save changes and exit configuration mode 633
Exit configuration mode without saving changes 633
Configuration actions 633
Display command line help in configuration mode 634
Move within the configuration schema 637
Manage elements in lists 637
The revert command 640

IX14 User Guide 15
Enter strings in configuration commands 641
Example: Create a new user by using the command line 642
Command line reference 644
analyzer 645
cp 646
help 647
ls 648
mkdir 649
modem 650
modem puk status [imei STRING] [name STRING] 653
more 655
mv 656
ping 657
reboot 658
rm 659
scp 660
show 661
system 670
traceroute 672

What's new in Digi IX14 version 20.8
Release of Digi IX14 firmware version 20.8:
nSupport for NEMO/DMNR virtual private networks.
nSupport for serial Modbus Gateway.
nSupport for VRRP+, an extension to the VRRP standard that uses network probing to monitor
connections through VRRP-enabled devices.
nCloud service enhancements:
lReduced data usage for reporting health metrics to Digi Remote Manager.
Added Monitoring >Device Health >Only report changed values to Digi Remote
Manager option to control sending metrics to Digi Remote Manager on the basis of
whether the values have changed since they were last reported.
lAdded Monitoring >Device Health >Data point tuning configuration options to fine tune
what datapoints are uploaded as health metrics to Digi Remote Manager.
lAdded the ability to select Digi aView as the cloud service.
nAdded the ability to duplicate firmware to copy the active firmware to the secondary firmware
partition.
nMoved the update firmware CLI command to system firmware update.
nAdded new Authoritative option under TACACS+, RADIUS, and LDAP user authentication
methods to prevent falling back to additional authentication methods.
nCisco Umbrella content filtering.
nAdded options under System >Log >Server list to allow users to specify the TCP/UDP
protocol and port of the remote syslog server.
nSerial port enhancements:
lAdded configuration option under Serial >TCP connection to specify encrypted connection
types.
lAdded configuration option under Serial >TCP/Telnet/SSH connections to enable/disable
TCP keep-alive messages and nodelay.
nEnhanced SMS support:
lAdded System >Scheduled tasks >Allow scheduled scripts parameter to allow custom
python scripts to handle sending/receiving SMS messages
lAdded the digidevice.sms python module for sending/receiving SMS messages in a custom
python script.
nMQTT client support via Paho Python module.
IX14 User Guide 16

What's new in Digi IX14 version 20.8
IX14 User Guide 17
nAdded a random unprivileged port for performing ntp time syncs if standard port 123 fails.
nScripting enhancements:
lAdded a Status >Scripts page in the web UI and show scripts command to the Admin CLI
to view custom scripts and applications configured in the device, along with their status.
Added the system scripts stop command to the Admin CLI to stop a custom script or
application.

Digi IX14 hardware reference
IX14 features and specifications
IX14 is a compact LTE CAT1 machine-to-machine (M2M) router suitable for a broad range of
applications in rugged industrial environments. Key features include:
nIndustrial grade components (operating temperatures from -29° F to +165° F/-34° C to +74° C)
nLTE Category 1 cellular network speed up to 10 Mbps
nLAN speed 10/100 BaseT
See IX14 specifications for a detailed list of IX14 hardware specifications.
IX14 front view
Connector/port Description
SIM door See Install SIM cards.
Reset button See Reset the device to factory defaults
LEDs See IX14 LEDs.
IX14 back view
IX14 User Guide 18

Digi IX14 hardware reference IX14 power supply requirements
IX14 User Guide 19
Port/connector Description
WAN/ETH1 See Connect the WAN/ETH1 port.
SERIAL1 See Connect the serial port and Configure the serial port.
Power See Power on the IX14.
WWAN1-1
WWAN1-2
See Attach and position antennas.
IX14 power supply requirements
IX14 is intended to be powered by a certified power supply with output rated at either 12 VDC/0.75 A
or 24 VDC/0.375 A minimum.
nIf the IX14 is operated in an ambient temperature range from +0 C to +40 C, use the Digi power
supply accessory kits 76002078 or 76002080 to meet the temperature criteria.
nIf the IX14 is operated in an ambient temperature range from -34 C to +74 C, use the Digi
power supply accessory kits 76002079 or 76002081 to meet the temperature criteria.
nIf you are providing the DC power source with a non-Digi power supply, you must use a certified
LPS power supply rated at either 12 VDC/0.75 A or 24 VDC/0.375 A minimum. The voltage
tolerance supports +/- 10% (9 VDC to 30 VDC) at 9 Watts minimum.
IX14 LEDs
Power Solid blue
Initial power on as router prepares to boot up
Flashing blue
Router is booting up
Solid blue
Router bootup is complete when flashing stops
WWAN signal Off
SIMs are not in use
Solid red
Very Poor signal (-113 dBm to -99 dBm)
Solid orange
Poor signal (-98 dBm to -87 dBm)
Solid yellow
Fair signal (-86 dBm to -76 dBm)

Digi IX14 hardware reference Digi IX14 serial connector pinout
IX14 User Guide 20
Solid light green
Good signal (-75 dBm to -64 dBm)
Solid green
Excellent signal. (-63 dBm to -51 dBm)
WWAN service Off
No cellular service
Flashing yellow
Attempting to make a cellular connection
Solid yellow
Connected to 2G or 3G
Solid green
Connected to 4G
WAN/ETH1 port Solid yellow
100 Mbps connection; Off for no connection
Solid green
Valid link detected; Flashing for Ethernet activity
Digi IX14 serial connector pinout
The IX14 is a DTE device. The pinout for the DB9 serial connector is as follows:
Signal name RS232 signal
DTE signal
direction DB9 pin number
Transmit Data TxD In 3
Receive Data RxD Out 2
Ready To Send RTS In 7
Clear to Send CTS Out 8
Data Set Ready DSR Out 6
Ground GND N/A 5
Data Carrier Detect DCD Out 1
Data Terminal Ready DTR In 4
Ring Indicate RI Out 9