1. Manuals
  2. Brands
  3. Digi Manuals
  4. Gateway
  5. IX15
  6. User manual

Digi IX15 User Manual

Hide thumbs Also See for IX15:
1
2
3
4
5
Table Of Contents
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
Table of Contents

Advertisement

Quick Links

Download this manual
Digi IX15
Gateway
User Guide
Firmware version 22.2

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the IX15 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Digi IX15

Summary of Contents for Digi IX15

  • Page 1 Digi IX15 Gateway User Guide Firmware version 22.2...

  • Page 2: Revision History-90002400

    Added ability to override or edit SSH server options. Added options for filtering Wi-Fi scanner results based off of MAC addresses or RSSI signal strength. Added options for sending local device event logs to Digi Remote Manager. New system time CLI command for manually setting the local date and time.
  • Page 3 (disabled by default). Added 802.1x port-based network access control, configurable per network interface. Added the pyinstall command. Added Install Python packages and November IX15 BLE configurator sections. Added the IX15 BLE Configuration 2021 demo. Release of Digi IX15 firmware version 21.11: December...
  • Page 4 Added translated safety instructions. Trademarks and copyright Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States and other countries worldwide. All other trademarks mentioned in this document are the property of their respective owners.
  • Page 5 Contact us at +1 952.912.3444 or visit us at www.digi.com/support. Feedback To provide feedback on this document, email your comments to techcomm@digi.com Include the document title and part number (Digi IX15 Gateway User Guide, 90002400 C) in the subject line of your email. Digi IX15 Gateway User Guide...

  • Page 6: Table Of Contents

    Contents Revision history—90002400 Digi IX15 Gateway User Guide Overview What's new in Digi IX15 version 22.2 IX15 compatibility with S2C XBee devices Zigbee DigiMesh 802.15.4 Related documents Safety instructions Safety instructions XBee adapter, gateways, and routers И нс т рукции з а бе з опа с нос т...
  • Page 7 Get started Step 1: Requirements Step 2: Setup the hardware Step 3: Program an XBee profile Step 4: Join nodes to the IX15 network Step 5: Review your XBee network Next steps Digi IX15 hardware reference Digi IX15 features and specifications...
  • Page 8 Access Digi Remote Manager Using the web interface Log out of the web interface Use the local REST API to configure the IX15 device Use the GET method to return device configuration information Use the POST method to modify device configuration parameters and list arrays...
  • Page 9 Configure a routing policy Routing services Configure routing services Show the routing table Dynamic DNS Configure dynamic DNS Virtual Router Redundancy Protocol (VRRP) VRRP+ Configure VRRP Configure VRRP+ Example: VRRP/VRRP+ configuration Configure device one (master device) Digi IX15 Gateway User Guide...
  • Page 10 Allow remote access for web administration and SSH Configure the web administration service Configure SSH access Use SSH with key authentication Generating SSH key pairs Configure telnet access Configure DNS Show DNS server Simple Network Management Protocol (SNMP) Digi IX15 Gateway User Guide...
  • Page 11 Set up the IX15 for Python development Create and test a Python application End-to-end demos Python modules Set up the IX15 to automatically run your applications Configure scripts to run automatically Show script information Stop a script that is currently running...
  • Page 12 Terminal Access Controller Access-Control System Plus (TACACS+) TACACS+ user configuration TACACS+ server failover and fallback to local authentication Configure your IX15 device to use a TACACS+ server Remote Authentication Dial-In User Service (RADIUS) RADIUS user configuration RADIUS server failover and fallback to local configuration...
  • Page 13 Reboot your device immediately Schedule reboots of your device Erase device configuration and reset to factory defaults Configure the IX15 device to use custom factory default settings Locate the device by using the Find Me feature Configuration files Save configuration changes...
  • Page 14 File system The IX15 local file system Display directory contents Create a directory Display file contents Copy a file or directory Move or rename a file or directory Delete a file or directory Upload and download files Upload and download files by using the WebUI...
  • Page 15 Digi IX15 Gateway User Guide...
  • Page 16 Diagnostics Perform a speedtest Generate a support report View system and event logs View System Logs View Event Logs Configure syslog servers Configure options for the event and system logs Digi IX15 Gateway User Guide...
  • Page 17 Display the system log Recover the local XBee xbeemgmt tool Get the IX15 IP A remote XBee is not listed in the IX15 network PyCharm: My IX15 is not listed in Digi Device Selector Digi IX15 regulatory and safety statements RF exposure statement...
  • Page 18 Japan (TELEC) Safety statements Digi IX15 Gateway Hazardous Locations information Special conditions for safe use Class I Division 2, Groups A,B,C,D Temperature Code: T4 Special safety notes for wireless routers Product disposal instructions Safety warnings English Bulgarian--бъ л га рс ки...

  • Page 19: Digi Ix15 Gateway User Guide

    Digi IX15 Gateway User Guide The Digi IX15 is a rugged, secure and reliable LTE industrial router powered by an enhanced operating system that supports any utility or industrial application. This online guide helps site administrators configure and manage Digi IX15 devices. This guide assumes administrators are familiar with network basics, such as network terminology, architecture, interfaces, and related concepts.

  • Page 20: Overview

    Overview Overview The Digi IX15 Gateway allows for the provisioning and management of an XBee network and other industrial devices connected to it through the WebUI and CLI. The IX15 provides a programmable solution to connect networks of XBee-enabled devices to IP networks.

  • Page 21: Ix15 Compatibility With S2C Xbee Devices

    Digi has updated and ported our XBee firmware from the XBee/XBee-PRO (S2C) hardware based on the SiLabs EM357 SoC, to the Digi XBee 3 hardware based on the SiLabs EFR32 SoC. The Digi IX15 Gateway includes an XBee 3 device that can be configured to work with Zigbee, DigiMesh, or 802.15.4 networks.
  • Page 22 0x44 - Closed Join Window 6. OTA firmware update process The radio serving up the firmware image can be either a Digi XBee 3 Zigbee 3.0 or XBee/XBee- PRO ZB (S2C). However, since the XBee/XBee-PRO ZB (S2C) requires that another XBee/XBee- PRO ZB (S2C) be a nearest neighbor to act as the updater node, there is some limitation as to how nodes can be updated in a mixed network.

  • Page 23: Digimesh

    This restriction is alleviated on the XBee 3 and all 16 channels are available for use regardless of the variant. The CH parameter on the IX15 should be within 0x0C and 0x17 to guarantee communication. 2. Synchronized cyclic sleep...
  • Page 24 128-bit link key. 4. OTA firmware update process The radio serving up the firmware image can be either a Digi XBee 3 DigiMesh or XBee/XBee- PRO DM(S2C). However, since the XBee/XBee-PRO DM (S2C) requires that another XBee/XBee- PRO DM(S2C) be a nearest neighbor to act as the updater node, there is some limitation as to how nodes can be updated in a mixed network.
  • Page 25 This restriction is alleviated on the XBee 3 and all 16 channels are available for use regardless of the variant. The CH parameter on the IX15 needs to be within 0x0C and 0x17 to communicate. 2. Indirect messaging limitation SP determines the asynchronous cyclic sleep period, the same as S2C 802.15.4.

  • Page 26: Related Documents

    Digi XBee 3 802.15.4 Migration Guide. Related documents This guide contains the information you need to start working with an IX15. For more detailed information on protocols and related libraries, see: XBee 3 802.15.4 RF Module User Guide XBee 3 DigiMesh RF Module User Guide...
  • Page 27 Ο δηγ ίες ασ φαλείας Biztonsági utasítások Istruzioni di sicurezza Drošības instrukcijas Saugos instrukcijos Sikkerhetsinstruksjoner Instrukcje bezpieczeństwa Instruções de segurança Instructiuni de siguranta Bezpečnostné inštrukcie Varnostna navodila Adaptador XBee, puertas de enlace y enrutadores Säkerhets instruktioner Digi IX15 Gateway User Guide...

  • Page 28: Safety Instructions

    ил и рут е ра из в ъ н ре гул а т орнот о с ъ от в е т с т в ие з а да де на дъ ржа в а , кое т о в оди Digi IX15 Gateway User Guide...

  • Page 29: Sigurnosne Upute

    XBee adaptér, brány a routery U produktů XBee Adapter, Gateway nebo Router nelze zaručit provoz kvůli rádiovému spojení, a proto by neměly být používány pro blokování v zařízeních kritických z hlediska bezpečnosti, jako jsou stroje nebo automobilové aplikace. Digi IX15 Gateway User Guide...

  • Page 30: Sikkerhedsinstruktioner

    Vær forsigtig under håndteringen for at undgå elektrisk beskadigelse af printet og komponenterne. Udsæt ikke XBee Adapter, Gateway eller Router-produkter for vand eller fugt. Brug dette produkt med de antenner, der er specificeret i brugervejledningerne til XBee Adapter, Gateway eller Router. Digi IX15 Gateway User Guide...

  • Page 31: Veiligheidsinstructies

    (see loend ei ole ammendav): meditsiiniseadmed tuumarakendused plahvatusohtlik või tuleohtlik keskkond XBee adapteris, lüüsis või ruuteris ei ole kasutaja poolt hooldatavaid komponente. Ärge eemaldage toote katet ega muutke lüüsi ega ruuterit mingil viisil. Muudatused võivad toote Digi IX15 Gateway User Guide...

  • Page 32: Turvallisuusohjeet

    Le fonctionnement des produits XBee Adapter, Gateway ou Router ne peut pas être garanti en raison de la liaison radio et ne doit donc pas être utilisé pour les verrouillages dans des dispositifs critiques pour la sécurité tels que des machines ou des applications automobiles. Digi IX15 Gateway User Guide...

  • Page 33: Sicherheitshinweise

    Betrieb des Produkts führen kann. Verwenden Sie bei der Handhabung des XBee Adapter-, Gateway- oder Router-Produkts ESD- Schutz nach Industriestandard. Seien Sie vorsichtig bei der Handhabung, um elektrische Schäden an der Leiterplatte und den Komponenten zu vermeiden. Digi IX15 Gateway User Guide...

  • Page 34: Ο Δηγ Ίες Ασ Φαλείας

    κερ αίες σ ε απόσ τ ασ η 20 cm από αν θρ ώπους ή ζ ώα. Biztonsági utasítások XBee adapter, átjárók és útválasztók Az XBee Adapter, Gateway vagy Router termékek működése nem garantálható a rádiókapcsolat miatt, ezért nem használhatók biztonsági szempontból kritikus eszközök, például gépek vagy autóipari alkalmazások reteszelésére. Digi IX15 Gateway User Guide...

  • Page 35: Istruzioni Di Sicurezza

    Prestare attenzione durante la manipolazione per evitare danni elettrici al PCB e ai componenti. Non esporre i prodotti XBee Adapter, Gateway o Router ad acqua o umidità. Utilizzare questo prodotto con le antenne specificate nelle guide per l'utente del prodotto XBee Adapter, Gateway o Router. Digi IX15 Gateway User Guide...

  • Page 36: Drošības Instrukcijas

    XBee Adapter, Gateway arba Router gaminyje nėra komponentų, kuriuos vartotojas galėtų taisyti. Jokiu būdu nenuimkite gaminio dangtelių ir nekeiskite šliuzo ar maršrutizatoriaus. Dėl modifikacijų gaminiui gali būti netaikoma jokia garantija, o šliuzas arba maršruto parinktuvas Digi IX15 Gateway User Guide...

  • Page 37: Sikkerhetsinstruksjoner

    Produkty XBee Adapter, Gateway lub Router nie mogą zagwarantować działania ze względu na łącze radiowe, dlatego nie należy ich używać do blokad w urządzeniach o krytycznym znaczeniu dla bezpieczeństwa, takich jak maszyny lub aplikacje motoryzacyjne. Digi IX15 Gateway User Guide...

  • Page 38: Instruções De Segurança

    Tome cuidado ao manusear para evitar danos elétricos à PCB e aos componentes. Não exponha os produtos XBee Adapter, Gateway ou Router à água ou umidade. Use este produto com as antenas especificadas nos guias do usuário do produto Adaptador, Gateway ou Roteador XBee. Digi IX15 Gateway User Guide...

  • Page 39: Instructiuni De Siguranta

    Vo vnútri produktu XBee Adapter, Gateway alebo Router sa nenachádzajú žiadne užívateľsky opraviteľné komponenty. Neodstraňujte kryty produktu ani žiadnym spôsobom neupravujte bránu ani smerovač. Úpravy môžu vyňať produkt zo záruky a môžu spôsobiť, že brána alebo Digi IX15 Gateway User Guide...

  • Page 40: Varnostna Navodila

    No se puede garantizar el funcionamiento de los productos del adaptador, puerta de enlace o enrutador XBee debido al enlace de radio y, por lo tanto, no deben usarse para enclavamientos en dispositivos críticos para la seguridad, como máquinas o aplicaciones automotrices. Digi IX15 Gateway User Guide...

  • Page 41: Säkerhets Instruktioner

    Var försiktig vid hanteringen för att undvika elektriska skador på kretskortet och komponenterna. Utsätt inte XBee Adapter, Gateway eller Router-produkter för vatten eller fukt. Använd den här produkten med de antenner som specificeras i användarhandböckerna för XBee Adapter, Gateway eller Router. Digi IX15 Gateway User Guide...
  • Page 42 Safety instructions Säkerhets instruktioner Slutanvändaren måste informeras om hur man kopplar bort strömmen från XBee Adapter, Gateway eller Router-produkten eller hur man placerar antennerna 20 cm från människor eller djur. Digi IX15 Gateway User Guide...

  • Page 43: Digi Ix15 Quick Start

    When you open the IX15 package, look for the following: Digi IX15 device The IX15 has a product label on the bottom of the device. The label includes product identification information and the default password assigned to the device. The IX15 also includes a terminal connector for the power supply installed in the power input.

  • Page 44: Step 3: Connect

    Included in IX15 Accessory kit (76002107)—the kit may be ordered separately. Laptop or personal computer Use an Ethernet cable to connect your IX15 to a laptop or PC. SIM card(s) If you intend to configure cellular WWAN access at this time, acquire SIM cards as needed.
  • Page 45 For high-vibration environments, apply a thin layer of dielectric grease to the SIM contacts. Note If the IX15 device is used in an environment with high vibration levels, SIM card contact fretting may cause unexpected SIM card failures. To protect the SIM cards, Digi strongly recommends that you apply a thin layer of dielectric grease to the SIM contacts prior to installing the SIM cards.
  • Page 46 After SIM cards are installed, replace the SIM slot cover. 2. Attach antennas Connect IX15-compatible cellular antennas to the WWAN1-1 and WWAN1-2 antenna connectors on the back of the device. Connect the RF antenna to the XBee antenna connector.
  • Page 47 3. Use an Ethernet cable to connect the IX15 ETH port to your PC. 4. Connect DC power and power on the IX15 device. The IX15 is intended to be powered by a certified power supply with output rated at either 12 VDC/0.75 A or 24 VDC/0.375 A minimum.
  • Page 48 Verify that the signal strength indicator on the front of the IX15 shows two or more bars. CAUTION! If your laptop or PC is connected to the ETH port on the IX15 and the IX15 has a cellular internet connection established, the laptop or PC will likely automatically switch from its Wi-Fi internet connection to its Ethernet port.

  • Page 49: Step 4: Configure

    Change the default password for the admin user for the admin user for instructions. Step 5: Next steps Once you have setup your IX15, it is time to start working with your device and discover all its features following the Get started guide.
  • Page 50 Get started This section guides you through your first steps with the Digi IX15 Gateway. You will connect your hardware, program the IX15 XBee with a profile, and create an XBee network. Step 1: Requirements Step 2: Setup the hardware...

  • Page 51: Get Started

    These devices will be discovered and configured later using XCTU. Step 3: Program an XBee profile The IX15 comes with a set of default configuration settings, firmware version, and XBee protocol based on a Zigbee router profile. To update these configuration, you have to program an XBee profile.
  • Page 52 6. Check the XBee device that appears in the list and click Add to apply the XBee profile. Note If more than one XBee device appears in the list, the first one corresponds to the IX15. Select that one. 7. The new task appears in the Current XBee Update Tasks panel.

  • Page 53: Step 4: Join Nodes To The Ix15 Network

    Step 4: Join nodes to the IX15 network Now that you have the IX15 configured, you can add new XBee devices to the network. To do so, you have to configure the XBee devices that you connected to your computer in Setup the hardware.

  • Page 54: Step 5: Review Your Xbee Network

    Python application development: Create a Python application using the Digi XBee PyCharm Plugin, build, and learn how to launch it in your IX15. XBee network management: Discover your XBee network, get information from nodes, update their firmware, and configure their settings.
  • Page 55 User authentication Firewall Remote device management: Remotely monitor and analyze multiple devices, manage their configuration, or update the entire system via the integrated Remote Manager support. You can also use Amazon AWS IoT Microsoft Azure. Digi IX15 Gateway User Guide...
  • Page 56 Digi IX15 hardware reference This chapter contains the following topics: Digi IX15 features and specifications IX15 accessories IX15 front and side views IX15 LEDs IX15 power supply requirements Power consumption Digi IX15 serial connector pinout Antenna specifications for the cellular modem...

  • Page 57: Digi Ix15 Hardware Reference

    B1, B2, B4, B5, B6, B8, B19 2G EDGE / GPRS 850 / 900 / 1800 / 1900 MHz IX15 accessories When accessories are purchased with the IX15 device, the following are provided: Cellular antennas. Power supply. Ethernet cable. XBee antenna.
  • Page 58 Digi IX15 hardware reference IX15 front and side views Item Description 1. LEDs IX15 LEDs. Main (WWAN1-1) and auxillary (WWAN1-2) cellular antenna connectors. WWAN  Antenna connectors 3. XBee 2.4 GHz mag base antenna connector. Antenna connector The ERASE button is used to perform a device reset, and it has three modes: ERASE 1.

  • Page 59: Ix15 Leds

    Digi IX15 hardware reference IX15 LEDs IX15 LEDs The IX15 LEDs are located on the top front panel. During bootup, the front-panel LEDs light up in sequence to indicate boot progress. Power (PWR) No power. Solid green DC power is connected to the device.

  • Page 60: Xbee

    WARNING! DO NOT POWER OFF DURING UPDATE. Solid green Flashing yellow (or orange) XBee interface is enabled and XBee Updating a remote XBee. service is running. Solid blue Flashing red XBee active discovery running. Recovering local XBee. Digi IX15 Gateway User Guide...

  • Page 61: Signal Quality Indicators

    Solid green: 10/100 Mbps link detected. Signal quality bars explained The signal status bars for the Digi IX15 measure more than simply signal strength. The value reported by the signal bars is calculated using an algorithm that takes into consideration the Reference Signals Received Power (RSRP), the Signal-to-noise ratio (SNR), and the Received Signal Strength Indication (RSSI) to provide an accurate indicator of the quality of the signal that the device is receiving.

  • Page 62: Ix15 Power Supply Requirements

    Digi IX15 hardware reference IX15 power supply requirements 4G LTE algorithms For 4G LTE, the IX15 device determines the RSRP, SNR, and RSSI values separately and uses the following algorithms to display the signal quality: RSRP > -85, rsrp_bars=5 -95 < RSRP <= -85, rsrp_bars=4 -105 <...

  • Page 63: Power Consumption

    Crimp terminals should be used for all connections. Power consumption This section contains information about the power consumption of the Digi IX15 Gateway. All measurements were performed running Digi Accelerated Linux version 20.11.32.138. All presented results were measured at ambient temperature (25ºC).

  • Page 64: Results

    1620 - 1950 46 - 53 840 - 950 85 - 104 1550 - 1900 43 - 50 780 - 910 Note Disconnecting the serial port loopback connector, all measures are reduced by 3-4 mA. Digi IX15 Gateway User Guide...

  • Page 65: Digi Ix15 Serial Connector Pinout

    Digi IX15 hardware reference Digi IX15 serial connector pinout Digi IX15 serial connector pinout The IX15 is a DTE device. The pinout for the 10 pin RJ-45 serial connector is as follows: RS485 half- Pin number RS232 signal duplex signal...

  • Page 66: Antenna Specifications For The Xbee Rf Module

    Admitted power QR code definition A QR code is printed on the label attached to the device and on the loose label included in the box with the device components. The QR code contains information about the device. Digi IX15 Gateway User Guide...
  • Page 67 Digi IX15 hardware reference QR code definition QR code items Semicolon separated list of: ProductName;DeviceID;Password;SerialNumber;SKUPartNumber-SKUPartRevision Example IX15;00000000-00000000-112233FF-FF445566;PW1234567890;50001001-00 Digi IX15 Gateway User Guide...
  • Page 68 Hardware setup This chapter contains the following topics: Install SIM cards Connect data cables Mount the IX15 device Digi IX15 Gateway User Guide...

  • Page 69: Hardware Setup

    2. For high-vibration environments, apply a thin layer of dielectric grease to the SIM contacts. Note If the Digi IX15 Gateway device is used in an environment with high vibration levels, SIM card contact fretting may cause unexpected SIM card failures. To protect the SIM cards, Digi strongly recommends that you apply a thin layer of dielectric grease to the SIM contacts prior to installing the SIM cards.

  • Page 70: Sim Removal

    SIM removal The IX15 has a PUSH-PUSH SIM connector. To insert, push each SIM in until it clicks, and repeat for removal. When you push to eject, the SIM ejects back out about 1/8 inch. Tips for improving cellular signal strength...

  • Page 71: Attach To A Mounting Surface By Using The Mounting Tabs

    Attach to a mounting surface by using the mounting tabs Attach to DIN rail with clip The DIN rail clip is an optional accessory included when the IX15 is purchased with accessories. The DIN rail clip kit part number is 76002095.
  • Page 72 Hardware setup Mount the IX15 device b. Set the IX15 device onto a DIN rail and gently press until the clip snaps into the rail. 2. Attach the DIN rail clip to the bottom of the device: a. Attach the DIN rail clip to the bottom of the device with the screws provided.
  • Page 73 Hardware setup Mount the IX15 device b. Set the IX15 device onto a DIN rail and gently press until the clip snaps into the rail. WARNING! If being installed above head height on a wall or ceiling, ensure the device is fitted securely to avoid the risk of personal injury.
  • Page 74 Configuration methods Using Digi Remote Manager Access Digi Remote Manager Using the web interface Use the local REST API to configure the IX15 device Using the command line Access the command line interface Log in to the command line interface Exit the command line interface...

  • Page 75: Configuration And Management

    Configuration and management Review IX15 default settings Review IX15 default settings You can review the default settings for your IX15 device by using the local WebUI or Digi Remote Manager: Local WebUI 1. Log into the IX15 WebUI as a user with Admin access. See Using the web interface for details.

  • Page 76: Other Default Configuration Settings

    Packet filtering allows all outbound traffic. Security policies SSH and web administration: Enabled for local administration Firewall zone: Internal Device heath metrics uploaded to Digi Remote Manager at 60 minute Monitoring interval. SNMP: Disabled Enabled Serial port Serial mode: Remote...
  • Page 77 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 78: Configuration Methods

    With the Remote Manager, you can configure your IX15 device and use the configuration as a basis for a profile which can be applied to other similar devices. See...
  • Page 79 Configuration and management Configuration methods    WebUI Shows how to perform a task by using the local web interface.    Command line Shows how to perform a task by using the command line interface. Digi IX15 Gateway User Guide...

  • Page 80: Using Digi Remote Manager

    Using Digi Remote Manager Using Digi Remote Manager By default, your IX15 device is configured to use Digi Remote Manager as its central management server. No configuration changes are required to begin using the Remote Manager. For information about configuring central management for your IX15 device, see Central management.

  • Page 81: Log Out Of The Web Interface

    On the main menu, click your user name. Click Log out. Use the local REST API to configure the IX15 device Your IX15 device includes a REST API that can be used to return information about the device's configuration and to make modifications to the configuration. You can view the REST API specification from your web browser by opening the URL: https://ip-address/cgi-bin/config.cgi...
  • Page 82 Configuration and management Use the local REST API to configure the IX15 device 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 83: Use The Post Method To Modify Device Configuration Parameters And List Arrays

    Configuration and management Use the local REST API to configure the IX15 device $ curl -k -u admin https://192.168.210.1/cgi-bin/config.cgi/value/service/ssh - X GET Enter host password for user 'admin': ok": true, "result": { "type": "object", "path": "service.ssh" "collapsed": { "acl.zone.0": "internal" "acl.zone.1": "edge"...

  • Page 84: Use The Delete Method To Remove Items From A List Array

    Configuration and management Use the local REST API to configure the IX15 device path is the path to the configuration parameter, in dot notation (for example, ssh.service.enable). new_value is the new value for the parameter. For example, to disable the ssh service using curl: $ curl -k -u admin "https://192.168.210.1/cgi-...
  • Page 85 Configuration and management Use the local REST API to configure the IX15 device "result": { "type": "array", "path": "service.ssh.acl.zone" "collapsed": { "0": "internal" "1": "edge" "2": "ipsec" "3": "setup" "4": "external" 2. Use the DELETE method to remove the external zone (list item 4).

  • Page 86: Using The Command Line

    Log in to the command line interface    Command line 1. Connect to the IX15 device by using a serial connection, SSH or telnet, or the Terminal in the WebUI or the Console in the Digi Remote Manager. See Access the command line interface more information.

  • Page 87: Exit The Command Line Interface

    Admin CLI s: Shell q: Quit Select access or quit [admin] : Type a or admin to access the IX15 command line. You will now be connected to the Admin CLI: Connecting now... Press Tab to autocomplete commands Press '?' for a list of commands and details...

  • Page 88: Manage An Xbee Network

    64-bit address, node identifier, role, and so on. The IX15 network caches a list of known nodes that reflects the real XBee network. It adds new nodes to its network cache in these scenarios: When any kind of communication occurs between any remote node in the network and the IX15.

  • Page 89: Review The Current Xbee Network State

    XBee nodes from the CLI. Discover the XBee network Nodes that appear in the Network Manager list are known to the IX15. The list accumulates known network nodes over time. To find new nodes, you can perform: Periodic active network discovery—configured.
  • Page 90 Manage an XBee network Discover the XBee network 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window displays. Digi IX15 Gateway User Guide...
  • Page 91 Allowed values are any number of minutes, or seconds, and take the format number{m|s}. For example, to set Time between requests to five minutes, enter 5m or 300s. The minimum value is 20 seconds and the maximum is 10 minutes. The default is 2 minutes. Digi IX15 Gateway User Guide...
  • Page 92 For large networks we recommend cascade discovery mode. The default is cascade. 5. Set the amount of time the IX15 should wait between discovery cycles. Allowed values are from 1 minute to 3 days. The default is 1 hour. (config)> config xbee active_discovery time_between_scans <time>...

  • Page 93: One-Shot Discovery

    Manage an XBee network Configure and update an XBee network 6. Set the amount of time the IX15 should wait between node requests to ask for neighbors. Allowed values are from 20 seconds to 10 minutes. The default is 2 minutes.

  • Page 94: What Is An Xbee Profile

    XCTU User Guide. Manage XBee profiles The Profile Manager page allows you to manage the XBee profiles stored in the IX15. You can upload, download, and delete profiles. For each profile, it also shows whether it contains settings, firmware, and filesystem updates.

  • Page 95: Upload The Xbee Profile

    XBee. The Profile Manager shows whether those contents are included or not for each available profile. Upload the XBee profile Once you create the desired XBee profile, follow these steps to upload it to the IX15: 1. Open the IX15 WebUI and login. 2. On the top menu, click XBee.

  • Page 96: Configure A Sleeping Network To Work With The Ix15

    IX15, can send messages to the end device. Short sleep: nodes that sleep less than 30 seconds They can receive data transmissions at any time since their parents buffer data long enough for the end devices to wake and poll to receive the data.
  • Page 97 From MicroPython, transmit any data to the IX15 when it wakes up. Any other intelligence that sends anything when the node wakes up. 2. Must stay awake to provide other nodes, including the IX15, with enough time to send messages to the end device.

  • Page 98: Export Your Network

    From MicroPython, transmit any data to the IX15 when it wakes up. Any other intelligence that sends anything when the node wakes up. 2. Must stay awake to provide other nodes, including the IX15, with enough time to send messages to the end device.

  • Page 99: Bluetooth Low Energy

    XBee protocol + Bluetooth Low Energy (BLE). For example, you can use your cellphone to connect to the XBee device of the IX15, and then from your phone, interact with the IX15 using the XBee Python API.
  • Page 100 Bluetooth Low Energy Configure Bluetooth Low Energy 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window displays. Digi IX15 Gateway User Guide...
  • Page 101 9. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 102: Ix15 Ble Configurator

    This application is available for iOS or Android. Find it in the corresponding store: Google Play App Store Verify BLE connectivity You can use the Digi XBee Mobile application to verify that BLE is enabled and working on your IX15. Digi IX15 Gateway User Guide...
  • Page 103 4. Tap the device name in the list. A password dialog appears. 5. Enter the password you previously configured for the device in the IX15. 6. Tap OK. The Device Information screen displays. You are now connected to the IX15 through BLE.

  • Page 104: Power Management

    Power management Most of the time the IX15 will be powered by a plug in the wall so power consumption might not be a problem. However, if you plan to power your device with batteries you must consider power saving.

  • Page 105: Configure A Power Profile

    You can choose to preserve power, performance or to balance both. To change the active power profile:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Configuration, click Device Configuration. Digi IX15 Gateway User Guide...
  • Page 106 Power management Configure a power profile The Configuration window displays. Digi IX15 Gateway User Guide...
  • Page 107 Manual: Allows you to manually set the working frequency of the CPU. When this option is selected, the setting Custom frequency is available to set the CPU working frequency manually: 198 KHz 396 KHz 528 KHz 792 KHz Digi IX15 Gateway User Guide...
  • Page 108 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 109: Suspend Mode

    Suspend mode is a special state where the CPU, most of the RAM, and most of the digital peripherals are powered off to save as much power as possible. The IX15 is able to enter suspend mode on demand to reduce power consumption to the minimum when no operation is required during a certain time.
  • Page 110 XBee: Wakes up the device when any data is received in the XBee interface. 5. If RTC alarm is enabled, set the the alarm date and time in RTC alarm date and time following the format: YYYY-MM-DD HH:MM[:SS]. Digi IX15 Gateway User Guide...

  • Page 111: Enter Suspend Mode

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Enter suspend mode You can command the IX15 to enter suspend mode at any time using the CLI interface. To do so: Digi IX15 Gateway User Guide...

  • Page 112: Disable Interfaces On Suspend

    Power management Suspend mode 1. Connect to the IX15 CLI by using a serial connection, SSH, or the Terminal in the WebUI. 2. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 113 3. Click System > Power > Disabled interfaces on suspend. 4. The interfaces are listed: Modem: Turn on this setting to disable the modem interface when the IX15 enters suspend mode. By default, all interfaces are enabled when going to suspend. Click available interfaces to toggle them to disable on suspend.
  • Page 114 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 115 Interfaces Digi IX15 Gateway devices have several physical communications interfaces. These interfaces can be bridged in a Local Area Network (LAN) or assigned to a Wide Area Network (WAN). This chapter contains the following topics: Wireless Wide Area Networks (WWANs)

  • Page 116: Interfaces

    Problems can occur beyond the immediate modem connection that prevent some IP traffic from reaching its destination. Normally this kind of problem does not cause the IX15 device to detect that the modem has failed, because the connection continues to work while the core problem exists somewhere else in the network.
  • Page 117 SureLink will: The device will: 1. First SureLink failure: Nothing will happen. 2. Second SureLink failure: The interface will restart. 3. Third SureLink failure: The modem will reset. 4. Fourth SureLink failure: The interface will restart again. Digi IX15 Gateway User Guide...
  • Page 118   WebUI SureLink can be configured for both IPv4 and IPv6. 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 119 For Reboot fail count, type or select the number of times that the Surelink test must fail before the device is rebooted. The default is 1. 11. Click to expand Test targets. 12. For Add Test Target, click . Digi IX15 Gateway User Guide...
  • Page 120 For Pass threshold, type or select the number of times that the test must pass after failure, before the interface is determined to be working and is reinstated. Digi IX15 Gateway User Guide...
  • Page 121 Active recovery can be configured for both IPv4 and IPv6. These instructions are for IPv4; to configure IPv6 active recovery, replace ipv4 in the command line with ipv6. 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 122 1 through 5. The default is 5. 8. (Optional) Set the device to reboot when the interface is considered to have failed: (config network interface my_wwan ipv4 surelink)> reboot true (config network interface my_wwan ipv4 surelink> Digi IX15 Gateway User Guide...
  • Page 123 (config network interface my_wwan ipv4 surelink target 0)> dns_configured: Tests connectivity by sending a DNS query to the DNS servers configured for this interface. http: Tests connectivity by sending an HTTP or HTTPS GET request to the specified URL. Specify the url: Digi IX15 Gateway User Guide...
  • Page 124 IP version. (config network interface my_wwan ipv4 surelink target 0)> other_ip_version value (config network interface my_wwan ipv4 surelink target 0)> where value is one of: any, both, ipv4, or ipv6. Digi IX15 Gateway User Guide...
  • Page 125 (config network interface my_wwan ipv4 surelink> The default is 15 seconds. 12. (Optional) Repeat this procedure for IPv6. 13. Save the configuration and apply the change: (config network interface my_wwan ipv4 surelink)> save Configuration saved. > Digi IX15 Gateway User Guide...

  • Page 126: Configure The Device To Reboot When A Failure Is Detected

    Type quit to disconnect from the device. Configure the device to reboot when a failure is detected Using SureLink, you can configure the IX15 device to reboot when it has determined that an interface has failed. Required configuration items Enable SureLink.
  • Page 127   WebUI SureLink can be configured for both IPv4 and IPv6. 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 128 For example, to set Down time to ten minutes, enter 10m or 600s. The default is 60 seconds. Initial connection time: The amount of time to wait for an initial connection to the interface before this test is considered to have failed. Digi IX15 Gateway User Guide...
  • Page 129 Active recovery can be configured for both IPv4 and IPv6. These instructions are for IPv4; to configure IPv6 active recovery, replace ipv4 in the command line with ipv6. 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 130 (Optional) Set the number of times that the Surelink test must fail before the device is rebooted: (config network interface my_wwan ipv4 surelink)> reboot_attempts (config network interface my_wwan ipv4 surelink> where int is any number greater than 0. The default is 1. Digi IX15 Gateway User Guide...
  • Page 131 (Optional) Set the amount of time that the interface can be down before this test is considered to have failed: Digi IX15 Gateway User Guide...
  • Page 132 For example, if other_status is set to down, but the alternate interface is determined to be up, then this test will fail. (Optional) Repeat to add additional test targets. 9. Optional active recovery configuration parameters: Digi IX15 Gateway User Guide...

  • Page 133: Disable Surelink

    If your device uses a private APN with no Internet access, or your device has a restricted wired WAN connection that doesn't allow DNS resolution, follow this procedure to disable the default SureLink connectivity tests. You can also disable DNS lookup or other internet activity, while retaining the SureLink interface test.    WebUI Digi IX15 Gateway User Guide...
  • Page 134 Interfaces Wireless Wide Area Networks (WWANs) 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Interfaces.
  • Page 135 Interfaces Wireless Wide Area Networks (WWANs) 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 136 7. Click to expand the second test target. This test target has its Test type set to Test DNS servers configured for this interface. 8. Click the menu icon (...) next to the target and select Delete. 9. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...

  • Page 137: Using Cellular Modems In A Wireless Wan (Wwan)

    Wireless Wide Area Networks (WWANs)    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 138 Typically, you configure SIM1 of the cellular modem as the primary cellular interface, and SIM2 as the backup cellular interface. In this way, if the IX15 device cannot connect to the network using SIM1, it automatically fails over to SIM2. IX15 devices automatically use the correct cellular module firmware for each carrier when switching SIMs.
  • Page 139 None. In the event of a failover to a non-preferred SIM, or if manual SIM switching is used to switch to a non-preferred SIM, the modem will attempt to reconnect to the SIM in the preferred SIM slot. None is the default. Digi IX15 Gateway User Guide...
  • Page 140 12. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 141 SIM, the modem will attempt to reconnect to the SIM in the preferred SIM slot. The default is none. 7. Set the maximum number of interfaces. This is used when using dual-APN SIMs. The default is Digi IX15 Gateway User Guide...
  • Page 142 10. Set whether the modem should use the main antenna, the auxiliary antenna, or both the main and auxiliary antennas: (config)> network modem modem antenna value (config)> where value is one of the following: main both 11. Save the configuration and apply the change: (config)> save Configuration saved. > Digi IX15 Gateway User Guide...
  • Page 143 Type quit to disconnect from the device. Configure cellular modem APNs The IX15 device uses a preconfigured list of Access Point Names (APNs) when attempting to connect to a cellular carrier for the first time. After the device has successfully connected, it will remember the correct APN.
  • Page 144 9. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 145 The default is none. 7. (Optional) To configure the device to bypass its preconfigured APN list and only use the configured APNs: (config)> network interface modem modem apn_lock true (config)> 8. Save the configuration and apply the change: Digi IX15 Gateway User Guide...
  • Page 146 The modem status window is displayed    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 147 A SIM card can be locked if a user tries to set an invalid PIN for the SIM card too many times. In addition, some cellular carriers require a SIM PIN to be added before the SIM card can be used. If the SIM card is locked, the Digi IX15 Gateway device cannot make a cellular connection. ...
  • Page 148 Interfaces Wireless Wide Area Networks (WWANs) 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 149 To run AT commands from the IX15 command line:    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 150 APNs, and then use routing roles to forward traffic to the appropriate WWAN interface.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 151 For Zone, select External. e. For Device, select Modem . f. (Optional): Configure the public APN. If the public APN is not configured, the IX15 will attempt to determine the APN. i. Click to expand APN list > APN.
  • Page 152 For APN, type the private APN provided to you by your cellular carrier. 5. Create the routing policies. For example, to route all traffic from a device with the IP address of 192.168.2.101 through the private APN: Digi IX15 Gateway User Guide...
  • Page 153 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 154 Set the modem device: (config network interface WWANPublic)> modem device modem (config network interface WWANPublic)> d. (Optional): Set the public APN. If the public APN is not configured, the IX15 will attempt to determine the APN. (config network interface WWANPublic)> modem apn public_apn (config network interface WWANPublic)>...
  • Page 155 Set the interface to WWANPrivate : (config network route policy 1)> interface /network/interface/WWANPrivate (config network route policy 1)> 6. Save the configuration and apply the change: (config network route policy 1)> save Configuration saved. > Digi IX15 Gateway User Guide...

  • Page 156: Configure A Wireless Wide Area Network (Wwan)

    The IPv6 Maximum Transmission Unit (MTU) of the WAN. When to use DNS: always, never, or only when this interface is the primary default route. SureLink active recovery configuration. See Configure SureLink active recovery to detect modem failures for further information.    WebUI Digi IX15 Gateway User Guide...
  • Page 157 Interfaces Wireless Wide Area Networks (WWANs) 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Interfaces.
  • Page 158 For Connection attempts before SIM failover, type the number of times that the device should attempt to connect to the active SIM before failing over to the next available SIM. b. For SIM failover alternative, configure how SIM failover will function if automatic SIM switching is unavailable: Digi IX15 Gateway User Guide...
  • Page 159 Reboot device: The device will reboot if automatic SIM switching is unavailable. 16. For APN list and APN list only, the IX15 device uses a preconfigured list of Access Point Names (APNs) when attempting to connect to a cellular carrier for the first time. After the device has successfully connected, it will remember the correct APN.
  • Page 160 SureLink.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 161 (config network interface my_wwan)> modem imsi IMSI (config network interface my_wwan)> plmn_id Set the PLMN id that must be in active for this WWAN to be used: (config network interface my_wwan)> modem plmn_id PLMN_ID (config network interface my_wwan)> Digi IX15 Gateway User Guide...
  • Page 162 (config network interface my_wwan)> modem operator_technology value (config network interface my_wwan)> where value is one of: all: The best available technology will be used. 2G: Only 2G technology will be used. 3G: Only 3G technology will be used. Digi IX15 Gateway User Guide...
  • Page 163 The device will reboot if automatic SIM switching is unavailable. 12. The IX15 device uses a preconfigured list of Access Point Names (APNs) when attempting to connect to a cellular carrier for the first time. After the device has successfully connected, it will remember the correct APN.
  • Page 164 (config network interface my_wwan)> ipv4 mtu num (config network interface my_wwan)> c. Configure when the WWAN's DNS servers will be used: (config network interface my_wwan)> ipv4 dns value (config network interface my_wwan)> Where value is one of: Digi IX15 Gateway User Guide...

  • Page 165: Show Wwan Status And Statistics

    3. Under Networking, click Interfaces.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 166 IPv6 DNS Server(s) : fd00:244::1, fe80::234:f3f4:fe0e:4320 > 5. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 167: Delete A Wwan

    5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 168: Configure A Wide Area Network (Wan)

    When to use DNS: always, never, or only when this interface is the primary default route. When to use DNS servers for this interface. Whether to include the IX15 device's hostname in DHCP requests. SureLink active recovery configuration. See Configure SureLink active recovery to detect modem failures for further information.
  • Page 169 To create a new WAN or edit an existing WAN:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 170 7. For Device, select an Ethernet device. 8. (Optional) Click to expand 802.1x to configure 802.1x port based network access control. The IX15 can function as an 802.1x authenticator; it does not function as an 802.1x supplicant. a. Click to expand Authentication.
  • Page 171 Never: Never use DNS servers for this interface. h. Enable DHCP Hostname to instruct the IX15 device to include the device's system name with DHCP requests as the Client FQDN option. The DHCP server can then be configured to register the device's hostname and IP address with an associated DNS server.
  • Page 172 13. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 173 Never use DNS servers for this interface. iii. Enable DHCP Hostname to instruct the IX15 device to include the device's system name with DHCP requests as the Client FQDN option. The DHCP server can then be configured to register the device's hostname and IP address with an associated DNS server.
  • Page 174 Modify any of the remaining default settings as appropriate. 8. (Optional) To configure 802.1x port based network access control: Note The IX15 can function as an 802.1x authenticator; it does not function as an 802.1x supplicant. a. Enable the 802.1x authenticator on the IX15 device: (config network interface my_wan)>...
  • Page 175 (config network interface my_wan)> where value is an integer between 0 and 86400. The default is 3600. f. (Optional) Configure 802.1x authentication auditing: i. Enable authentication auditing on the IX15 device: (config network interface my_wan)> 802_1x accounting enable true (config network interface my_wan)>...
  • Page 176 (config network interface my_wan)> save Configuration saved. > 12. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 177: Local Area Networks (Lans)

    Interfaces Local Area Networks (LANs) Local Area Networks (LANs) The IX15 device is preconfigured with the following Local Area Networks (LANs): Interface type Preconfigured interfaces Devices Default configuration Local Area Ethernet: Firewall zone: Network Internal (LAN) IP Address: 192.168.2.1/24 DHCP server...

  • Page 178: About Local Area Networks (Lans)

    The relative weight for IPv6 routes associated with the LAN. The IPv6 management priority of the LAN. The active interface with the highest management priority will have its address reported as the preferred contact address for central management and direct device access. Digi IX15 Gateway User Guide...
  • Page 179 To create a new LAN or edit an existing LAN:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 180 7. For Device, select an Ethernet device. 8. (Optional) Click to expand 802.1x to configure 802.1x port based network access control. The IX15 can function as an 802.1x authenticator; it does not function as an 802.1x supplicant. a. Click to expand Authentication.
  • Page 181 14. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 182 Set the IPv4 address and subnet of the LAN interface. Use the format IPv4_ address/netmask, for example, 192.168.2.1/24. (config network interface my_lan)> ipv4 address ip_address/netmask (config network interface my_lan)> b. Optional IPv4 configuration items: Digi IX15 Gateway User Guide...
  • Page 183 Prefix length type prefix_delegation Type weight Weight Additional Configuration --------------------------------------------------------------------- ---------- connection_monitor Active recovery dhcpv6_server DHCPv6 server (config network interface my_lan)> View default settings for the IPv6 DHCP server: (config network interface my_lan)> ipv6 dhcpv6_server ? Digi IX15 Gateway User Guide...
  • Page 184 Modify any of the remaining default settings as appropriate. 8. (Optional) To configure 802.1x port based network access control: Note The IX15 can function as an 802.1x authenticator; it does not function as an 802.1x supplicant. a. Enable the 802.1x authenticator on the IX15 device: (config network interface my_lan)>...

  • Page 185: Show Lan Status And Statistics

    12. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Show LAN status and statistics    WebUI Digi IX15 Gateway User Guide...
  • Page 186 3. Under Networking, click Interfaces.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 187: Delete A Lan

    LAN, LAN1.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 188 Local Area Networks (LANs) 3. Click Network > Interfaces. 4. Click the menu icon (...) next to the name of the LAN to be deleted and select Delete. 5. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...

  • Page 189: Dhcp Servers

    Type quit to disconnect from the device. DHCP servers You can enable DHCP on your IX15 device to assign IP addresses to clients, using either: The DHCP server for the device's local network, which assigns IP addresses to clients on the device's local network.
  • Page 190    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Interfaces.
  • Page 191 12. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 192 Determine how the DHCP server should broadcast the gateway server: (config)> network interface my_lan ipv4 dhcp_server advanced gateway value (config)> where value is one of: none: No gateway is broadcast by the DHCP server. Client destinations must be resolvable without a gateway. Digi IX15 Gateway User Guide...
  • Page 193 Interfaces Local Area Networks (LANs) auto: Broadcasts the IX15 device's gateway. custom: Allows you to identify the IP address of a custom gateway to be broadcast: (config)> network interface my_lan ipv4 dhcp_server advanced gateway_custom ip_address (config)> The default is auto.
  • Page 194 Required configuration items IP address that will be mapped to the device. MAC address of the device. Additional configuration items A label for this instance of the static lease. To map static IP addresses:    WebUI Digi IX15 Gateway User Guide...
  • Page 195 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 196 Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Show current static IP mapping To view your current static IP mapping:    WebUI Digi IX15 Gateway User Guide...
  • Page 197 3. Under Networking, click DHCP Leases.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 198 7. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 199 Type quit to disconnect from the device. Configure DHCP options You can configure DHCP servers running on your Digi IX15 Gateway device to send certain specified DHCP options to DHCP clients. You can also set the user class, which enables you to specify which specific DHCP clients will receive the option.
  • Page 200 Local Area Networks (LANs)    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Interfaces.
  • Page 201 Interfaces Local Area Networks (LANs) 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 202 LAN. For the IX15 device, DHCP relay is configured by providing the IP address of a DHCP relay server, rather than an IP address range. If both the DHCP relay server and an IP address range are specified, DHCP relay is used, and the specified IP address range is ignored.
  • Page 203 10. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 204 Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Show DHCP server status and settings View DHCP status to monitor which devices have been given IP configuration by the Digi IX15 Gateway device and to diagnose DHCP issues. ...

  • Page 205: Create A Virtual Lan (Vlan) Route

    3. Under Networking, click DHCP Leases.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 206 To create a VLAN:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Virtual LAN.
  • Page 207 Local Area Networks (LANs)    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 208: Show Surelink Status And Statistics

    To show the Surelink status all interfaces, use the show surelink interface all command: 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 209: Show Surelink Status For All Ipsec Tunnels

    To show the Surelink status all IPsec tunnels, use the show surelink ipsec all command: 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 210: Show Surelink Status For All Openvpn Clients

    1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 211 Show Surelink status and statistics > 3. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 212: Serial Port

    Serial port IX15 devices have a single serial port that provides access to the command-line interface. The default serial port configuration is: Enabled Serial mode: Remote Label: None Baud rate: 9600 Data bits: 8 Parity: None Stop bits: 1 Flow control: None Configure Login mode Login mode allows the user to log into the device through the serial port.
  • Page 213 7. Click Apply to save the configuration and apply the change. The Apply button is located at the top of the WebUI page. You may need to scroll to the top of the page to locate it.    Command line Digi IX15 Gateway User Guide...
  • Page 214 Serial port Configure Login mode 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 215: Configure Remote Access Mode

    To change the configuration to match the serial configuration of the device to which you want to connect:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Configuration, click Serial Configuration. The Serial Configuration page is displayed. Note You can also configure the serial port by using Device Configuration >...
  • Page 216 For IP Port, enter the TCP port of the remote server (1-65535). f. Click Enable TCP keepalive to enable TCP keepalive on the connection. g. Click Enable TCP nodelay to enable TCP nodealy on the connection. 14. Expand Session Settings. Digi IX15 Gateway User Guide...
  • Page 217    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 218 Set the number of bytes of output from the serial port that are written to buffer. These bytes are redisplayed when a user connects to the serial port. (config)>path-paramhistory bytes (config) The default is 4000 bytes. Digi IX15 Gateway User Guide...

  • Page 219: Configure Application Mode

    To change the configuration to match the serial configuration of the device to which you want to connect:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Configuration, click Serial Configuration. The Serial Configuration page is displayed. Digi IX15 Gateway User Guide...
  • Page 220    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 221: Configure Udp Serial Mode

    To change the configuration to match the serial configuration of the device to which you want to connect:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Configuration, click Serial Configuration. The Serial Configuration page is displayed. Digi IX15 Gateway User Guide...
  • Page 222 Click Enable to enable the data framing feature. b. For Maximum Frame Count, enter the maximum size of the packet. The default is 1024. c. For Idle Time, enter the length of time the device should wait before sending the packet. Digi IX15 Gateway User Guide...
  • Page 223 For Destinations, you can configure the remote sites to which you want to send data. If you do not specify any destinations, the IX15 send new data to the last hostname and port from which data was received. To add a destination: i.
  • Page 224 Serial port Configure UDP serial mode 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 225 16. Set the UDP port: (config)> serial port1 udp port port (config)> The default is 4001. 17. (Optional) Enter a string that should be added at the beginning of each packet: (config)> serial port1 udp socketid backslash-escaped-string (config)> Digi IX15 Gateway User Guide...

  • Page 226: Configure Modbus Mode

    Configure Modbus mode 18. Configure the remote sites to which you want to send data. If you do not specify any destinations, the IX15 send new data to the last hostname and port from which data was received. To add a destination: i.
  • Page 227 1. Set the baud rate used by the device to which you want to connect: (config)>path-parambaudrate rate (config)> 2. Set the number of data bits used by the device to which you want to connect: (config)>path-paramdatabits bits (config)> Digi IX15 Gateway User Guide...
  • Page 228    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 229 The default is none. 4. Set the stop bits used by the device to which you want to connect: (config)>path-paramstopbits bits (config)> 7. Save the configuration and apply the change: (config)> save Configuration saved. > Digi IX15 Gateway User Guide...

  • Page 230: Show Serial Status And Statistics

    3. Under Connections, click Serial.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 231 Serial port Log serial port messages 9. (Optional) For Log size, configure the maximum allowed log size for the serial port log. The default is 65536. Digi IX15 Gateway User Guide...

  • Page 232: Routing

    Routing This chapter contains the following topics: IP routing Show the routing table Dynamic DNS Virtual Router Redundancy Protocol (VRRP) Digi IX15 Gateway User Guide...

  • Page 233: Ip Routing

    IP routing IP routing The IX15 device uses IP routes to decide where to send a packet it receives for a remote network. The process for deciding on a route to send the packet is as follows: 1. The device examines the destination IP address in the IP packet, and looks through the IP routing table to find a match for it.

  • Page 234: Configure A Static Route

    To configure a static route:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Routes > Static routes.
  • Page 235 7. For Interface, select the interface on the IX15 device that will be used with this static route. 8. (Optional) For Gateway, type the IPv4 address of the gateway used to reach the destination.
  • Page 236 The any keyword can also be used to route packets to any destination with this static route. 6. Set the interface on the IX15 device that will be used with this static route: a. Use the ? to determine available interfaces: b.

  • Page 237: Delete A Static Route

    Delete a static route    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Routes > Static routes.

  • Page 238: Policy-Based Routing

    However, you can use policy-based routing to forward the packet based on other criteria, such as the source of the packet. For example, you can configure the IX15 device so that high-priority traffic is routed through the cellular connection, while all other traffic is routed through an Ethernet (WAN) connection.

  • Page 239: Configure A Routing Policy

    Routing IP routing Policy-based routing for the IX15 device uses the following criteria to determine how to route traffic: Firewall zone (for example, internal/outbound traffic, external/inbound traffic, or IPSec tunnel traffic). Network interface (for example, the cellular connection, the WAN, or the LAN).
  • Page 240 5. (Optional) For Label, type a label that will be used to identify this route policy. 6. For Interface, select the interface on the IX15 device that will be used with this route policy. 7. (Optional) Enable Exclusive to configure the policy to drop packets that match the policy when the gateway interface is disconnected, rather than forwarded through other interfaces.
  • Page 241 13. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 242 (config network route policy 0)> label "New route policy" (config network route policy 0)> 5. Set the interface on the IX15 device that will be used with this route policy: a. Use the ? to determine available interfaces: b. Set the interface. For example: (config network route policy 0)>...
  • Page 243 Matches the source IP address to the selected firewall zone. Set the zone: a. Use the ? to determine available zones: (config network route policy 0)> src zone ? Zone: Match the IP address to the specified firewall zone. Format: dynamic_routes edge external internal ipsec loopback setup Digi IX15 Gateway User Guide...
  • Page 244 (config network route policy 0)> src mac MAC_address (config network route policy 0)> 10. Set the destination address type: (config network route policy 0)> dst type value (config network route policy 0)> Digi IX15 Gateway User Guide...
  • Page 245 (config network route policy 0)> where value uses the format IPv4_address[/netmask], or any to match any IPv4 address. address6: Matches the destination IPv6 address to the specified IP address or network. Set the address that will be matched: Digi IX15 Gateway User Guide...
  • Page 246 11. Save the configuration and apply the change: (config)> save Configuration saved. > 12. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 247: Routing Services

    Routing IP routing Routing services Your IX15 includes support for dynamic routing services and protocols. The following routing services are supported: Service or protocol Information RFC2453 The IPv4 Routing Information Protocol (RIP) service supports RIPv2 ( RFC1058 and RIPv1 (...
  • Page 248 IP routing    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Routes > Routing services.
  • Page 249 IP routing    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 250: Show The Routing Table

    To display the routing table:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...

  • Page 251: Dynamic Dns

    WAN or public IP address changes. Your IX15 device supports a number of Dynamic DNS providers as well as the ability to provide a custom provider that is not included on the list of providers.
  • Page 252 The amount of time to wait to force an update of the interface's IP address. The amount of time to wait for an IP address update to succeed before retrying the update. The number of times to retry a failed IP address update. Digi IX15 Gateway User Guide...
  • Page 253 Dynamic DNS    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Dynamic DNS.
  • Page 254 14. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 255 Dynamic DNS provider: (config network ddns new_ddns_instance)> custom url (config network ddns new_ddns_instance)> 7. Set the domain name that is linked to the interface's IP address: (config network ddns new_ddns_instance)> domain domain_name (config network ddns new_ddns_instance)> Digi IX15 Gateway User Guide...
  • Page 256 For example, to set retry_interval to ten minutes, enter either 10m or 600s: (config network ddns new_ddns_instance)> retry_interval 600s (config network ddns new_ddns_instance)> The default is 60s. 13. (Optional) Set the number of times to retry a failed IP address update: Digi IX15 Gateway User Guide...

  • Page 257: Virtual Router Redundancy Protocol (Vrrp)

    Multiple IX15 devices can be configured as VRRP devices and assigned a priority. The router with the highest priority will be used as the master router. If the master router fails, then the IP address of the virtual router is mapped to the backup device with the next highest priority.
  • Page 258 VRRP priorty of devices based on the status of their network connectivity.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 259 12. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 260 9. Add a virtual IP address associated with this VRRP instance. This can be an IPv4 or IPv6 address. (config network vrrp VRRP_test)> add virtual_address end ip_address (config network vrrp VRRP_test)> Additional virtual IP addresses can be added by repeating this step with different values for ip_ address. Digi IX15 Gateway User Guide...

  • Page 261: Configure Vrrp

    VRRP+ is an extension to the VRRP standard that uses SureLink network probing to monitor connections through VRRP-enabled devices and adjust devices' VRRP priority based on the status of the SureLink tests. This section describes how to configure VRRP+ on a IX15 device. Required configuration items Both master and backup devices: A configured and enabled instance of VRRP.
  • Page 262 Routing Virtual Router Redundancy Protocol (VRRP) 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > VRRP.
  • Page 263 Configure the VRRP interface's DHCP server to use a custom gateway that corresponds to one of the VRRP virtual IP addresses: i. Click to expand DHCP Server > Advanced settings. ii. For Gateway, select Custom. Digi IX15 Gateway User Guide...
  • Page 264 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 265 8. Configure the VRRP interface: a. Configure the VRRP interface's DHCP server to use a custom gateway that corresponds to one of the VRRP virtual IP addresses: i. Set the DHCP server gateway type to custom: Digi IX15 Gateway User Guide...
  • Page 266 For example, to set interval to ten minutes, enter 5s: (config)> network interface eth ipv4 surelink interval 5s (config)> Digi IX15 Gateway User Guide...
  • Page 267 (Optional) Set the amount of time that the interface can be down before this test is considered to have failed: Digi IX15 Gateway User Guide...

  • Page 268: Example: Vrrp/Vrrp+ Configuration

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Example: VRRP/VRRP+ configuration This example configuration creates a VRRP pool containing two IX15 devices: Digi IX15 Gateway User Guide...

  • Page 269: Configure Device One (Master Device)

       WebUI Task 1: Configure VRRP on device one 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > VRRP.
  • Page 270 Task 2: Configure VRRP+ on device one 1. Click to expand VRRP+. 2. Click Enable. 3. Click to expand Monitor interfaces. 4. Click  to add an interface for monitoring. 5. Select Interface: Modem. 6. For Priority modifier, type 30. Digi IX15 Gateway User Guide...
  • Page 271   Command line Task 1: Configure VRRP on device one 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 272 Task 3: Configure the IP address for the VRRP interface, ETH, on device one 1. Type ... to return to the root of the config prompt: (config network vrrp VRRP_test )> ... (config)> 2. Set the IP address for ETH: (config)> network interface eth ipv4 address 192.168.3.1/24 (config)> Digi IX15 Gateway User Guide...

  • Page 273: Configure Device Two (Backup Device)

       WebUI Task 1: Configure VRRP on device two 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 274 7. For Router ID, leave at the default setting of 50. 8. For Priority, type 80. 9. Click to expand Virtual IP addresses. 10. Click  to add a virtual IP address. 11. For Virtual IP, type 192.168.3.3. Digi IX15 Gateway User Guide...
  • Page 275 1. Click Network > Interfaces > ETH > IPv4 > SureLink. 2. Click Enable. 3. For Interval, type 15s. 4. Click to expand Test targets > Test target. 5. For Test Type, select Ping test. Digi IX15 Gateway User Guide...
  • Page 276   Command line Task 1: Configure VRRP on device two 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 277 (config network vrrp VRRP_test )> Task 3: Configure the IP address for the VRRP interface, ETH, on device two 1. Type ... to return to the root of the config prompt: (config network vrrp VRRP_test )> ... (config)> Digi IX15 Gateway User Guide...
  • Page 278 2. Set the start and end addresses of the DHCP pool to use to assign DHCP addresses to clients: a. Set the start address to 200: (config)> network interface eth ipv4 dhcp_server lease_start 200 (config)> b. Set the end address to 250: (config)> network interface eth ipv4 dhcp_server lease_end 250 (config)> Digi IX15 Gateway User Guide...

  • Page 279: Show Vrrp Status And Statistics

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Show VRRP status and statistics This section describes how to display VRRP status and statistics for a Digi IX15 Gateway device. VRRP status is available from the Web UI only. ...
  • Page 280 The Virtual Router Redundancy Protocol window is displayed.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 281 Routing Virtual Router Redundancy Protocol (VRRP) > Digi IX15 Gateway User Guide...

  • Page 282: Virtual Private Networks (Vpn)

    Virtual Private Networks (VPNs) are used to securely connect two private networks together so that devices can connect from one network to the other using secure channels. This chapter contains the following topics: IPsec OpenVPN Generic Routing Encapsulation (GRE) L2TP L2TPv3 Ethernet NEMO Digi IX15 Gateway User Guide...

  • Page 283: Ipsec

    Authentication of data to ensure an unauthorized device has not injected it into the IPsec tunnel. IPsec mode The IX15 supports the Tunnel mode. With the Tunnel mode, the entire IP packet is encrypted and/or authenticated and then encapsulated as the payload in a new IP packet. Transport mode is not currently supported.

  • Page 284: Authentication

    Client authenticaton XAUTH (extended authentication) pre-shared key authentication mode provides additional security by using client authentication credentials in addition to the standard pre-shared key. The IX15 device can be configured to authenticate with the remote peer as an XAUTH client. RSA Signatures With RSA signatures authentication, the IX15 device uses a private RSA key to authenticate with a...
  • Page 285 Disable the padding of IKE packets. This should normally not be done except for compatibility purposes. Destination networks that require source NAT. Depending on your network and firewall configuration, you may need to add a packet filtering rule to allow incoming IPsec traffic. Digi IX15 Gateway User Guide...
  • Page 286    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click VPN > IPsec.
  • Page 287 The metric can also be used in tandem with SureLink to configure IPsec failover behavior. See Configure IPsec failover for more information. 11. For Mode, select Tunnel mode. Transport mode is not currently supported. Digi IX15 Gateway User Guide...
  • Page 288 SCEP certificates: Uses Simple Certificate Enrollment Protocol (SCEP) to download a private key, certificates, and an optional Certificate Revocation List (CRL) to the IX15 device from a SCEP server. You must create the SCEP client prior to configuring the IPsec tunnel. See...
  • Page 289 For IPv6 ID value, type an IPv6 formatted ID. This can be a fully-qualified domain name or an IPv6 address. RFC822/Email: The ID will be interpreted as an RFC822 (email address). For RFC822 ID value, type the ID in internet email address format. Digi IX15 Gateway User Guide...
  • Page 290 RFC822/Email: The ID will be interpreted as an RFC822 (email address). For RFC822 ID value, type the ID in internet email address format. FQDN: The ID will be interpreted as FQDN (Fully Qualified Domain Name) and sent as an ID_FQDN IKE identity. Digi IX15 Gateway User Guide...
  • Page 291 Any: Matches any protocol. TCP: Matches TCP protocol only. UDP: Matches UDP protocol only. ICMP: Matches ICMP requests only. Other protocol: Matches an unlisted protocol. If Other protocol is selected, type the number of the protocol. Digi IX15 Gateway User Guide...
  • Page 292 If supported by the peer: Send oversized IKE messages in fragments, if the peer supports receiving them. Always: Always send IKEv1 messages in fragments. For IKEv2, this option is equivalent to If supported by the peer. Never: Do not send oversized IKE messages in fragments. Digi IX15 Gateway User Guide...
  • Page 293 22. (Optional) Click to expand Dead peer detection. Dead peer detection is enabled by default. Dead peer detection uses periodic IKE transmissions to the remote endpoint to detect whether tunnel communications have failed, allowing the tunnel to be automatically restarted when failure occurs. Digi IX15 Gateway User Guide...
  • Page 294 Configure SureLink active recovery for IPsec for information about IPsec Active recovery. 25. (Optional) Click Advanced to set various IPsec-related time out, keep alive, and related values. 26. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 295 IPsec    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 296 Only the payload of the IP packet is encrypted and/or authenticated. The IP header is unencrypted. The default is tunnel. 8. Set the protocol: (config vpn ipsec tunnel ipsec_example)> type protocol (config vpn ipsec tunnel ipsec_example)> where protocol is either: Digi IX15 Gateway User Guide...
  • Page 297 Set the private key passphrase that is used to decrypt the private key. Leave blank if the private key is not encrypted. (config vpn ipsec tunnel ipsec_example)> auth private_key_ passphrase passphrase (config vpn ipsec tunnel ipsec_example)> c. For the peer_public_key parameter, paste the peer's public RSA key in PEM format: Digi IX15 Gateway User Guide...
  • Page 298 (config vpn ipsec tunnel ipsec_example)> 11. (Optional) Configure the device to connect to its remote peer as an XAUTH client: a. Enable XAUTH client functionality: (config vpn ipsec tunnel ipsec_example)> xauth_client enable true (config vpn ipsec tunnel ipsec_example)> Digi IX15 Gateway User Guide...
  • Page 299 Any ID will be accepted. ipv4: The ID will be interpreted as an IPv4 address and sent as an ID_IPV4_ADDR IKE identity. Set an IPv4 formatted ID. This can be a fully-qualified domain name or an IPv4 address. Digi IX15 Gateway User Guide...
  • Page 300 Repeat for additional hostnames. b. Set the hostname selection type: (config vpn ipsec tunnel ipsec_example)> remote hostname_selection value (config vpn ipsec tunnel ipsec_example)> where value is one of: Digi IX15 Gateway User Guide...
  • Page 301 (config vpn ipsec tunnel ipsec_example)> remote id type rfc822_ id id (config vpn ipsec tunnel ipsec_example)> fqdn: The ID will be interpreted as FQDN (Fully Qualified Domain Name) and sent as an ID_FQDN IKE identity. Digi IX15 Gateway User Guide...
  • Page 302 Do not send oversized IKE messages in fragments, but announce support for fragmentation to the peer. The default is always. e. Padding of IKE packets is enabled by default and should normally not be disabled except for compatibility purposes. To disable: Digi IX15 Gateway User Guide...
  • Page 303 Configure the types of encryption, hash, and Diffie-Hellman group to use during phase 1: i. Add a phase 1 proposal: (config vpn ipsec tunnel ipsec_example)> add ike phase1_proposal (config vpn ipsec tunnel ipsec_example ike phase1_proposal 0)> Digi IX15 Gateway User Guide...
  • Page 304 (config vpn ipsec tunnel ipsec_example ike phase1_proposal 1)> Repeat the above steps to set the type of encryption, hash, and Diffie-Hellman group for the additional proposal. iii. Repeat to add more phase 1 proposals. Digi IX15 Gateway User Guide...
  • Page 305 Set the Diffie-Hellman group type: (config vpn ipsec tunnel ipsec_example ike phase2_proposal 0)> dh_group value (config vpn ipsec tunnel ipsec_example ike phase2_proposal 0)> The default is modp2048. vi. (Optional) Add additional phase 2 proposals: Digi IX15 Gateway User Guide...
  • Page 306 (config vpn ipsec tunnel ipsec_example nat 0)> b. Set the IPv4 address and optional netmask of a destination network that requires source NAT. You can also use any, meaning that any destination network connected to the tunnel will use source NAT. Digi IX15 Gateway User Guide...
  • Page 307 (config vpn ipsec tunnel ipsec_example policy 0)> where value is the IPv4 address and optional netmask. The keyword any can also be used. request: Requests a network from the remote peer. dynamic: Uses the address of the local endpoint. Digi IX15 Gateway User Guide...
  • Page 308 (config vpn ipsec tunnel ipsec_example policy 0)> remote protocol value (config vpn ipsec tunnel ipsec_example policy 0)> where value is one of: any: Matches any protocol. tcp: Matches TCP protocol only. udp: Matches UDP protocol only. icmp: Matches ICMP requests only. Digi IX15 Gateway User Guide...
  • Page 309 Generally, the default settings for these should be sufficient. c. You can also enable debugging for IPsec: (config)> vpn ipsec advanced debug value (config)> where value is one of: none basic_auditing detailed_control generic_control raw_data sensitive_data Digi IX15 Gateway User Guide...
  • Page 310 20. Save the configuration and apply the change: (config)> save Configuration saved. > 21. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 311: Configure Ipsec Failover

    Virtual Private Networks (VPN) IPsec Configure IPsec failover There are two methods to configure the IX15 device to fail over from a primary IPsec tunnel to a backup tunnel: SureLink active recovery—You can use SureLink along with the IPsec tunnel's metric to configure two or more tunnels so that when the primary tunnel is determined to be inactive by SureLink, a secondary tunnel can begin serving traffic that the primary tunnel was serving.
  • Page 312 See Configure an IPsec tunnel for instructions. During configuration of the IPsec tunnel, set the metric to a value that is higher than the metric of the primary tunnel (for example, 20).    Command line Digi IX15 Gateway User Guide...
  • Page 313 Use the ? to view a list of available tunnels: (config vpn ipsec tunnel backup_ipsec_tunnel)> ipsec_failover ? Preferred tunnel: This tunnel will not start until the preferred tunnel has failed. It will continue to operate until the preferred tunnel returns to full operation Digi IX15 Gateway User Guide...

  • Page 314: Configure Surelink Active Recovery For Ipsec

    (config vpn ipsec tunnel backup_ipsec_tunnel)> Configure SureLink active recovery for IPsec You can configure the IX15 device to regularly probe IPsec tunnels to determine if the connection has failed and take remedial action. You can also configure the IPsec tunnel to fail over to a backup tunnel. See Configure IPsec failover further information.
  • Page 315 Virtual Private Networks (VPN) IPsec 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click VPN > IPsec.
  • Page 316 Ping test: Tests connectivity by sending an ICMP echo request to the hostname or IP address specified in Ping host. You can also optionally change the number of bytes in the Ping payload size. DNS test: Tests connectivity by sending a DNS query to the specified DNS server. Digi IX15 Gateway User Guide...
  • Page 317 14. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 318 (config vpn ipsec tunnel ipsec_example)> surelink timeout value (config vpn ipsec tunnel ipsec_example)> where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. Digi IX15 Gateway User Guide...
  • Page 319 Tests connectivity by sending an HTTP or HTTPS GET request to the specified URL. Specify the url: (config vpn ipsec tunnel ipsec_example surelink target 0)> http_url value (config vpn ipsec tunnel ipsec_example surelink target 0)> where value uses the format http[s]://hostname/[path] Digi IX15 Gateway User Guide...
  • Page 320 Allows you to test another interface's status, to create a failover or coupled relationship between interfaces: (config vpn ipsec tunnel ipsec_example surelink target 0)> other value (config vpn ipsec tunnel ipsec_example surelink target 0)> If other is set: Digi IX15 Gateway User Guide...

  • Page 321: Show Ipsec Status And Statistics

    Show IPsec status and statistics    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, select Status > IPsec. The IPsec page appears. 3. To view configuration details about an IPsec tunnel, click the  (configuration) icon in the upper right of the tunnel's status pane.

  • Page 322: Debug An Ipsec Configuration

       WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 323 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 324: Configure A Simple Certificate Enrollment Protocol Client

    Simple Certificate Enrollment Protocol (SCEP) is a mechanism that allows for large-scale X.509 certificate deployment. You can configure IX15 device to function as a SCEP client that will connect to a SCEP server that is used to sign Certificate Signing Requests (CSRs), provide Certificate Revocation Lists (CRLs), and distribute valid certificates from a Certificate Authority (CA).
  • Page 325 6. For Renewable Time, type the number of days that the certificate enrollment can be renewed, prior to the request expiring. This value is configured on the SCEP server, and is used by the IX15 device to determine when to start attempting to auto-renew an existing certificate. The default is 7.
  • Page 326 15. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 327 Set the two letter Country Code: (config network scep_client scep_client_name)> distinguished_name c value (config network scep_client scep_client_name)> c. Set the State or Province: (config network scep_client scep_client_name)> distinguished_name st value (config network scep_clientscep_client_name )> d. Set the Locality: Digi IX15 Gateway User Guide...

  • Page 328: Example: Scep Client Configuration With Fortinet Scep Server

    Type quit to disconnect from the device. Example: SCEP client configuration with Fortinet SCEP server In this example configuration, we will configure the IX15 device as a SCEP client that will connect to a Fortinet SCEP server. Fortinet configuration...
  • Page 329 For Default enrollment password, enter a password. The password entered here must correspond to the challenge password configured for the SCEP client on the IX15 device. d. The remaining fields can be left at their defaults or changed as appropriate.
  • Page 330 Virtual Private Networks (VPN) IPsec    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > SCEP Client.
  • Page 331 12. Type the value for each appropriate Distinguished Name attribute. The values entered here must correspond to the DN attributes in the Enrollment Request on the Fortinet server. 13. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 332 IPsec    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 333: Disable Hardware Cryptographic Acceleration

    (config network scep_client Fortinet_SCEP_client)> 9. (Optional) Set the filename of the Certificate Revocation List (CRL) from the CA. The CRL is stored on the IX15 device in the /etc/config/scep_client/client_name directory. (config network scep_client Fortinet_SCEP_client)> crl_name name (config network scep_client Fortinet_SCEP_client)>...
  • Page 334    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 335 Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. The device must be rebooted for the change to take effect. See Reboot your IX15 device. Digi IX15 Gateway User Guide...

  • Page 336: Openvpn

    OpenVPN clients. OpenVPN clients use Network Address Translation (NAT) to route traffic from devices connected on its LAN interfaces to the OpenVPN server. The manner in which the IP subnets are defined depends on the OpenVPN topology in use. The IX15 device supports two types of OpenVPN topology:...

  • Page 337: Configure An Openvpn Server

    Virtual Private Networks (VPN) OpenVPN OpenVPN managed—The IX15 device creates the interface and then uses its standard configuration to set up the connection (for example, its standard DHCP server configuration). Device only—IP addressing is controlled by the system, not by OpenVPN.
  • Page 338 Additional OpenVPN parameters.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click VPN > OpenVPN > Servers.
  • Page 339 Certificate and username/password: Uses both certificates and a username and password for client authentication. Each client requires a public and private key, and you must create an OpenVPN authentication group and user. See Configure an OpenVPN Authentication Group and User for instructions. Digi IX15 Gateway User Guide...
  • Page 340 No limit to IPv6 addresses that can access the service-type. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces. b. For Add Interface, click .
  • Page 341 OpenVPN    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 342 80, the first client IP address will be 192.168.1.80. The default is from 80. ii. Set the last address in the range limit: (config vpn openvpn server name)> server_last_ip value (config vpn openvpn server name)> Digi IX15 Gateway User Guide...
  • Page 343 (config vpn openvpn server name)> iii. Paste the contents of the public key (for example, server.crt) into the value of the server_cert parameter: (config vpn openvpn server name)> server_cert value (config vpn openvpn server name)> Digi IX15 Gateway User Guide...
  • Page 344 No limit to IPv6 addresses that can access the service-type. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config vpn openvpn server name)> add acl interface end value (config vpn openvpn server name)>...
  • Page 345 (config vpn openvpn server name)> advanced_options enable true (config vpn openvpn server name)> b. Configure whether the additional OpenVPN parameters should override default options: (config vpn openvpn server name)> advanced_options override true (config vpn openvpn server name)> Digi IX15 Gateway User Guide...

  • Page 346: Configure An Openvpn Authentication Group And User

       WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 347 Click to expand the OpenVPN node. e. Click  to add a tunnel. f. For Tunnel, select an OpenVPN tunnel to which users of this group will have access. g. Repeat to add additional OpenVPN tunnels. Digi IX15 Gateway User Guide...
  • Page 348 Click to expand the Groups node. e. Click  to add a group to the user. f. Select a Group with OpenVPN access enabled. 5. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 349 OpenVPN    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 350: Configure An Openvpn Client By Using An .Ovpn File

    OpenVPN active recovery.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click VPN > OpenVPN > Clients.
  • Page 351 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 352 7. Paste the content of the client.ovpn file into the value of the config_file parameter: (config vpn openvpn client name)> config_file value (config vpn openvpn client name)> 8. Save the configuration and apply the change: (config)> save Configuration saved. > Digi IX15 Gateway User Guide...

  • Page 353: Configure An Openvpn Client Without Using An .Ovpn File

    OpenVPN active recovery.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 354 5. The OpenVPN client is enabled by default. To disable, click Enable. 6. The default behavior is to use an OVPN file for client configuration. To disable this behavior and configure the client manually, click Use .ovpn file to disable. Digi IX15 Gateway User Guide...
  • Page 355 15. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 356 (config vpn openvpn client name)> username value (config vpn openvpn client name)> password value (config vpn openvpn client name)> 9. Set the IP address of the OpenVPN server: (config vpn openvpn client name)> server ip_address (config vpn openvpn client name)> Digi IX15 Gateway User Guide...

  • Page 357: Configure Surelink Active Recovery For Openvpn

    Type quit to disconnect from the device. Configure SureLink active recovery for OpenVPN You can configure the IX15 device to regularly probe OpenVPN client connections to determine if the connection has failed and take remedial action. Digi IX15 Gateway User Guide...
  • Page 358 To configure the IX15 device to regularly probe the OpenVPN connection:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 359 Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Response timeout to ten minutes, enter 10m or 600s. The default is 15 seconds. Digi IX15 Gateway User Guide...
  • Page 360 Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Initial connection time to ten minutes, enter 10m or 600s. The default is 60 seconds. 14. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 361 OpenVPN    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 362 (config vpn openvpn client openvpn_client1 surelink target 0)> test value (config vpn openvpn client openvpn_client1 surelink target 0)> where value is one of: ping: Tests connectivity by sending an ICMP echo request to a specified hostname or IP address. Digi IX15 Gateway User Guide...
  • Page 363 (config vpn openvpn client openvpn_client1 surelink target 0)> where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. For example, to set timeout to ten minutes, enter either 10m or 600s: Digi IX15 Gateway User Guide...
  • Page 364 (config vpn openvpn client openvpn_client1 surelink target 0)> Set the alternate interface's IP version. This allows you to determine the alternate interface's status for a particular IP version. (config vpn openvpn client openvpn_client1 surelink target 0)> other_ip_version value Digi IX15 Gateway User Guide...

  • Page 365: Show Openvpn Server Status And Statistics

    OpenVPN server's status pane.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 366: Show Openvpn Client Status And Statistics

    OpenVPN client's status pane.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 367 : 1194 Type : tun > 4. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 368: Generic Routing Encapsulation (Gre)

    Task One: Create a GRE loopback endpoint interface    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 369 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 370 Task Two: Configure the GRE tunnel    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 371 10. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 372 (config vpn iptunnel gre_example)> save Configuration saved. > 9. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 373: Show Gre Tunnels

    To view information about currently configured GRE tunnels:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click Status > IP tunnels. The IP Tunnelspage appears. 3. To view configuration details about a GRE tunnel, click the  (configuration) icon in the upper right of the tunnel's status pane.

  • Page 374: Example: Gre Tunnel Over An Ipsec Tunnel

    Example: GRE tunnel over an IPSec tunnel The IX15 device can be configured as an advertised set of routes through an IPSec tunnel. This allows you to leverage the dynamic route advertisement of GRE tunnels through a secured IPSec tunnel.
  • Page 375 3. Create a GRE tunnel named gre_tunnel2: a. Local endpoint set to the IPsec endpoint interface, Interface: ipsec_endpoint2. b. Remote endpoint set to the IP address of the GRE tunnel on IX15-1, 172.30.0.1. 4. Create an interface named gre_interface2 and add it to the GRE tunnel: a.
  • Page 376 15. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 377 4. Set the pre-shared key to testkey: (config vpn ipsec tunnel ipsec_gre1)> auth secret testkey (config vpn ipsec tunnel ipsec_gre1)> 5. Set the remote endpoint to public IP address of the IX15-2 device: (config vpn ipsec tunnel ipsec_gre1)> remote hostname 192.168.101.1 (config vpn ipsec tunnel ipsec_gre1)>...
  • Page 378 4. For Device, select Ethernet: loopback. 5. Click to expand IPv4. 6. For Address, type the IP address of the local GRE tunnel, 172.30.0.1/32. 7. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 379 Task three: Create a GRE tunnel    WebUI 1. Click VPN > IP Tunnels. 2. For Add IP Tunnel, type gre_tunnel1 and click . 3. For Local endpoint, select the IPsec endpoint interface created in Task two (Interface: ipsec_ endpoint1). Digi IX15 Gateway User Guide...
  • Page 380 (config vpn iptunnel gre_tunnel1)> local /network/interface/ipsec_ endpoint1 (config vpn iptunnel gre_tunnel1)> 4. Set the remote endpoint to the IP address of the GRE tunnel on IX15-2, 172.30.0.2: (config vpn iptunnel gre_tunnel1)> remote 172.30.0.2 (config vpn iptunnel gre_tunnel1)> 5. Save the configuration and apply the change: (config vpn iptunnel gre_tunnel1)>...
  • Page 381 Task three (IP tunnel: gre_tunnel1). 5. Click to expand IPv4. 6. For Address, type 172.31.0.1/30 for a virtual IP address on the GRE tunnel. 7. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 382 Task one: Create an IPsec tunnel    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 383 3. Click VPN > IPsec > Tunnels. 4. For Add IPsec Tunnel, type ipsec_gre2 and click . 5. Click to expand Authentication. 6. For Pre-shared key, type the same pre-shared key that was configured for the IX15-1 (testkey). 7. Click to expand Remote endpoint.
  • Page 384 3. Add an IPsec tunnel named ipsec_gre2: (config)> add vpn ipsec tunnel ipsec_gre2 (config vpn ipsec tunnel ipsec_gre2)> 4. Set the pre-shared key to the same pre-shared key that was configured for the IX15-1 (testkey): (config vpn ipsec tunnel ipsec_gre2)> auth secret testkey (config vpn ipsec tunnel ipsec_gre2)>...
  • Page 385 Task two: Create an IPsec endpoint interface    WebUI 1. Click Network > Interfaces. 2. For Add Interface, type ipsec_endpoint2 and click . 3. For Zone, select Internal. 4. For Device, select Ethernet: loopback. 5. Click to expand IPv4. Digi IX15 Gateway User Guide...
  • Page 386 5. Set the IPv4 address to the IP address of the local GRE tunnel, 172.30.0.2/32: (config network interface ipsec_endpoint2)> ipv4 address 172.30.0.2/32 (config network interface ipsec_endpoint2)> 6. Save the configuration and apply the change: (config vpn ipsec tunnel ipsec_endpoint2)> save Configuration saved. > Digi IX15 Gateway User Guide...
  • Page 387 (config vpn iptunnel gre_tunnel2)> local /network/interface/ipsec_ endpoint2 (config vpn iptunnel gre_tunnel2)> 4. Set the remote endpoint to the IP address of the GRE tunnel on IX15-1, 172.30.0.1: (config vpn iptunnel gre_tunnel2)> remote 172.30.0.1 (config vpn iptunnel gre_tunnel2)> Digi IX15 Gateway User Guide...
  • Page 388 Task three (IP tunnel: gre_tunnel2). 5. Click to expand IPv4. 6. For Address, type 172.31.1.1/30 for a virtual IP address on the GRE tunnel. 7. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...

  • Page 389: L2Tp

    Your IX15 device supports PPP-over-L2TP (Layer 2 Tunneling Protocol). Configure a PPP-over-L2TP tunnel Your IX15 device supports PPP-over-L2TP (Layer 2 Tunneling Protocol). The tunnel endpoints are known as L2TP Access Concentrators (LAC) and L2TP Network Servers (LNS). Each endpoint terminates the PPP session.
  • Page 390 Optional configuration data in the format of a pppd options file.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 391 No limit to IPv6 addresses that can access the service-type. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces. b. For Add Interface, click .
  • Page 392 For Remote IP address, type the IP address to assign to the remote peer. g. (Optional) For Authentication method, select one of the following: None: No authentication is required. Automatic: The device will attempt to connect using CHAP first, and then PAP. Digi IX15 Gateway User Guide...
  • Page 393 8. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 394 No limit to IPv6 addresses that can access the service-type. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config)> add vpn l2tp acl interface end value (config)>...
  • Page 395 (config vpn l2tp lac lac_tunnel)> enable false (config vpn l2tp lac lac_tunnel)> b. Set the hostname or IP address of the L2TP network server: (config vpn l2tp lac lac_tunnel)> lns hostname (config vpn l2tp lac lac_tunnel)> Digi IX15 Gateway User Guide...
  • Page 396 Current value: (config vpn l2tp lac lac_tunnel)> ii. Set the zone: (config vpn l2tp lac lac_tunnel)> zone zone (config vpn l2tp lac lac_tunnel)> h. (Optional): Custom PPP configuration: Digi IX15 Gateway User Guide...
  • Page 397 The keyword any, which means that the server will accept connections from any IP address. c. Set the IP address of the L2TP virtual network interface: (config vpn l2tp lns lns_server)> local_address IP_address (config vpn l2tp lns lns_server)> Digi IX15 Gateway User Guide...
  • Page 398 Zone: The firewall zone assigned to this tunnel. This can be used by packet filtering rules and access control lists to restrict network traffic on this tunnel. Format: dynamic_routes edge external internal ipsec loopback setup Digi IX15 Gateway User Guide...

  • Page 399: Configure Surelink Active Recovery For Ppp-Over-L2Tp

    Type quit to disconnect from the device. Configure SureLink active recovery for PPP-over-L2TP You can configure the IX15 device to regularly probe PPP-over-L2TP access concatenators to determine if the connection has failed and take remedial action. Required configuration items A valid PPP-over-L2TP configuration.
  • Page 400 To configure the IX15 device to regularly probe the PPP-over-L2TP connection:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 401 For example, to set Response timeout to ten minutes, enter 10m or 600s. The default is 15 seconds. 13. Add a test target: a. Click to expand Test targets. b. For Add Test target, click . Digi IX15 Gateway User Guide...
  • Page 402 Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Initial connection time to ten minutes, enter 10m or 600s. The default is 60 seconds. 14. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 403 L2TP    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 404 IP address. Specify the hostname or IP address: (config vpn l2tp lac lac_tunnel surelink target 0)> ping_host host (config vpn l2tp lac lac_tunnel surelink target 0)> (Optional) Set the size, in bytes, of the ping packet: Digi IX15 Gateway User Guide...
  • Page 405 (Optional) Set the amount of time to wait for an initial connection to the interface before this test is considered to have failed: (config vpn l2tp lac lac_tunnel surelink target 0)> interface_timeout value (config vpn l2tp lac lac_tunnel surelink target 0)> Digi IX15 Gateway User Guide...

  • Page 406: L2Tp With Ipsec

    L2TP is commonly used in conjunction with IPsec in transport mode (to provide security). Your IX15 supoorts L2TP with IPsec by configuring a transport-mode IPsec tunnel between the two endpoints, and then an L2TP tunnel with its LNS and LAC configured the same as the IPsec tunnel’s endpoints.

  • Page 407: Show L2Tp Tunnel Status

    This means that you cannot restrict traffic on the IPsec tunnel to L2TP traffic (typically UDP port 1701). While multiple L2TP clients are supported on the IX15 by configuring a separate LNS for each client, multiple clients behind a Network Address Translation (NAT) device are not supported, because they will all appear to have the same IP address.

  • Page 408: L2Tpv3 Ethernet

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. L2TPv3 Ethernet Your IX15 device supports Layer 2 Tunneling Protocol Version 3 (L2TPv3) static unmanaged Ethernet tunnels. Digi IX15 Gateway User Guide...

  • Page 409: Configure An L2Tpv3 Tunnel

    Virtual Private Networks (VPN) L2TPv3 Ethernet Configure an L2TPv3 tunnel Your IX15 device supports Layer 2 Tunneling Protocol Version 3 (L2TPv3) static unmanaged Ethernet tunnels. Required configuration items A name for the L2TPv3 tunnel. Enable the tunnel. The remote endpoint IP address.
  • Page 410 Send: Add a sequence number to each outgoing packet. Receive: Reorder packets if they are received out of order. Both: Add a sequence number to each outgoing packet, and reorder packets if they are received out of order. Digi IX15 Gateway User Guide...
  • Page 411 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 412 1 and 4294967295. 12. (Optional) Set the cookie value to be assigned to the session. (config vpn l2tpeth L2TPv3_example session_example)> cookie value (config vpn l2tpeth L2TPv3_example session_example)> Allowed value is 8 or 16 hex digits. Digi IX15 Gateway User Guide...

  • Page 413: Show L2Tpv3 Tunnel Status

    Show L2TPV3 tunnel status    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, select Status. Under VPN, select L2TPv3 Ethernet. The L2TPv3 Ethernet page appears. 3. To view configuration details about an L2TPV3 tunnel, click the  (configuration) icon in the upper right of the tunnel's status pane.

  • Page 414: Nemo

    Local Area Networks (LANs) on your device. NEMO creates a tunnel between the home agent on the mobile private network and the IX15 device, isolating the connection from internet traffic and advertising the IP subnets of the LANs for remote access and device management.

  • Page 415: Configure A Nemo Tunnel

    If set to IP address, enter the IP address. The local network of the GRE endpoint negotiated by NEMO. If the local network is set to Interface, identify the local interface to be used.    WebUI Digi IX15 Gateway User Guide...
  • Page 416 10. For MTU discovery, leave enabled to determine the maximum transmission unit (MTU) size. If disabled, for MTU, type the MTU size. The default MTU size for LANs on the IX15 device is 1500. The MTU size of the NEMO tunnel will be smaller, to take into account the required headers.
  • Page 417 14. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 418 (config vpn nemo nemo_example)> mtu_discovery false (config vpn nemo nemo_example)> If disabled, set the MTU size. The default MTU size for LANs on the IX15 device is 1500. The MTU size of the NEMO tunnel will be smaller, to take into account the required headers.
  • Page 419 Local Area Network (LAN): a. Add a local network to use as a virtual NEMO network interface: (config vpn nemo nemo_example)> add network end eth (config vpn nemo nemo_example)> b. (Optional) Repeat for additional interfaces. Digi IX15 Gateway User Guide...

  • Page 420: Show Nemo Status

       Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 421 192.168.2.1/24 Advertized LAN2 192.168.3.1/24 Advertized > 4. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...
  • Page 422 Configure telnet access Configure DNS Simple Network Management Protocol (SNMP) Location information Modbus gateway System time Network Time Protocol Configure a multicast route Enable service discovery (mDNS) Use the iPerf service Configure the ping responder service Digi IX15 Gateway User Guide...

  • Page 423: Allow Remote Access For Web Administration And Ssh

    Allow remote access for web administration and SSH Allow remote access for web administration and SSH By default, only devices connected to the IX15's LAN have access to the device via web administration and SSH. To enable these services for access from remote devices: The IX15 device must have a publicly reachable IP address.
  • Page 424 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 425 Allow remote access for web administration and SSH    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 426 Services Allow remote access for web administration and SSH 6. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...

  • Page 427: Configure The Web Administration Service

    By default, the web administration service is enabled and uses the standard HTTPS port, 443. The default access control for the service uses the Internal firewall zone, which means that only devices connected to the IX15's LAN can access the WebUI. If this configuration is sufficient for your needs, no further configuration is required. See Allow remote access for web administration and SSH information about configuring the web administration service to allow access from remote devices.
  • Page 428 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 429 Configure the service    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Services > Web administration.
  • Page 430 No limit to IPv6 addresses that can access the web administration service. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 431 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 432 No limit to IPv6 addresses that can access the web administratrion service. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config)> add service web_admin acl interface end value (config)>...
  • Page 433 If SSL certificate is blank, the device will use an automatically-generated, self-signed certificate. The SSL certificate and private key must be in PEM format. The private key can use one of the following algorithms: ECDSA ECDH Note Password-protected certificate keys are not supported. Example Digi IX15 Gateway User Guide...
  • Page 434 UzcMeT+71DYvKYm6GpcWx+LoKqFTjbMFBIze5pbBfru+SicId6joCHIuYq8Ehflx 6sy6s4MDbyTUAEN2YhsBaOljej64LNzcsHeISbAWibXWjOSsK+N1MivQq5uwIYw/ 1fsnD8KDS43Wg57+far9fQ2MIHsgnoAGz+w6PIKJR594y/MfqQffDFNCh2lJY49F hOqEtA5B9TyXRKwoa3j/lIC/t5cpIBcCAwEAAaNTMFEwHQYDVR0OBBYEFDVtrWBH E1ZcBg9TRRxMn7chKYjXMB8GA1UdIwQYMBaAFDVtrWBHE1ZcBg9TRRxMn7chKYjX MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBALj/mrgaKDNTspv9 ThyZTBlRQ59wIzwRWRYRxUmkVcR8eBcjwdBTWjSBLnFlD2WFOEEEnVz2Dzcixmj4 /Fw7GQNcYIKj+aIGJzbcKgox10mZB3VKYRmPpnpzHCkvFi4o81+bC8HJQfK9U80e vDV0/vA5OB2j/DrjvlOrapCTkuyA0TVyGvgTASx2ATu9U45KZofm4odThQs/9FRQ +cwSTb5v47KYffeyY+g3dyJw1/KgMJGpBUYNJDIsFQC9RfzPjKE2kz41hx4VksT/ q81WGstDXH++QTu2sj7vWkFJH5xPFt80HjtWKKpIfeOIlBPGeRHvdH2PQibx0OOt Sa+P5O8= -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDgZ9fQF9NSzvaZ WLX0WatGxE8DcEgmBnhCDhie4B7f64oS1QSUtcKGL7tTqtaIWMSGsAWNYiDwQ9hr c8hCV8wWXUEYcIv3UckYuL6+xJIxg69FW/zVU9C+cFM3DHk/u9Q2LymJuhqXFsfi 6CqhU42zBQSM3uaWwX67vkonCHeo6AhyLmKvBIX5cerMurODA28k1ABDdmIbAWjp Y3o+uCzc3LB3iEmwFom11ozkrCvjdTIr0KubsCGMP9X7Jw/Cg0uN1oOe/n2q/X0N jCB7D56ABs/sOjyCiUefeMvzH6kH3wxTQodpSWOPRYTqhLQOQfU8l0SsKGt4/5SA v7eXKSAXAgMBAAECggEBAMDKdi7hSTyrclDsVeZH4044+WkK3fFNPaQCWESmZ+AY i9cCC513SlfeSiHnc8hP+wd70klVNNc2coheQH4+z6enFnXYu2cPbKVAkx9x4eeI Ktx72wurpnr2JYf1v3Vx+S9T9WvN52pGuBPJQla3YdWbSf18wr5iHm9NXIeMTsFc esdjEW07JRnxQEMZ1GPWT+YtH1+FzQ3+W9rFsFFzt0vcp5Lh1RGg0huzL2NQ5EcF 3brzIZjNAavMsdBFzdc2hcbYnbv7o1uGLujbtZ7WurNy7+Tc54gu2Ds25J0/0mgf OxmqFevIqVkqp2wOmeLtI4o77y6uCbhfA6I+GWTZEYECgYEA/uDzlbPMRcWuUig0 CymOKlhEpx9qxid2Ike0G57ykFaEsKxVMKHkv/yvAEHwazIEzlc2kcQrbLWnDQYx oKmXf87Y1T5AXs+ml1PlepXgveKpKrWwORsdDBd+OS34lyNJ0KCqqIzwAaf8lcSW tyShAZzvuH9GW9WlCc8g3ifp9WUCgYEA4WSSfqFkQLA09sI76VLvUqMbb31bNgOk ZuPg7uxuDk3yNY58LGQCoV8tUZuHtBJdrBDCtcJa5sasJZQrWUlZ8y/5zgCZmqQn MzTD062xaqTenL0jKgKQrWig4DpUUhfc4BFJmHyeitosDPG98oCxuh6HfuMOeM1v Digi IX15 Gateway User Guide...
  • Page 435 Legacy port redirection is used to redirect client HTTP requests to the HTTPS service. Legacy port redirection is enabled by default, and normally these settings should not be changed. To disable legacy port redirection: (config)> service web_admin legacy enable false (config)> Digi IX15 Gateway User Guide...
  • Page 436 9. Save the configuration and apply the change: (config)> save Configuration saved. > 10. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 437: Configure Ssh Access

    Services Configure SSH access Configure SSH access The IX15's default configuration has SSH access enabled, and allows SSH access to the device from authorized users within the Internal firewall zone. If this configuration is sufficient for your needs, no further configuration is required. See Allow remote access for web administration and SSH information about configuring the SSH service to allow access from remote devices.
  • Page 438 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 439 Configure the service    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Services > SSH.
  • Page 440 No limit to IPv6 addresses that can access the SSH service. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 441 Configure SSH access    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 442 Repeat this step to list additional firewall zones. 4. (Optional) Set the private key in PEM format. If not set, the device will use an automatically- generated key. (config)> service ssh key key.pem (config)> 5. (Optional) Configure Multicast DNS (mDNS) Digi IX15 Gateway User Guide...
  • Page 443 OpenSSH sshd_config file. For example, to enable the diffie-helman-group-sha-14 key exchange algorithm: (config)> service ssh custom config_file "KexAlgorithms +diffie- hellman-group14-sha1" (config)> 8. Save the configuration and apply the change: (config)> save Configuration saved. > Digi IX15 Gateway User Guide...
  • Page 444 Services Configure SSH access 9. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 445: Use Ssh With Key Authentication

    SSH public key for the user Additional configuration items If you want to access the Digi IX15 Gateway device using SSH over a WAN interface, configure the access control list for the SSH service to allow SSH access for the External firewall zone.
  • Page 446 These instructions assume an existing user named temp_user. 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 447 4. Save the configuration and apply the change: (config)> save Configuration saved. > 5. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 448: Configure Telnet Access

    The telnet service is disabled by default. To enable the service:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 449 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 450 No limit to IPv6 addresses that can access the telnet service. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 451 7. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 452 Services Configure telnet access To limit access to hosts connected through a specified interface on the IX15 device: (config)> add service telnet acl interface end value (config)> Where value is an interface defined on your device. Display a list of available interfaces: Use ...

  • Page 453: Configure Dns

    Type quit to disconnect from the device. Configure DNS The IX15 device includes a caching DNS server which forwards queries to the DNS servers that are associated with the network interfaces, and caches the results. This server is used within the device, and cannot be disabled.
  • Page 454 Services Configure DNS    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Services > DNS.
  • Page 455 Services Configure DNS To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces. b. For Add Interface, click . c. For Interface, select the appropriate interface from the dropdown. d. Click  again to allow access through additional interfaces.
  • Page 456 Services Configure DNS 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI. 2. At the command line, type config to enter configuration mode: >...
  • Page 457 By default, the device's DNS server queries all available DNS servers. Disabling this option may improve performance on networks with transient DNS results, when one or more DNS servers may have positive results. To disable: Digi IX15 Gateway User Guide...
  • Page 458 Add a host: (config)> add service dns host end (config service dns host 0)> b. Set the IP address of the host: (config service dns host 0)> address ip-addr (config service dns host 0)> Digi IX15 Gateway User Guide...

  • Page 459: Show Dns Server

       Command line Show DNS information 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 460: Simple Network Management Protocol (Snmp)

    By default, the IX15 device automatically blocks SNMP packets from being received over WAN and LAN interfaces. As a result, if you want a IX15 device to receive SNMP packets, you must configure the SNMP access control list to allow the device to receive the packets. See...
  • Page 461 No limit to IPv6 addresses that can access the SNMP agent. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 462 14. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 463 No limit to IPv6 addresses that can access the SNMP service. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config)> add service snmp acl interface end value (config)>...
  • Page 464 (config)> service snmp privacy pwd (config)> 11. (Optional) Set the privacy protocol, either DES or AES. The default is DES. (config)> service snmp privacy_protocol AES (config)> 12. (Optional) Enable read-only access to to SNMP version 2c. Digi IX15 Gateway User Guide...

  • Page 465: Download Mibs

    To download a .zip archive of the SNMP MIBs supported by this device:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. Enable SNMP. Configure Simple Network Management Protocol (SNMP) for information about enabling and configuring SNMP support on the IX15 device.

  • Page 466: Location Information

    Location messages forwarded to the device from other location-enabled devices. You can also configure your IX15 device to forward location messages, either from the IX15 device or from external sources, to a remote host. Additionally, the device can be configured to use a geofence, to allow you to determine actions that will be taken based on the physical location of the device.

  • Page 467: Configure The Location Service

    The location service is enabled by default. You can disable it, or you can enable it if it has been disabled.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Services > Location.
  • Page 468 (config)> To disable the module: (config)> service location gnss false (config)> 4. Set the amount of time that the IX15 device will wait before polling location sources for updated location data: (config)> service location interval value (config)> where value is any number of hours, minutes, or seconds, and takes the format number {h|m|s}.

  • Page 469: Configure The Device To Use A User-Defined Static Location

    You can configured your IX15 device to use a user-defined static location.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 470 10. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 471: Configure The Device To Accept Location Messages From External Sources

    You can configure the IX15 device to accept NMEA and TAIP messages from external sources. For example, location-enabled devices connected to the IX15 device can forward their location information to the device, and then the IX15 device can serve as a central repository for this location information and forward it to a remote host. See Forward location information to a remote host information about configuring the IX15 device to forward location messages.
  • Page 472 No limit to IPv6 addresses that can access the location server UDP port. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 473 9. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 474 No limit to IPv6 addresses that can access the location server UDP port. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config)> add service location source 1 acl interface end value (config)>...

  • Page 475: Forward Location Information To A Remote Host

    Type quit to disconnect from the device. Forward location information to a remote host You can configure location clients on the IX15 device that forward location messages in either NMEA or TAIP format to a remote host. Required configuration items Enable the location service.
  • Page 476 Configure the Digi IX15 Gateway device to forward location information:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 477 ID. The default setting is Default, which means that the talker ID provided by the source will be used. 13. (Optional) For Prepend text, enter text to prepend to the forwarded message. Two variables can be included in the prepended text: Digi IX15 Gateway User Guide...
  • Page 478 15. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 479 9. (Optional) Set the text to prepend to the forwarded message. Two variables can be included in the prepended text: %s: Includes the Digi IX15 Gateway device's serial number in the prepended text. %v: Includes the vehicle ID in the prepended text.
  • Page 480 Use the add command to add the message type. For example, to add the gsa message type: (config service location forward 0 filter_nmea)> add gsa end (config service location forward 0 filter_nmea)> If the message protocol type is TAIP: Digi IX15 Gateway User Guide...
  • Page 481 13. Save the configuration and apply the change: (config)> save Configuration saved. > 14. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 482: Configure Geofencing

    Location information Configure geofencing Geofencing is a mechanism to create a virtual perimeter that allows you configure your IX15 device to perform actions when entering or exiting the perimeter. For example, you can configure a device to factory default if its location service indicates that it has been moved outside of the geofence.
  • Page 483 Services Location information 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Services > Location > Geofence.
  • Page 484 Click  again to add an additional point, and continue adding points to create the desired polygon. For example, to configure a square polygon around the Digi headquarters, configure a polygon with four points: This defines a square-shaped polygon equivalent to the following:...
  • Page 485 1MB or 1M. vi. Sandbox is enabled by default. This prevents the script from adversely affecting the system. If you disable Sandbox, the script may render the system unusable. vii. Repeat for any additional actions. Digi IX15 Gateway User Guide...
  • Page 486 Sandbox is enabled by default. This prevents the script from adversely affecting the system. If you disable Sandbox, the script may render the system unusable. vii. Repeat for any additional actions. 8. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 487 Location information    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 488 (config service location geofence test_geofence coordinates 0)> where int is: For latitude, any integer between -90 and 90, with up to six decimal places. For longitude, any integer between -180 and 180, with up to six decimal places. Digi IX15 Gateway User Guide...
  • Page 489 For longitude, any integer between -180 and 180, with up to six decimal places. Repeat for each vortex of the polygon. For example, to configure a square polygon around the Digi headquarters, configure a polygon with four points: (config service location geofence test_geofence)> add...
  • Page 490 3, the actions will not be performed until the device has been inside the geofence for three minutes. c. Add an action: i. Type ... to return to the root of the configuration: (config service location geofence test_geofence coordinates 3)> ... (config)> Digi IX15 Gateway User Guide...
  • Page 491 (Optional) Set the maximum amount of system memory that will be available for the script and it spawned processes: (config service location geofence test_geofence on_entry action 0)> max_memory value (config service location geofence test_geofence on_entry action 0)> Digi IX15 Gateway User Guide...
  • Page 492 Add an action: i. Type ... to return to the root of the configuration: (config service location geofence test_geofence coordinates 3)> ... (config)> ii. Add the action: (config)> add service location geofence test_geofence on_exit action end Digi IX15 Gateway User Guide...
  • Page 493 (config service location geofence test_geofence on_exit action 0)> where value is any integer followed by one of the following: b|bytes|KB|k|MB|M|GB|G|TB|T. For example. the allocate one megabyte of memory to the script and its spawned processes: Digi IX15 Gateway User Guide...

  • Page 494: Show Location Information

       Command line Show location information 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 495: Modbus Gateway

    Type quit to disconnect from the device. Modbus gateway The IX15 supports the ability to function as a Modbus gateway, to provide serial-to-Ethernet connectivity to Programmable Logic Controllers (PLCs), Remote Terminal Units (RTUs), and other industrial devices. MODBUS provides client/server communication between devices connected on different types of buses and networks, and the IX15 gateway allows for communication between buses and and networks that use the Modbus protocol.

  • Page 496: Configure The Modbus Gateway

    Whether to send broadcast messages. Response timeout If connection type is set to socket: The port to use. The inactivity timeout. If connection type is set to serial: Whether to use half duplex (two wire) mode. Digi IX15 Gateway User Guide...
  • Page 497 Whether packets should have their Modbus address adjusted downward before to delivery.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 498 For Port, enter or select an appropriate port. The default is port 502. If Serial is selected for Connection type: a. For Serial port, select the appropriate serial port on the IX15 device. 5. For Packet mode, select RTU or RAW (if Connection type is set to Socket) or ASCII (if Connection typeis set to Serial) for the type of packet that will be used by this connection.
  • Page 499 No limit to IPv6 addresses that can access the web administration service. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 500 Modbus server is running. If Serial is selected for Connection type: a. For Serial port, select the appropriate serial port on the IX15 device. 5. For Packet mode, select RTU or RAW (if Connection type is set to Socket) or ASCII (if Connection typeis set to Serial) for the type of packet that will be used by this connection.
  • Page 501 No limit to IPv6 addresses that can access the web administration service. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 502 17. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 503 (config service modbus_gateway server test_modbus_server)> inactivity_timeout value (config service modbus_gateway server test_modbus_server)> where value is any number of minutes or seconds up to a maximum of 15 minutes, and takes the format number{m|s}. Digi IX15 Gateway User Guide...
  • Page 504 (config service modbus_gateway server test_modbus_server)> where value is any number between 10 milliseconds and one second, and take the format number{ms|s}. For example, to set idle_gap to one second, enter 1000ms or 1s. Digi IX15 Gateway User Guide...
  • Page 505 Set the port: (config service modbus_gateway client test_modbus_client)> socket port (config service modbus_gateway client test_modbus_client)> where port is an integer between 1 and 65535. The default is 502. Digi IX15 Gateway User Guide...
  • Page 506 (config service modbus_gateway client test_modbus_client)> If connection_type is set to serial: i. Set the serial port: i. Use the ? to determine available serial ports: (config service modbus_gateway client test_modbus_ client)> ... serial port ? Serial Additional Configuration ------------------------------------------------------- Digi IX15 Gateway User Guide...
  • Page 507 Set the maximum time to wait for a response to a message: (config service modbus_gateway client test_modbus_client)> response_ timeout value (config service modbus_gateway client test_modbus_client)> Allowed values are between 1 millisecond and 700 milliseconds, and take the format numberms. Digi IX15 Gateway User Guide...
  • Page 508 Modbuss address in the message. h. To adjust the Modbus server address downward by the specified value prior to delivering the message, use adjust_server_address: (config service modbus_gateway client test_modbus_client)> adjust_ server_address value (config service modbus_gateway client test_modbus_client)> Digi IX15 Gateway User Guide...

  • Page 509: Show Modbus Gateway Status And Statistics

       WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, select Status > Modbus Gateway. The Modbus Gateway page appears. Statistics related to the Modbus gateway server are displayed. If the message Server connections not available is displayed, this indicates that there are no connected clients.
  • Page 510 Modbus gateway    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI. 2. Use the...
  • Page 511 RX Timeouts TX Broadcasts TX Requests > 4. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 512: System Time

    Configure the system time for details about changing the default configuration. The IX15 device can also be configured to serve as an NTP server, providing NTP services to downstream devices. See Network Time Protocol for more information about NTP server support.
  • Page 513 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 514 2. At the command line, type config to enter configuration mode: > config (config)> 3. (Optional) Set the timezone for the location of your IX15 device. The default is UTC. (config)> system time timezone value (config)> Where value is the timezone using the format specified with the following command: (config)>...
  • Page 515    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 516: Manually Set The System Date And Time

    Network Time Protocol (NTP) enables devices connected on local and worldwide networks to synchronize their internal software and hardware clocks to the same time source. The IX15 device can be configured as an NTP server, allowing downstream hosts that are attached to the device's Local Area Networks to synchronize with the device.

  • Page 517: Configure The Device As An Ntp Server

    3. Click Services > NTP. 4. Enable the IX15 device's NTP service by clicking Enable. 5. (Optional) Configure the access control list to limit downstream access to the IX15 device's NTP service. To limit access to specified IPv4 addresses and networks: a.
  • Page 518 No limit to IPv6 addresses that can access the NTP service. d. Click  again to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: a. Click Interfaces.
  • Page 519 9. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 520 5. Allow the device's local system clock to be used as backup time source: (config)> service ntp local true (config)> 6. (Optional) Configure the access control list to limit downstream access to the IX15 device's NTP service. To limit access to specified IPv4 addresses and networks: (config)>...
  • Page 521 By default, the access control list for the NTP service is empty, which means that all downstream hosts connected to the IX15 device can use the NTP service. 7. (Optional) Set the timezone for the location of your IX15 device. The default is UTC. (config)> system time timezone value (config)>...

  • Page 522: Show Status And Statistics Of The Ntp Server

       Command line Show NTP information 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 523: Configure A Multicast Route

    To configure a multicast route:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Services > Multicast.
  • Page 524 6. Type the Source address for the route. This must be a multicast IP address between 224.0.0.1 and 239.255.255.255. 7. Select a Source interface where multicast packets will arrive. 8. To add one or more destination interface that the IX15 device will send mutlicast packets to: a. Click to expand Destination interfaces. b. Click .
  • Page 525 Set the interface. For example: (config service multicast test)> src_interface /network/interface/eth1 (config service multicast test)> 7. Set a destination interface that the IX15 device will send mutlicast packets to: a. Use the ? to determine available interfaces: b. Set the interface. For example: (config service multicast test)>...

  • Page 526: Enable Service Discovery (Mdns)

    You can enable the IX15 device to use mDNS.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 527 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 528 No limit to IPv6 addresses that can access the mDNS service. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config)> add service mdns acl interface end value (config)>...

  • Page 529: Use The Iperf Service

    Type quit to disconnect from the device. Use the iPerf service Your IX15 device includes an iPerf3 server that you can use to test the performance of your network. iPerf3 is a command-line tool that measures the maximum network throughput an interface can handle.
  • Page 530 Use the iPerf service Additional configuration Items The port that the IX15 device's iPerf server will use to listen for incoming connections. The access control list for the iPerf server. When the iPerf server is enabled, the IX15 device will automatically configure its firewall rules to allow incoming connections on the configured listening port.
  • Page 531 To enable the iPerf3 server:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Services > iPerf.
  • Page 532 7. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 533 No limit to IPv6 addresses that can access the service-type. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config)> add service iperf acl interface end value (config)>...

  • Page 534: Example Performance Test Using Iperf3

    Example performance test using iPerf3 On a remote host with iPerf3 installed, enter the following command: $ iperf3 -c device_ip where device_ip is the IP address of the IX15 device. For example: $ iperf3 -c 192.168.2.1 Connecting to host 192.168.2.1, port 5201 4] local 192.168.3.100 port 54934 connected to 192.168.1.1 port 5201...

  • Page 535: Configure The Ping Responder Service

    Done. Configure the ping responder service Your IX15 device's ping responder service replies to ICMP and ICMPv6 echo requests. The service is enabled by default. You can disable the service, or you can configure the service to use an access control list to limit the service to specified IP address, interfaces, and/or zones.
  • Page 536 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 537 No limit to IPv6 addresses that can access the service-type. Repeat this step to list additional IP addresses or networks. To limit access to hosts connected through a specified interface on the IX15 device: (config)> add service iperf acl interface end value (config)>...

  • Page 538: Example Performance Test Using Iperf3

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Example performance test using iPerf3 On a remote host with Iperf3 installed, enter the following command: $ iperf3 -c device_ip Digi IX15 Gateway User Guide...
  • Page 539 Services Configure the ping responder service where device_ip is the IP address of the IX15 device. For example: $ iperf3 -c 192.168.2.1 Connecting to host 192.168.2.1, port 5201 4] local 192.168.3.100 port 54934 connected to 192.168.1.1 port 5201 [ ID] Interval...
  • Page 540 Applications The IX15 supports Python 3.6 and provides you with the ability to run Python applications on the device interactively or from a file. You can also specify Python applications and other scripts to be run each time the device system restarts, at specific intervals, or at a specified time.

  • Page 541: Develop Python Applications

    IX15. See Create and test a Python application. In addition to the standard Python library, the IX15 includes a set of extensions to access its configuration and interfaces. See Python modules.

  • Page 542: Create And Test A Python Application

    IX15. Develop an application in PyCharm The Digi IoT PyCharm Plugin allows you to write, build and run Python applications for Digi devices in a quick and easy way. See the Digi XBee PyCharm IDE Plugin User Guide for details.

  • Page 543: End-To-End Demos

    End-to-end demos The Digi XBee PyCharm Plugin includes a set of sample applications ready to build and execute in your IX15. You can use these sample applications as a reference to create your own Python application or start developing one from scratch:...
  • Page 544 Network Update from Digi Remote Manager An application to update the XBee profile of one or several nodes of your network using Digi Remote Manager. It registers a callback to process device requests coming from Digi Remote Manager to trigger the profile update tasks.
  • Page 545 3. Open the app and scan for devices. Your IX15 device will appear in the list. TIP: You can use filter by name if your list is big and you have problems identifying your IX15. 4. Click the IX15 device and enter the device Bluetooth Low Energy password.
  • Page 546 Applications Develop Python applications 5. After passing the password validation, you can see your device information and change some basic configuration settings. Digi IX15 Gateway User Guide...

  • Page 547: Python Modules

    Develop Python applications Python modules The IX15 supports Python 3.6 and provides you with the ability to run Python applications on the device interactively or from a file. It also offers extensions to manage your IX15: The digidevice module provides platform-specific extensions that allow you to interact with the device’s configuration and interfaces.
  • Page 548 Modbus protocol implementation. Eclipse Paho MQTT Python client enables applications to connect to an MQTT broker to publish messages, and to subscribe to topics and receive published messages. Note Module-related documentation is in the Digidevice module section. Digi IX15 Gateway User Guide...
  • Page 549 Digidevice module The Python digidevice module provides platform-specific extensions that allow you to interact with the device’s configuration and interfaces. The following submodules are included with the digidevice module: This section contains the following topics: Digi IX15 Gateway User Guide...
  • Page 550 = xbee.get_device() Once the local XBee of the IX15 is retrieved, you can work with it using the XBee Python Library API that is integrated into the gateway firmware: Retrieve and discover the XBee nodes in your network.
  • Page 551 To stop listening to new data messages from the Bluetooth interface, use the del_bluetooth_data_ received_callback method to unsubscribe the already-registered listener. Deregister Bluetooth data reception [...] device = [...] Digi IX15 Gateway User Guide...
  • Page 552 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.
  • Page 553 : 1.4% Uptime : 6 days, 6 hours, 21 minutes, 57 seconds (541317s) Temperature : 40C >>> 5. Use Ctrl-D to exit the Python session. You can also exit the session using exit() or quit(). Digi IX15 Gateway User Guide...
  • Page 554 Help for using Python to execute IX15 CLI commands Get help executing a CLI command from Python by accessing help for cli.execute: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 555 For example, to use an interactive Python session to upload datapoints related to velocity, temperature, and the state of the emergency door: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 556 Help for using Python to upload custom datapoints to Remote Manager Get help for uploading datapoints to your Digi Remote Manager account by accessing help for datapoint.upload and datapoint.upload_multiple: 1. Log into the IX15 command line as a user with shell access.
  • Page 557 Use the config Python module to access and modify the device configuration. Read the device configuration 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 558 Modify the device configuration Use the set() and commit() methods to modify the device configuration: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 559 Remote Manager's Server Command Interface (SCI), a web service that allows users to access information and perform commands that relate to their devices. Use Remote Manager's SCI interface to create SCI requests that are sent to your IX15 device, and use the device_request module to send responses to those requests to Remote Manager.
  • Page 560 Digi Remote Manager Programmers Guide for more information on SCI. Task one: Use the device_request module on your IX15 device to create a response 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 561 1. Create a Python application, called showsystem.py, that uses the digidevice.cli module to create a response containing information about device and the device_request module to respond with this information to a request from Remote Manager: Digi IX15 Gateway User Guide...
  • Page 562 This can be done from either the WebUI or the command line:    WebUI i. Log into the IX15 WebUI as a user with full Admin access rights. ii. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 563 For Label, type Show system application. vi. For Run mode, select On boot. vii. For Exit action, select Restart script. viii. For Commands, type python /etc/config/scripts/showsystem.py. ix. Click Apply to save the configuration and apply the change.    Command line Digi IX15 Gateway User Guide...
  • Page 564 Applications Develop Python applications i. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 565 > reboot To run the application from the shell prompt: i. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.
  • Page 566 Firmware Build Date : Thurs, 03 March 2022 10:16:23 Schema Version : 461 Timezone : UTC Current Time : Thurs, 03 March 2022 10:16:23 : 1.1 Uptime : 4 day, 13 hours, 43 minutes, 22 seconds (395002s) Digi IX15 Gateway User Guide...
  • Page 567 </sci_request> Help for using Python to respond to Digi Remote Manager SCI requests Get help for respond to Digi Remote Manager Server Command Interface (SCI) requests by accessing help for digidevice.device_request: 1. Log into the IX15 command line as a user with shell access.
  • Page 568 Read from the runtime database Use the keys() and get() methods to read the device configuration: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu.
  • Page 569 Modify the runtime database Use the set() method to modify the runtime database: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.
  • Page 570 Use Python to upload the device name to Digi Remote Manager The name submodule can be used to upload a custom name for your device to Digi Remote Manager. When you use the name submodule to upload a custom device name to Remote Manager, the...
  • Page 571 5. Click Send. Upload a custom name 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.
  • Page 572 Develop Python applications Help for uploading the device name to Digi Remote Manager Get help for uploading the device name to Digi Remote Managerby accessing help for digidevice.name: 1. Log into the IX15 command line as a user with shell access.
  • Page 573 Help for the digidevice maintenance module Get help for the digidevice maintenance module: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.
  • Page 574 You can create Python scripts that send and receive SMS message in tandem with the Digi Remote Manager or Digi aView by using the digidevice.sms module. To use a script to send or receive SMS messages, you must also enable the ability to schedule SMS scripting.
  • Page 575 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 576 COND.release() my_callback.unregister_callback() Use Python to access serial ports You can use the Python serial module to access serial ports on your IX15 device that are configured to be in Application mode. See Configure Application mode for information about configuring a serial port in Application mode.
  • Page 577 6. Use Ctrl-D to exit the Python session. You can also exit the session using exit() or quit(). Use the Paho MQTT python library Your IX15 device includes support for the Paho MQTT python library. MQTT is a lightweight messaging protocol used to communicate with various applications including cloud-based applications such as Amazon Web Services and Microsoft Azure.
  • Page 578 "fw-update": cmd_fwupdate def send_cmd_reply(client, cmd_path, cid, cmd, status): if not status or not cid: return if cmd_path.startswith(PREFIX_CMD): path = cmd_path[len(PREFIX_CMD):] else: print("Invalid command path ({}), cannot send reply".format(cmd_path)) return reply = { "cmd": cmd, "status": status Digi IX15 Gateway User Guide...
  • Page 579 = HTTPStatus.NOT_IMPLEMENTED send_cmd_reply(client, msg.topic, cid, cmd, status) def publish_dhcp_leases(): leases = [] try: with open('/etc/config/dhcp.leases', 'r') as f: for line in f: elems = line.split() if len(elems) != 5: continue leases.append({"mac": elems[1], "ip": elems[2], "host": elems Digi IX15 Gateway User Guide...

  • Page 580: Set Up The Ix15 To Automatically Run Your Applications

    Applications Set up the IX15 to automatically run your applications [3]}) if leases: client.publish(PREFIX_EVENT + "/leases", json.dumps(leases, separators=(',',':'))) except: print("Failed to open DHCP leases file") def publish_system(): avg1, avg5, avg15 = runt.get("system.load_avg").split(', ') ram_used = runt.get("system.ram.per") disk_opt = runt.get("system.disk./opt.per") disk_config = runt.get("system.disk./etc/config.per") msg = json.dumps({...

  • Page 581: Configure Scripts To Run Automatically

    Applications Set up the IX15 to automatically run your applications Configure scripts to run automatically Show script information Stop a script that is currently running Configure scripts to run automatically You can configure a script or a python application to run automatically when the system restarts, at specific intervals, or at a specified time.
  • Page 582 IX15 device. local-path is the location on the IX15 device where the copied file will be placed. For example: To upload a script from a remote host with an IP address of 192.168.4.1 to the...
  • Page 583 Use with care.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click System > Scheduled tasks > Custom scripts.
  • Page 584 Applications Set up the IX15 to automatically run your applications 4. For Add Script, click . The script configuration window is displayed. Custom scripts are enabled by default. To disable, click Enable to toggle off. 5. (Optional) For Label, provide a label for the script.
  • Page 585 12. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 586 Applications Set up the IX15 to automatically run your applications 5. Set the mode that will be used to run the script: (config system schedule script 0)> when mode (config system schedule script 0)> where mode is one of the following: boot: The script will run once each time the device boots.
  • Page 587 Applications Set up the IX15 to automatically run your applications where filename is the path and filename of the script, and any related command line information. If the script begins with #!, then the script will be invoked in the location specified by the path for the script command.

  • Page 588: Show Script Information

    The Scripts page displays:    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 589: Start An Interactive Python Session

    3. For scripts that are currently running, click Stop Script to stop the script.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 590: Run A Python Application At The Shell Prompt

    Applications Run a Python application at the shell prompt 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.
  • Page 591 IX15 device. local-path is the location on the IX15 device where the copied file will be placed. For example: To upload a script from a remote host with an IP address of 192.168.4.1 to the...

  • Page 592: Install Third Party Python Modules

    The first main difference while working with the IX15 Gateway is the Python application development IDE. In previous generations, Digi ESP for Python was the IDE used to create and work with Python projects for Digi XBee gateways. The new generation of XBee gateways starting with the IX15 use...

  • Page 593: Python Version

    Python applications using any software and then transfer them to the IX15 Gateway. Python version Another big difference of the IX15 compared to previous XBee gateways is the Python version used to program applications. Previous Digi XBee gateways use Python 2.6, while the new generation of gateways use Python 3.6.
  • Page 594 = digiwdog.Watchdog(10, "ForceReset") while True:  wd.stroke() time.sleep(1) In the new XBee gateways, there is no access to the system watchdog. Temperature sensor In previous generations, the digihw Python module was used to read the device temperature.: Digi IX15 Gateway User Guide...
  • Page 595 1. Invoke the digicli(command) function with the CLI command to execute. Previous API import digicli status, output = digicli.digicli('show net') if status: for line in output: if line.find('MAC Address') >= 0: l = line.split(':') print "".join(l[1:]).strip() Digi IX15 Gateway User Guide...
  • Page 596 Digi Remote Manager Interaction with Digi Remote Manager is key for the XBee gateways. For this reason, a set of APIs are still available to perform the most common Digi Remote Manager operations, although they are implemented in a different way:...
  • Page 597 Python migration guide 129)) datapoint.upload("Emergency_Door", "closed", timestamp=time.time()) Subscribe device request In previous generations, the idigidata Python module was used to register callbacks from Digi Remote Manager: 1. Use the register_callback(target, handler) function passing the target name and callback handler as arguments.
  • Page 598 Power management When the IX15 is powered by batteries, the power consumption is a very important factor to consider. For this reason, Digi created a set of power management APIs to control the device power functions. In previous generations, the digipowercontrol Python module was used to control the power management features of the gateway.
  • Page 599 # Go to sleep, reset when a trigger occurs, this routine does not return digipowercontrol.system_power_set(0) The IX15 does not include a specific API for power management control. You can access the different power management options using the digidevice.config Python module:...
  • Page 600 The sleep or suspend mode is a special state where the CPU, most of the RAM and most of the digital peripherals are powered off to save as much power as possible. The IX15 Gateway can be commanded to go to suspend mode at any time.
  • Page 601 %s" % sms['from']) print("====================") print(sms['message']) print("====================") # Register the SMS callback my_callback = sms.Callback(sms_callback) # Leave the program executing input() my_callback.unregister_callback() Send a SMS In previous generations, the digisms Python module was used to send SMS messages: Digi IX15 Gateway User Guide...
  • Page 602 In previous generations, the zigbee Python module was used as the entry point to every XBee related operation in the gateway. In the new XBee gateways, all the XBee operations are based in the open source Digi Python Library that is already installed in the gateway. This library is protocol-agnostic and provides access to every XBee related operation using a object oriented philosophy.
  • Page 603 = device.get_network() node_list = xbee_network.get_devices() finally: if device.is_open(): device.close() Discover nodes To perform an XBee network discover: 1. Use the XBee network instance to register a network discovery callback. 2. Invoke the start_discovery() method. New API Digi IX15 Gateway User Guide...
  • Page 604 In the new XBee gateways, the digidevice.xbee Python module is used to list and discover the available XBee nodes of the network. When you have the XBee node list, iterate the nodes and print their information: Digi IX15 Gateway User Guide...
  • Page 605 1. When you have the XBee instance, invoke the get_parameter(parameter) method specifying the setting ID to read. 2. You can execute this action in local and remote XBee devices. Note that value is returned as a byte array. Local device New API from digidevice import xbee Digi IX15 Gateway User Guide...
  • Page 606 1. When you have the XBee instance, invoke the set_parameter(parameter, value) method specifying the setting ID to write and the value. 2. You can execute this action in local and remote XBee devices. Note that value must be provided as a byte array. Digi IX15 Gateway User Guide...
  • Page 607 XBee node of the network: 1. When you have the XBee instance, invoke the execute_command(command) method with the command ID to execute. 2. You can execute this action in local and remote XBee devices. Local device New API Digi IX15 Gateway User Guide...
  • Page 608 = socket(AF_XBEE, SOCK_DGRAM, XBS_PROT_TRANSPORT) # Bind to endpoint 0xe8 (232) for ZB/DigiMesh, but 0x00 for 802.15.4 s.bind(("", end_point, profile_id, cluster_id)) # Block until a single frame is received, up to 255 bytes: payload, src_addr = sd.recvfrom(255) Digi IX15 Gateway User Guide...
  • Page 609 Using the digidevice.xbee Python module, you can read data by polling—blocking the execution until a message is received—or asynchronously using the local XBee device instance. For asynchronous reads, you can specifically read explicit data too. Asynchronous data read Once you have the local XBee device instance: Digi IX15 Gateway User Guide...
  • Page 610 = xbee.get_device() try: device.open() # Configure device te receive data as explicit data. device.set_api_output_mode_value(APIOutputModeBit.calculate_api_ output_mode_value(device.get_protocol(), {APIOutputModeBit.EXPLICIT})) def explicit_data_callback(expl_xb_msg): print("From %s >> %s" % (expl_xb_msg.remote_device, expl_xb_ msg.data.decode())) print(" - Source endpoint: %s" % utils.hex_to_string(expl_ xb_msg.source_endpoint.to_bytes(1, byteorder='big'))) Digi IX15 Gateway User Guide...
  • Page 611 2. Bind it to the desired end point, cluster ID, and profile ID. 3. Only explicit data can be sent as you have to specify end point, cluster ID, and profile ID when building the destination address. Previous API import xbee from socket import * Digi IX15 Gateway User Guide...
  • Page 612 = device.get_network() remote_device = xbee_network.get_device_by_node_id(REMOTE_NODE_ID) if remote_device: print("Sending data to %s % remote_device) device.send_data(remote_device, DATA_TO_SEND) print("Success") else: print("Remote device not found") finally: if device.is_open(): device.close() Send data asynchronously Once you have the local XBee device instance: Digi IX15 Gateway User Guide...
  • Page 613 SRC_ENDPOINT = 0xA0 DEST_ENDPOINT = 0xA1 CLUSTER_ID = 0x1554 PROFILE_ID = 0x1234 device = xbee.get_device() try: device.open() # Obtain the remote XBee device from the XBee network. xbee_network = device.get_network() remote_device = xbee_network.get_device_by_node_id(REMOTE_NODE_ID) if remote_device: Digi IX15 Gateway User Guide...
  • Page 614 In previous generations, the socket Python module was used to send broadcast data to all the XBee nodes of the network: 1. Create a socket with the required XBee options. 2. Bind it to the desired end point, cluster ID, and profile ID. Digi IX15 Gateway User Guide...
  • Page 615 Explicit data broadcast Once you have the local XBee instance: 1. Invoke the send_expl_data_broadcast(data, source_end_point, dest_end_point, cluster_ id, profile_id) method specifying the data to broadcast, the end points, the cluster ID, and the profile ID. New API Digi IX15 Gateway User Guide...
  • Page 616 64-bit address of the joining device, the registration options, and the key. New API from digi.xbee.models.address import XBee64BitAddress from digi.xbee.models.options import RegisterKeyOptions from digidevice import xbee device = xbee.get_device() try: device.open()  device.register_joining_device(XBee64BitAddress("000d6f0000068929"), RegisterKeyOptions.LINK_KEY, "1234".decode()) finally: if device.is_open(): device.close() Digi IX15 Gateway User Guide...

  • Page 617: Deployment

    The IX15 Gateway uses Pycharm as the application development IDE with a set of Digi created plugins to ease the development process. These plugins automatically build and transfer the application code and resources to the gateway as in the past.
  • Page 618 4. Click Apply. 5. Reboot the device. The IX15 Gateway also uses the web interface to configure the application automatic start. The main difference is that there are new configuration options including the full start command. You can read Configure scripts to run automatically.

  • Page 619: User Authentication

    User authentication methods Authentication groups Local users Terminal Access Controller Access-Control System Plus (TACACS+) Remote Authentication Dial-In User Service (RADIUS) LDAP Configure serial authentication Disable shell access Set the idle timeout for IX15 users Example user configuration Digi IX15 Gateway User Guide...

  • Page 620: Ix15 User Authentication

    User authentication IX15 user authentication IX15 user authentication User authentication on the IX15 has the following features and default configuration: Default Feature Description configuration Idle timeout 10 minutes. Determines how long a user session can be idle before the system automatically disconnects.
  • Page 621 TACACS+: Users authenticated by using a remote TACACS+ server for authentication. Terminal Access Controller Access-Control System Plus (TACACS+) for information about configuring TACACS+ authentication. LDAP: Users authenticated by using a remote LDAP server for authentication. LDAP for information about configuring LDAP authentication. Digi IX15 Gateway User Guide...

  • Page 622: Add A New Authentication Method

    To add an authentication method:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Authentication > Methods.
  • Page 623 This procedure describes how to add methods to various places in the list. 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu.

  • Page 624: Delete An Authentication Method

    Delete an authentication method    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 625 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 626: Rearrange The Position Of Authentication Methods

    To reorder these so that RADIUS is first and Local users is second: 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 627 7. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 628: Authentication Groups

    Disable shell access for more information about the Allow shell parameter. Serial access: Users with Serial access have the ability to log into the IX15 device by using the serial console. Preconfigured authentication groups The IX15 device has two preconfigured authentication groups: The admin group is configured by default to have full Admin access.

  • Page 629: Change The Access Rights For A Predefined Group

    For groups assigned Admin access, you can also determine whether the Access level should be Full access or Read-only access. Full access provides users of this group with the ability to manage the IX15 device by using the WebUI or the Admin CLI.
  • Page 630 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 631: Add An Authentication Group

    Access rights to OpenVPN tunnels, and the tunnels to which they have access. Access rights to captive portals, and the portals to which they have access. Access rights to query the device for Nagios monitoring. To add an authentication group:    WebUI Digi IX15 Gateway User Guide...
  • Page 632 User authentication Authentication groups 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Authentication > Groups. 4. For Add, type a name for the group and click .
  • Page 633 User authentication Authentication groups Full access full: provides users of this group with the ability to manage the IX15 device by using the WebUI or the Admin CLI. Read-only access read-only: provides users of this group with read-only access to the WebUI and Admin CLI.
  • Page 634 (config)> where value is either: full: provides users of this group with the ability to manage the IX15 device by using the WebUI or the Admin CLI. read-only: provides users of this group with read-only access to the WebUI and Admin CLI.

  • Page 635: Delete An Authentication Group

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Delete an authentication group By default, the IX15 device has two preconfigured authentication groups: admin and serial. These groups cannot be deleted. To delete an authentication group that you have created: ...
  • Page 636 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 637: Local Users

    TACACS+ or RADIUS. Local user authentication is enabled by default, with one preconfiged default user. Default user At manufacturing time, each IX15 device comes with a default user configured as follows: Username: admin. Password: The default password is displayed on the label on the bottom of the device.

  • Page 638: Change A Local User's Password

    To change a user's password:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Authentication > Users.
  • Page 639 You can also change the password for the active user by clicking the user name in the menu bar: The active user must have full Admin access rights to be able to change the password. 6. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...

  • Page 640: Configure A Local User

    Local users    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 641 To configure a local user:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Authentication > Users.
  • Page 642 The minimum value is 1 second, and the maximum is 15 minutes. The default is 15 minutes. 8. Add groups for the user. Groups define user access rights. See Authentication groups for information about configuring groups. Digi IX15 Gateway User Guide...
  • Page 643 Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Code refresh interval to ten minutes, enter 10m or 600s. Digi IX15 Gateway User Guide...
  • Page 644 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 645 (config auth user new_user)> Note Every user must be configured with at least one group. b. (Optional) Add additional groups by repeating the add group command: (config auth user new_user> add group end serial (config auth user new_user)> Digi IX15 Gateway User Guide...
  • Page 646 HMAC-based One-Time Password (HOTP) uses a counter to validate a one- time password. The default value is totp. (config auth user new_user 2fa)> type totp (config auth user new_user 2fa)> Digi IX15 Gateway User Guide...
  • Page 647 (config auth user new_user 2fa)> where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. For example, to set login_limit_period to ten minutes, enter either 10m or 600s: Digi IX15 Gateway User Guide...

  • Page 648: Delete A Local User

    To delete a user from your IX15:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 649 3. Click Authentication > Users. 4. Click the menu icon (...) next to the name of the user to be deleted and select Delete. 5. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 650 Local users    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 651: Terminal Access Controller Access-Control System Plus (Tacacs+)

    With TACACS+ support, the IX15 device acts as a TACACS+ client, which sends user credentials and connection parameters to a TACACS+ server over TCP. The TACACS+ server then authenticates the TACACS+ client requests and sends back a response message to the device.

  • Page 652: Tacacs+ User Configuration

    The groupname attribute is optional. If used, the value must correspond to authentication groups configured on your IX15. Alternatively, if the user is also configured as a local user on the IX15 device and the LDAP server authenticates the user but does not return any groups, the local configuration determines the list of groups.

  • Page 653: Tacacs+ Server Failover And Fallback To Local Authentication

    $ sudo /etc/init.d/tacacs_plus restart TACACS+ server failover and fallback to local authentication In addition to the primary TACACS+ server, you can also configure your IX15 device to use backup TACACS+ servers. Backup TACACS+ servers are used for authentication requests when the primary TACACS+ server is unavailable.
  • Page 654 Add additional TACACS+ servers in case the first TACACS+ server is unavailable.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 655 6. (Optional) For Group attribute, type the name of the attribute used in the TACACS+ server's configuration to identify the IX15 authentication group or groups that the user is a member of. For example, in TACACS+ user configuration, the group attribute in the sample tac_plus.conf...
  • Page 656 (config)> auth tacacs+ authoritative true (config)> 4. (Optional) Configure the group_attribute. This is the name of the attribute used in the TACACS+ server's configuration to identify the IX15 authentication group or groups that the user is a member of. For example, in TACACS+ user configuration, the group attribute in the sample tac_plus.conf file is groupname, which is also the default setting for the group_attribute in the...
  • Page 657 10. Save the configuration and apply the change: (config)> save Configuration saved. > 11. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 658: Remote Authentication Dial-In User Service (Radius)

    To use RADIUS authentication, you must set up a RADIUS server that is accessible by the IX15 device prior to configuration. The process of setting up a RADIUS server varies by the server environment. An example of a RADIUS server is FreeRADIUS.

  • Page 659: Radius User Configuration

    (password verification) and authorization (assigning the access level of the user). Additional RADIUS servers can be configured as backup servers for user authentication. This section outlines how to configure a RADIUS server to be used for user authentication on your IX15 device.

  • Page 660: Configure Your Ix15 Device To Use A Radius Server

    If the RADIUS servers are unavailable and the IX15 device falls back to local authentication, only users defined locally on the device are able to log in. RADIUS users cannot log in until the RADIUS servers are brought back online.
  • Page 661 7. (Optional) For NAS ID, type the unique identifier for this network access server (NAS). You can use the fully-qualified domain name of the NAS or any arbitrary string. If not set, the default value is used: Digi IX15 Gateway User Guide...
  • Page 662 User authentication Remote Authentication Dial-In User Service (RADIUS) If you are accessing the IX15 device by using the WebUI, the default value is for NAS ID is httpd. If you are accessing the IX15 device by using ssh, the default value is sshd.
  • Page 663 You can use the fully-qualified domain name of the NAS or any arbitrary string. If not set, the default value is used: If you are accessing the IX15 device by using the WebUI, the default value is for NAS ID is httpd.

  • Page 664: Ldap

    When you are using LDAP authentication, you can have both local users and LDAP users able to log in to the device. To use LDAP authentication, you must set up a LDAP server that is accessible by the IX15 device prior to configuration. The process of setting up a LDAP server varies by the server environment.

  • Page 665: Ldap User Configuration

    (password verification) and authorization (assigning the access level of the user). Additional LDAP servers can be configured as backup servers for user authentication. This section outlines how to configure a LDAP server to be used for user authentication on your IX15 device.

  • Page 666: Ldap Server Failover And Fallback To Local Configuration

    LDAP server failover and fallback to local configuration In addition to the primary LDAP server, you can also configure your IX15 device to use backup LDAP servers. Backup LDAP servers are used for authentication requests when the primary LDAP server is unavailable.
  • Page 667 User authentication LDAP 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Authentication > LDAP > Servers.
  • Page 668 If this attribute is not set, the user will be denied access. 12. (Optional) For Group attribute, type the name of the user attribute that contains the list of IX15 authentication groups that the authenticated user has access to. See LDAP user configuration for further information about the group attribute.
  • Page 669 LDAP    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 670 . If this attribute is not set, the user will be denied access. 10. (Optional) Set the name of the user attribute that contains the list of IX15 authentication groups that the authenticated user has access to. See...

  • Page 671: Configure Serial Authentication

    This section describes how to configure authentication for serial access.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 672 9. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 673: Disable Shell Access

    To prohibit access to the shell prompt for all authentication groups, disable the Allow shell parameter.. This does not prevent access to the Admin CLI. Note If shell access is disabled, re-enabling it will erase the device's configuration and perform a factory reset.    WebUI Digi IX15 Gateway User Guide...
  • Page 674 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 675: Set The Idle Timeout For Ix15 Users

    By default, the Idle timeout is set to 10 minutes.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 676 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 677 User authentication Set the idle timeout for IX15 users where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. For example, to set idle_timeout to ten minutes, enter either 10m or 600s: (config)> auth idle_timeout 600s (config)>...

  • Page 678: Example User Configuration

    Goal: To create a user with administrator rights who is authenticated locally on the device.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 679 7. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 680: Example 2: Radius, Tacacs+, And Local Authentication For One User

    Type quit to disconnect from the device. Example 2: RADIUS, TACACS+, and local authentication for one user Goal: To create a user with administrator rights who is authenticated by using all three authentication methods. Digi IX15 Gateway User Guide...
  • Page 681 User authentication Example user configuration In this example, when the user attempts to log in to the IX15 device, user authentication will occur in the following order: 1. The user is authenticated by the RADIUS server. If the RADIUS server is unavailable, 2.
  • Page 682 The authentication group on the IX15 device, admin, is identified in the groupname parameter. c. Save and close the tac_plus.conf file. 3. Log into the IX15 WebUI as a user with full Admin access rights. 4. On the menu, click System. Under Configuration, click Device Configuration. Digi IX15 Gateway User Guide...
  • Page 683 Click  to add another new method. f. For the new method, select Local users. 6. Create the local user: a. Click Authentication > Users. b. In Add User:, type admin1 and click . c. For password, type password1. Digi IX15 Gateway User Guide...
  • Page 684 In this example: The user's username is admin1. The user's password is password1. The authentication group on the IX15 device, admin, is identified in the Unix-FTP- Group-Names parameter. c. Save and close the users file. Digi IX15 Gateway User Guide...
  • Page 685 Save and close the tac_plus.conf file. 3. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 686 (config auth user adminuser)> save Configuration saved. > 9. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...
  • Page 687 Firewall This chapter contains the following topics: Firewall configuration Port forwarding rules Packet filtering Configure custom firewall rules Configure Quality of Service options Digi IX15 Gateway User Guide...

  • Page 688: Firewall Configuration

    IPsec: The default zone for IPsec tunnels. Dynamic routes: Used for routes learned using routing services. Port forwarding: A list of rules that allow network connections to the IX15 to be forwarded to other servers by translating the destination address.
  • Page 689    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 690: Configure The Firewall Zone For A Network Interface

    Internal, to External.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 691 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 692: Delete A Custom Firewall Zone

    You cannot delete preconfigured firewall zones. To delete a custom firewall zone:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.

  • Page 693: Port Forwarding Rules

    Port forwarding rules    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 694 To configure a port forwarding rule:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Firewall > Port forwarding.
  • Page 695 13. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 696 (config firewall dnat 0)> to_address ip-address (config firewall dnat 0)> For IPv6 addresses: (config firewall dnat 0)> to_address6 ip-address (config firewall dnat 0)> 9. Set the public-facing port number(s) that network connections must use for their traffic to be forwarded. Digi IX15 Gateway User Guide...
  • Page 697 Zones: A list of groups of network interfaces that can be referred to by packet filtering rules and access control lists. Additional Configuration ------------------------------------------------------------------- ----------- dynamic_routes edge external internal ipsec loopback setup (config firewall dnat 0 acl)> Digi IX15 Gateway User Guide...

  • Page 698: Delete A Port Forwarding Rule

    To delete a port forwarding rule:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Firewall > Port forwarding.
  • Page 699 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 700 5. Save the configuration and apply the change: (config)> save Configuration saved. > 6. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 701: Packet Filtering

    To configure a packet filtering rule:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 702 9. For Destination zone, select the firewall zone. Packets destined for network interfaces that are members of this zone will either be accepted, rejected or dropped by this rule. Firewall configuration for more information about firewall zones. 10. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 703 Packet filtering    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 704 (config firewall filter 1)> where value is one of: ipv4 ipv6 The default is any. 8. Set the protocol. (config firewall filter 1)> protocol value (config firewall filter 1)> where value is one of: icmp icmpv6 Digi IX15 Gateway User Guide...

  • Page 705: Enable Or Disable A Packet Filtering Rule

    To enable or disable a packet filtering rule:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 706 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 707: Delete A Packet Filtering Rule

    To delete a packet filtering rule:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Firewall > Packet filtering.
  • Page 708 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 709: Configure Custom Firewall Rules

    To configure custom firewall rules:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Firewall > Custom rules.
  • Page 710 Firewall Configure custom firewall rules 7. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...

  • Page 711: Configure Quality Of Service Options

    (packet ingress). A QoS binding contains the policies and rules that apply to packets exiting the IX15 device on the binding's interface. By default, the IX15 device has two preconfigured QoS bindings, Outbound and Inbound.
  • Page 712 8. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 713 Create a new binding    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 714 Typically, this should be 95% of the available bandwidth. Allowed value is any integer between 1 and 1000. 9. Create a policy for the binding: At least one policy is required for each binding. Each policy can contain up to 30 rules. Digi IX15 Gateway User Guide...
  • Page 715 If Default is disabled, you must configure at least one rule: i. Click to expand Rule. ii. For Add Rule, click . The QoS binding policy rule configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 716 Use the format IPv6_address[/prefix_length], or use any to match any IPv6 address. Repeat to add a new rule. Up to 30 rules can be configured. 10. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 717 Configure Quality of Service options    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 718 (config firewall qos 2 policy 0)> rule (config firewall qos 2 policy 0 rule)> ii. Add a rule: (config firewall qos 2 policy 0 rule)> add end (config firewall qos 2 policy 0 rule 0)> Digi IX15 Gateway User Guide...
  • Page 719 Source traffic from any address will be matched. Firewall configuration for more information about firewall zones. interface: Only traffic from the selected interface will be matched. Set the interface: Digi IX15 Gateway User Guide...
  • Page 720 (config network qos 2 policy 0 rule 0)> dst interface /network/interface/eth1 (config network qos 2 policy 0 rule 0)> address: Only traffic destined for the IP address typed in IPv4 address will be matched. Set the address that will be matched: Digi IX15 Gateway User Guide...
  • Page 721 8. Save the configuration and apply the change: (config)> save Configuration saved. > 9. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 722: Upload A New Lxc Container

    Containers The IX15 device includes support for LXC Linux containers. LXC containers are a lightweight, operating system level method of virtualization that allows you to run one or more isolated Linux instances on a the same host using the host's Linux kernal.

  • Page 723: Configure A Container

    Serial ports on the device that the container will have access to.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 724 8. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 725 (config system container name)> 7. (Optional) Assign serial ports that the container will have access to: a. Determine available serial ports: (config system container name)> ... serial Serial Additional Configuration --------------------------------------------------------------------- ---------- port1 Port 1 Digi IX15 Gateway User Guide...

  • Page 726: Starting And Stopping The Container

    Starting a container in non-persistent mode To start the container in non-persistent mode: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.

  • Page 727: Stopping The Container

    To start the container in persistent mode, include the -p option at the command line. For example: 1. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu.

  • Page 728: Show Status Of All Containers

    1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu.

  • Page 729: Schedule A Script To Run In The Container

    2. Execute a ping command every ten seconds from inside the container.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 730 10. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 731: Create A Custom Container

    At the command line of a Linux host, we will unpack the file, add a simple python script, and create a new container file that includes the python script. Create the custom container file 1. At the command line of a Linux host, unpack the test_lxc.tgz file: $ tar -xfv test_lxc.tgz rootfs/ Digi IX15 Gateway User Guide...

  • Page 732: Test The Custom Container File

    If deselected, you will need to create the configuration manually. vi. Click Apply. 2. Log into the IX15 command line as a user with shell access. Depending on your device configuration, you may be presented with an Access selection menu. Type shell to access the device shell.
  • Page 733 Containers Create a custom container 3. At the shell prompt, type: # lxc python_lxc lxc # 4. Execute the python command: lxc # python /etc/test.py Hello world. lxc # Digi IX15 Gateway User Guide...

  • Page 734: System Administration

    Reboot your IX15 device Erase device configuration and reset to factory defaults Locate the device by using the Find Me feature Configuration files Schedule system maintenance tasks Disable device encryption Configure the speed of your Ethernet port Digi IX15 Gateway User Guide...

  • Page 735: Review Device Status

    Show basic system information: 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 736: Configure System Information

    Disk /var Usage : 1.765MB/256.0MB(1%) > Configure system information You can configure information related to your IX15 device, such as providing a name and location for the device. Configuration items A name for the device. The name of a contact for the device.
  • Page 737 A banner that will be displayed when users access terminal services on the device. To enter system information:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click System.

  • Page 738: Update System Firmware

    For example, IX15-22.2.9.85.bin. Manage firmware updates using Digi Remote Manager If you have a network of many devices, you can use Digi Remote Manager Profiles to manage firmware updates. Profiles ensure all your devices are running the correct firmware version and that...

  • Page 739: Certificate Management For Firmware Images

    The system firmware files are signed to ensure that only Digi-approved firmware load onto the device. The IX15 device validates the system firmware image as part of the update process and only successfully updates if the system firmware image can be authenticated.
  • Page 740 Newest firmware version available to download is '22.2.9.85' Device firmware update from '21.11.60.63' to '22.2.9.85' is needed > 3. Use the modem firmware ota list command to list available firmware on the Digi firmware repository. > system firmware ota list 21.11.60.63...
  • Page 741 Update firmware from a local file    WebUI 1. Download the IX15 operating system firmware from the Digi Support FTP site to your local machine. 2. Log into the IX15 WebUI as a user with Admin access. 3. On the main menu, click System. Under Administration, click Firmware Update.
  • Page 742 > reboot Rebooting system > 7. Once the device has rebooted, log into the IX15's command line as a user with Admin access and verify the running firmware version by entering the show system command. > show system...

  • Page 743: Dual Boot Behavior

    > Dual boot behavior By default, the IX15 device stores two copies of firmware in two flash memory banks: The current firmware version that is used to boot the device. A copy of the firmware that was in use prior to your most recent firmware update.

  • Page 744: Update Cellular Module Firmware

    > system duplicate-firmware > Update cellular module firmware You can update modem firmware by downloading firmware from the Digi firmware repository, or by uploading firmware from your local storage onto the device. You can also schedule modem firmware updates. See Schedule system maintenance tasks for details.

  • Page 745: Update Modem Firmware Over The Air (Ota)

      Command line Update modem firmware over the air (OTA) You can update your modem firmware by querying the Digi firmware repository to determine if there is new firmware available for your modem and performing an OTA modem firmware update: 1. Log into the IX15 command line as a user with Admin access.

  • Page 746: Update Modem Firmware By Using A Local Firmware File

    Type quit to disconnect from the device. Update modem firmware by using a local firmware file You can update your modem firmware by uploading a modem firmware file to your IX15 device. Firmware should be uploaded to /opt/MODEM_MODEL/Custom_Firmware, for example, /opt/LM940/Custom_Firmware.

  • Page 747: Reboot Your Ix15 Device

    Type quit to disconnect from the device. Reboot your IX15 device You can reboot the IX15 device immediately or schedule a reboot for a specific time every day. Note You may want to save your configuration settings to a file before rebooting. See...

  • Page 748: Schedule Reboots Of Your Device

    Schedule reboots of your device    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 749 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 750: Erase Device Configuration And Reset To Factory Defaults

    With firmware release 22.2.9.x and newer, erases the client-side certificate used for communication with Digi Remote Manager. If you are using Digi Remote Manager with firmware release 22.2.9.x and newer, by default the device uses a client-side certificate for communication with Remote Manager. If the client-side certificate is erased, you must use the Remote Manager interface to reset the certificate.
  • Page 751 3. In the Erase configuration section, click ERASE. 4. Click CONFIRM. 5. After resetting the device: a. Connect to the IX15 by using the serial port or by using an Ethernet cable to connect the IX15 ETH port to your PC. b. Log into the IX15: User name: Use the default user name: admin.
  • Page 752 2. Enter the following: > system factory-erase 3. After resetting the device: a. Connect to the IX15 by using the serial port or by using an Ethernet cable to connect the IX15 ETH port to your PC. b. Log into the IX15: User name: Use the default user name: admin.

  • Page 753: Configure The Ix15 Device To Use Custom Factory Default Settings

    Configure the IX15 device to use custom factory default settings You can configure your IX15 device to use custom factory default settings. This way, when you erase the device's configuration, the device will reset to your custom configuration rather than to the original factory defaults.
  • Page 754 1. Log into the IX15 WebUI as a user with Admin access. 2. Configure your IX15 device to match the desired custom factory default configuration. For example, you may want to configure the device to use a custom APN or a particular network configuration, so that when you reset the device to factory defaults, it will automatically have your required network configuration.

  • Page 755: Locate The Device By Using The Find Me Feature

    Select the file from your local file system.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 756    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 757: Configuration Files

    Save configuration changes When you make changes to the IX15 configuration, the changes are not automatically saved. You must explicitly save configuration changes, which also applies the changes. If you do not save configuration changes, the system discards the changes.

  • Page 758: Save Configuration To A File

    Type quit to disconnect from the device. Save configuration to a file You can save your IX15 device's configuration to a file and use this file to restore the configuration, either to the same device or to similar devices.

  • Page 759: Restore The Device Configuration

    /etc/config/backup-archive-0040FF800120-19.05.17-19.01.17.bin to remote Restore the device configuration You can restore a configuration file to your IX15 device by using a backup from the device, or a backup from a similar device. This process does not apply any profile to the IX15's XBee, a custom profile must be applied manually...
  • Page 760 The configuration will be restored and the device will be rebooted.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 761 IX15 device. local-path is the location on the IX15 device where the copied file will be placed. For example: > scp host 192.168.4.1 user admin remote /home/admin/bin/backup-archive- 0040FF800120-22.2.9.85-19.23.42.bin local /opt to local...

  • Page 762: Schedule System Maintenance Tasks

    The frequency (daily, weekly, or monthly) that checks for firmware updates will run.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 763 If Immediately is selected, all scheduled tasks will begin at the exact time specified in Start time. d. For Frequency, select whether the maintenance window will be started every day, or once per week. Digi IX15 Gateway User Guide...
  • Page 764 11. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 765 Configure the duration length (the amount of time that the maintenance tasks will be run). If 0 is used, all scheduled tasks will begin at the start time, defined Digi IX15 Gateway User Guide...
  • Page 766 1 or 0 are also allowed. Note If your device is managed by a Digi Remote Manager configuration, the configuration manages the device's firmware version. You should not enable this option.

  • Page 767: Disable Device Encryption

    Type quit to disconnect from the device. Disable device encryption You can disable the cryptography on your IX15 device. This can be used to ship unused devices from overseas without needing export licenses from the country from which the device is being shipped.
  • Page 768 Select the Properties of the relevant network connection on the Windows PC. b. Click the Internet Protocol Version 4 (TCP/IPv4) parameter. c. Click Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties dialog appears. d. Configure with the following details: IP address for PC: 192.168.210.2 Subnet: 255.255.255.0 Digi IX15 Gateway User Guide...

  • Page 769: Configure The Speed Of Your Ethernet Port

    Gateway: 192.168.210.1 2. Connect the PC's Ethernet port to the Ethernet port on your IX15 device. 3. Open a telnet session and connect to the IX15 device at the IP address of 192.168.210.1. 4. Log into the device: Username: admin Password: The default unique password for your device is printed on the device label.
  • Page 770 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 771 4. Save the configuration and apply the change: (config)> save Configuration saved. > 5. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...
  • Page 772 Monitoring This chapter contains the following topics: intelliFlow Configure NetFlow Probe Digi IX15 Gateway User Guide...

  • Page 773: Intelliflow

    WebUI. To use intelliFlow, the IX15 must be powered on and you must have access to the local WebUI. Once you enable intelliFlow, the Status >...
  • Page 774 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 775 5. Save the configuration and apply the change: (config)> save Configuration saved. > 6. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 776: Use Intelliflow To Display Average Cpu And Ram Usage

    This procedure is only available from the WebUI. To display display average CPU and RAM usage:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. If you have not already done so, enable intelliFlow. See Enable intelliFlow.

  • Page 777: Use Intelliflow To Display Top Data Usage Information

    Top data usage by service To generate a top data usage chart:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. If you have not already done so, enable intelliFlow. See Enable intelliFlow. 3. From the menu, click Status > intelliFlow.
  • Page 778 5. Change the type of chart that is used to display the data: a. Click the menu icon (). b. Select the type of chart. 6. Change the number of top users displayed. You can display the top five, top ten, or top twenty data users. Digi IX15 Gateway User Guide...

  • Page 779: Use Intelliflow To Display Data Usage By Host Over Time

    Use intelliFlow to display data usage by host over time To generate a chart displaying a host's data usage over time:    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. If you have not already done so, enable intelliFlow. See Enable intelliFlow.

  • Page 780: Configure Netflow Probe

    To save the chart to your local filesystem, select Export to PNG. c. To print the chart, select Print chart. Configure NetFlow Probe NetFlow probe is used to probe network traffic on the IX15 device and export statistics to NetFlow collectors. Required configuration items Enable NetFlow.
  • Page 781 Configure NetFlow Probe    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Monitoring > NetFlow probe.
  • Page 782 12. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 783 1 and 1800. The default is 1800. 8. Set the maximum number of flows to probe simultaneously: (config)> monitoring netflow max_flows value (config)> where value is any is any number between 0 and 2000000. The default is 2000000. Digi IX15 Gateway User Guide...
  • Page 784 (config monitoring netflow collector 0)> save Configuration saved. > 11. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 785: Central Management

    Collect device health data and set the sample interval Enable event log upload to Digi Remote Manager Log into Digi Remote Manager Use Digi Remote Manager to view and manage your device Add a device to Digi Remote Manager View Digi Remote Manager connection status...

  • Page 786: Digi Remote Manager Support

    This URL is required to utilize the client-side certificate support. Prior to release 22.2.9.x, the default URL was my.devicecloud.com. If your Digi device is configured to use a non-default URL to connect to Remote Manager, updating the firmware will not change your configuration. However, if you erase the device's configuration, the Remote Manager URL will change to the default of edp12.devicecloud.com.
  • Page 787 To configure Digi Remote Manager:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 788 6. (Optional) For Management port, type the destination port for the remote cloud services connection. The default is 3199. 7. (Optional) For Retry interval, type the amount of time that the IX15 device should wait before reattempting to connect to remote cloud services after being disconnected. The default is 30 seconds.
  • Page 789 CLI. If disabled, no login prompt will be presented and the user will be logged in as admin. The default is disabled. 14. (Optional) Configure the IX15 device to communicate with remote cloud services by using SMS: a. Click to expand Short message service.
  • Page 790 (config)> cloud drm drm_url url (config)> 6. (Optional) Set the amount of time that the IX15 device should wait before reattempting to connect to the remote cloud services after being disconnected. The minimum value is ten seconds. The default is 30 seconds.
  • Page 791 (config)> cloud drm keep_alive 600s (config)> 8. (Optional) Set the amount of time that the IX15 device should wait between sending keep-alive messages to the Digi Remote Manager when using a cellular interface. Allowed values are from 30 seconds to two hours. The default is 290 seconds.
  • Page 792 If set to false, no login prompt will be presented and the user will be logged in as admin. The default is false. 13. (Optional) Configure the IX15 device to communicate with remote cloud services by using SMS: a. Enable SMS messaging: (config)>...

  • Page 793: Collect Device Health Data And Set The Sample Interval

    Collect device health data and set the sample interval You can enable or disable the collection of device health data to upload to Digi Remote Manager, and configure the interval between health sample uploads. By default, device health data upload is enabled, and the health sample interval is set to 60 minutes.
  • Page 794 1, 5, 15, 30, or 60, and represents the number of minutes between uploads of health sample data. 5. By default, the device will only report health metrics values to Digi Remote Manager that have changed health metrics were last uploaded. This is useful to reduce the bandwidth used to...
  • Page 795 (config)> When disabled, all metrics are uploaded every Health sample interval. 6. (Optional) Tuning parameters allow to you configure what data are uploaded to the Digi Remote Manager. By default, all tuning parameters are enabled. To view a list of all available tuning parameters, use the show command: (config)>...

  • Page 796: Enable Event Log Upload To Digi Remote Manager

    Type quit to disconnect from the device. Enable event log upload to Digi Remote Manager You can configure your device to upload the event log to Digi Remote Manager, and configure the interval between event log uploads. To enable the event log upload, or disable it if it has been disabled, and to change the upload interval: ...
  • Page 797 6. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 798: Log Into Digi Remote Manager

    1. If you have not already done so, click here to sign up for a Digi Remote Manager account. 2. Check your email for Digi Remote Manager login instructions. 3. Go to remotemanager.digi.com. 4. Log into your Digi Remote Manager account.

  • Page 799: Use Digi Remote Manager To View And Manage Your Device

    Use Digi Remote Manager to view and manage your device To view and manage your device: 1. If you have not already done so, connect to your Digi Remote Manager account. 2. Click Device Management to display a list of your devices.

  • Page 800: Add A Device To Digi Remote Manager

    The same default password is also shown on the label affixed to the bottom of the device. 6. Click Add. 7. Click OK. Digi Remote Manager adds your IX15 device to your account and it appears in the Device Management view. View Digi Remote Manager connection status To view the current Digi Remote Manager configuration: ...

  • Page 801: Configure Multiple Devices Using Profiles

    Digi recommends you take advantage of Digi Remote Manager profiles to manage multiple IX15 routers. Typically, if you want to provision multiple IX15 routers: 1. Using the IX15 local WebUI, configure one IX15 router to use as the model configuration for all subsequent IX15s you need to manage.

  • Page 802: Amazon Aws Iot

    AWS provides. For more information visit its web page at https://docs.aws.amazon.com/iot/latest/developerguide/what-is-aws-iot.html. The connectivity with the AWS IoT Hub and the Digi IX15 Gateway has been validated by using the AWS IoT Device SDK: https://github.com/aws/aws-iot-device-sdk-python. Additionally, the IX15 provides several Python samples that demonstrate how to connect and interact with the AWS IoT Hub.
  • Page 803 File system This chapter contains the following topics: The IX15 local file system Display directory contents Create a directory Display file contents Copy a file or directory Move or rename a file or directory Delete a file or directory Upload and download files...

  • Page 804: File System

    The IX15 local file system The IX15 local file system The IX15 local file system has approximately 150 MB of space available for storing files, such as Python programs, alternative configuration files and firmware versions, and release files, such as cellular module images.

  • Page 805: Create A Directory

    For example: 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 806: Display File Contents

    For example:    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI. 2. At the Admin CLI prompt, type more /path/filename. For example, to view the contenct of the file accns.json in /etc/config:...

  • Page 807: Move Or Rename A File Or Directory

      Command line To rename a file named test.py in /etc/config/scripts to final.py: 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 808: Delete A File Or Directory

      Command line To delete a file named test.py in /etc/config/scripts: 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 809: Upload And Download Files

    FileZilla. Upload and download files by using the WebUI Upload files 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Administration, click File System. The File System page appears.

  • Page 810: Upload And Download Files By Using The Secure Copy Command

    IX15 device. local-path is the location on the IX15 device where the copied file will be placed. For example: To copy firmware from a remote host with an IP address of 192.168.4.1 to the /etc/config directory on the IX15 device, issue the following command: >...

  • Page 811: Upload And Download Files Using Sftp

    IX15 device. For example: To copy a support report from the IX15 device to a remote host at the IP address of 192.168.4.1: 1. Use the system support-report command to generate the report: >...
  • Page 812 File system Upload and download files $ sftp ahmed@192.168.2.1 Password: Connected to 192.168.2.1 sftp> get test.py Fetching test.py to test.py test.py 100% 0.3KB/s 00:00 sftp> exit Digi IX15 Gateway User Guide...
  • Page 813 Use the scp command Display status and statistics using the show command Device configuration using the command line interface Execute configuration commands at the root Admin CLI prompt Configuration mode Install Python packages Command line reference Digi IX15 Gateway User Guide...

  • Page 814: Command Line Interface

    Log in to the command line interface    Command line 1. Connect to the IX15 device by using a serial connection, SSH or telnet, or the Terminal in the WebUI or the Console in the Digi Remote Manager. See Access the command line interface more information.

  • Page 815: Exit The Command Line Interface

    2. At the main menu, click Terminal. The device console appears. IX15 login: 3. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 816: Display Help For Commands And Parameters

    Display help for commands and parameters The help command When executed from the root command prompt, help displays information about autocomplete operations, how to move the cursor on the IX15 command line, and other keyboard shortcuts: > help Commands ------------------------------------------------------------------------------ Show commands help <Tab>...

  • Page 817: Display Help For Individual Commands

    Show IP routing information. scripts Show scheduled scripts. serial Show serial statistics. surelink Show Surelink statistics. system Show system statistics. version Show firmware version. vrrp Show VRRP statistics. web-filter Show web filter information. > show Digi IX15 Gateway User Guide...

  • Page 818: Use The Tab Key Or The Space Bar To Display Abbreviated Help

    (config)> serial port1 enable t<Tab> auto-completes to (config)> serial port1 enable true Auto-complete does not function for: Parameter values that are string types. Integer values. File names. Select parameters passed to commands that perform an action. Digi IX15 Gateway User Guide...

  • Page 819: Available Commands

    Installs and manages Python packages. reboot Reboots the IX15 device. Removes a file. Uses the secure copy protocol (SCP) to transfer files between the IX15 device and a remote host. Use the scp command for information about using the scp command.

  • Page 820: Xbee-Specific Commands

    XBee-specific commands for more information. Note For commands that operate on the IX15's file system, such as the cp, ls, and mkdir commands, File system for information about the file system, including how to copy, move and delete files and directories.

  • Page 821: Manage An Xbee Network

    64-bit address, node identifier, role, and so on. The IX15 network caches a list of known nodes that reflects the real XBee network. It adds new nodes to its network cache in these scenarios: When any kind of communication occurs between any remote node in the network and the IX15.
  • Page 822 WebUI. Show the network This command shows all nodes known to the IX15 and included in its network cache. To show the current nodes on your network, run xbee network show: The first node displayed is the XBee device on the IX15, the local one, followed by the remote ones.

  • Page 823: Configure Individual Xbee Parameters

    Brief description of the network. name—optional:  Name for the network. For example, to export the network to /etc/config/ with the name "My IX15 network" and description "My IX15 Gateway XBee network", enter the following command: > xbee network export /etc/config name "My IX15 network" description "My IX15 Gateway XBee network"...
  • Page 824 Command line interface XBee-specific commands Digi XBee 3 Zigbee RF Module User Guide Digi XBee 3 DigiMesh RF Module User Guide Digi XBee 3 802.15.4 RF Module User Guide Read XBee parameters To read the value of an XBee setting use the xbee get command. This command allows you to get the value of an XBee parameter from the local XBee device or of any remote device in the network.
  • Page 825 For example, to set to 0x01 the value of D2 (AD2/DIO2 Configuration) of an XBee which its 64-bit address is 0013A200DDDDDDD0, enter the following command: Example: xbee set > xbee set 0013A200DDDDDDD0 D2 0x01 > xbee get 0013A200DDDDDDD0 D2 0x01 > Digi IX15 Gateway User Guide...

  • Page 826: Apply Xbee Profiles

    XPRO file that may contain several items: device firmware, setting values to configure, and a file system. Upload XBee profiles XPRO files are uploaded to the /etc/config/xbee-profiles directory of the IX15. You can upload profiles to the IX15 using: The WebUI. See Manage XBee profiles.

  • Page 827: Use The Scp Command

    The hostname or IP address of the remote host. The username and password of the user on the remote host. Whether the file is being copied to the IX15 device from a remote host, or to the remote host from the IX15 device.
  • Page 828 IX15 device. For example: To copy a support report from the IX15 device to a remote host at the IP address of 192.168.4.1: Digi IX15 Gateway User Guide...

  • Page 829: Display Status And Statistics Using The Show Command

    > Display status and statistics using the show command The IX15 show command display status and statistics for various features. For example: show config show config command displays all the configuration settings for the device that have been changed from the default settings.

  • Page 830: Show Network

    When the config command is used in this way, changes to the device's configuration are automatically saved when the command is executed. For example, to disable the SSH service from the root prompt, enter the following command: > config service ssh enable false > Digi IX15 Gateway User Guide...

  • Page 831: Display Help For The Config Command From The Root Admin Cli Prompt

    Command line interface Execute configuration commands at the root Admin CLI prompt The IX15 device's ssh service is now disabled. Note When the config command is executed at the root prompt, certain configuration actions that are available in configuration mode cannot be performed. This includes validating configuration changes, canceling and reverting configuration changes, and performing actions on elements in lists.

  • Page 832: Configuration Mode

    You can cancel all changes without saving them at any time. Configuration changes do not take effect until the configuration is saved. Enable configuration mode To enable configuration mode, at the root prompt, enter the config command without any parameters: Digi IX15 Gateway User Guide...

  • Page 833: Enter Configuration Commands In Configuration Mode

    (config)> save Configuration saved. > After using save to save changes to the configuration, you will automatically exit configuration mode. To return to configuration mode, type config again. Digi IX15 Gateway User Guide...

  • Page 834: Exit Configuration Mode Without Saving Changes

    Display command line help in configuration mode Display additional configuration commands, as well as available parameters and values, by entering the question mark (?) character at the config prompt. For example: Digi IX15 Gateway User Guide...
  • Page 835 Enter ? to display help for the service node: (config service)> ? Either of these methods will display the following information: config> service ? Services Additional Configuration ------------------------------------------------------------------------ mdns Service Discovery (mDNS) multicast Multicast Digi IX15 Gateway User Guide...
  • Page 836 Enable [private] Private key port Port Additional Configuration ------------------------------------------------------------------------ Access control list mdns (config)> service ssh 4. Lastly, to display allowed values and other information for the enable parameter, use one of the following methods: Digi IX15 Gateway User Guide...

  • Page 837: Move Within The Configuration Schema

    (config)> service (config service)> 2. Type ssh to move to the ssh node: (config service)> ssh (config service ssh)> 3. Type acl to move to the acl node: (config service ssh)> acl (config service ssh acl)> Digi IX15 Gateway User Guide...

  • Page 838: Manage Elements In Lists

    2. Add an authentication method by using the add index_item command. For example: To add the TACACS+ authentication method to the beginning of the list, use the index number 0: (config)> add auth method 0 tacacs+ (config)> show auth method 0 tacacs+ Digi IX15 Gateway User Guide...
  • Page 839 2 radius (config)> 2. Delete one of the authentication methods by using the del index_number command. For example: a. To delete the local authentication method, use the index number 0: (config)> del auth method 0 (config)> Digi IX15 Gateway User Guide...

  • Page 840: The Revert Command

    (config)> The revert command The revert command is used to revert changes to the IX15 device's configuration and restore default configuration settings. The behavior of the revert command varies depending on where in the configuration hierarchy the command is executed, and whether the optional path parameter is used.
  • Page 841 Move to the location in the configuration and enter the revert command without the path parameter. For example: 1. Change to the auth method node: (config)> auth method (config auth method)> 2. Enter the revert command: (config auth method)> revert (config auth method)> Digi IX15 Gateway User Guide...

  • Page 842: Enter Strings In Configuration Commands

    (config)> system description "Digi IX15" Example: Create a new user by using the command line In this example, you will use the IX15 command line to create a new user, provide a password for the user, and assign the user to authentication groups.
  • Page 843 (config auth user user1)> show ..group admin admin enable true nagios enable false openvpn enable false no tunnels portal enable false no portals serial enable false no ports shell enable false serial admin Digi IX15 Gateway User Guide...

  • Page 844: Install Python Packages

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Install Python packages The IX15 device includes support to install Python wheel packages or zip packages coming from the PyCharm IDE. See Develop Python applications for details on how to develop Python applications.
  • Page 845 1 root root 103 Nov 2 06:45 requirements.txt > 3. Optionally, you can configure your IX15 device to automatically run the installed application. Set up the IX15 to automatically run your applications for more details. Digi IX15 Gateway User Guide...

  • Page 846: Command Line Reference

    Digi IX15 Gateway User Guide...

  • Page 847: Analyzer Clear

    Clears the traffic captured by the analyzer. Digi IX15 Gateway User Guide...

  • Page 848: Analyzer Save

    Stops the traffic capture session. Syntax analyzer stop <name> Parameters name: Name of the capture filter to use. clear dhcp-lease ip-address Clear the DHCP lease for the specified IP address. Syntax clear dhcp-lease ip-address ADDRESS Digi IX15 Gateway User Guide...

  • Page 849: Clear Dhcp-Lease Mac

    <source> <destination> [force] Parameters source: The source file or directory to copy. destination: The destination path to copy the source file or directory to. force: Do not ask to overwrite the destination file if it exists. Digi IX15 Gateway User Guide...

  • Page 850: Help

    Command line interface Command line reference help Show CLI editing and navigation commands. Syntax help Parameters None Digi IX15 Gateway User Guide...
  • Page 851 Command line interface Command line reference List a directory. Syntax ls <path> [show-hidden] Parameters path: List files and directories under this path. show-hidden: Show hidden files and directories. Hidden filenames begin with '.'. Digi IX15 Gateway User Guide...

  • Page 852: Mkdir

    The configured name of the modem to execute this CLI command on. imei: The IMEI of the modem to execute this CLI command on. modem firmware list List modem firmware files found in the /opt/[MODEM_MODEL]/ directory. Digi IX15 Gateway User Guide...

  • Page 853: Modem Firmware Ota Check

    The configured name of the modem to execute this CLI command on. imei: The IMEI of the modem to execute this CLI command on. modem firmware ota check Query the Digi firmware server for the latest remote modem firmware version. Syntax modem firmware ota check [name STRING] [imei STRING] Parameters name: The configured name of the modem to execute this CLI command on.

  • Page 854: Modem Pin Change

    Enable the PIN lock on the SIM card that is active in the modem. The SIM card will need to be unlocked before each use. Warning: Attempting to use an incorrect PIN code may PUK lock the SIM. Syntax modem pin enable <pin> [name STRING] [imei STRING] Parameters pin: The SIM's PIN code. Digi IX15 Gateway User Guide...

  • Page 855: Modem Pin Status

    The IMEI of the modem to execute this CLI command on. modem puk unlock Unlock the SIM with a PUK code from the SIM provider. Syntax modem puk unlock <puk> <new-pin> [name STRING] [imei STRING] Digi IX15 Gateway User Guide...

  • Page 856: Modem Reset

    The SIM slot to change to. name: The configured name of the modem to execute this CLI command on. imei: The IMEI of the modem to execute this CLI command on. monitoring Commands to clear the device's status or systems. Digi IX15 Gateway User Guide...

  • Page 857: Monitoring Metrics Upload

    The source file or directory to move. destination: The destination path to move the source file or directory to. force: Do not ask to overwrite the destination file if it exists. ping Ping a host using ICMP echo. Digi IX15 Gateway User Guide...

  • Page 858: Powerctrl

    Enter in poweroff or suspend. powerctrl state suspend Enter in suspend. pyinstall Pyinstall commands pyinstall package STRING Install a Python package. Parameters STRING Absolute path of the .zip or .whl file. Syntax: STRING Digi IX15 Gateway User Guide...

  • Page 859: Reboot

    Command line interface Command line reference reboot Reboot the system. Parameters None Digi IX15 Gateway User Guide...
  • Page 860 Command line interface Command line reference Remove a file or directory. Syntax rm <path> [force] Parameters path: The path to remove. force: Force the file to be removed without asking. Digi IX15 Gateway User Guide...

  • Page 861: Scp

    Display IPv6 routes. If no IP version is specified IPv4 & IPV6 will be displayed. verbose: Display more information (less concise, more detail). show cloud Show drm status & statistics. Syntax show cloud Parameters None Digi IX15 Gateway User Guide...

  • Page 862: Show Config

    Show all leases (active and inactive (not in etc/config/dhcp.*lease)). verbose: Display more information (less concise, more detail). show dns Show DNS servers and associated domains. Syntax show dns Parameters None show event Show event list (high level). Digi IX15 Gateway User Guide...

  • Page 863: Show Hotspot

    Show L2TP access concentrator status & statistics. Syntax show l2tp lac [name STRING] Parameters name: Display more details for a specific L2TP access concentrator. show l2tp lns Show L2TP network server status & statistics. Syntax show l2tp lns [name STRING] Digi IX15 Gateway User Guide...

  • Page 864: Show L2Tpeth

    (this can be very time consuming). If you require more messages of the filtered type, increase the number of messages retrieved using 'number'. show manufacture Show manufacturer information. Syntax show manufacture [verbose] Parameters verbose: Display more information (less concise, more detail). show modbus-gateway Digi IX15 Gateway User Guide...

  • Page 865: Show Modem

    Parameters interface: Display more details and config data for a specific network interface. all: Display all interfaces including disabled interfaces. verbose: Display more information (less concise, more detail). show ntp Show NTP status & statistics. Digi IX15 Gateway User Guide...

  • Page 866: Show Openvpn Client

    Syntax show route [ipv4] [ipv6] [verbose] Parameters ipv4: Display IPv4 routes. ipv6: Display IPv6 routes. verbose: Display more information (less concise, more detail). show serial Show serial status & statistics. Syntax show serial [port STRING] Digi IX15 Gateway User Guide...

  • Page 867: Show Scripts

    Show all IPsec tunnels. show surelink openvpn Show SureLink status & statistics for OpenVPN clients. Syntax show surelink openvpn [client STRING] [all] Parameters client: The name of the OpenVPN client. all: Show all OpenVPN clients. Digi IX15 Gateway User Guide...

  • Page 868: Show System

    Display more details and config data for a specific VRRP instance. all: Display all VRRP instances including disabled instances. verbose: Display all VRRP status and statistics including disabled instances. show web-filter Show web filter status & statistics. Digi IX15 Gateway User Guide...

  • Page 869: Speedtest

    [passphrase STRING] [remove <custom-defaults>] Parameters type: The type of backup file to create. Archives are full backups including generated SSH keys and dynamic DHCP lease information. CLI configuration backups are a list of CLI commands used to build Digi IX15 Gateway User Guide...

  • Page 870: System Disable-Cryptography

    Erase the device to restore to factory defaults. All configuration and automatically generated keys will be erased. Syntax system factory-erase Parameters None system find-me Find Me function to flash LEDs on this device to help users locate the unit. Syntax system find-me <state> Digi IX15 Gateway User Guide...

  • Page 871: System Firmware Ota Check

    Query the Digi firmware server for the latest device firmware version. Syntax system firmware ota check Parameters None system firmware ota list Query the Digi firmware server for a list of device firmware versions. Syntax system firmware ota list Parameters None system firmware ota update Perform FOTA (firmware-over-the-air) update.

  • Page 872: System Restore

    Stop an active running script. Scripts scheduled to run again will still run again (disable a script to prevent it from running again). Syntax system script stop <script> Parameters script: Script to stop. system serial clear Clears the serial log. Syntax system serial clear <port> Digi IX15 Gateway User Guide...

  • Page 873: System Serial Save

    <port> [size INTEGER] Parameters port: Serial port. size: Maximum size of serial log. (Default: 65536) system serial stop Start logging data on a serial port. Syntax system serial stop <port> Parameters port: Serial port. system support-report Digi IX15 Gateway User Guide...

  • Page 874: System Time Set

    Test the configured NTP server(s) for connectivity. This test will not affect the device's current local date and time. Syntax system time test Parameters None telnet Use Telnet protocol to log into a remote server. Syntax telnet <host> [port INTEGER] Digi IX15 Gateway User Guide...

  • Page 875: Traceroute

    Use ICMP ECHO for probes. nomap: Do not try to map IP addresses to host names when displaying them. bypass: Bypass the normal routing tables and send directly to a host on an attached network. xbee XBee commands. Digi IX15 Gateway User Guide...
  • Page 876 Show the read value in decimal, otherwise in hexadecimal. Syntax: BOOLEAN Default: False Optional: True xbee network clear Clear the XBee network cache. Parameters None xbee network export EXPORTDIR [description STRING] [name STRING] Export the XBee network to a file. Digi IX15 Gateway User Guide...
  • Page 877 Write a parameter value in a XBee node. Parameters XBEE-ID The XBee identifier (MAC or node identifier) of the XBee to write the parameter to. Syntax: STRING PARAMETER The parameter name to write. Syntax: STRING Digi IX15 Gateway User Guide...
  • Page 878 XBEE-ID PROFILE Update the XBee with a profile. Parameters XBEE-ID The XBee identifier (MAC or node identifier) of the XBee to update. Syntax: STRING PROFILE The path to the profile to update. Syntax: STRING Digi IX15 Gateway User Guide...
  • Page 879 View system and event logs Configure syslog servers Configure options for the event and system logs Analyze network traffic Use the ping command to troubleshoot network connections Use the traceroute command to diagnose IP routing problems Digi IX15 Gateway User Guide...

  • Page 880: Perform A Speedtest

    To perform a speedtest:    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 881 Attach the support report to any support requests.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 882: View System And Event Logs

    View System Logs    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the main menu, click System > Logs. The system log displays: 3. Limit the display in the system log by using the Find search tool.
  • Page 883 5. Click  to download the system log.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 884: View Event Logs

    6. Click  to download the event log.    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 885 Nov 26 22:01:25 info user name=admin~service=cli~state=closed~remote=192.168.1.2 > 5. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 886: Configure Syslog Servers

    You can configure remote syslog servers for storing event and system logs.    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed.
  • Page 887 5. Click Apply to save the configuration and apply the change.    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 888 (config system log remote 0)> protocol value (config system log remote 0)> where value is either tcp or udp. The default is udp. 6. Save the configuration and apply the change: (config)> save Configuration saved. > Digi IX15 Gateway User Guide...

  • Page 889: Configure Options For The Event And System Logs

    To change or disable the heartbeat interval, or to disable event categories, and to perform other log configuration:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. Digi IX15 Gateway User Guide...
  • Page 890 7. Enable Preserve system logs to save the current session's system log after a reboot. By default, the IX15 device erases system logs each time the device is powered off or rebooted. Note You should only enable Preserve system logs temporarily to debug issues.
  • Page 891 To disable the heartbeat interval, set the value to 0s 4. Enable preserve system logs functionality to save the current session's system log after a reboot. By default, the IX15 device erases system logs each time the device is powered off or rebooted.
  • Page 892 (config)> system log event dhcpserver status_interval value (config)> where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. For example, to set the status interval to ten minutes, enter either 10m or 600s: Digi IX15 Gateway User Guide...
  • Page 893 7. Save the configuration and apply the change: (config)> save Configuration saved. > 8. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device. Digi IX15 Gateway User Guide...

  • Page 894: Analyze Network Traffic

    Analyze network traffic Analyze network traffic The IX15 device includes a network analyzer tool that captures data traffic on any interface and decodes the captured data traffic for diagnostics. You can capture data traffic on multiple interfaces at the same time and define capture filters to reduce the captured data. You can capture up to 10 MB of data traffic in two 5 MB files per interface.

  • Page 895: Configure Packet Capture For The Network Analyzer

    To configure a packet capture configuration:    WebUI 1. Log into the IX15 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The Configuration window is displayed. 3. Click Network > Analyzer.
  • Page 896 Click Ignore this IP address or network if the filter should ignore packets from this IP address/network. By default, is option is disabled, which means that the filter will capture packets from this IP address/network. vi. Click  to add additional IP address/network filters. Digi IX15 Gateway User Guide...
  • Page 897 Click Ignore this VLAN if the filter should ignore packets that use this port. By default, is option is disabled, which means that the filter will capture packets that use this port. v. Click  to add additional VLAN filters. Digi IX15 Gateway User Guide...
  • Page 898 Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Save interval to ten minutes, enter 10m or 600s. 9. Click Apply to save the configuration and apply the change. Digi IX15 Gateway User Guide...
  • Page 899 Analyze network traffic    Command line 1. Log into the IX15 command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 900 (config network analyzer name filter protocol 0)> protocol ? IP protocol to capture or ignore: IP protocol to capture or ignore. Format: icmp icmpv6 igmp ospf other vrrp Current value: (config network analyzer name filter protocol 0)> Digi IX15 Gateway User Guide...
  • Page 901 (config network analyzer name filter port 0)> ignore true (config network analyzer name filter port 0)> By default, is option is set to false, which means that the filter will capture packets from this port. Digi IX15 Gateway User Guide...
  • Page 902 (config network analyzer name filter vlan 0)> ii. Set the VLAN that should be be captured or ignored: (config network analyzer name filter vlan 0)> vlan value (config network analyzer name filter vlan 0)> where value is number o the VLAN. Digi IX15 Gateway User Guide...
  • Page 903 Runs the script at a specified time of the day. If set_time is set, set the time that the script should run, using the format HH:MM: (config network analyzer name)> run_time HH:MM (config network analyzer name)> maintenance_time: The script will run during the system maintenance time window. Digi IX15 Gateway User Guide...

  • Page 904: Example Filters For Capturing Data Traffic

    Example IPv4 capture filters Capture traffic to and from IP host 192.168.1.1: ip host 192.168.1.1 Capture traffic from IP host 192.168.1.1: ip src host 192.168.1.1 Capture traffic to IP host 192.168.1.1: ip dst host 192.168.1.1 Digi IX15 Gateway User Guide...

  • Page 905: Capture Packets From The Command Line

    Save captured data traffic to a file. Clear captured data. Required configuration items A configured packet capture. See Configure packet capture for the network analyzer for packet capture configuration information. To start packet capture from the command line: Digi IX15 Gateway User Guide...

  • Page 906: Stop Capturing Packets

    Analyze network traffic    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 907: Show Captured Traffic Data

    To show captured data traffic:    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  • Page 908: Save Captured Data Traffic To A File

       Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI. Digi IX15 Gateway User Guide...

  • Page 909: Download Captured Data To Your Pc

    WebUI or from the command line by using the (secure copy file) command.    WebUI 1. Log into the IX15 WebUI as a user with Admin access. 2. On the menu, click System. Under Administration, click File System. The File System page appears. Digi IX15 Gateway User Guide...

  • Page 910: Clear Captured Data

    4. Select the saved analyzer report you want to download and click  (download).    Command line 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 911 To determine available packet capture configurations, use the ?: > anaylzer clear name ? name: Name of the capture filter to use. Format: test_capture capture_ping > anaylzer clear name Note You can remove data traffic saved to a file using the command. Digi IX15 Gateway User Guide...

  • Page 912: Use The Ping Command To Troubleshoot Network Connections

    Ping to check internet connection To check your internet connection: 1. Log into the IX15 command line as a user with Admin access. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
  • Page 913 Max wait for a response to a probe. (Default: 5) Example This example shows using traceroute to verify that the Digi IX15 Gateway device can route to host 8.8.8.8 (www.google.com) through the default gateway. The command output shows that 15 routing hops were required to reach the host: 1.
  • Page 914 Server Command Interface (SCI) This section describes using SCI with the IX15. Discover and retrieve the XBee network Retrieve XBee device settings Configure XBee device settings Retrieve XBee device settings Execute arbitrary commands Update an XBee device profile Reset an XBee device to factory defaults...

  • Page 915: Server Command Interface (Sci)

    Discover and retrieve the XBee network Discover and retrieve the XBee network The Digi Remote Manager API allows you to remotely retrieve the XBee network of your IX15. You can retrieve the current discovered network, perform a new discovery or clear the network before discovering it.

  • Page 916: Retrieve Xbee Device Settings

    </sci_reply> Retrieve XBee device settings The Digi Remote Manager API allows you to remotely retrieve the value of a predefined set of settings for an XBee device in a network. To do so: 1. Login to Digi Remote Manager: remotemanager.digi.com/ui/login.
  • Page 917 IX15's XBee device is used. 5. Click the Send button next to the URL field. 6. After a while, the Response Body field is populated with the response from the IX15 containing the list of settings and values for the XBee device: <sci_reply version="1.0">...

  • Page 918: Configure Xbee Device Settings

    Configure XBee device settings Retrieve XBee device settings The Digi Remote Manager API allows you to remotely set the value of a predefined set of settings for an XBee device of your network. To do so: 1. Login to Digi Remote Manager: remotemanager.digi.com/ui/login.

  • Page 919: Execute Arbitrary Commands

    Retrieve XBee device settings. 5. Click the Send button next to the URL field. 6. After a while, the Response Body field is populated with the response from the IX15 with an empty radio tag if the request was successful: <sci_reply version="1.0">...

  • Page 920: Set The Value Of An Xbee Setting

    If omitted, the configured XBee device read timeout is used. Click the Send button next to the URL field. After a while, the Response Body field is populated with the response from the IX15 containing the value of the requested setting: <sci_reply version="1.0">...

  • Page 921: Execute A Special Xbee Command

    If omitted, the configured XBee device read timeout is used. Click the Send button next to the URL field. After a while, the Response Body field populates with the response from the IX15 containing an empty radio_command tag if the request was successful: <sci_reply version="1.0">...

  • Page 922: Update An Xbee Device Profile

    Manager API. Before updating the profile, you need to make sure that the profile to update is located in the IX15 file system so that it can be applied. To remotely update the profile of an XBee device: 1. Login to Digi Remote Manager: remotemanager.digi.com/ui/login.

  • Page 923: Reset An Xbee Device To Factory Defaults

    64-bit address of the XBee device to apply the profile to. If omitted, the address of the IX15's XBee device is used. file attribute specifies the full path in the IX15 of the profile to apply to the XBee device. 5. Click the Send button next to the URL field.
  • Page 924 XBee device is used. Click the Send button next to the URL field. After a while, the Response Body field will be filled with the response from the IX15 contianing an empty set_factory_default tag if the process succeed: <sci_reply version="1.0">...

  • Page 925: Troubleshooting

    Troubleshooting This section covers common issues and troubleshooting information for the IX15. System log Recover the local XBee Digi IX15 Gateway User Guide...

  • Page 926: System Log

    You can configure the logging level of the XBee interface from the Device Configuration page: 1. Access the IX15 local web interface. a. Use an Ethernet cable to connect the IX15 to your local laptop or PC.  The factory default IP address is 192.168.2.1.

  • Page 927: Recover The Local Xbee

    Recover the local XBee Recover the local XBee If the local XBee of an IX15 does not respond because, for example, it has damaged firmware or the update process failed, the IX15 automatically tries to restore communication at startup. To recover a non-responding local XBee, reboot your IX15.
  • Page 928 7. Launch the xbeemgmt tool with the port that the XBee is attached to—/dev/ttyXBee—and the absolute path of the custom profile to use in the process: # xbeemgmt recover /dev/ttyXBee /etc/config/xbee-profiles/my_custom_ profile.xpro 8. When the process finishes, reboot the IX15. Digi IX15 Gateway User Guide...
  • Page 929 This section contains the following topics: Get the IX15 IP A remote XBee is not listed in the IX15 network PyCharm: My IX15 is not listed in Digi Device Selector Digi IX15 Gateway User Guide...

  • Page 930: Get The Ix15 Ip

    Get the IX15 IP Get the IX15 IP Use the CLI over the serial port to learn the IP assigned to your IX15: 1. Access to the CLI via serial. See Access the command line interface. 2. At the CLI prompt, you can get:...
  • Page 931 PyCharm: My IX15 is not listed in Digi Device Selector Digi IX15 Gateway User Guide...
  • Page 932 Digi IX15 regulatory and safety statements This section contains the following topics: RF exposure statement FCC (USA) exposure notice FCC Part 15 Class A Radio Frequency Interference (RFI) (FCC 15.105) European Community - CE Mark Declaration of Conformity (DoC) Maximum transmit power for radio frequencies...

  • Page 933: Rf Exposure Statement

    Radio Frequency Interference (RFI) (FCC 15.105) The Digi IX15 has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.

  • Page 934: Maximum Transmit Power For Radio Frequencies

    Digi IX15 regulatory and safety statements Maximum transmit power for radio frequencies Maximum transmit power for radio frequencies The following tables show the maximum transmit power for frequency bands. Cellular frequency bands Frequency bands Maximum transmit power Cellular LTE 700 MHz...

  • Page 935: Rohs Compliance Statement

    RoHS compliance statement RoHS compliance statement All Digi International Inc. products that are compliant with the RoHS Directive (EU Directive 2002/95/EC and subsequent amendments) are marked as RoHS COMPLIANT. RoHS COMPLIANT means that the substances restricted by the EU Directive 2002/95/EC and subsequent amendments of...

  • Page 936: Safety Statements

    PRUDENCE! Surface chaude! Pour éviter les brûlures lors de la manipulation de la surface de l'appareil, attendez au moins une demi-heure après avoir éteint l'appareil avant de manipuler la surface. Digi IX15 Gateway User Guide...

  • Page 937: Digi Ix15 Gateway Hazardous Locations Information

    Class I Division 2, Groups A,B,C,D Temperature Code: T4 WARNING! The Digi IX15 Gateway is suitable for use in Class I, Division 2, Groups A, B, C, and D or Non-hazardous locations only. These devices are open-type devices that are to be installed in a tool only accessible enclosure suitable for the environment.

  • Page 938: Special Safety Notes For Wireless Routers

    However, cellular-based products contain radio devices which require specific consideration. Take the time to read and understand the following guidance. Digi International assumes no liability for an end user’s failure to comply with these precautions.
  • Page 939 At the end of its life this product MUST NOT be mixed with other commercial waste for disposal. Check with the terms and conditions of your supplier for disposal information. Digi International Ltd WEEE Registration number: WEE/HF1515VU Digi IX15 Gateway User Guide...
  • Page 940 Safety warnings English Bulgarian--бъ л га рс ки Croatian--Hrvatski French--Français Greek--Ε λλην ικά Hungarian--Magyar Italian--Italiano Latvian--Latvietis Lithuanian--Lietuvis Polish--Polskie Portuguese--Português Slovak--Slovák Slovenian--Esloveno Spanish--Español Digi IX15 Gateway User Guide...

  • Page 941: English

    Do not power on the unit in any aircraft. Operation of this equipment in a residential environment could cause radio interference. For ambient temperatures above 60° C, this equipment must be installed in a Restricted Access Location only. Digi IX15 Gateway User Guide...

  • Page 942: Bulgarian--Бъ Л Га Рс Ки

    З а окол ни т е м пе ра т ури на д 60 ° C, т ов а оборудв а не т ря бв а да с е инс т а л ира с а м о на м я с т о с огра нич е н дос т ъ п. Digi IX15 Gateway User Guide...

  • Page 943: Croatian--Hrvatski

    ​ ​ j edinicu ni u jednom zrakoplovu. Rad ove opreme u stambenom okruženju mogao bi prouzročiti radio smetnje. Za okolne temperature iznad 60 ° C, ova oprema mora biti instalirana samo na mjestu s ograničenim pristupom. Digi IX15 Gateway User Guide...

  • Page 944: French--Français

    L'utilisation de cet équipement dans un environnement résidentiel peut provoquer des interférences radio. Pour des températures ambiantes supérieures à 60 °C, cet équipement doit être installé uniquement dans un emplacement à accès restreint. Digi IX15 Gateway User Guide...

  • Page 945: Greek--Ε Λλην Ικά

    Γ ια θερ μοκρ ασ ίες περ ιβάλλον τ ος άν ω τ ων 60 ° C, αυτ ός ο εξ οπλισ μός πρ έπει ν α εγ κατ ασ τ αθεί μόν ο σ ε θέσ η περ ιορ ισ μέν ης πρ όσ βασ ης Digi IX15 Gateway User Guide...

  • Page 946: Hungarian--Magyar

    60 ° C feletti környezeti hőmérséklet esetén ezt a berendezést csak korlátozott hozzáférésű helyre kell telepíteni. Az EZ04-IAG4-EXT és EZ04-IA00-EXT készletekhez mellékelt kiterjesztett hőmérsékletű, dugaszolható tápegység (76002079 /24000141) nem C1D2 tanúsítvánnyal rendelkezik, és nem használható C1D2 besorolású veszélyes helyeken. Digi IX15 Gateway User Guide...

  • Page 947: Italian--Italiano

    Il funzionamento di questa apparecchiatura in un ambiente residenziale potrebbe causare interferenze radio. Per temperature ambiente superiori a 60° C, questa apparecchiatura deve essere installata solo in un luogo ad accesso limitato. Digi IX15 Gateway User Guide...

  • Page 948: Latvian--Latvietis

    Iekārtai jābūt izslēgtai, ja notiek spridzināšana, sprādzienbīstama vide vai medicīnas vai dzīvības uzturēšanas aprīkojuma tuvumā. Nevienā lidmašīnā neieslēdziet ierīci. Šīs ierīces darbība dzīvojamā vidē var izraisīt radio traucējumus. Ja apkārtējā temperatūra pārsniedz 60 ° C, šī iekārta jāuzstāda tikai ierobežotas piekļuves vietā. Digi IX15 Gateway User Guide...

  • Page 949: Lithuanian--Lietuvis

    įrangos. Neįjunkite įrenginio jokiuose orlaiviuose. Naudojant šią įrangą gyvenamojoje aplinkoje, gali kilti radijo trukdžių. Esant aukštesnei nei 60 ° C aplinkos temperatūrai, ši įranga turi būti montuojama tik riboto patekimo vietoje. Digi IX15 Gateway User Guide...

  • Page 950: Polish--Polskie

    życie. Nie włączaj urządzenia w żadnym samolocie. Praca tego sprzętu w środowisku mieszkalnym może powodować zakłócenia radiowe. W przypadku temperatur otoczenia powyżej 60°C urządzenie to należy instalować wyłącznie w miejscach o ograniczonym dostępie. Digi IX15 Gateway User Guide...

  • Page 951: Portuguese--Português

    Não ligue a unidade em nenhuma aeronave. A operação deste equipamento em um ambiente residencial pode causar interferência de rádio. Para temperaturas ambientes acima de 60 ° C, este equipamento deve ser instalado apenas em locais de acesso restrito. Digi IX15 Gateway User Guide...

  • Page 952: Slovak--Slovák

    života. Jednotku nezapínajte v žiadnom lietadle. Prevádzka tohto zariadenia v obytnom prostredí by mohla spôsobiť rádiové rušenie. Pri teplotách okolia nad 60 ° C musí byť toto zariadenie inštalované iba na mieste s obmedzeným prístupom. Digi IX15 Gateway User Guide...

  • Page 953: Slovenian--Esloveno

    življenja. Enote ne vklopite v nobenem letalu. Delovanje te opreme v stanovanjskem okolju lahko povzroči radijske motnje. Pri temperaturah okolice nad 60 ° C mora biti ta oprema nameščena samo na lokaciji z omejenim dostopom. Digi IX15 Gateway User Guide...

  • Page 954: Spanish--Español

    El funcionamiento de este equipo en un entorno residencial puede provocar interferencias de radio. Para temperaturas ambiente superiores a 60 ° C, este equipo debe instalarse únicamente en una ubicación de acceso restringido. Digi IX15 Gateway User Guide...

  • Page 955: Digi Ix15 Certifications

    International EMC (Electromagnetic Compatibility) and safety standards This product complies with the requirements of the following Electromagnetic Compatibility standards. There are no user-serviceable parts inside the product. Contact your Digi representative for repair information. Certification category Standards EN 301 489-1 V2.1.1 (2017-02)

Table of Contents