Digi Connect IT 4

To Next Page

To Previous Page

Routing

This chapter contains the following topics:

IP routing 257

Show the routing table 275

Dynamic DNS 276

Virtual Router Redundancy Protocol (VRRP) 281

Digi Connect IT® 4 User Guide

256

Main Page

Table of Contents7
Digi Connect IT® 4 User Guide18
Get Started with Connect IT19
Verify Product Components20
Included Equipment20
Required Additional Equipment21
Cellular ONLY: Insert the CORE Module21
Prerequisites22
Connect the Hardware to a Network23
Connect Hardware and Connect to a Cellular Network23
Connect Hardware and Connect to Site Network Using an Ethernet LAN23
Connect Equipment to the Connect IT Serial Ports24
Serial Port Pinout and Use24
Firmware Configuration27
Review Connect IT 4 Default Settings27
Local Webui27
Digi Remote Manager27
Default Interface Configuration27
Other Default Configuration Settings28
Change the Default Password for the Admin User28
Configuration Methods30
Using Digi Remote Manager31
Access Digi Remote Manager31
Using the Local Web Interface31
Log out of the Web Interface32
Use the Local REST API to Configure the Connect IT 4 Device32
Use the GET Method to Return Device Configuration Information32
Use the POST Method to Modify Device Configuration Parameters and List Arrays34
Use the DELETE Method to Remove Items from a List Array35
Access the Terminal Screen from the Web UI36
Using the Command Line38
Access the Command Line Interface38
Log in to the Command Line Interface38
Exit the Command Line Interface39
Configure Remote Power Management40
Configure Communication between the Connect IT, Power Controller, and a Device40
Create an Access Control to Specify Which Users Can Access Which Outlets40
Manage Power to the Power Controller Outlets40
Configure the Connect IT to Connect to a Power Controller Using a Serial Port41
Configure a Serial Port for Power Management41
Connect a Power Controller to the Connect IT Serial Port42
Configure the Power Controller and the Outlets for Use with a Serial Port on the Connect IT42
Connect a 3Rd-Party Device to the Connect IT Serial Port and the Power Controller43
Configure the Connect IT to Connect to a Power Controller Using the Network44
Configure Communication with a Power Controller Using the Network44
Connect the Connect IT to Your Network45
Connect a 3Rd-Party Device to a Serial Port on the Connect IT and then to the Power Controller45
Create an Access Control Group for Power Management and Assign to Users46
Manage the Power to the Power Controller Outlets from the Connect IT47
Control the Outlet Power from a Terminal (All Users)47
View Power Controller Status and Manage Power (Administrators)47
Control the Outlet Power from the Serial Status Page48
Configure Connect IT Features49
Configure Automatic Detection49
Configure Automatic Detection from the Web UI49
Configure Automatic Detection from the Script50
Configure Data Pattern Matching51
Send Email Notification And/Or an SNMP Trap When an Event Occurs52
Configure Email Event Notification52
Configure an SNMP Trap53
Interfaces54
Wide Area Networks (Wans)55
Wide Area Networks (Wans) and Wireless Wide Area Networks (Wwans)56
Configure WAN/WWAN Priority and Default Route Metrics56
WAN/WWAN Failover59
Configure Surelink Active Recovery to Detect WAN/WWAN Failures60
Configure the Device to Reboot When a Failure Is Detected77
Disable Surelink90
Example: Use a Ping Test for WAN Failover from Ethernet to Cellular99
Using Ethernet Devices in a WAN101
Using Cellular Modems in a Wireless WAN (WWAN)102
Configure a Wide Area Network (WAN)125
Configure a Wireless Wide Area Network (WWAN)133
Show WAN and WWAN Status and Statistics143
Delete a WAN or WWAN145
Default Outbound WAN/WWAN Ports146
Local Area Networks (Lans)147
About Local Area Networks (Lans)148
Configure a Local Area Network (LAN)148
Configure the WAN Port as a LAN or in a Bridge155
Change the Default LAN Subnet163
Show LAN Status and Statistics165
Delete a LAN166
DHCP Servers168
Default Services Listening on LAN Ports185
Configure an Interface to Operate in Passthrough Mode186
Virtual Lans (Vlans)191
Create a Trunked VLAN Route193
Create a VLAN Using Switchport Mode194
Bridging197
Edit the Preconfigured LAN Bridge198
Configure a Bridge201
Show Surelink Status and Statistics203
Show Surelink State204
Show Surelink Status for All Interfaces204
Show Surelink Status for a Specific Interface205
Show Surelink Status for All Ipsec Tunnels205
Show Surelink Status for a Specific Ipsec Tunnel206
Show Surelink Status for All Openvpn Clients206
Show Surelink Status for a Specific Openvpn Client207
Serial Port208
Default Serial Port Configuration208
Serial Mode Options208
View Serial Port Information208
Configure Login Mode209
Configure Remote Access Mode212
Configure Power Management Mode229
Configure PPP Dial-In Mode231
Configure UDP Serial Mode238
Configure Modbus Mode249
Show Serial Status and Statistics252
Serial Status Page252
Review the Serial Port Message Log254
Routing256
IP Routing257
Configure a Static Route258
Delete a Static Route261
Policy-Based Routing263
Configure a Routing Policy263
Routing Services272
Configure Routing Services272
Show the Routing Table275
Dynamic DNS276
Configure Dynamic DNS276
Virtual Router Redundancy Protocol (VRRP)281
Vrrp281
Configure VRRP281
Configure VRRP285
Example: VRRP/VRRP+ Configuration293
Configure Device One (Master Device)293
Configure Device Two (Backup Device)297
Show VRRP Status and Statistics303
Virtual Private Networks (VPN)306
Ipsec307
Ipsec Data Protection307
Ipsec Mode307
Ipsec Modes307
Internet Key Exchange (IKE) Settings307
Authentication308
Configure an Ipsec Tunnel308
Configure Ipsec Failover336
Configure Surelink Active Recovery for Ipsec339
Show Ipsec Status and Statistics355
Debug an Ipsec Configuration356
Configure a Simple Certificate Enrollment Protocol Client358
Example: SCEP Client Configuration with Fortinet SCEP Server364
Show SCEP Client Status and Information369
Openvpn372
Configure an Openvpn Server373
Configure an Openvpn Authentication Group and User382
Configure an Openvpn Client by Using an .Ovpn File386
Configure an Openvpn Client Without Using an .Ovpn File389
Configure Surelink Active Recovery for Openvpn393
Show Openvpn Server Status and Statistics409
Show Openvpn Client Status and Statistics410
Generic Routing Encapsulation (GRE)412
Configuring a GRE Tunnel412
Show GRE Tunnels417
Example: GRE Tunnel over an Ipsec Tunnel418
Dynamic Multipoint VPN (DMVPN)433
Configure a DMVPN Spoke434
L2Tp440
Configure a PPP-Over-L2TP Tunnel440
L2TP with Ipsec450
Show L2TP Tunnel Status450
L2Tpv3 Ethernet452
Configure an L2Tpv3 Tunnel452
Show L2TPV3 Tunnel Status457
Nemo458
Configure a NEMO Tunnel458
Show NEMO Status464
Allow Remote Access for Web Administration and SSH467
Configure the Web Administration Service470
Configure SSH Access481
Use SSH with Key Authentication488
Generating SSH Key Pairs488
Configure Telnet Access491
Configure DNS496
Show DNS Server502
Simple Network Management Protocol (SNMP)503
SNMP Security503
Configure Simple Network Management Protocol (SNMP)503
Download Mibs508
Location Information509
Configure the Location Service510
Configure the Device to Use a User-Defined Static Location512
Configure the Device to Accept Location Messages from External Sources514
Forward Location Information to a Remote Host518
Configure Geofencing525
Show Location Information537
Modbus Gateway538
Configure the Modbus Gateway539
Show Modbus Gateway Status and Statistics552
System Time556
Configure the System Time556
Manually Set the System Date and Time560
Network Time Protocol560
Configure the Device as an NTP Server561
Show Status and Statistics of the NTP Server566
Configure a Multicast Route567
Ethernet Network Bonding570
Enable Service Discovery (Mdns)574
Use the Iperf Service578
Example Performance Test Using Iperf3582
Configure the Ping Responder Service583
Example Performance Test Using Iperf3586
Develop Python Applications589
Set up the Connect IT 4 for Python Development590
Create and Test a Python Application590
Python Modules594
Set up the Connect IT 4 to Automatically Run Your Applications629
Configure Scripts to Run Automatically629
Show Script Information636
Stop a Script that Is Currently Running637
Start an Interactive Python Session638
Run a Python Application at the Shell Prompt639
Configure Scripts to Run Manually640
Task One: Upload the Application641
Task Two: Configure the Application to Run Automatically642
Start a Manual Script646
User Authentication649
Connect IT 4 User Authentication649
User Authentication Methods649
Add a New Authentication Method651
Delete an Authentication Method653
Rearrange the Position of Authentication Methods654
Authentication Groups656
Change the Access Rights for a Predefined Group658
Add an Authentication Group660
Delete an Authentication Group664
Local Users666
Change a Local User's Password667
Configure a Local User669
Delete a Local User677
Terminal Access Controller Access-Control System Plus (TACACS+)679
TACACS+ User Configuration680
TACACS+ Server Failover and Fallback to Local Authentication681
Configure Your Connect IT 4 Device to Use a TACACS+ Server681
Remote Authentication Dial-In User Service (RADIUS)686
RADIUS User Configuration687
RADIUS Server Failover and Fallback to Local Configuration687
Configure Your Connect IT 4 Device to Use a RADIUS Server688
Ldap691
LDAP User Configuration693
LDAP Server Failover and Fallback to Local Configuration694
Configure Your Connect IT 4 Device to Use an LDAP Server694
Configure Serial Authentication699
Disable Shell Access701
Set the Idle Timeout for Connect IT 4 Users703
Example User Configuration705
Example 1: Administrator User with Local Authentication705
Example 2: RADIUS, TACACS+, and Local Authentication for One User707
Firewall Configuration719
Create a Custom Firewall Zone719
Configure the Firewall Zone for a Network Interface721
Delete a Custom Firewall Zone722
Port Forwarding Rules724
Configure Port Forwarding724
Delete a Port Forwarding Rule729
Packet Filtering732
Configure Packet Filtering732
Enable or Disable a Packet Filtering Rule736
Delete a Packet Filtering Rule737
Configure Custom Firewall Rules739
Configure Quality of Service Options741
Web Filtering752
Configure Web Filtering with Cisco Umbrella752
Configure Web Filtering with Manual DNS Servers755
Verify Your Web Filtering Configuration757
Show Web Filter Service Information760
System Administration761
Review Device Status762
Configure System Information763
Update System Firmware765
Manage Firmware Updates Using Digi Remote Manager765
Certificate Management for Firmware Images766
Downgrading766
Dual Boot Behavior770
Update Cellular Module Firmware771
Update Modem Firmware over the Air (OTA)772
Update Modem Firmware by Using a Local Firmware File773
Reboot Your Connect IT 4 Device774
Reboot Your Device Immediately775
Schedule Reboots of Your Device775
Erase Device Configuration and Reset to Factory Defaults777
Custom Factory Default Settings780
Locate the Device by Using the Find Me Feature783
Configuration Files785
Save Configuration Changes785
Save Configuration to a File786
Restore the Device Configuration787
Schedule System Maintenance Tasks790
Disable Device Encryption795
Re-Enable Cryptography after It Has Been Disabled796
Configure the Speed of Your Ethernet Ports798
Configure the System Watchdog800
Intelliflow804
Enable Intelliflow805
Configure Service Types807
Configure Domain Name Groups809
Use Intelliflow to Display Average CPU and RAM Usage812
Use Intelliflow to Display Top Data Usage Information813
Use Intelliflow to Display Data Usage by Host over Time815
Configure Netflow Probe816
Central Management821
Digi Remote Manager Support822
Certificate-Based Enhanced Security822
Configure Your Device for Digi Remote Manager Support822
Collect Device Health Data and Set the Sample Interval829
Enable Event Log Upload to Digi Remote Manager832
Log into Digi Remote Manager834
Use Digi Remote Manager to View and Manage Your Device835
Add a Device to Digi Remote Manager835
Configure Multiple Connect IT 4 Devices by Using Digi Remote Manager Configurations836
View Digi Remote Manager Connection Status837
Learn more837
File System838
The Connect IT 4 Local File System839
Display Directory Contents839
Create a Directory840
Display File Contents841
Copy a File or Directory841
Move or Rename a File or Directory842
Delete a File or Directory843
Upload and Download Files844
Upload and Download Files by Using the Webui844
Upload and Download Files by Using the Secure Copy Command845
Upload and Download Files Using SFTP846
Perform a Speedtest849
Generate a Support Report849
Support Report Overview850
View System and Event Logs854
View System Logs854
View Event Logs856
Configure Syslog Servers859
Configure Options for the Event and System Logs861
Analyze Network Traffic866
Configure Packet Capture for the Network Analyzer867
Example Filters for Capturing Data Traffic876
Capture Packets from the Command Line877
Stop Capturing Packets878
Show Captured Traffic Data879
Save Captured Data Traffic to a File880
Download Captured Data to Your PC881
Clear Captured Data882
Use the Ping Command to Troubleshoot Network Connections884
Ping to Check Internet Connection884
Stop Ping Commands884
Use the Traceroute Command to Diagnose IP Routing Problems884
Connect IT 4 Hardware and Leds886
Front Panel and Leds886
Back Panel887
LTE Status Indicators888
Signal Strength888
Exchange Power Tips889
Select SIM Card889
QR Code Definition890
Troubleshooting891
Tips for Improving Cellular Signal Strength891
Download a Support Report891
Regulatory and Safety Information892
FCC Certifications892
Usa892
Industry Canada - Can Ices-3(A)/Nmb-3(A)892
European Union892
Ifetel892
Caution Statements892
English895
Bulgarian--Български896
Croatian--Hrvatski897
French--Français898
Greek--Ελληνικά899
ע ִב ר ִ ית‬Hebrew900
Hungarian--Magyar901
Italian--Italiano902
Latvian--Latvietis903
Lithuanian--Lietuvis904
Polish--Polskie905
Portuguese--Português906
Slovak--Slovák907
Slovenian--Esloveno908
Spanish--Español909
Command Line Interface910
Access the Command Line Interface911
Log in to the Command Line Interface911
Exit the Command Line Interface912
Execute a Command from the Web Interface912
Display Help for Commands and Parameters914
The Help Command914
The Question Mark (?) Command914
Display Help for Individual Commands915
Use the Tab Key or the Space Bar to Display Abbreviated Help916
Auto-Complete Commands and Parameters916
Available Commands917
Use the Scp Command918
Display Status and Statistics Using the Show Command920
Show Config920
Show System920
Show Network921
Device Configuration Using the Command Line Interface921
Execute Configuration Commands at the Root Admin CLI Prompt921
Display Help for the Config Command from the Root Admin CLI Prompt922
Configuration Mode923
Enable Configuration Mode923
Enter Configuration Commands in Configuration Mode923
Save Changes and Exit Configuration Mode924
Exit Configuration Mode Without Saving Changes924
Configuration Actions925
Display Command Line Help in Configuration Mode925
Move Within the Configuration Schema928
Manage Elements in Lists929
The Revert Command931
Enter Strings in Configuration Commands933
Example: Create a New User by Using the Command Line933
Command Line Reference936
Analyzer Clear937
Analyzer Save938
Analyzer Start938
Analyzer Stop938
Clear Dhcp-Lease Ip-Address938
Clear Dhcp-Lease Mac939
Grep939
Help939
Mkdir941
Modem at941
Modem At-Interactive941
Modem Firmware Check941
Modem Firmware List941
Modem Firmware Ota Check942
Modem Firmware Ota Download942
Modem Firmware Ota List942
Modem Firmware Ota Update942
Modem Firmware Update943
Modem Pin Change943
Modem Pin Disable943
Modem Pin Enable944
Modem Pin Status944
Modem Pin Unlock944
Modem Puk Status944
Modem Puk Unlock945
Modem Reset945
Modem Scan945
Modem Sim-Slot945
Monitoring946
Monitoring Metrics Upload946
More946
Ping947
Poweroff947
Reboot947
Scp949
Show Analyzer949
Show Arp949
Show Cloud949
Show Config950
Show Dhcp-Lease950
Show Dns950
Show Eth950
Show Event950
Show Hotspot951
Show Ipsec951
Show L2Tp Lac951
Show L2Tp Lns951
Show L2Tpeth952
Show Location952
Show Log952
Show Manufacture952
Show Modbus-Gateway952
Show Modem953
Show Mqtt953
Show Nemo953
Show Network953
Show Ntp954
Show Openvpn Client954
Show Openvpn Server954
Show Route954
Show Scep-Client955
Show Scripts955
Show Serial955
Show Surelink Interface955
Show Surelink Ipsec955
Show Surelink Openvpn956
Show Surelink State956
Show System956
Show Usb956
Show Version957
Show Vrrp957
Show Web-Filter957
Speedtest957
Ssh958
System Backup958
System Disable-Cryptography958
System Duplicate-Firmware959
System Factory-Erase959
System Find-Me959
System Firmware Ota Check959
System Firmware Ota List959
System Firmware Ota Update960
System Firmware Update960
System Power Ignition Off_Delay960
System Restore960
System Script Start961
System Script Stop961
System Serial Restart961
System Serial Save961
System Serial Show961
System Support-Report962
System Time Set962
System Time Sync962
System Time Test962
Tail963
Telnet963
Traceroute963

Digi Connect IT 4

Table of Contents

Related product manuals