Home
Digi
Network Router
Connect IT 4
Digi Connect IT 4 User Manual
4
of 1
of 1 rating
964 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
V
irtual
Privat
e
N
e
tw
or
k
s
(V
PN
)
Gene
r
ic
Rout
ing
E
nc
aps
ula
ti
on
(G
R
E)
Digi
C
onnect
I
T
®
4
Us
er
Guide
4
1
7
S
h
o
w
GR
E
tun
n
e
ls
To
vi
e
w
in
f
ormat
io
n
a
bo
ut
cu
r
r
e
ntly
co
nfi
gur
e
d
G
R
Et
un
nels
:
Web
1
.
L
og
into
t
he
C
onn
e
ct
I
T
4
W
e
b
U
I
as
a
us
e
r
w
it
h
Ad
min
acce
s
s
.
2
.
On
t
he
me
nu,
cl
ic
k
S
tatu
s
>
IP
tun
n
el
s
.
Th
e
IP
Tun
n
el
s
p
ag
e
app
e
ar
s
.
3
.
To
vi
e
w
con
f
igurat
io
n
det
ail
s
a
b
ou
t
a
GR
E
t
un
nel,
cl
ick
t
he
(con
figura
t
io
n)
ic
on
i
n
t
he
up
p
e
r
r
ight
of
t
he
t
un
nel'
s
s
t
at
us
p
ane
.
416
418
Table of Contents
Table of Contents
7
Digi Connect IT® 4 User Guide
18
Get Started with Connect IT
19
Verify Product Components
20
Included Equipment
20
Required Additional Equipment
21
Cellular ONLY: Insert the CORE Module
21
Prerequisites
22
Connect the Hardware to a Network
23
Connect Hardware and Connect to a Cellular Network
23
Connect Hardware and Connect to Site Network Using an Ethernet LAN
23
Connect Equipment to the Connect IT Serial Ports
24
Serial Port Pinout and Use
24
Firmware Configuration
27
Review Connect IT 4 Default Settings
27
Local Webui
27
Digi Remote Manager
27
Default Interface Configuration
27
Other Default Configuration Settings
28
Change the Default Password for the Admin User
28
Configuration Methods
30
Using Digi Remote Manager
31
Access Digi Remote Manager
31
Using the Local Web Interface
31
Log out of the Web Interface
32
Use the Local REST API to Configure the Connect IT 4 Device
32
Use the GET Method to Return Device Configuration Information
32
Use the POST Method to Modify Device Configuration Parameters and List Arrays
34
Use the DELETE Method to Remove Items from a List Array
35
Access the Terminal Screen from the Web UI
36
Using the Command Line
38
Access the Command Line Interface
38
Log in to the Command Line Interface
38
Exit the Command Line Interface
39
Configure Remote Power Management
40
Configure Communication between the Connect IT, Power Controller, and a Device
40
Create an Access Control to Specify Which Users Can Access Which Outlets
40
Manage Power to the Power Controller Outlets
40
Configure the Connect IT to Connect to a Power Controller Using a Serial Port
41
Configure a Serial Port for Power Management
41
Connect a Power Controller to the Connect IT Serial Port
42
Configure the Power Controller and the Outlets for Use with a Serial Port on the Connect IT
42
Connect a 3Rd-Party Device to the Connect IT Serial Port and the Power Controller
43
Configure the Connect IT to Connect to a Power Controller Using the Network
44
Configure Communication with a Power Controller Using the Network
44
Connect the Connect IT to Your Network
45
Connect a 3Rd-Party Device to a Serial Port on the Connect IT and then to the Power Controller
45
Create an Access Control Group for Power Management and Assign to Users
46
Manage the Power to the Power Controller Outlets from the Connect IT
47
Control the Outlet Power from a Terminal (All Users)
47
View Power Controller Status and Manage Power (Administrators)
47
Control the Outlet Power from the Serial Status Page
48
Configure Connect IT Features
49
Configure Automatic Detection
49
Configure Automatic Detection from the Web UI
49
Configure Automatic Detection from the Script
50
Configure Data Pattern Matching
51
Send Email Notification And/Or an SNMP Trap When an Event Occurs
52
Configure Email Event Notification
52
Configure an SNMP Trap
53
Interfaces
54
Wide Area Networks (Wans)
55
Wide Area Networks (Wans) and Wireless Wide Area Networks (Wwans)
56
Configure WAN/WWAN Priority and Default Route Metrics
56
WAN/WWAN Failover
59
Configure Surelink Active Recovery to Detect WAN/WWAN Failures
60
Configure the Device to Reboot When a Failure Is Detected
77
Disable Surelink
90
Example: Use a Ping Test for WAN Failover from Ethernet to Cellular
99
Using Ethernet Devices in a WAN
101
Using Cellular Modems in a Wireless WAN (WWAN)
102
Configure a Wide Area Network (WAN)
125
Configure a Wireless Wide Area Network (WWAN)
133
Show WAN and WWAN Status and Statistics
143
Delete a WAN or WWAN
145
Default Outbound WAN/WWAN Ports
146
Local Area Networks (Lans)
147
About Local Area Networks (Lans)
148
Configure a Local Area Network (LAN)
148
Configure the WAN Port as a LAN or in a Bridge
155
Change the Default LAN Subnet
163
Show LAN Status and Statistics
165
Delete a LAN
166
DHCP Servers
168
Default Services Listening on LAN Ports
185
Configure an Interface to Operate in Passthrough Mode
186
Virtual Lans (Vlans)
191
Create a Trunked VLAN Route
193
Create a VLAN Using Switchport Mode
194
Bridging
197
Edit the Preconfigured LAN Bridge
198
Configure a Bridge
201
Show Surelink Status and Statistics
203
Show Surelink State
204
Show Surelink Status for All Interfaces
204
Show Surelink Status for a Specific Interface
205
Show Surelink Status for All Ipsec Tunnels
205
Show Surelink Status for a Specific Ipsec Tunnel
206
Show Surelink Status for All Openvpn Clients
206
Show Surelink Status for a Specific Openvpn Client
207
Serial Port
208
Default Serial Port Configuration
208
Serial Mode Options
208
View Serial Port Information
208
Configure Login Mode
209
Configure Remote Access Mode
212
Configure Power Management Mode
229
Configure PPP Dial-In Mode
231
Configure UDP Serial Mode
238
Configure Modbus Mode
249
Show Serial Status and Statistics
252
Serial Status Page
252
Review the Serial Port Message Log
254
Routing
256
IP Routing
257
Configure a Static Route
258
Delete a Static Route
261
Policy-Based Routing
263
Configure a Routing Policy
263
Routing Services
272
Configure Routing Services
272
Show the Routing Table
275
Dynamic DNS
276
Configure Dynamic DNS
276
Virtual Router Redundancy Protocol (VRRP)
281
Vrrp
281
Configure VRRP
281
Configure VRRP
285
Example: VRRP/VRRP+ Configuration
293
Configure Device One (Master Device)
293
Configure Device Two (Backup Device)
297
Show VRRP Status and Statistics
303
Virtual Private Networks (VPN)
306
Ipsec
307
Ipsec Data Protection
307
Ipsec Mode
307
Ipsec Modes
307
Internet Key Exchange (IKE) Settings
307
Authentication
308
Configure an Ipsec Tunnel
308
Configure Ipsec Failover
336
Configure Surelink Active Recovery for Ipsec
339
Show Ipsec Status and Statistics
355
Debug an Ipsec Configuration
356
Configure a Simple Certificate Enrollment Protocol Client
358
Example: SCEP Client Configuration with Fortinet SCEP Server
364
Show SCEP Client Status and Information
369
Openvpn
372
Configure an Openvpn Server
373
Configure an Openvpn Authentication Group and User
382
Configure an Openvpn Client by Using an .Ovpn File
386
Configure an Openvpn Client Without Using an .Ovpn File
389
Configure Surelink Active Recovery for Openvpn
393
Show Openvpn Server Status and Statistics
409
Show Openvpn Client Status and Statistics
410
Generic Routing Encapsulation (GRE)
412
Configuring a GRE Tunnel
412
Show GRE Tunnels
417
Example: GRE Tunnel over an Ipsec Tunnel
418
Dynamic Multipoint VPN (DMVPN)
433
Configure a DMVPN Spoke
434
L2Tp
440
Configure a PPP-Over-L2TP Tunnel
440
L2TP with Ipsec
450
Show L2TP Tunnel Status
450
L2Tpv3 Ethernet
452
Configure an L2Tpv3 Tunnel
452
Show L2TPV3 Tunnel Status
457
Nemo
458
Configure a NEMO Tunnel
458
Show NEMO Status
464
Allow Remote Access for Web Administration and SSH
467
Configure the Web Administration Service
470
Configure SSH Access
481
Use SSH with Key Authentication
488
Generating SSH Key Pairs
488
Configure Telnet Access
491
Configure DNS
496
Show DNS Server
502
Simple Network Management Protocol (SNMP)
503
SNMP Security
503
Configure Simple Network Management Protocol (SNMP)
503
Download Mibs
508
Location Information
509
Configure the Location Service
510
Configure the Device to Use a User-Defined Static Location
512
Configure the Device to Accept Location Messages from External Sources
514
Forward Location Information to a Remote Host
518
Configure Geofencing
525
Show Location Information
537
Modbus Gateway
538
Configure the Modbus Gateway
539
Show Modbus Gateway Status and Statistics
552
System Time
556
Configure the System Time
556
Manually Set the System Date and Time
560
Network Time Protocol
560
Configure the Device as an NTP Server
561
Show Status and Statistics of the NTP Server
566
Configure a Multicast Route
567
Ethernet Network Bonding
570
Enable Service Discovery (Mdns)
574
Use the Iperf Service
578
Example Performance Test Using Iperf3
582
Configure the Ping Responder Service
583
Example Performance Test Using Iperf3
586
Develop Python Applications
589
Set up the Connect IT 4 for Python Development
590
Create and Test a Python Application
590
Python Modules
594
Set up the Connect IT 4 to Automatically Run Your Applications
629
Configure Scripts to Run Automatically
629
Show Script Information
636
Stop a Script that Is Currently Running
637
Start an Interactive Python Session
638
Run a Python Application at the Shell Prompt
639
Configure Scripts to Run Manually
640
Task One: Upload the Application
641
Task Two: Configure the Application to Run Automatically
642
Start a Manual Script
646
User Authentication
649
Connect IT 4 User Authentication
649
User Authentication Methods
649
Add a New Authentication Method
651
Delete an Authentication Method
653
Rearrange the Position of Authentication Methods
654
Authentication Groups
656
Change the Access Rights for a Predefined Group
658
Add an Authentication Group
660
Delete an Authentication Group
664
Local Users
666
Change a Local User's Password
667
Configure a Local User
669
Delete a Local User
677
Terminal Access Controller Access-Control System Plus (TACACS+)
679
TACACS+ User Configuration
680
TACACS+ Server Failover and Fallback to Local Authentication
681
Configure Your Connect IT 4 Device to Use a TACACS+ Server
681
Remote Authentication Dial-In User Service (RADIUS)
686
RADIUS User Configuration
687
RADIUS Server Failover and Fallback to Local Configuration
687
Configure Your Connect IT 4 Device to Use a RADIUS Server
688
Ldap
691
LDAP User Configuration
693
LDAP Server Failover and Fallback to Local Configuration
694
Configure Your Connect IT 4 Device to Use an LDAP Server
694
Configure Serial Authentication
699
Disable Shell Access
701
Set the Idle Timeout for Connect IT 4 Users
703
Example User Configuration
705
Example 1: Administrator User with Local Authentication
705
Example 2: RADIUS, TACACS+, and Local Authentication for One User
707
Firewall Configuration
719
Create a Custom Firewall Zone
719
Configure the Firewall Zone for a Network Interface
721
Delete a Custom Firewall Zone
722
Port Forwarding Rules
724
Configure Port Forwarding
724
Delete a Port Forwarding Rule
729
Packet Filtering
732
Configure Packet Filtering
732
Enable or Disable a Packet Filtering Rule
736
Delete a Packet Filtering Rule
737
Configure Custom Firewall Rules
739
Configure Quality of Service Options
741
Web Filtering
752
Configure Web Filtering with Cisco Umbrella
752
Configure Web Filtering with Manual DNS Servers
755
Verify Your Web Filtering Configuration
757
Show Web Filter Service Information
760
System Administration
761
Review Device Status
762
Configure System Information
763
Update System Firmware
765
Manage Firmware Updates Using Digi Remote Manager
765
Certificate Management for Firmware Images
766
Downgrading
766
Dual Boot Behavior
770
Update Cellular Module Firmware
771
Update Modem Firmware over the Air (OTA)
772
Update Modem Firmware by Using a Local Firmware File
773
Reboot Your Connect IT 4 Device
774
Reboot Your Device Immediately
775
Schedule Reboots of Your Device
775
Erase Device Configuration and Reset to Factory Defaults
777
Custom Factory Default Settings
780
Locate the Device by Using the Find Me Feature
783
Configuration Files
785
Save Configuration Changes
785
Save Configuration to a File
786
Restore the Device Configuration
787
Schedule System Maintenance Tasks
790
Disable Device Encryption
795
Re-Enable Cryptography after It Has Been Disabled
796
Configure the Speed of Your Ethernet Ports
798
Configure the System Watchdog
800
Intelliflow
804
Enable Intelliflow
805
Configure Service Types
807
Configure Domain Name Groups
809
Use Intelliflow to Display Average CPU and RAM Usage
812
Use Intelliflow to Display Top Data Usage Information
813
Use Intelliflow to Display Data Usage by Host over Time
815
Configure Netflow Probe
816
Central Management
821
Digi Remote Manager Support
822
Certificate-Based Enhanced Security
822
Configure Your Device for Digi Remote Manager Support
822
Collect Device Health Data and Set the Sample Interval
829
Enable Event Log Upload to Digi Remote Manager
832
Log into Digi Remote Manager
834
Use Digi Remote Manager to View and Manage Your Device
835
Add a Device to Digi Remote Manager
835
Configure Multiple Connect IT 4 Devices by Using Digi Remote Manager Configurations
836
View Digi Remote Manager Connection Status
837
Learn more
837
File System
838
The Connect IT 4 Local File System
839
Display Directory Contents
839
Create a Directory
840
Display File Contents
841
Copy a File or Directory
841
Move or Rename a File or Directory
842
Delete a File or Directory
843
Upload and Download Files
844
Upload and Download Files by Using the Webui
844
Upload and Download Files by Using the Secure Copy Command
845
Upload and Download Files Using SFTP
846
Perform a Speedtest
849
Generate a Support Report
849
Support Report Overview
850
View System and Event Logs
854
View System Logs
854
View Event Logs
856
Configure Syslog Servers
859
Configure Options for the Event and System Logs
861
Analyze Network Traffic
866
Configure Packet Capture for the Network Analyzer
867
Example Filters for Capturing Data Traffic
876
Capture Packets from the Command Line
877
Stop Capturing Packets
878
Show Captured Traffic Data
879
Save Captured Data Traffic to a File
880
Download Captured Data to Your PC
881
Clear Captured Data
882
Use the Ping Command to Troubleshoot Network Connections
884
Ping to Check Internet Connection
884
Stop Ping Commands
884
Use the Traceroute Command to Diagnose IP Routing Problems
884
Connect IT 4 Hardware and Leds
886
Front Panel and Leds
886
Back Panel
887
LTE Status Indicators
888
Signal Strength
888
Exchange Power Tips
889
Select SIM Card
889
QR Code Definition
890
Troubleshooting
891
Tips for Improving Cellular Signal Strength
891
Download a Support Report
891
Regulatory and Safety Information
892
FCC Certifications
892
Usa
892
Industry Canada - Can Ices-3(A)/Nmb-3(A)
892
European Union
892
Ifetel
892
Caution Statements
892
English
895
Bulgarian--Български
896
Croatian--Hrvatski
897
French--Français
898
Greek--Ελληνικά
899
ע ִב ר ִ יתHebrew
900
Hungarian--Magyar
901
Italian--Italiano
902
Latvian--Latvietis
903
Lithuanian--Lietuvis
904
Polish--Polskie
905
Portuguese--Português
906
Slovak--Slovák
907
Slovenian--Esloveno
908
Spanish--Español
909
Command Line Interface
910
Access the Command Line Interface
911
Log in to the Command Line Interface
911
Exit the Command Line Interface
912
Execute a Command from the Web Interface
912
Display Help for Commands and Parameters
914
The Help Command
914
The Question Mark (?) Command
914
Display Help for Individual Commands
915
Use the Tab Key or the Space Bar to Display Abbreviated Help
916
Auto-Complete Commands and Parameters
916
Available Commands
917
Use the Scp Command
918
Display Status and Statistics Using the Show Command
920
Show Config
920
Show System
920
Show Network
921
Device Configuration Using the Command Line Interface
921
Execute Configuration Commands at the Root Admin CLI Prompt
921
Display Help for the Config Command from the Root Admin CLI Prompt
922
Configuration Mode
923
Enable Configuration Mode
923
Enter Configuration Commands in Configuration Mode
923
Save Changes and Exit Configuration Mode
924
Exit Configuration Mode Without Saving Changes
924
Configuration Actions
925
Display Command Line Help in Configuration Mode
925
Move Within the Configuration Schema
928
Manage Elements in Lists
929
The Revert Command
931
Enter Strings in Configuration Commands
933
Example: Create a New User by Using the Command Line
933
Command Line Reference
936
Analyzer Clear
937
Analyzer Save
938
Analyzer Start
938
Analyzer Stop
938
Clear Dhcp-Lease Ip-Address
938
Clear Dhcp-Lease Mac
939
Grep
939
Help
939
Mkdir
941
Modem at
941
Modem At-Interactive
941
Modem Firmware Check
941
Modem Firmware List
941
Modem Firmware Ota Check
942
Modem Firmware Ota Download
942
Modem Firmware Ota List
942
Modem Firmware Ota Update
942
Modem Firmware Update
943
Modem Pin Change
943
Modem Pin Disable
943
Modem Pin Enable
944
Modem Pin Status
944
Modem Pin Unlock
944
Modem Puk Status
944
Modem Puk Unlock
945
Modem Reset
945
Modem Scan
945
Modem Sim-Slot
945
Monitoring
946
Monitoring Metrics Upload
946
More
946
Ping
947
Poweroff
947
Reboot
947
Scp
949
Show Analyzer
949
Show Arp
949
Show Cloud
949
Show Config
950
Show Dhcp-Lease
950
Show Dns
950
Show Eth
950
Show Event
950
Show Hotspot
951
Show Ipsec
951
Show L2Tp Lac
951
Show L2Tp Lns
951
Show L2Tpeth
952
Show Location
952
Show Log
952
Show Manufacture
952
Show Modbus-Gateway
952
Show Modem
953
Show Mqtt
953
Show Nemo
953
Show Network
953
Show Ntp
954
Show Openvpn Client
954
Show Openvpn Server
954
Show Route
954
Show Scep-Client
955
Show Scripts
955
Show Serial
955
Show Surelink Interface
955
Show Surelink Ipsec
955
Show Surelink Openvpn
956
Show Surelink State
956
Show System
956
Show Usb
956
Show Version
957
Show Vrrp
957
Show Web-Filter
957
Speedtest
957
Ssh
958
System Backup
958
System Disable-Cryptography
958
System Duplicate-Firmware
959
System Factory-Erase
959
System Find-Me
959
System Firmware Ota Check
959
System Firmware Ota List
959
System Firmware Ota Update
960
System Firmware Update
960
System Power Ignition Off_Delay
960
System Restore
960
System Script Start
961
System Script Stop
961
System Serial Restart
961
System Serial Save
961
System Serial Show
961
System Support-Report
962
System Time Set
962
System Time Sync
962
System Time Test
962
Tail
963
Telnet
963
Traceroute
963
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Digi Connect IT 4 and is the answer not in the manual?
Ask a question
Digi Connect IT 4 Specifications
General
Brand
Digi
Model
Connect IT 4
Category
Network Router
Language
English
Related product manuals
Digi Connect WAN 3G IA
1 page
Digi Connect WAN
3 pages
Digi Connect Series
174 pages
Digi ConnectPort X2e ZB
72 pages
Digi TransPort
813 pages
Digi TransPort WR44
948 pages
Digi TransPort WR11
948 pages
Digi AnywhereUSB/14
81 pages
Digi TransPort WR41
948 pages
Digi TransPort LR54
512 pages
Digi TransPort WR31
866 pages
Digi AnywhereUSB Series
81 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General
