Configurethedeviceusing theweb interface Network configuration
Digi Connect Family and ConnectPort TSFamily
73
Service Services provided
Default network
port number
Secure Web Server, also
known as HyperText
Transfer Protocol over
Secure Socket Layer
(HTTPS)
You can secureaccessto configuration web
pages by requiring a user to sign in with
encryption for greater security.
443
IP filtering settings
Some Digi devices support built-in firewall functionality to limit TCP/IPtraffic to and from certain
networks, TCPports, and interfaces. Thefunctionality implemented isbased on the iptablestool.
You can restrict your Digi device on the network by only allowing certain devicesor networks to
connect. This is better known asIPFiltering or Access Control Lists(ACL). By enabling IPfiltering, you
are telling the Digi device to only accept connectionsfrom specific and known IPaddresses or
networks. You can filter deviceson a single IPaddressor restrict device to a group of devices using a
subnet mask that only allows specific networksto accessto the device.
CAUTION! Plan and review your IPfiltering settingsbefore applying them. If the settings
are incorrect, the Digi device will be inaccessible from the network.
Thesettingsfor IPFiltering Settingsinclude:
n
Only allow access from the following devicesand networks: Enables IPfiltering so that
only the specified devices or networks are allowed to connect to and accessthe device. Note
that if you enable this featureand the system from which you are connecting to the Digi device
isnot included in the list of allowed devicesor networks, then you will instantly no longer be
able to communicate or configure the device from this system.
l
Automatically allow access from all deviceson the local subnet: Specifiesthat all
systems and devices on the same local subnet or network of thedevice are allowed to
connect to the device.
l
Allow access from the following devices: Alist of IPaddressesof systemsor devices that
are allowed to connect to this device.
l
Allow access from the following networks: Alist of networksbased on an IPaddress
and matching subnet mask that are allowed to connect to this device. This option allows
grouping several devices that exist on a particular subnet or network to connect to the
device without having to manually specific each individual IPaddress.
IP forwarding settings
When a Digi device acts as a router and communicates on both a private and public network with
different interfaces, it issometimesnecessary to forward certain connectionsto other devices. This is
also known as Network AddressTranslation (NAT) or Port Forwarding.
When an incoming connection ismade to thedevice on the private network, the IPport issearched
for in the table of port forwarding entries. If the IPport isfound, that connection isforwarded to