Home
Digi
Network Router
IX14
Digi IX14 User Manual
4
of 1
of 1 rating
828 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
User
authentication
This
chapter
contains
the
following
topics:
IX14
user
authentication
174
User
authentication
methods
174
Authentication
groups
182
Local
users
191
Terminal
Access
Controller
Access-Control
System
Plus
(TACACS+)
205
Remote
Authentication
Dial-In
User
Service
(RADIUS)
212
LDAP
218
Configure
serial
authentication
225
Disable
shell
access
227
Set
the
idle
timeout
for
IX14
users
229
Example
user
configuration
232
IX14
User
Guide
173
172
174
Table of Contents
Revision History-90002291
2
Table of Contents
9
What's New in Digi IX14 Version 22.2
19
Digi IX14 Quick Start
20
Step 1: What's in the Box
20
Step 2: Gather Accessories
20
Step 3: Connect Hardware
21
Step 4: Sign up for Digi Remote Manager
22
Step 5: Access the IX14 Local Web Interface
22
Step 6: Configure Cellular Connection Using the Web Interface
23
Step 7: Add Your IX14 to Your Digi Remote Manager Account
23
Next Steps
23
Reset the Device to Factory Defaults
23
Digi IX14 Hardware Reference
25
IX14 Features and Specifications
25
IX14 Front View
25
IX14 Back View
25
IX14 Power Supply Requirements
26
IX14 Leds
26
Digi IX14 Serial Connector Pinout
27
IX14 Accessory Kits
28
IX14 Antennas
28
Hardware Setup
29
Install SIM Cards
30
Apply Dielectric Grease over SIM Contacts
30
Attach and Position Antennas
31
Connect the WAN/ETH1 Port
32
Connect the Serial Port
32
Power on the IX14
32
QR Code Definition
32
Configuration and Management
34
Review IX14 Default Settings
34
Change the Default Password for the Admin User
34
Configuration Methods
36
Using Digi Remote Manager
37
Access Digi Remote Manager
37
Using the Web Interface
37
Log out of the Web Interface
38
Use the Local REST API to Configure the IX14 Device
38
Use the GET Method to Return Device Configuration Information
39
Use the POST Method to Modify Device Configuration Parameters and List Arrays
41
Use the DELETE Method to Remove Items from a List Array
41
Using the Command Line
43
Access the Command Line Interface
43
Log in to the Command Line Interface
43
Exit the Command Line Interface
44
Initial Configuration
46
Configure Cellular Modem Apns
47
Change the Default LAN Subnet
51
Change the LAN Address Type
52
Configure SIM PIN
54
Configure System Settings
54
Enable or Disable Bluetooth Service
61
Interfaces
65
Wireless Wide Area Networks (Wwans)
66
Configure Surelink Active Recovery to Detect Modem Failures
66
Configure the Device to Reboot When a Failure Is Detected
76
Disable Surelink
84
Using Cellular Modems in a Wireless WAN (WWAN)
88
Configure a Wireless Wide Area Network (WWAN)
105
Show WWAN Status and Statistics
114
Delete a WWAN
116
Local Area Networks (Lans)
119
About Local Area Networks (Lans)
120
Configure a LAN
120
Show LAN Status and Statistics
127
Delete a LAN
129
DHCP Servers
131
Create a Virtual LAN (VLAN) Route
147
Show Surelink Status and Statistics
149
Show Surelink Status for All Interfaces
149
Show Surelink Status for a Specific Interface
149
Show Surelink Status for All Ipsec Tunnels
150
Show Surelink Status for a Specific Ipsec Tunnel
150
Show Surelink Status for All Openvpn Clients
151
Show Surelink Status for a Specific Openvpn Client
151
Serial Port
153
Default Serial Port Configuration
153
Serial Mode Options
153
View Serial Port Information
153
Configure Login Mode
153
Configure Remote Access Mode
156
Configure Application Mode
161
Configure UDP Serial Mode
163
Configure Modbus Mode
168
Show Serial Status and Statistics
171
Log Serial Port Messages
172
IX14 User Authentication
174
User Authentication Methods
174
Add a New Authentication Method
176
Delete an Authentication Method
178
Rearrange the Position of Authentication Methods
180
Authentication Groups
182
Change the Access Rights for a Predefined Group
183
Add an Authentication Group
185
Delete an Authentication Group
189
Local Users
191
Change a Local User's Password
192
Configure a Local User
194
Delete a Local User
202
Terminal Access Controller Access-Control System Plus (TACACS+)
205
TACACS+ User Configuration
206
TACACS+ Server Failover and Fallback to Local Authentication
207
Configure Your IX14 Device to Use a TACACS+ Server
207
Remote Authentication Dial-In User Service (RADIUS)
212
RADIUS User Configuration
213
RADIUS Server Failover and Fallback to Local Configuration
213
Configure Your IX14 Device to Use a RADIUS Server
214
Ldap
218
LDAP User Configuration
219
LDAP Server Failover and Fallback to Local Configuration
220
Configure Your IX14 Device to Use an LDAP Server
220
Configure Serial Authentication
225
Disable Shell Access
227
Set the Idle Timeout for IX14 Users
229
Example User Configuration
232
Example 1: Administrator User with Local Authentication
232
Example 2: RADIUS, TACACS+, and Local Authentication for One User
234
Firewall
241
Firewall Configuration
242
Create a Custom Firewall Zone
242
Configure the Firewall Zone for a Network Interface
244
Delete a Custom Firewall Zone
246
Port Forwarding Rules
247
Configure Port Forwarding
247
Delete a Port Forwarding Rule
252
Packet Filtering
255
Configure Packet Filtering
255
Enable or Disable a Packet Filtering Rule
259
Delete a Packet Filtering Rule
261
Configure Custom Firewall Rules
263
Configure Quality of Service Options
264
Review Device Status
277
Configure System Information
278
Update System Firmware
280
Manage Firmware Updates Using Digi Remote Manager
280
Certificate Management for Firmware Images
281
Downgrading
281
Dual Boot Behavior
285
Update Cellular Module Firmware
286
Update Modem Firmware over the Air (OTA)
287
Update Modem Firmware by Using a Local Firmware File
288
Reboot Your IX14 Device
289
Reboot Your Device Immediately
289
Schedule Reboots of Your Device
290
Erase Device Configuration and Reset to Factory Defaults
292
Configure the IX14 Device to Use Custom Factory Default Settings
295
Locate the Device by Using the Find Me Feature
297
Configuration Files
299
Save Configuration Changes
299
Save Configuration to a File
300
Restore the Device Configuration
301
Schedule System Maintenance Tasks
304
Disable Device Encryption
309
Re-Enable Cryptography after It Has Been Disabled
310
Create a Virtual LAN (VLAN) Route
311
Configure the Speed of Your Ethernet Port
313
Allow Remote Access for Web Administration and SSH
317
Configure the Web Administration Service
321
Configure SSH Access
331
Use SSH with Key Authentication
339
Generating SSH Key Pairs
339
Configure Telnet Access
342
Configure DNS
347
Show DNS Server
353
Simple Network Management Protocol (SNMP)
354
SNMP Security
354
Configure Simple Network Management Protocol (SNMP)
354
Download Mibs
359
Location Information
360
Configure the Location Service
361
Configure the Device to Use a User-Defined Static Location
363
Configure the Device to Accept Location Messages from External Sources
365
Forward Location Information to a Remote Host
369
Configure Geofencing
375
Show Location Information
388
Modbus Gateway
389
Configure the Modbus Gateway
390
Show Modbus Gateway Status and Statistics
403
System Time
406
Configure the System Time
406
Manually Set the System Date and Time
410
Network Time Protocol
410
Configure the Device as an NTP Server
411
Show Status and Statistics of the NTP Server
416
Configure a Multicast Route
417
Enable Service Discovery (Mdns)
419
Use the Iperf Service
423
Example Performance Test Using Iperf3
427
Configure the Ping Responder Service
428
Example Performance Test Using Iperf3
432
Upload a New LXC Container
433
Configure a Container
434
Starting and Stopping the Container
437
Starting the Container
437
Stopping the Container
438
View the Status of Containers
438
Show Status of All Containers
439
Show Status of a Specific Container
439
Schedule a Script to Run in the Container
440
Create a Custom Container
442
Create the Custom Container File
442
Test the Custom Container File
443
Configure Scripts to Run Automatically
446
Task One: Upload the Application
446
Task Two: Configure the Application to Run Automatically
448
Configure Scripts to Run Manually
452
Task One: Upload the Application
453
Task Two: Configure the Application to Run Automatically
454
Start a Manual Script
458
Stop a Script that Is Currently Running
459
Show Script Information
460
Run a Python Application at the Shell Prompt
461
Start an Interactive Python Session
462
Digidevice Module
464
Use Digidevice.cli to Execute CLI Commands
465
Use Digidevice.datapoint to Upload Custom Datapoints to Digi Remote Manager
466
Use Digidevice.config for Device Configuration
469
Use Python to Respond to Digi Remote Manager SCI Requests
471
Use Digidevice Runtime to Access the Runtime Database
480
Use Python to Upload the Device Name to Digi Remote Manager
482
Use Python to Access the Device Location Data
484
Use Python to Set the Maintenance Window
488
Use Python to Send and Receive SMS Messages
490
Use Python to Access Serial Ports
492
Use the Paho MQTT Python Library
493
Central Management
497
Digi Remote Manager Support
498
Certificate-Based Enhanced Security
498
Configure Digi Remote Manager
498
Collect Device Health Data and Set the Sample Interval
505
Enable Event Log Upload to Digi Remote Manager
508
Log into Digi Remote Manager
510
Use Digi Remote Manager to View and Manage Your Device
511
Add a Device to Digi Remote Manager
512
View Digi Remote Manager Connection Status
512
Configure Multiple Devices Using Profiles
513
Learn more
514
Intelliflow
516
Enable Intelliflow
516
Use Intelliflow to Display Average CPU and RAM Usage
519
Use Intelliflow to Display Top Data Usage Information
520
Use Intelliflow to Display Data Usage by Host over Time
522
Configure Netflow Probe
523
Virtual Private Networks (VPN)
528
Ipsec
529
Ipsec Data Protection
529
Ipsec Mode
529
Ipsec Modes
529
Internet Key Exchange (IKE) Settings
529
Authentication
530
Configure an Ipsec Tunnel
530
Configure Ipsec Failover
557
Configure Surelink Active Recovery for Ipsec
560
Show Ipsec Status and Statistics
567
Debug an Ipsec Configuration
568
Configure a Simple Certificate Enrollment Protocol Client
570
Example: SCEP Client Configuration with Fortinet SCEP Server
575
Disable Hardware Cryptographic Acceleration
579
Openvpn
582
Configure an Openvpn Server
583
Configure an Openvpn Authentication Group and User
592
Configure an Openvpn Client by Using an .Ovpn File
596
Configure an Openvpn Client Without Using an .Ovpn File
599
Configure Surelink Active Recovery for Openvpn
603
Show Openvpn Server Status and Statistics
611
Show Openvpn Client Status and Statistics
612
Generic Routing Encapsulation (GRE)
614
Configuring a GRE Tunnel
614
Show GRE Tunnels
619
Example: GRE Tunnel over an Ipsec Tunnel
620
L2Tp
635
Configure a PPP-Over-L2TP Tunnel
635
Configure Surelink Active Recovery for PPP-Over-L2TP
645
L2TP with Ipsec
653
Show L2TP Tunnel Status
653
L2Tpv3 Ethernet
655
Configure an L2Tpv3 Tunnel
655
Show L2TPV3 Tunnel Status
660
Nemo
661
Configure a NEMO Tunnel
661
Show NEMO Status
667
Perform a Speedtest
670
Generate a Support Report
670
View System and Event Logs
672
View System Logs
672
View Event Logs
674
Configure Syslog Servers
676
Configure Options for the Event and System Logs
679
Analyze Network Traffic
684
Configure Packet Capture for the Network Analyzer
685
Example Filters for Capturing Data Traffic
694
Capture Packets from the Command Line
695
Stop Capturing Packets
696
Show Captured Traffic Data
697
Save Captured Data Traffic to a File
698
Download Captured Data to Your PC
699
Clear Captured Data
700
Use the Ping Command to Troubleshoot Network Connections
702
Ping to Check Internet Connection
702
Stop Ping Commands
702
Use the Traceroute Command to Diagnose IP Routing Problems
702
IP Routing
705
Configure a Static Route
706
Delete a Static Route
709
Policy-Based Routing
711
Configure a Routing Policy
712
Routing Services
719
Configure Routing Services
720
Show the Routing Table
723
Dynamic DNS
725
Configure Dynamic DNS
725
Virtual Router Redundancy Protocol (VRRP)
731
Vrrp
731
Configure VRRP
732
Configure VRRP
735
Example: VRRP/VRRP+ Configuration
743
Configure Device One (Master Device)
744
Configure Device Two (Backup Device)
748
Show VRRP Status and Statistics
754
File System
758
The IX14 Local File System
758
Display Directory Contents
758
Create a Directory
759
Display File Contents
760
Copy a File or Directory
760
Move or Rename a File or Directory
761
Delete a File or Directory
762
Upload and Download Files
763
Upload and Download Files by Using the Webui
763
Upload and Download Files by Using the Secure Copy Command
764
Upload and Download Files Using SFTP
765
Digi IX14 Regulatory and Safety Statements
767
RF Exposure Statement
767
Federal Communication (FCC) Part 15 Class B
767
Radio Frequency Interference (RFI) (FCC 15.105)
767
European Community - CE Mark Declaration of Conformity (Doc)
767
Maximum Transmit Power for Radio Frequencies
769
Innovation, Science, and Economic Development Canada (IC) Certifications
769
Rohs Compliance Statement
770
Special Safety Notes for Wireless Routers
770
Product Disposal Instructions
771
Command Line Interface
774
Access the Command Line Interface
774
Log in to the Command Line Interface
774
Exit the Command Line Interface
775
Execute a Command from the Web Interface
775
Display Help for Commands and Parameters
776
The Help Command
776
The Question Mark (?) Command
776
Display Help for Individual Commands
777
Use the Tab Key or the Space Bar to Display Abbreviated Help
779
Auto-Complete Commands and Parameters
779
Available Commands
780
Use the Scp Command
781
Display Status and Statistics Using the Show Command
782
Show Config
782
Show System
783
Show Network
783
Device Configuration Using the Command Line Interface
784
Execute Configuration Commands at the Root Admin CLI Prompt
784
Display Help for the Config Command from the Root Admin CLI Prompt
784
Configuration Mode
786
Enable Configuration Mode
786
Enter Configuration Commands in Configuration Mode
786
Save Changes and Exit Configuration Mode
787
Exit Configuration Mode Without Saving Changes
787
Configuration Actions
787
Display Command Line Help in Configuration Mode
788
Move Within the Configuration Schema
791
Manage Elements in Lists
792
The Revert Command
794
Enter Strings in Configuration Commands
796
Example: Create a New User by Using the Command Line
796
Command Line Reference
799
Analyzer Clear
800
Analyzer Save
801
Analyzer Start
801
Analyzer Stop
801
Clear Dhcp-Lease Ip-Address
801
Clear Dhcp-Lease Mac
801
Container Create
802
Container Delete
802
Help
802
Mkdir
805
Modem at
805
Modem At-Interactive
805
Modem Firmware Check
805
Modem Firmware List
805
Modem Firmware Ota Check
806
Modem Firmware Ota List
806
Modem Firmware Ota Update
806
Modem Firmware Update
806
Modem Pin Change
807
Modem Pin Disable
807
Modem Pin Enable
807
Modem Pin Status
808
Modem Pin Unlock
808
Modem Puk Status
808
Modem Puk Unlock
808
Modem Reset
809
Modem Scan
809
Modem Sim-Slot
809
Monitoring
809
Monitoring Metrics Upload
810
More
810
Ping
810
Reboot
812
Scp
814
Show Analyzer
814
Show Arp
814
Show Cloud
814
Show Config
815
Show Containers
815
Show Dhcp-Lease
815
Show Dns
815
Show Event
815
Show Hotspot
816
Show Ipsec
816
Show L2Tp Lac
816
Show L2Tp Lns
816
Show L2Tpeth
817
Show Location
817
Show Log
817
Show Manufacture
817
Show Modbus-Gateway
817
Show Modem
818
Show Nemo
818
Show Network
818
Show Ntp
818
Show Openvpn Client
819
Show Openvpn Server
819
Show Route
819
Show Serial
819
Show Scripts
820
Show Surelink Interface
820
Show Surelink Ipsec
820
Show Surelink Openvpn
820
Show System
821
Show Usb
821
Show Version
821
Show Vrrp
821
Show Web-Filter
821
Speedtest
822
Ssh
822
System Backup
822
System Disable-Cryptography
823
System Duplicate-Firmware
823
System Factory-Erase
823
System Find-Me
823
System Firmware Ota Check
824
System Firmware Ota List
824
System Firmware Ota Update
824
System Firmware Update
824
System Power Ignition Off_Delay
824
System Restore
825
System Script Start
825
System Script Stop
825
System Serial Clear
825
System Serial Save
826
System Serial Show
826
System Serial Start
826
System Serial Stop
826
System Support-Report
826
System Time Set
827
System Time Sync
827
System Time Test
827
Telnet
827
Traceroute
828
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Digi IX14 and is the answer not in the manual?
Ask a question
Digi IX14 Specifications
General
Brand
Digi
Model
IX14
Category
Network Router
Language
English
Related product manuals
Digi IX10
996 pages
Digi IX30
1031 pages
Digi IR4420
7 pages
Digi Connect IT 4
964 pages
Digi Connect WAN 3G IA
1 page
Digi TransPort
813 pages
Digi TransPort WR21
948 pages
Digi Connect Series
174 pages
Digi AnywhereUSB/14
81 pages
Digi TransPort WR11
948 pages
Digi TransPort WR31
866 pages
Digi AnywhereUSB Series
81 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General
