Digi IX30 - Page 760

To Next Page

To Previous Page

Firewall

This chapter contains the following topics:

Firewall configuration 761

Port forwarding rules 766

Packet filtering 774

Configure custom firewall rules 782

Configure Quality of Service options 784

Web filtering 795

IX30 User Guide

760

Main Page

Revision History-900024522
Table of Contents6
What's New in Digi IX30 Version 22.1118
Digi IX30 Quick Start19
Step 1: Connect Your Device19
Step 2: Connect DC Power21
Step 3: Set up Access to Digi Remote Manager21
Step 4: Register Your Device21
Step 5: Complete Setup22
Step 6: Configure Cellular APN22
Digi IX30 Hardware Reference23
Digi IX30 Features and Specifications23
IX30 Accessories23
IX30 Front View24
IX30 Leds25
Power25
Lte25
Signal Quality Indicators26
Ethernet Link and Activity27
Signal Quality Bars Explained27
IX30 Power Supply Requirements28
Digi IX30 Serial Connector Pinout28
IX30 Serial Pinouts30
IX30 RS-232 Pinout31
IX30 RS-422 Pinout31
IX30 RS-485 Pinout31
Configuration for Extreme Thermal Conditions32
QR Code Definition34
Hardware Setup35
Install SIM Cards36
Apply Dielectric Grease over SIM Contacts36
SIM Removal37
Tips for Improving Cellular Signal Strength37
Connect Data Cables37
Firmware Configuration39
Review IX30 Default Settings39
Local Webui39
Digi Remote Manager39
Default Interface Configuration39
Other Default Configuration Settings40
Change the Default Password for the Admin User41
Configuration Methods42
Using Digi Remote Manager43
Using the Local Web Interface43
Log out of the Web Interface44
Use the Local REST API to Configure the IX30 Device44
Use the GET Method to Return Device Configuration Information45
Use the POST Method to Modify Device Configuration Parameters and List Arrays47
Use the DELETE Method to Remove Items from a List Array47
Using the Command Line49
Access the Command Line Interface49
Log in to the Command Line Interface49
Exit the Command Line Interface50
Central Management51
Digi Remote Manager Support52
Certificate-Based Enhanced Security52
Configure Your Device for Digi Remote Manager Support52
Collect Device Health Data and Set the Sample Interval59
Enable Event Log Upload to Digi Remote Manager62
Log into Digi Remote Manager64
Use Digi Remote Manager to View and Manage Your Device65
Add a Device to Digi Remote Manager65
Configure Multiple IX30 Devices by Using Digi Remote Manager Configurations66
View Digi Remote Manager Connection Status67
Learn more68
Interfaces69
Wide Area Networks (Wans)70
Wide Area Networks (Wans) and Wireless Wide Area Networks (Wwans)71
Configure WAN/WWAN Priority and Default Route Metrics71
WAN/WWAN Failover74
Configure Surelink Active Recovery to Detect WAN/WWAN Failures75
Configure the Device to Reboot When a Failure Is Detected86
Disable Surelink94
Example: Use a Ping Test for WAN Failover from Ethernet to Cellular99
Using Ethernet Devices in a WAN102
Using Cellular Modems in a Wireless WAN (WWAN)102
Configure a Wide Area Network (WAN)127
Configure a Wireless Wide Area Network (WWAN)135
Show WAN and WWAN Status and Statistics145
Delete a WAN or WWAN147
Default Outbound WAN/WWAN Ports149
Local Area Networks (Lans)150
About Local Area Networks (Lans)151
Configure a Local Area Network (LAN)151
Configure the WAN/ETH1 Port as a LAN or in a Bridge158
Change the Default LAN Subnet166
Show LAN Status and Statistics168
Delete a LAN169
DHCP Servers171
Default Services Listening on LAN Ports188
Configure an Interface to Operate in Passthrough Mode188
Virtual Lans (Vlans)195
Create a Trunked VLAN Route196
Create a VLAN Using Switchport Mode198
Bridging201
Configure a Bridge202
Show Surelink Status and Statistics205
Show Surelink Status for All Interfaces205
Show Surelink Status for a Specific Interface205
Show Surelink Status for All Ipsec Tunnels206
Show Surelink Status for a Specific Ipsec Tunnel206
Show Surelink Status for All Openvpn Clients207
Show Surelink Status for a Specific Openvpn Client207
Serial Port209
Default Serial Port Configuration209
Serial Mode Options209
View Serial Port Information209
Configure Login Mode210
Configure Remote Access Mode213
Configure Application Mode229
Configure PPP Dial-In Mode231
Configure UDP Serial Mode238
Configure Modbus Mode249
Configure Realport Mode Using the Digi Navigator252
Installation and Configuration Process252
Digi Navigator Features252
Install the Digi Navigator253
Configure Realport on a Digi Device from the Digi Navigator254
Digi Navigator Application Features256
Electrical Signalling Mode259
Change the Electrical Signalling Mode to260
Change the Electrical Signalling Mode to263
Advanced Realport Configuration Without Using the Digi Navigator265
Windows Operating System265
Linux Operating System265
Download the Realport Driver266
Configure Realport on Your Laptop266
Configure the Serial Port for Realport Mode268
Configure the Realport Service270
Show Serial Status and Statistics271
Log Serial Port Messages271
Routing274
IP Routing275
Configure a Static Route276
Delete a Static Route279
Policy-Based Routing281
Configure a Routing Policy282
Example: Dual WAN Policy-Based Routing290
Example: Domain-Based Routing with Dual WAN292
Example: Route Traffic to a Specific WAN Interface Based on the Client MAC Address295
Routing Services301
Configure Routing Services302
Show the Routing Table304
Dynamic DNS306
Configure Dynamic DNS306
Virtual Router Redundancy Protocol (VRRP)311
Vrrp311
Configure VRRP312
Configure VRRP315
Example: VRRP/VRRP+ Configuration323
Configure Device One (Master Device)324
Configure Device Two (Backup Device)328
Show VRRP Status and Statistics334
Virtual Private Networks (VPN)337
Ipsec338
Ipsec Data Protection338
Ipsec Mode338
Ipsec Modes338
Internet Key Exchange (IKE) Settings338
Authentication339
Configure an Ipsec Tunnel339
Configure Ipsec Failover366
Configure Surelink Active Recovery for Ipsec369
Show Ipsec Status and Statistics376
Debug an Ipsec Configuration377
Configure a Simple Certificate Enrollment Protocol Client379
Example: SCEP Client Configuration with Fortinet SCEP Server386
Show SCEP Client Status and Information391
Openvpn393
Configure an Openvpn Server394
Configure an Openvpn Authentication Group and User403
Configure an Openvpn Client by Using an .Ovpn File407
Configure an Openvpn Client Without Using an .Ovpn File410
Configure Surelink Active Recovery for Openvpn414
Show Openvpn Server Status and Statistics423
Show Openvpn Client Status and Statistics424
Generic Routing Encapsulation (GRE)426
Configuring a GRE Tunnel426
Show GRE Tunnels431
Example: GRE Tunnel over an Ipsec Tunnel432
L2Tp447
Configure a PPP-Over-L2TP Tunnel447
Configure Surelink Active Recovery for PPP-Over-L2TP457
L2TP with Ipsec465
Show L2TP Tunnel Status465
L2Tpv3 Ethernet467
Configure an L2Tpv3 Tunnel467
Show L2TPV3 Tunnel Status472
Nemo473
Configure a NEMO Tunnel473
Show NEMO Status479
Allow Remote Access for Web Administration and SSH482
Configure the Web Administration Service486
Configure SSH Access496
Use SSH with Key Authentication504
Generating SSH Key Pairs504
Configure Telnet Access507
Configure DNS512
Show DNS Server518
WAN Bonding519
Simple Network Management Protocol (SNMP)524
SNMP Security524
Configure Simple Network Management Protocol (SNMP)524
Download Mibs529
Location Information531
Configure the Location Service532
Configure the Device to Use a User-Defined Static Location534
Configure the Device to Accept Location Messages from External Sources536
Forward Location Information to a Remote Host541
Configure Geofencing547
Show Location Information560
Modbus Gateway561
Configure the Modbus Gateway562
Show Modbus Gateway Status and Statistics575
System Time579
Configure the System Time579
Manually Set the System Date and Time583
Network Time Protocol583
Configure the Device as an NTP Server584
Show Status and Statistics of the NTP Server589
Configure a Multicast Route590
Ethernet Network Bonding593
Enable Service Discovery (Mdns)598
Use the MQTT Broker Service602
Show MQTT Broker Information612
Use the Iperf Service613
Example Performance Test Using Iperf3618
Configure the Ping Responder Service618
Example Performance Test Using Iperf3622
Develop Python Applications625
Set up the IX30 for Python Development626
Create and Test a Python Application626
Python Modules628
The Use(Led) Function662
Releasing the Leds to System Control662
Use Python to Control the Color of Multi-Colored Leds662
Example: Set the LTE Connection Indicator to Flashing Purple664
Set up the IX30 to Automatically Run Your Applications672
Configure Scripts to Run Automatically672
Show Script Information679
Stop a Script that Is Currently Running680
Start an Interactive Python Session681
Run a Python Application at the Shell Prompt682
Configure Scripts to Run Manually683
Task One: Upload the Application684
Task Two: Configure the Application to Run Automatically685
Start a Manual Script689
User Authentication691
IX30 User Authentication692
User Authentication Methods692
Add a New Authentication Method694
Delete an Authentication Method696
Rearrange the Position of Authentication Methods698
Authentication Groups700
Change the Access Rights for a Predefined Group701
Add an Authentication Group703
Delete an Authentication Group708
Local Users710
Change a Local User's Password711
Configure a Local User713
Delete a Local User720
Terminal Access Controller Access-Control System Plus (TACACS+)723
TACACS+ User Configuration724
TACACS+ Server Failover and Fallback to Local Authentication725
Configure Your IX30 Device to Use a TACACS+ Server725
Remote Authentication Dial-In User Service (RADIUS)730
RADIUS User Configuration731
RADIUS Server Failover and Fallback to Local Configuration731
Configure Your IX30 Device to Use a RADIUS Server732
Ldap736
LDAP User Configuration737
LDAP Server Failover and Fallback to Local Configuration738
Configure Your IX30 Device to Use an LDAP Server738
Configure Serial Authentication743
Disable Shell Access745
Set the Idle Timeout for IX30 Users747
Example User Configuration750
Example 1: Administrator User with Local Authentication750
Example 2: RADIUS, TACACS+, and Local Authentication for One User753
Firewall Configuration761
Create a Custom Firewall Zone761
Configure the Firewall Zone for a Network Interface763
Delete a Custom Firewall Zone765
Port Forwarding Rules766
Configure Port Forwarding766
Delete a Port Forwarding Rule771
Packet Filtering774
Configure Packet Filtering774
Enable or Disable a Packet Filtering Rule778
Delete a Packet Filtering Rule780
Configure Custom Firewall Rules782
Configure Quality of Service Options784
Web Filtering795
Configure Web Filtering with Cisco Umbrella795
Configure Web Filtering with Manual DNS Servers798
Verify Your Web Filtering Configuration801
Show Web Filter Service Information803
Use Digi Remote Manager to Deploy and Run Containers805
Use an Automation to Start the Container808
Upload a New LXC Container810
Configure a Container810
Starting and Stopping the Container814
Starting the Container814
Stopping the Container815
View the Status of Containers815
Show Status of All Containers816
Show Status of a Specific Container816
Schedule a Script to Run in the Container817
Create a Custom Container819
Create the Custom Container File820
Test the Custom Container File820
Digital Input/Output and Analog Input822
Digital Input/Output and Analog Input Connections823
I/O Connector Pin Assignments823
IX30 Digital Input/Output: Representative Circuit824
IX30 Analog Input: Representative Circuit824
Example Digital and Analog I/O Wiring825
Digital Input with Pullup825
Digital Input Without Pullup825
Digital Output825
Analog Input, 4-20Ma Input Mode826
Analog Input, 0-10V Input Mode826
Digital and Analog I/O Specifications826
Digital I/O Specifications826
Digital Input Specifications826
Digital Output827
Analog Input Specifications827
Voltage Input Mode (Default)827
Configure Digital Input/Output Ports827
Change the Output State of Digital I/O Ports830
Configure Analog Input Ports831
Calibrate Analog Input Ports833
Send Digital and Analog I/O Monitoring Information to a Remote Server834
Send Digital and Analog I/O Monitoring Information to Digi Remote Manager837
Show Digital I/O and Analog Input Status and Statistics840
Review Device Status843
Configure System Information844
Update System Firmware846
Manage Firmware Updates Using Digi Remote Manager847
Certificate Management for Firmware Images847
Downgrading847
Dual Boot Behavior851
Update Cellular Module Firmware852
Update Modem Firmware over the Air (OTA)853
Update Modem Firmware by Using a Local Firmware File855
Reboot Your IX30 Device856
Reboot Your Device Immediately856
Schedule Reboots of Your Device857
Erase Device Configuration and Reset to Factory Defaults859
Configure the IX30 Device to Use Custom Factory Default Settings862
Locate the Device by Using the Find Me Feature864
Configure a Power Profile865
Configuration Files868
Save Configuration Changes868
Save Configuration to a File869
Restore the Device Configuration871
Schedule System Maintenance Tasks873
Disable Device Encryption879
Re-Enable Cryptography after It Has Been Disabled879
Configure the Speed of Your Ethernet Ports881
Configure the System Watchdog883
Intelliflow888
Enable Intelliflow889
Configure Service Types891
Configure Domain Name Groups893
Use Intelliflow to Display Average CPU and RAM Usage896
Use Intelliflow to Display Top Data Usage Information897
Use Intelliflow to Display Data Usage by Host over Time899
Configure Netflow Probe900
File System906
The IX30 Local File System906
Display Directory Contents906
Create a Directory907
Display File Contents908
Copy a File or Directory908
Move or Rename a File or Directory909
Delete a File or Directory910
Upload and Download Files911
Upload and Download Files by Using the Webui911
Upload and Download Files by Using the Secure Copy Command912
Upload and Download Files Using SFTP913
Perform a Speedtest916
Generate a Support Report916
Support Report Overview917
View System and Event Logs921
View System Logs921
View Event Logs923
Configure Syslog Servers926
Configure Options for the Event and System Logs928
Analyze Network Traffic934
Configure Packet Capture for the Network Analyzer935
Example Filters for Capturing Data Traffic944
Capture Packets from the Command Line945
Stop Capturing Packets946
Show Captured Traffic Data947
Save Captured Data Traffic to a File949
Download Captured Data to Your PC949
Clear Captured Data951
Use the Ping Command to Troubleshoot Network Connections952
Ping to Check Internet Connection952
Stop Ping Commands952
Use the Traceroute Command to Diagnose IP Routing Problems952
Digi IX30 Regulatory and Safety Statements954
RF Exposure Statement954
Federal Communication (FCC) Part 15 Class B954
Radio Frequency Interference (RFI) (FCC 15.105)954
European Community - CE Mark Declaration of Conformity (Doc)954
Maximum Transmit Power for Radio Frequencies956
Innovation, Science, and Economic Development Canada (IC) Certifications956
Rohs Compliance Statement957
Special Safety Notes for Wireless Routers957
Product Disposal Instructions958
English960
Bulgarian--Бъ Л Га Рс Ки961
Croatian--Hrvatski962
French--Français963
Greek--Ε Λλην Ικά964
Hungarian--Magyar965
Italian--Italiano966
Latvian--Latvietis967
Lithuanian--Lietuvis968
Polish--Polskie969
Portuguese--Português970
Slovak--Slovák971
Slovenian--Esloveno972
Spanish--Español973
Digiix30 Certifications973
International EMC (Electromagnetic Compatibility) and Safety Standards973
Command Line Interface976
Access the Command Line Interface976
Log in to the Command Line Interface976
Exit the Command Line Interface977
Execute a Command from the Web Interface977
Display Help for Commands and Parameters979
The Help Command979
The Question Mark (?) Command979
Display Help for Individual Commands980
Use the Tab Key or the Space Bar to Display Abbreviated Help981
Auto-Complete Commands and Parameters981
Available Commands982
Use the Scp Command983
Display Status and Statistics Using the Show Command985
Show Config985
Show System985
Show Network986
Device Configuration Using the Command Line Interface986
Execute Configuration Commands at the Root Admin CLI Prompt986
Display Help for the Config Command from the Root Admin CLI Prompt986
Configuration Mode988
Enable Configuration Mode988
Enter Configuration Commands in Configuration Mode988
Save Changes and Exit Configuration Mode989
Exit Configuration Mode Without Saving Changes989
Configuration Actions989
Display Command Line Help in Configuration Mode990
Move Within the Configuration Schema993
Manage Elements in Lists994
The Revert Command996
Enter Strings in Configuration Commands998
Example: Create a New User by Using the Command Line998
Command Line Reference1001
Analyzer Clear1002
Analyzer Save1003
Analyzer Start1003
Analyzer Stop1003
Clear Dhcp-Lease Ip-Address1003
Clear Dhcp-Lease Mac1004
Container Create1004
Container Delete1004
Grep1005
Help1005
Mkdir1007
Modem at1007
Modem At-Interactive1007
Modem Firmware Check1007
Modem Firmware List1007
Modem Firmware Ota Check1008
Modem Firmware Ota Download1008
Modem Firmware Ota List1008
Modem Firmware Ota Update1008
Modem Firmware Update1009
Modem Pin Change1009
Modem Pin Disable1009
Modem Pin Enable1010
Modem Pin Status1010
Modem Pin Unlock1010
Modem Puk Status1010
Modem Puk Unlock1011
Modem Reset1011
Modem Scan1011
Modem Sim-Slot1011
Monitoring1012
Monitoring Metrics Upload1012
More1012
Ping1013
Poweroff1013
Reboot1013
Scp1015
Show Analyzer1015
Show Arp1015
Show Cloud1015
Show Config1016
Show Containers1016
Show Dhcp-Lease1016
Show Dns1016
Show Eth1016
Show Event1017
Show Hotspot1017
Show Ipsec1017
Show L2Tp Lac1017
Show L2Tp Lns1018
Show L2Tpeth1018
Show Location1018
Show Log1018
Show Manufacture1018
Show Modbus-Gateway1019
Show Modem1019
Show Mqtt1019
Show Nemo1019
Show Network1020
Show Ntp1020
Show Openvpn Client1020
Show Openvpn Server1020
Show Route1021
Show Scep-Client1021
Show Scripts1021
Show Serial1021
Show Surelink Interface1021
Show Surelink Ipsec1022
Show Surelink Openvpn1022
Show System1022
Show Usb1022
Show Version1023
Show Vrrp1023
Show Web-Filter1023
Speedtest1023
Ssh1024
System Backup1024
System Disable-Cryptography1024
System Duplicate-Firmware1025
System Factory-Erase1025
System Find-Me1025
System Firmware Ota Check1025
System Firmware Ota List1025
System Firmware Ota Update1026
System Firmware Update1026
System Power Ignition Off_Delay1026
System Restore1026
System Script Start1027
System Script Stop1027
System Serial Clear1027
System Serial Restart1027
System Serial Save1027
System Serial Show1028
System Serial Start1028
System Serial Stop1028
System Support-Report1028
System Time Set1029
System Time Sync1029
System Time Test1029
Tail1029
Telnet1030
Traceroute1030

Digi IX30 - Page 760

Table of Contents

Related product manuals