Digi WMPX5F WMP100 User Manual ConnectPort X5 Family User s Guide

Digi International Inc WMP100 ConnectPort X5 Family User s Guide

UserManual.wiki >

Digi >

WMPX5F User Manual

User Manual

ConnectPort™ X5 FamilyUser’s GuideConnectPort X5 RConnectPort X5 FleetConnectPort X5 K90001100_C

3ContentsContents........................................................................................................................................................................................3About this guide...........................................................................................................................................................................7Purpose................................................................................................................................................................................7Audience..............................................................................................................................................................................7Scope ...................................................................................................................................................................................7Where to find more information..........................................................................................................................................7Digi contact information .....................................................................................................................................................8Chapter 1: Introduction............................................................................................................................................................9Important Safety Information..............................................................................................................................................9ConnectPort X5 Family products......................................................................................................................................10Wireless carrier certifications............................................................................................................................................11Features .............................................................................................................................................................................12User interfaces.........................................................................................................................................................12Quick reference for configuring features ................................................................................................................13Hardware features ...................................................................................................................................................19Network interface features ......................................................................................................................................19Configurable network services................................................................................................................................19IP protocol support..................................................................................................................................................20Mobile/Cellular features and protocol support........................................................................................................24RealPort software ....................................................................................................................................................25Alarms .....................................................................................................................................................................25Modem emulation ...................................................................................................................................................25Security features......................................................................................................................................................26Configuration management.....................................................................................................................................27Customization capabilities ......................................................................................................................................27Supported connections and data paths in Digi devices .....................................................................................................28Interfaces for configuring, monitoring, and administering Digi devices ..........................................................................31Configuration capabilities .......................................................................................................................................31Configuration interfaces..........................................................................................................................................31Monitoring capabilities and interfaces ....................................................................................................................38Device administration .............................................................................................................................................39

4Chapter 2: Hardware installation..........................................................................................................................................40Cable harness guidelines ...................................................................................................................................................41ConnectPort X5 main connector .............................................................................................................................41Available interfaces on the ConnectPort X5 main connector .................................................................................44Mounting the ConnectPort X5 to a vehicle.......................................................................................................................46ConnectPort X5 R ...................................................................................................................................................46ConnectPort X5 Fleet..............................................................................................................................................47Antennas............................................................................................................................................................................48ConnectPort X5 R ...................................................................................................................................................48ConnectPort X5 Fleet..............................................................................................................................................51ConnectPort X5 K development kit ..................................................................................................................................52Chapter 3: Configure Digi devices.........................................................................................................................................53Default IP address and methods for assigning an IP address............................................................................................54Configure an IP address using DHCP.....................................................................................................................54Configure an IP address using Auto-IP...................................................................................................................54Test the IP address configuration............................................................................................................................54Configuration through the iDigi Platform.........................................................................................................................55Create an Account on iDigi.com.............................................................................................................................55Add the Digi device to the idigi.com Device List...................................................................................................56iDigi Platform views for configuring and managing Digi devices .........................................................................58Configuration through the web interface...........................................................................................................................63Open the web interface............................................................................................................................................63Organization of the web interface ...........................................................................................................................65Change the IP address from the web interface, as needed ......................................................................................67Network configuration settings ...............................................................................................................................68Mobile (cellular) settings ......................................................................................................................................112XBee network settings ..........................................................................................................................................135Serial port settings.................................................................................................................................................145Alarms ...................................................................................................................................................................154System settings......................................................................................................................................................158Remote management settings................................................................................................................................164Security settings ....................................................................................................................................................169Position (GPS support)..........................................................................................................................................172Applications ..........................................................................................................................................................174Configuration through the command line .......................................................................................................................178Access the command line......................................................................................................................................178Verify device support of commands .....................................................................................................................178Configuration through Simple Network Management Protocol (SNMP).......................................................................181Batch capabilities for configuring multiple devices........................................................................................................181

5Chapter 4: Monitor and manage Digi devices....................................................................................................................182Monitoring capabilities from the iDigi Platform.............................................................................................................183Monitoring capabilities in the web interface...................................................................................................................184Display system information ..................................................................................................................................184Manage connections and services .........................................................................................................................201Monitoring capabilities from the command line .............................................................................................................204Commands for displaying device information and statistics ................................................................................204Commands for managing connections and sessions .............................................................................................206Commands for managing XBee networks and nodes ...........................................................................................207Monitoring Capabilities from SNMP..............................................................................................................................208Chapter 5: Digi device administration ................................................................................................................................209Administration from the web interface ...........................................................................................................................209File management ...................................................................................................................................................210X.509 Certificate/Key Management .....................................................................................................................211Backup/restore device configurations...................................................................................................................214Update firmware and Boot/POST Code................................................................................................................214Restore a device configuration to factory defaults................................................................................................215Display system information ..................................................................................................................................216Reboot the Digi device..........................................................................................................................................216Enable/disable access to network services............................................................................................................216Administration from the command-line interface...........................................................................................................217Chapter 6: Programming .....................................................................................................................................................218Programming tools and resources ...................................................................................................................................219The Digi API for receiving and sending vehicle bus date.....................................................................................219Vehicle bus protocol specifications.......................................................................................................................219Digi Developer Community Wiki.........................................................................................................................220Digi Python Custom Development Environment page.........................................................................................220Digi Python Programming Guide..........................................................................................................................220Python Support Forum on digi.com ......................................................................................................................220ConnectPort X5 programming examples and information ...................................................................................220iDigi Dia................................................................................................................................................................221iDigi Platform........................................................................................................................................................221The Digi API for automotive/heavy industry protocols..................................................................................................222Vehicle bus protocol specifications.......................................................................................................................222Power consumption and management ............................................................................................................................236External power control device...............................................................................................................................236Sleep mode and waking.........................................................................................................................................236

6Chapter 7: Specifications and certifications .......................................................................................................................237Hardware specifications ..................................................................................................................................................238ConnectPort X5 R and ConnectPort X5 K specifications.....................................................................................238ConnectPort X5 Fleet specifications.....................................................................................................................239Wireless networking features ..........................................................................................................................................240Regulatory information and certifications.......................................................................................................................242RF exposure statement ..........................................................................................................................................242FCC certifications and regulatory information (USA only)..................................................................................242Industry Canada (IC) certifications.......................................................................................................................243Safety statements...................................................................................................................................................244.International EMC (Electromagnetic Emissions/Immunity/Safety) standards ....................................................245Environmental requirements for ConnectPort X5 Family products......................................................................246Chapter 8: Troubleshooting .................................................................................................................................................247Troubleshooting Resources.............................................................................................................................................247System status LEDs.........................................................................................................................................................248ConnectPort X5 R LEDs.......................................................................................................................................248Glossary....................................................................................................................................................................................251

7About this guidePurposeThis guide describes and shows how to install, provision, configure, monitor, and administer Digi devices.AudienceThis guide is intended for those responsible for setting up Digi devices. It assumes some familiarity with networking concepts and protocols.ScopeThis guide focuses on configuration, monitoring, and administration of Digi devices. It does not cover hardware details beyond a certain level, application development, or customization of Digi devices. Where to find more informationIn addition to this guide, find additional product and feature information in the these documents:Online help and tutorials in the web interface for the Digi deviceQuick Start GuidesRealPort® Installation Guide Cellular 101 TutorialDigi Connect Family Customization and Integration GuideiDigi tutorials and user’s guidesRelease Notes Cabling GuidesProduct information available on the Digi website, www.digi.com, and Digi's support site at www.digi.com/support, including, Support Forums, Knowledge Base, Data sheets/product briefs, application/solution guides, and carrier-specific documentsPython developer Wiki

8Digi contact informationFor more information about Digi products, or for customer service and technical support, contact Digi International.To Contact Digi International by: Use:Mail Digi International11001 Bren Road EastMinnetonka, MN 55343U.S.A.World Wide Web: http://www.digi.com/support/email http://www.digi.com/contactus/email.jsp/Telephone (U.S.) (952) 912-3444 or (877) 912-3444Telephone (other locations) +1 (952) 912-3444 or (877) 912-3444

Introduction9IntroductionCHAPTER 1This chapter introduces Digi devices and their product families, types of connections and data paths in which Digi devices can be used, and the interface options available for configuring, monitoring, and administering Digi devices.Important Safety InformationTo avoid contact with electrical current: Never install electrical wiring during an electrical storm.Never install an Ethernet connection in wet locations unless that connector is specifically designed for wet locations.Use caution when installing or modifying lines.Use a screwdriver and other tools with insulated handles.Wear safety glasses or goggles.Do not place Ethernet wiring or connections in any conduit, outlet or junction box containing electrical wiring.Installation of inside wire may bring you close to electrical wire, conduit, terminals and other electrical facilities. Extreme caution must be used to avoid electrical shock from such facilities. Avoid contact with all such facilities.Ethernet wiring must be at least 6 feet from bare power wiring or lightning rods and associated wires, and at least 6 inches from other wire (antenna wires, doorbell wires, wires from transformers to neon signs), steam or hot water pipes, and heating ducts.Do not place an Ethernet connection where it would allow a person to use an Ethernet device while in a bathtub, shower, swimming pool, or similar hazardous location. Protectors and grounding wire placed by the service provider must not be connected to, removed, or modified by the customer.Do not touch uninsulated Ethernet wiring if lightning is likely!External Wiring: Any external communications wiring installed needs to be constructed to all relevant electrical codes. In the United States this is the National Electrical Code Article 800. Contact a licensed electrician for details.

Introduction10ConnectPort X5 Family productsThe ConnectPort X5 Family offers compact, ruggedized telematics gateways for cost-effective fleet management and asset tracking solutions. These gateways provide remote connectivity to mobile assets to monitor operating health, performance, location and driver/operator behavior, as well as to enable automated event reporting. They aggregate wireless vehicle Personal Area Network (VPAN) traffic, such as ZigBee and 802.15.4 point-to-multipoint, for IP connectivity over a secure cellular, Wi-Fi, or satellite connection in harsh environments.Gateways in the ConnectPort X5 family include the ConnectPort X5 R and ConnectPort X5 K, and ConnectPort X5 Fleet. The ConnectPort X5 K was designed as a development kit to be used for testing and evaluation prior to deployment of the ConnectPort X5 R or ConnectPort X5 Fleet. The ConnectPort X5 K comes with a development cable, antennas, and, for GSM versions, has an opening in the enclosure to allow users to insert their own SIM card. As such, the ConnectPort X5 K should be used for testing and evaluation only. Customers will be responsible for procuring antennas and cabling for their specific ConnectPort X5 R and ConnectPort X5 Fleet installations.These gateways support vehicle personal area networks with Digi’s industry-leading XBee radio technology. Vehicle personal area networks (VPANs) allow users to deploy low-power sensor networks within and around the vehicle or mobile asset to monitor additional asset points, for example, tires, reefer units, door latch, temperature sensors, cargo sensors, RFID readers, etc. The ConnectPort X5 family provides flexible wide-area networking connectivity supporting cellular, Wi-Fi, and satellite communications. Cellular connectivity provides instant, always-on communications, while Wi-Fi provides a cost-effective way to transfer large files, firmware, or logs across low-cost private Wi-Fi networks. The ConnectPort X5 Wi-Fi feature can also be used to network in-vehicle or near-vehicle Wi-Fi-enabled devices, such as vehicle displays and handheld mobile devices. Features and benefits of the ConnectPort X5 gateway family include:Factory-sealed IP67 enclosure, ensuring protection from dust and total water immersion to 1 meterProgrammable for application development through the Python programming language, iDigi device integration applications (Dia) and the iDigi services platformJ1708 protocol support, offering serial connectivity to a large installed base of heavy duty vehicle fleets Controller Area Network (CAN) interface support for connection to J1939 or proprietary vehicle busAdvanced power management, including sensitivity to ignition statusLocation tracking and geofencing with on-board GPSGlobal cellular coverage over GSM/GPRS or CDMA networksOptional satellite on the ConnectPort X5 FleetAutomated event reporting: the gateway can continuously transmit vehicle status at user-defined intervalsiDigi Management Services for management and monitoring

Introduction11Wireless carrier certificationsDigi devices are being certified around the world with major carriers supporting these technologies. For a current list of carrier certifications for your Digi product, go to digi.com and go the product pages for your product. Click the Specs tab of the product pages. Carrier certifications are listed under Mobile Certifications or Carrier Certifications.

Introduction12FeaturesThis is an overview of key features in Digi devices. Software features are covered in more detail in the next three chapters. Hardware specifications and are covered in Chapter 7, "Specifications and certifications"User interfacesThere are several user interfaces for configuring and monitoring Digi devices, including the following. The iDigi PlatformA web-based interface for configuring, monitoring, and administering Digi devices. Plugging the ConnectPort X5 device into a switch or network to which a laptop computer is connected allows direct access to the web interface for configuration. A command-line interface available via local serial port, telnet or SSH. Simple Network Management Protocol (SNMP).

Introduction14Connection management: Manage serial port connections Management > Serial Ports 201Manage Virtual Private Network (VPN) connectionsManagement > Connections > Virtual Private Network (VPN) Settings 201Manage active system connectionsManagement > Connections > Active System Connections 201Manage network services Management > Network Services(Currently only DHCP server settings managed from here)202Domain Name System (DNS):DNS Client Configuration > Network > Advanced Network Settings 107Dynamic DNS (DDNS) update Configuration > Network > Dynamic DNS Update Settings 82Dynamic Host Configuration Protocol (DHCP) serverTo configure a DHCP server: Configuration > Network > DHCP Server SettingsTo start and stop and show status of a DHCP server: Management > Network Services > DHCP Server Management75Ethernet settings Configuration > Network > Advanced Network Settings 107Event logging for the Digi device Management > Event Logging 201Help on configuring features Help button on each page.Host name for a device Configuration > Network > Advanced Network Settings > Host Name 107IP address settings Configuration > Network > IP SettingsConfiguration > Network > Advanced Settings54, 70, 75, 107IP filtering / access control Configuration > Network > IP Filtering Settings 85IP forwarding: Network Address Translation (NAT) and port forwarding configuration/static routesConfiguration > Network > IP Forwarding Settings 86IP pass-through Configuration > Network > IP Pass-through 94Feature/task Path to feature in the web interface See page

Introduction17Simple Network Management Protocol (SNMP):Configure SNMP through the web interfaceConfiguration > System > Simple Network Management Protocol (SNMP) Settings 161Enable/disable SNMP service Configuration > Network > Network Services 79Enable/disable SNMP alarm trapsConfiguration > Alarms > alarm > Send SNMP trap to following destination when alarm occurs 156, 157Use SNMP as primary configuration interfaceBasic network and serial settings configurable through standard and Digi-specific Management Information Blocks (MIBs). More advanced settings must be set through the web or command-line user interfaces, and sending alarms as SNMP traps must be configured through the web interface, on the pages listed above.37181System information: assign system-identifying information to a device Configuration > System > Device Identity Settings 158Socket Tunnel Settings Configuration > Network > Socket Tunnel Settings 93Statistics for Digi devices Administration > System Information 184Status of Digi devices Management > Serial Ports, Connections, Network Services 201VPN (Virtual Private Network) To configure VPN: Configuration > Network > Virtual Private Network (VPN) SettingsTo manage VPN: Management > Connections > Virtual Private Network (VPN) Connections94Wi-Fi (wireless LAN) devices: Wireless LAN Settings Configuration > Network > WiFi LAN Settings 71Wireless Security Settings Configuration > Network > WiFi Security Settings 72Wireless 802.1x Authentication Settings Configuration > Network > WiFi 802.1x Settings 74Feature/task Path to feature in the web interface See page

Introduction18XBee wireless network configuration and management: XBee network configuration through web UIConfiguration > XBee Network 135XBee network configuration through the iDigi PlatformIn the iDigi Platform, the XBee Networks view 58XBee network monitoring/management through web UIAdministration > System Information > XBee NetworkSee also the iDigi Platform’s XBee Networks view and detailed view of network nodes. 196XBee network monitoring/management through command lineset xbeedisplay xbeeinfo zigbee_socketsxbee184Feature/task Path to feature in the web interface See page

Introduction19Hardware featuresA summary of hardware features, including power-supply information, is in "Hardware specifications" on page 238. Network interface featuresA detailed list of network interface features is in Chapter 7, "Specifications and certifications". See also the data sheet for your Digi product.Configurable network servicesAccess to network services can be enabled and disabled. This means that a device’s use of network services can be restricted to those strictly needed by the device. To improve device security, non-secure services, such as Telnet, can be disabled. Network services that can be enabled or disabled include:Advanced Digi Discovery Protocol (ADDP): can enable or disable ADDP, but cannot change its network port number.RealPortEncrypted RealPortHTTP/HTTPSRemote Login (rlogin) Remote Shell (rsh) Simple Network Management Protocol (SNMP)TelnetIn the web interface, access to network services is enabled and disabled on the Network Services page of Network Configuration. For more information, see "Network services settings" on page 79. In the command-line interface, network services are enabled and disabled through the set service command. See the Digi Connect Family Command Reference for the set service command description.

Introduction20IP protocol supportAll Digi devices include a Robust on-board TCP/IP stack with a built-in web server. Supported protocols include, unless otherwise noted:Transmission Control Protocol (TCP)User Datagram Protocol (UDP) Dynamic Host Configuration Protocol (DHCP)Simple Network Management Protocol (SNMP) Secure Sockets Layer (SSL)/Transport Layer Security (TLS)Telnet Com Port Control Option (Telnet) including support of RFC 2217 (ability to control serial port through Telnet). See "Serial data communication over TCP and UDP" on page 21 for additional information.Remote Login (rlogin) Line Printer Daemon (LPD) HyperText Transfer Protocol (HTTP)/HyperText Transfer Protocol over Secure Socket Layer (HTTPS)Simple Mail Transfer Protocol (SMTP)Internet Control Message Protocol (ICMP)Internet Group Management Protocol (IGMP)Address Resolution Protocol (ARP)Advanced Digi Discovery Protocol (ADDP)Point to Point Protocol (PPP)Network Address Translation (NAT)/Port ForwardingSecure Shell (SSHv2)Generic Routing Encapsulation (GRE) PassthroughIPSec Encapsulating Security Payload (ESP) on most modelsESP PassthroughFollowing is an overview of some of the services provided by these protocols.

Introduction21Serial data communication over TCP and UDPDigi devices support serial data communication over TCP and UDP. Key features include:Serial data communication over TCP, also known as autoconnect and tcpserial can automatically perform the following functions: – Establish bidirectional TCP connections, known as autoconnections, between the serial device and a server or other network device. Autoconnections can be made based on data and or serial hardware signals.– Control forwarding characteristics based on size, time, and pattern– Allow incoming raw, Telnet, and SSL/TLS (secure-socket) connections– Support RFC 2217, an extension of the Telnet protocolSerial data communication over UDP, also known as udpserial, can automatically perform the following functions: – Digi Connect products can automatically send serial data to one or more devices or systems on the network using UDP sockets. Options for sending data include whether specific data is on the serial line, a specific time period has elapsed, or after the specified number of bytes has been received on the serial port.– Control forwarding characteristics based on size, time, and patterns.– Support incoming datagrams from multiple destinations.– Support outgoing datagrams sent to multiple destinations.TCP/UDP forwarding characteristics. Extended communication control on TCP/UDP data paths.–Timeout–Hangup– User-configurable Socket ID string (text string identifier on autoconnect only)Dynamic Host Configuration Protocol (DHCP)Dynamic Host Configuration Protocol (DHCP) can be used to automatically assign IP addresses, deliver TCP/IP stack configuration parameters such as the subnet mask and default router, and provide other configuration information. For further details, see "Configure an IP address using DHCP" on page 54.Auto-IPAuto-IP is a protocol that will automatically assign an IP address from a reserved pool of standard Auto-IP addresses to the computer on which it is installed. For Digi devices are set to obtain its IP address automatically from a DHCP server and the DHCP server is unavailable or nonexistent, Auto-IP will assign the device an IP address. For further details, see "Configure an IP address using Auto-IP" on page 54.

Introduction22Simple Network Management Protocol (SNMP)Simple Network Management Protocol (SNMP) is a protocol for managing and monitoring network devices. SNMP architecture enables a network administrator to manage nodes--servers, workstations, routers, switches, hubs, etc.--on an IP network; manage network performance, find and solve network problems, and plan for network growth. Digi devices support SNMP Versions 1 and 2. For more information on SNMP as a device-management interface, see "Simple Network Management Protocol (SNMP)" on page 37. For a list SNMP-related of supported Request for Comments (RFCs) and Management Information Bases (MIBs), see page 161.Secure Sockets Layer (SSL)/Transport Layer Security (TLS)Secure Sockets Layer (SSL)/Transport Layer Security (TLS) are used to provide authentication and encryption for Digi devices. For more information, see "Security features" on page 26.TelnetDigi devices support the following types of Telnet connections:Telnet ClientTelnet ServerReverse Telnet, often used for console management or device managementTelnet AutoconnectRFC 2217, Telnet Com Port Control Option, an extension of the Telnet protocolFor more information on these connections, see "Supported connections and data paths in Digi devices" on page 28. Access to Telnet network services can be enabled or disabled.Remote Login (rlogin)Users can perform logins to remote systems (rlogin). Access to rlogin service can be enabled or disabled.HyperText Transfer Protocol (HTTP)HyperText Transfer Protocol over Secure Socket Layer (HTTPS)Digi devices provide web pages for configuration that can be secured by requiring a user login.Internet Control Message Protocol (ICMP)ICMP statistics can be displayed, including the number of messages received, bad messages received, and destination unreachable messages received.

Introduction23Point-to-Point Protocol (PPP)The Point-to-Point Protocol (PPP) transports multi-protocol packets over point-to-point links. PPP encapsulates the data packet, allows the server to inform the dial-up client of its IP address (or client to request the IP address), authenticates the exchange, negotiates multiple protocols, and reassembles the data packet for network communication. ConnectPort X5 Family devices support PPP as the connection protocol from the Digi device to the cellular IP network with NAT (Network Address Technology).Network Address Translation (NAT)/Port ForwardingNetwork Address Translation (NAT) reduces the need for a large amount of publicly known IP addresses by creating a separation between publicly known and privately known IP addresses.Advanced Digi Discovery Protocol (ADDP)The Advanced Digi Discovery Protocol (ADDP) runs on any operating system capable of sending multicast IP packets on a network. ADDP allows the system to identify all ADDP-enabled Digi devices attached to a network by sending out a multicast packet. The Digi devices respond to the multicast packet and identify themselves to the client sending the multicast. ADDP communicates with the TCP/IP stack using UDP. The TCP/IP stack should be able to receive multicast packets and transmit datagrams on a network. Not all Digi devices support ADDP. Access to ADDP service can be enabled or disabled, but the network port number for ADDP cannot be changed from its default.Generic Routing Encapsulation (GRE) PassthroughEncapsulating Security Payload (ESP)ESP PassthroughGeneric Routing Encapsulation (GRE) and Encapsulating Security Payload (ESP) are routing protocols that are used to route (tunnel) various types of information between networks. GRE applies to the encapsulation of IP datagrams tunnelled through the internet. The encapsulation includes security, typically in the form of IPSec (IP security), and is most commonly found in VPN (Virtual Private Network) implementation. RFC (Request For Comment) 1701 and 1702 define these standards.Similarly, ESP is used in conjunction with IPsec as a possible way of carrying IP packets for a Virtual Private Network (VPN) setup. ESP is defined in RFC 2406.In ESP Passthrough and GRE Passthrough, inbound IPsec ESP or GSP protocol traffic is forwarded from to a VPN device connected to the Digi device’s Ethernet port. Note: If an Auto-key Internet Key Exchange (IKE)-based VPN is used, UDP port 500 must also be forwarded.

Introduction24Mobile/Cellular features and protocol supportKey cellular features in cellular-enabled Digi devices include:GSM: GPRS, EDGE, UMTS, HSPA, SMSCDMA: 1xRTT, Ev-DO (Revs 0 and A)IPSec ESP / IKEIP Pass-through, also known as bridge mode3-5 Volt SIM cardSignal-strength LEDsProvisioning wizardFor Digi devices equipped with a Code-Division Multiple Access (CDMA)-based cellular modem, the Mobile Device Provisioning Wizard is available in the web interface to properly configure the Digi device with the required configuration used to access the mobile network. The wizard allows for both automatic and manual provisioning for a variety of mobile service providers.Digi SureLink™Digi Connect Family, Digi Cellular Family, and ConnectPort X Family products support the Digi SureLink™ feature. Digi SureLink provides an “always-on” mobile network connection to ensure that a Digi device is in a state where it can connect to the network. It does this through hardware reset thresholds and periodic tests of the connection. Mobile/Cellular protocolsMobile/cellular protocols supported include, unless otherwise noted:Global System for Mobile communication (GSM)General Packet Radio Service (GPRS)Enhanced Data Rates for GSM Evolution (EDGE)Universal Mobile Telecommunications Service (UMTS)High Speed Packet Access (HSPA)Code-Division Multiple Access (CDMA)Evolution-Data Optimized (EV-DO, EVDO, or 1xEV-DO)Short Message Service (SMS), currently for GSM cellular products only. Digi cellular gateways implement an SMS-based protocol that allows managing devices by sending SMS commands from anywhere SMS messages can be sent. See "Short Message Service (SMS) settings" on page 125.

Introduction26Security featuresSecurity-related features in Digi devices include: Secure access and authenticationOne password, one permission level.Passwords can be issued to device users.Selective enabling/disabling network services such as ADDP, RealPort, Encrypted RealPort, HTTP/HTTPS, LPD, Remote Login, Remote Shell, SNMP, and Telnet.Can control access to inbound ports.Secure sites for configuration: HTML pages for configuration have appropriate security.Can control access to specific devices, IP addresses, or networks through IP filtering.EncryptionEncrypted RealPort offers encryption for the Ethernet connection between the COM/TTY port and the Digi device. Encryption prevents internal and external snooping of data across the network by encapsulating the TCP/IP packets in a Secure Sockets Layer (SSL) connection and encrypting the data using the Advanced Encryption Standard (AES) security algorithm.Strong Secure Sockets Layer (SSL) V3.0/ Transport Layer Security (TLS) V1.0-based encryption: DES (64-bit), 3DES (192-bit), AES (128-/192-/256-bit), IPsec ESP: DES, 3DES, AES. Wireless Digi Connect products provide Wi-Fi Protected Access (WPA/WPA2/802.11i) and Wired Equivalent Privacy (WEP) encryption (64-/128-bit). Supported WPA/WPA2/802.11i authentication methods are:SNMP securitySNMP “set” commands can be disabled to make use of SNMP read-only. Changing public and private community names is recommended to prevent unauthorized access to the device. Supported WPA Authentication MethodsEAP-TLS PEAP EAP/TTLSLEAP (WEP only) EAP-PEAP/MSCHAPv2 (both PEAPv0 and PEAPv1) EAP-TTLS/EAP-MD5-ChallengeEAP-PEAP/TLS (both PEAPv0 and PEAPv1) EAP-TTLS/EAP-GTCEAP-PEAP/GTC (both PEAPv0 and PEAPv1) EAP-TTLS/EAP-OTPEAP-PEAP/OTP (both PEAPv0 and PEAPv1) EAP-TTLS/EAP-MSCHAPv2EAP-PEAP/MD5-Challenge (both PEAPv0 and PEAPv1) EAP-TTLS/EAP-TLSEAP-TTLS/MSCHAPv2EAP-TTLS/MSCHAPEAP-TTLS/PAPEAP-TTLS/CHAP

Introduction28Supported connections and data paths in Digi devicesDigi devices allow for several kinds of connections and paths for data flow between the Digi device and other entities. These connections can be grouped into two main categories:Network services, in which a remote entity initiates a connection to a Digi device.Network/serial clients, in which a Digi device initiates a network connection or opens a serial port for communication.This discussion of connections and data paths may be helpful in understanding the effects of enabling certain features and choosing certain settings when configuring Digi products.Network servicesA network service connection is one in which a remote entity initiates a connection to a Digi device. There are several categories of network services:Network services associated with specific serial portsNetwork services associated with serial ports in generalNetwork services associated with the command-line interface (CLI)Network services associated with specific serial portsReverse Telnet: A telnet connection is made to a Digi device, in which data is passed transparently between the telnet connection and a named serial port. Reverse raw socket: A raw TCP socket connection is made to a Digi device, in which data is passed transparently between the socket and a named serial port.Reverse TLS socket: An encrypted raw TCP socket is made to a Digi device, in which data is passed transparently to and from a named serial port.Modem emulation, also known as Pseudo-modem (pmodem): A TCP connection is made to a named serial port, and the connection will be “interpreted” as an incoming call to the pseudo-modem.

Introduction29Network services associated with serial ports in generalRealPort: A single TCP connection manages (potentially) multiple serial ports.Modem emulation, also known as pseudo-modem (pool): A TCP connection to the “pool” port is interpreted as an incoming call to an available pseudo-modem in the “pool” of available port numbers.rsh: Digi devices support a limited implementation of the Remote shell (rsh) protocol, in that a single service listens to connections and allows a command to be executed. Only one class of commands is allowed: a single integer that specifies which serial port to connect to. Otherwise, the resulting connection is somewhat similar to a reverse telnet or reverse socket connection.DialServ: Connecting a DialServ device to the serial port. DialServ simulates a public switched telephone network (PSTN) to a modem and forwards the data to the serial port. The Digi device sends and receives the data over an IP network. Network services associated with the command-line interfaceTelnet: A user can Telnet directly to a Digi device’s command-line interface.rlogin: A user can perform a remote login (rlogin) to a Digi device’s command-line interface.Network/serial clientsA network/serial client connection is one in which a Digi device initiates a network connection or opens a serial port for communication. There are several categories of network/serial client connections:Autoconnect behavior client connectionsCommand-line interface (CLI)-based clientsModem emulation (pseudo-modem) client connectionsAutoconnect behavior client connectionsIn client connections that involve autoconnect behaviors, a Digi device initiates a network connection based on timing, serial activity, or serial modem signals. Autoconnect-related client connections include:Raw TCP connection: The Digi device initiates a raw TCP socket connection to a remote entity.Telnet connection: The Digi device initiates a TCP connection using the Telnet protocol to a remote entity.Raw TLS encrypted connection: The Digi device initiates an encrypted raw TCP socket connection to a remote entity.Rlogin connection: The Digi device initiates a TCP connection using the rlogin protocol to a remote entity.

Introduction30Command-line interface (CLI)-based client connectionsCommand-line interface based client connections are available for use once a user has established a session with the Digi device’s CLI. CLI-based client connections include:telnet: A connection is made to a remote entity using the Telnet protocol.rlogin: A connection is made to a remote entity using the Rlogin protocol.connect: Begin communicating with a local serial port.Modem emulation (pseudo-modem) client connectionsWhen a port is in the modem-emulation or pseudo-modem mode, it can initiate network connections based on AT command strings received on the serial port.The AT commands for modem emulation are documented in the Digi Connect Family Command Reference.

Introduction31Interfaces for configuring, monitoring, and administering Digi devices There are several interfaces for configuring, monitoring, and administering Digi devices. These interfaces are covered in more detail later in this guide.Configuration capabilitiesDevice configuration involves setting values and enabling features for such areas as: Network configuration: Specifying the device’s IP address settings, network-service settings, and advanced network settings.Mobile (cellular) configuration: Specifying the mobile service provider and mobile connection settings for the device.Alarms: Defining whether alarms should be issued, the conditions that trigger alarms, and how the alarms should be delivered.Security/Users configuration: Configuring security features, such as whether password authentication is required for device users.System configuration: Specifying system-identifying information, such as a device description, contact person, and physical location.Configuration interfacesSeveral interfaces are available for configuring Digi devices, including: The Digi Device Discovery Utility, which locates Digi devices on a network, and allows opening the web interface for the devices.The iDigi platform, a configuration interface to fine-tune or monitor devices. The iDigi Platform cannot assign an IP address but it can change one. A web-based interface embedded with the product, providing device configuration profiles for quick serial-port configuration and other settings.A command-line interface (CLI).Remote Command-line Interface (RCI) protocolSimple Network Management Protocol (SNMP).

Introduction32Digi Device Discovery utilityThe Digi Device Discovery utility locates Digi devices on a network and allows for opening the web interface for discovered devices, configuring network settings, and rebooting the device. It uses a Digi International-proprietary protocol, Advanced Digi Discovery Protocol (ADDP), to discover the Digi devices on a network, and displays the discovered devices in a list, for example:Digi Device Discovery quickly locates Digi devices and basic device information, such as the device’s address, firmware revision, and whether it has been configured. It runs on any operating system that can send multicast IP packets to a network. It sends out a User Datagram Protocol (UDP) multicast packet to all devices on the network. Devices supporting ADDP reply to this UDP multicast with their configuration information. Even devices that do not yet have an IP address assigned or are misconfigured for the subnet can reply to the UDP multicast packet and be displayed in device discovery results. Not all Digi devices support ADDP. Note that Device discovery responses can be blocked by personal firewalls, Virtual Private Network (VPN) software, and certain network equipment. Firewalls will block UDP ports 2362 and 2363 that ADDP uses to discover devices. Digi Device Discovery is available for downloading from the Digi Support site. After installation, it is available from the Start menu. Access to the ADDP service can be enabled or disabled, but the network port number for ADDP cannot be changed from its default. For more information on the Digi Device Discovery utility, see page 63.

Introduction33iDigi™ Platform interfaceThe iDigi Platform provides remote network management of all connected hardware. In contrast to the one-user-to-one device model of other Digi device interfaces, the iDigi Platform uses a one-user-to-many-devices interface model. By providing a central point of access to remote devices or groups of devices, the iDigi Platform makes it easier for you to manage many devices. Using a standard Web browser, from the iDigi Platform, you can configure network hardware; track device performance; remotely set filters and alarms; monitor connections, device status and statistics; reboot devices; reset defaults, and remotely upgrade firmware. Because you can diagnose and solve problems from a central site, resulting in fewer maintenance trips to remote locations, iDigi Platform helps you reduce maintenance costs.The iDigi Platform is a particularly attractive platform for configuring managing XBee devices behind the gateway. It displays all nodes on the XBee network with the ability to query for node profiles, node descriptors, connected endpoints, radio configuration settings radio statistics, bindings, and more.

Introduction34For more information on the iDigi Platform as an remote management interface, see these resources:"Remote management settings" on page 164. This section shows how to configure settings within Digi devices so that they can be handled through a remote device manager such as the iDigi Platform."Configuration through the iDigi Platform" on page 55. "Monitoring capabilities from the iDigi Platform" on page 183iDigi tutorials and guides

Introduction39Device administrationPeriodically, administrative tasks need to be performed on Digi devices, such as uploading and managing files, changing the password for logging onto the device, backing up and restoring device configurations, updating firmware, restoring the configuration to factory defaults, and rebooting. As with configuration and monitoring, administration can be done from a number of interfaces, including the web interface, command line, and the iDigi Platform. See Chapter 5, "Digi device administration" for more information and procedures.

Hardware installation40Hardware installationCHAPTER 2This section details requirements and recommendations for installing ConnectPort X5 products, including the cable harness, mounting requirements, and antennas.There are several versions of ConnectPort X5 products:ConnectPort X5 K: This model is a development kit that comes with a development cable and antennas. It also has a slot in the side for customers to install their own SIM card. It is intended for development use.ConnectPort X5 R: This model is a production unit. Digi installs customer-specific SIM cards into each unit and ensures that the unit is environmentally sealed. Customer are responsible for providing their own cable harness and antennas; cable harness guidelines are later in this chapter. All connectors must be sealed to maintain IP67 and other environmental ratings.ConnectPort X5 Fleet: This model is a production unit with internal antennas. Digi recommends this version of the product if using an X5R would require more than 3 meters of cable length. The customer is responsible for providing their own cable harness.

Hardware installation41Cable harness guidelinesDigi does not provide a cable harness for the ConnectPort X5 R. Instead, you must design and create a cable harness that follows the guidelines and pinouts in this section.ConnectPort X5 main connectorThe main connector on the ConnectPort X5 R is a 23-pin IP67 connector from Tyco. The cable harness must use the mating plug and pins listed in the following table to connect to the X5R unit.ConnectPort X5 R 23-pin Connector and Mating Connector Part NumbersThe connector pins accept 20-16AWG wire. If the rubber seal of the mating connector is accidently perforated in an unpopulated location during cable assembly, the hole can be filled with a plug if the connector needs to maintain an IP67 rating. The cable harness should be restrained every 7-9” to prevent vibration-related damage. The recommended minimum cable bend radius is five times the cable diameter.Use dielectric grease on the main connector contacts when connecting your cable harness to the X5 to prevent fretting on the contacts.Part Tyco Part NumberConnectPort X5 Main Connector 1-776087-1Mating Connector 770680-1Mating Connector Wire Relief 776464-1Mating Connector Pins 770854-3Mating Connector Plugs 770678-1Mating Connector Crimper 58529-1

Hardware installation42ConnectPort X5 R connector pinsPins for the ConnectPort X5 R connector are arranged as follows. Pin 1 is in the upper-left corner.

Hardware installation43PinoutsPinouts for the ConnectPort X5 R and ConnectPort X5 Fleet are as follows.Pin # Signal Name1 Digital Ground2 NC, for internal Digi use3Serial RXD4Serial RTS5 J1708-6CAN_L7 Ethernet TX-8 Ethernet RX-9 Chassis Ground10 Serial TXD11 Serial CTS12 J1708+13 CAN_H14 Ethernet TX+15 Ethernet RX+16 Vin17 Ignition18 Reset19 DIO020 DIO121 DIO222 DIO323 NC

Hardware installation44Available interfaces on the ConnectPort X5 main connectorConnectPort X5 R has the following interfaces available on its main connector:Power/digital ground: Power and digital ground should be twisted pair and must be connected to a fused power supply. See hardware specs for required voltages and current draw. CAN/J1939: Please refer to the CAN/J1939 specification for proper wiring. The ConnectPort X5 R assumes that it is plugged into a terminated bus that meets all CAN/J1939 specifications and requirements.J1708: Please refer to the J1708 specification for proper wiring. The ConnectPort X5 R assumes that it is plugged into a terminated bus that meets all J1708 specifications and requirements.5-wire RS232 Serial (TXD, RXD, RTS, CTS, GND): The serial drain wire should be connected to chassis ground.Ethernet (10 Mbps or 100 Mbps): The Ethernet cable must conform to networking cable specifications. The Ethernet drain wire should be connected to chassis ground.Four Digital Input/Output lines: The pins are limited to a voltage range of 0 to +36VDC. The digital inputs are Schmitt trigger inputs with VT+ = 1.5V (typ) and VT- = 1V (typ). The digital outputs use sinking output drivers (an external pull-up is required). The outputs can sink a maximum of 0.5A and are protected by an in-line, self-resettable fuse.SerialChassis groundCAN/J1939J1708Ignition sense lineDigital I/O linesEthernetResetPower/digital groundConnector

Hardware installation45An ignition sense line, part of the power management strategy, used to unconditionally wake a device from a low-power state. To support ignition detect, the ignition pin must be wired into the vehicle’s ignition detect signal. This pin has a digital input signal for detecting ignition supply voltage. Voltage range: 0 to +48VDC. The pin has protection for short, positive and negative overvoltage conditions. VIH = 7V, VIL = 2V. This line is open collector.Chassis ground: To provide chassis isolation, the metal enclosure and digital ground are not directly tied. The main reason for this was to avoid potentially large vehicle return currents from flowing through digital ground, if the product is mounted directly to a vehicle chassis. To prevent static charge build-up, the two grounds are connected through a high value resistance, to create a discharge path. The chassis ground should also be connected to the serial and Ethernet drain wires.Reset: This pin is limited to voltage range 0 to +36VDC. The input structure uses a Schmitt trigger with VT+ = 1.5V (typ) and VT- = 1V (typ). Digi does not recommend adding this to your cable harness. For more information on use of this reset pin and the available options for performing a reset, see "Restore a device configuration to factory defaults" on page 215.

Hardware installation46Mounting the ConnectPort X5 to a vehicleConnectPort X5 RThe ConnectPort X5 R has flexible mounting holes to allow installation in a variety of locations to many different surface materials. The arrows in the diagram indicate mounting hole locations.Use at least four (4) ¼” bolts to mount the ConnectPort X5 R unit. The ConnectPort X5 R unit is IP67 rated; allowing for it to be mounted inside or outside. The ConnectPort X5 R enclosure is made of bare aluminum, and the TNC connectors and nuts are made of nickel-plated brass.The ConnectPort X5 Main Connector and TNC connectors must be mated to maintain IP67 rating.The product is not to be installed on a dashboard or on the lower-chassis of a vehicle.

Hardware installation47ConnectPort X5 FleetTo be provided.

Hardware installation48AntennasConnectPort X5 RThe ConnectPort X5 R has four antenna options: Wi-Fi, Cellular and GPS, and XBee. The order of those antennas is shown in the following diagram. The antennas must be mounted at least 8 inches (20 cm) apart. If your application requires antenna cables longer than 3 meters, Digi recommends the ConnectPort X5 Fleet product instead. That product has internal antennas so antenna performance will not be significantly degraded due to long cables. Antenna locationsTo WIFI connectorTo Cellular connector (second from left)To XBee connectorTo GPS connector (second from right)Cellular/GPS can be handled through acombined antenna, as shown, or separate antennas.

Hardware installation49Certified Antennas for ConnectPort X5 RThe following antennas were used during certification of the ConnectPort X5 R and are included with the ConnectPort X5 R kit. You must procure your own antennas for the ConnectPort X5 R product. If choosing to use other antennas than these, choose antennas that conform to these specifications. Antenna Manufacturer Manufacturer part number SpecificationsWi-Fi Taoglas WS.01.301351 Frequency range 2400-2500 MHz5150-5350 MHzGain 4.1 dB @2400 MHz4.7 dB @5000 MHzAntenna size Height: 1.14 in (2.9 cm)Diameter: 2.05 in (5.21 cm)Mounting method 18 mm screw mount (.3149 in)Cable length 9.84 feet (3 meters)Connector type RPTNCCellular/GPS Taoglas MA.104.A.A301351.B301311 Frequency range Quad band;CDMA: 824-896 MHzGSM: 880-960 MHzPCS: 1850-1990 MHzDCS: 1710-1880 MHzGain 30 dB typicalGain at Zenith: 2. dBi minGain at 10 degrees elevation: -4.0 dBi minimumAxal ratio: 2.0 dB maximumAntenna size Height: 1.14 in (2.9 cm)Diameter: 2.05 in (5.21 cm)Mounting method 3.149 in (18 mm) screw in dipole mountCable length 9.84 feet (3 meters)Connector type Cellular: TNC (standard polarity TNC)GPS: RPTNC (reverse polarity TNC)

Hardware installation50Antenna Manufacturer Manufacturer part number SpecificationsXBee Laird RD2458-5-RA-TNC Frequency range 2400 - 2483 MHzGain 3 dBi @ 2400 MHz5 dBi @ 5000 MHzAntenna size 6.8 in (17.27cm)Mounting method N/AConnector type RP TNCBobbintron AN2400-19B01RART Frequency range 2400-2500 MHzGain 3 dBiAntenna size 6.8 in (17.27cm)Mounting method 3.149 in (18 mm) screw-in dipole mountConnector type RP TNC

Hardware installation51ConnectPort X5 FleetTo be provided.

Hardware installation52ConnectPort X5 K development kitThe ConnectPort X5 K is a development kit for lab use only. The kit contains:A ConnectPort X5 R with a slot for installing a SIM card. The ConnectPort X5 K is a development kit for lab use only. Development Cable and power cord. The development cables provide access to all interfaces on your device. Wi-Fi antennaCellular/GPS antennaXBee antennaQuick Start Guide and links to all documentation needed to being development on your unit.The table shows the part numbers for the development cables and antennas.Description Digi Part NumberCBL, X5 Development 76000781Wi-Fi antenna 76000783Cellular (GSM)/GPS antenna 76000782XBee antenna 76000784

Configure Digi devices53Configure Digi devicesCHAPTER 3This chapter describes how to configure a Digi device. It covers these topics: "Default IP address and methods for assigning an IP address" on page 54"Configuration through the iDigi Platform" on page 55"Configuration through the web interface" on page 63"Configuration through the command line" on page 178"Configuration through Simple Network Management Protocol (SNMP)" on page 181"Batch capabilities for configuring multiple devices" on page 181

Configure Digi devices54Default IP address and methods for assigning an IP addressAll products that have a cellular (WAN) interface ship with static IP address for the Ethernet port of 192.168.1.1 and DHCP server enabled by default. Plugging the ConnectPort X5 device into a switch or network to which a laptop computer is connected allows direct access to the web interface for configuration. The Ethernet port of the laptop should be configured to automatically receive an IP address and DNS server address.All products that only have an Ethernet or Wi-Fi (LAN) interface ship with DHCP client enabled by default. Accessing the web interface on these products is most easily done by connecting it to a LAN that has a DHCP server.To discover which IP address has been assigned to the device, use the Device Discovery Utility for Windows, available on the Digi Support site. See installation instructions on page 63.There are several ways to assign an IP address to a Digi device, described on the following pages:Use Dynamic Host Configuration Protocol (DHCP) from the web interface. Use Automatic Private IP Addressing (APIPA), also known as Auto-IP.Configure an IP address using DHCPAn IP address can also be configured using Dynamic Host Configuration Protocol (DHCP). DHCP is an Internet protocol for automating the configuration of computers that use TCP/IP. DHCP can be used to automatically assign IP addresses and deliver TCP/IP stack configuration parameters.As mentioned previously, all products that have a cellular (WAN) interface ship with static IP address for the Ethernet port of 192.168.1.1 and DHCP server enabled by default. All products that only have an Ethernet or Wi-Fi (LAN) interface ship with DHCP client enabled by default. For more information on DHCP server configuration, see "DHCP server settings" on page 75.Configure an IP address using Auto-IPThe standard protocol Automatic Private IP Addressing (APIPA or Auto-IP) automatically assigns the IP address from a group of reserved IP addresses to the device on which Auto-IP is installed. Use Digi Device Discovery or DHCP to find the Digi device and assign it a new IP address that is compatible with your network. Once the unit is plugged in, Auto-IP automatically assigns the IP address. Auto-IP addresses are typically in the 169.254.x.x address range.Test the IP address configurationOnce the IP address is assigned, make sure it works as configured. 1Access the command line of a PC or other networked device.2Issue the following command:ping ip-address where ip-address is the IP address assigned to the Digi device. For example:ping 192.168.2.2

Configure Digi devices55Configuration through the iDigi PlatformThe iDigi Platform is an on-demand service. After creating an iDigi account, you can connect to the iDigi Platform. There are no infrastructure requirements. Remote devices and enterprise business applications connect to the iDigi Platform via standards-based Web Services.Create an Account on iDigi.comTo get started using iDigi, set up an account on the iDigi Platform.1Navigate to http://www.idigi.com.2Click on the iDigi Platform Login button.3Click on the Are you a new user? link and create your account.

Configure Digi devices56Add the Digi device to the idigi.com Device List To add your Digi device to the device list, follow these steps:1Log into the iDigi.com user portal using the username and password you just created. The iDigi Platform interface is displayed. 2In the Devices list, Click the button on the toolbar to display the Add Devices dialog. Locate and select your device from the list of locally discovered devices and click the OK button. If your device was not found in the list, check that it is turned on and connected to the same local network as your PC and click the Refresh button. Adding your device through automatic discovery informs iDigi about the device and configures that device to connect to the iDigi Connectivity server.

Configure Digi devices57Note If the device is not locally accessible or cannot be automatically discovered, you can still add it by clicking the Add Manually button and enter the MAC address found on the bottom of the device. If you manually add your device however, you must also configure the device to connect to the iDigi Connectivity Server. See “Manually configure a Digi device to connect to the iDigi Platform” on page 168.3Wait a few moments and click the Refresh button to ensure that your device status is now Connected.4Select your device and double-click it, or right-click and select Properties.5Your device information will load into the iDigi Device Manager.

Configure Digi devices58iDigi Platform views for configuring and managing Digi devicesThe iDigi Platform has several views for configuring and managing network devices. Device listThe iDigi device list displays all the devices in your network. This view allows for viewing and accessing devices regardless of their physical location, even devices behind firewalls. From this view, you can filter and sort device list information, customize the device information displayed, refresh the information, view messages, select one or more devices to configure, manage, and monitor., and add/remove devices and groups.

Configure Digi devices59Device operations menuIn the device list, right-clicking on a selected device displays the device operations menu for performing key device-management tasks, such as file management, restoring the device to factory defaults, updating firmware, and displaying device properties. The image shows the operations menu and the operations available under Administration and Firmware.

Configure Digi devices60Device properties viewSelecting Properties from the device operations menu displays a system summary of the selected device, and a menu of configuration settings, similar to the menu on the home page of the web interface for a Digi device.XBee Networks view The iDigi Platform is a particularly attractive platform for configuring managing XBee devices behind the gateway. The XBee Networks view displays nodes in the context of their XBee network, including their node ID, the network to which they belong, physical addresses, their role in the XBee network (coordinator, router, or end node), their defined parent in the network, and their current status.This view has a Search function that allows you to search for any device in the network associated with any gateway, a convenient function when managing multiple XBee networks with many nodes.

Configure Digi devices61Node ViewFrom the XBee Network view, click Basic, Advanced, or Summary to view details about nodes. The Basic view shows the basic configuration settings for a node..The Advanced view shows more detailed configuration settings for a node.

Configure Digi devices62The Summary view displays running-state and status information for a node.For more information on iDigi Platform To learn more about the iDigi Platform and the services it provides, see the iDigi Device Management and Web Services Tutorial.

Configure Digi devices63Configuration through the web interfaceOpen the web interfaceTo open the web interface, either enter the Digi device’s URL in a web browser and log on to the device, if required, or use the Digi Device Discovery utility to locate it and open its web interface.By entering the Digi device’s IP address in a web browser1In the URL address bar of a web browser, enter the IP address of the device.2If security has not been enabled for the Digi device, the Home page of the web interface is displayed. If security has been enabled for the Digi device, a login dialog will be displayed. Enter the user name and password for the device. The default username is root and the default password is dbps. If these defaults do not work, contact the system administrator who set up the device. Then the Home page of the web interface is displayed. See "Organization of the web interface" on page 65 for an overview of using the Home page and other linked pages.By using the Digi Device Discovery utilityAlternatively, use the Digi Device Discovery Utility to locate the Digi device and open its web interface. Install and run the Digi Device Discovery utilityThe Digi Device Discovery Utility is available for downloading from the Digi Support site. If this utility is not already available on your computer, follow these steps.1From a browser, go to www.digi.com.2Click the Support link and select Diagnostics, Utilities and MIBs.3Under Select Your Product for Support, select your Digi device from the product list and click Submit.4Under Active Products, select your Digi device from the product list.5Under OS Specific Diagnostics, Utilities and MIBs, select the operating system for your computer from the list.6Select either Device Discovery Utility for Windows - Standalone version or Device Discovery Utility for Windows - Installable version. The standalone version runs the utility immediately after the download is complete. The installable version installs the utility on your computer and adds it to a program group named Digi in the Start menu. 7Click Run on the two dialogs. The standalone version of the utility starts immediately. For the installable version, an installation wizard is displayed. Follow the prompts to complete the installation. To start the utility, select Start > Programs > Digi > Digi Device Discovery > Digi Device Discovery

Configure Digi devices64Discover devicesFrom the start menu, select Start > Programs > Digi Connect > Digi Device Discovery. The Digi Device Discovery application is displayed.Locate the device in the list of devices, and double-click it, or select the Digi device from the list and select Open web interface in the Device Tasks list.

Configure Digi devices65Organization of the web interfaceWhen the web interface is opened, the Home page is displayed. The Home pageThe left side of the Home page has a menu of choices that display pages for configuration, management, and administration tasks, and to log out of the web interface. This chapter focuses on the choices under Configuration and Applications. For details on the tasks under Administration, see Chapter 5, "Digi device administration". Clicking Logout logs out of a configuration and management session with a Digi device. It does not close the browser window, but displays a logout window. To finish logging out of the web interface and prevent access by other users, close the browser window. Or, log back on to the device by clicking the link on the screen. After 5 minutes of inactivity, the idle timeout also automatically performs a user logout.The Getting Started section has a link to a tutorial on configuring and managing Digi device.The System Summary section notes all available device-description information.

Configure Digi devices66Configuration pagesThe choices under Configuration in the menu display pages for configuring settings for various features, such as network settings, and serial port settings. Some of the configuration settings are organized on sets of linked screens. For example, the Network Configuration screen initially displays the IP Settings, and provides links to Network Services Settings, Advanced Settings, and other network settings appropriate to the Digi device.Applications pagesDepending on the Digi device, there may be an Applications menu item for configuring various applications available for use in the device. Python: For loading and running custom programs authored in the Python programming language onto ConnectPort X Family devices. RealPort: Configures RealPort settings. See page 176.Apply and save changesThe web interface runs locally on the device, which means that the interface always maintains and displays the latest settings in the Digi device. On each screen, the Apply button is used to save any changes to the configuration settings to the Digi device.Cancel changesTo cancel changes to configuration settings, click the Refresh or Reload button on the web browser. This causes the browser to reload the page. Any changes made since the last time the Apply button was clicked are reset to their original values.Restore the Digi device to factory defaultsThe device configuration can be reset to factory defaults as needed during the configuration process. See "Restore a device configuration to factory defaults" on page 215.Online helpOnline help is available for all screens of the web interface, and for common configuration and administration tasks. There is also tutorial available on the Home page.

Configure Digi devices67Change the IP address from the web interface, as neededNormally, IP addresses are assigned to Digi devices either through DHCP or the Digi Device Setup Wizard. This procedure assumes that the Digi device already has an IP address and you simply want to change it. 1Open a web browser and enter the Digi device’s current IP address in the URL address bar. 2If security is enabled for the Digi device, a login prompt is displayed. Enter the user name and password for the device. The default username is root and the default password is dbps. If these defaults do not work, contact the system administrator who set up the device.3Click Network to access the Network Configuration page. 4On the IP Settings page, select Use the following IP address.5Enter an IP address (and other network settings), then click Apply to save the configuration.

Configure Digi devices68Network configuration settingsThe Network configuration pages include:Ethernet IP settings: For viewing IP address settings and changing as needed. See page 70.WiFi IP settings: For setting the IP address used for wireless LAN communication. See page 70.WiFi LAN settings: For setting basic options for wireless LAN devices such as network name and network connection options. See page 71.WiFi Security settings: For setting authentication and encryption options for wireless LAN devices. See page 72.WiFi 802.1x Authentication settings: Detailed authentication settings for IEEE 802.1x authentication for wireless LAN devices. See page 74.DHCP Server settings: For configuring a DHCP server to allow other devices or hosts on this network to be assigned dynamic IP addresses. See page 75.Network Services settings: Enable and disables access to various network services, such as ADDP, RealPort and Encrypted RealPort, Telnet, HTTP/HTTPS, and other services. See page 79.Dynamic DNS Update settings: For configuring a Dynamic DNS (DDNS) service that allows a user whose IP address is dynamically assigned to be located by a host or domain name. See page 82.IP Filtering settings: For configuring the Digi Cellular Family device to only accept connections from specific and known IP addresses or networks. See page 85.IP Forwarding settings: For configuring the Digi Cellular Family device to forward certain connections to other devices. This is also known as Network Address Translation (NAT) or Port Forwarding. See page 86.IP Network Failover settings: provides a dynamic method for selecting and configuring the default gateway for the Digi device using a set of rules and link tests to determine whether a particular network interface can be used to communicate with a specified destination. See page 89.Socket Tunnel settings: For configuring a socket tunnel, used to connect two network devices: one on the Digi Cellular Family device’s local network and the other on the remote network. See page 93. Virtual Private Network (VPN) settings: For configuring Virtual Private Networks, which are used to securely connect two private networks together so that devices may connect from one network to the other network using secure channels. See page 94.

Configure Digi devices69IP Pass-through settings: Configures a Digi Cellular Family device to pass its mobile IP address directly through and to the Ethernet device (router or PC) to which it is connected through the Ethernet port. The Digi Cellular Family device becomes transparent (similar to the behavior of a cable or DSL modem) to provide a bridge from the mobile network directly to the end device attached to the Digi Cellular Family device. See page 94.Host List settings: Adds or removes entries from the host list. For DialServ, the host list provides a means to map a phone number (in the local name field) to a network destination, (in the “resolves_to” field). See page 105.Virtual Router Redundancy Protocol (VRRP) settings: For configuring a number of routers to represent a virtual router, which simplifies configuration of hosts on a network.Advanced Network Settings: Configures the Ethernet Interface speed and mode, TCP/IP settings, TCP keepalive settings, and DHCP settings. See page 107.Alternatives for configuring network communicationsThere are three ways a Digi device can be configured on the network. Using dynamic settings: All network settings will be assigned automatically by the network, using a protocol called DHCP. Contact your network administrator to find out if a DHCP server is available.Using static settings: All network settings are set manually and will not change. The IP address and subnet mask are mandatory. The rest are not mandatory, but may be needed for some functions. Contact your network administrator for the required values. Using Auto-IP: Auto-IP assigns an IP address to the Digi device immediately after it is plugged in. If running DHCP or ADDP, the Auto-IP address is overridden and a network compatible IP address is assigned, or a static IP address can be assigned. Even if a DHCP server is available, the device configuration may work better with static settings. Once set, static settings will not change, so you and other network devices can always find the Digi device by its IP address. With dynamic settings, the DHCP server can change the IP address. This can happen frequently or infrequently depending on how your network administrator has configured the network.When the IP address does change, you and other network devices configured to talk to the Digi device can no longer access the device. In this case, the Digi device must be located the Digi Device Discovery utility, and other network devices that need to communicate with the Digi device must be reconfigured.

Configure Digi devices70Ethernet IP settingsThe Ethernet IP Settings page configure how the IP address of the Digi device is obtained, either by DHCP or by using a static IP address, subnet mask, and default gateway. For more information about how these settings are assigned and used in your organization, contact your network administrator. Obtain an IP address automatically using DHCP: When the Digi device is rebooted, it will obtain new network settings.Use the Digi Device Setup Wizard to find the Digi device, since it will likely have a new address. Use the following IP Address: Choose this option to supply static settings. An IP address and Subnet mask must be entered. Other items are not mandatory, but may be needed for some functions (such as talking to other networks). IP Address: An IP address is like a telephone number for a computer. Other network devices talk to this Digi device using this ID. The IP address is a 4-part ID assigned to network devices. IP addresses are in the form of 192.168.2.2, where each number is between 0 and 255. Subnet Mask: The Subnet Mask is combined with the IP address to determine which network this Digi device is part of. A common subnet mask is 255.255.255.0. Default Gateway: IP address of the computer that enables this Digi device to access other networks, such as the Internet. Enable AutoIP address assignment: With AutoIP enabled, the Digi device will automatically self-configure an IP address when an address is not available from other methods, for example, when the Digi device is configured for DHCP and a DHCP server is not currently available. WiFi IP settingsThe WiFi IP settings configure how the IP address of a Wi-Fi-enabled Digi device is obtained. It has the same settings as the Ethernet IP settings page.

Configure Digi devices71WiFi LAN settingsDigi devices with Wi-Fi (wireless LAN) capability contain a wireless network interface that may be used to communicate to wireless networks using 802.11b/g technology. Contact your administrator or consult wireless access point documentation for the settings required to setup the wireless LAN configuration. Settings include:Network name: The name of the wireless network to which the wireless device should connect. In situations with multiple wireless networks, this setting allows the device to connect to and associate with a specific network. The network name is referred to as the SSID (service set identifier). If the network name is left blank, the device will search for wireless networks and connect to the first available network. This is useful if a specific network name does not need to be used as the device will select the first available network. Connection method: The type of connection method this device uses to communicate on wireless networks. Choose from:–Connect to any available wireless network: Use this setting to allow the device to access any network. The device can either access point networks or peer-to-peer wireless networks.–Connect to access point (infrastructure) networks only: Use this setting if the wireless network that this device needs to connect to is composed of wireless access points. This is typically the most popular method for connecting to wireless networks. –Connect to peer-to-peer (ad-hoc) networks only: Use this setting if all devices on the wireless network connect to and communicate with each other. This is known as peer-to-peer in that there is no central server or access point. Each system communicates directly with each other system.Country: The country in which this wireless device is being used. The channel settings are restricted to the legal set for the selected country. Channel: The frequency channel that the wireless radio will use. Select Auto-Scan to have the device scan all frequencies until it finds one with an available access point or wireless network it can join. Transmit Power: The transmit power level in dBm.Enable Short Preamble: Enables transmission of wireless frames using short preambles. If Short Preamble is supported in the wireless network, enabling it can boost overall throughput.

Configure Digi devices72WiFi security settingsThe WiFi security settings specify the wireless security settings that the wireless network uses. Multiple security and authentication modes may be chosen depending on the configuration of the access point or wireless network. The wireless device will automatically select and determine the authentication and encryption methods to use while associating to the wireless network. If the wireless network does not use security and uses an Open Network architecture, these settings do not need to be modified. Note that WPA settings require that the device communicate to Access Points and is not valid when the Connection Method is set to Connect to wireless systems using peer-to-peer (ad-hoc). Also, WPA pre-shared key (WPA-PSK) security is only valid when a specific Network Name or SSID is being used. Network Authentication: The authentication method or methods used for wireless communications. –Use any available authentication method: Enables all of the methods. The actual method used will be determined by the capabilities of the wireless network. –Use the following selected method(s): Selects one or more authentication methods for wireless communications.Open System: IEEE 802.11 open system authentication is used to establish a connection. Shared Key: IEEE 802.11 shared key authentication is used to establish a connection. At least one WEP key must be specified in order to use shared key authentication. WEP with 802.1x authentication: IEEE 802.1x authentication (EAP) is used to establish a connection with an authentication server or access point. Wired Equivalent Privacy (WEP) keys are dynamically generated to encrypt data over the wireless network. WPA with pre-shared key (WPA-PSK): The Wi-Fi Protected Access (WPA) protocol is used with a pre-shared key (PSK). The PSK is calculated using a passphrase and the network SSID. WPA with 802.1x authentication: The WPA protocol and IEEE 802.1x authentication (EAP) is used to establish a connection with an authentication server or access point. Encryption keys are dynamically generated to encrypt data over the wireless link. Cisco LEAP: Lightweight Extensible Authentication Protocol (LEAP) is used to establish a a connection with an authentication server or access point. Wired Equivalent Privacy (WEP) keys are dynamically generated to encrypt data over the wireless link. A user name and password must be specified to use LEAP.

Configure Digi devices73Data Encryption: Multiple encryption methods can be selected. –Use any available encryption method: enables all of the methods. The actual method used will be determined by the capabilities of the wireless network.–Use the following selected method(s): Selects one or more encryption methods.Open System: No encryption is used over the wireless link. Open System encryption is valid only with Open System and Shared Key authentication. WEP: Wired Equivalent Privacy (WEP) encryption is used over the wireless link. WEP encryption can be used with any of the above authentication methods. TKIP: Temporal Key Integrity Protocol (TKIP) encryption is used over the wireless link. TKIP encryption can be used with WPA-PSK and WPA with 802.1x authentication. CCMP: CCMP (AES) encryption is used over the wireless link. CCMP can be used WPA-PSK and WPA with 802.1x authentication. WEP Keys –Transmit Key: Specify the corresponding key of the encryption key that should be used when communicating with wireless networks using WEP security. This device allows up to four wireless keys to be set of either 64-bit or 128-bit encryption. These keys allow the wireless network to traverse different wireless networks without having to change the wireless key. Instead, only the transmit key setting has to be changed to specify which wireless key to send. –Encryption Keys: Specify 1 to 4 encryption keys to be used when communicating with wireless networks using WEP security. The encryption keys should be a set of 10 (64-bit) or 26 (128-bit) hexadecimal characters. The encryption key should only contain the characters A-F, a-f, or 0-9. Optionally, separator characters, such as '-', '_', or '.' may be used to separate the set of characters. WPA PSK (Pre-Shared Key) Passphrase/Confirm: The passphrase that the Wi-Fi network uses with WPA pre-shared keys. The pre-shared key is calculated using the passphrase and the SSID. Therefore, a valid network name must have been previously specified. In the Confirm field, reenter the passphrase.Username/Password/Confirm: The username and password combination used to authenticate on the network when using these authentication methods: WEP with 802.1x authentication, WPA with 802.1x authentication, or LEAP. In the Confirm field, reenter the password.

Configure Digi devices74WiFi 802.1x authentication settingsThese settings are not required based on the current Wi-Fi authentication settings. They are only configurable when WEP with 802.1x authentication or WPA with 802.1x authentication are enabled on the WiFi Security Settings tab. EAP Methods: These are the types of Extensible Authentication Protocols (EAP) or outer protocols that are allowed to establish the initial connection with an authentication server or access point. These are used with WEP with 802.1x authentication and WPA with 802.1x authentication. –PEAP: Stands for “Protected Extensible Authentication Protocol.” A username and password must be specified to use PEAP. –TLS: Stands for “Transport Layer Security.” A client certificate and private key must be installed in order to use TLS. –TTLS: Stands for “Tunneled Transport Layer Security.” A username and password must be specified to use TTLS. PEAP/TTLS Tunneled Authentication Protocols: These are the types of inner protocols that can be used within the encrypted connection established by PEAP or TTLS. These Extensible Authentication Protocols (EAP) can be used with PEAP or TTLS. –GTC: Generic Token Card –MD5: Message Digest Algorithm. –MSCHAPv2: Microsoft Challenge response Protocol version 2. –OTP: One Time Password These non-EAP protocols that can be used with TTLS. –CHAP: Challenge Response Protocol –MSCHAP: Microsoft Challenge response Protocol –TTLS MSCHAPv2: TTLS Microsoft Challenge response Protocol version 2. –PAP: Password Authentication Protocol Client Certificate Use: When the TLS is protocol is enabled, a client certificate and private key must be installed on the Digi device.–Certificate: Click Browse to select a client certificate file. Then click the next Browse to select a private key file.–Private Key File: If the private key file is encrypted, a password must be specified.Trusted Certificates: Adds and lists trusted certificates.–Verify server certificates: Enable to verify that certificates received from an authentication server or access point are signed by a trusted certificate authority (CA). Standard CAs are built in. Additional trusted certificates may be added.–Trusted Certificate File: To add additional trusted certificates, click Browse to select a certificate file to upload to the Digi device, then click Upload.Installed Certificates: Shows which client certificates have been added and are in use.

Configure Digi devices75DHCP server settingsThe DHCP server feature can be enabled in a Digi device to allow other devices or hosts on this network to be assigned dynamic IP addresses. This DHCP server supports a single subnetwork scope. For the DHCP server to operate, the Digi device must be configured to use a static IP address. For information on how to configure static IP settings, see "Ethernet IP settings" on page 70. DHCP terminologySome key DHCP terms involved in configuring a DHCP server include:scopeA scope is the full consecutive range of possible IP addresses for a network. A scope typically defines a single physical subnet on your network, to which DHCP services are offered. A scope is the primary way for the DHCP server to manage distribution and assignment of IP addresses and related configuration parameters to its clients on the network. exclusion rangeAn exclusion range is a limited sequence of IP addresses within a scope, excluded from DHCP service offerings. Exclusion ranges assure that any addresses in these ranges are not offered by the server to DHCP clients on your network. address poolAfter the scope is defined and exclusion ranges are applied, the remaining addresses form the available address pool within the scope. The addresses in this pool are available for dynamic assignment by the server to DHCP clients on your network. leaseA lease is the length of time that the DHCP server specifies, during which a client host can use an assigned IP address. When the DHCP server grants a lease to a client, the lease is active. Before the lease expires, the client typically needs to renew its address lease assignment with the DHCP server. A lease becomes inactive when it expires or it is deleted at the server, or if the client actively releases the lease. The duration of a lease determines when it will expire and how often the client needs to renew it with the DHCP server in order to retain the lease. A DHCP server will never grant a lease to its own address. There is no need for its own address to be in the exclusion range; the DHCP server simply protects its address from being offered.

Configure Digi devices76grace periodWhen a DHCP client actively releases a lease, or when the lease expires without being renewed by the client, the DHCP server does not immediately delete the lease record and return the associated IP address to the available address pool. A grace period is the interval of time for which the lease record is retained before the DHCP server automatically deletes the record from its lease list, thereby making the IP address available for lease assignment to another client. The grace period is not a configurable value. See also the discussion of the grace period and what it means when the DHCP server is running in "View and manage current DHCP leases" on page 202. reservationYou may use a reservation to create a permanent address lease assignment by the DHCP server. Reservations assure that a specified hardware device on the subnet can always use the same IP address. Address lease reservations associate a specific IP address with a specific client's Ethernet MAC address. optionsOptions are other client configuration parameters that the DHCP server can assign when serving leases to DHCP clients. Most options are defined in RFC 2132. The DHCP server in the Digi device supports a limited set of options: – Option 3: Routers on Subnet – Option 6: DNS Servers Addresses in the DHCP server settingsThe IP address and subnet mask of the DHCP server's scope are the static IP configuration settings for the Digi device itself. The default gateway (router) provided to a client with the lease information is the IP address of the Digi device. The DNS servers provided to a client with the lease information are the DNS server addresses configured in the Digi device. These addresses include any DNS server addresses that the Digi device acquires when it connects to the mobile network.

Configure Digi devices77DHCP server configuration settingsHere are the configuration settings for the DHCP server. Typically, these settings can be modified without having to restart the DHCP server for the changes to become effective in the running server. Enable Dynamic Host Configuration Protocol (DHCP) Server: Enables the DHCP server feature on this Digi device. Note that for the DHCP server to operate, the Digi device must be configured to use a static IP address. For information on how to configure static IP settings, see "Ethernet IP settings" on page 70.–Scope Name: The name of the physical network interface associated with the subnet being served by the DHCP Server. Most Digi device models have a single network interface, so there is no choice for the scope name. For models that have multiple network interfaces, such as an Ethernet interface and a Wi-Fi (802.11) interface, this DHCP Server may be configured to provide services on either of those interfaces.–IP Addresses: The starting and ending IP addresses for the scope being served by this DHCP server. These addresses must be in the same subnet as the Digi device itself. –Lease Duration: The length of the leases for the scope being served by this DHCP server. The default lease duration is 24 hours. A DHCP client may request a lease duration other than this setting, and the DHCP server will grant that request if possible. Wait specified delay before sending DHCP offer reply: The interval of time in milliseconds to delay before offering a lease to a new client. The default delay is 500ms, and the range is 0 to 5000ms. Use of this delay permits this Digi device to reside on a network with other DHCP servers, yet not offer leases to new clients unless the other DHCP servers do not make such an offer. This provides a measure of protection against inadvertently connecting a Digi device to a network that is running its own DHCP server(s), and offering leases to clients in a manner inconsistent with that network. Check that an IP address is not in use before offering it: When a DHCP client requests a new IP address lease, before offering an IP address to that client, use “ping” to test whether that IP address is already in use by another host on the network but is unknown to the DHCP server. If an IP address is determined to be in use, it is marked as Unavailable for a period of time, and it will not be offered to any client while in this state. Enabling this test adds approximately one second of delay before the IP address is offered to the client, since the “ping” test must not receive a valid reply for that test to successfully determine that the IP address is not already in use. This option is off (disabled) by default. This option does not apply to Static Lease Reservations, since the “ping” test is not used for them.

Configure Digi devices78Send the DHCP Server IP address as a DNS Proxy Server: This option configures the DHCP Server to send its IP address to a DHCP client as the first DNS server in its lease information. This Digi device supports a DNS Proxy feature that will relay DNS requests and responses between DNS clients and servers. The DNS Proxy is not a feature of the DHCP Server itself, but rather it is managed elsewhere in the configuration settings for this Digi device. For DNS Proxy to be used effectively by a DHCP client, it must be enabled both in the DHCP server configuration and in the DNS Proxy settings. For more information, see the description of the Enable DNS Proxy Service setting in "Advanced network settings" on page 107. This option is on (enabled) by default. –Static Lease Reservations: A static lease reservation is a specific IP address paired with a client's MAC address, which reserves the IP address for that client's use only. This assures that a client always receives a lease for the same IP address and that no other client obtains a lease for that address. To add a reservation, enter the IP address and MAC Address values, check or clear the Enable checkbox, and then press the Add button. After adding a reservation, you may click on the IP address or MAC address of that entry in the table, permitting you to specify or modify the lease duration for this reservation. The Enable checkbox for the entry permits a reservation to be disabled without actually removing the entry, then enabled again at a later time. The Remove link is used to permanently remove a reservation from the DHCP server configuration. The Remove All link is used to permanently remove all reservations from the DHCP server configuration. –Address Exclusions: A specific set of IP addresses to exclude from the scope. The DHCP server will not grant leases to clients for any IP address in the exclusion range. To add an exclusion, enter the starting and ending IP addresses, check or clear the Enable checkbox, and then press the Add button. The Enable checkbox for the entry permits an exclusion to be disabled without actually removing the entry, then enabled again at a later time. The Remove link is used to permanently remove an exclusion from the DHCP server configuration. The Remove All link is used to permanently remove all exclusions from the DHCP server configuration. Apply button: You must click the Apply button to save changes you make to the DHCP server settings. If you leave this page without applying the changes, those changes will be discarded.Manage the DHCP serverTo manage the DHCP server and view/manage lease status, go to Management > Network Services. See "Manage DHCP server operation" on page 202.

Configure Digi devices79Network services settingsThe Network Services page shows a set of common network services that are available for Digi devices, and the network port on which the service is running. Common network services can be enabled and disabled, and the TCP port on which the network service listens can be configured. Disabling services may be done for security purposes. That is, certain services can be disabled so the device runs only those services specifically needed. To improve device security, non-secure services such as Telnet can be disabled. It is usually best to use the default network port numbers for these services because they are well known by most applications. Several services have a setting for whether TCP keep-alives will be sent for the network services. TCP keep-alives can be configured in more detail on the Advanced Network Settings page. Caution Exercise caution in enabling and disabling network services, particularly disabling them. Changing certain settings can render a Digi Connect device inaccessible. For example, disabling Advanced Digi Discovery Protocol (ADDP) prevents the device from being discovered on a network, even if it is actually connected. Disabling HTTP and HTTPS disables access to the web interface. Disabling basic services such as Telnet, Rlogin, etc. can make the Command-Line interface inaccessible.Supported network services and their default network port numbersIn Digi devices that have multiple serial ports, the network port number defaults for various services are set based on the following formula: base network port number + serial port numberFor example, the Telnet Passthrough service is set to network port 2001 for serial port 1, 2002 for serial port 2, 2003 for serial port 3, etc. If a network port is changed for a particular service, that is the only network port number that changes. That change does not carry over to the other network ports. For example, if the network port number for Telnet Passthrough is changed from 2001 to 3001, that does not mean that the other network ports will change to 3002, 3003, etc.There are two types of network services available:Basic services, which are accessed by connecting to a particular well-known network port. Passthrough services, in which a particular serial port is set up for a particular type of service. To use the service, users must both use the correct protocol and specify the correct network port. For example, assuming default service ports and using a Linux host, here is how a user would access the SSH and Telnet passthrough services:#> ssh -l fred digi16 -p 2501#> telnet digi16 2101

Configure Digi devices80The table shows network services, services provided, and the default network port number for each service.Service Services provided Default network port numberDevice Discovery, also known as Advanced Digi Discovery Protocol (ADDP) Discovery of Digi devices on a network. Disabling this service disables use of the Digi Device Discovery utility to locate the device, either on its own or as part of running the Digi Device Setup Wizard.The network port number for ADDP cannot be changed from its default.2362Encrypted (Secure) RealPort Secure Ethernet connections between COM or TTY ports and device servers or terminal servers. 1027RealPort A virtual connection to serial devices, no matter where they reside on the network. 771Modem Emulation Pool (pmodem) Allows the Digi device to emulate a modem. Modem emulation sends and receives modem responses to the serial device over the Ethernet instead of Public Switched Telephone Network (PSTN). Telnet processing can be enabled or disabled on the incoming and outgoing modem-emulation connections. The pmodem service is for connecting to whatever serial port will answer.50001Modem Emulation Passthrough Allows the Digi device to emulate a modem. This service is for dialing in to a particular serial port that has been set up for modem emulation.50001Remote login (Rlogin) Allows users to log in to the Digi device and access the command-line interface through Rlogin. 513Remote shell (Rsh) Allows users to log in to the Digi device and access the command-line interface through Rsh. 514Secure Shell Server (SSH) Allows users secure access to log in to the Digi device and access the command-line interface.22Secure Shell (SSH) Passthrough Accessing a specific serial port set up for SSH. 2501Secure Socket Service Authentication and encryption for Digi devices. 2601Simple Network Management Protocol (SNMP)Managing and monitoring the Digi device. To run SNMP in a more secure manner, note that SNMP allows for “sets” to be disabled.This securing is done in SNMP itself, not through this command.If disabled, SNMP services such as traps and device information are not used.161Telnet Server Allows users an interactive Telnet session to the Digi device’s command-line interface. If disabled, users cannot Telnet to the device. 23

Configure Digi devices81Network services and IP pass-throughThe IP pass-through feature (Configuration > Network > IP Pass-through) causes the Digi device to be bridged transparently between the Ethernet and mobile data links. Enabling IP Pass-through disables many device features, including many network services. To provide access to the device for configuration and management purposes, you can configure a subset of network services to terminate at the Digi device instead of being passed on to a connected device such as a router. In the IP pass-through feature, these network services are called pinholes. Services that can be configured as pinholes include HTTP, HTTPS, Telnet, SSH, and SNMP. See "IP pass-through settings" on page 102 for more information.Telnet Passthrough Allows a Telnet connection directly to the serial port, often referred to as reverse Telnet.2001Transmission Control Protocol (TCP) EchoUsed for testing the ability to send and receive over a TCP connection, similar to a ping.7Transmission Control Protocol (TCP) PassthroughAllows a raw socket connection directly to the serial port, often referred to as reverse sockets.2101User Datagram Protocol (UDP) Echo Used for testing the ability to send and receive over a UDP connection, similar to a ping.7User Datagram Protocol (UDP) PassthroughAllows raw data to be passed between the serial port and UDP datagrams on the network.2101Web Server, also known as HyperText Transfer Protocol (HTTP)Access to web pages for configuration that can be secured by requiring a user login.HTTP and HTTPS, below, are also referred to as Web Server or Secure Web Server. These services control the use of the web interface. If HTTP and HTTPS are disabled, device users cannot use the web interface to configure, monitor, and administer the device. 80Secure Web Server, also known as HyperText Transfer Protocol over Secure Socket Layer (HTTPS)Access to web pages for configuration that can be secured by requiring a user login, with encryption for greater security.443Service Services provided Default network port number

Configure Digi devices82Dynamic DNS update settingsA Dynamic DNS (DDNS) service allows a user whose IP address is dynamically assigned to be located by a host or domain name. Before a DDNS service may be used, you must create an account with the DDNS service provider. The provider will give you account information such as username and password. You will use this account information to register your IP address and update it as it changes. A DDNS service provider typically supports the registration of only public IP addresses. When using such a service provider, if your Digi device has a private IP address (such as 192.168.x.x or 10.x.x.x), your update requests will be rejected. The Digi device monitors the IP address it is assigned. It will typically update the DDNS service or server automatically, but only when its IP address has changed from the IP address it previously registered with that service. DDNS service providers may consider frequent updates to be an abuse of their service. In such a circumstance, the service provider may act by blocking updates from the abusive host for some period of time, or until the customer contacts the provider. Please observe the requirements of the DDNS service provider to ensure compliance with possible abuse guidelines. The Dynamic DNS Update Settings page includes both settings and status information.SettingsCurrent IP address: The IP address of the Digi device: Use the following dynamic DNS service: Disables DDNS updates, or selects the DDNS service provider to use to register the IP address of this Digi device. When you select a specific DDNS service provider, you must also provide the related account information for that service provider. To force an update request to be sent to a particular DDNS service. 1Select the None radio button to disable DDNS updates, and then click Apply to save that change. 2Select the radio button for the DDNS service you wish to update3Click Apply to save that change. If the settings for the selected DDNS service are all specified and valid, an update request will be sent immediately to that service.

Configure Digi devices83DynDNS.org DDNS Service: You must create your account at DynDNS.org before you can successfully register the IP address of your Digi device with their service. Please familiarize yourself with their service options and requirements, in order to most effectively use this feature of your Digi device. This DDNS service supports only public IP addresses. If you have a private IP address (such as 192.168.x.x or 10.x.x.x), your update requests will be rejected. –Host and Domain Name: The fully qualified host and domain name you have registered with your service provider. An example is: myhost.dyndns.net. –DynDNS User Name: The user name for the account you have created with your service provider. –DynDNS Password: The password for the account you have created with your service provider. –DynDNS DDNS System: The system for the account you have created with your service provider. DynDNS.org supports a number of different services, which vary by the system you select. The available choices are: - Dynamic DNS - Static DNS - Custom DNS –Use Wildcards: Enables/disables wildcards for this host. The available choices for this option are: - Disable wildcards - Enable wildcards - No change to service setting According to wildcard documentation at DynDNS.org: “The wildcard aliases *.yourhost.ourdomain.tld to the same address as yourhost.ourdomain.tld.” Using this option in the settings for your Digi device has the same effect as selecting the wildcard option on the DynDNS.org website. To leave the wildcard option unchanged from the current selection on their web site, use the “no change” option in the device settings. Note that DynDNS.org support for this option may vary according to the DynDNS system you are registered to use. –Connection Method: The connection method to try when connecting to your service provider to register your IP address. DynDNS.org supports three methods to connect. The available choices are: - Standard HTTP port 80 - Alternate HTTP port 8245 - Secure HTTPS port 443

Configure Digi devices84Status and history informationThe next settings show status and history information for the DDNS service.Most Recent DDNS Service Update Status: This section provides the status of the most recent attempt to update a DDNS service or server. The displayed information confirms the success of an update request, or it may offer information as to the reason an update request was rejected by the service or server. A number of status items are shown. Some of them are specific to the DDNS service being updated. Such information will be helpful when trying to resolve update failures with the DDNS service provider. –Service: The name of the DDNS service provider or server being updated. –Reported: The IP address for your Digi device that is being registered with the DDNS service provider or server. –Update Status: A simple indication of success or failure for this last update request. –Result Information: A DDNS service-specific status message, helpful when consulting technical support. –Raw Result Data: DDNS service-specific update result data returned by the service provider, helpful when consulting technical support. Last Logged Action or Result: The last attempted, logged action or result for the DDNS feature, helpful for troubleshooting possible problems with DDNS updates. This information may help identify problems with settings, network connection failures, and other issues that prevent a DDNS update from being completed successfully. Successful results also are reported here.

Configure Digi devices85IP filtering settingsYou can better restrict your device on the network by only allowing certain devices or networks to connect. This is better known as IP Filtering or Access Control Lists (ACL). By enabling IP filtering, you are telling the device to only accept connections from specific and known IP addresses or networks. Devices can be filtered on a single IP address or can be restricted as a group of devices using a subnet mask that only allows specific networks to access to the device. Caution It is important to plan and review your IP filtering settings before applying them. Incorrect settings can make the Digi device inaccessible from the network. On the IP Filtering Settings page, enter the settings as follows:Only allow access from the following devices and networks: Enables IP filtering so that only the specified devices or networks are allowed to connect to and access the device. Note that if you enable this feature and the system from which you are connecting to the Digi device is not included in the list of allowed devices or networks, then you will instantly no longer be able to communicate or configure the device from this system. –Automatically allow access from all devices on the local subnet: Specifies that all systems and devices on the same local subnet or network of the device should be allowed to connect to the device. Allow access from the following devices: A list of IP addresses of systems or devices that are allowed to connect to this device. Allow access from the following networks: A list of networks based on an IP address and matching subnet mask that are allowed to connect to this device. This option allows grouping several devices that exist on a particular subnet or network to connect to the device without having to manually specific each individual IP address.

Configure Digi devices86IP forwarding settingsWhen a Digi device acts as a router and communicates on both a private and public network with different interfaces, it is sometimes necessary to forward certain connections to other devices. This is also known as Network Address Translation (NAT) or Port Forwarding. When an incoming connection is made to the device on the private network, the IP port is searched for in the table of port forwarding entries. If the IP port is found, that connection is forwarded to another specific device on the public network.Port Forwarding/NAT is useful when external devices can not communicate directly to devices on the public network of the Digi device. For example, this may occur because the device is behind a firewall. By using port forwarding, the connections can pass through the networks transparently. Also, Port Forwarding/NAT allows multiple devices on the private network to communicate to devices on the public network by using a shared private IP address that is controlled by Port Forwarding/NAT. Port forwarding can be used to connect from a Digi device to a RealPort device. For this type of connection to occur, your mobile wireless provider must be mobile-terminated. IP Forwarding settings include:Enable IP Routing: Enables or disables IP forwarding.Apply the following static routes to the IP routing table: The Digi device can be configured with permanent static routes. These routes are added to the IP routing table when this device boots, or afterward when network interfaces become active or changes are made to this list of static routes. The use of static routes provides a means by which IP datagrams can be routed to a network that is not a local network or accessible through the default route.Network Address Translation (NAT) Settings: A list of instances of NAT settings is displayed. For each instance, the settings are:–Enable Network Address Translation (NAT): Permit the translation and routing of IP packets between private (internal) and public (external) networks. Refer to NAT configuration options below. Some Digi device models permit the configuration of NAT instances for more than one network interface. . –NAT Public Interface: The name of the network interface for which NAT will perform address and port translations. The list of interfaces available for NAT configuration varies according to the capabilities of your Digi device model.–NAT Table Size Maximum: The maximum number of entries that can be added to the NAT table. These entries include the configured port and protocol forwarding rules (see Forward TCP/UDP/FTP Connections and Forward Protocol Connections below), the DMZ Forwarding rule (see Enable DMZ Forwarding to this IP address below), as well as dynamic rules for connections that are created and removed during the normal operation of NAT. The NAT table size maximum value may be configured for any value in the range 64 through 1024, with the default value being 256 entries. Note that this setting does not control the maximum number of port or protocol forwarding rules that can be configured in their respective settings.

Configure Digi devices87–Enable DMZ Forwarding to this IP address: DMZ Forwarding allows you to specify a single host (DMZ Server) on the private (internal) network that is available to anyone with access to the NAT Public Interface IP address, for any TCP- and UDP-based services that haven't been configured. Services enabled directly on the Digi device take precedence over (are not overridden by) DMZ Forwarding. Similarly, TCP and UDP port forwarding rules take precedence over DMZ Forwarding (please see Forward TCP/UDP/FTP Connections below). DMZ Forwarding is effectively a lowest priority default port forwarding rule that doesn't permit the same remapping of port numbers between the public and private networks, as is possible if you use explicit port forwarding rules. If enabled, the DMZ Forwarding rule is used for incoming TCP and UDP packets from the public (external) network, for which there is no other rule. These other rules include explicit port forwarding rules or existing dynamic rules that were created for previous communications, be those outbound (private to public) or inbound (public to private). Also, the DMZ Forwarding rule is not used if there is a local port on the Digi device to which the packet may be delivered. This includes TCP service listener ports as well as UDP ports that are open for various services and clients. DMZ forwarding does not interfere with established TCP or UDP connections, either to local ports or through configured or dynamic NAT rules. Outbound communications (private to public) from the DMZ Server are handled in the same manner as the outbound communications from other hosts on that same private network. SSecurity Warning: DMZ Forwarding presents security risks for the DMZ Server. Configure the DMZ Forwarding option only if you understand and are willing to accept the risks associated with providing open access to this server and your private network. –Forward protocol connections from external networks to the following internal devices: Enables protocol forwarding to the specified internal devices. Currently, the only IP protocols for which protocol forwarding is supported are:Generic Routing Encapsulation (GRE, IP protocol 47)Encapsulating Security Payload (ESP, IP protocol 50, tunnel mode only).These are routing protocols that are used to route (tunnel) various types of information between networks. If your network needs to use the GRE or ESP protocol between the public and private networks, enable this feature accordingly.

Configure Digi devices88–Forward TCP/UDP/FTP connections from external networks to the following internal devices: Specifies a list of connections based on a specific IP port and where those connections should be forwarded to. Typically the connecting devices come from the public side of the network and are redirected to a device on the private side of the network. It is possible to forward a single port or a range of ports. To forward a range of ports, specify the number of ports in the range, in the Range Port Count field for the port forwarding entry. When a range is configured, the first port in the range is specified, and the full range is indicated in the displayed entry information. Note that FTP connections require special handling by NAT. This is because the FTP commands and replies are character-based, and some of them contain port numbers in this message text. Those embedded port numbers potentially need to be translated by NAT as messages pass between the private and public sides of the network. In consideration of these needs, one should select FTP as the protocol type when configuring a rule for FTP connection forwarding to an FTP server on the private network side. If TCP is used instead, FTP communications may not work correctly. Note also that TCP port 21 is the standard port number for FTP. Finally, the use of port ranges for FTP forwarding is not supported; a port count of 1 is required.ExampleFor example, to enable port forwarding of RealPort data (network port 771) on a Digi Connect WAN VPN to a Digi Connect SP with an IP address of 10.8.128.10, you would do the following:Make sure the Enable IP Routing checkbox is checked.In the Forward TCP/UDP connections from external networks to the following internal devices section, enter the port forwarding information as follows, and click Add:

Configure Digi devices89IP Network Failover settingsThe IP Network Failover feature provides a dynamic method for selecting and configuring the default gateway for the Digi device. Failover uses of a set of rules and link tests to determine whether a particular network interface can be used to communicate with a specified destination. The user configures these rules, link tests and the priority order of the interfaces. Failover maintains a network interface list, ordered by the configured Failover Interface Priority, and containing information on the state of the network interface and recent success or failure of the link tests for that interface. The failover status for a network interface is one of the following: 1 - Responding: The interface is Up and configured in the system. It is currently responding to the link tests. This interface is suitable for use as the default gateway. 2 - Up: The interface is Up and configured in the system. Its status has not been determined by the link tests, or no link tests are configured. This interface may be suitable for use as the default gateway. 3 - Not Responding: The interface is Up and configured in the system. However, it is not currently responding to the link tests, and the number of consecutive test failures has reached the threshold number configured in the Network Failover settings. This interface may be suitable for use as the default gateway. 4 - Down: The interface is Down or not configured in the system. However, it is not currently responding to the link tests. This interface is not suitable for use as the default gateway. 5 - Unknown: The interface is Unknown (does not exist) in the system. This interface is not suitable for use as the default gateway. The number shown above for each status value, indicates the priority of that status, used by failover in selecting the interface to use as the default gateway. Status priority 1 is the most suitable for use, with lower priorities considered suitable if there are no interfaces at the highest priority. When any network interface changes status, the interface list is examined for the interface that has the highest status priority, nearest the start of the list. The highest priority interface with a Responding status is used as the default gateway. If no interface is marked Responding then the highest Up interface is used, etc. When Network Failover performs a link test, it adds a temporary static host route to the destination IP address for the link test, using the network interface that the link test is configured to test. The static host route is removed when the link test completes. whether successfully or in failure. Users should be careful to avoid manually configuring static host routes to any of the failover link test destinations, as such host routes may interfere with failover's link testing. Static IP routes are configured on the IP Forwarding Settings page. For additional information, see "IP forwarding settings" on page 86. In the Advanced Network Settings, the Gateway Priority selection provides a simpler method for selecting the default gateway. However, if failover is properly configured and enabled, it overrides the Gateway Priority selection in the Advanced Network Settings. For a description of this non-failover Gateway Priority selection and information on how to configure it, see "Advanced network settings" on page 107. For IP Network Failover status and statistics, see "IP Network Failover statistics" on page 192.

Configure Digi devices90Network Failover General Settings Enable IP Network Failover: Enable the Network Failover feature in the Digi device. Click the checkbox to turn failover on or off. Enable fallback to the non-failover default gateway priority method: The fallback option is used if a default gateway cannot be configured by Network Failover. Failure to configure a default gateway could occur if one or more interfaces are not enabled (On) for Network Failover use, or if the enabled interfaces are not Up or do not have a gateway associated with them. Click the checkbox to turn fallback on or off. Failover Interface Priority: The list of available network interfaces in priority order, used by failover to determine the default gateway. The default gateway is used to route IP packets to an outside network, unless controlled by another route. A network interface may have a static gateway configured for it, or it may obtain a gateway from DHCP or other means when the interface is configured. The first interface in this list that supplies a gateway will be used as the default gateway. The default gateway may change as interfaces connect and disconnect, and as failover link tests determine that an interface is providing the desired IP packet routing to a remote network destination. To change the interface priority order, select an item from the list and click the up or down arrow. Link Test Settings for each of the network interfaces: The options that follow are used to configure the link tests for the network interfaces. Each network interface has its own set of options. Failover can support the use of Ethernet, Wi-Fi and Mobile (cellular) network interfaces. The available interfaces vary among different Digi products. –Enable IP Network Failover for the XXX Interface: Enable use of the XXX interface for failover, where XXX is Ethernet, Wi-Fi, or Mobile. Click the checkbox to turn failover on or off. If a network interface is not enabled for use by failover, it will not be considered by failover for use in selecting the default gateway. –No Test: Click on the radio button to select no link tests will be used for this interface. Since no link tests are run, failover will only be aware of the Up or Down status of the interface.–Ping Test: Click on the radio button to select the Ping Test as the link test to use for this interface. The Ping Test sends ICMP Echo Request packets to the configured destination IP address. If an ICMP Echo Reply is received (ping reply), the link test has successfully demonstrated that the network interface can be used to communicate with the specified destination. Primary Destination (Ping Test): The primary, or first, destination to ping. The destination must be a valid IPv4 address. If the destination is left empty, no Primary Destination link test will be attempted. Secondary Destination (Ping Test): The secondary, or second, destination to ping. The destination must be a valid IPv4 address. If the destination is left empty, no Secondary Destination link test will be attempted. Send Count (Ping Test): The maximum number of ping requests to send for a ping link test. When a reply is received, the ping test ends successfully and does not continue to send ping requests. If no ping reply is received after Send Count ping requests have been sent, the link test ends in failure.

Configure Digi devices91Send Interval (Ping Test): The time interval in seconds between sending ping requests during a ping link test. The ping tests sends a ping request. If no ping reply is received before the Send Interval expires, another ping request is sent. –TCP Connection Test: Click on the radio button to select the TCP Connection Test as the link test to use for this interface. The TCP Connection Test attempts to establish a TCP connection to the configured destination IP address and port number. If a connection is successfully established, or if the remote host actively rejects (resets) the connection attempt, the link test has successfully demonstrated that the network interface can be used to communicate with the specified destination. If a TCP connection is successfully established, it is immediately closed. Primary TCP Port (TCP Connection Test: The destination TCP port to use to connect to the Primary Destination address. Primary Destination (TCP Connection Test): The primary, or first, destination to which to establish a TCP connection. The Primary TCP Port is used as the port to which the test connects at the Primary Destination. The destination must be a valid IPv4 address. If the destination is left empty, no Primary Destination link test will be attempted. Secondary TCP Port (TCP Connection Test): The destination TCP port to use to connect to the Secondary Destination address. Secondary Destination (TCP Connection Test): The secondary, or second, destination to which to establish a TCP connection. The Secondary TCP Port is used as the port to which the test connects at the Secondary Destination. The destination must be a valid IPv4 address. If the destination is left empty, no Secondary Destination link test will be attempted. Connection Timeout (TCP Connection Test): The time in seconds to wait for a TCP connection to be established or rejected by the destination host.

Configure Digi devices92The following four Link Test options are used if the Ping or TCP Connection Link Test is selected. Repeat the test every: N seconds: The time interval (N) in seconds between the end of a successful link test and the start of the next link test for the network interface. This interval is used only after a successful test. Shorter intervals verify the link more often, but they also increase the packet traffic over the network interface being tested. The frequency of tests should be considered carefully for network connections such as Mobile (cellular) connections, which may be expensive, depending on the service plan in effect with your mobile service provider. On test failure, retry every: N seconds: The time interval (N) in seconds between the end of a failed link test and the start of the next link test for the network interface. This interval is used after a failed test, but only until the “Not Responding” (consecutive failures) threshold has been reached. A possible strategy is to configure a shorter Retry interval than the Success interval, to more quickly test the network connection to determine whether it is truly not working or there was just a transient test failure. Determining the validity of the link helps failover determine whether it is necessary to reconfigure the default gateway. Report Not Responding after: N consecutive failures: The threshold (N) in consecutive link test failures at which time the network interface is reported to failover as “Not Responding”. Upon receiving such a report, failover may determine that the default gateway should be reconfigured. The count of consecutive failures is reset to zero when a successful link test completes, or when the network interface is reconfigured or its connection is restarted (such as a mobile PPP connection). When Not Responding, retry every: N seconds: The time interval (N) in seconds between the end of a failed link test and the start of the next link test for the network interface. This interval is used after a failed test, but only after the “Not Responding” (consecutive failures) threshold has been reached.

Configure Digi devices93Socket tunnel settingsA Socket Tunnel can be used to connect two network devices: one on the Digi device’s local network and the other on the remote network. This is especially useful for providing SSL data protection when the local devices do not support the SSL protocol. One of the endpoint devices is configured to initiate the socket tunnel. The tunnel is initiated when that device opens a TCP socket to the Digi device device on the configured port number. The Digi device then opens a separate connection to the specified destination host. Once the tunnel is established, the Digi device acts as a proxy for the data between the remote network socket and the local network socket, regardless of which end initiated the tunnel.Socket Tunnel settings include:Enable: Enables or disables the configured socket tunnel. Timeout: The timeout (specified in seconds) controls how long the tunnel will remain connected when there is no tunnel traffic. If the timeout value is zero, then no timeout is in effect and the tunnel will stay up until some other event causes it to close. Initiating Host: The hostname or IP address of the network device which will initiate the tunnel. This field is optional. Initiating Port: Specify the port number that the Digi device will use to listen for the initial tunnel connection. Initiating Protocol: The protocol used between the device that initiates the tunnel and the Digi device. Currently, TCP and SSL are the two supported protocols. Destination Host: The hostname or IP address of the destination network device. Destination Port: Specify the port number that the Digi device will use to make a connection to the destination device. Destination Protocol: This is the protocol used between Digi device and the destination device. Currently, TCP and SSL are the two supported protocols. This protocol does not need to be the same for both connections. Click the Add button to add a socket tunnel. Click the Apply button to save the settings. Once the socket tunnel is configured, check the Enable checkbox to enable the socket tunnel.

Configure Digi devices94Virtual Private Network (VPN) settingsVirtual Private Networks (VPNs) are used to securely connect two private networks together so that devices may connect from one network to the other network using secure channels.VPN uses IP Security (IPSec) technology to protect the transferring of data over the Internet. All Digi Cellular Family products except Digi Connect WAN support VPNs.The Digi device is responsible for handling the routing between networks. Devices within the local private network served by the Digi device can connect to devices on the remote network as if they are in the local network. The VPN tunnels are configured using various security settings and methods to ensure the networks are secured. Uses for VPN-enabled Digi devicesVPN-enabled Digi devices, such as Digi Connect WAN VPN, are cellular-enabled routers that securely connect remote subnets using IPsec VPN technology. Devices in the Digi device’s private network can connect directly to devices on the other private network with which the VPN tunnel is established. You configure VPN tunnels using security settings and methods to ensure the networks are secured.The Digi device is used for primary or backup remote site connectivity. Secured IPsec VPN traffic is typically routed from the Digi device over the cellular IP network and is terminated by a VPN appliance at the host end.A VPN-enabled Digi device can be used in several scenarios; for example:As the primary remote site router where no other WAN router is used.As a backup router where the remote site has a primary WAN connection through DSL, Frame Relay, or other means.To provide secure access to remote serial and/or Ethernet devices.This section describes using a Digi device as a primary remote site router using IPsec Encapsulated Security Payload (ESP) and Internet Key Exchange (IKE)/Internet Security Association and Key Management Protocol (ISAKMP) pre-shared key methods.

Configure Digi devices95VPN Global SettingsGeneral Security Settings –Enable Antireplay: Antireplay allows the IPsec tunnel receiver to detect and reject packets that have been replayed. Set this field to match that at the remote VPN gateway. The default is Enabled. Important: Disable Antireplay if you use manual keyed tunnels. Miscellaneous Settings–Suppress SA lifetime during IKE Phase 1: In most cases, leave this option unchecked. Some VPN equipment does not negotiate the ISAKMP Phase 1 lifetimes. Such equipment may refuse to negotiate with the Digi device if it includes lifetime values in Phase 1 negotiation messages. If the Digi device must communicate with such equipment, enable this option to prevent the Phase 1 lifetimes from being included in the ISAKMP Phase 1 messages.–Suppress Delete Phase 1 SA Message For PFS: In most cases this option should be unchecked. VPN devices usually send a delete notification for any phase 2 SAs that are left over from previous sessions when they start to negotiate quick mode. However, some devices do not handle this notification correctly and will terminate the connection when they receive it. If you have trouble connecting to the remote VPN device, you can try checking this box to suppress sending this message.–IP addresses of remote VPN peers may change on the fly (Dynamic DNS): Check this box if you are specifying the address of the remote VPN device with a DNS name, and that device uses dynamic DNS because its public IP address can change. Checking this box will cause the Digi device to poll the DNS server once a minute to see if the remote VPN device’s IP address has changed. The IPSec software will be restarted with the new IP address if it does change. Checking this option will increase network traffic since the unit will be polling the DNS server once a minute.

Configure Digi devices96VPN tunnel configuration settingsDescription: Enter a short, one-line description of the VPN tunnel.VPN Tunnel: Displays settings for encryption and authentication keys. Selecting ISAKMP is recommended; it is the standard protocol used by almost all VPN devices. ISAKMP is more secure than manually setting the keys The only time to set the keys manually is when connecting with an old VPN device that does not support ISAKMP, in which case you should replace the obsolete box with one that does.Local Endpoint Type:Select Local endpoint is a subnet to allow devices on the remote network to see devices on the local network. This is the standard way IPsec works and the correct choice in most cases. Select Local endpoint is an internal interface to not allow devices on the remote network to see devices on the local network. This causes the Digi device to create a virtual endpoint and assign it the IP address specified later in the settings on this page. Devices on the remote network will only see the IP address of this endpoint, and cannot see the IP addresses of any devices on the local private network. This feature must be used in combination with NAT. If you select it, then you must update the NAT settings on the Network >IP Forwarding page. You must enable NAT translation for the VPN interface that corresponds to the tunnel. Tunnel 1 uses interface vpn0, tunnel 2 uses vpn1, etc.VPN Mode: If a single remote VPN device will be used for this VPN tunnel, select Initiate client connections to and accept connections from the remote VPN device at and enter the remote device’s IP address or DNS name in the field below. If the Digi device should accept connections from any remote VPN device for this tunnel, select the Accept connections from any VPN device option. Identity settings–Network Interface: mobile|0eth0: Select the network interface used to communicate with the remote VPN device. The mobile0 device is the one with the cellular modem. In most cases, this is the correct device to use to communicate with a remote VPN device on the Internet.–Negotiate tunnel as soon as interface comes up: Check if the Digi device should establish the VPN tunnel as soon as the selected network interface is ready to use. Leave this box unchecked if the Digi device should wait until a device on the local private network attempts to communicate with a device on the remote network before establishing the VPN tunnel.–Use the following as the identity: Use this option to control how the Digi device identifies itself to the remote VPN device. The Digi device must identify itself to the remote VPN device when it negotiates the tunnel. You must make sure both devices agree on what the identification is. Select the “Use the following as the identity” option to enter a string such as a DNS name or an FQDN. Select the “Use the interface IP address” if the Digi device should send the IP address of the interface you selected above as its identity. Select Use the identify certificate X.509… to use a PKI certificate. If using a PKI certificate, remember to load it in the Administration >X.509 Certificate/Key Management web page.

Configure Digi devices97Local Endpoint: If the Local Endpoint Type is set to Local endpoint is an internal interface, the following prompts are displayed:–Host address for tunnel's internal VPN interface: In the IP Address field, enter the IP address for the virtual network interface in the IP Address. This is the IP address which will be visible to devices on the remote private network.–Discard packets sent to the remote subnet unless they come from this local subnet: Select this option if the Digi device should discard IP packets transmitted from a device on the local network and addressed to the remote network which do not come from the subnet you specify below.IP Address: Enter the IP address of the subnet.Subnet Mask: Enter the mask for the subnet.– As indicated on the settings page, having the local endpoint as an internal interface is used in combination with NAT. Click here to configure the Network Address Translation (NAT) settings. Select the interface name of vpn0 to configure NAT for this tunnel.If the Local Endpoint Type is set to Local endpoint is a subnet, prompts are displayed for entering the network address and mask for the private network. Both the Digi unit and the remote VPN device must be configured to use the same values.–IP Address: Enter the IP address of the local private network.–Subnet Mask: Enter the mask for the local private network.Remote Endpoint: Enter the IP address and subnet mask of the remote network. Both the Digi unit and the remote VPN device must be configured to use the same values.–Tunnel Network Traffic to the following Remote Network:IP Address: Enter the IP address of the remote network.Subnet Mask: Enter the subnet mask of the remote network.Pre-Shared Key SettingsIf you select the pre-shared key authentication method in one or more of your ISAKMP Phase 1 Policies, then you will be prompted to supply the ID of the VPN device and the preshared key used for authentication. –Use the following IP address, FQDN, or username for the remote VPN’s ID: Enter the remote VPN device’s ID here. Make sure the remote VPN device is configured to send this ID.–Use the following pre-shared key to negotiate IKE security settings: Enter the preshared key here. This must match exactly with the preshared key set on the remote VPN device.

Configure Digi devices98ISAKMP Phase 1 Settings–General Security Settings for Phase 1Connection Mode: Main|Aggressive: Set the connection mode to match that configured on the remote VPN device. If aggressive mode is selected, then the VPN device will try aggressive mode first, and then try main mode if aggressive mode fails.Enable Perfect Forward Secrecy (PFS): Set this option to enable PFS. PFS guarantees that if one key is broken by an attacker, that does not help him to break another key. PFS is more secure, but slows down the negotiation process. Both the Digi unit and the remote VPN device must be configured the same way.–NAT-T SettingsEnable NAT Traversal (NAT-T): Set this option if there is a NAT firewall between the two VPN devices.Keep Alive Interval: The amount of time in seconds between NAT keep alive messages. Once a connection is established through a firewall, the VPN devices have to send keep alive messages to prevent the NAT firewall from timing out the connection. Set the interval to a value less than the connection timeout of the NAT firewall.–ISAKMP Phase 1 Policies: Keys are negotiated in two phases. The first phase negotiates the keys and authentication method to be used to establish the initial ISAKMP connection. During this phase, the two VPN devices verify each other’s identity and create a security association (encrypted connection) which is used during phase 2. The encryption and authentication settings you specify determine the level of security in the connection the two VPN devices used to communicate with each other.Select the policies to be used during phase 1 of the ISAKMP negotiation. The most important thing is to make sure that the Digi unit and the remote VPN device use the same policies. If more than one policy is specified, the VPN devices will use the most secure policy that they both have been configured to support.Pre-shared Key: Using DSS and RSA signatures is more secure than using a pre-shared key.Encryption: The encryption type and the length of the key. The longer the key the more secure it is.Integrity: The authentication algorithm. The SHA1 algorithm is more secure than MD5.SA Lifetime: The maximum length of the phase 1 security association.Diffie-Hellman: The Diffie-Hellman group to use for key generation. The larger the group the more secure it is.

Configure Digi devices99–ISAKMP Phase 2 Settings: The SAs used for bulk data transfer are created during phase 2. The phase 2 settings you specify will determine the level of security used when devices on the local private network communicate with devices on the remote private network. As with the other settings, the both the Digi unit and the remote VPN device must be configured to use the same values. If more than one policy is specified, the VPN devices will use the most secure policy that they both have been configured to support.–General Security Settings for Phase 2Diffie-Hellman: Select the Diffie-Hellman group used to generate keys. Larger groups are more secure.–ISAKMP Phase 2 Policies Encryption: The encryption algorithm used for encrypting data and the length of the key. The longer the key the more secure it is. There are three supported encryption algorithms including DES, 3-DES, and AES. DES encryption uses 64-bit keys, 3-DES encryption uses 192-bit keys, and AES encryption uses 256-bit keys.Authentication: The authentication algorithm used in authenticating clients. There are two supported authentication algorithms including MD5 and SHA1. MD5 authentication uses 128-bit keys and SHA1 uses 160-bit keys. The SHA1 algorithm is more secure than MD5.SA Lifetime: The maximum length of the Phase 2 security association (SA), in seconds. After the SA has been negotiated, the SA lifetime begins. Once the lifetime has completed, a new set of SA policies are negotiated with the remote VPN endpoint.

Configure Digi devices100Example VPN configurationThe diagram shows a Digi Connect WAN VPN used as a primary remote site router:How VPN tunnels workThe Digi device’s Ethernet port usually connects to a switch or hub, which then connects to other Ethernet devices. The mobile/cellular carrier provides only one IP address to the mobile interface. The Digi device uses Network Address Translation (NAT), where only the mobile IP address is visible to the outside. Private IP addresses are typically used on the remote site LAN connected to the Digi device’s Ethernet port. All outgoing traffic, except the tunneled VPN traffic, uses the mobile IP address of the Digi device. Using the example network above, the process for initiating VPN tunnels works like this:1Typically, a host or device on the remote subnet (in this case, 172.17.1.0) requests information from a host on the main site (HQ) subnet (172.16.5.0). For example, a computer at 172.17.1.20 needs a file from 172.16.5.100. 2The Digi device sees the request as being on the HQ subnet and checks whether a VPN tunnel exists between the two sites.3If no tunnel exists, the Digi device initiates a VPN tunnel request to its peer — the VPN concentrator at HQ. The VPN policy settings are compared, and if they match, an IPsec tunnel is created between the Digi device and the VPN concentrator. Traffic is encrypted as defined in the VPN policies. CellularData NetworkDigiConnectVPNInternetRemote Site HQ166.123.99.99 209.123.123.123PWROKWIC0ACT/CH0ACT/CH1WIC0ACT/CH0ACT/CH1ETHACTCOLVPNAppliance172.16 .5.0/2 4172.17.1.0/24172.17.1.1Private IP Tunnel172.16.5.1IPSec ESPWAN

Configure Digi devices101Requirements for VPN tunnelsTo establish an IPSec VPN tunnel, the IP address of the mobile interface must be publicly accessible. The IP address can be either static or dynamic depending upon the requirements of your VPN end point. However, the IP address cannot be within a private range of addresses (for example, 10.0.0.0, 172.16.0.0 or 192.168.0.0). If the mobile IP address is within one of the private IP address ranges, the mobile carrier is using a NAT (Network Address Translation) server between your mobile IP address and the internet. GSM GPRS/EDGE APN type neededIf the VPN end points require static (persistent) IP addresses, you may need a custom access point name (APN). An Internet APN can work in these cases:The main site (HQ) VPN appliance can support Dynamic DNS names.Another form of authentication is used (for example, FQDN).Be aware that these APNs are based on Cingular Blue; other carrier APNs may have similar requirements.CDMA carrier requirements The CDMA (Code-Division Multiple Access) carrier requirements are similar to GSM in that static IP addresses may be required depending on the host site concentrator VPN implementation. In both cases, the Digi device’s mobile IP address will likely need to support mobile terminated data; that is, the ability to accept incoming data connections.HQ router / VPN appliance configurationFor supported protocols, see the IPsec specifications your Digi device. Security policies on the HQ VPN device must match those on the Digi device. The HQ VPN appliance’s peer address is the Digi device’s mobile IP address. Using a console portThe Digi device’s console port can be configured for Console Management to provide SSH or Telnet access. It can be cabled to the router or VPN appliance’s console port to provide true diverse out-of-band console access.Configuring and managing VPN settings from the command lineIn the command-line interface, the set vpn command configures VPN connections, and the vpn command manages them. These commands are described in the Digi Connect Family Command Reference. Generally, configuring VPN connections from the web interface is simpler. Review the settings descriptions in this procedure (also available in the online help) to determine whether you need to gather any information before you start setting up the VPN.

Configure Digi devices102IP pass-through settingsThere are many application scenarios where a router is used to decide upon alternative routes using a primary and a secondary (or backup) interface. In many of these configurations, the router is required to use a public IP address as assigned by the network over which it is communicating. This requirement is mostly owing to the router needing to establish a VPN tunnel over that interface and using the public IP address as part of the VPN authentication. (For more on VPN tunnels, see page 94.)The IP pass-through feature allows a Digi device to provide bridging functionality similar to that of a cable or DSL modem, where the Digi device becomes “transparent” to the router or connected device. In this case; the router’s WAN interface believes it is connected directly to the mobile network and has no knowledge that the Digi device is the mechanism providing that connectivity.How IP pass-through worksA Digi device configured for IP pass-through, such as a ConnectPort WAN or Digi Connect WAN, passes its mobile IP address directly through and to the Ethernet device (router or PC) to which it is connected through the Ethernet port. From the perspective of the connected device, the Digi device essentially becomes transparent (similar to the behavior of a cable or DSL modem) to provide a bridge from the mobile network directly to the end device attached to the Digi device.Since the mobile network address is effectively “passed-through” to the local device connected to the Ethernet port of the Digi device, all network access to it is bypassed, with some specific exceptions.Here is an example of a Digi device configured for IP pass-through in a network with a third-party router.

Configure Digi devices103If the third-party router’s WAN interface is attached to the Digi device’s Ethernet port, and the Digi device’s mobile interface receives the IP address 166.213.2.215, the router’s WAN port is assigned the same IP address 166.213.2.215. If the router is receiving the IP address dynamically; the DNS server addresses, subnet mask, and default gateway information will be filled in automatically. If the router is configured manually; you need to obtain the DNS information from the mobile service provider and enter that manually. The subnet mask is 255.255.255.0 and the default gateway is the same as the mobile IP address with “.1” for the last octet. In other words: if the mobile IP address is 166.213.2.215, the default gateway is 166.213.2.1.IP pass-through’s effect on network access to Digi devicesWhen IP pass-through is enabled, the Digi device effectively disables all router and IP service functionality. Services that are disabled are: NATPort ForwardingVPNDDNS updatesSocket Tunnel Network Services configuration.The Digi device is effectively transparent to all IP activity and network access by other devices, with these exceptions:It can be accessed via the serial port for configuration using the command line interface.It accepts TCP/IP connections for purposes of configuration by means of a “pinhole” on the mobile interface. It can be accessed by other devices on the local Ethernet segment via the default IP address of 192.168.1.1.

Configure Digi devices104Using pinholes to manage the Digi deviceIP pass-through uses a concept called pinholes. A Digi device can be configured to listen on specific TCP ports, and terminate those connections at the Digi device for purposes of managing it. Those ports are called pinholes, and they are not passed on to the device connected to the Ethernet port of the Digi device. Network services and ports that can be configured as pinholes include (see "Network services settings" on page 79 to configure these settings): HTTP: for accessing the device through HTTP and the web interface.HTTPS: for accessing to the device through HTTPS and the web interfaceTelnet: for accessing the device through a Telnet login and the command-line. SSH: for accessing the device through a Secure Shell (SSH) login and the command-line.SNMP: for monitoring and managing the device through SNMP. Ping: for accessing the device through ICMP echo (ping) requestsiDigi Platform and Digi SureLink ports are automatically set up as pinholes so that they continue to work with the Digi device. In addition, the Digi device uses a private address on the Ethernet interface strictly for use in configuration or local access. This allows a user on the local network to gain access to the web interface or a Telnet session in order to make configuration changes. Remote device management and IP pass-throughAs illustrated above, the Digi device allows you to enable pinholes for specific ports to allow remote users to manage the Digi device from the mobile network or open Internet. The Digi device retains its remote management capabilities using the iDigi Platform. The necessary pinholes are automatically defined when the Digi device is configured for IP Pass-through.This provides administrators with the same remote-management capabilities that exist in Digi remote devices.Steps to configure IP pass-throughTo configure IP Pass-through from the web interface for your Digi device, follow these steps, or, in the case of the first three steps, make sure they have been performed.1Set a static IP address for the Digi device. Go to Configuration > Network > IP Settings.2Set up the DHCP server. Go to Configuration > Network > DHCP Server Settings. See page 75 and the online help for DHCP Server Settings.3Turn on the DHCP server. Go to Management > Network Services. In DHCP Server Management, click the Start button.4Configure IP pass-through settings. Go to Configuration > Network > IP Pass-through. IP pass-through settings include:–Enable IP Pass-through: Enables or disables IP Pass-through.–Pinhole Configuration: Specifies whether specific network services/ports are configured as pinholes for purposes of managing the Digi device.5Click Apply.

Configure Digi devices105Host List settingsThe Host List settings page is used to add or remove entries from the host list. For Digi devices using the DialServ feature, the host list provides a means to map a phone number to a network destination. The Host List settings are:Local Name: A phone numberResolves To: a network destination).Add button: Adds the entry to the host listWhen accessing a device by name, the Digi device will attempt to locate the name within the host list. When a match is found, the host name is mapped to the alias. Typically, this is used as a first means of locating the destination address before using the domain name system (DNS). Each host list entry consists of a local name string which is mapped to an resolves to destination. The destination can be either an IP Address or Fully Qualified Domain Name (FQDN). By creating several entries, the host list will allow a many-to-one mapping of multiple host names to a single destination, as well as a one-to-many mapping of a host name to multiple destinations. The one-to-many mapping allows a fail-over option - that is, a connection to the resolves to name for the first host match in the list will tried. If that connection attempt fails, the resolves to name for the next match in the host list will be used.

Configure Digi devices106Virtual Router Redundancy Protocol (VRRP) settingsVirtual Router Redundancy Protocol (VRRP) is a redundancy protocol for routers. VRRP allows several routers on a subnet to use the same virtual IP address, with the physical routers representing a “virtual router.” Two or more physical routers are configured to stand for the virtual router, with only one doing the actual routing at any given time. The virtual router has a unique IP address and MAC address that can be shared by all routers in a VRRP group. The advantage in using a virtual router redundancy protocol is that systems can be configured with a single default gateway, rather than running an active routing protocol.There are two roles in VRRP: master, and backup. The master represents the virtual router and forwards IP traffic. The physical router that is currently routing the data is known as the Master. If the Master router fails, another Backup router automatically replaces it. Backup routers monitor the health of the master router, and in the event that the master stops sending advertisements, backup routers stage an election to determine which one will be the next master, and take over the virtual router IP address. The time required to make the determination that the master is down and hold elections depends on configuration, but typically occurs in about 3 seconds. A number of VRRP groups (up to 255) can be configured on a LAN. A router may participate in multiple groups. All routers must be within one hop of each other (does not route). VRRP settings include:Virtual Router Identifier (VRID): The virtual router ID. All routers in the same VRID communicate with each other. The VRID can be any value between 1 and 255. All routers that are to communicate must have the same VRID. Priority: Determines which router is the master. The router with the highest priority is the master. The default priority is 100. Advertisement Interval: The amount of time in milliseconds between VRRP master advertisements. All routers in the virtual routing group should be set to the same value. 3000 msec (3 seconds) is typically used. Enable Preempt: This settings controls whether a higher priority Backup router preempts a lower priority Master. Check to enable preemption; uncheck to prohibit preemption. The default setting is enabled (checked). IP Address: The IP Address of the virtual router. All routers in the same VRID should use the same virtual IP address. Clients should be configured to use this value as their default gateway.

Configure Digi devices107Advanced network settingsThe Advanced Network Settings are used to further define the network interface. These settings rarely need to be changed. Contact your network administrator for more information about these settings.IP SettingsThese settings are used to fine-tune IP address settings.Host Name: The host name to be placed in the DHCP Option 12 field. This is an optional setting which is only used when DHCP is enabled. The host name is validated and must contain only specific characters. These restrictions are as defined in RFCs 952, 1035, 1123 and 2132. The following characters are permitted: – Alphabetic: upper and lower case letters A through Z and a through z – Numeric: digits 0 through 9 – Hyphen (dash): - – Period (dot): . The host name value can be a single name, or a fully qualified domain name, whose parts are separated with a period character. Each part must follow the following rules: – Must begin with a letter or digit – Must end with a letter or digit – Interior characters may be a letter, digit or hyphen – Each part of the name may be from 1 to 63 characters in length, and the full host name may be up to 127 characters in length. An IP address is not permitted for use in this host name setting. Static Primary DNS / Static Secondary DNS: The IP address of Domain Name Servers (DNS) used to resolve computer host names to IP addresses. Static DNS servers are specified independently of any network interface and its connection state. An IP address of 0.0.0.0 indicates no server is specified. DNS Priority: A list of DNS servers in priority order used to resolve computer host names. Each type of server is tried, starting with the first in the list. For each server type, the primary server is tried first. If no response is received, then the secondary server is tried. If neither server can be contacted, the next server type in the list is tried. A network interface may obtain a DNS server from DHCP or other means when it is connected. If an interface does not obtain a DNS server, it will be skipped and the next server in the priority list will be tried. To change the priority order, select an item from the list and press the up or down arrow.

Configure Digi devices108Gateway Priority: List of network interfaces in priority order used to determine the default gateway. The default gateway is used to route IP packets to an outside network, unless controlled by another route. A network interface may have a static gateway configured, or obtain a gateway from DHCP or other means when it is connected. The first interface in this list that supplies a gateway will be used as the default gateway. The default gateway may change as interfaces connect and disconnect. To change the priority order, select an item from the list and press the up or down arrow.The IP Network Failover feature provides a dynamic method for selecting the default gateway. If failover is properly configured and enabled, it overrides the Gateway Priority selection in the Advanced Network Settings. For a description of the failover feature and information on how to configure it, please see "IP Network Failover settings" on page 89.

Configure Digi devices109DNS Proxy Settings Enable DNS Proxy Service: Enables the DNS Proxy feature on this Digi device. DNS Proxy permits DNS client hosts to communicate with this Digi device as if it were a DNS Server. It forwards the DNS client's request to one of the DNS servers configured in its network settings. The response from the actual DNS server will be relayed to the requesting client when it is received by the DNS Proxy. The DNS Proxy does not cache the actual detailed client requests nor the responses received from the DNS servers. Rather, it acts as a request/response relay agent between the DNS clients and servers. The DNS Proxy will cycle through the DNS servers that are configured in the Digi device. DNS client requests are identified by the client's IP address and the unique Query ID in the DNS request message. For each new DNS client request (new Query ID), the DNS Proxy uses the first DNS server in its list of DNS servers. If the client retries the same request (same Query ID), the DNS Proxy will recognize that retry message and will either send the retry request to the same DNS server as the previous request for this client, or it will move to the next DNS server in its list of DNS servers. The DNS Proxy feature determines when to retry the same DNS server, or move to the next DNS server, according to the DNS Proxy: Request Retries Per DNS Server configuration setting (see below). The DNS Proxy itself does not perform unsolicited retries of DNS client requests. Note The DHCP Server feature on the Digi device may be configured to use the DNS Proxy feature. For more information, see "DHCP server settings" on page 75. The DNS server list may be dynamic in its content. For example, when DNS server IP addresses are received from a mobile service provider's network, they are added to the DNS server list of this Digi device. Those DNS server IP addresses may or may not be configured when the DHCP Server offers a lease to a DHCP client. As a result, the DHCP client may have no DNS servers provided to it in the lease, and domain name resolution may fail for that client. A significant benefit of the DNS Proxy feature is that the DHCP Server can offer its own IP address as a DNS server in the client lease, and the DNS Proxy will forward DNS requests and responses as stated above. Since the DHCP protocol does not allow a DHCP Server to force an unsolicited DNS server list update to its clients, the DNS Proxy feature provides an indirect method by which such updates may be made effective for the client. Request Cache Size Maximum: Specifies the maximum number of DNS client request records that the DNS Proxy will maintain concurrently in its cache. A large cache consumes more system resources than does a small cache. However, if the maximum cache size is too small, new DNS client requests may be quietly discarded until the cache has room to add new client request records, or existing cache entries may be replaced by the new requests. If a large number of concurrent DNS client lookups is anticipated, configuring a larger maximum cache size is recommended. See also the setting For new client requests received when the request cache is full below.

Configure Digi devices110Request Idle Time-To-Live: Specifies the period of time, in seconds, that a DNS client request will remain in the DNS Proxy cache, before it is deleted. This is a period of idle time, during which neither a DNS client request retry is received by the DNS Proxy, nor a DNS server response is received by the DNS Proxy, for a specific DNS client request. A shorter Idle TTL results in resources being used more efficiently by the DNS Proxy, since the client request cache is reduced in size and the request buffers are released more quickly for future use for other DNS client requests. Request Retries Per DNS Server: Specifies the number of retries using the same DNS server, for a specific DNS client request that is being retried (retransmitted) by the DNS client. There is always one “try” but the number of retries is configurable. For new client requests received when the request cache is full: Specifies how to handle new client requests when the maximum number of client request entries is already being serviced (the request cache is full). There are two choices for this option: Replace the Least Recently Used (LRU) client request with the new request: Remove the least recently used entry from the cache, and add an entry for the new client request. Discard (ignore) new requests until some existing requests have expired: Silently discard the new client request, and do this for all future new requests until one or more entries have expired and been removed from the request cache.

Configure Digi devices111Ethernet InterfaceSpeed: The Ethernet speed the Digi device uses on the Ethernet network.–10: The device operates at 10 megabits per second (Mbps) only.–100: The device operates at 100 Mbps only.–auto: The device senses the Ethernet speed of the network and adjusts automatically.The default is auto. If one side of the Ethernet connection is using auto (negotiating), the other side can set the Ethernet speed to whatever value is desired. Or, if the other side is set for 100 Mbps, this side must use 100 Mbps.Duplex Mode: The mode the Digi device uses to communicate on the Ethernet network. Specify one of the following:–half: The device communicates in half-duplex mode.–full: The device communicates in full-duplex mode.–auto: The device senses the mode used on the network and adjusts automatically.The default is half. If one side of the Ethernet connection is using auto, the other side can set the duplex value to whatever is desired. If one side uses a fixed value (for example, half-duplex), the other side has to use the same.MDI: The connection mode for the Ethernet cable.–Auto: Enables Auto-MDIX mode, where the required cable connection type (straight through or crossover) is automatically detected. The connection is configured appropriately without the need for crossover cables to interconnect switches or connecting PCs peer-to-peer. When it is enabled, either type of cable can be used and the interface automatically corrects any incorrect cabling. For this automatic detection to operate correctly, the “speed” and “duplex” options must both be set to “auto.”–MDI: The connection is wired as a Media Dependent Interface (MDI), the standard wiring for end stations.–MDIX: The connection is wired as a Media Dependent Interface with Crossover (MDIX), the standard wiring for hubs and switches.TCP Keep-Alive SettingsThe DHCP server assigns these network settings, unless they are manually set here.Idle Timeout: The period of time that a TCP connection has to be idle before a keep-alive is sent. Probe Interval: The time in seconds between each keep-alive probe. Probe Count: The number of times TCP probes the connection to determine if it is alive after the keep-alive option has been activated. The connection is assumed to be lost after sending this number of keep-alive probes. WiFi InterfaceDigi products with Wi-Fi capability display this setting:Maximum transmission rate: The maximum transmission rate that the device will use, in megabits per second. The complete range of transmission rates is available on all devices except the ConnectPort X2 - XBee to Wi-Fi model. For that model, the allowed transmission rates are: 1, 2, 5.5, 11.

Configure Digi devices112Mobile (cellular) settingsThe Mobile Settings pages configure how to connect to mobile (cellular) networks using the mobile connection, including the service provider, service plan, and connection settings used in connecting to the mobile network. If your Digi device has not already been provisioned for use in the mobile network, you can launch a wizard to provision it from these pages. In addition, you can configure settings for Digi SureLink™, a feature that provides an “always-on” mobile network connection to ensure rapid on-demand communication. The SureLink configuration settings allow you to customize how SureLink detects when a connection has been lost, in order to re-establish the link. These settings also are used to load a preferred roaming list (PRL) into the cellular module.Information required from mobile service providerTo connect to the mobile network, you must get a set of network settings from the mobile service provider including service plan and authentication details. For more information, consult the documentation that came with your mobile service provider's information. Different processes used for CDMA and GSM provisioningThe process for provisioning your device and the settings displayed on the Mobile Configuration page vary according to whether the mobile service provider network used with your Digi Cellular Family product is based on CDMA (Code-Division Multiple Access) or GSM (Global System for Mobile communication).CDMA-based mobile service providersDevice provisioning for a CDMA-based mobile service provider consists of selecting the service provider from a list and either automatically or manually entering mobile settings provided by the mobile service provider Examples of CDMA-based mobile service providers include Sprint, Verizon, Alltel, and Midwest.GSM-based mobile service providersDevice provisioning for a GSM-based mobile service provider involves inserting a Subscriber Identity Module (SIM) card into the Digi device, which makes subscription data available in the cellular network. Examples of GSM-based mobile service providers include Cingular, AT&T, and T-Mobile.

Configure Digi devices113Set mobile configuration settings to factory defaultsThe Set to Defaults button on the Mobile Configuration page sets all the mobile settings to factory defaults and sets the Service Provider selection back to deselected.Mobile service provider settingsThe Mobile Service Provider settings part of the screen identifies the service provider to use in connecting to the mobile network. The information displayed varies by Digi Cellular Family product and whether the remote service provider is GSM- or CDMA-based. Settings that may be displayed on this screen include: Service Provider: For GSM-based mobile service providers, this is the service provider to use in connecting to the mobile network. The service provider must match the provider that supplied the SIM card.This must match the provider that supplied the SIM card. (Not displayed for CDMA products.)Service Plan: For GSM-based mobile service providers, this is the service plan to use in connecting to the mobile network. This setting must match the plan that the service provider has supplied to you. This is also sometimes known as the APN (Access Point Name). Username and Password: For GSM-based mobile service providers, these settings are the username and password of the mobile connection needed to access the mobile network.Device provisioning state: For CDMA-based mobile service providers, the text below the Service Provider selection list states whether the device has already been provisioned. Clicking the Provision Device button launches a wizard for provisioning the device. Mobile device provisioning is described next.

Configure Digi devices114Provision a mobile deviceMobile device provisioning is needed to properly configure the Digi device with the required configuration used to access the mobile network. The device must be provisioned before you will be able to create a data connection to the mobile network.The device only needs to be provisioned once. This type of provisioning applies only to Digi devices that have a CDMA cellular module.For Digi devices, provisioning is done through the Mobile Device Provisioning Wizard, which is launched from the Mobile Configuration page. Launch the Mobile Device Provisioning WizardBelow the Service Provider selection list is a line of text that states whether or not the device has already been provisioned or needs to be provisioned. If a device has not yet been provisioned, the Mobile Configuration page displays a message, as shown below. Click the Provision Device button to launch the Mobile Device Provisioning Wizard. For example, here is how the Mobile Settings page looks when a device has not yet been provisioned.

Configure Digi devices115Automatic versus manual provisioningThere are different types of provisioning methods depending upon your mobile provider. The Mobile Device Provisioning Wizard will provide the appropriate choices based on the mobile provider selected. Two main provisioning methods are:Automatic Provisioning: Typically, an automatic provisioning process called IOTA (IP-Based Over the Air) is used to provision the device. Note that automatic provisioning requires the modem device to communicate over the mobile network and requires a good signal to ensure proper provisioning.Manual Provisioning: Alternatively, a manual provisioning method can be used to manually specify the required fields needed to access the mobile network. The manual provisioning method is an advanced configuration normally used only for custom network access or providers.This method is not available for all mobile providers, and will not be available in the Mobile Device Provisioning Wizard if your mobile provider does not support it.Example: provision ConnectPort WAN VPN for Sprint™ PCSThe sequence of Mobile Device Provisioning Wizard screens displayed and the settings on them vary by product and mobile service provider. If you used the Digi Device Setup Wizard for initial configuration of your Digi device, and selected a service provider in the wizard, some of the provisioning settings will have already been established.Here is an example of the wizard screens for a ConnectPort WAN VPN using Sprint PCS as the mobile service provider.

Configure Digi devices1161Select a mobile service provider from the list.2Select automatic or manual provisioning.The main difference between automatic and manual provisioning is that manual provisioning involves entering more information. You will have received all of this information from your mobile service provider during account setup. 3As needed, enter device provisioning information provided by your mobile service provider. On some modules, the provisioning information is already obtained and automatically entered. If the screen below is displayed, enter the provisioning information.

Configure Digi devices1174Device provisioning in progress...5Provisioning complete.Upon successful completion of provisioning, a screen is displayed stating that the provisioning was successful.Click Finish.If provisioning fails:The first screen of the provisioning wizard is displayed again. Instead, you must perform manual provisioning. 6Click Apply on the Mobile Configuration page to complete the provisioning.Re-provision a Digi deviceRe-provisioning a Digi device simply consists of going through the Mobile Device Provisioning Wizard again.

Configure Digi devices118Mobile connection settingsMobile connection settings configure how the mobile connection is established and maintained.Re-establish connection when no data is received for a period of time:Inactivity timeout: Whether the mobile connection will be disconnected and re-established after no data has been received over the link for the specified amount of time, in seconds. Advanced settingsThe following options configure advanced settings to manage the mobile PPP connection established by the Digi device. Unless otherwise stated, the mobile PPP connection is not restarted with the new settings when the changes are applied (saved). The changes are applied the next time the mobile PPP connection is restarted. Mobile Band SettingsSelect the mobile service frequency bands to be configured in the modem. The default selection Automatic should be used unless there is a reason to configure specific bands only. Note: The mobile PPP connection is not automatically restarted when a band selection is configured. Automatic: Enables automatic service band selection by the modem. Manual: Selects the individual service bands to be configured. Improper selection or combinations may result in a failure to establish a mobile connection. Select one or more of these values: –850 MHz –900 MHz – 1800 MHz – 1900 MHz

Configure Digi devices119Mobile Carrier SettingsMobile carrier selection allows the mobile device to be configured to use a specific mobile service only. The recommended and normal operation is for the mobile device to automatically find service with an available carrier. However, a manual selection can be configured to force the use of a particular carrier. Please be aware that use of a manual carrier selection can result in a significantly longer time interval for the unit to find service on the specified network. Both the mobile network and the mobile device (modem) may influence this behavior. Therefore it is recommended that the Automatic selection be used wherever possible. Warning: The scan for available carriers requires that the mobile PPP connection be terminated to perform the scan. A successful scan cannot be performed and completed if it is initiated over the mobile connection, since the scan procedure requires user interaction that is not possible after the mobile PPP connection has been terminated. Automatic: Enables automatic selection of a carrier for the mobile service connection. The mobile PPP connection is not automatically restarted if automatic carrier selection is configured. Manual: Enables manual selection of the Network ID of a carrier for the mobile service connection. The carrier selection is the concatenation of the Mobile Country Code (MCC) and Mobile Network Code (MNC) value for a carrier. The MCC is always a three-digit decimal value, and the MNC is either a two- or three-digit decimal value. A properly entered Network ID is composed of five or six decimal digits, with no other characters in that value. The Scan available carriers... link initiates a wizard that instructs the modem to scan for available carriers and display a list from which the desired carrier may be selected. The scan may take as little as 20 seconds or up to two minutes to complete. Scanning for carriers requires that the mobile PPP connection be terminated so the scan may be performed. Upon completion of the wizard, the mobile PPP connection is restarted using the selected carrier.Note: If the Mobile Band Settings selection in use by the modem is other than Automatic, the list of carriers returned by the scan may include only a subset of the carriers available in the area. The Network ID from a carrier selection from the list may be manually entered. However, the mobile PPP connection is not automatically restarted if the manual entry method is used.

Configure Digi devices120Digi SureLink™ settingsThe Mobile Connection Settings configure Digi SureLink™ settings for a Digi device. SureLink ensures that a Digi device is in a state where it can connect to the mobile network, and they can be used to monitor the integrity of the established mobile connection.There are two groups of SureLink settings: Hardware Reset Thresholds: These settings can be configured to clear any error states that were resident in the Digi device’s cellular module, so the device can once again connect to the network, if the connection is lost. It does this by first resetting the cellular module after a default or specified number of consecutive failed connection attempts, and then resetting the Digi device after a default or specified number of failed consecutive connection attempts. Each of these connection-failure settings can be disabled as well. Link Integrity Monitoring settings: These settings can be configured to perform a selected test to examine the functional integrity of the network connection, and take action to recover the connection in the event that it is lost. Hardware reset thresholdsHard reset the modem module after the following number of consecutive failed connections: Enables or disables a hard reset of the cellular modem module after the specified number of failed connection attempts.This value can be a number between 1 and 255. The default is 3. Power-cycle the device after the following number of consecutive failed connections: Enables or disables a power-cycle of the Digi device after the specified number of failed connection attempts. This value can be a number between 1 and 255. The default is 0, or off.

Configure Digi devices121Link integrity monitoring settingsEnable Link Integrity Monitoring using the test method selected below: Enables or disables the link integrity monitoring tests. If this setting is enabled, the other Link Integrity Monitoring settings may be configured and are used to verify the functional integrity of the mobile connection. The default is off (disabled). There are three tests available: –Ping Test – TCP Connection Test – DNS Lookup Test You can use these tests to demonstrate that two-way communication is working over the mobile connection. Several tests are provided because different mobile networks or firewalls may allow or block Internet packets for various services. Select the appropriate test may be selected according to mobile network constraints and your preferences. The link integrity tests are performed only while the mobile connection is established. If the mobile connection is disconnected, the link integrity tests are suspended until the connection is established again. For the link integrity tests to provide meaningful results, the remote or target hosts must be accessible over the mobile connection and not through the LAN interface of the device (if it has one). That is, the settings should be configured to guarantee that the mobile connection is actually being tested. The link integrity test settings may be modified at any time. The changes are used at the start of the next test interval. Ping Test: Enables or disables the use of “ping” (ICMP) as a test to verify the integrity of the mobile connection. The test is successful if a valid ping reply is received in response to the ping request sent. The ping test actually sends up to three ping requests, at three second intervals, to test the link. When a valid reply is received, the test completes successfully and immediately. If a reply is received for the first request sent, there is no need to send the other two requests. Two destination hosts may be configured for this test. If the first host fails to reply to all three ping requests, the same test is attempted to the second host. If neither host replies to any of the ping requests sent, the test fails. The primary and secondary addresses may be either IP addresses or fully qualified domain names. –Primary Address: First host to test.–Secondary Address: Second host to test (if the first host fails).

Configure Digi devices122TCP Connection Test: Enables or disables the creation of a new TCP connection as a test to verify the integrity of the mobile connection. The test is successful if a TCP connection is established to a specified remote host and port number. If the remote host actively refuses the connection request, the test is also considered to be successful, since that demonstrates successful two-way communication over the mobile connection. The TCP connection test waits up to 30 seconds for the connection to be established or refused. When the TCP connection is established, the test completes successfully, and the TCP connection is closed immediately. Two destination hosts may be configured for this test. If the first host fails to establish (or refuse) the TCP connection, the same test is attempted to the second host. If neither host successfully establishes (or refuses) the TCP connection, the test fails. The primary and secondary addresses may be either IP addresses or fully qualified domain names. –TCP Port: The TCP port number to connect to on the remote host (default 80).–Primary Address: The address of the first host to test.–Secondary Address: The address of the second host to test (if the first host fails).DNS Lookup Test: Enables or disables the use of a Domain Name Server (DNS) lookup as a test to verify the integrity of the mobile connection. The test is successful if a valid reply is received from a DNS server. Typically, this means the hostname is successfully “resolved” to an IP address by a DNS server. But even a reply such as “not found” or “name does not exist” is acceptable as a successful test result, since that demonstrates successful two-way communication over the mobile connection. When a valid reply is received, the test completes successfully and immediately. The DNS servers used in this test for the hostname lookup, are the primary and secondary DNS servers obtained from the mobile network when the mobile PPP connection is first established. These addresses can be viewed by going to Administration > System Information > Mobile. Note that this DNS test is independent of the normal DNS client configuration and lookup cache, which is used for other hostname lookups. This test has been specifically designed to require communication over the mobile connection for each lookup, and to avoid being “short-circuited” by previously cached information. Also, this test does not interfere in any way with the normal DNS client configuration of this device. Two hostnames may be configured for this test. If the first hostname fails to get a reply, the same test is attempted for the second hostname. If no reply is received for either hostname, the test fails. The primary and secondary DNS names should be fully qualified domain names. Note that the reverse lookup of an IP address is possible, but that is usually unlikely to succeed in returning a name. Still, such a reverse lookup can be used to demonstrate the integrity of the mobile connection. –Primary DNS Name: The first hostname to look up.–Secondary DNS Name: The second hostname to look up (if the first hostname fails).Repeat the selected link integrity test every N seconds: Specifies the interval, in seconds, at which the selected test is initiated (repeated). A new test will be started every N seconds while the mobile connection is established. This value must be between 10 and 65535. The default is 240. If the configured interval is less time than it takes a test to complete, the next test will not be initiated until the previous (current) test has completed.

Configure Digi devices123Test only when idle: if no data is received for the above period of time: Specifies that the test repeat interval (above) is to be used as an idle period interval. That is, initiate the selected link integrity test only after no data has been received for the specified interval of time. This changes the behavior of the test in that the test interval varies according to the presence of other data received from the mobile connection. Although using this idle option may result in less data being exchanged over the mobile connection, it also prevents the link integrity tests from running as often to verify the true bi-directional state of that connection. Reset the link after the following number of consecutive link integrity test failures: Specifies that after the configured number of consecutive link integrity test failures, the mobile connection should be disconnected and reestablished. This value must be between 1 and 255. The default is 3. When the mobile connection is reestablished, the “consecutive failures” counter is reset to zero. If the mobile connection is disconnected for any reason (including not as a result of a link integrity test failure), the consecutive failures count is reset to zero when the mobile connection is reestablished.Status and statistical information for mobile connectionsOnce the mobile settings have been configured, you can monitor the status of mobile connections by going to Administration > System Information > Mobile. See "Mobile information and statistics" on page 190.From the command line, this mobile information is displayed by issuing display mobile and display pppstats commands.

Configure Digi devices124Update PRL settingsNote These settings apply to Digi cellular-enabled products that use the Sierra Wireless MC57xx series CDMA/EVDO modules. The Update PRL page is for loading a preferred roaming list (PRL) into the cellular module on the Digi device. A PRL is a database that resides in a mobile device that contains information used during the system selection and acquisition process. It is built by the mobile service provider, and is normally not accessible to users.The PRL indicates which bands, sub bands and service provider identifiers will be scanned and in what priority order. Without a PRL, a mobile device may not be able to roam, or obtain service outside of the home area. There may be cases where missing or corrupt PRL's can lead to not having service at all.On many networks, regularly updating the PRL is advised if the subscriber uses the device outside the home area frequently, particularly if they do so in multiple different areas. This allows the mobile device to choose the best roaming carriers, particularly “roaming partners” with whom the home carrier has a cost-saving roaming agreement, rather than using non-affiliated carriers. PRL files can also be used to identify home networks along with roaming partners, thus making the PRL an actual list that determines the total coverage of the subscriber, both home and roaming coverage.To load a PRL, fill in values for these settings:PRL File: The location and name of the PRL file to be loaded into the cellular module. Enter the PRL file’s pathname or click the Browse button and use the browse dialog to select the file.MSL/OTSL: The master subsidy lock (MSL) or a one-time subsidy lock (OTSL) associated with the module. This value is a six-digit activation or unlock code supplied by the mobile service provider. Click the Upload button to upload the PRL file to the cellular module. If the PRL loading/updating operation was successful, the status message PRL update successful is displayed in a blue box above the settings. If an error occurs, a red box with a message describing the error is displayed above the settings.PRL updates can also be done over the air by dialing the over-the-air (OTA) feature code *228.

Configure Digi devices125Short Message Service (SMS) settingsThe following options configure the cellular Short Message Service (SMS) capabilities of the mobile module of the Digi device. Important Notes: Currently, SMS is supported for Digi devices with GSM cellular modems only. To determine whether the cellular modem in a Digi device supports SMS, Telnet to the command line and enter the show smscell command. If an error message is returned (error: show option not found), then SMS is not supported for that Digi device. SMS is a feature that may be available as part of your mobile service agreement. However, sending and receiving short messages (or “text messages”) may have additional costs. Before using the SMS capabilities of your Digi device, verify with your mobile service provider that your agreement includes SMS as part of your service plan. Understand the costs of SMS before you enable the SMS features on this Digi device. Please read "Supported Character Set" on page 129. Global SMS settingsEnable cellular Short Message Service (SMS) capabilities: Enable SMS features on this Digi device. When this option is enabled, the remaining SMS options may be configured. This option is disabled (off) by default. Send ACK reply via SMS when command is accepted: When a command message is received via SMS, send an acknowledgement (ACK) message via SMS to the originator of the command message, indicating that the command has been accepted and will be processed. This option is disabled (off) by default. Send NAK reply via SMS if password validation fails: When a command message is received via SMS, and a required password is either missing or incorrect, send a negative acknowledgement (NAK) message via SMS to the originator of the command message, indicating that the command has been rejected due to password validation failure. This option is disabled (off) by default. Global SMS Command Password: When a command message is received via SMS, and a global password is specified in these settings, that password must be provided by the originator of the command message or the message will be rejected by the Digi device. If a command-specific password is configured, that command-specific password must be provided instead of this global command password. Specifically, a command-specific password overrides the global password, and the global password is not considered if a command-specific password is configured in the settings. This option is disabled (no global password required) by default. To remove the password, simply clear the password field on the settings page.

Configure Digi devices126Default Message Receiver: When a message is received via SMS, the Default Message Receiver is used to determine which SMS “user” will receive the message and process it. This handling pertains to messages that are not enabled commands for which command processing is performed. The choices for this option are:–Log Only: The received message is logged but otherwise not processed (default option).–Python: The received message is passed to the standard Python receiver. Further processing of the message text is the responsibility of the Python program that is implemented to receive SMS messages. Note that these messages are logged when they are placed on the Python read queue. Enable extended detail for SMS event logging (verbose): The SMS feature normally records limited, relevant activities to the system event log. These log entries identify SMS initialization, reconfiguration, and message send/receive activities. For troubleshooting purposes, the message send and receive activity logging can be recorded in greater detail by enabling this option. However, this can result in filling the event log with more SMS activity records than are useful for normal operation, and it is recommended that this option should be enabled only if greater detail is required for some interval of time. This option is disabled (off) by default. Python settingsPython-related settings for the SMS feature include: Enable SMS support for Python: Enable SMS features for Python on this Digi device. When this option is enabled, the remaining Python-specific SMS options may be configured. This option is enabled (on) by default. Received Message Queue Maximum: The number of received messages that may be placed on the dedicated Python SMS message read queue awaiting processing by Python. Once this limit is reached, new received messages are logged but discarded until the read queue falls below this configured maximum message count. The default value for this setting is 100 messages. Received Message Hold Time Maximum: The maximum amount of time in seconds that a received message will be held on the dedicated Python SMS message read queue while waiting for Python SMS message processing to be brought into service. This setting allows messages to be received and queued for Python before the Python program that processes them is ready to receive such messages, thereby eliminating loss of messages that are received before the Python program is ready to handle them. The default value for this setting is 600 seconds (10 minutes). Python SMS Password: Although this use is not typical, a message may be directed for deliver to Python by sending “#python” as a command to this Digi device. In such a case, this Python password may be configured to validate the acceptance of such a command message before it is accepted and placed on the dedicated Python SMS message read queue for further processing. When Python is configured as the Default Message Receiver, it is not necessary to use the Digi device command message syntax, since all otherwise unhandled messages will be delivered to the Python read queue. However, password validation is not performed for non-command messages. This option is disabled (no Python password required) by default. To remove the password, simply clear the password field on the settings page.

Configure Digi devices127Built-In Command SettingsSeveral built-in commands are supported for execution via SMS messages sent to your Digi device. Descriptions of built-in command-related settings for the SMS feature follow. Full detailed descriptions of the SMS command syntax and supported command options is available on the Digi support web site. Supported commandsThe following commands are supported. Command optionsFor each built-in command, the following options are supported: EnableThe command is enabled for use via SMS. All commands are enabled by default. PasswordThe configured password must be specified on the command message for that message to be accepted for further processing. If a command-specific password is configured, that command-specific password must be provided instead of the global command password (if one is configured, see Global SMS Command Password above). Specifically, a command-specific password overrides the global password, and the global password is not considered if a command-specific password is configured in the settings. This option is disabled (no command password required) by default. To remove the password, simply clear the password field on the settings page. Built-in command Description#help (alias #?) The Digi device replies to the sender via SMS with a message that specifies the command syntax and a list of the supported, available commands that may be sent to this device. You may obtain further help for a specific command by sending that command as a parameter. E.g., send “#help ping” to request a help reply for the “#ping” built-in command. #cli Request that a CLI command be run on the Digi device. The output from the CLI command is returned to the sender via SMS, with a limit of around 2000 characters for the number of CLI output characters returned in the reply. #idigi (alias #cwm)Manage or obtain status for a device connection to a Digi iDigi (Connectware Manager) server. The Digi device replies to the sender via SMS with a message that contains the status or result of the requested action. #ping Request that the Digi device reply to the sender via SMS to verify two-way SMS communication between the sender and the Digi device.

Configure Digi devices128Sender Control List (SCL) SettingsThe Sender Control List (SCL) permits the user to select the addresses (or phone numbers) from which SMS messages will be accepted. This is in effect a “Caller ID” capability in which message senders are screened by the Digi device and either processed or discarded according to the configured SCL rules. Following are descriptions of the SCL-related settings for the SMS feature. Enable SMS Sender Control List: Enable the Sender Control List capabilities on this Digi device. When this option is enabled, the remaining SCL-specific SMS options may be configured. This option is disabled (off) by default. Send NAK reply via SMS if received message is rejected by SCL: When a message is received via SMS, SCL is enabled, and the sender is not permitted by the SCL rules, send a negative acknowledgement (NAK) message via SMS to the originator of the command message, indicating that the message has been rejected due to the configured SCL rules. This option is disabled (off) by default. For each SCL rule, the following options may be configured: Enable: The rule is enabled for use by SMS. Rules may be enabled and disabled without removing them altogether from the SCL. Disabled rules are ignored when examining received messages. Sender Address (Phone Number): The address (phone number) of the sender for which this rule applies. If the sender's address matches this configured address, the SMS message is accepted for further processing. If the sender's address does not match any of the enabled SCL rule addresses, it is rejected and no further processing is performed. To remove the address, simply clear the address field on the settings page. Match Type: The type of address match test that is to be performed for this rule. There are four supported match types: –Exact: The sender's address must match exactly the address configured for this rule. –Right: The sender's address must match the address configured for this rule when comparing the righmost characters to the shorter of the two strings (sender address, rule address). For example, “5551212” matches “13125551212” since the rightmost characters match to the length of the shorter string, “5551212”. This is the default match type. –Left: The sender's address must match the address configured for this rule when comparing the leftmost characters to the shorter of the two strings (sender address, rule address). For example, “1312555” matches “13125551212” since the leftmost characters match to the length of the shorter string, “1312555”. –Partial: The sender's address must match the address configured for this rule when comparing the consecutive characters to the shorter of the two strings (sender address, rule address).For example, “312555” matches “13125551212” since the shorter string “312555” is a substring of the longer string “13125551212”.

Configure Digi devices129Supported Character SetFor SMS via GSM service, it is necessary to translate between the GSM 03.38 7-bit alphabet and ASCII, which is the native character set for the Digi device and is the character set used in the CLI and web UI. The characters of ASCII and GSM 03.38 do not map one-to-one, and in fact some ASCII characters must be represented in GSM 03.38 as multi-character escape sequences (per extensions to the original GSM 03.38 alphabet). In the table below, such characters are shown as “0x1Bhh” under the “GSM 03.38 Code” column. This notation indicates a two-character sequence, where “hh” is a pair of hexadecimal digits. In the reverse translation (from GSM 03.38 to ASCII), some of the GSM 03.38 characters have no ASCII counterpart. These are replaced with ASCII space characters. One exception is the INVERTED QUESTION MARK (0x60 in GSM 03.38) which is replaced with an ASCII QUESTION MARK (0x3F) character. The following table documents the supported characters and the mapping used between these two alphabets. Note that “unknown” characters are replaced with space characters during the translation. In the table below, such characters are shown as “0x20 *” under the “GSM 03.38 Code” column.

Configure Digi devices130Notes for the table: (1) The GRAVE ACCENT character (0x60) in ASCII has no counterpart in GSM 03.38. A substitution is made using the APOSTROPHE (0x27) in its place. * The characters marked with * indicate a substitution since the ASCII characters have no counterpart in GSM 03.38. These characters are replaced with the SPACE (0x20) character. As such, these characters are not supported in the Digi product support of GSM short messages. Supported character set ASCIICode GSM 03.38CodeASCIICharacter Description0x00 0x20 * NUL NULL0x01 0x20 * SOH START OF HEADING0x02 0x20 * STX START OF TEXT0x03 0x20 * ETX END OF TEXT0x04 0x20 * EOT END OF TRANSMISSION0x05 0x20 * ENQ ENQUIRY0x06 0x20 * ACK ACKNOWLEDGE0x07 0x20 * BEL BELL0x08 0x20 * BS BACKSPACE0x09 0x20 * HT HORIZONTAL TABULATION0x0A 0x0A LF LINE FEED0x0B 0x20 * VT VERTICAL TABULATION0x0C 0x1B0A FF FORM FEED0x0D 0x0D CR CARRIAGE RETURN0x0E 0x20 * SO SHIFT OUT0x0F 0x20 * SI SHIFT IN0x10 0x20 * DLE DATA LINK ESCAPE0x11 0x20 * XON DEVICE CONTROL ONE0x12 0x20 * DC2 DEVICE CONTROL TWO0x13 0x20 * XOFF DEVICE CONTROL THREE0x14 0x20 * DC4 DEVICE CONTROL FOUR0x15 0x20 * NAK NEGATIVE ACKNOWLEDGE0x16 0x20 * SYN SYNCHRONOUS IDLE

Configure Digi devices131ASCIICode GSM 03.38CodeASCIICharacter Description0x17 0x20 * ETB END OF TRANSMISSION BLOCK0x18 0x20 * CAN CANCEL0x19 0x20 * EM END OF MEDIUM0x1A 0x20 * SUB SUBSTITUTE0x1B 0x20 * ESC ESCAPE0x1C 0x20 * FS FILE SEPARATOR0x1D 0x20 * GS GROUP SEPARATOR0x1E 0x20 * RS RECORD SEPARATOR0x1F 0x20 * US UNIT SEPARATOR0x20 0x20 SP SPACE0x21 0x21 ! EXCLAMATION MARK0x22 0x22 " QUOTATION MARK0x23 0x23 # NUMBER SIGN0x24 0x02 $ DOLLAR SIGN0x25 0x25 % PERCENT SIGN0x26 0x26 & AMPERSAND0x27 0x27 ' APOSTROPHE0x28 0x28 ( LEFT PARENTHESIS0x29 0x29 ) RIGHT PARENTHESIS0x2A 0x2A * ASTERISK0x2B 0x2B + PLUS SIGN0x2C 0x2C , COMMA0x2D 0x2D - HYPHEN-MINUS0x2E 0x2E . FULL STOP (PERIOD)0x2F 0x2F / SOLIDUS (SLASH)0x30 0x30 0 DIGIT ZERO0x31 0x31 1 DIGIT ONE0x32 0x32 2 DIGIT TWOSupported character set (Continued)

Configure Digi devices132ASCIICode GSM 03.38CodeASCIICharacter Description0x33 0x33 3 DIGIT THREE0x34 0x34 4 DIGIT FOUR0x35 0x35 5 DIGIT FIVE0x36 0x36 6 DIGIT SIX0x37 0x37 7 DIGIT SEVEN0x38 0x38 8 DIGIT EIGHT0x39 0x39 9 DIGIT NINE0x3A 0x3A : COLON0x3B 0x3B ; SEMICOLON0x3C 0x3C < LESS-THAN SIGN0x3D 0x3D = EQUALS SIGN0x3E 0x3E > GREATER-THAN SIGN0x3F 0x3F ? QUESTION MARK0x40 0x00 @ COMMERCIAL AT0x41 0x41 A LATIN CAPITAL LETTER A0x42 0x42 B LATIN CAPITAL LETTER B0x43 0x43 C LATIN CAPITAL LETTER C0x44 0x44 D LATIN CAPITAL LETTER D0x45 0x45 E LATIN CAPITAL LETTER E0x46 0x46 F LATIN CAPITAL LETTER F0x47 0x47 G LATIN CAPITAL LETTER G0x48 0x48 H LATIN CAPITAL LETTER H0x49 0x49 I LATIN CAPITAL LETTER I0x4A 0x4A J LATIN CAPITAL LETTER J0x4B 0x4B K LATIN CAPITAL LETTER K0x4C 0x4C L LATIN CAPITAL LETTER L0x4D 0x4D M LATIN CAPITAL LETTER M0x4E 0x4E N LATIN CAPITAL LETTER NSupported character set (Continued)

$Configure Digi devices133ASCIICode GSM 03.38CodeASCIICharacter Description0x4F 0x4F O LATIN CAPITAL LETTER O0x50 0x50 P LATIN CAPITAL LETTER P0x51 0x51 Q LATIN CAPITAL LETTER Q0x52 0x52 R LATIN CAPITAL LETTER R0x53 0x53 S LATIN CAPITAL LETTER S0x54 0x54 T LATIN CAPITAL LETTER T0x55 0x55 U LATIN CAPITAL LETTER U0x56 0x56 V LATIN CAPITAL LETTER V0x57 0x57 W LATIN CAPITAL LETTER W0x58 0x58 X LATIN CAPITAL LETTER X0x59 0x59 Y LATIN CAPITAL LETTER Y0x5A 0x5A Z LATIN CAPITAL LETTER Z0x5B 0x1B3C [ LEFT SQUARE BRACKET0x5C 0x1B2F \ REVERSE SOLIDUS (BACKSLASH)0x5D 0x1B3E ] RIGHT SQUARE BRACKET0x5E 0x1B14 ^ CIRCUMFLEX ACCENT0x5F 0x11 _ LOW LINE (UNDERSCORE)0x60 0x27 (1) ` GRAVE ACCENT0x61 0x61 a LATIN SMALL LETTER A0x62 0x62 b LATIN SMALL LETTER B0x63 0x63 c LATIN SMALL LETTER C0x64 0x64 d LATIN SMALL LETTER D0x65 0x65 e LATIN SMALL LETTER E0x66 0x66 f LATIN SMALL LETTER F0x67 0x67 g LATIN SMALL LETTER G0x68 0x68 h LATIN SMALL LETTER H0x69 0x69 i LATIN SMALL LETTER ISupported character set (Continued)$

Configure Digi devices134ASCIICode GSM 03.38CodeASCIICharacter Description0x6A 0x6A j LATIN SMALL LETTER J0x6B 0x6B k LATIN SMALL LETTER K0x6C 0x6C l LATIN SMALL LETTER L0x6D 0x6D m LATIN SMALL LETTER M0x6E 0x6E n LATIN SMALL LETTER N0x6F 0x6F o LATIN SMALL LETTER O0x70 0x70 p LATIN SMALL LETTER P0x71 0x71 q LATIN SMALL LETTER Q0x72 0x72 r LATIN SMALL LETTER R0x73 0x73 s LATIN SMALL LETTER S0x74 0x74 t LATIN SMALL LETTER T0x75 0x75 u LATIN SMALL LETTER U0x76 0x76 v LATIN SMALL LETTER V0x77 0x77 w LATIN SMALL LETTER W0x78 0x78 x LATIN SMALL LETTER X0x79 0x79 y LATIN SMALL LETTER Y0x7A 0x20 z LATIN SMALL LETTER Z0x7B 0x1B28 { LEFT CURLY BRACKET0x7C 0x1B40 | VERTICAL LINE (PIPE)0x7D 0x1B29 } RIGHT CURLY BRACKET0x7E 0x1B3D ~ TILDE0x7F 0x20 * DEL DELETESupported character set (Continued)

Configure Digi devices135XBee network settingsA Digi ConnectPort X gateway provides a gateway between an Internet Protocol (IP) network and a network of various wireless devices containing XBee RF modules. Typically, these XBee devices are small sensors and controllers. The XBee Configuration settings (Configuration > XBee Network) displays a view of XBee network devices, including the ConnectPort X gateway and any nodes that have been discovered by the XBee module in the ConnectPort X gateway. For example:In the Node Type column, the descriptors for the nodes can vary by the RF protocol running in the XBee module in the gateway and in any nodes. For example, XBee ZB series products show the XBee module in the gateway as the coordinator, and any XBee Drop-in Networking Accessories are as routers.

Configure Digi devices136XBee 802.15.4 series products show the XBee module in the gateway as the coordinator, and any XBee Drop-in Networking Accessories as end nodes. Clicking on the Network Address or Extended Address of a node displays the XBee Network Configuration settings for the XBee RF module in the ConnectPort X gateway. The configuration settings include basic and advanced settings for the XBee radio module. The settings displayed vary depending on the XBee RF protocol running in the XBee modules. The settings shown here are for an XBee ZB module.

Configure Digi devices137Basic and Advanced radio settingsThe Basic radio settings control basic operation of the XBee module in an XBee network. Advanced radio settings control behavior of the XBee module at a more detailed level. Generally, these settings can be left at their defaults.For complete settings and descriptions of these options, refer to the Product Manual for the XBee or XBee-PRO RF module in your product.View and change configuration settings as needed. To apply configuration changes, click Apply. Note Changing the PAN ID may make your XBee product inaccessible.If you assign a Node Identifier, to view it, go to Configuration > XBee Network and click Refresh. The new name is displayed in the Node Identifier field.Firmware updates for XBee modulesXBee RF modules can be updated with new firmware over the XBee network. Firmware updates can be made both to the XBee RF module in the Digi device serving as a gateway to the XBee network, and to the XBee RF modules in other XBee network nodes.Firmware updates for the ConnectPort X gateway’s XBee module are available through Digi Technical Support. Once loaded onto a PC, firmware updates can be loaded into the XBee module by several methods:In the web interface for the ConnectPort X gateway, by clicking the Firmware Update Setup link on the XBee Network Configuration page and uploading files containing the new firmware. Multiple files may be uploaded, each containing a different firmware type. Firmware updates of network nodes can be scheduled and monitored on the Firmware Update Status page.Through the command line interface, using several options on the set xbee command.Note XBee firmware can also be updated by sending over-the-air (OTA) commands to the XBee module through the OTA graphical user interface of X-CTU, a software tool for configuring XBee modules. In X-CTU, the OTA interface is called Remote Configuration. However, the Enable over the air firmware updates setting on the Firmware Update Setup page enables remote firmware updates without having to use X-CTU.XBee Firmware requirementsThe XBee firmware version must be compatible with the XBee module’s hardware and the ConnectPort X gateway firmware. The XBee firmware must also be over-the-air compatible with other nodes. Generally, this means that the gateway and nodes must be the same network type (ZB, 802.15.4, etc.) and have the same or similar firmware version.

Configure Digi devices138XBee firmware file-naming conventionsThe file-naming convention for numbering XBee firmware versions is HW_XYZZ.EXT where:HW = module hardware and network type; that is, the XBee RF protocol running on the moduleX = a number specifying the network type XYZZ is the full version number in hexadecimal.Y = node typeZZ = revision numberEXT = extension, designating the file typeHW values-Hardware typeEach XBee module hardware series has the same hardware, but uses different firmware for the XBee RF protocol running on the module.XBee Module hardware series XBee RF protocol HW value in firmware filenameXBee 802.15.4 and Digi Mesh 2.4standard modules802.15.4 XB24_15_4DigiMesh 2.4GHz XB24-DMXBee-PRO 802.15.4 and Digi Mesh 2 modules 802.15.4 XBP24_15_4DigiMesh 2.4GHz XBP24-DMXBee ZB and Smart Energy standard modules ZB XB24-ZBSmart Energy XB24-SEXBee-PRO ZB and Smart Energy standard modulesZB XBP24-ZBSmart Energy XBP24-SEXBee DigiMesh 900MHz series modules XBee PRO 900MH XBP09-DPXBee PRO DigiMesh 900MHzXBP09-DMXBee DigiMesh 868MHz series radios: XBee PRO 868MHz XBP08-DP

Configure Digi devices139X values-Network typeNetwork type X valueXBee 802.15.4, 868MHz, or 900MHz 1XBee ZB 2Smart Energy 3DigiMesh 8

Configure Digi devices140Y value-Node typeAPI mode is a frame-based interface mode that extends the level to which a host application can interact with the networking capabilities of the module. When in API mode, all data entering and leaving the module is contained in frames that define operations or events within the module. Gateways typically use XBee firmware for coordinator API mode. More information about API mode is in the Product Manuals for the XBee RF modules.AT mode is a state in which incoming serial characters are interpreted as XBee AT commands. More information about AT mode is in the Product Manuals for the XBee RF modules.XBee ZB and Smart Energy standard networks have all node types. Other network types have standard nodes and adapters.ZigBee nodes use different firmware for AT and API mode. Standard nodes support both AT and API modes.The gateway XBee module must be ZigBee type 1 or 3, or non-ZigBee type 0.Remote nodes may be any node type.Node type Y valueStandard node, or Coordinator AT command mode 0Coordinator API mode 1Router AT mode 2Router API mode 3Router/End Device Sensor Adapter 4End Device Power Harvester Adapter 5Router/End Device Analog IO Adapter 6Router/End Device Digital IO Adapter 7End Device AT command mode 8End Device API mode 9Multiple node types in a zip file x

Configure Digi devices141EXT values-File extensionsThe XBee module in a Digi gateway device can be updated with .ebl or .oem files. XBee ZB remote nodes can be updated over the air with ebl files.X-CTU uses .hex, .ehx, .mxi, and .zip files.X-CTU can create .oem files from .ehx files.For example: XBP24-ZB_2164.ebl is XBee PRO ZB coordinator API firmware that can used to update the gateway XBee module.XBee firmware versions supported in ConnectPort X gatewaysCurrently, ConnectPort X gateways support these XBee firmware versions: Extension File typeebl XBee ZB and Smart Energy standard module firmwareoem XBee module firmware for all other XBee module typeshex Hexadecimal-encoded firmwareehx Encrypted hexadecimal firmwaremxi XBee module parameter informationzip Archive of above filesXBee module model type in gateway Supported firmware versionsXBee ZB Version 2x21 or greaterXBee 802.15.4 Version 1080 or greaterXBee DigiMesh 900 MHz Any firmware versionXBee DigiMesh 2.4 Version 8040 or greaterXBee Smart Energy (SE) Any firmware versionXBee DigiMesh 868 MHz Any firmware version

Configure Digi devices142Settings preserved during firmware updatesIf the gateway is enabled, most XBee module settings will be preserved during the firmware update. Some settings, such as encryption keys, may not be preserved and must be entered again. Note The gateway can be disabled by the set xbee state=off command. It will also be disabled if it cannot communicate with its XBee module. The most likely cause of this state is unsupported firmware on the XBee module. The XBee module’s firmware can still be updated when the gateway is disabled.Update XBee firmware rom the web interface--for ConnectPort X ZB gateways onlyTo update XBee firmware for a ConnectPort X gateway with a XBee ZB module: 1On the Digi gateway, upload files containing the new firmware on the Configuration > XBee Network > Firmware Update Setup page. Multiple files may be uploaded, each containing a different firmware type needed by nodes on the network. 2Schedule and monitor updates of individual nodes on the Firmware Update Status page. Each scheduled update will be performed in the background, one node at a time. While a remote node is being updated, it will be inaccessible from the XBee network. While the XBee module in the gateway is being updated, the XBee network will inaccessible from the gateway. Firmware Update Setup page Several groups of settings on this page control how XBee firmware updates are performed:Update Settings section–Enable over the air firmware updates: Enable updates of firmware on remote nodes over the XBee network. Firmware updates use a background process to query remote nodes for their current firmware version, and update their firmware from files stored on the gateway. This process may be disabled to suspend firmware updates, or if the update process interferes with applications using the network. –Automatically update nodes to the latest firmware version: When a node reports its firmware version, and a newer version of firmware is available on the gateway, schedule a firmware update without user action. This option can be used to automatically update nodes as they join the network. If this option is not selected, firmware updates can be manually scheduled from the Firmware Update Status page. –Stop automatic updates if an update error occurs: If an error occurs while updating a node, suspend further updates of other nodes. Updates can be resumed by clicking Apply on this page. Upload Files section: This section of the page is used to upload XBee firmware files to the gateway. These files contain the firmware image used to update nodes on the XBee network. Multiple files may be uploaded, each containing a different firmware type and version. Firmware files must end with an .ebl extension. Click Browse to select a firmware file and then click Upload. Manage Files section: This section of the page lists all firmware files that have been uploaded to the Digi device, along with their type and version number. After all nodes have been updated, these files can be removed from the gateway. Select any files you would like to remove and click Delete.

Configure Digi devices143Firmware Update Status pageThis page lists all nodes on the XBee network, along with their current firmware update status. Select one or more nodes to be updated by checking the box to the left of the nodes. To select a range of nodes, click on the starting check box, then hold down the Shift key and click on the ending check box. Click on a value in the table to select all nodes with that value. For example, click on a firmware version to select all nodes with the same version. These fields are shown in the table: Check box: Check this box to select the node for a firmware update. Node ID: The user assigned identifier of the node. Extended Address: The unique 64-bit MAC address of the node. HW: The hardware type and version of the node. XBP indicates that the node is an XBee-PRO module. FW: The current firmware version of the node. Status: The firmware update status of the node. It may be one of these values: –Unknown: The current firmware version has not yet been read from the node, or cannot be read from the node. –Up to date: The node is running the latest firmware version available on the gateway. –Available: A newer version of firmware is available on the gateway. Select the node and click Update to schedule an update. –Scheduled: A firmware update is scheduled to be performed on this node. –Updating: A firmware update is now being performed on this node. –Updated: A successful firmware update has been performed on this node. –Complete: The node has rejoined the network after a successful firmware update. –Cancelled: A firmware update for this node has been cancelled by the user. Select the node and click Update to restart the update. –Error: A firmware update on this node has failed. Select the node and click Update to retry the update. Update File: The firmware file used to update the node. Refresh: Display the latest firmware update status. Update selected nodes with firmware file: To use the file listed in the table for each node, choose Update File. To use a different file, choose a firmware file from the list Firmware files are uploaded on the Firmware Update Setup page.Use this router node as the updater: The updater node is a router within radio range of the node being updated. The updater sends the firmware image directly to the node during the update process. Choose Automatic to use the best available updater node. Choose a router from the list to use a specific updater node. Update: Schedule a firmware update of the selected nodes. Cancel Update: Cancel a scheduled firmware update of the selected nodes.

Configure Digi devices144Update XBee firmware via the web interface--all other ConnectPort X gatewaysFor ConnectPort X gateways that have any other XBee module type than ZB, the process for updating firmware is as follows:1In the web interface, go to Configuration > XBee Network > XBee Configuration. On the XBee Configuration page. click the Firmware Update link. The Firmware Update page shows the type of XBee radio in the gateway and the current firmware level.2Enter or browse to the file name containing the firmware update for the XBee module.For all ConnectPort X gateways besides ZB models, the firmware files have the extension .oem. Files ending with .zip or .ehx cannot be used on this page.3Click the Update button.After the firmware is loaded successfully, the XBee module will be restarted.Updating XBee firmware via the command line interfaceThe set xbee command has several options for performing XBee firmware updates. See the set xbee command description in the Connect Family Command Reference.Additional information on XBee modules and networksThe XBee Network page in System Information (Administration > System Information > XBee Network)displays more detailed information about XBee network devices, including counters related to any applications that are exercising the devices. See "Views and statistics for managing XBee networks" on page 196.For detailed information about XBee module settings and operation, see the Product Manual for the XBee RF module, available from Digi’s Support site.

Configure Digi devices151Advanced serial settingsThe advanced serial settings further define the serial interface, including whether port buffering (also known as port logging), RTS Toggle, and RCI over Serial are enabled as general serial interface options. You can also define how specific aspects of TCP and UDP serial communications should operate, including timeouts and whether a socket ID is sent. Serial SettingsThe Serial Settings part of the page includes these options:Enable Port Logging: Enables the port-buffering feature, which allows you to monitor incoming ASCII serial data in log form. The Log Size field specifies the size of the buffer that contains the log of ASCII serial data. Enable RTS Toggle: When enabled, the RTS (Request To Send) signal is forced high (on) when sending data on the serial port. Enable RCI over Serial (DSR): This choice allows the Digi Connect device to be configured through the serial port using the RCI protocol. See the RCI specification in the Digi Connect Integration Kit for further details. RCI over Serial uses the DSR (Data Set Ready) serial signal. Verify that the serial port is not configured for autoconnect, modem emulation, or any other application which is dependent on DSR state changes.

$Configure Digi devices152TCP settingsThe TCP Settings are displayed only when the current serial port is configured with the TCP Sockets or the Custom Profile. The settings are as follows:Send Socket ID: Include an optional identifier string with the data sent over the network. The Socket ID can be 1 to 256 ASCII characters. To enter non-printable characters, use these key sequences:Send data only under any of the following conditions: Enable if it is required to set conditions on whether the Digi device sends the data read from the serial port to the TCP destination. Conditions include:–Send when data is present on the serial line: Send the data to the network destinations when a specific string of characters is detected in the serial data. Enter the string 1 to 4 characters in the Match String field. To enter non-printable characters, use these key sequences:–Strip match string before sending: Match string before sending to strip the string from the data before it is sent to the destination. –Send after the following number of idle: Send the data after the specified number of milliseconds has passed with no additional data received on the serial port. This can be 1 to 65,535 milliseconds. –Send after the following number of bytes: Send the data after the specified number of bytes has been received on the serial port. This can be 1 to 65,535 bytes. Character Key Sequencebackspace \b formfeed \f tab \t new line \n return \r backslash \\ hexadecimal values \xhh Character Key Sequencehexadecimalvalues \xhh tab \t line feed \n backslash \\$

$Configure Digi devices153Close connection after the following number of idle seconds: Enable to close an idle connection. Use the Timeout field to enter the number of seconds that the connection will be idle before it is closed. This can be 1 to 65000 seconds.Close connection when DCD goes low: When selected, the connection will be closed when the DCD (Data Carrier Detected) signal goes low. Close connection when DSR goes low: When selected, the connection will be closed when the DSR (Data Set Ready) signal goes low. UDP settingsThe UDP Settings are displayed only when the current serial port is configured with the UDP Sockets or the Custom Profile. Send Socket ID: Include an optional identifier string with the data sent over the network. The Socket ID can be 1 to 256 ASCII characters. To enter non-printable characters, use these key sequences:Display current serial port settingsTo display the current serial port settings for a Digi device, enter the display techsupport command from the command line interface. Character Key Sequencebackspace \b formfeed \f tab \t new line \n return \r backslash \\ hexadecimalvalues \xhh$

Configure Digi devices154AlarmsThe Alarms page is for configuring device alarms and displaying alarm settings. Device alarms are used to send email messages or SNMP traps when certain device events occur. These events include certain data patterns being detected in the data stream, alarms for signal strength and amount of cellular traffic for a given period of time.Alarm notification settingsOn the Alarms page, the Alarm Notification Settings control the following:Enable alarm notifications: Enables or disables all alarm processing for the Digi Connect device.Send all alarms to the Remote Management server: enables or disables sending of alarm notifications to a server that handles remote management of devices, such as the iDigi Platform.Enabling this setting sends all alarm notifications to a remote management server. Enable this option if the Digi device is managed by a remote management server, such as the iDigi Platform. Enabling this option is useful because it allows all alarms to be monitored from one location. Enabling this option also allows Digi devices to send alarms to clients that would otherwise be unreachable from the Digi device, either because the Digi device is behind a firewall or not on the same network as the alarm destination. Disabling this settings disables sending of alarm notifications to a remote management server. Disable this option if devices are not managed by a remote management server or if alarms should be sent from the device, for example, because an SNMP trap destination is local to the device, not the iDigi Platform server.Mail Server Address (SMTP): Specifies the IP address of the SMTP mail server. Ask your network administrator for this IP address.From: Specifies the text that will be used in the “From:” field for all alarms that are sent as emails.

Configure Digi devices155Alarm conditionsThe Alarm Conditions part of the Alarms page shows a list of all of the alarms. Up to 32 alarms can be configured for a Digi device, and they can be enabled and disabled individually. Alarm list and statusThe alarm list displays the current status of each alarm. This list can be used to list to view alarm status at a glance, then view more details for each alarm as needed.Enable: Checkbox indicates whether the alarm is currently enabled or disabled.Alarm: The number of the alarm.Status: The current status of the alarm, which is either enabled or disabled. Type: The basis for the alarm.Trigger: The conditions that trigger the alarm.SNMP Trap: Indicates whether the alarm is sent as an SNMP trap.– If the SNMP Trap field is disabled, and the Send To field has a value, the alarm is sent as an email message only. – If the SNMP Trap field is enabled and the Send To field is blank, the alarm is sent as an SNMP trap only. – If the SNMP Trap field is enabled, and a value is specified in the Send To field, that means the alarm is sent both as an email and as an SNMP trap. Send To: The email address to which the alarm is sent.Email Subject: Text to include in the Subject line of alarms sent as email messages.

$Configure Digi devices156Alarm configurationTo configure an alarm, click on it. The configuration page for individual alarms has two sections.Alarm conditionsSend alarms based on average RSSI level below threshold for amount of time: Send alarms based on the average signal strength falling below a specified threshold for a specified amount of time. –RSSI: The threshold signal strength, measured in dB (typically -120 dB to -40 dB). –Time: The amount of time, in minutes, that the signal strength falls below the threshold. Note The set alarms command has an option, optimal_alarms_enabled={yes|no}. If enabled, this option causes an optimal alarm to be sent when the signal strength returns to a value that is above the specified threshold.This feature is only available through the command line. The default for this option is no; it must be explicitly enabled if desired.Send alarms based on cellular data exchanged in an amount of time: –Data: The number of bytes of cellular data. –Time: The number of minutes.–Cell Data Type: The type of cellular data exchanged: Receive data, Transmit data, or Total data.$

Digi WMPX5F WMP100 User Manual ConnectPort X5 Family User s Guide

Digi International Inc WMP100 ConnectPort X5 Family User s Guide

User Manual

Navigation menu

Namespaces

Views

Navigation