Page 1
Digi Connect® WAN Family User Guide User Guide...
Page 2
Information in this document is subject to change without notice and does not represent a commitment on the part of Digi International. Digi provides this document “as is,” without warranty of any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or merchantability for a particular purpose.
Test the IP address assignment Sign in to the web interface Use a web browser to sign in to the web interface Use Digi Device Discovery utility to sign in to the web interface Network connections and data paths Network services...
Page 4
Remote Command Interface (RCI) SNMP Device administration Hardware SIM card slots SIM card activation Configuration settings and status information Digi Connect WAN Family web interface Home page Menu Getting started System summary Apply and save changes Cancel changes Online help...
Page 5
System Information Reboot Enable/disable access to network services Digi Connect WAN Family command-line interface Configuration through the command line Access the command-line interface Basics for using the command-line interface Management through the command line interface close connect dhcp display display mobile (cellular)
Page 6
Specifications and certifications Hardware specifications Digi Connect WAN specifications ConnectPort WAN specifications Digi Connect WAN 3G / Digi Connect WAN 4G specifications Digi Connect WAN 3G IA specifications Wireless networking features Digi Connect WAN Family regulatory information and certifications RF exposure statement...
About this guide This guide describes how to install, provision, configure, monitor, and administer Digi Connect WAN Family devices. The guide covers the following products: Digi Connect WAN Family Digi Connect WAN Family GPRS Digi Connect WAN Family GSM-R Digi Connect WAN Family VPN...
For product support resources visit the following support pages: Digi Connect WAN Family For additional information, see the following resources: Online help and tutorials in the web interface for the Digi device Digi Wiki for Developers Digi Connect WAN Family User Guide...
Page 9
About this guide Where to find information Product information available on the Digi website, www.digi.com, and the Digi support site, including: Support forum Knowledge Base Datasheets/product briefs Application/solution guides Carrier-specific documents Digi Connect WAN Family User Guide...
Digi Remote Manager Web-based interface For Digi devices that ship with a default IP address, connecting a laptop computer to the Ethernet port of these products allows direct access to the web interface for configuration. Command-line interface available via local serial port, telnet or SSH...
Digi Connect WAN Family features IP protocol support IP protocol support All Digi Connect WAN Family devices include an on-board TCP/IP stack with a built-in web server. Supported protocols vary by specific product and include, unless otherwise noted: Transmission Control Protocol (TCP)
Page 12
The Auto-IP protocol automatically assigns an IP address from a reserved pool of standard Auto-IP addresses to the computer on which it is installed. Digi devices automatically obtain their IP addresses from a DHCP server. If the DHCP server is unavailable or nonexistent, Auto-IP assigns the device an IP address.
Page 13
HyperText Transfer Protocol (HTTP)/HyperText Transfer Protocol over Secure Socket Layer (HTTPS) Digi provides web pages that you can use to configure the Digi Connect WAN Family product. You can secure these web pages by requiring a user login. Internet Control Message Protocol (ICMP)
Digi Connect WAN Family support the Digi SureLink feature. Digi SureLink provides an “always-on” mobile network connection to ensure that a Digi device is in a state where it can connect to the network. It does this through hardware reset thresholds and periodic tests of the connection.
Unix. See the RealPort Compatibility OS List in the Digi Knowledge Base for a detailed list of supported operating systems. It is ideal for financial, retail/point-of-sale, government, or any application requiring enhanced security to protect sensitive information.
Digi Connect WAN Family features Alarms Alarms You can configure Digi Connect WAN Family products to issue alarms, in the form of email messages or SNMP traps, when certain device events occur, including: Data patterns detected in the data stream Cellular alarms for signal strength and amount of cellular traffic for a given period of time Configuring Digi devices to issue alarms allows you to know when events occur.
The Network Port Scan Cloaking feature allows you to configure this Digi device to ignore (discard) received packets for services that are hidden or not enabled and network ports that are not open. You can use this feature to protect your Digi device from malicious software or denial of service attacks. For more information, see Network Port Scan Cloaking.
Reboot the device For more information on these configuration-management tasks, see Administration. Customization capabilities You can customize several aspects of Digi devices. For example, you can: Customize the appearance of the device interface by changing the company logo or screen colors.
Getting started with Digi Connect WAN Family products This section walks you through configuring an IP address and signing in to your Digi Connect WAN Family device. Assign an IP address Sign in to the web interface Digi Connect WAN Family User Guide...
DHCP client enabled by default. If desired, set up a permanent entry for the Digi device device on a DHCP server. While this is not necessary to obtain an IP address via DHCP, setting up a permanent entry saves the IP address when the device is rebooted.
To change the IP address from the web interface: 1. Open a web browser and type the current IP address of the Digi Connect WAN Family device in the address bar. 2. Type the user name and password for the device. The default user name is root and the default password is dbps.
1. In the web browser address bar, type the IP address of the device. 2. If you are prompted for login credentials, type the user name and password for the Digi device. The default user name is root and the default password is dbps. If the default user name and password do not work, contact the system administrator who set up the Digi device.
Page 23
To start the utility, select Start > All Programs > Digi > Digi Device Discovery > Digi Device Discovery. 6. From the Digi Device Discovery utility, locate the Digi device in the list of devices, and choose one of the following options: Double-click the Digi device to open the web interface.
Network connections and data paths Digi Connect WAN Family devices allow for several kinds of connections and paths for data flow between Digi Connect WAN Family devices and other entities. You can group these connections into two main categories: Network services, in which a remote entity initiates a connection to a Digi device.
DialServ: Connecting a DialServ device to the serial port. DialServ simulates a public switched telephone network (PSTN) to a modem and forwards the data to the serial port. The Digi device sends and receives the data over an IP network.
Command-line interface (CLI)-based client connections CLI-based client connections are available for use when you establish a session with the Digi Connect WAN Family product’s CLI. CLI-based client connections include: ssh: Allows you to connect to a remote entity using the ssh protocol.
Configuration, monitoring, and administration Configuration, monitoring, and administration This section provides an overview for configuring, monitoring, and administering Digi devices. Configuration capabilities Digi Device Discovery utility Remote Manager interface Web interface Accessing the command-line interface Remote Command Interface (RCI) SNMP...
IP packets to a network. It sends out a User Datagram Protocol (UDP) multicast packet to all Digi devices on the network. Digi devices that support ADDP reply to the UDP multicast with their configuration information. Even Digi devices that do not yet have an assigned IP address or are misconfigured for the subnet can reply to the UDP multicast packet and appear in the device discovery results.
Digi device. To access the command line from the Digi Device Discovery utility, click Telnet to command line. For example, here is a command issued from the command line to assign the IP address to the Ethernet interface: #>...
SNMP interface, titled Management Information Base for Network Management of TCP/IP-based Internets: MIB-II. You can also display the text of the Digi enterprise MIBs. The product page for each product on the Digi website provides a link to the Digi-provided MIBs for that product. See Simple Network Management Protocol (SNMP) for a list of supported MIBs.
SNMP device monitoring capabilities. Device administration Periodically, you need to perform administrative tasks on a Digi Connect WAN Family device, such as: Uploading and managing files Changing the password for logging onto the device Backing up and restoring the configuration...
Hardware This section details requirements and recommendations for select Digi Connect WAN Family hardware. See also Specifications and certifications System status LEDs. SIM card slots Digi Connect WAN Family User Guide...
There are several firmware settings for SIM cards, for selecting between dual SIM cards, designating primary and secondary SIM cards, setting ID and phone numbers, and viewing status. See SIM card selection and settings. Digi Connect WAN Family User Guide...
Digi Connect WAN Family web interface This section describes how to configure and manage a Digi Connect WAN Family device using the web interface. Home page Apply and save changes Cancel changes Online help Configuration through the web interface Management...
Manage serial ports and connections Administer the Digi device Getting started The Getting Started section displays a link to a tutorial on configuring and managing Digi devices. System summary The System Summary page displays the details for this Digi Connect WAN Family.
IP Network Failover settings: Provides a dynamic method for selecting and configuring the default gateway for the Digi device using a set of rules and link tests to determine whether you can use a particular network interface to communicate with a specified destination. See Network Failover settings for more information.
Page 37
IP Settings The IP Settings page allows you to configure how to obtain the IP address of the Digi Connect WAN Family device. You can use one of the following methods to obtain the IP address: DHCP Static IP address...
Page 38
Digi device is configured for DHCP and a DHCP server is not currently available. Wi-Fi IP settings Use the Wi-Fi IP Settings page to configure how to obtain the IP address of a Wi-Fi-enabled Digi device. It has the same settings as the IP Settings page.
Page 39
Digi Connect WAN Family web interface Configuration through the web interface Country: The country where this wireless device resides. The channel settings are restricted to the legal set for the selected country. Channel: The frequency channel that the wireless radio will use. Select Auto-Scan to have the device scan all frequencies until it finds one with an available access point or wireless network it can join.
Page 40
Digi Connect WAN Family web interface Configuration through the web interface Data Encryption: You an select multiple encryption methods. Use any available encryption method: Enables all of the methods. The capabilities of the wireless network determines the actual method used.
Page 41
Installed Certificates: Shows which client certificates have been added and are in use. DHCP server settings You can enable the DHCP server feature in a Digi device to allow other devices or hosts on this network to be assigned dynamic IP addresses. This DHCP server supports a single subnetwork scope.
Page 42
Options are other client configuration parameters that the DHCP server can assign when serving leases to DHCP clients. Most options are defined in RFC 2132. The DHCP server in the Digi device supports a limited set of options: Option 3: Routers on Subnet...
Page 43
Enable Dynamic Host Configuration Protocol (DHCP) Server: Enables the DHCP server feature on this Digi device. Note that for the DHCP server to operate, the Digi device must be configured to use a static IP address. For information on how to configure static IP settings, Settings.
Page 44
Server to send its IP address to a DHCP client as the first DNS server in its lease information. This Digi device supports a DNS Proxy feature that will relay DNS requests and responses between DNS clients and servers. The DNS Proxy is not a feature of the DHCP Server itself, but rather it is managed elsewhere in the configuration settings for this Digi device.
Page 45
Command-Line interface inaccessible. Supported basic network services and their default port numbers For Digi devices with multiple serial ports, the network port number defaults for various services are set based on the following formula: base network port number + serial port number The assumed default base is 2000.
Page 46
Remote login (rlogin) Allows users to sign in to the Digi device and access the command-line interface through rlogin. Remote shell (Rsh) Allows users to sign in to the Digi device and access the command-line interface through Rsh.
Page 47
The format for this port number is as follows: 20<serial port number> Replace <serial port number> with the Digi serial port number. For example, 2001 applies to serial port 1, 2010 applies to serial port 10, and 2016 applies to serial port 16.
Page 48
A DDNS service provider typically supports the registration of only public IP addresses. When using such a service provider, if your Digi device has a private IP address (such as 192.168.x.x or 10.x.x.x), your update requests will be rejected.
Page 49
Use the following dynamic DNS service: Disables DDNS updates, or selects the DDNS service provider to use to register the IP address of this Digi device. When you select a specific DDNS service provider, you must also provide the related account information for that service provider.
Page 50
According to wildcard documentation at DynDNS.org: “The wildcard aliases *.yourhost.ourdomain.tld to the same address as yourhost.ourdomain.tld.” Using this option in the settings for your Digi device has the same effect as selecting the wildcard option on the DynDNS.org website. To leave the wildcard option unchanged from the current selection on their web site, use the “no change”...
Page 51
Note that if you enable this feature and the system from which you are connecting to the Digi device is not included in the list of allowed devices or networks, then you will instantly no longer be able to communicate or configure the device from this system.
Page 52
IP address that is controlled by Port Forwarding/NAT. Use port forwarding to connect from a Digi device to a RealPort device. For this type of connection to occur, your mobile wireless provider must be mobile-terminated.
Page 53
Enable Network Address Translation (NAT): Permit the translation and routing of IP packets between private (internal) and public (external) networks. Refer to NAT configuration options below. Some Digi device models permit the configuration of NAT instances for more than one network interface.
Page 54
(private to public) or inbound (public to private). Also, the DMZ Forwarding rule is not used if there is a local port on the Digi device to which the packet may be delivered. This includes TCP service listener ports as well as UDP ports that are open for various services and clients.
Page 55
The IP Network Failover feature provides a dynamic method for selecting and configuring the default gateway for the Digi device. Failover uses of a set of rules and link tests to determine whether you can use a particular network interface to communicate with a specified destination. The user configures these rules, link tests and the priority order of the interfaces.
Page 56
IP Network Failover statistics. Network Failover general settings Enable IP Network Failover: Enable the Network Failover feature in the Digi device. Click the check box to turn failover on or off. Enable fallback to the non-failover default gateway priority method: The Network Failover uses the fallback option if it cannot configure a default gateway.
Page 57
Digi Connect WAN Family web interface Configuration through the web interface Failover Interface Priority: Failover uses the list of available network interfaces in priority order to determine the default gateway. The default gateway routes IP packets to an outside network, unless controlled by another route.
Page 58
Digi Connect WAN Family web interface Configuration through the web interface Link Test Settings for each of the network interfaces: The options that follow configure the link tests for the network interfaces. Each network interface has its own set of options.
Page 59
Digi Connect WAN Family web interface Configuration through the web interface Primary Destination (TCP Connection Test): The primary, or first, destination used to establish a TCP connection. The Primary Destination uses the Primary TCP Port when testing the connection to the Primary Destination. The destination must be a valid IPv4 address.
Page 60
The Digi device is responsible for handling the routing between networks. Devices within the local private network served by the Digi device can connect to devices on the remote network as if they are in the local network. The VPN tunnels are configured using various security settings and methods to ensure the networks are secured.
Page 61
DNS because its public IP address can change. Selecting this check box will cause the Digi device to poll the DNS server once a minute to see if the remote VPN device’s IP address has changed. The IPsec software will be restarted with the new IP address if it does change.
Page 62
Select Local endpoint is an internal interface to not allow devices on the remote network to see devices on the local network. This causes the Digi device to create a virtual endpoint and assign it the IP address specified later in the settings on this page. Devices on the remote network will only see the IP address of this endpoint, and cannot see the IP addresses of any devices on the local private network.
Page 63
Select the Use the following as the identity option to enter a string such as a DNS name or an FQDN. Select the Use the interface IP address if the Digi device should send the IP address of the interface you selected above as its identity. Select Use the identify certificate X.509…...
Page 64
This mode is different from the normal mode of VPN tunnel operation, where the range of the remote subnet is explicitly set VPN tunnel all mode is supported when the Digi device is the initiator of the VPN connection. It is not supported when the Digi device is the server.
Page 65
Digi Connect WAN Family web interface Configuration through the web interface Pre-Shared Key Settings: If you select the pre-shared key authentication method in one or more of your ISAKMP Phase 1 Policies, then you will be prompted to supply the ID of the VPN device and the preshared key used for authentication.
Page 66
VPN devices used to communicate with each other. Select the policies to use during phase 1 of the ISAKMP negotiation. Ensure that the Digi device and the remote VPN device use the same policies. If more than one policy is specified, the VPN devices will use the most secure policy that they both have been configured to support.
Page 67
The diagram shows a Digi Connect WAN VPN used as a primary remote site router: How VPN tunnels work The Digi device’s Ethernet port usually connects to a switch or hub, which then connects to other Ethernet devices. The mobile/cellular carrier provides only one IP address to the mobile interface. The...
Page 68
(HQ) subnet (172.16.5.0). For example, a computer at 172.17.1.20 needs a file from 172.16.5.100. 2. The Digi device sees the request is on the HQ subnet and verifies a VPN tunnel exists between the two sites.
Page 69
Since the mobile network address is effectively “passed-through” to the local device connected to the Ethernet port of the Digi device, all network access to it is bypassed, with some specific exceptions. Here is an example of a Digi device configured for IP pass-through in a network with a third-party router.
Page 70
Digi device for purposes of managing it. Those ports are called pinholes, and they are not passed on to the device connected to the Ethernet port of the Digi device. You can configure network services and ports as pinholes include (see...
Page 71
Host List Settings Use the Host List Settings page to add or remove entries from the host list. For Digi devices using the DialServ feature, the host list provides a means to map a phone number to a network destination.
Page 72
Digi Connect WAN Family web interface Configuration through the web interface “virtual router.” Two or more physical routers are configured to stand for the virtual router, with only one doing the actual routing at any given time. The virtual router has a unique You can share IP address and MAC address with all routers in a VRRP group.
Page 73
Enable DNS Proxy Service: Enables the DNS Proxy feature on this Digi device. DNS Proxy permits DNS client hosts to communicate with this Digi device as if it were a DNS Server. It forwards the DNS client's request to one of the DNS servers configured in its network settings.
Page 74
DNS clients and servers. The DNS Proxy will cycle through the DNS servers that are configured in the Digi device. DNS client requests are identified by the client's IP address and the unique Query ID in the DNS request message.
Page 75
TCP connection request is received for a port that is not open/bound, the Digi device will send a TCP reset reply to inform the originator that the service is not available. Similarly, the default operation when a UDP datagram is received for a port that is not open/bound, the Digi device will send an ICMP port unreachable packet to inform the originator that the service is not available.
Page 76
Ethernet speed to whatever value is desired. Or, if the other side is set for 100 Mbps, this side must use 100 Mbps. Duplex Mode: The mode the Digi device uses to communicate on the Ethernet network. Specify one of the following: half: The device communicates in half-duplex mode.
Page 77
If your Digi device has not already been provisioned for use in the mobile network, you can launch a wizard to provision it from these pages. In addition, you can configure settings for Digi SureLink, a feature that provides an “always-on”...
Page 78
Configuration through the web interface SIM card selection and settings The Digi device may be equipped with one or two Subscriber Identity Module (SIM) cards. A SIM card contains the account information associated with a particular mobile service provider. All of the settings available on the Mobile Configuration page are stored individually for each SIM card.
Page 79
The device only needs to be provisioned once. This type of provisioning applies only to Digi devices that have a CDMA cellular module. For Digi devices, provisioning is done through the Mobile Device Provisioning Wizard, which is launched from the Mobile Configuration page.
Page 80
The sequence of Mobile Device Provisioning Wizard screens displayed and the settings on them vary by product and mobile service provider. The following example shows how to provision a Digi device when Sprint PCS is the mobile service provider. 1. Select a mobile service provider from the list.
Page 81
Digi Connect WAN Family web interface Configuration through the web interface 2. Select automatic or manual provisioning. The main difference between automatic and manual provisioning is that manual provisioning involves entering more information. You will have received all of this information from your mobile service provider during account setup.
Page 82
SIM Selection Settings The following options control how the Digi device chooses a SIM card to establish mobile connections. The primary SIM will used first to try to establish a connection. If the connection is unsuccessful, the secondary SIM will be used instead.
Page 83
The following options configure advanced settings to manage the mobile PPP connection established by the Digi device. Unless otherwise stated, the mobile PPP connection is not restarted with the new settings when the changes are applied (saved). The changes are applied the next time the mobile PPP connection is restarted.
Page 84
The mobile PPP connection is not automatically restarted when a band selection is configured. Automatic: Enables automatic service band selection by the modem. Automatic is the default value. Digi recommends using the default setting unless there is a reason to configure specific bands. 2G Only 3G Only Manual: Selects the individual service bands that you want to configure.
Page 85
Use the Mobile Connection Settings to configure Digi SureLink settings for a Digi device. SureLink can ensure that a Digi device is in a state where it can connect to the mobile network, and you can use them to monitor the integrity of the established mobile connection.
Page 86
Hardware Reset Thresholds: You can configure these settings to clear any error states that were resident in the Digi device’s cellular module, so the device can once again connect to the network, if the connection is lost. It does this by first resetting the cellular module after a default or specified number of consecutive failed connection attempts, and then resetting the Digi device after a default or specified number of failed consecutive connection attempts.
Page 87
Digi Connect WAN Family web interface Configuration through the web interface Ping Test: Enables or disables the ability to use “ping” (ICMP) as a test to verify the integrity of the mobile connection. The test is successful if a valid ping reply is received in response to the ping request sent.
Page 88
Digi Connect WAN Family web interface Configuration through the web interface DNS Lookup Test: Enables or disables the ability to use a Domain Name Server (DNS) lookup as a test to verify the integrity of the mobile connection. The test is successful if a valid reply is received from a DNS server.
Page 89
These settings apply to Digi cellular-enabled products that use the Sierra Wireless MC57xx series CDMA/EVDO modules. The Update PRL page is for loading a preferred roaming list (PRL) into the cellular module on the Digi device. A PRL is a database that resides in a mobile device that contains information used during the system selection and acquisition process.
Page 90
(or “text messages”) may have additional costs. Before using the SMS capabilities of your Digi device, verify with your mobile service provider that your agreement includes SMS as part of your service plan. Understand the costs of SMS before you enable the SMS features on this Digi device.
Page 91
However, this can result in filling the event log with more SMS activity records than are useful for normal operation. Digi recommends enabling this option only when detail is required for a limited period of time. This option is disabled (off) by default.
Page 92
Python SMS Password: Although this use is not typical, a message may be directed for deliver to Python by sending “#python” as a command to this Digi device. In such a case, this Python password may be configured to validate the acceptance of such a command message before it is accepted and placed on the dedicated Python SMS message read queue for further processing.
Page 93
SCL rules. This occurs when the Digi device receives a message via SMS from a sender who was blocked by the SCL rules. This option is disabled (off) by default.
Page 94
For SMS via GSM service, the Digi device has to translate between the GSM 03.38 7-bit alphabet and ASCII. ASCII is the native character set for the Digi device and is the character set used in the CLI and web UI.
Page 95
Digi Connect WAN Family web interface Configuration through the web interface ASCII GSM 03.38 ASCII Code Code Character Description 0x00 0x20 * NULL 0x01 0x20 * START OF HEADING 0x02 0x20 * START OF TEXT 0x03 0x20 * END OF TEXT...
Page 96
Digi Connect WAN Family web interface Configuration through the web interface ASCII GSM 03.38 ASCII Code Code Character Description 0x1B 0x20 * ESCAPE 0x1C 0x20 * FILE SEPARATOR 0x1D 0x20 * GROUP SEPARATOR 0x1E 0x20 * RECORD SEPARATOR 0x1F 0x20 *...
Page 97
Digi Connect WAN Family web interface Configuration through the web interface ASCII GSM 03.38 ASCII Code Code Character Description 0x38 0x38 DIGIT EIGHT 0x39 0x39 DIGIT NINE 0x3A 0x3A COLON 0x3B 0x3B SEMICOLON 0x3C 0x3C < LESS-THAN SIGN 0x3D 0x3D...
Page 98
Digi Connect WAN Family web interface Configuration through the web interface ASCII GSM 03.38 ASCII Code Code Character Description 0x55 0x55 LATIN CAPITAL LETTER U 0x56 0x56 LATIN CAPITAL LETTER V 0x57 0x57 LATIN CAPITAL LETTER W 0x58 0x58 LATIN CAPITAL LETTER X...
Page 99
Radio settings These settings control the current state of the WiMAX radio, and its behavior when you start the Digi device. Enable the WiMAX radio: Turn on the radio, scan for available networks, and be ready to connect.
Page 100
Connect with automatic network selection: Select the subscription you want to use from the subscription list. The Digi device chooses the best available network automatically. Connect to a specific network: Select the subscription you want to use from the subscription list.
Serial ports configuration Use the Serial Ports Configuration page to establish a port profile for each serial port on the Digi Connect WAN Family product. The Serial Ports Configuration page includes the currently selected port profile for the serial port, detailed configuration settings for the serial port, dependent on the port profile selected, and links to basic and advanced serial settings.
Page 102
Important DialServ interoperation requires this profile. GPS: The GPS profile allows the Digi device to make use of an NMEA-0183 compliant GPS data stream for location and geofencing. Local Configuration: The Local Configuration profile allows you to sign in and access the command line interface when connecting directly to a serial port on a Digi device.
Page 103
RealPort: Use RealPort to map a COM or TTY port to this serial port of your Digi device. The COM/TTY port appears and behaves as a local port to the PC or server. RealPort is also known as COM Port Redirection.
Page 104
TCP network. The TCP server allows other network devices to initiate a TCP connection to the serial device attached to the serial port of the Digi Connect WAN Family product. The TCP client will establish a TCP connection to a defined IP address and port number.
Page 105
Digi Connect WAN Family web interface Configuration through the web interface 1. Select Configuration > Serial Ports. 2. Click a port number from the Port column. 3. Click Change Profile. 4. On the Select Port Profile page, select a port profile option and then click Apply.
Page 106
Instead of connecting a terminal to the console port, cable the console port to the serial port of your Digi device server. Then using TCP/IP utilities like reverse telnet, network administrators can access these consoled serial ports from the LAN.
Page 107
TCP server and the other Digi device as the TCP client. Once you establish a connection between the two Digi devices the communication is bi-directional. To assign a Serial Bridge (Serial Tunneling) to a serial port on a Digi device acting as the TCP client (which initiates the connection to the TCP server): a.
Page 108
Digi Connect WAN Family web interface Configuration through the web interface TCP Sockets for TCP client (Automatic Connection): In a TCP client configuration, the Digi device server automatically establishes a TCP connection to an application or network device. See Automatic TCP connections (Automatic Connection) for more information.
Page 109
Digi Connect WAN Family web interface Configuration through the web interface e. Specify the destination TCP port number in the TCP Port field. The port number depends on the conventions used on the remote server or device. The following table provides the common TCP port number conventions.
Page 110
TCP Sockets for TCP server: A TCP Server configuration allows other network devices to initiate a TCP connection to the serial device attached to a serial port of the Digi device server. This is also referred to as reverse telnet, console management or device management.
Page 111
You can combine this mechanism with the DCD signal to close the connection and the DSR signal to do RCI over serial. Together, you can use these signals to the Digi device to auto connect to many devices, deterministically, on the network.
Page 112
IA devices and PLCs. Serial ports for Digi Connect WAN IA devices are set to use this port profile by default. The default settings for the Digi Connect WAN IA and in this port profile is sufficient for most IA applications. If you need to change the settings from the defaults, use the “set ia”...
Page 113
Send data only under any of the following conditions: Enable if you need to specify the conditions when the Digi device server will send the data read from the serial port to the TCP destination. Digi Connect WAN Family User Guide...
Page 114
Digi Connect WAN Family web interface Configuration through the web interface Send when data is present on the serial line: Send the data to the network destinations when a string of characters is detected in the serial data. To enter non-printable characters,...
\xhh values Display current serial port settings To display the current serial port settings for a Digi device, type display techsupport from the command line interface. Camera Digi Connect WAN Family products support connecting a WatchPort® Camera to one of its USB host ports.
If No Camera Available appears, the camera is disabled, no camera is attached to the Digi device, or some other problem is causing the camera to work incorrectly. You can access the current snapshot by typing the following URL in any web...
Page 117
From: Specifies the text that used in the “From:” field for all alarms that are sent as emails. Alarm list and status The Alarm Conditions page lists all of the alarms. You can configure up to 32 alarms for a Digi device, and you can individually enable and disable these alarms.
Page 118
Digi Connect WAN Family web interface Configuration through the web interface Send alarms based on serial data pattern matching: Click this radio button to specify that this alarm is sent when the specified serial data pattern is detected. Then specify the following: Serial Port: The serial port to monitor for the data pattern.
Simple Network Management Protocol (SNMP) Settings Use the Simple Network Management Protocol (SNMP) Settings page to manage and monitor network devices. You can configure Digi Connect WAN Family devices to use SNMP features, or you can disable SNMP for security reasons. For additional information, see...
Page 120
Date and Time Settings Use the Date and Time Settings page to set the Coordinated Universal Time (UTC) and/or system time and date on a device, or set the offset from UTC for the Digi device's system time. Set the date and time To set the date and time, click the Set button to configure the hours, minutes, seconds, month, day, and year on the device.
Page 121
If the Digi device receives a time update from a best (smallest value) ranking time source and the new time is within that range, the Digi device's time is not changed. However, if the new time falls outside the defined threshold range, the Digi device's time is updated immediately using the new time value.
Page 122
60 seconds, the Digi device's time will be updated using a new time value that is 60 seconds or more different than the Digi device's current time value. If the new time value differs from the Digi device's current time by less than 60 seconds, the Digi device's time is not updated using that new time.
Page 123
When configuring a Digi device to be a Remote Manager-registered device, you must create a Device ID for the Digi device. The Device ID allows the Digi device to communicate with Remote Manager. By default, the Device ID is created from the MAC address of the device. The default setting is the recommended setting for the Device ID.
Page 124
Digi Connect WAN Family web interface Configuration through the web interface the frequency in which keep-alive messages are sent. You can use device—initiated Remote Manager connections in any cellular network, whether using public or private IP addresses, or even if using NAT.
Page 125
Remote Manager Server Address: The IP address or hostname of the Remote Manager Server. Connect every: H hrs M mins: The interval (period) in hours and minutes in which the Digi device server attempts a timed connection to the specified Remote Manager Server.
Page 126
Phone Number: The phone number or short code of the Remote Manager platform. For more information about the Remote Manager SMS Phone Number and Service ID fields, contact your Digi sales Representative, or use the Remote Manager Provision command. Service Identifier: The Service Identifier (prefix) for Remote Manager. This field is an optional setting that you can use when you are using a shared short code.
Page 127
Digi Connect WAN Family web interface Configuration through the web interface Adjust Device SMS Settings to Remote Manager recommended values: This setting applies several Global SMS configuration options (as described in Global SMS settings) that are required by the Remote Manager SMS feature.
Page 128
Remote Manager-registered device at this interval. Important Digi recommends that you set this interval value as long as your application can tolerate to reduce the amount of data traffic. Assume the connection is lost after n timeouts (Wait Count): After the number of...
Page 129
1. Open the web interface for the Remote Manager device and select Configuration > Remote Manager. 2. On the Remote Manager Configuration settings page, type the URL of the Remote Manager platform. For example, type remotemanager.digi.com in the Remote Manager Server Address field under Device -Initiated Management Connection. 3. Select the Automatically reconnect to Remote Manager after being disconnected check box.
Page 130
More than two-user model To determine which user model to implement: In the web interface, if the menu includes Users, the Digi Connect device uses either the two-user model or the more than two users model. In the command-line interface, issue a show user or set user command. In the command output, note how many user IDs are defined: one, two, or more than two.
Page 131
In Digi device with a single-user model, changing the root password also changes the password for ADDP. In Digi device with the multi-user model, changing the root password has no effect on ADDP. To change the ADDP password, type newpass name=addp from the command line.
Page 132
CAUTION! Take care in changing access settings. If you sign in as the administrative user and disable the web interface, you will not be able to sign in to the Digi Connect WAN Family device on your next attempt, and there is no way to raise your user permissions to enable the web interface again.
Page 133
Use the User Permissions page to define whether and how users can use services and configuration settings for the Digi Connect WAN Family product. For example, you can disable a user’s access to certain parts of the web interface, or allow them to display settings only but not change them.
Page 134
You can filter the Digi devices on a single IP address or restricted as a group of Digi devices using a subnet mask that only allows specific networks to access to the Digi device. IP Filtering settings are a part of the Network configuration settings. See IP filtering settings.
Page 135
Configuration through the web interface Static position settings The static position settings define latitude and longitude coordinates for the Digi device. You can query these parameters with the RCI protocol and applications, such as the Remote Manager, can use this information.
Page 136
Log entries will be written at the interval defined by the location update interval parameter. Applications pages Most Digi devices support additional configurable applications. Use the options under Application to configure applications. The application options vary depending on the Digi device. Digi Connect WAN Family User Guide...
Page 137
Industrial Automation: Configures the Digi device for use in industrial automation applications. Python Configuration If you have a Python-enabled Digi Connect WAN Family device, you can manage Python files using the Application > Python menu options. Python options include: Uploading Python program files to the Digi Connect WAN Family device...
Page 138
Written in the Python programming language for use on Digi devices, you can also execute DIA on a computer for prototyping purposes when a suitable Python interpreter is installed.
Page 139
Guide or go to www.digi.com/products/cloud/digi-remote-manager. RealPort configuration Install and configure RealPort software on each computer that uses the RealPort ports on the Digi device. The RealPort software is available for downloading from the Digi Support site. For complete information on installing and using RealPort software, see RealPort Installation Guide on the...
Page 140
Known limitations You can use Digi RealPort only when the Modbus Bridge function is disabled. You cannot use RealPort with Modbus/RTU or ASCII to access the Modbus Bridge function. The outgoing slave idle time used for remote Modbus IP-based slaves does not always close idle sockets predictably.
Digi devices. Use this utility to upload firmware, files, configuration settings and factory defaults to a Digi device. You can run it from the command line on a computer that uses the Microsoft Windows operating system.
Management. Network statistics: statistics for IP, TCP, UDP, and ICMP. Manage connections and services Use the Management menu to view and manage connections and services for the Digi Connect WAN Family product. Serial Port Management The Serial Port Management page (Management > Serial Ports) provides an overview of the serial ports and their connections.
When the Digi device operates in an unexpected manner, you can send the log entries to Digi for analysis by Technical Support and Engineers. You cannot disable the event log. Digi uses the event log to get an accurate view of all operational aspects of the device.
Page 144
Digi Connect WAN Family web interface Management Note Removing a lease will cause the associated IP address to be returned immediately to the available address pool. Any IP address in this available address pool may be served in a new lease to a DHCP client.
Check that an IP address is not in use before offering it). Administration You can periodically perform administration tasks on Digi Connect WAN Family products, such as: File management Changing the password used for logging onto the device...
If you upload an index.htm or index.html file, that file automatically loads when you sign in to a Digi device from the web browser.
Page 147
You gain the following benefits when you use certificates to manage security: Certificates are more secure than Digi self-signed certificates. Certificate management allows you to push your own certificates out to Digi device. The key sizes are more flexible. When you manage certificates through the web interface, it creates a repository of certificates that other applications and processes can use.
Page 148
Digi Connect WAN Family web interface Administration Security type Table Used to load X.509 Certificate CA (Certificate Certificate authority digital certificates. A Authority/Certificate Authority) certificate authority (CA) is a trusted third party Revocation that issues digital certificates for use by other parties.
Page 149
The length of a Digi device’s self-signed private keys is 1024 bits. While this length is adequate for 99.9% of all applications, some people or applications prefer a shorter or longer key.
Page 150
Digi Connect WAN Family web interface Administration About Simple Certificate Enrollment Protocol (SCEP) CA certificates Managing Simple Certificate Enrollment Protocol (SCEP) CA certificates involves two types of certificates and settings on several pages: The SCEP CA certificate. This is the globally trusted certificate.
Page 151
Digi Connect WAN Family web interface Administration Installed Certificate Authority Certificate Revocation Lists The table lists any certificate authority certificate revocation lists that are loaded in the Certificate Revocation List database. Action: Select to perform allowable actions on the entry. The only allowable action is to delete the entry.
Page 152
CA that encrypts the request. These two options are indices into the CAs in the Digi device’s certificate database, and both sign and encrypt the request. This information is typically downloaded from the SCEP CA table.
Page 153
Digi Connect WAN Family web interface Administration Enrollment Password: A one-time, short-lived password used for the SCEP enrollment process. Get this password from the SCEP administrator. Common Name (CN): A name that identifies the device associated with the SCEP CA certificate;...
Page 154
Digi Connect WAN Family web interface Administration Upload SSL/TLS Identity Keys and Certificates Use this section to upload SSL/TLS RSA or DSA identity keys and certificates. You can use identity certificate and key files in ASN.1 DER or PEM Base64 encoded formats.
Page 155
Use the Secure Shell (SSHv2) Hostkeys database to load host private keys. You can use SSHv2 host keys for authentication with SSHv2 clients and secure key exchange. The Digi device automatically generates a default 1024-bit DSA key if none exists when the Digi device boots.
Update the firmware and boot/POST code You can update the firmware and/or boot/POST code for a Digi device from a file on a computer or through TFTP. The recommended method is to download the firmware to a local hard drive. TFTP is supported for those using Unix systems.
Settings cleared and retained during a factory reset File Management There are several ways to reset the device configuration of a Digi Connect WAN Family product to the factory default settings: From the web interface using the Restore Factory Defaults operation This method is the best way to reset the configuration, because you can back up the settings using the Backup/Restore operation.
Page 158
Reset the factory settings on a Digi Connect WAN Family product from the web interface To reset the factory settings on the Digi Connect WAN Family device from the web interface: 1. Create a backup copy of the configuration using the Backup/Restore operation. See Backup/Restore for more information.
Page 159
Administration 1. Power off the Digi Connect WAN Family. 2. Locate the Reset button or pin on your Digi device. 3. Hold the Reset button down gently with a non-conductive, small diameter tool (such as wood or plastic) with a blunt end (NOT SHARP or the button could be damaged). Power on the device while holding the Reset button down.
Page 160
Digi Connect WAN Family web interface Administration 4. After 30 seconds, release the Reset button. At this point, on some models, the Status LED will blink a 1-5-1 pattern. Wait for the device to boot up. At this time, the configuration is returned to factory defaults.
Page 161
DSA key for SSH operations. This key-generation process can take as long as 40 minutes. Until the RSA or DSA key is generated, the Digi device will be unable to initiate or accept that type of encrypted connection. The Digi device reports itself as 100% busy, but since key generation occurs at a low priority, the device will still function normally.
Page 162
Digi device should stop sending data. IFC: Input Flow Control. Indicates that the Digi device is operating as if flow control is enabled for incoming data sent from the remote side of the serial-port connection. This signal is more of an indication that flow control is intended or expected rather than true state information.
Page 163
TCP Statistics Segments Received/Segments Sent: Number of received or sent segments. Active Opens: Number of active opens. In an active open, the Digi Connect WAN Family product initiates a connection request with a server. Passive Opens: Number of passive opens. In a passive open, the Digi Connect WAN Family listens for a connection request from a client.
Page 164
Started Ad Hoc Network: successfully created, started, and joined an ad-hoc network. Network Name: The name of the wireless network to which the Digi device is connected. Network ID: The ID of the wireless network to which the Digi device is connected and communicating.
Page 165
Mobile Connection Statistics Registration Status: The status of the modem's connection to the cellular network: Not Registered: Digi device is not currently searching a new operator to register to. Registered: Home network. Not Registered: Digi device is currently searching a new operator to register to.
Page 166
Digi Connect WAN Family web interface Administration Signal Strength (RSSI): The relative signal strength, displayed as signal strength LEDs. 0 LEDs: Unacceptable; Signal strength is not known or not detectable. 1 LED: Weak. 2 LEDs: Moderate. 3 LEDs: Good. 4: LEDs: Excellent.
Page 167
Digi Connect WAN Family web interface Administration IP Network Failover statistics The IP Network Failover page displays detailed IP Network Failover status and statistics that may aid in troubleshooting network communication problems. The IP Network Failover feature provides a dynamic method for selecting the default gateway. If IP Network Failover is properly configured and enabled, it overrides the Gateway Priority setting in the Advanced Network Settings.
Page 168
Digi Connect WAN Family web interface Administration Field Description Current Network Failover The current status of the Network Failover feature's management of Status the default gateway. Failover State: The current configured state of IP Network Failover (On or Off). Fallback to Non-Failover: The current configured state of the IP Network Failover option to fall back to Non-Failover (On or Off).
Page 169
Digi Connect WAN Family web interface Administration Field Description The number displayed for each status value indicates the priority of that status. Failover uses this value to select the interface for the default gateway. Status priority 1 is the most suitable for use, with lower priorities considered suitable if there are no interfaces at the highest priority.
Page 170
Digi Connect WAN Family web interface Administration Field Description Current Network Gateway This information reports the status of the non-failover management Status (Non-Failover) of the default gateway. If Network Failover is enabled (On) and can successfully configure a default gateway, failover always overrides the non-failover Gateway Priority configuration.
Page 171
To be provided. SureLink statistics Digi SureLink provides an “always-on” mobile network connection to ensure that a Digi device is in a state where it can connect to the network. The statistics displayed for Digi SureLink pertain to the periodic tests, known as Link Integrity Monitoring tests, that run over the established PPP connection to ensure that end-to-end communication is possible.
Page 172
Reboot Changes to some device settings require saving the changes and rebooting the Digi Connect WAN Family. Use the Reboot page to reboot the Digi Connect WAN Family. To reboot a Digi Connect WAN Family from the web interface: 1. Select Administration > Reboot.
Page 173
For example, you can disable access to all network services that are not required for running or interfacing with the Digi Connect WAN Family product for performance and security reasons. From the web interface, you can enable and disable network services on the Network Services Settings page for a Digi Connect WAN Family product.
Page 174
Digi Connect WAN Family command-line interface You can issue commands from the command line to configure, manage, and monitor Digi Connect WAN Family devices. For a description of the complete command set, see the Digi Connect® Family Command Reference. This section gives some basics for using the command line interface, as well as listing some commonly used commands by function.
Page 175
Digi Connect WAN Family command-line interface Configuration through the command line Configuration through the command line You can configure the Digi Connect WAN Family product by entering a series of command to set values through the command-line interface. Access the command-line interface...
Page 176
Digi Connect WAN Family command-line interface Management through the command line interface set snmp show Use the following commands to manage connections and sessions: close connect dhcp exit and quit ping reconnect rlogin send status telnet who and kill Use the following commands to configure the product:...
Page 177
Digi Connect WAN Family command-line interface Management through the command line interface set pppoutbound set profiles set realport set rtstoggle set serial set service set snmp set system set tcpserial set udpserial set user set wimax close Use the close command to close active sessions that were opened by connect, rlogin, and telnet commands.
Page 178
Management through the command line interface Active TCP sessions and active TCP listeners (display tcp). Current UDP listeners (display udp). Provisioning information currently in the Digi device device’s CDMA module (display provisioning). Uptime information (display uptime). Virtual Private Network (VPN) connection information (display vpn).
Page 179
Digi Connect WAN Family command-line interface Management through the command line interface Serial statistics. The info serial command displays the following information: Number of bytes received and transmitted Signal changes FIFO and buffer overruns Framing and parity errors Breaks detected TCP statistics.
Page 180
Use the set accesscontrol command to limit network access (IP filtering) to the Digi device. set alarm Use the set alarm command to display alarm settings, including conditions that trigger alarms, and how alarms are sent.
Page 181
Digi Connect WAN Family command-line interface Management through the command line interface set nat Use the set nat command to configure the router and Network Address Translation (NAT) settings. set network Use the set network command to configure the network options.
Page 182
Use the status command to display a list of sessions or outgoing connections made by the connect, rlogin, or telnet commands for a Digi device. Use the status command to determine which of the current sessions to close. show Use the show commands to display current settings on a Digi device.
Page 183
Administration Administration You can issue commands from the command-line interface to administer Digi Connect WAN Family products. The following table displays several administration tasks and the commands used to perform them. See the Digi Connect® Family Command Reference for more complete command descriptions.
Page 184
Remote Manager monitoring capabilities You can monitor and manage Digi Connect WAN Family products from Remote Manager. For example, you can: Display detailed state information and statistics about a device, such as device up time, amount of used and free memory, network settings, XBee network overview and detailed information on network nodes.
Page 185
When available, the reports post linked totals that you can use to drilled back to the original devices. Remote Manager is well-suited to managing Digi Connect WAN Family devices and the networks in which the devices reside. Advantages include the ability to view an entire network, and multiple networks, at once, and ease in viewing signal strength, link quality, and alarms.
Page 186
RFCs available on the IETF website (www.ietf.org). For enterprise MIBs, refer to the description fields in the MIB text. Supported RFCs and MIBs Digi Connect WAN Family supports the following SNMP-related Request for Comments (RFCs) and Management Information Bases (MIBs): Standard RFCs and MIBs RFC 1213—Management Information Base (MIB) II manages a TCP/IP network.
Page 187
DIGI SERIAL ALARM TRAPS MIB—A Digi enterprise MIB for sending alarms as SNMP traps. Digi Login Traps MIB—A Digi enterprise MIB that indicates when users attempt to sign into the device, and whether the attempt was successful.
Page 188
From the web interface, you can enable/disable traps at Configuration > System > SNMP > Enable Simple Network Management Protocol (SNMP) traps. You can configure alarms at Configuration > Alarms > Alarm Conditions > Alarm n > Alarm Destinations > Send SNMP trap to following destination when alarm occurs. Digi Connect WAN Family User Guide...
Page 189
Specifications and certifications This chapter provides hardware specifications, additional feature detail, and regulatory statements and certifications for Digi devices. Hardware specifications Wireless networking features Digi Connect WAN Family regulatory information and certifications Digi Connect WAN Family User Guide...
Page 190
Specifications and certifications Hardware specifications Hardware specifications This section provides the hardware specifications for all products in the Digi Connect WAN Family. Digi Connect WAN specifications Value Specification Environmental Ambient temperature -30 to +70C (-22 to 158F) for GSM models...
Page 191
Connector: 2.1mm x 5.5mm, locking barrel, center pin positive. Digi Connect WAN Family User Guide...
Page 192
4C to 45C. Above 45C, constant absolute humidity shall be maintained. Storage and transport -40 to 85C (-40 to 185F) temperature Altitude 2000 meters (6560 feet) Ethernet isolation 1500VAC min per IEEE802.3/ANSI X3.263 Digi Connect WAN Family User Guide...
Page 193
Dimensions Length 19.7 cm (7.75 in) Width 10.40 cm (4.11 in) Height 3.30 cm (1.30 in) Weight Without a module: 0.64 kg (1.40 lb) With a module: 0.68 kg (1.50 lb) Digi Connect WAN Family User Guide...
Page 194
Specifications and certifications Hardware specifications Digi Connect WAN 3G / Digi Connect WAN 4G specifications Specification Value Environmental Ambient temperature 0 to +40C (+32 to 104F) Relative humidity Relative humidity not to exceed 95% non- condensing over the temperature range from 4C to 45C.
Page 195
Wireless networking features The following table shows key wireless-networking features that you can configure in Wi-Fi-enabled Digi device. For more details and up-to-date information on support of these features, see the readme file for your Digi device. Digi Connect WAN Family User Guide...
Page 196
Network Key A shared key (ASCII or Hexadecimal) for WEP or WPA-PSK. Username Specify the user name to use for 802.1x -based authentication (WPA). Password Specify the password to use for 802.1x based authentication (WPA). Digi Connect WAN Family User Guide...
Page 197
A statistic that indicates the strength of the radio signal between 0 and 100 percent. Digi Connect WAN Family regulatory information and certifications This section documents Digi Connect WAN Family regulatory information and certifications. Digi Connect WAN Family User Guide...
Page 198
FCC ID. Modifications (FCC 15.21) Changes or modifications to this equipment not expressly approved by Digi may void the user’s authority to operate this equipment.
Page 199
Specifications and certifications Digi Connect WAN Family regulatory information and certifications Industry Canada (IC) certifications This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications.
Page 200
Specifications and certifications Digi Connect WAN Family regulatory information and certifications Digi Connect WAN 3G IA HSDPA EU Digi Connect WAN 3G IA Cell Ready Digi Connect WAN 3G IA HSDPA Generic Digi Connect WAN 3G IA HSDPA ATT Digi Connect WAN 3G IA EVDO VZW Warning: Explosion Hazard - Substitution of components may impair suitability for Class I, Division 2.
Page 201
AS/NZS CISPR 22:2006 VCCI V-3 2007.04 Europe The Digi Connect WAN Family is certified for use in several European countries. For information, visit www.digi.com/resources/certifications. If the Digi Connect WAN Family is incorporated into a product, the manufacturer must ensure compliance of the final product with articles 3.1a and 3.1b of the RE Directive (Radio Equipment Directive).
Page 202
The CE marking must be affixed visibly, legibly, and indelibly. Declaration of Conformity (DoC) Digi has issued Declarations of Conformity for the Digi Connect WAN Family concerning emissions, EMC, and safety. For more information, see www.digi.com/resources/certifications. Important note Digi customers assume full responsibility for learning and meeting the required guidelines for each country in their distribution market.
Page 203
Troubleshooting This section provides information on resources and processes available for troubleshooting your Digi device. Troubleshooting resources System status LEDs Digi Connect WAN Family User Guide...
Page 204
Troubleshooting resources Troubleshooting resources Use the troubleshooting information in this section to resolve your issue with your Digi device. If you cannot resolve the issue using the information in this section, there are several resources you can use to resolve your issue on the Digi Support site.
Page 205
Troubleshooting System status LEDs Digi Connect WAN Family LEDs and buttons Digi Connect WAN and Digi Connect WAN IA Digi Connect WAN Family User Guide...
Page 206
Troubleshooting System status LEDs Digi Connect WAN 3G and Digi Connect WAN 4G Digi Connect WAN Family LEDs and buttons Color and Light LED/button Pattern Activity Indicated Power LED Green Power on. Not illuminated Power off. Digi Connect WAN Family User Guide...
Page 207
Connection, the signal strength appears in bars and dBm. From the command line, type the display mobile command. Digi Connect WAN models have a feature where the signal strength LEDs change colors to indicate which type of cellular signal is detected.
Need help?
Do you have a question about the Connect WAN Series and is the answer not in the manual?
Questions and answers