Digi TransPort WR44v2 User's Guide

Digi TransPort User’s Guide 90001019_K 14th April 2013

10 MR4110, ER4110, HR4110, GR4110 & TR4110 ... 545 RS-232 (V.24) Serial Cable Wiring ...

100 If it is essential that the PPP interface has a specific IP address, this radio button should be selected and the IP address entered into the tex

101 Use interface x,y for the source IP address of IPsec packets If it is required to use another interface (i.e. not the interface currently being c

102 Entity Instance Parameter Values Equivalent Web Parameter a.b.c.d ppp n sectransDNS Valid IP address a.b.c.d Secondary DNS server a.b.c.d ppp

103 typically be used to reduce the connection retry rate when a lower priority PPP instance is connected. Wait s seconds after power-up before activ

104 Issue a warning event after n units The value in this text box is the amount of traffic which will cause a warning event to be generated in the e

105 Entity Instance Parameter Values Equivalent Web Parameter seconds ppp n timeout2 0 – 2147483648 Alternative idle timer for static routes s sec

106 DialServ Network Settings Configuration – Network > Interfaces > DialServ> DialServ Network Settings The DialServ card may be configured

107 Secondary DNS server The value in this text box specifies the IP address of the secondary DNS server to use if one is not automatically assigned

108 Entity Instance Parameter Values Equivalent Web Parameter ppp n name Up to 25 characters Description ppp n phonenum up to 25 digits Dial ou

109 Entity Instance Parameter Values Equivalent Web Parameter ppp n natip Valid IP address a.b.c.d NAT Source IP address a.b.c.d ppp n ipsec 0 =

11 Introduction Thank you for choosing a data communications product from Digi International. Digi products are extremely versatile and may be used

110 The value in this textbox specifies the minimum period that the PPP interface should remain available. This means that even if the link becomes i

111 Reset the data limit on the n day of the month The value in this text box defined the day of the month on which the data limit is reset to zero.

112 Entity Instance Parameter Values Equivalent Web Parameter transmitted after n units ppp n dlrstday 0 – 255 Reset the data limit on the n day o

113 Data Bits / Parity This drop-down selection box selects the required data format for the interface, 8 data bits, no parity being a very common co

114 Advanced Configuration – Network > Interfaces > Serial> Serial Port n> Advanced The configuration parameters in this section are chan

115 This parameter determines the character used in the escape sequence. The default is the “+” symbol (ASCII value 43, 0x2b). Changing this value ha

116 Entity Instance Parameter Values Equivalent Web Parameter 0 - 255 S3=n n/a n/a Where n = ASCII value Break Transmit Escape Character Profiles

117 Invert RX clock When checked, this checkbox will cause the router to invert the voltage level of the receive clock signal. Invert TX clock When c

118 Enable TCP rate adaption Check this checkbox to enable the use of rate adaptation when using a TCP connection rather than an ISDN line. When enab

119 Note: If either string contains spaces, the entire string must be enclosed within double quotation marks. When substituting a command, upper case

12 Typographical Conventions Throughout this manual certain typographical conventions are used as follows: Text Type Meaning Text like this ... is

120 bind ? Command line examples: bind pad 0 asy 0 binds PAD 0 to serial port 0. bind v120 0 asy 3 binds V.120 instance 0 to asynchronous serial por

121 Escape char c The parameter in this text entry box is the ASCII character used as the escape character which is by default “+”. Entering this esc

122 Digi devices use the patented RealPort COM/TTY port redirection for Microsoft Windows. RealPort software provides a virtual connection to serial

123 This configures the interval at which TCP Keep-Alives are sent over the RealPort connection. A value of 0 means that Keep-Alives are not sent. Se

124 Entity Instance Parameter Values Equivalent Web Parameter trace information in the analyser trace. 2: print the trace information out of the debu

125 Enable Multitx Checking this checkbox displays the MultiTX settings in the GUI and enables the MultiTX function on the router. Serial Port This

126 When this parameter is enabled, the text in the ‘Match String’ field will be removed before the data is forwarded to the remote host. Remote ho

127 Since data is transferred across IP networks in synchronous format, the router supports asynchronous to synchronous PPP conversion. This allows a

128 ASY Port This is the physical ASY port for the external modem. W-WAN mode Checking the check box enables W-WAN mode Initialisation string n Thes

129 Listening init string This is the listening initialisation string parameter for external modems. Listening init interval (secs) The listening in

13 Warnings Radio Equipment - Canadian Warning Statements This device complies with Industry Canada licence-exempt RSS standard(s). Operation is sub

130 The value in this textbox defines the Asynchronous Control Character Map (ACCM). The default value of 0x00000000 should work in most cases. Chang

131 When “Always On” mode is enabled, these two textboxes specify the data rate and duration for which the data rate must be sustained before the B-c

132 This section contains those parameters which may need to be adjusted when setting up a PPP connection but in general can be left at their default

133 The following three radio buttons control how the IP address for the router is assigned. Allow the remote device to assign a local IP address to

134 Close the PPP connection after s seconds The value in this textbox specifies the maximum time that the link will remain active in any one session

135 is NOT checked, as incorrect firewall rules will prevent a connection from passing network traffic. If the connection works when the firewall is

136 Entity Instance Parameter Values Equivalent Web Parameter ppp n cingnb up to 25 digits Only allow numbers ending with n ppp n msn up to 9 d

137 Detach W-WAN if the link fails When checked, this checkbox will cause the router to issue the command to detach the mobile telephone module from

138 These two radio buttons enable the “always-on” functionality and additionally the facility to return to the in-service state after a disconnect e

139 Disconnect the link after n failed echo requests The value in this text box set the number of consecutive failed echo requests that are allowed b

14 End Product Labeling The WR44v2 Module is labeled with its own IC Certification Number. If the IC Certification Number is not visible when the mo

140 secondary host is tried. This is to ensure that should the primary host become unavailable for any reason and stops responding to the ICMP echo r

141 had been transferred. This event could then be used to trigger an email alert, SNMP trap or SMS alert message. Stop data from being transmitted a

142 This option causes the interface to become activated but rather than using the idle timer associated with the interface, specify the idle timeout

143 Entity Instance Parameter Values Equivalent Web Parameter ppp n settledly 0 - 200 Allow this PPP interface to settle for s seconds after the c

144 Entity Instance Parameter Values Equivalent Web Parameter ppp n hbipadd Valid interface number 0 - 2147483648 Use interface x,y for the source

145 Entity Instance Parameter Values Equivalent Web Parameter ppp n dlrstday 0 – 255 Reset the data limit on the n day of the month ppp n sscnt

146 Entity Instance Parameter Values Equivalent Web Parameter s seconds ppp n deflate 0,1 0 = Off 1 = On Attempt to negotiate DEFLATE compression o

147 When checked, this checkbox causes the router to authenticate itself with the remote device using PAP. If this parameter is set, the connection w

148 Selecting enabled from the drop-down menu will allow the router to authenticate logins using version 2 of Microsoft’s proprietary MS-CHAP algorit

149 Entity Instance Parameter Values Equivalent Web Parameter ppp n l_bacp OFF, ON Request BACP ppp n l_callb OFF, ON Request callback ppp n

15 Attribute Property VSWR 1.92 max Return Loss -10dB max Gain 1.8 dBi Polarization Linear Radiation Pattern Near omni-directional in the horizont

150 Below this column heading, is a list of ten queue instances. Each instance is associated with the profile and priority on the same row. Profile n

151 Sub-Configs Configuration – Network > Interfaces > Advanced> PPP n > Sub-Configs PPP sub-configs can be used as an alternative to usi

152 • Logical Ethernet Interfaces • DHCP Options • Static Lease Reservations DHCP Server for Ethernet n Configuration – Network > DHCP Server

153 When checked, this checkbox causes the router to only send DHCP offers to Wi-Fi clients. This is useful if the router is being used as an access

154 Entity Instance Parameter Values Equivalent Web Parameter dhcp n fwdip2 Valid IP address a.b.c.d Forward DHCP requests to a.b.c.d Advanced Conf

155 FTP Root Dir (for WYSE Terminals) The value in this text box specifies the root directory for FTP transfers. This is also a custom option for use

156 Entity Instance Parameter Values Equivalent Web Parameter i4 = 4 byte value ipv4 = IPv4 address string = string hex = hexadecimal dhcpopt n val

157 The web page described here collects together a number of services that are provided by the router into one section to enable the user to quickly

158 server. If security is not such an issue, selecting this option allows the simpler and slightly more convenient web server to be used. Enable Sec

159 When using this feature, it is recommended that the last DNS server selection hostname pattern is set to “*” to match all other DNS lookups. This

16 Obtaining Technical Support Technical support for your Digi Transport router is readily available using the following methods. Self help Visit the

160 “Dynamic DNS” is supported in accordance with RFC2136 and RFC2485. This allows units to update specified DNS servers with their IP addresses when

161 Confirm DNS Server Password The password should be entered into this text box to confirm it. Local time offset from GMT Auto detect The two radio

162 Entity Instance Parameter Values Equivalent Web Parameter dnsupd 0 tzone –2147483648 -2147483647 (hours) Local time offset from GMT n dnsupd 0

163 The value selected from this drop-down list is used to identify the dynamic DNS system containing the hostnames to be updated. The available opti

164 Entity Instance Parameter Values Equivalent Web Parameter dyndns 0 ifent Blank,ETH,PPP When default route/interface x,y becomes active, send D

165 Entity Instance Parameter Values Equivalent Web Parameter dyndns 0 debug OFF,ON Enable debug IP Routing / Forwarding - An introduction to Tra

166 If a static route is “pointing” at an Ethernet interface then optionally a gateway IP address can be added. If a gateway IP address is not added

167 If multiple routes match the destination and have the same prefix length, the index number of the routes in the routing table is used to determin

168 The value in this text box defines the maximum value for the routing metric. The default value is 16. Route directed IP broadcasts When checked,

169 Entity Instance Parameter Values Equivalent Web Parameter ip 0 routeup_dly 0 - 2147483647 When an “Always On” route becomes “In Service”, wait

17 Email Email support is available from 2 locations: UK [email protected] USA [email protected] Remember to attach the debug.txt zip file to

170 Each route may be assigned a “connected metric” and a “disconnected metric”. The connected metric parameter is used to specify the metric for a r

171 Make PPP n interface use the alternative idle timeout when this route becomes available When checked, this check box, in conjunction with the PPP

172 Keep this route in service for s seconds after OOS state is cleared When this checkbox is checked, the following text box is enabled (i.e. it is

173 Entity Instance Parameter Values Equivalent Web Parameter waiting for the interface to connect route n deact_ent Blank,PPP When this route bec

174 Entity Instance Parameter Values Equivalent Web Parameter def_route n ll_ent Blank,PPP,ETH,TUN Interface x,y def_route n ll_add 0 – 214748

175 As per equivalent parameter in Routes n. Assign this route to recovery group n As per equivalent parameter in Routes n. Related CLI Commands En

176 Entity Instance Parameter Values Equivalent Web Parameter def_route n deact_ent2 Blank,PPP When this route becomes available, deactivate the f

177 Entity Instance Parameter Values Equivalent Web Parameter rip n enable on,off Enable RIP rip n interval 0 - 2147483647 Send RIP advertisem

178 Re-enter the new key into this text box to allow the router to check that the two are identical. Key ID (MD5 only) The value in this text box is

179 Use RIP: Select from the values ‘v1’, ‘v2’ and ‘v1 Compatible’ in the dropdown list. When RIP version is set to ‘V1’ or ‘V2’, the unit will trans

18 Using the Web Interface To access the built-in web pages using a web browser (e.g. Internet Explorer), there are two options. To access the LAN po

180 Use Triggered RIP on this interface: Enable triggered RIP (RFC2091). When triggered RIP is enabled, RIP timers are disabled. Include this interfa

181 When this button is clicked, the router attempts to load the file specified in the file selection list box into the edit window below the button.

182 Configuration – Network > IP Routing / Forwarding > BGP The Border Gateway Protocol (BGP) routing protocol is supported by TransPort router

183 IP Port Forwarding / Static NAT Mappings Configuration – Network > IP Routing / Forwarding > IP Routing /Static NAT Mappings The router su

184 To set the IP address for entry 0 in the table to 10.1.2.10 enter the command: nat 0 IPaddr 10.1.2.10 Multicast Routes Configuration – Network &g

185 Virtual Private Networking (VPN) Configuration – Network > Virtual Private Network (VPN) The Configuration – Network > VPN menu has the fo

186

187 The first stage in establishing a secure link between two endpoints on an IP network is for those two points to securely exchange a little info

188 Once this initial association exists the two devices can “talk” securely about and exchange information on what kind of security protocols they w

189 Use this IP mask for the remote LAN subnet. The mask sets the range of IP addresses that will be allowed to use the IPsec tunnel. Remote Subnet I

19 Using the Command Line Interface Using a Web browser to modify text box or table values in the configuration pages is the simplest way to configur

190 This parameter can be used to override the private key filename in the IKE configuration. It is only used when RSA Signatures (Certificates) are

191 Bring this tunnel down if it is idle for h hrs m mins s secs This parameter is used when the IPsec tunnel is configured to come up on demand and

192 Entity Instance Parameter Values Equivalent Web Parameter eroute n espenc off, null, des, 3des, aes Use enc encryption on this tunnel eroute n

193 The alternative IP mask to negotiate. Virtual IP Request Used when the remote peer is a Cisco device using MODECFG to assign a specific IP addres

194 Go out of service after n consecutive auto-negotiation failures The router will take the IPsec tunnel out of service if the auto-negotiation fail

195 IP packets with ToS values n must use this tunnel Packets with matching ToS fields will only be tunnelled through this IPsec tunnel and no other

196 Entity Instance Parameter Values Equivalent Web Parameter list of Integers IPsec tunnels n are up eroute n requireno Integer Inhibit this IPse

197 Example To setup multiple users in this way, first set up the Our ID parameter on the host unit to a suitable name, e.g. “Host1”. Then set the Pe

198 IPsec Default Action Configuration – Network > Virtual Private Network (VPN)>IPsec> IPsec Default Action Like a normal IP routing set-up

199 Basic Concept The router with the IPsec Group/MySQL configuration will be the VPN Concentrator. The remote sites will normally not require an IPs

2 Contents Introduction ... 11 Typographical Co

20 If you have local command echo enabled on your terminal, you may see the AT command displayed as “AATT”. If this happens you may use the “ATE0” co

200 VPN Concentrator acting as a responder to a session initiated from the remote site When a remote site needs to create an IPsec SA with the VPN Co

201 All other fields should be configured as usual. It is possible to set up other IPsec groups linked with other IPsec tunnels. This would be done i

202 The name of the table when the remote site information is stored. Remote subnet IP The name of the field in the table where the ‘remip’ data is s

203 Dead Peer Detection Configuration – Network > Virtual Private Network (VPN)>IPsec> Dead Peer Detection When Dead Peer Detection (DPD) is

204 IKE Configuration - Network > Virtual Private Networking (VPN) > IPsec > IKE The Configuration - Network > Virtual Private Networki

205 Entity Instance Parameter Values Equivalent Web Parameter ike 0 debug on, off Forward debug to port IKE n Configuration - Network > Virtua

206 certificates. This is because the ID of the remote unit (it’s public key) can be retrieved from the certificate file. MODP Group for Phase 1 Set

207 Stop IKE negotiation after n retransmissions The maximum number of times that IKE will retransmit a negotiation frame as part of the exchange bef

208 Entity Instance Parameter Values Equivalent Web Parameter ike n dpd on, off Enable Dead Peer Detection ike n natt on, off Enable NAT-Trav

209 Entity Instance Parameter Values Equivalent Web Parameter ike 0 rencalgs des, 3des, aes Multiple algorithms can specified in a comma separated

21 Take note that because of the space between ‘Local’ and ‘LAN’, the wording is enclosed in double quotes. To set an IP address on 192.168.1.1 on Et

210 The name of a X.509 certificate file holding the router’s private part of the public/private key pair used in certificate exchanges. See ‘X.509 C

211 If the unit receives packets from a local interface that need to be routed through the tunnel, it performs address translation so that the source

212 Encryption Defines the encryption algorithm used. The options are: • None • DES • 3DES • AES (128 bit keys) • AES (192 bit keys) • AES (25

213 Entity Instance Parameter Values Equivalent Web Parameter only. ike2 n rekeyltime 1 - 28800 Rekey after h hrs m mins s secs This CLI value is

214 Entity Instance Parameter Values Equivalent Web Parameter ike2 n privrsakey Filename RSA private key file IKEv2 Responder Configuration - Ne

215 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ike2 0 rencalgs des, 3des, aes Encryption ike2 0 renckeybits

216 Entity Instance Parameter Values Equivalent Web Parameter ike2 0 natt on, off Enable NAT-Traversal ike2 0 natkaint Integer NAT traversal k

217 When checked, this checkbox causes the router to NOT actively attempt to establish an L2TP tunnel. In this mode it will only use L2TP if the remo

218 Entity Instance Parameter Values Equivalent Web Parameter a.b.c.d l2tp n aot OFF,ON Bring this tunnel up All the time/On demand l2tp n nocal

219 Sub-address The value in this text box specifies the ISDN sub-address filter to use in conjunction with the ISDN answering function. When answeri

22 The “ATV0” command can be used to select numeric codes if required. The results from the text based commands can be numeric or verbose. A full lis

220 Accept incoming PPTP connections When checked, this checkbox allow the router to act as a PPTP server and accept incoming VPN connections. Enable

221 OpenVPN can be used for connecting to the router for secure management as well as access to services on the LAN side of the TransPort router, suc

222 Link socket interface x,y If configured, OpenVPN sockets will only be allowed to/from this interface and the routing table will be ignored. When

223 This allows the OpenVPN instance to use an extra level of security by having a TLS password configured. Use file for TLS Auth Key Select this whe

224 OpenVPN RX ping timeout (seconds) The number of seconds, after which no OpenVPN ping has been received, the VPN will be marked as down. Include I

225 Entity Instance Parameter Values Equivalent Web Parameter ovpn n mtu 0 - 2147483647 MTU ovpn n metric 0 - 2147483647 Metric ovpn n do_n

226 Entity Instance Parameter Values Equivalent Web Parameter ovpn n puship3 Valid subnet a.b.c.d Push IP address #3 a.b.c.d ovpn n pushmask3 Val

227 Cipher values Digest values AES-128-CBC ssl3-sha1 AES192 ssl3-md5 AES-192-CBC SHA1 DES-EDE3-CBC MD2 AES-256-CBC RSA-MD2 AES-256 md5WithRSAE

228 digest algorithm and SSLv3 represents all SSL v3 algorithms. Lists of cipher suites can be combined in a single cipher string using the “+” chara

229 • SSLv3 only • SSLv2 only. Cipher List The list of ciphers is the same as described above for the client-side configuration table. Related CLI

23 Digi application commands (referred to just as text commands or CLI commands throughout the remainder of this guide), can be entered in upper or l

230 DEFLATE compression is also supported. If this is enabled and negotiated, SSH packets are first compressed before being encrypted and delivered t

231 When checked, this checkbox enables the router to accept traffic on ports other than 23. This functionality is for use with SSH client applicatio

232 The following four configuration options allocate preferences to the authentication methods that should be used. As above, a value of zero disabl

233 Entity Instance Parameter Values Equivalent Web Parameter 0 = Disabled ssh 0 - 7 encaes128cbc 0 - 2147483647 AES (128 bits) ssh 0 - 7 encae

234 Configuration using the command line interface Generate the SSH V1 private key using the genkey command as follows: genkey <keybits> <fi

235 The value in the left-hand text box is the name of the local user and should be one of the usernames assigned in the Configuration – Security >

236 The configuration options following this checkbox are normally disabled (they should appear “greyed out” in the browser). When this checkbox is c

237 Entity Instance Parameter Values Equivalent Web Parameter characters frelay n smtp_subject Up to 40 characters Subject Advanced Configuration

238 Telnet When checked, this checkbox excludes Telnet from passthrough. Telnet over SSL When checked, this checkbox excludes SSL from passthrough. S

239 Entity Instance Parameter Values Equivalent Web Parameter passthru 0 ports Comma-separated list of ports Other Ports passthru 0 protos Comma-

24 The Reboot Command The reboot command is used to reboot the unit after altering the configuration. It has three modes of operation: reboot - will

240 Entity Instance Parameter Values Equivalent Web Parameter udpecho n dstip Valid hostname Send a UDP packet to IP address a.b.c.d port n every

241 QoS is a complex subject and can have a significant impact on the performance of the router. For detailed background information on QoS, refer to

242 Entity Instance Parameter Values Equivalent Web Parameter Default 4 Example command line commands. To display a DSCP mapping from the command lin

243 WRED Maximum Threshold The value in this text box specifies the maximum queue length threshold for using the WRED algorithm to drop packets. Once

244 qprof <instance> <parameter> <value> To set the maximum throughput for queue profile 5 to 10kbps, enter the following command:

245 Time The value in this text box is the transition time. This is specified in 24-hour format with a colon separator between the hours and minutes.

246 tband 0 days 0 mf tband 0 time0 9 tband 0 state0 on tband 0 days1 mf tband 0 time1 5:30 tband 0 state1 off Advanced Network Settings Configuratio

247 Entity Instance Parameter Values Equivalent Web Parameter bytes sockopt n sslver 0 – 3 0 = Auto 1 = TLSv1 2 = SSLv2 3 = SSLv3 Default SSL versi

248 Entity Instance Parameter Values Equivalent Web Parameter sockopt n sock_connto 0 - 2147483648 Connect Timeout s seconds sockopt n sock_inact

249 Backup IP Addresses This page contains a table that is used to specify alternative IP addresses to use when the router fails in an attempt to ope

25 Configuring your TransPort router This section describes the various configuration parameters for the unit and how to set or change them using the

250 that is unavailable, the router will try its backup IP address and so on. To make this example more concrete, say the original IP address is 192.

251 SNA uses Synchronous Data Link Control (SDLC) which is an unbalanced mode in which there is one master station and 1 or more secondary stations.

252 The SNAIP parameter "Priority" is used to select the SNAIP instance to use when more than one is available; the highest number being gi

253 Enable this parameter if this unit is to be the Master in an unbalanced link, or “Off” if the unit is to be a secondary station. Polling Response

254 backup hang-up timer thus saving ISDN call charges. When LAPB is being used on a synchronous port, this parameter should normally be set to 0. SS

255 Include MAC Exclusivity Capability On or Off. Set this parameter to “On” in order to include the MAC exclusivity value in the capabilities exch

256 Entity Instance Parameter Values Equivalent Web Parameter snaip x master 1 = enabled, 0 = disabled Router to be Master on an unbalanced link s

257 Entity Instance Parameter Values Equivalent Web Parameter snaip x iunsolresp 1 = enabled, 0 = disabled Ignore unsolicited response frames sn

258 ISDN B channel if two calls are attempted to the same ISDN number at the same time. (All services that the POS terminals may dial must support mu

259 Default X.25 Packet Size This parameter specifies the default X.25 packet size to be used for TPAD transactions. Use NUA This parameter specifie

26 Logging In To configure the unit via the Web interface, either establish a DUN connection to it and then open your web browser and enter 1.2.3.4 f

260 Allow consecutive transactions Multiple transactions are allowed per X.25 call, but not until a response has been received from the host. Allow c

261 This parameter specifies the terminal ID to associate with this TPAD instance when answering an incoming APACS 50 polling call. Use merchant Numb

262 Ticking this check box will cause the unit to retransmit the APACS 30 string to the terminal if an error is detected. (e.g. no ACK received from

263 When this parameter is enabled the TPAD instance will look at responses coming from the host and remove any trailing space characters from the en

264 Entity Instance Parameter Values Equivalent Web Parameter tpad n ipmode 0=XOT, 1=raw TCP Use TPAD over interface tpad n bakl2iface lap

265 Entity Instance Parameter Values Equivalent Web Parameter milliseconds tpad n trig_str text Create an event when reply from X.25 host mat

266 Entity Instance Parameter Values Equivalent Web Parameter tpad n tenqdel 0 - 5000 Delay sending ENQ characters to TPAD terminal for x milli

267 Entity Instance Parameter Values Equivalent Web Parameter use PANS context x X.25 Configuration – Network > Legacy Protocol > X.25 The C

268 By default it is “Off”, in which case the length of the header is NOT included in the value. For example, say we had one byte of data of value 67

269 N400 Counter x This is the standard LAPB retry counter. The default value is 3 and it should not normally be necessary to change this. RR Timer

27 Clicking on the Click to load Applet graphics! button will display a representation of the front panel of your unit that will be updated every few

270 cause the unit to answer incoming ISDN calls only where the trailing digits of the sub address called match the Sub-address value. For example, s

271 Entity Instance Parameter Values Equivalent Web Parameter lapb n l1iface port, isdn (use “isdn” for ISDN) Use: ISDN lapb n dtemode DTE/DCE mo

272 When a TPAD call is taking place the attached terminal sometimes only specifies an “NUI” (Network User ID) to call. If the X.25 network requires

273 Protocol Identifier IP address IP address IP Port IP port number Interface Primary interface Backup Interface Backup interface Note that this tab

274 Parameter Value Interface Type 13 LAPB 2 PVC 14 VXN 15 SSL Calls Macros Configuration – Network > Legacy Protocol > X.25> Calls Macr

275 This page contains a table that allows you to enter a series of IP Port numbers and X.25 Call strings as shown below. It is used to configure the

276 RFC 1086 specifies a mode of operation in which the IP socket answers and then with a simple protocol in the socket identifies the X.25 address a

277 Entity Instance Parameter Values Equivalent Web Parameter 2=8583 Ascii 4 byte PADS n Configuration – Network > Legacy Protocol > X.25>

278 LCN The unit supports up to eight logical X.25 channels. In practice, the operational limit is determined by the particular service to which you

279 This field indicates the destination host that will answer the XOT, TCP, SSL, UDP call if a connection via the primary interface has failed and t

28 Configuring and Testing W-WAN Models Refer to the Configuration - Network > Interfaces > Mobile section of this guide to configure your rout

280 This parameter specifies the length of time in seconds after which the PAD will terminate an X.25 call if there has been no data transmission. Di

281 Entity Instance Parameter Values Equivalent Web Parameter pad n iphdr 0=Off, 1=On, 2=8583 Ascii 4 byte IP length header pad n prompt text

282 stoppads 1 and to re-enable PAD 1: gopads 1 PADs 0-9 > PAD 0 > Configuration – Network > Legacy Protocol > X.25> PADS 0 – 9> P

283 3 Data Forwarding Characters This parameter defines which characters cause data to be assembled into a packet and forwarded to the network. Opti

284 Option Description 4 PAD prompt enabled, signals disabled 5 PAD prompt enabled, signals disabled 7 Action on Break (from DTE) This parameter de

285 Controls the automatic generation of a [CR],[LF] sequence after a certain line width has been reached. Option Description 0 No line folding 1 -

286 Enables (1) or disables (0) local editing of data input fields by the PAD before data is sent. The three basic editing functions provided are cha

287 Option Description 0 No parity generation or checking 1 Parity checking on 2 Parity generation on 3 Parity checking and generation on 22 Pag

288 X.25 PVCs Configuration – Network > Legacy Protocol > X.25> X.25 PVCs A Permanent Virtual Circuit (PVC) provides the X.25 equivalent of

289 This parameter may be set to the name of the interface to which a PVC initiator is connected, e.g. Serial 2. Related CLI Commands Entity Instance

29 Signal Strength Indicators On units equipped with W-WAN modules, there are three LEDs on the front panel that will indicate the strength of the si

290 MODBUS Gateway Configuration – Network > Legacy Protocol > MODBUS Gateway Digi TransPort routers support conversion from MODBUS serial to M

291 Duplex Mode Sets the duplex mode to half or full. Full would be for 4-wire installations otherwise half is required. Operation mode This paramet

292 Entity Instance Parameter Values Equivalent Web Parameter modbus n rawmode1 1 = enabled, 0 = disabled Raw Mode (row 2) modbus n bcasts_on

293 Protocol Switch Configuration – Network > Protocol Switch The Protocol Switch software available on some models provides X.25 call switching b

294 When this optional feature is included, the unit may be configured to pass X.25 calls or data received in a TCP connection to another protocol or

295 • IP Sockets to Protocol Switch • NUA to Interface Mappings • NUA Mappings

296

297 Parameters TCP or XoT This parameter controls the switching of incoming X.25 calls received via TCP or XOT. Select the interface t

298 LAPB X backup to interface If any of the Switch from parameters has been set to LAPB X, and LAPB X is unavailable, this parameter may be used to

299 Enable ENQ Char: When this parameter is set to “On”, when an incoming call on LAPB is switched and the unit connects to it, the X.25 switch s

3 DHCP Server ... 151 DHCP Server for Ethernet n ..

30 Wizards This page contains wizards that simplify common configuration tasks. These wizards will change the minimum number of parameters to comple

300 However, this means that if you are routing traffic from the local subnet across a VPN tunnel you would have to set up two Eroutes; one to match

301 Entity Instance Parameter Values Equivalent Web Parameter X25sw 0 swfrlapb2 0-10,13-15 (see below) Switch from LAPB 2 to X25sw 0 swfrlapb2pv

302 Entity Instance Parameter Values Equivalent Web Parameter X25sw 0 lapb2ppar 7,8,9,10 7=128 8=256 9=512 10=1024 LAPB 2 Default Packet Size X25s

303 Parameter value Interface type 10 UDP stream 12 LAPB 2 13 LAPB 2 PVC 14 VXN 15 SSL CUD Mappings Configuration - Network > Protocol Switch

304 IP Sockets to Protocol Switch Configuration - Network > Protocol Switch > IP Sockets to Protocol Switch This page contains a table that all

305 fails and so may be useful in backup scenarios. In addition it will ensure that no data is sent into a “black hole”. (When this setting is not en

306 Entity Instance Parameter Values Equivalent Web Parameter ipx25 n iphdr 0=Off 1=On 2=8583 Ascii 4 byte IP length header NUA to Interface Mappin

307 Entity Instance Parameter Values Equivalent Web Parameter (see table below) nuaip 0-255 buswto 0-10, 12-15 (see table below) Backup Interface

308 This page displays a table with four columns in which you can specify the NUA In values, corresponding NUA Out values, to which interfaces the ma

309 Alarms Configuration Configuration -Alarms The Configuration -Alarms page has the following menu options: Event Settings Event Logcodes SMTP Acco

31 Configuration Page Configuration page offers the following options: • Network Configuration • Alarms Configuration • Systems Configuration • R

310 Entity Instance Parameter Values Equivalent Web Parameter event n ev_filter Comma separated list of event numbers Do not log the following even

311 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter event n etrig 0 – 9 0 disables sending alerts Send an email noti

312 Entity Instance Parameter Values Equivalent Web Parameter event n trap_max 0 – 255 Send a maximum of n SNMP traps per day SMS Messages Configu

313 Entity Instance Parameter Values Equivalent Web Parameter file stored in the compressed .web file) event n sms_max 0 – 255 Send a maximum of n

314 Send Syslog messages When this checkbox is checked, the following options are displayed: Send a Syslog message when the event priority is at leas

315 Interface x,y If the routing table is not to be used, an interface type (PPP or Ethernet) may be selected from the drop-down selection box and th

316 This is not a configurable parameter; it is simply the event number, displayed for information only. This is the number to refer to when filteri

317 This drop-down selection box contains a list of the system entities. All Selecting this radio button causes all of the system entities Instance S

318 Configuring Reasons The page invoked by selecting a reason link in the event logcodes table is very similar to the Configuring Events page but wi

319 This parameter specifies the text to be used as the “MAIL FROM” parameter which forms part of the protocol when connecting to the email server. M

32 Network Configuration The Configuration - Network page has the following options: Interfaces Configuration – Network> Interfaces The Configu

320 Entity Instance Parameter Values Equivalent Web Parameter smtp n mail_from Free text field Display “Email From” as smtp n att_lim 0 – 6553

321 Systems Configuration The Configuration – Systems menu has the following sub-menu options: • Device Identity • Date and Time • General Device

322 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter snmp n Name Free text field Description snmp n Contact Free

323 Autoset Date and Time Do not auto-set the system time This is the system default and this radio button will appear filled in when the unit is ne

324 Hour Use this drop-down selection box to select the desired hour at which to switch back to GMT. Related CLI Commands Entity Instance Parameter V

325 Note: If SNTP is used the accuracy of around 1 second is achieved. If NTP is used 200 microsecond accuracy can be achieved. Not all models supp

326 Entity Instance Parameter Values Equivalent Web Parameter y = interface number ntp n server Valid IP address or hostname, e.g. ntp1@timeserver.

327 Entity Instance Parameter Values Equivalent Web Parameter ntp n maxpoll 3 - 14 Poll Interval s1, s2 See ‘minpoll’ for values ntp n burstint3

328 <Command> This parameter is the CLI command to run on start-up. In the above example, this field would be set to the string “bas sample.bas

329 Entity Instance Parameter Values Equivalent Web Parameter cmd n tremto 0 – 86400 seconds Automatically log user out if idle for h hrs m mins s

33 On units with only one Ethernet port, if more than one Ethernet instance exist these are treated as logical Ethernet ports. These instances can be

330 that the router should monitor for the FTP “PORT” and ”PASV” commands. These commands contain information relating to IP addresses and Ports whic

331 Entity Instance Parameter Values Equivalent Web Parameter 2 = W-WAN signal strength

332 Remote Management Configuration The Configuration – Remote Management page has the following menu options: • Device Cloud • SNMP Device Cloud C

333 Entity Instance Parameter Values Equivalent Web Parameter 1 = On cloud n server Valid IP address e.g. 1.2.3.4 or domain name e.g. login.etherio

334 Ethernet Settings Receive Interval s seconds This is the time between keep-alive packets that the router should wait before considering that the

335 The second MIB is the “Monitor MIB” which is a standard MIB that gives access to various Digi TransPort proprietary objects. The OIDs in this MIB

336 Entity Instance Parameter Values Equivalent Web Parameter 1 = On snmp n port 0 - 65535 Use UDP Port Default = 161 snmp n engineid String S

337 Entity Instance Parameter Values Equivalent Web Parameter snmpuser n name user_dave Username snmpuser n auth Off,MD5,SHA1 Authenticatio

338 SNMP specifies several generic traps (Cold Start, Warm Start, Link Down, Link Up etc). When this checkbox is ticked, generic traps are generated.

339 The maximum number of times an Inform Request message will be retransmitted. If no acknowledgement is received after the maximum number of retran

34 If the IP address, Mask, Gateway, DNS server or Secondary DNS server parameters are specified manually, but the option to use a DHCP server is lat

340 Security Configuration The Configuration – Security page has the following menu options: • System • Users • Firewall • RADIUS • TACACS+ •

341 Low Allows user to access low level commands which tend to be status and statistics commands. Read Only Read only access of the configuration. N

342 configured on a PPP interface. When this parameter is configured, the IP address negotiated on the PPP link will be this one, not an address fro

343 The rules governing the operation of the firewall are contained in a pseudo-file called “fw.txt”. This file can be created either by using the co

344 Check the checkbox next to the interface(s) that the firewall should operate on in order to enable the firewall for that interface. Related CLI C

345 Other protocols s seconds If a stateful inspection rule is created from a packet type other than TCP, UDP or ICMP, a rule timeout should be creat

346 The RADIUS client may be configured with up to two Network Access Servers (NAS). It may also have local authentication turned on or off depending

347 Confirm Password Type the above password into this text box so that the router may determine if the two are identical. Secondary Authorization Se

348 The value in this text box is the password that is supplied by the secondary accounting NAS administrator and is used in conjunction with the sec

349 If required an alternative source interface and instance may be selected here. Select the required interface from the drop-down list and enter th

35 If the router is running in Hub mode, the following will be displayed, with an option to switch to Port Isolate mode. Ethernet Hub group On units

350 Retransmit the request after s seconds The value in this text box specifies the interval between retransmissions of RADIUS packets. Stop the nego

351 When the user has been authenticated and access has been authorised, the login is allowed. If the connection is via telnet or SSH a welcome messa

352 Enable local authentication if there is no response from the server(s) When checked, this checkbox will allow local authentication if TACACS+ aut

353 If required, due to the TACACS+ server being accessed via a VPN tunnel, an alternative source interface and instance may be selected here. Select

354 Entity Instance Parameter Values Equivalent Web Parameter cfilter n cmd Valid command line command Command cmd n cfilton 0,1 0 = Off 1 = On n

355 Entity Instance Parameter Values Equivalent Web Parameter rejlst n ans OFF,ON Mode Answer,Reject rejlst n code 0 – 255 code Command line

356 Position Configuration The Configuration – Position page has GPS sub-menu item. GPS Configuration – Position > GPS One of the options availab

357 All other messages The above messages are the most common and useful NMEA sentences. Many GPS modules support additional messages. Checking this

358 Entity Instance Parameter Values Equivalent Web Parameter connected to gps 0 gpson On, Off Enable local monitoring gps 0 init_str Valid com

359 Entity Instance Parameter Values Equivalent Web Parameter gps 0 udpmode2 0,1 0 = TCP 1 = UDP Use TCP/UDP gps 0 IPprefix2 Free text Prefix t

36 On models with multiple Ethernet interfaces, this parameter may be used to specify a maximum data rate in kbps that the unit will transmit on this

360 Applications Page The Configuration – Application page has the following menu options: • Basic • Python Basic Applications Configuration – App

361 Entity Instance Parameter Values Equivalent Web Parameter ScriptBasic script Examples To set User parameter 1 to IPv4 address 10.1.1.1, enter the

362 The following additional command line informational / debugging commands may be helpful when developing Python scripts. “pycfg files” which displ

363 Management Page The Management page has the following webpage options: • Network Configuration • Connections • Position • Analyser • Top T

364 Network Status Management The Management-Network Status webpage has the following menu options: • Interfaces • IP Statistics • IP Routing Tab

365 MAC Address The Ethernet interface’s MAC address. Speed The current speed of the Ethernet interface. Duplex The current duplex mode of the Ethern

366 The number of Ethernet packets that have been received but had an invalid FCS. Tx Deferred The Ethernet packets successfully transmitted after be

367 Packets Received The number of packets that have been received on the Wi-Fi interface. Packets Sent The number of packets that have been sent on

368 Access Point The name and MAC address of the Wi-Fi Access Point that the router is connected to. Wi-Fi Node The Wi-Fi node that has been used to

369 Mobile Management-Network Status> Interfaces> Mobile The Mobile status page displays the current mobile connection, network and module info

37 Enable IPsec on this interface This parameter is used to enable or disable IPSec security features for this Ethernet interface. Use interface x,y

370 The GSM registration status of the mobile module with respect to the GSM network. It may be one of the following • Not Registered, not searching

371 Model The model of the mobile module. IMEI The International Mobile Equipment Identification (IMEI) of the mobile module. ESN The Electronic Se

372 The signal strength in dBm being received by the mobile module from EVDO networks. Manufacturer The manufacturer of the mobile module. Model The

373 Command Option Equivalent Web Parameter at\mibclr=ppp.n.stats n Clears the current interface statistics DSL Management-Network Status> Inter

374 • ETSI • G.dmt • G.lite • ADSL2 • ADSL2+ Remote Vendor ID The remote vendor ID of the DSLAM that the DSL interface connected to. Speed The c

375 The number of blocks that have been received and could not be corrected by the forward error correction (FEC) code. Overrun Cells The number of c

376 The configured destination IP address or domain name of the GRE interface. Further information on particular GRE interfaces can be obtained by

377 The status information is presented as a simple table having three or four columns as described below: Channel There are three supported channels

378 IPCP Packets Received This value is the number of IP Control Protocol (IPCP) packets received by the interface. IPCP Packets Sent This value is t

379 The number of times data that has been received on the serial interface has been dropped because of a lack of system buffers. Message Shortages T

38 This parameter is used to enable or disable the Internet Group Management Protocol for this Ethernet interface. Enable Bridge on this interface Br

380 Advanced > PPP > PPP n Management-Network Status> Interfaces> Advanced > PPP > PPP n This page displays the current status and

381 Name The name assigned to the PPP interface. Uptime The amount of time the PPP interface has been up. MRU The maximum receive unit (MRU) that has

382 IPCP Packets Received The number of IP Control Protocol (IPCP) packets that have been received on the PPP interface. IPCP Packets Sent The number

383 Route OOS Count The number of Route “Out Of Service” messages sent by the firewall to the routing code. These messages put routes out of service

384 Local The route is for a network connected directly to the router. Remote The route is for a remote network accessed via a PPP connection. Static

385 Src IP Address The source IP address of the routed IP packet. Src Port The source TCP/UDP port of the routed IP packet. If the IP protocol is no

386 Port Forwarding Table Management-Network Status> Port Forwarding Table This page displays the Port Forwarding / NAT table. The Port Forwarding

387 Firewall Management-Network Status> Firewall This page displays the current Firewall statistics and the Firewall Stateful Inspection table.

388 Hits The number of times an IP packet has been matched against the firewall rule. Direction The direction of the IP packets that match the firewa

389 ----- 5-10-2009 23:12:08 ------ FW LOG Dir: IN Line: 37 Hits: 4730 IFACE: ETH 3 Source IP: 222.45.112.59 Dest IP: 217.34.133.21 ID: 256 TTL: 106

39 and not just with the remote device not responding. n specifies the number pings that need to fail before the 2nd IP address is checked. The extr

390 DHCP Status Management-Network Status> DHCP Status This page displays the current DHCP status table. IP Address The IP address assigned to th

391 The time to live in seconds for the DNS entry. When the TTL reaches zero, the entry is deleted. Related CLI Commands Entity Instance Parameter Eq

392 Connections Management The Management- Connections webpage has the following menu options: • IP Connections • PPP Connections • Virtual Priv

393 Remote Port The TCP port being used by the connected remote device. SYNs Waiting The number of TCP SYN packets that are currently being processed

394 The ID of the general purpose socket. Owner The software task that created the socket. Protocol The protocol being used by the socket. Mode The m

395 Virtual Private Networking (VPN) Management Management-Connections> VPN The Management-Connections> VPN menu has the following sub-menu op

396 AH The AH algorithm in use, if any. ESP Auth The ESP authentication algorithm in use, if any. ESP Enc The ESP encryption algorithm in use, if any

397 The IP address of the remote device. Our ID The ID of the router. Peer ID The ID of the remote device. Dead Peer Detection (DPD) The DPD status a

398 Position Management The Management- Position webpage has GPS menu. GPS Management- Position > GPS This page displays a summary of the most rec

399 The current data integrity as indicated in the last RMC message from the GPS module. It can be either “Valid” or “Not Valid”. IP Connections The

4 FTP Relay ... 234 FTP Relay n ...

40 Entity Instance Parameter Values Equivalent Web Parameter address of IPsec packets x = Interface type eth n ipsecadd 0 - 255 Use interface x,y

400 Event Log Management The Management – Event Log page displays the current contents of the event log on the router. The event log is stored in a

401 Analyser Management Management-Analyser The router can be configured to capture a trace of the data being transmitted and received on the various

402 Serial Interfaces The checkboxes shown under this heading are used to select the serial interfaces over which packets will be captured and includ

403 IP Addresses This parameter is used to filter out IP packets with particular source or destination IP addresses. The format of this parameter is

404 Entity Instance Parameter Values Equivalent Web Parameter separated list Protocols ana 0 discipaddfilt Comma separated list Discarded IP Packet

405 Entity Instance Parameter Values Description which the analyser trace will be stored once the file indicated by “logfile” is reaches its max size

406 Interface Value Serial 10 1024 Serial 11 2048 Serial 12 4096 To enable the analyser on multiple serial interfaces, add the appropriate values

407 Related CLI Commands Command Options Description type ana.txt Displays the contents of the event log. ana 0 anaclr Clears the contents of t

408 Top Talkers Management The router can be configured to monitor the data being transmitted and received on the various interfaces. It is able to r

409 Trace Management-Top Talkers > Trace This displays the current top talkers trace.

41 Entity Instance Parameter Values Equivalent Web Parameter eth n pingint 0 - 86400 Send n byte pings to IP host a.b.c.d every h hrs m mins s sec

410 Administration Page The Administration page has following options: • System Information • File Management • X.509 Certificate Management • Ba

411 System Information Administration The Administration – System Information page gives an overview of the status of the router. Model This describ

412 Up Time This describes the amount of time since the router booted up. Date and Time This describes the current date and time on the router. Total

413 File Management Administration The Administration – File Management page has the following menu options: • FLASH Directory • WEB Directory • F

414 The date and time of when the file was last modified. Delete Selected Files This button is used to delete the selected files.

415 Related CLI Commands Command Options Equivalent Web Parameter dir Displays the entire contents of the router’s flash file system. dir <fil

416 File The name of the file in web file. Size (Bytes) The size of the file in bytes. Compressed Size (Bytes) The compressed size of the file in by

417 X.509 Certificate Management Administration The X.509 Certificate Management pages are for loading and managing X.509 certificates and public/pri

418 Path The path on the server to the SCEP application. The path can either be entered manually if known or select from cgi-bin or Microsoft SCEP fr

419 The following parameters allow the user to create a certificate request, enroll them and to install the certificates on the router. SCEP Server I

42 Entity Instance Parameter Values Equivalent Web Parameter qos n linkkbps Integer Link speed n kbps qos n q0prof 0 - 11 Queue 0 Profile qo

420 Before you can create a certificate request you must first obtain a challenge password from the Certificate Authority Server. This password is ge

421 Entity Instance Parameter Values Equivalent Web Parameter creq 0 commonname String Common Name (CN) creq 0 country String Country Code (C

422 The larger the key, the more secure the connection, but also the larger the key, the slower the connection. Save in SSHv1 format If this checkbox

423 Update Firmware The Administration –Update Firmware page allows the user to update the router’s firmware. The router will download a zip file on

424 Factory Default Settings The Administration – Factory Default Settings page allows you to reset the router’s configuration back to the factory de

425 Execute a command The Administration –Execute a Command page allows CLI commands to be entered via the web browser. Almost all of the CLI command

426 Save configuration Administration – Save configuration Once you have configured the router, your chosen settings must be saved to non-volatile me

427 Reboot The Administration - Reboot page is used to reboot the router immediately or at a scheduled time. A reboot will be performed after any FL

428 Logout Clicking the Logout link in the menu on the left will log out the current user and return to the login page

429 Filing system & system files The dir command described below is used to display a list of the currently stored files. A typical file director

43 VRRP (Virtual Router Redundancy Protocol) allows multiple physical routers to appear as a single gateway for IP communications in order to provide

430 You may select which of the two config files is loaded when the unit is powered-up or rebooted by setting the parameter Configuration - System &g

431 DEL Delete File The del command is used to delete files from the filing system. The format is: del <filename> where <filename> is the

432 REN Rename File The ren command is used to rename files in the filing system. The format is: ren <oldfilename> <newfilename> SCAN/SCA

433 After entering the xmodem command the unit will wait for your terminal program to start transmitting the file. When the upload is complete and th

434 If the USB storage device is empty, you will get the following message: No files If no USB device is present, the following message is displayed:

435 Copy the .all file to a USB storage device and insert the device into the TransPort router. Issue the command “dir u:” to confirm the TransPort c

436 Where DRIVER = "MSD" for Mass Storage Device. "SERIAL" for serial devices, or "HUB" for hub devices. To disable a F

437 • The complete model, for example: DR6410-H0A • The platform build string, for example: 8W • The type of DSL, for example: DSL2, 2+ • The typ

438 <OPTION_3G> #Start of Option specific config modemcc 0 asy_add 7 modemcc 0 info_asy_add 9 #End of Option specific config </OPTION_3G>

439 Web GUI Access via Serial Connection To access the web interface through one of the unit’s serial ports (using Windows dial-up networking) follow

44 every n seconds when in Backup state The interval between successive probe attempts when the interface is in Backup state. every n seconds when in

440 3. Check the Don’t detect my modem, I will select it from a list option before clicking Next > to display the following dialog screen: This

441 Use the Browse button to locate the Digi_MULTI_PORT.INF file on the driver CD supplied with your unit or downloaded from the Digi support website

442 Click on the OK button if you are satisfied with the installation. Note: During the installation you may receive a warning that the driver is n

443 2. Select the Connect to the network at my workplace radio-button then click on Next >: 3. Select the Dial-up connection radio-button then

444 4. From the Select a Device dialog, select the unit you have just installed and make sure that any other devices in the list are unchecked. Clic

445 If the connection is being created for direct local access using a COM port, you should set the phone number to 123. This number will be interce

446 2. Click on the Properties button to display the properties dialog for the connection: 3. On the General tab, click the Configure… button to dis

447 Make sure that the Type of dial-up server I am calling is set to PPP: Windows 95/98/NT/2000, Internet and click on Settings: Make sure that all

448 Note: When you type the password it will appear as a series of dots to ensure privacy. Once you have entered these, initiate a connection to yo

449 SQL commands When IPSec Egroups are used with a SQL database for dynamic Eroute configuration, there are CLI commands that will help with configu

45 Entity Instance Parameter Values Equivalent Web Parameter eth n vprobesuccesscnt 0 - 255 Reset probe failure count after n probe successes eth

450 Learning mode - Saving entries When learning mode is used, the dynamic backup database is stored in RAM. This database will be lost if the Digi r

451 For example, to configure and use a local backup database when the main SQL database at 192.168.0.50 is offline, the configuration may look simil

452 To enable the SQL debug: sql 0 debug_opts 3 To view the debug data via the ASY 0 port: debug 0 To view the debug data via telnet: debug t To disa

453 Answering V.120 Calls V.120 is a protocol designed to provide high-speed point-to-point communication over ISDN. It provides rate adaptation and

454 Finally, you must ensure that there are no conflicts with other protocols configured to answer on other ASY ports. This can be done by disabling

455 ANSWERING ISDN CALLS Digi routers are capable of answering incoming B-channel ISDN calls with 3 main protocols. Usually several instances of thes

456 A protocol entity’s MSN parameter can be used to: • cause a protocol instance not to answer an incoming ISDN call (if the trailing digits of the

457 X.25 PACKET SWITCHING Introduction X.25 is a data communications protocol that is used throughout the world for wide area networking across Pack

458 X.28 Commands Once an X.25 session layer has been established the unit switches to “PAD” mode. In this mode operation of the PAD is controlled us

459 Example CALL R,G12,NMYNUI-56512120DHello places a call to address 56512120 using reverse charging and specifying Closed User Group 12. The string

46 MAC Bridging Configuration – Network> Interfaces> MAC Bridging The Ethernet MAC bridge function will create an Ethernet bridge between two p

460 Network User Identity (NUI) The N facility code allows you to include your Network User Identity in the call packet. For security reasons the PAD

461 Code Verbose message 3 No route to destination 4 Channel unacceptable 6 Channel unacceptable 7 Call awarded and being delivered in an establi

462 Code Verbose message 82 Identified channel does not exist 83 A suspended call exists, but this call identity does not 84 Call identity in u

463 The clear down reason codes supported by the unit are listed in the following table: Reason Code Numeric Code Text DTE 0 by remote device OOC

464 PROF &nn where “nn” is the number of the User PAD profile to be stored, e.g. 03. Alternatively, you may use the web interface to edit the par

465 When used in the format: prof nn the PROF command loads the stored profile specified by “nn”. RESET Send Reset Packet RESET is used to issue a re

466 PPP OVER ETHERNET PPP over Ethernet (PPPoE) is a means of establishing a PPP connection over the top of an Ethernet connection. The implementatio

467 IPSEC AND VPNS What is IPSec? One inherent problem with the TCP protocol used to carry data over the vast majority of LANs and the Internet is t

468 DES (64-bit key) This well-known and established protocol has historically been used extensively in the banking and financial world. It is relati

469 X.509 Certificates In the previous section, security between two points was achieved by using a “pre-shared secret” or password. Certificates pro

47 RSTP will not be enabled if the router is in "Port Isolate" mode. If an Ethernet interface is configured with a hub group, RSTP will be

470 The unit maintains two lists of certificate files. The first is a list of “Certificate Authorities” or CAs. Files in this list are used to valida

471 FIREWALL SCRIPTS Introduction A “firewall” is a protection system designed to prevent access to your local area network by unauthorised “externa

472 Filter Rules The syntax for a filter rule is: [action] [in-out] [options] [tos] [proto] [dnslist] [ip-range] [inspect-state] When the firewall is

473 ICMP type value ICMP type 15 routersol The optional [icmp-code] field can also be a decimal number representing the ICMP code of the return ICMP

474 The vdscp action is very similar to the dscp action as described above in that it adjusts the DSCP value in a packet. The difference however is t

475 Example: break ppp_label on ppp 0 # insert rule processing here for packets that are not on ppp 0 break end ppp_label # insert rule processing he

476 Identifier Meaning ftp FTP packets regardless of port number icmp ICMP packet decimal number decimal number matched to protocol type in IP hea

477 port-range = “port” port-num “<>” | “><” port-num ip-addr = IP address in format nnn.nnn.nnn.nnn decnum = a decimal number hexnum = a

478 Address/Port Translation One further option that may be used when specifying addresses is to use address translation. The syntax for this is: src

479 Keyword Std. Port Service telnet 23 Telnet server port smtp 25 SMTP server port http 80 Web server port pop3 110 Mail server port sntp 1

48 Listening The port is sending and receiving BPDU's and participates in the election process of the root bridge. Ethernet frames are discarde

480 As a further example, let us say we want to allow outward connections from a machine on 10.1.2.33 to a Telnet server. We have to define a filter

481 The following two rules are therefore equivalent: pass in break end on ppp 0 proto icmp from any to 10.1.2.0/24 icmp-type 0 pass in break end on

482 The field can be used on its own or with an optional oos (Out Of Service) parameter. To understand this better let us look at a simple example in

483 The potential for a security breach has now been virtually eliminated because even if a hacker could time his attack perfectly he would still hav

484 The inspect-state option can be used with the following ICMP packet types: ICMP Type Matching ICMP Type Echo Echo reply Timest Timestrep Infore

485 The third rule is more complex. What it does is to configure the stateful inspection engine to watch for UDP packets (with any source address) be

486 The FWLOG.TXT File When the log option is specified within a firewall script rule, an entry is created in the FWLOG.TXT pseudo-file each time an

487 block return-icmp echorep log body break end proto icmp icmp-type echo From REM TO LOCIFACE: ETH 0 45 IP Ver: 4 Hdr Len: 20 00 TOS: Routine Delay

488 Dest Port: 23 TCP Flags: S Further [inspect-state] Examples Here is a basic inspect-state rule with no OOS options: pass out break end on PPP 2 p

489 Keeping a route out of service and using recovery It may be that the user wants to keep the interface OOS until he is sure that a future connecti

49 IP Address The destination IP address. This parameter is optional. If configured, only packets destined for this IP address will have VLAN tagging

490 Keeping a route out of service and using recovery with a list of addresses This expands on the functionality above and gives the ability to check

491 REMOTE MANAGEMENT Digi products equipped with ISDN BRIs can be accessed and controlled remotely via the ISDN network by using: • a V.120 connect

492 Using FTP TransPort routers incorporate an FTP server. FTP allows users to log on to remote hosts for the purpose of inspecting file directories,

493 Using X.25 Remote access to your unit may also be carried out over an X.25 connection. The remote unit must first have the parameter Allow CLI ac

494 AT COMMANDS D Dial The ATD command causes the unit to initiate an ISDN call. The format of the command depends on the mode of operation. When us

495 &C DCD Control The AT&C command is used to configure the way in which the unit controls the DCD signal to the terminal. There are three o

496 The AT&W command may be immediately followed by a profile number, either 0 or 1, to store the settings in the specified profile, for example:

497 \AT Ignore Invalid AT Commands This command is a work-around for use with terminals that generate large amounts of extraneous text. If not ignore

498 \smib Commands The at\smib command allows you to view a single standard MIB variable. To view the variable use the at\smib=<mib_name> comma

499

5 SMTP Account ... 318 Systems Configuration ...

50 Due to national restrictions on the channels available for use, the correct country should be selected from the drop down list to restrict the cha

500 System The System hierarchy consists of the following: at\smib=mib-2.system.sysdescr This variable shows the software version information (equiva

501 For the Digi, this value is always 7 (Physical layer (21-1) + Data Link layer (22-1) + Network layer (23-1)). Interfaces The Interfaces hierarchy

502 at\smib=mib-2.interfaces.iftable.ifentry.ifspeed This variable displays an estimate of the interface’s current bandwidth in bits per second. SNAI

503 at\smib=mib-2.ip.ipforwarding This variable indicates whether the unit is acting as an IP gateway in respect to the forwarding of datagrams recei

504 at\smib=mib-2.ip.iproutetable.iprouteentry.iproutemask The netmask for the route.

505 “S” REGISTERS In addition to the AT commands there are a number of Special (“S”) registers. These registers contain numeric values that may repre

506 S1 Ring count Units: Rings Default: n/a Range: n/a When ADAPT detects an incoming ISDN call on an ASY port, it will print “RING” to the ASY port

507 Register S31 is used to set the speed and data format for the ASY port to which you are currently connected. The default value for ASY 0 is 0, i.

508 GENERAL SYSTEM COMMANDS The application commands described in this section are basic configuration commands that do not relate to specific types

509 REBOOT Reboot Unit The reboot command causes the unit to execute a complete hardware reset, loading and running the main image file from cold. It

51 Costa Rica Croatia Cyprus Czech Republic Denmark Dominican Republic Ecuador Egypt El Salvador Estonia Faroe Islands Finland France Georgia Germany

510 Clearing the Analyser Trace and Event Log To clear the analyser trace, the CLI command is ana 0 anaclr To clear the event log, the CLI command is

511 The syntax of the command is as follows: Usage: gpio [inout ON|OFF|input|output] With no parameters, the command will display the current status

512 The following image shows the pins and the corresponding numbers: For more information on wiring and other details, refer to Digi Transport 4-pi

513 TCPPERM AND TCPDIAL This section describes the operation of the tcpperm and tcpdial commands which are available only as application commands and

514 Parameter Description -i The inactivity timeout (s) after which the socket will be closed -k Keep alive packet timer (s) -l Listening port

515 SERIAL PORT CONNECTIONS Depending upon the model, the asynchronous serial ports on may be presented as DB 25 sockets, DB 9 sockets or 8-pin RJ45

516 DR6410, DR6420, DR6460, DR64x0W & WR41

517

518

519 WR44

52 Click the checkbox to enable Wi-Fi Hotspot support on a particular Wi-Fi node. Splashscreen filename This selects an ASP web file that will be pre

520

521 TA2020

522 ER2110, IR2110 & MR2110

523 IR2140 & GR2140

524 GR2130

525

526

527 IR2140

528

529

53 Entity Instance Parameter Values Equivalent Web Parameter e.g. 112233445566 Wi-Fi n Configuration – Network> Interfaces> Wi-Fi> Wi-Fi n W

530 IR2420

531

532

533 TA2020B & IR2110B

534

535

536 DR4410, DR4410i & DR4410p

537

538

539 MW3410, MW3520 & VC5100

54 Hide SSID When enabled, the SSID will not be included in the beacon messages transmitted by the Wi-Fi interface when in Access Point mode. This me

540

541

542 ER4420, ER4420d, ER4420i, ER4420p, HR4420, HR4420d, HR4420i, HR4420p & IR4420

543

544

545 MR4110, ER4110, HR4110, GR4110 & TR4110

546

547

548 RS-232 (V.24) Serial Cable Wiring

549

55 • None • WEP • WPA-PSK (also known as “WPA Personal”) • WPA2-PSK (also known as “WPA2 Personal”) • WPA-RADIUS (also known as “WPA Ent

550

551 Configuring X.21 on Older Models Some older Sarian legacy units require an X.21 daughter card to be fitted to enable X.21 operation. There are tw

552 EMAIL TEMPLATES One of the principal features provided by the event log function is the ability to configure the unit to automatically generate a

553 If this field is present in the header, the unit will insert the current date and time into the header. The date and time are values local to the

554 e.g. <%run_cmd("ati5");%> <%run_cmd("bufs");%> <%run_cmd("msgs");%> An example template adding C

555 Certifications FCC Part 68 Declarations (for Transport DR models only) This equipment complies with Part 68 of the FCC rules and the requirements

556 OEM Advisory For OEM use, the mounting of the Transport DR in the final assembly must be made so that the Transport DR is isolated from exposure

557 GLOSSARY 0 - 9 3DES Triple Data Encryption Standard A ACCM Asynchronous Communication Channel Multiplexer ACFC Address Control Field Com

558 DHCP Dynamic Host Configuration Protocol DLSw Data-Link Switching DNS Domain Name Server DPD Dead Peer Detection DSCP Differentiat

559 IMSI International Mobile Subscriber Identity IP Internet Protocol IPCP Internet Protocol Control Protocol IPSec Internet Protocol Se

56 Entity Instance Parameter Values Equivalent Web Parameter wpa2psk wparadius wpa2radius wifinode 0 weptype open, sharedkey Not available on the

560 NOM Network Operation Mode NUA Network User Address NUI Network User Identifier O OAM Operation, Administration and Maintenance OOS

561 R RAC Routing Area Code RACH Random Access Channel RADIUS Remote Authentication Dial-In User Service RAT Radio Access Technology RDI

562 U UBR Unspecified Bit Rate UDP User Datagram Protocol UMTS Universal Mobile Telecommunications System USB Universal Serial Bus V VLAN

563 ACKNOWLEDGEMENTS Copyright Digi International Limited 1999-2011, all rights reserved. In addition we would like to thank all those who have contr

57 Network Authentication Data Encryption CLI Commands wifinode 0 wpatype tkip wifinode 0 radiuscfg 1 WPA-PSK TKIP wifinode 0 security wpapsk wifin

58 Entity Instance Parameter Values Equivalent Web Parameter macrogue n mac MAC address with no separators e.g. 112233445566 MAC Address Mobile C

59 Mobile Settings Configuration – Network > Interfaces > Mobile> Mobile Settings Select the service plan and connection settings used in

6 Mobile ... 369 DSL ...

60 SIM 2 (PPP 1) Entity Instance Parameter Values Equivalent Web Parameter modemcc 0 Apn_2 Free text field Service Plan / APN: modemcc 0 Usebu

61 By default, the source IP address for an IPSec Eroute will be the IP address of the interface on which IPSec was enabled. By setting this paramete

62 an NAI password Once these details have been obtained, it is possible to provision the CDMA module by inserting those details into the ‘Automatic

63 Mobile IP profile number: Enter the Mobile IP profile number Network Access ID (NAI): Enter the Network Access ID MIP Home Address: Enter the MIP

64 Note: With the exception of older Sierra Wireless modules, PRL update on both the Verizon and Sprint networks is carried out over the air (OTA). M

65 Wait n seconds between attachment attempts The number of seconds between network attachment attempts, some networks require 60 seconds between att

66 Entity Instance Parameter Values Equivalent Web Parameter hanging up and allowing another call modemcc 0 att_interval 0 - 2147483647 Wait n sec

67 Entity Instance Parameter Values Equivalent Web Parameter attempts modemcc 0 ss_interval_2 0 - 2147483647 Create a signal strength event every

68 This checkbox opens to show the following parameters:- Send n byte pings to IP host a.b.c.d every h hrs m mins s secs If this parameter is set, th

69 Enabling this parameter causes the unit to use the IP address of ETH0 (instead of the current IP address of the mobile interface), as the source a

7 File Editor ... 416 X.509 Certificate Managem

70 Entity Instance Parameter Values Equivalent Web Parameter ppp 1 ip2count number Switch to sending pings to IP host a.b.c.d after n failures ppp

71 priority is greater than 0 and an event of this priority or higher occurs. SMS alarms may be configured using the Configuration - Alarms > Even

72 Entity Instance Parameter Values Equivalent Web Parameter modemcc 0 sms_callerid Mobile telephone number Allow CLI commands from the following S

73 Configuration – Network > Interfaces > DSL The Configuration – Network > Interfaces > DSL page has the following options: • PVC Confi

74 Option Description ATM Routed IP LLC RFC 1483 LLC encapsulated routed IP over ATM To use PPPoA or PPPoE encapsulation, one of the available PPP i

75 IP address Enable standard Network Address Translation (NAT). When a private IP host sends a UDP or TCP packet to an Internet IP address, the rou

76 On W-WAN networks (where charging is based on the amount of data transferred as opposed to time spent on-line), this parameter may be used to spec

77 Entity Instance Parameter Values Equivalent Web Parameter interface ppp 1 dlwarnkb Kbytes/Mbytes/GBytes Issue a warning event after ppp 1 dls

78 Entity Instance Parameter Values Equivalent Web Parameter apvc 0 scr n Sustained cell rate (cells/sec) apvc 0 mbs n Maximum burst size (c

79 Entity Instance Parameter Values Equivalent Web Parameter apvc 0 oammanage ON/OFF Manage this PVC using ATM OAM cells Additional CLI commands T

8 X.509 Certificates ... 469 FIREWALL SCRIPTS ...

80 Configuration – Network > Interfaces > GRE> Tunnel Description: This parameter allows you to enter a name for this GRE instance, to mak

81 This option is normally used in conjunction with IPSec. This parameter should not be used if the interface is selected as the source using the “Us

82 Entity Instance Parameter Values Equivalent Web Parameter tun n kaactrq On,off Bring this GRE interface up to send keepalives Advanced Configu

83 NHRP holding time This is the NHRP hold time in seconds. This is used in the NHRP registration process and advices the server how long our regist

84 • LAPD ISDN Answering Configuration - Network > Interfaces > ISDN> ISDN Answering This page allows you to configure the ISDN interface

85 This is the range of IP addresses supplied to incoming callers. This parameter may require alteration if the default value “10.10.10.0” to “10.10.

86 Entity Instance Parameter Values Equivalent Web Parameter ppp 0 cingnb number ending with ppp 0 msn number with ISDN MSN ending with ppp

87 When an "Always On" route becomes "In Service", wait n seconds before using it parameter. On and return to service immediately

88 Alternative idle timer for static routes s seconds The value in this text box specifies an alternative inactivity timeout for use in conjunction w

89 Entity Instance Parameter Values Equivalent Web Parameter Service” when an always-on connection attempt fails ppp n aodi_dly 0 – 2147483647 Att

9 S12 Escape Delay ... 506 S15 Data Forwarding Timer ...

90 This section of the web interface appears when the router is fitted with an optional internal ISDN MODEM card. When first powered up, navigating t

91 common practice for the DNS server to be assigned automatically by the ISP when making a connection. Secondary DNS server The value in this text b

92 When checked, this checkbox applies the firewall rules to traffic using this interface. Related CLI Commands Entity Instance Parameter Values Equi

93 Entity Instance Parameter Values Equivalent Web Parameter ppp n cingnb up to 25 digits Only allow calling numbers ending with n ppp n do_nat

94 Control when this interface can connect using Time band n These two controls, the check box and drop-down list determine whether the Time Band fun

95 This would cause the router to create a warning entry in the event log once 4MB of data had been transferred. This event could then be used to tri

96 Entity Instance Parameter Values Equivalent Web Parameter ppp n maxneg 0 – 2147483648 if the negotiation is not complete in s seconds ppp n u

97 Each ISDN terminal device connected to your ISDN basic rate outlet must be assigned a unique Terminal Endpoint Identifier (TEI). In most cases, th

98 Do not deactivate the LAPD session This parameter ensures the unit will not deactivate the LAPD session when an X.25 PAD session is terminated. En

99 PSTN Configuration – Network > Interfaces > PSTN This section of the web interface appears when the router is fitted with an optional inte