Digi TransPort WR41 Betriebsanweisung

1 Digi TransPort User's Guide 90001019_F 15 March 2012

10 Management – Event Log ... 401 Management – Analyser ...

100 Use the following DNS servers if not negotiated Primary DNS server The value in this text box is the IP address of the primary DNS server to use

101 Use interface x,y for the source IP address of IPsec packets If it is required to use another interface (i.e. not the interface currently being c

102 Entity Instance Parameter Values Equivalent Web Parameter ppp n transDNS Valid IP address a.b.c.d Primary DNS server a.b.c.d ppp n sectransDN

103 Attempt to re-connect after s seconds The parameter in this text box specifies the length of time in seconds that the router should wait after an

104 Generate an event after this interface has been up for m minutes The value in this text box specifies the number of minutes (if any) after which

105 Entity Instance Parameter Values Equivalent Web Parameter least s seconds ppp n maxup 0 – 2147483647 Close this interface after s seconds ppp

106 Configuration – Network > Interfaces > DialServ The Dialserv option module mimics a telephone exchange in that it supplies the required vol

107 Confirm Password Type the password into this text box to enable the router to confirm that the password has been entered identically in both boxe

108 Enable NAT on this interface When checked, this checkbox will enable Network Address Translation to operate on this interface. This is the same a

109 Entity Instance Parameter Values Equivalent Web Parameter use of specified IP address ppp n DNSserver Valid IP address a.b.c.d Primary DNS serv

11 X.25 PACKET SWITCHING ... 460 Introduction ...

110 Attempt to re-connect after s seconds The parameter in this text box specifies the length of time in seconds that the router should wait after an

111 Generate an event after this interface has been up for m minutes The value in this text box specifies the number of minutes (if any) after which

112 Entity Instance Parameter Values Equivalent Web Parameter least s seconds ppp n maxup 0 – 2147483648 Close this interface after s seconds ppp

113 Configuration – Network > Interfaces > Serial Digi routers support a variety of serial interfaces, either inbuilt or as optional add-on mod

114 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter asy n/a descr Free text – description of interface Description

115 DTR Control This drop-down selection box controls how the router responds to the DTR signal. The available options are; None, Drop call, Drop lin

116 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter S0=n n/a n/a Where n = 0 - 255 Answer V.120 call after n rings

117 Configuration – Network > Interfaces > Serial > Serial Port n > Profiles Each serial port can have two profiles which can be configur

118 Configuration – Network > Interfaces > Serial > Sync The most common form of serial communications these days is asynchronous. Synchrono

119 Configuration – Network > Interfaces > Serial > Rate Adaption The router supports two rate adaptation protocol (Adapt) instances. Each i

12 &W Write SREGS.DAT ... 498 &Y Set Default Profile ..

120 Entity Instance Parameter Values Equivalent Web Parameter number Port n adapt 0,1 lip_port valid TCP port number Listen on Port n Configuratio

121 By default, if no specific protocol has been bound to a serial interface, a PPP instance will automatically be associated with that port. This me

122 Configuration – Network > Serial > TRANSIP Serial Ports TransIP is a way of using virtual serial ports for serial connections over an IP so

123 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter transip n port Valid port number 0 – 65535 Listen on port transi

124 Configuration – Network > Serial > RealPort Digi devices use the patented RealPort COM/TTY port redirection for Microsoft Windows. RealPort

125 This configures the interval in seconds between device initiated connection attempts. Send TCP Keep-Alives every s seconds This configures the in

126 Configuration - Network > Interfaces > Advanced Point-to-Point Protocol (PPP) is a standard protocol for transporting data from point to mu

127 Configuration – Network > Interfaces > Advanced > PPP n > Multilink PPP As mentioned above, the routers may support multilink PPP – t

128 When the data rate is less than n bytes/sec for s seconds When this radio button is selected, the above two text boxes are enabled. The value in

129 Entity Instance Parameter Values Equivalent Web Parameter mlppp 0 ddown_rate 0 – 2147483648 Default 500 When data rate is less than n bytes/sec

13 IR2140 & GR2140 ... 524 GR2130 ...

130 The following three radio buttons control how the IP address for the router is assigned. Allow the remote device to assign a local IP address to

131 Allow the PPP interface to answer incoming calls When checked, this checkbox will cause the PPP instance to answer an incoming call. Only allow c

132 Use interface x,y for the source IP address of IPsec packets If it is required to use another interface (i.e. not the interface currently being c

133 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ppp n name Free text field Description ppp n phonenum up to

134 Entity Instance Parameter Values Equivalent Web Parameter ppp n sub up to 17 digits with ISDN sub-address ending with n ppp n maxup 0 – 214

135 Detach W-WAN between connection attempts This checkbox controls whether or not the module stays attached to the network if multiple connection at

136 Attempt to re-connect after s seconds The parameter in this textbox specifies the length of time in seconds that the router should wait after an

137 Generate Heartbeats on this interface When checked, this checkbox reveals the configuration options that control how the router sends heartbeat p

138 Ping responses are expected within s seconds When the value in this text box is set to a non-zero value, the router will wait for that specified

139 Reset the data limit on the n day of the month The value in this text box defined the day of the month on which the data limit is reset to zero.

14 Introduction Thank you for choosing a data communications product from Digi International. Digi products are extremely versatile and may be used

140 Attempt to negotiate DEFLATE compression on this interface When checked, this checkbox causes the router to compress the data transferred over th

141 Entity Instance Parameter Values Equivalent Web Parameter immediately ppp n immoos ON, OFF Put this interface “Out of Service” when an always-

142 Entity Instance Parameter Values Equivalent Web Parameter ppp n hbgps OFF, ON Include GPS information in the Heartbeat message ppp n pingsiz

143 Entity Instance Parameter Values Equivalent Web Parameter connection has been up for at least s seconds ppp n lscnt 0 - 2147483648 Reboot the

144 Entity Instance Parameter Values Equivalent Web Parameter ppp n tcptxbuf 0 - 2147483648 TCP transmit buffer size n bytes Configuration – Net

145 As with PAP above, this checkbox controls whether or not the router should authenticate itself with the remote device using CHAP. The connection

146 When checked, this checkbox will allow the router to authenticate with a remote unit using version 2 of Microsoft’s MS-CHAP algorithm. Related CL

147 Entity Instance Parameter Values Equivalent Web Parameter ppp n r_md5 0,1 0 = Off 1 = On Allow remote unit to authenticate using CHAP-MD5 ppp

148 Entity Instance Parameter Values Equivalent Web Parameter qos n q0prof 0 - 11 Queue 0 Profile qos n q0prio 0 – 4 0 = Very high 1 = High 2 =

149 The value in this text box is the username that should be used when authenticating with the remote system and is usually only required for outgoi

15 Typographical Conventions Throughout this manual certain typographical conventions are used as follows: Text Type Meaning Text like this ... is s

150 Configuration – Network > DHCP Server Digi routers incorporate one or more Dynamic Host Configuration Protocol (DHCP) servers, one for each Et

151 Only send offers to Wi-Fi clients When checked, this checkbox causes the router to only send DHCP offers to Wi-Fi clients. This is useful if the

152 Entity Instance Parameter Values Equivalent Web Parameter a.b.c.d a.b.c.d dhcp n fwdip2 Valid IP address a.b.c.d Forward DHCP requests to a.b.c

153 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter dhcp n NBNS Valid IP address a.b.c.d NetBIOS Name Server a.b.c.d

154 Configuration – Network > DHCP Server > DHCP Options The DHCP Option pages allow custom (or non-standard) DHCP options to be configured and

155 Configuration – Network > DHCP Server > Static Lease Reservations The table on this web page controls the configuration of MAC address to I

156 Configuration – Network > Network Services The web page described here collects together a number of services that are provided by the router

157 Enable Web Server (HTTP) Much of the configuration of the router may be performed using the web GUI as described here. However, HTTP is an insecu

158 Configuration – Network > DNS Servers This section describes the parameters used to configure the DNS server functionality of the router. Con

159 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter dnssel n pattern *.domain.com For DNS requests matching pattern

16 Obtaining Technical Support Technical support for your Digi Transport router is readily available using the following methods. Self help Visit the

160 Also send an update every h hrs, m mins, s secs The values in these text boxes specify the interval at which the unit will issue update messages

161 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter dnsupd 0 server Valid IP address a.b.c.d Send an update to DNS

162 Configuration – Network > Dynamic DNS The Dynamic DNS client (DynDNS) is used to update DNS hostnames with the current IP address of a particu

163 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter dyndns 0 hostname1 Up to 40 characters Host and Domain Name(s) d

164 Configuration – Network > Dynamic DNS > Advanced The parameters in this section do not normally need changing from their defaults. Update i

165 Configuration – Network > IP Routing / Forwarding - An introduction to TransPort routing The configuration pages and command line commands tha

166 Routing modes The TransPort has 2 routing modes available, these are: TransPort routing mode This is the original routing method and may be seen

167 Route metrics can be altered automatically according to various circumstances. This is in order to provide automatic backup connection paths. Rou

168 When an “Always On” route becomes “In Service”, wait s seconds before using it The value in this text box specifies the delay that the router sho

169 Destination Network a.b.c.d The value in this text box is the IP address of the destination subnet, network or IP address for the route. If the r

17 Email Email support is available from 2 locations: UK [email protected] USA [email protected] Remember to attach the debug.txt zip file to

170 Entity Instance Parameter Values Equivalent Web Parameter route n ll_add 0 – 2147483647 Interface x,y route n upmetric 0 – 2147483647 Met

171 If the interface fails to connect, try again in s seconds If an interface is requested to connect by this route (due to IP traffic being present)

172 Entity Instance Parameter Values Equivalent Web Parameter route n inrip on,off Include this route in RIP advertisements route n doinact2 on

173 Configuration – Network > IP Routing / Forwarding > Static Routes > Default Route n The following two web pages and associated command

174 Wait for s seconds after power up before allowing this route to activate the interface As per equivalent parameter in Routes n. If the interface

175 Entity Instance Parameter Values Equivalent Web Parameter def_route n actooslim 0 – 2147483647 Mark this route as “Out Of Service” if the inte

176 Send RIP advertisements every s seconds The value in this text box specifies the interval between sending RIP packets. These packets contain the

177 IP Address a.b.c.d The value in this text box is the IP address to be added to the list of IP addresses that RIP packets must come from if they a

178 Entity Instance Parameter Values Equivalent Web Parameter ripauth 0 – 9 smon 0 - 12 Valid from d,m,y ripauth 0 – 9 syear 0 – 65535 Valid

179 Plain password: When set to “Plain password (V1+V2)”, the interface will use the first valid key it finds (set on the Configuration – Network >

18 Using the Command Line Interface Using a Web browser to modify text box or table values in the configuration pages is the simplest way to configur

180 Configuration – Network > IP Routing / Forwarding > OSPF Open Shortest Path First (OSPF) is an Interior Gateway Protocol (IGP) developed fo

181 Use Interface IPsec source IP When checked, this checkbox will cause OSPF functions to use the source IP address of the interface specified in Co

182 Configuration – Network > IP Routing / Forwarding > BGP The Border Gateway Protocol (BGP) routing protocol is supported by TransPort router

183 Configuration – Network > IP Routing / Forwarding > IP Port Forwarding / Static NAT Mappings The router supports Network Address Translatio

184 Configuration – Network > IP Routing / Forwarding > Multicast Routes Digi TransPort routers support multicast routes, allowing them to rout

185 Configuration – Network > Virtual Private Networking (VPN) > IPsec IPsec (Internet Protocol security) refers to a group of protocols and s

186 IP Address Use this IP address for the local LAN subnet. This is usually the IP address of the router’s Ethernet interface or that of a specific

187 Our ID type This defines how the remote peer is to process the Our ID configuration. IKE ID The Our ID parameter is a simple key ID (e.g. vpncl

188 Bring this tunnel up This controls how the IPsec tunnel is brought up. The options are • All the time • Whenever a route to the destination is

189 Entity Instance Parameter Values Equivalent Web Parameter eroute n remnetid String Remote Subnet ID eroute n authmeth off, preshared, rsa

19 If you have local command echo enabled on your terminal, you may see the AT command displayed as “AATT”. If this happens you may use the “ATE0” co

190 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IPsec Tunnels > IPsec n > Tunnel Negotiation Enable IKE traci

191 The compression algorithm to use with this IPsec tunnel. The options are: • No (None) • DEFLATE Delete SAs when this tunnel is down When sel

192 IKE negotiation source IP address is taken from the This defines which IP address IKE uses as the source IP address during the negotiation. Inter

193 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter eroute n mode tunnel, transport IPsec Mode eroute n ahauth

194 Entity Instance Parameter Values Equivalent Web Parameter eroute n toslist Comma separated list of Integers IP packets with ToS values n must u

195 Host Router Peer ID: Remote* Our ID: Host1 Username: Remote* Password: mysecret Remote Router 1 Peer ID: Host1 Our ID: Remote01 Username: Host

196 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IPsec Default Action Like a normal IP routing set-up, IPSec Tunnels

197 Basic Concept The router with the IPsec Group/MySQL configuration will be the VPN Concentrator. The remote sites will normally not require an IPs

198 VPN Concentrator acting as a responder to a session initiated from the remote site When a remote site needs to create an IPsec SA with the VPN Co

199 All other fields should be configured as usual. It is possible to set up other IPsec groups linked with other IPsec tunnels. This would be done i

2 Contents Introduction ... 14 Typographical Co

20 Take note that because of the space between ‘Local’ and ‘LAN’, the wording is enclosed in double quotes. To set an IP address on 192.168.1.1 on Et

200 Password / Confirm Password The password to use when logging into the MySQL Server. Database name The name of the database to connect to. Databas

201 Entity Instance Parameter Values Equivalent Web Parameter egroup n fbakpeerip IP Address Backup Peer IP Address egroup n fpeerid String P

202 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter dpd 0 inact Integer Mark the IPsec tunnel as suspect if there i

203 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ike 0 deblevel 0 = Off 1 = Low 2 = Medium 3 = High 4 = Very High

204 Aggressive mode was developed to allow the host to identify a remote unit (initiator) from an ID string rather than from its IP address. This mea

205 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ike n encalg des, 3des, aes Encryption ike n keybits 0, 128

206 RSA private key file The name of a X.509 certificate file holding the router’s private part of the public/private key pair used in certificate ex

207 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IKE > IKE Responder This page displays the various parameters fo

208 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IKE > IKE Responder > Advanced Stop IKE negotiation if no pac

209 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ike 0 inactto 0 – 255 Stop IKE negotiation if no packet receive

21 The “ATV0” command can be used to select numeric codes if required. The results from the text based commands can be numeric or verbose. A full lis

210 External Port The lowest destination port number to be matched if the packet is to be redirected. Forward to Internal IP Address An IP address to

211 Authentication Defines the authentication algorithm used. The options are • None • MD5 • SHA1 PRF Algorithm Defines the PRF (Pseudo Random F

212 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IKEv2 > IKEv2 n > Advanced Retransmit a frame if no response

213 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IKEv2 > IKEv2 Responder This page displays the various parameter

214 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IKEv2 > IKEv2 Responder > Advanced Stop IKE negotiation if no

215 Configuration – Network > Virtual Private Networking (VPN) > L2TP The Layer 2 Tunnelling Protocol (L2TP) provides a means for terminating a

216 Bring this tunnel up All the time/On demand This parameter only applies to tunnels initiated from this router. Bring this tunnel down if it is id

217 Entity Instance Parameter Values Equivalent Web Parameter interface x,y l2tp n rnd_srcport OFF, ON Source Port l2tp n name Up to 30 charact

218 Entity Instance Parameter Values Equivalent Web Parameter l2tp n ans OFF,ON Allow this L2TP tunnel to answer incoming ISDN calls l2tp n msn

219 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter pptp 0 - 9 name Up to 30 characters Description pptp 0 - 9 rem

22 Digi application commands (referred to just as text commands or CLI commands throughout the remainder of this guide), can be entered in upper or l

220 Configuration – Network > Virtual Private Networking (VPN) > OpenVPN OpenVPN can be used for connecting to the router for secure management

221 Destination host a.b.c.d Only required when configured as an OpenVPN client. This is the IP address of the OpenVPN server. Link socket interface

222 TLS auth password / Confirm TLS auth password This allows the OpenVPN instance to use an extra level of security by having a TLS password configu

223 Key renegotiation packets If non-zero, a key renegotiation will take place after this many packets have travelled through the data channel. Inact

224 Entity Instance Parameter Values Equivalent Web Parameter ovpn n autoup OFF,ON Automatically connect interface ovpn n server OFF,ON Serve

225 Entity Instance Parameter Values Equivalent Web Parameter ovpn n reneg_bytes 0 - 2147483647 Key renegotiation bytes ovpn n reneg_packets 0

226 Configuration – Network > SSL The secure socket layer (SSL) that provides a secure transport mechanism is supported by Digi’s TransPort route

227 Cipher List The cipher list in this text box is a list of one or more cipher strings separated by colons. Commas or spaces are also accepted as s

228 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter sslsvr 0 certfile Up to 12 characters (DOS 8.3 format) Server Ce

229 Configuration – Network > SSH Server The secure shell (SSH) server allows remote peers to access the router over a secure TCP connection using

23 The Reboot Command The reboot command is used to reboot the unit after altering the configuration. It has three modes of operation: reboot - will

230 Allow up to n connections The value in this text box specifies the number of sockets listening for new SSH connections (default 1). Host Key 1 Fi

231 Enable support for SSH v2.0 When checked, this checkbox allows the server to negotiate SSH V2. The router must also have a SSH V2 key present and

232 Enable Debug The router supports logging and output of debugging information for situations where there are problems establishing a SSH connectio

233 Configuring SSH In order to fully configure SSH, a version1 SSH key and a version 2 SSH key need to be generated and the router configured to use

234 SSH Authentication with a public/private keypair Once SSH access has been configured and confirmed to be working, RSA key pair authentication ca

235 Configuration – Network > FTP Relay The FTP Relay agents allow any files to be transferred onto the router by a specified user using the File

236 Wait s seconds between attempts The value in this text box specifies the interval (in seconds) that the router should wait in between successive

237 Entity Instance Parameter Values Equivalent Web Parameter frelay n norename OFF,ON Rename file frelay n ascii OFF,ON Transfer Mode frelay

238 Configuration - Network > IP Passthrough IP passthrough is a useful feature if a host computer or server on the local area network needs to ha

239 Ping When checked, this checkbox excludes the ICMP echo request from passthrough. Other Ports The list of TCP and UDP port numbers in this text b

24 Configuring your TransPort router This section describes the various configuration parameters for the unit and how to set or change them using the

240 Configuration – Network > UDP Echo When enabled, the UDP echo client generates UDP packets that contain the router’s serial number and ID and

241 Entity Instance Parameter Values Equivalent Web Parameter udpecho n locport 0 - 65535 Use local port n udpecho n userouting OFF,ON Route

242 Configuration – Network > QoS The Quality of Service (QoS) functionality provides the means of prioritising different types of IP traffic. It

243 When configuring QoS, be aware that the router supports ten queues, numbered from 0 to 9 and that DSCP codes range from 0 to 64. Configuration –

244 Maximum kbps The value in this text box sets the maximum data transfer rate in kilobits/second that the router will try to attain for this queue.

245 WRED Queue Length Weight factor The value in this text box specifies a weighting factor to be used in the WRED algorithm when calculating the wei

246 Configuration – Network > Timebands Digi TransPort routers support “Time Bands” which are used to determine periods of time during which PPP i

247 The following screenshot shows a PPP instance configured so that routing is allowed on weekday from 09:00 to 17:00. Clicking the Add button adds

248 Configuration – Network > Advanced Network Settings The settings described in this web page are “advanced” in the sense that in the vast majo

249 Configuration - Network > Advanced Network Settings > Socket Settings Default source IP address interface x,y The values in these two text

25 Correct entry of the username and password will display the main operations page similar to that shown below. Clicking on the Click to load Appl

250 Configuration – Network > Advanced Network Settings > XOT Settings Default source IP address interface x,y The values in these two text box

251 Configuration – Network > Advanced Network Settings > Backup IP Addresses This page contains a table that is used to specify alternative IP

252 Chaining IP Addresses It is possible to chain backup IP addresses by making multiple entries in the table. For example, if the backup IP address

253 Configuration - Network > Legacy Protocols Older protocols that existed before TCP/IP became dominant are often referred to as legacy protoco

254 Configuration - Network > Legacy Protocols > SNA over IP > SNAIP 0 Description This parameter allows you to enter a name for this SNAIP

255 Assume station exists (Do not send TEST frames) When this parameter is enabled TEST frames are not transmitted and the TEST response is not exp

256 RR Timer This is a standard LAPB/LAPD “Receiver Ready” timer. The default value is 10,000ms (10 seconds) and it should not normally be necessary

257 DLSw Role When this parameter is set to “Active”, and the unit is in SNA mode, then this DLSw switch will actively connect to the remote DLSw swi

258 Entity Instance Parameter Values Equivalent Web Parameter RAW_NOHDR snaip x ans 1 = enabled, 0 = disabled Allow this unit to answer calls s

259 Entity Instance Parameter Values Equivalent Web Parameter snaip X srcipent auto, eth, ppp Use interface for source IP address snaip x srcipa

26 Note: The signal strength is shown in “negative dB”, which means that the stronger the signal, the lower the number. As a guide -51dB would be a

260 Configuration - Network > Legacy Protocols TPAD TPAD is a simplified version of the X.25 PAD specification that is commonly used for carrying

261 Use suffix x The Suffix # parameter may be set to contain additional numbers that are dialled after the number specified by B-channel ISDN #. For

262 LCN direction This parameter determines whether the X.25 LCN used for outgoing TPAD calls is incremented or decremented from the starting value w

263 Create an event when reply from X.25 host matches This parameter can be used to generate a “Data Trigger” event (code 47) when the reply from the

264 The polling character set is c This parameter is a string that specifies a character or set of characters to be treated as polling characters. Th

265 Do not transmit ENQ characters Under the TPAD protocol the ENQ character is normally used to indicate that a call has connected and that the TPAD

266 Acknowledge TPAD data packets This parameter causes the unit to acknowledge TPAD data packets from the terminal. This parameter should normally

267 Entity Instance Parameter Values Equivalent Web Parameter tpad n bnumber text (valid ISDN number) Use number x to make outgoing ISDN calls

268 Entity Instance Parameter Values Equivalent Web Parameter tpad n IPaddr IP address Connect to remote IP address tpad n iphdr 0=Off 1=On 2

269 Entity Instance Parameter Values Equivalent Web Parameter tpad n tackdel 0 – 10000 Wait for x milliseconds for an ACK before retransmitting

27 LEDs lit Signal Strength None Under -113 dBm (effectively no signal) 1 -112 dBm to -87 dBm (weak signal) 2 -86 dBm to -71 dBm (medium strength

270 When answering a X.25 call, use the addresses from CALL packet in the CALL CNF packet When this setting is enabled when answering a call the call

271 Configuration - Network > Legacy Protocols > X.25 > LAPB LAPB (Link Access Procedure Balanced) is a standard subset of the High-Level Da

272 Send X.25 Restart packet on receipt of SABM frame This parameter can be set to “No” or “Immediate”. When set to “Immediate”, the LAPB instance wi

273 Configuration - Network > Legacy Protocols > X.25 > LAPB n > Async Mux 0710 Parameters For certain W-WAN modules LAPB is used to perf

274 Entity Instance Parameter Values Equivalent Web Parameter disabled lapb n msn text Only accept calls from calling number ending with lapb n

275 Configuration - Network > Legacy Protocols > X.25 > NUA / NUI Interface Mappings For PAD and TPAD instances, this table can be used to o

276 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter nuaip N nua text NUA nuaip N nui text NUI nuaip N cud

277 could be given the name “X25test” and then executed simply by entering: CALL X25test To create a macro, enter a name for the macro in the left co

278 Configuration - Network > Legacy Protocols > X.25 > IP to X.25 Calls This page contains a table that allows you to enter a series of IP

279 RFC 1086 Mode: RFC 1086 specifies a mode of operation in which the IP socket answers and then with a simple protocol in the socket identifies the

28 Wizards This page contains wizards that simplify common configuration tasks. These wizards will change the minimum number of parameters to comple

280 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ipx25 n ip_port 0 - 65535 IP Port ipx25 n nb_listens 0 –

281 X.25 Settings Default X.25 packet size This parameter determines the default X.25 packet size. This may be set to “16”, “32”, “64”, “128”, “256”,

282 On the backup interface NUI/NUA selection If both an NUI and an NUA are included in the call string, this parameter allows the unit to filter one

283 Enable Leased Line Mode When this parameter is set to “On”, it causes the PAD to always attempt to be connected using the Auto macro setting as

284 Entity Instance Parameter Values Equivalent Web Parameter pad n amacro text Use X.25 Call Macro macroname to an ATD command pad n cingnua

285 Entity Instance Parameter Values Equivalent Web Parameter PAD pad n inactevent 0 - 2147483647 Create an event when there has been no activi

286 When a call is in progress and you need to actually transmit the character that is currently defined as the PAD recall character, simply enter it

287 5 Ancillary Device Control This parameter determines method of flow control used by the PAD to temporarily halt and restart the flow of data from

288 8 Discard Output This parameter determines whether data received during a call is passed to the DTE or discarded. It can only be directly set by

289 13 LF Insertion (after CR) Controls the automatic generation of a Line Feed by the PAD. Option Description 0 No line feed insertion 1 Line Fee

29 Configuration – Network > Interfaces > Ethernet Underneath the Ethernet sub menus, there are configuration parameters for: Physical Ethernet

290 20 Echo Mask This parameter defines characters that are NOT echoed when echo mode has been enabled using parameter 2. Option Description 0 No ec

291 Configuration - Network > Legacy Protocols > X.25 > X.25 PVCs A Permanent Virtual Circuit (PVC) provides the X.25 equivalent of a leased

292 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter pvc n l2iface Blank or lapb, lapd, tcp Enable this PVC pvc n l

293 Idle Gap When receiving an modbus response from a station when this idle gap (pause with no reception of characters) is detected the message (cur

294 Configuration - Network > Protocol Switch The Protocol Switch software available on some models provides X.25 call switching between the vario

295 When this optional feature is included, the unit may be configured to pass X.25 calls or data received in a TCP connection to another protocol or

296

297 Parameters TCP or XoT This parameter controls the switching of incoming X.25 calls received via TCP or XOT. Select the interface t

298 LAPB X backup to interface If any of the Switch from parameters has been set to LAPB X, and LAPB X is unavailable, this parameter may be used to

299 Enable ENQ Char: When this parameter is set to “On”, when an incoming call on LAPB is switched and the unit connects to it, the X.25 switch s

3 Configuration – Network > Interfaces > Mobile ... 58 Configuration – Network > Interfa

30 Use the following IP address Selecting this option enables manual configuration of the IP addressing parameters IP Address This parameter specifie

300 However, this means that if you are routing traffic from the local subnet across a VPN tunnel you would have to set up two Eroutes; one to match

301 Entity Instance Parameter Values Equivalent Web Parameter X25sw 0 swfrlapb2 0-10,13-15 (see below) Switch from LAPB 2 to X25sw 0 swfrlapb2pv

302 Entity Instance Parameter Values Equivalent Web Parameter X25sw 0 lapb2ppar 7,8,9,10 7=128 8=256 9=512 10=1024 LAPB 2 Default Packet Size X25s

303 Parameter value Interface type 10 UDP stream 12 LAPB 2 13 LAPB 2 PVC 14 VXN 15 SSL Configuration - Network > Protocol Switch > CUD Map

304 Configuration - Network > Protocol Switch > IP Sockets to Protocol Switch This page contains a table that allows you to enter a series of I

305 Confirm Mode When confirm mode is set to “On” then the incoming TCP socket will not be successfully connected until the corresponding outgoing ca

306 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ipx25 n ip_port 0 - 65535 IP Port ipx25 n nb_listens 0 – sof

307 Configuration - Network > Protocol Switch > NUA to Interface Mappings This page contains a table that allows you to enter a series of X.25

308 Interfaces are coded as follows: Parameter Value Interface Type 0 Default 1 LAPD 2 LAPB 0 3 LAPB 1 4 XOT 5 LAPD X (actual instance determin

309 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter X25map 0-19 nuafrom 0-65536 NUA In X25map 0-19 nuato 0-6553

31 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter eth n descr Free text field Description eth n ipaddr Valid

310 Configuration – Alarms > Event Settings The router maintains a log of events in the “LOGCODES.TXT” pseudo file. When an event of a specified (

311 Configuration – Alarms > Event Settings > Email Notifications To use the email alert facility, you must first ensure that a valid Dial-out

312 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter event n etrig 0 – 9 0 disables sending alerts Send an email noti

313 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter event n trap_trig 0 – 9 0 disables sending alerts Send a SNMP Tr

314 Entity Instance Parameter Values Equivalent Web Parameter e.g. 447871445677 event n sms_trig3 0 – 9 If the event priority is at least n event

315 Configuration – Alarms > Event Settings > Syslog Messages As well as logging events to an internal log file and to a file on a USB flash dr

316 These radio buttons selects which method of establishing a route to the server should be used. Routing table When this radio button is selected,

317 Configuration – Alarms > Event Logcodes This page allows you to edit the logcodes used to describe events entered in the “EVENTLOG.TXT” pseudo

318 Configuration – Alarms > Event Logcodes > Configuring Events This page controls the configuration of the event that is displayed in bold fo

319 Freeze the Analyser trace This selection will cause the analyser to be “frozen”, i.e. no more logging will take place until the email has been se

32 Ethernet Hub group On units with a built-in hub/switch, the Ethernet Hub Group parameter for each port is normally set to 0. This means that all

320 Configuration - Alarms > SMTP Account In order for the router to successfully send emails, an email account (SMTP) must be available. This sec

321 If the “Route using routing table” option is not selected, the settings in the interface and interface instance text boxes are used to determine

322 Configuration – System > Device Identity This configuration section describes how to configure the identity of the router. Description This

323 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter snmp n Name Free text field Description snmp n Contact Free

324 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter n/a n/a time hh [mm [ss [DD [MM [YYYY]]]]] Manually set the time

325 End Month Use this drop-down selection box to select the desired month in which to switch back to GMT (UTC). Day Use this drop-down selection box

326 Up to 4 remote peers can be configured, all the peers are polled at intervals and the “best” peer is selected for using as the time source. SNTP

327 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ntp n driftppm -10000 - +10000 Initial Drift Compensation ntp

328 Entity Instance Parameter Values Equivalent Web Parameter ntp n server3 Valid IP address or hostname, e.g. [email protected] NTP Server ntp

329 Configuration – System > General This section describes the configuration of router functionality that applies to the router in general rather

33 Max Tx rate On models with multiple Ethernet interfaces, this parameter may be used to specify a maximum data rate in kbps that the unit will tran

330 Configuration - System > General > Web / Command Line Interface The router may be configured using several different methods. This section

331 Entity Instance Parameter Values Equivalent Web Parameter 1 = High 2 = Medium 3 = Low 4 = None 8 = Read only local n tlocto Free text field N

332 SNMP Enterprise number This parameter specifies the value of the OID (Object IDentifier) to be used by SNMP management tools when accessing the M

333 Configuration – Remote Management > iDigi > Connection Settings iDigi is a hosted remote configuration and management system that has been

334 Configuration – Remote Management > iDigi > Advanced The settings in the previous section, along with the system defaults are sufficient to

335 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter idigi n idledisconn 0,1 Disconnect when iDigi server is idle 0

336 TCP MIB (RFC2012) UDP MIB (RFC2013) VRRP MIB (RFC2787) SNMP MPD MIB (RFC3412) SNMP USM MIB (RFC3414)** * The following groups/tables in RFC2233 a

337 Configuration – Remote Management > SNMP User > SNMP User n This page controls the configuration of the SNMP users. SNMPv1 / SNMPv2c Commun

338 Configuration – Remote Management > SNMP Filters SNMP filters allow the system administrator to control access to the router MIBs via SNMP. Th

339 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter snmp n enterprisetraps 0,1 Generate Enterprise traps 0 = Off 1

34 IP address and Port This mode behaves like NAT but in addition to changing the source IP of the packet from the private host it can also change th

340 Trap Server Engine ID This item will be configured within the application and is the SNMP server software engine ID which is used for authenticat

341 Configuration – Security > Users > User n These pages allow you to configure a number of authorised users. The number of users available de

342 Configuration – Security > Users > User n > Advanced Allow this user to log in over a PPP network Enabling this will allow the user to

343 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter user 0 dun_en on, off Allow this user to log in over a PPP netw

344 Configuration – Security > Firewall All Digi TransPort routers incorporate a comprehensive firewall facility. A firewall is a security system

345 Restore If, after reviewing changes to the table it is decided that the edit should be abandoned, clicking this button will restore the original

346 UDP s seconds The value in this text box specifies the length of time that a stateful inspection rule will remain in place following the receipt

347 Configuration – Security > RADIUS The RADIUS client may be used for authentication purposes at the start of remote command sessions, SSH sessi

348 Configuration – Security > RADIUS > RADIUS Client n The following pages describe the configuration parameters available for setting up a RA

349 Password The value in this text box is the password that is supplied by the primary accounting NAS administrator and is used in conjunction with

35 Multihome additional consecutive addresses This parameter defines how many additional (consecutive) addresses the ethernet driver will “own”. For

350 Entity Instance Parameter Values Equivalent Web Parameter characters Password radcli 0,1 aserver2 Valid IP Address a.b.c.d Secondary Accounting

351 Configuration – Security > TACACS+ The Digi TransPort range of routers support Terminal Access Controller Access-Control System Plus (TACACS+)

352 Primary TACACS+ Server Hostname or IP address of Server a.b.c.d Port n The IP address or hostname of the primary TACACS+ server is entered into t

353 Entity Instance Parameter Values Equivalent Web Parameter characters tacplus 0 svr2 Up to 64 characters or valid IP address a.b.c.d Hostname or

354 Configuration – Security > Command Filters When this feature is enabled, commands will not reach the router’s command interpreter unless they

355 Configuration – Security > Calling Numbers Note: This feature is for use by experienced personnel for network testing and fault diagnosis. It

356 Configuration - Position > GPS One of the options available on some models is the ability to connect a GPS receiver which enables the router a

357 IP Connection 1 GPS data may be sent to up to two IP destinations. These are specified in the following two sections of the web page. Send GPS me

358 Entity Instance Parameter Values Equivalent Web Parameter GPS receiver gps 0 gga_on 0,1 0 = Off 1 = On Fix data (GGA) gps 0 gll_on 0,1 0 = Of

359 Entity Instance Parameter Values Equivalent Web Parameter gps 0 IPprefix2 Free text Prefix the message with gps 0 IPsuffix2 Free text Suf

36 Send n byte pings to IP host a.b.c.d every h hrs m mins s seconds Where: n specifies the payload size of a ping packet when used with the auto pin

360 Applications > Basic > ScriptBasic In order to allow end users to extend and enhance the functionality of the TransPort routers, scripting

361 To execute a script from the CLI, enter the command: bas <myscript.sb> To kill a running script from the CLI, enter the command: Basic 0 k

362 Management – Network Status > Interfaces > Ethernet > ETH n This page displays the current status and statistics of the selected Etherne

363 Rx Overruns The number of receive overruns that have occurred on the Ethernet interface. An Rx overrun occurs when there are not enough buffers t

364 Management – Network Status > Interfaces > Wi-Fi Module Detected This indicates that the Wi-Fi hardware has been detected by the router. Ad

365 The MAC address of the connected Wi-Fi client. Wi-Fi Node The Wi-Fi node on the router the client is connected to. RSSI The signal strength exper

366 Management > Network Status > Interfaces > Mobile The Mobile status page displays the current mobile connection, network and module in

367 Mobile Connection Registration Status The GSM registration status of the mobile module with respect to the GSM network. It may be one of the foll

368 • HSUPA • CDMA Manufacturer The manufacturer of the mobile module. Model The model of the mobile module. IMEI The International Mobile Equipm

369 Network The current network reported by the mobile module. Signal strength 1xRTT The signal strength in dBm being received by the mobile module f

37 Entity Instance Parameter Values Equivalent Web Parameter eth n tcptxbuf value in bytes TCP transmit buffer size eth n linkdeact 0 - 86400

370 Command Option Equivalent Web Parameter modemstat s Scan for Networks pppstat n Mobile Statistics (where n is the PPP interface being used by

371 Management – Network Status > Interfaces > DSL This page displays the current status and statistics of the DSL interface. Modem Status The

372 Remote Vendor ID The remote vendor ID of the DSLAM that the DSL interface connected to. Speed The current speed the downstream and upstream DSL c

373 Overrun Cells The number of cells lost because of overrun errors. Idle Cells The number of idle cells received. Related CLI Commands Command Inst

374 Management > Network Status > Interfaces > GRE This page displays a summary table of the configured GRE interfaces. # This indicates GR

375 Keepalives Sent The number of GRE keepalive packets that have been sent on the GRE interface. Rx Errors The number of receive errors that have oc

376 Management – Network Status > Interfaces > PSTN This section contains the network status information for the PSTN interface. Link Name If a

377 Related CLI Commands The CLI commands are the same as for other interfaces and are described in the PPP status section. The command to obtain the

378 Management – Network Status > Interfaces > Advanced > PPP > PPP n This page displays the current status and statistics of the selecte

379 Name The name assigned to the PPP interface. Uptime The amount of time the PPP interface has been up. MRU The maximum receive unit (MRU) that has

38 Entity Instance Parameter Values Equivalent Web Parameter Heartbeat message eth n hbgps 0,1 Include GPS information in the Heartbeat message et

380 IPCP Packets Received The number of IP Control Protocol (IPCP) packets that have been received on the PPP interface. IPCP Packets Sent The number

381 Route OOS Count The number of Route “Out Of Service” messages sent by the firewall to the routing code. These messages put routes out of service

382 Management > Network Status > IP Routing Table This page displays the IPv4 routing table. Destination The destination IP network of the r

383 Status The current status of the route. It can be one of the following UP The route is up and can be used for routing. DOWN The interface that t

384 Management > Network Status > IP Hash Table The router uses a routing hash table to improve IPv4 routing performance by reducing route look

385 Idx The index in the IP hash table of the entry. Usage The number of times the entry has been used. Related CLI Commands Command Options Equival

386 Management – Network Status > Port Forwarding Table This page displays the Port Forwarding / NAT table. The Port Forwarding table is used by t

387 Management > Network Status > Firewall This page displays the current Firewall statistics and the Firewall Stateful Inspection table. Pass

388 Hits The number of times an IP packet has been matched against the firewall rule. Direction The direction of the IP packets that match the firewa

389 Management > Network Status > Firewall Trace The firewall trace output is appended to when the log keyword is used in the firewall. Most co

39 Priority This column contains drop-down menu boxes which are used to assign a priority to the selected queue. The priorities available are: “Very

390 Src Port: 12200 Dst Port: 8118 ‘Src Port’ is the source TCP or UDP port number of the packet that was logged. ‘Dst Port’ is the destination TCP

391 Management – Network Status > DNS Status This page displays DNS status table. Hostname The hostname that has been resolved. IP Address The IP

392 Management – Network Status > QoS This page displays the current QoS status table for a particular interface. Priority Q The priority queue

393 Management – Connections > IP Connections This page displays the current status of the TCP sockets on the router. The router has two types of

394 Related CLI Commands Command Options Description socks Displays the current status of the TCP sockets. General Purpose Sockets ID The ID of

395 Protocol The protocol being used by the socket. Mode The mode of operation of the socket. State The current state of the socket. Local Port The p

396 Local Network The local IP network of the IPsec tunnel that is connected to the router. Remote Network The remote IP network of the IPsec tunnel

397 Related CLI Commands Command Options Description sastat [dyn] Displays the current status of all of the IPsecs tunnels. The optional “dyn” param

398 Management – Connection > Virtual Private Networking (VPN) > IKE SAs This page displays the current status of the IKE Security Associations

399 Management – Position > GPS This page displays a summary of the most recent information received from the GPS module (if fitted) and the statu

4 Configuration – Network > Interfaces > Serial > Rate Adaption n ... 119 Configuration – Network > Interfaces

40 Configuration - Interfaces > Ethernet > ETH n > VRRP VRRP (Virtual Router Redundancy Protocol) allows multiple physical routers to appear

400 Related CLI Commands Command Options Description at\mibs=gps.0.stats Displays the current status of the GPS receiver.

401 Management – Event Log This page displays the current contents of the event log on the router. The event log is stored in a pseudo-file called “

402 Management – Analyser The router can be configured to capture a trace of the data being transmitted and received on the various interfaces. It is

403 The checkboxes shown under this heading are used to select the Ethernet interfaces over which packets will be captured and included in the analys

404 Conversely, you may wish to only capture traffic to and from particular IP hosts. To do this, use a tilde (~) symbol before the list of IP addres

405 Entity Instance Parameter Values Equivalent Web Parameter eth n ethanon on, off Ethernet Interfaces eth n ipanon on, off IP Sources ovpn

406 Entity Instance Parameter Values Description ana 0 logsizek Value in Kbytes The maximum size in Kbytes of the file on the alternate drive. Wh

407 Interface Value Serial 12 4096 To enable the analyser on multiple serial interfaces, add the appropriate values together. For example, to enable

408 Management – Analyser > Trace This displays the current analyser trace. Related CLI Commands Command Options Description type ana.txt Disp

409 Option PCAP File Contents IP anaip.pcap IP traffic captured from all enabled IP sources. Ethernet anaeth.pcap Ethernet traffic captured from

41 The routing code is used to determine which interface should be used. This allows the unit to test other interfaces and adjust the VRRP priority a

410 Management – Top Talkers The router can be configured to monitor the data being transmitted and received on the various interfaces. It is able to

411 Management – Top Talkers > Trace This displays the current top talkers trace.

412 Administration – System Information This page gives an overview of the status of the router. Model This describes the model of the router. Part

413 Up Time This describes the amount of time since the router booted up. Date and Time This describes the current date and time on the router. Total

414 Administration - File Management > FLASH Directory This page displays the contents of the router’s flash file system. The unit has its own FLA

415 File The name of the file in the flash file system. Size (bytes) The size of the file in bytes. Access The access settings for the file. rw Re

416 Related CLI Commands Command Options Equivalent Web Parameter dir Displays the entire contents of the router’s flash file system. dir <fil

417 File The name of the file in web file. Size (Bytes) The size of the file in bytes. Compressed Size (Bytes) The compressed size of the file in byt

418 Administration > X.509 Certificate Management The X.509 Certificate Management pages are for loading and managing X.509 certificates and publi

419 Application The SCEP application running on the server. CA identifier The identifier for the CA server. The CA identifier to use to identify a pa

42 Entity Instance Parameter Values Equivalent Web Parameter eth n vprobebackint 0 - 32767 every n seconds when in Backup state eth n vprobemast

420 Upload Certificate or Private Keys Certificates and private key files can be uploaded from a host PC onto the router using the “Browse” and “Up

421 CA signature certificate Sometimes when you get a CA certificate, a CA signature certificate is installed on the router at the same time. You can

422 Ignore NONCE in SCEP response The parameter instructs the router to ignore the NONCE field in the SCEP response. The NONCE is primarily used to p

423 Administration > X.509 Certificate Management > Key Generation This page allows you to generate a private key. A private key must be creat

424 Key generated, saving to FLASH file privkey.pem Closing file Private key file created All tasks completed Private key files - Splitting Certifica

425 Administration – Update Firmware This page allows the user to update the router’s firmware. The router will download a zip file onto the router,

426 Model This indicates which model this router is. Firmware Version This indicates the current firmware version running on the router. Select Firm

427 Administration – Factory Default Settings This page allows you to reset the router’s configuration back to the factory defaults. The router must

428 Administration – Execute a command This page allows CLI commands to be entered via the web browser. Almost all of the CLI commands detailed in th

429 Administration – Reboot The reboot page is used to reboot the router immediately or at a scheduled time. A reboot will be performed after any FL

43 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter eth n macfilt on, off Enable MAC filtering on Ethernet interface

430 Further information on the filing system & system files The dir command described below is used to display a list of the currently stored fil

431 You may select which of the two config files is loaded when the unit is powered-up or rebooted by setting the parameter Configuration - System &g

432 DEL Delete File The del command is used to delete files from the filing system. The format is: del <filename> where <filename> is the

433 MOVE Move File The move command is used to replace one file with another whilst retaining the original filename. The format is: move <fromfile

434 XMODEM File Transfer The xmodem command is used to initiate an XMODEM file upload from the port at which the command is entered. The format is: x

435 USB Filing System Commands The USB storage device will respond to any of the standard filing system commands. For all filing system commands, the

436 Using USB devices to upgrade firmware Functionality available from firmware version 4891 onwards. The firmware of a TransPort can be upgraded usi

437 For example, to create a key you would enter the command: usbcon 0 flashkey In order to encode this key onto a file called “autoexec.bat” on the

438 Note that the final -2 is important in both cases as otherwise the command would disable the internal USB devices which could include connections

439 DR6410 HIA DSL2 2+ Router dr6410 8W NOVATEL_3G ISDN OK Example scenario: A single configuration file is required for a range of DR6410 routers, t

44 Port The TCP port that the remote router is listening on. Listen on Port The TCP port that the router will listen on for incoming bridged packet f

440 modemcc 0 asy_add 7 modemcc 0 info_asy_add 11 #End of DR6410-E0A config </DR6410-E0A> #Rest of generic config goes below here modemcc 0 ap

441 Web GUI Access via Serial Connection To access the web interface through one of the unit’s serial ports (using Windows dial-up networking) follow

442 3. Check the Don’t detect my modem, I will select it from a list option before clicking Next > to display the following dialog screen: This

443 Use the Browse button to locate the Digi_MULTI_PORT.INF file on the driver CD supplied with your unit or downloaded from the Digi support website

444 Click on the OK button if you are satisfied with the installation. Note: During the installation you may receive a warning that the driver is n

445 Creating A New Dial-Up Network Connection You now need to create a new DUN connection through which you can access your unit. If you are planning

446 4. From the Select a Device dialog, select the unit you have just installed and make sure that any other devices in the list are unchecked. Clic

447 If the connection is being created for direct local access using a COM port, you should set the phone number to 123. This number will be interce

448 Configuring the New DUN Connection The new DUN connection that you have just created may now be used to connect to the unit but before you do thi

449 Make sure that the Maximum speed (bps): value is set to 115200 and that the Enable hardware flow control box is checked. Click OK when you have

45 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter stp 0 enable on, off Enable RSTP stp 0 prio 0 – 65535 Pr

450 Make sure that all three options are unchecked before clicking OK to return to the Networking tab. In the This connection uses the following item

451 You will need a valid username and password to access the web interface. Once again, the default settings are username and password respectively.

452 SQL commands When IPSec Egroups are used with a SQL database for dynamic Eroute configuration, there are CLI commands that will help with configu

453 Learning mode - Saving entries When learning mode is used, the dynamic backup database is stored in RAM. This database will be lost if the Digi r

454 For example, to configure and use a local backup database when the main SQL database at 192.168.0.50 is offline, the configuration may look simil

455 To enable the SQL debug: sql 0 debug_opts 3 To view the debug data via the ASY 0 port: debug 0 To view the debug data via telnet: debug t To disa

456 Answering V.120 Calls V.120 is a protocol designed to provide high-speed point-to-point communication over ISDN. It provides rate adaptation and

457 Finally, you must ensure that there are no conflicts with other protocols configured to answer on other ASY ports. This can be done by disabling

458 ANSWERING ISDN CALLS Digi routers are capable of answering incoming B-channel ISDN calls with 3 main protocols. Usually several instances of thes

459 A protocol entity’s MSN parameter can be used to: • cause a protocol instance not to answer an incoming ISDN call (if the trailing digits of the

46 locking A port that would cause a switching loop, no user data is sent or received but it may go into forwarding mode if the other links in use w

460 X.25 PACKET SWITCHING Introduction X.25 is a data communications protocol that is used throughout the world for wide area networking across Pack

461 X.28 Commands Once an X.25 session layer has been established the unit switches to “PAD” mode. In this mode operation of the PAD is controlled us

462 Example CALL R,G12,NMYNUI-56512120DHello places a call to address 56512120 using reverse charging and specifying Closed User Group 12. The string

463 Network User Identity (NUI) The N facility code allows you to include your Network User Identity in the call packet. For security reasons the PAD

464 Code Verbose message 3 No route to destination 4 Channel unacceptable 6 Channel unacceptable 7 Call awarded and being delivered in an establi

465 Code Verbose message 82 Identified channel does not exist 83 A suspended call exists, but this call identity does not 84 Call identity in u

466 The clear down reason codes supported by the unit are listed in the following table: Reason Code Numeric Code Text DTE 0 by remote device OOC

467 To create a User PAD profile you must use the SET command to configure the various PAD parameters to suit your application and then use the PROF

468 When used in the format: prof nn the PROF command loads the stored profile specified by “nn”. RESET Send Reset Packet RESET is used to issue a re

469 PPP OVER ETHERNET PPP over Ethernet (PPPoE) is a means of establishing a PPP connection over the top of an Ethernet connection. The implementatio

47 Source Mask The source IP subnet mask. This parameter is optional. If configured, only packets from this IP subnet mask will have VLAN tagging app

470 IPSEC AND VPNS What is IPSec? One inherent problem with the TCP protocol used to carry data over the vast majority of LANs and the Internet is t

471 DES (64-bit key) This well-known and established protocol has historically been used extensively in the banking and financial world. It is relati

472 X.509 Certificates In the previous section, security between two points was achieved by using a “pre-shared secret” or password. Certificates pro

473 The unit maintains two lists of certificate files. The first is a list of “Certificate Authorities” or CAs. Files in this list are used to valida

474 FIREWALL SCRIPTS Introduction A “firewall” is a protection system designed to prevent access to your local area network by unauthorised “externa

475 Filter Rules The syntax for a filter rule is: [action] [in-out] [options] [tos] [proto] [dnslist] [ip-range] [inspect-state] When the firewall is

476 ICMP type value ICMP type 15 routersol The optional [icmp-code] field can also be a decimal number representing the ICMP code of the return ICMP

477 The vdscp action is very similar to the dscp action as described above in that it adjusts the DSCP value in a packet. The difference however is t

478 Example: break ppp_label on ppp 0 # insert rule processing here for packets that are not on ppp 0 break end ppp_label # insert rule processing he

479 Identifier Meaning tcp TCP packet ftp FTP packets regardless of port number icmp ICMP packet decimal number decimal number matched to protoco

48 Configuration - Network > Interfaces > Wi-Fi This is the section of the web interface that contains the configuration options required in o

480 addr = “any” | ip-addr[ “/”decnum ] [ “mask” ip-addr | “mask” hexnum ] port-comp = “port” compare port-num port-range = “port” port-num “<>

481 Address/Port Translation One further option that may be used when specifying addresses is to use address translation. The syntax for this is: src

482 Keyword Std. Port Service telnet 23 Telnet server port smtp 25 SMTP server port http 80 Web server port pop3 110 Mail server port sntp 1

483 As a further example, let us say we want to allow outward connections from a machine on 10.1.2.33 to a Telnet server. We have to define a filter

484 The following two rules are therefore equivalent: pass in break end on ppp 0 proto icmp from any to 10.1.2.0/24 icmp-type 0 pass in break end on

485 The field can be used on its own or with an optional oos (Out Of Service) parameter. To understand this better let us look at a simple example in

486 The potential for a security breach has now been virtually eliminated because even if a hacker could time his attack perfectly he would still hav

487 The inspect-state option can be used with the following ICMP packet types: ICMP Type Matching ICMP Type Echo Echo reply Timest Timestrep Infore

488 The third rule is more complex. What it does is to configure the stateful inspection engine to watch for UDP packets (with any source address) be

489 The FWLOG.TXT File When the log option is specified within a firewall script rule, an entry is created in the FWLOG.TXT pseudo-file each time an

49 Brunei Bulgaria Canada Chile China Colombia Costa Rica Croatia Cyprus Czech Republic Denmark Dominican Republic Ecuador Egypt El Salvador Estonia

490 block return-icmp echorep log body break end proto icmp icmp-type echo From REM TO LOCIFACE: ETH 0 45 IP Ver: 4 Hdr Len: 20 00 TOS: Routine Delay

491 Dest Port: 23 TCP Flags: S Further [inspect-state] Examples Here is a basic inspect-state rule with no OOS options: pass out break end on PPP 2 p

492 Keeping a route out of service and using recovery It may be that the user wants to keep the interface OOS until he is sure that a future connecti

493 Keeping a route out of service and using recovery with a list of addresses This expands on the functionality above and gives the ability to check

494 REMOTE MANAGEMENT Digi products equipped with ISDN BRIs can be accessed and controlled remotely via the ISDN network by using: • a V.120 connect

495 Using FTP TransPort routers incorporate an FTP server. FTP allows users to log on to remote hosts for the purpose of inspecting file directories,

496 Using X.25 Remote access to your unit may also be carried out over an X.25 connection. The remote unit must first have the parameter Allow CLI ac

497 AT COMMANDS D Dial The ATD command causes the unit to initiate an ISDN call. The format of the command depends on the mode of operation. When us

498 &C DCD Control The AT&C command is used to configure the way in which the unit controls the DCD signal to the terminal. There are three o

499 The AT&W command may be immediately followed by a profile number, either 0 or 1, to store the settings in the specified profile, for example:

5 Configuration – Network > IP Routing / Forwarding > Static Routes > Default Route n > Advanced ...

50 Configuration - Network > Interfaces > Wi-Fi > Global Wi-Fi settings > Wi-Fi Hotspot This section enables the configuration of the glo

500 \AT Ignore Invalid AT Commands This command is a work-around for use with terminals that generate large amounts of extraneous text. If not ignore

501 \smib Commands The at\smib command allows you to view a single standard MIB variable. To view the variable use the at\smib=<mib_name> comma

502

503 System The System hierarchy consists of the following: at\smib=mib-2.system.sysdescr This variable shows the software version information (equiva

504 For the Digi, this value is always 7 (Physical layer (21-1) + Data Link layer (22-1) + Network layer (23-1)). Interfaces The Interfaces hierarchy

505 at\smib=mib-2.interfaces.iftable.ifentry.ifmtu The size of the largest datagram (in octets) which can be sent on the interface. SNAIP and SYNC po

506 at\smib=mib-2.interfaces.iftable.ifentry.ifoutnucastpkts The total number of packets that higher-level protocols requested this interface to tran

507 at\smib=mib-2.ip.iproutetable.iprouteentry.iproutemetric1 The primary routing metric for the route. at\smib=mib-2.ip.iproutetable.iprouteentry.ip

508 “S” REGISTERS In addition to the AT commands there are a number of Special (“S”) registers. These registers contain numeric values that may repre

509 S1 Ring count Units: Rings Default: n/a Range: n/a When ADAPT detects an incoming ISDN call on an ASY port, it will print “RING” to the ASY port

51 MAC Address MAC addresses of Wi-Fi client that you wish to allow access to. A valid MAC address has the format: 11:22:33:44:55:66. When entering

510 Register S31 is used to set the speed and data format for the ASY port to which you are currently connected. The default value for ASY 0 is 0, i.

511 GENERAL SYSTEM COMMANDS The application commands described in this section are basic configuration commands that do not relate to specific types

512 REBOOT Reboot Unit The reboot command causes the unit to execute a complete hardware reset, loading and running the main image file from cold. It

513 Clearing the Analyser Trace and Event Log To clear the analyser trace, the CLI command is ana 0 anaclr To clear the event log, the CLI command is

514 TCPPERM AND TCPDIAL This section describes the operation of the tcpperm and tcpdial commands which are available only as application commands and

515 Parameter Description -i The inactivity timeout (s) after which the socket will be closed -k Keep alive packet timer (s) -l Listening port

516 SERIAL PORT CONNECTIONS Depending upon the model, the asynchronous serial ports on may be presented as DB 25 sockets, DB 9 sockets or 8-pin RJ45

517 DR6410, DR6420, DR6460, DR64x0W & WR41

518

519

52 When the Wi-Fi interface is configured to be an Access Point, in order to forward packets to and from the Wi-Fi interface it must be bridged with

520 WR44

521

522

523 TA2020 ER2110, IR2110 & MR2110

524 IR2140 & GR2140

525 GR2130

526

527

528 IR2140

529

53 If using multiple Wi-Fi interfaces at the same time then the interfaces will need to use the same security settings (except for the pre-shared key

530

531 IR2420

532

533

534 TA2020B & IR2110B

535

536

537 DR4410, DR4410i & DR4410p

538

539

54 The password of the RADIUS server. Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter wifinode 0 security none wep w

540 MW3410, MW3520 & VC5100

541

542

543 ER4420, ER4420d, ER4420i, ER4420p, HR4420, HR4420d, HR4420i, HR4420p & IR4420

544

545

546 MR4110, ER4110, HR4110, GR4110 & TR4110

547

548

549 RS-232 (V.24) Serial Cable Wiring

55 The table below details the authentication and encryption algorithms and the CLI commands needed to configure them. Network Authentication Data En

550

551

552 Configuring X.21 on Older Models Some older Sarian legacy units require an X.21 daughter card to be fitted to enable X.21 operation. There are tw

553 EMAIL TEMPLATES One of the principal features provided by the event log function is the ability to configure the unit to automatically generate a

554 If this field is present in the header, the unit will insert the current date and time into the header. The date and time are values local to the

555 e.g. <%run_cmd("ati5");%> <%run_cmd("bufs");%> <%run_cmd("msgs");%> An example template adding C

556 Certifications FCC Part 68 Declarations (for Transport DR models only) This equipment complies with Part 68 of the FCC rules and the requirements

557 OEM Advisory For OEM use, the mounting of the Transport DR in the final assembly must be made so that the Transport DR is isolated from exposure

558 GLOSSARY 0 - 9 3DES Triple Data Encryption Standard A ACCM Asynchronous Communication Channel Multiplexer ACFC Address Control Field Com

559 DHCP Dynamic Host Configuration Protocol DLSw Data-Link Switching DNS Domain Name Server DPD Dead Peer Detection DSCP Differentiat

56 Network Authentication Data Encryption CLI Commands wifinode 0 sharedkey <8..63 char key> WPA2-PSK AES wifinode 0 security wpa2psk wifinod

560 IMSI International Mobile Subscriber Identity IP Internet Protocol IPCP Internet Protocol Control Protocol IPSec Internet Protocol Se

561 NOM Network Operation Mode NUA Network User Address NUI Network User Identifier O OAM Operation, Administration and Maintenance OOS

562 R RAC Routing Area Code RACH Random Access Channel RADIUS Remote Authentication Dial-In User Service RAT Radio Access Technology RDI

563 U UBR Unspecified Bit Rate UDP User Datagram Protocol UMTS Universal Mobile Telecommunications System USB Universal Serial Bus V VLAN

564 ACKNOWLEDGEMENTS Copyright Digi International Limited 1999-2011, all rights reserved. In addition we would like to thank all those who have contr

57 Configuration - Network > Interfaces > Wi-Fi > Rogue Scan In Rogue Scan mode, the router will perform a scan of the Wi-Fi channels and wi

58 Configuration – Network > Interfaces > Mobile Wireless WAN functionality is only available on models that are fitted with a wireless WAN mod

59 e.g. “your.apn” This parameter may be used to specify an alternative service APN for use in the event that the unit cannot connect using the prima

6 Configuration – Network > Virtual Private Networking (VPN) > IPsec > IKEv2 ... 210 Configuration – Network > Virtual Private N

60 Configuration – Network > Interfaces > Mobile > Mobile Settings > Mobile Connection Settings Re-establish connection when no data is r

61 Note: If the firewall is enabled on an interface and with the absence of any firewall rules, the default action is to block ALL traffic. Related

62 MSL: Master subsidy lock (MSL) code. Obtain this from the mobile operator. PTN: Personal Telephone Number. Obtain this from the mobile operator.

63 AAA shared secret: 0xn (Hex strings must start 0x) Enter the AAA shared secret HA SPI: Enter the HA SPI AAA SPI: Enter the AAA SPI Enable Reverse

64 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter provision 0 string1 Free text field MSL provision 0 string20

65 Reset the module after n unsuccessful connection attempts The router will normally make multiple attempts to connect to the wireless network in th

66 Entity Instance Parameter Values Equivalent Web Parameter attachment attempts modemcc 0 link_retries 0 - 2147483647 Reset the module after n un

67 Entity Instance Parameter Values Equivalent Web Parameter every n minutes modemcc 0 check_reg_2 0,1,2 If registration is lost for 5 minutes 0 =

68 Send n byte pings to IP host a.b.c.d every h hrs m mins s secs If this parameter is set, the router will automatically generate a “ping” of n size

69 Use the ETH 0 IP address as the source IP address Enabling this parameter causes the unit to use the IP address of ETH0 (instead of the current IP

7 Configuration – Network > Advanced Network Settings ... 248 Configuration - Network > Advanced Networ

70 Entity Instance Parameter Values Equivalent Web Parameter ppp 1 pingip2 IP address Switch to sending pings to IP host a.b.c.d after n failures

71 Use this SMS message centre number n instead of the network default This setting is not usually required. It is the number of the SMS message cent

72 Entity Instance Parameter Values Equivalent Web Parameter 5 = HighLow 6 = HighMedium 7 = CheckPar modemcc 0 sms_cmd_sep Free text field Use as

73 Configuration – Network > Interfaces > DSL Router models incorporating a DSL broadband interface will include a configuration page having th

74 Entity Instance Parameter Values Equivalent Web Parameter apvc 0 0-255 VPI apvc 0 0-65535 VCI Configuration – Network > Interfaces &

75 This mode behaves like NAT but in addition to changing the source IP of the packet from the private host it can also change the source port number

76 This parameter is used to set the maximum amount of data that may be transferred before the unit will “lock” the interface and prevent further tra

77 Each ATM PVC may now be configured with a service category: UBR (unspecified bit rate, the default) VBR-nrt (variable bit rate, non-real-time) VB

78 Configuration – Network > Interfaces > DSL > Advanced Operational mode This parameter is used to specify the connection mode for the DSL

79 Configuration - Network > Interfaces > GRE Generic Routing Encapsulation (GRE) is a means of transporting IP packets from one device to an

8 Configuration - Network > Protocol Switch > CUD Mappings ... 303 Configuration - Network > Protocol Switc

80 Send a keepalive every s seconds When configured to a non-zero value, keepalive packets will be sent to the remote end of the tunnel and the respo

81 MTU: Maximum Transmission Unit. The value entered here will be the greatest amount of data that can be transferred in one physical packet. Default

82 Please note that under the CLI commands for GRE Tunnels you will find parameters specifically relating to RIP. Please see the Configuration – Net

83 Configuration - Network > Interfaces > ISDN > ISDN Answering This page allows you to configure the ISDN interface to receive incoming cal

84 Mask: This specifies the IP netmask for the Remote network. This can be used to create a dynamic route to the remote network whenever the ISDN int

85 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter ppp 0 name Free text field Description: ppp 0 cingnb number

86 Configuration - Network > Interfaces > ISDN > ISDN Answering > Advanced These are the advanced settings for the ISDN interface. Metric

87 if it has been up for n minutes in a day This parameter specifies the maximum time that this ISDN interface may remain connected during any one da

88 Stop data from being transmitted after n units The value in this text box specifies the total amount of data that may be transmitted by this PPP i

89 Entity Instance Parameter Values Equivalent Web Parameter interface has been up for m mins ppp n dlwarnkb 0 – 2147483647 Issue a warning after

9 Configuration – Security > RADIUS ... 347 Configuration – Security > RADIU

90 Try to negotiate a.b.c.d as the local IP address for this router If it would be useful, but not essential, to have a predefined IP address for the

91 Enable IPsec on this interface When checked, this checkbox will cause the router to encrypt traffic on this interface using the IPsec protocol. Th

92 Entity Instance Parameter Values Equivalent Web Parameter ppp n secDNS Valid IP address a.b.c.d Use the following DNS servers if not negotiated

93 Put this interface “Out of Service” when an always-on connection attempt fails Normally, always-on interfaces will not go out of service unless th

94 If the negotiation is not complete in s seconds The value in this textbox specifies the maximum time (in seconds) allowed for the PPP negotiation

95 Entity Instance Parameter Values Equivalent Web Parameter ppp n tband 0 - 4 Control when this interface can connect using Time Band n ppp n m

96 Configuration - Network > Interfaces > ISDN > LAPD > LAPD n This page allows you to configure the ISDN LAPD interfaces. Link Access Pr

97 Note: Note that if multiple PAD or IP instances are sharing this LAPD instance, the maximum transmission rates of all instances will be limited. R

98 Related CLI Commands Entity Instance Parameter Values Equivalent Web Parameter LAPD n enabled off, on Enable LAPD n LAPD n dtemode off, on

99 Dial out using numbers These four text boxes contain the telephone numbers that should be used, in sequence, to make an outgoing connection. Prefi