Digi 6330-MX, 6350-SR, 6355-SR, 6310-DX User Manual

Download

Digi 6330-MX

LTE Router

User Guide

Revision history 90002314

Revision Date Decription

A January

2019

Initial release of Digi-branded version of the Digi 6330-MX LTE Router User Guide.

Trademarks and copyright

Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States and other countries worldwide. All other trademarks mentioned in this document are the property of their respective owners.

Disclaimers

Information in this document is subject to change without notice and does not represent a commitment on the part of Digi International. Digi provides this document “as is,” without warranty of any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or merchantability for a particular purpose. Digi may make improvements and/or changes in this manual or in the product(s) and/or the program(s) described in this manual at any time.

Warranty

To view product warranty information, go to the following website:

www.digi.com/howtobuy/terms

Customer support

Gather support information: Before contacting Digi technical support for help, gather the following

information:

Product name and model Product serial number (s) Firmware version Operating system/browser (if applicable) Logs (from time of reported issue) Trace (if possible) Description of issue Steps to reproduce

Contact Digi technical support: Digi offers multiple technical support plans and service packages. Contact us at +1 952.912.3444 or visit us at www.digi.com/support.

Digi 6330-MX LTE Router User Guide

Feedback

To provide feedback on this document, email your comments to

Include the document title and part number (Digi 6330-MX LTE Router User Guide, 90002314 A) in the subject line of your email.

techcomm@digi.com

Digi 6330-MX LTE Router User Guide

Contents

Welcome

Package contents 8 Exchanging power tips 9 Hardware features 10

Bottom of Digi 6330-MX 10 Front of Digi 6330-MX 11

Back of Digi 6330-MX 11 Plug-in LTE modem 12 Device status LEDs 13 LTE status indicators 13 Signal strength indicators 14 Signal bars explained 14

Initial setup

Site survey 17 Site survey troubleshooting 17 Physical installation 18

Connecting to the site network with local power 18

Connecting to the site network with remote power 18

Remote power trouble shooting 18 Network integration 19 Default settings 19 Configuring device 20

Network managed configuration 20

Local configuration 20 Local device management 21 Define a custom APN 21

Getting started with aView

About aView 23 Viewing and editing group configurations 23 Upgrading firmware 23 Using remote commands 24 Learning more 24

Digi 6330-MX LTE Router User Guide

Dual-WAN configurations

About dual WAN configuration 26 Failover 26 Connectivity monitoring 26 Carrier Smart Select 27 Load balancing 27

Interface configuration

Changing the LAN subnet 30 Creating new interfaces 30 VLAN management 31 Configure LAN port as (VLAN) 31

Wi-Fi options

About Wi-Fi configuration 36 Client mode 36 Wi-Fi as WAN 36

Firewall settings

Port forwarding 39 Packet filtering 39

Virtual Router Redundancy Protocol (VRRP)

About VRRP 41 Configuring VRRP 41

Troubleshooting

Terminal on unit 43 Using Terminal on Unit link 44 Data usage estimates 45 AT command access 46 Resetting your device 47 Out-of-band SMS commands 47 Support report 48 Persistent system logs 48 LTE troubleshooting tree 50

Digi 6330-MX LTE Router User Guide

FAQs

Regulatory guide

End user license agreement

Accessing Admin CLI

Using the Terminal on a Unit link 61 Direct ssh access 62 Command breakdown 62

Antenna notes and solutions

Antenna terminology 64 Physical specifications 65 Antennas tested by Digi 66

Extra-small IoT paddle antennas 67

Large external MIMO antenna (outdoor rated) 68

Flat MIMO antenna #1 69

Flat MIMO antenna #2 70

Paddle extender 71

Digi 6330-MX LTE Router User Guide

Welcome

Package contents 8 Exchanging power tips 9 Hardware features 10 Plug-in LTE modem 12 Device status LEDs 13 LTE status indicators 13 Signal strength indicators 14 Signal bars explained 14

Digi 6330-MX LTE Router User Guide

Welcome Package contents

Package contents

Descriptio

Item

Digi 6330MX unit

Cellular antennas (2x)

Ethernet cable

Power supply

Digi 6330-MX LTE Router User Guide

Welcome Exchanging power tips

Descriptio

Item

PoweroverEthernet (PoE) injector

Temporar y battery pack

Mounting bracket

Exchanging power tips

The Digi 6330-MX may include four interchangeable plug tips that allow the Power Supply Unit (PSU) to operate in most countries. The PSU comes with the United States style plug installed.

To change the plug tip:

1. While holding down the PUSH button, slide the current plug tip forward.

2. Pull off the attached plug tip.

Mounting accessorie s

Digi 6330-MX LTE Router User Guide

Welcome Hardware features

3. Slide the new tip down into place until it clicks.

Note For more information regarding power-tip compatibility with global deployments, visit

www.worldstandards.eu/electricity/plugs-and-sockets/.

Hardware features

Bottom of Digi 6330-MX

1. Power socket

2. PoE Ethernet port

3. LAN Ethernet port

4. WAN Ethernet port

Digi 6330-MX LTE Router User Guide

Welcome Hardware features

Front of Digi 6330-MX

5. USB port

Back of Digi 6330-MX

6. Lock slot

7. Manual SIMselect button

8. Erase button

The SIM button is used to manually toggle between the two SIM slots included in the CM module.

The ERASE button is used to perform device reset, and it has three modes. 1) Configuration reset, 2) Full device reset, 3) Firmware reversion:

1. Single pressing the ERASE button will reset the device configurations to factory default, it will

not remove any automatically generated certificates/keys.

Digi 6330-MX LTE Router User Guide

Welcome Plug-in LTE modem

2. Two presses: After the device reboots from the first button press and by pressing the button

again before the device is connected to the internet, the device configurations and generated certificates/keys will also be removed.

3. Press and hold the ERASE button and then power on the device will boot the firmware that

was used prior to the current version.

Plug-in LTE modem

There is a label on the bottom of the Digi 6330-MX that indicates the plug-in modem IMEI number.

(The modem is referred to as the Digi 1002-CM.)

Verify the IMEI number is an exact match to that on the plug-in modem itself, as well as the label on the device's packaging.

1. Identify the SIM 1 and SIM 2 slots. If using only one SIM card, insert it into SIM 1. A second SIM

may be inserted into slot SIM 2 for an alternate wireless carrier.

2. With the antennas SMA connectors pointing outward, slide the Digi 1002-CM modem into the

Digi 6330-MX cellular extender. A clicking sound will indicate it is properly inserted.

3. Slide the white plastic plate over the antenna connectors to cover the plug-in modem as

shown; it will clip into place.

4. Affix the cellular antennas to the two connectors protruding from the device.

Note Be sure to use the plate with the cut outs for the antenna connectors.

To remove the plug-in LTE modem, pinch the two vertical sides of the white clip (as shown below) and slide out the modem.

Digi 6330-MX LTE Router User Guide

Welcome Device status LEDs

Device status LEDs

Once power has been established, your device will initialize and attempt to connect to the network. Device initialization may take 30-60 seconds. By default your Digi 6330-MX will attempt to use DHCP to establish an Internet connection either through its cellular modem or the ethernet port .

1. Indicator lights on the Wireless Strength Indicator show you the cellular network signal

strength.

2. The power LED confirms the unit is receiving electricity.

3. Cellular connectivity status is indicated by the color-coded LTE light.

4. Ethernet connections are confirmed via the light corresponding to the Digi 6330-MX port

number.

LTE status indicators

Digi 6330-MX LTE Router User Guide

Welcome Signal strength indicators

Signal strength indicators

The weighted dBm measurements are negative numbers, meaning the smaller negative values denote a larger number. So, for example, a -85 is a better signal than -90.

Note For more information regarding how signal strength is calculated and subsequently displayed via

the LED indicators, refer to Signal bars explained.

Signal bars explained

The LTE signal status bars are calculated using various algorithms based on the network type it is connected to. For 4G LTE, the RSRP, SNR, and RSSI values are all factored in to determine the reported signal strength bars. For 3G networks (including HSPA+) and 2G networks, the signal strength bars are determined by the RSSI value.

4G LTE algorithm

Determine RSRP, SNR, and RSSI values separately, using the following

RSRP > -85, rsrp_bars=5

-95 < RSRP <= -85, rsrp_bars=4

-105 < RSRP <= -95, rsrp_bars=3

-115 < RSRP <= -105, rsrp_bars=2

-199 < RSRP <= -115, if we're connected to the cellular network, rsrp_bars=1, if not rsrp_bars=0

If RSRP <= -199, then use RSSI as the value and run it through the same algorithm described above.

SNR >= 13, snr_bars=5

4.5 <= SNR < 13, snr_bars=4 1 <= SNR < 4, snr_bars=3

Digi 6330-MX LTE Router User Guide

Welcome Signal bars explained

-3 < SNR < 1, snr_bars=2

-99 < SNR <= -3, if we're connected to the cellular network, snr_bars=1, if not snr_bars=0

Once the snr_bars and rsrp_bars are determined, use the lesser of the two. That is the reported signal strength bars.

3G algorithm

Determine RSSI signal strength.

RSSI > -80, bars=5

-90 < RSSI <= -80, bars=4

-100 < RSSI <= -90, bars=3

-106 < RSSI <= -100, bars=2 RSSI <= -106, if we're connected to the cellular network, bars=1, if not bars=0

bars is then reported as the signal strength bars.

2G algorithm

Determine RSSI signal strength.

RSSI > -80, bars=5

-89 < RSSI <= -80, bars=4

-98 < RSSI <= -89, bars=3

-104 < RSSI <= -98, bars=2 RSSI <= -104, if we're connected to the cellular network, bars=1, if not bars=0

bars is then reported as the signal strength bars.

Digi 6330-MX LTE Router User Guide

Initial setup

Site survey 17 Site survey troubleshooting 17 Physical installation 18 Network integration 19 Default settings 19 Configuring device 20 Local device management 21 Define a custom APN 21

Digi 6330-MX LTE Router User Guide

Initial setup Site survey

Site survey

A cellular site survey is not necessary if your anticipated installation location is known to have strong cellular signal strength. If you are unsure of available cellular signal strength or are choosing between several installation locations, follow the below instructions to perform a site survey to determine your best possible installation location. After the optimal location has been determined, set up the Digi 6330-MX with either the power supply unit or the PoE injector cable.

1. During a site survey it is useful to use the included battery pack instead of the power supply

unit to power the Digi 6330-MX. The battery pack will power your device for approximately two hours while you perform your site survey. The battery pack is not rechargeable and should be properly disposed of after use.

2. Move the Digi 6330-MX to different locations within your site to determine the best

compromise between signal strength and installation constraints. Since cellular signal strength may fluctuate, it is important to wait at each location for 1 minute while observing the signal strength indicator on the front of the device. Minimum cellular signal strength for proper operation is 2 bars.

3. After the optimal location has been determined, remove the battery pack and connect either

the main power supply unit or PoE injector cable (see Physical installation).

Note After the optimal location has been determined, set up the Digi 6330-MX with either the power

supply unit or the PoE injector cable.

Site survey troubleshooting

If you are unable to verify a location with a strong cellular signal:

n Verify your SIM has been activated with your cellular operator.

n If cellular signal isn’t indicated on the Digi 6330-MX indoors, then take the device outdoors to

verify that your cellular network operator has coverage in your location.

n If the outdoor cellular signal strength is less than 2 bars, it may be necessary to connect using

a different cellular network operator. This requires an activated SIM from the alternate cellular network operator.

n Try the device/antennas in different orientations and away from other nearby electronic

equipment at each test location.

Note LTE requires the use of both antennas & antennas will usually give better performance

when vertical.

n Refer to Device status LEDs to use Digi 6330-MX indicator lights to aid in diagnosis.

Digi 6330-MX LTE Router User Guide

Initial setup Physical installation

Physical installation

Connecting to the site network with local power

1. Plug the power supply unit into an AC power outlet

2. Connect the PSU to the Digi 6330-MX.

Connecting to the site network with remote power

If your device needs to be positioned some distance from either the nearest AC power outlet or site network equipment, using the included passive Power-over-Ethernet (PoE) injector will simplify the installation cabling and allow for improved cellular signal strength. The POE injector cable allows the DC power and Ethernet connection to be run to the Digi 6330-MX via the Ethernet connection only.

1. Plug the power supply unit into an AC power outlet and connect to the PoE injector.

2. Connect an Ethernet cable from the RJ45 socket/jack on the PoE injector, (marked POE), to

the Ethernet port of the device.

3. Run another Ethernet cable from the PoE injector LAN port to the client device that will be

associated with the Digi 6330-MX first Ethernet port (marked 1/POE).

Remote power trouble shooting

The LED marked IN will illuminate when the PoE injector is receiving power from the PSU. The LED marked OUT lights up green when an Ethernet connection is recognized by the Digi 6330-MX.

If the IN LED is not illuminated check the following:

n Ensure that the PSU is plugged into an AC power outlet and is receiving power.

n Ensure that the PSU power plug is correctly connected to the POE injector cable power input

socket.

If the OUT LED is not illuminated after connecting to the Digi 6330-MX, verify the integrity of the Ethernet cable.

Note The PoE injector must be connected to LAN port 1 on the Digi 6330-MX for the device to properly

receive power.

Digi 6330-MX LTE Router User Guide

Initial setup Network integration

Network integration

Note The Digi 6330-MX is WiFi-Enabled; the Digi 6335-MX does not offer WiFi capabilities.

A second internet connection must be available for cellular failover.

When integrating a second Internet connection for cellular failover, connect the alternative ISP to port

3. This interface (port 3) is configured for WAN access by default though ports can be reconfigured as necessary.

Default settings

Option Default settings

Ethernet ports

n Ports 1 is configured as a LAN ports and will issue an IP address via

DHCP to client devices.

n Port 2 is configured as a WAN port and will accept a DHCP IP address

from the existing local network router.

Digi 6330-MX LTE Router User Guide

Initial setup Configuring device

Option Default settings

Interface priorities

Modem configuration

Network settings

Wi-Fi settings

WAN failover conditions

Security policies

n WAN set at a metric of 1

Note This metric sets the WAN port as the Digi 6330-MX primary

network connection.

n Modem (cellular) at a metric of 3

n SIM failover after 5 attempts

n Carrier Smart Select enabled

n LAN subnet of 192.168.2.1/24

n DHCP enabled

n Source NAT enabled (outbound traffic)

n SSID = Accelerated 6330-MX

n Password = Accelerated!

n Channel = Automatic

n Connectivity monitoring enabled for WAN

n HTTP and Ping test: 4 attempts set a 30s interval

n Packet Filtering set to block all inbound traffic

n SSH, Web Admin, and Local GUI access enabled

Configuring device

Network managed configuration

Your Digi 6330-MX has the capability to automatically sync and receive all settings from a centralized cloud management tool, aView.

The aView management portal provides the following capabilities:

n Monitoring details including signal strength, network connectivity details (RSRP, CNTI, RSRQ,

Ec/Io, and so on), SIM card details (IMEI, IMSI, ESN, and so on), data transmitted/received, and more.

n Email notifications based on connectivity, device firmware, and signal strength.

n Remote control.

n Out of band SMS recovery.

Devices using aView typically require no additional configuration or set-up.

Local configuration

If your Digi 6330-MX is not provisioned in aView, it will use a default local configuration profile which will enable basic cellular connectivity (primary or backup) to your device.

To change any default settings for a Digi 6330-MX not provisioned in aView refer to Local device

management.

Digi 6330-MX LTE Router User Guide

Initial setup Local device management

Local device management

Note Digi recommends you manage your device centrally using aView.

If you are not using the aView portal, you must manage and configure your device via the local interface.

Connect to the device using its Gateway IP address 192.168.210.1 by default.

Username: root

Password: default

Once logged in via the local web interface, click on the Configuration link. You will initially be shown a limited set of configuration options. Start by enabling local management of the device.

1. Uncheck box next to Enable central management.

2. (optional) If this is the first time the device has been configured, you will also need to update

the root user's password, under Users -> Root -> Password.

3. Click Save.

After saving the profile, the device will no longer attempt to sync with aView and a full range of available configuration options will be visible. Clicking the down arrow next to the name of a configuration option will display a pop-up providing help details about that option, including any default values.

The local management portal offers the same configuration options as aView, although changes made here will not sync with the cloud.

Note Passwords are case sensitive. (The default credentials are all lower case.)

Define a custom APN

If your device is unable to sync with aView because the device cannot establish a cellular connection without a custom APN, it will need to be managed locally before remote configuration will be possible.

To do so:

1. Connect to the device's local UI by navigating to its default gateway address in a web browser.

2. From the Configuration tab, enter the name of the APN that should be associated with this

device.

3. Optional: If the custom APN requires a specific username and password, input those into the

corresponding fields.

4. Click the Save button to finalize any changes.

Digi 6330-MX LTE Router User Guide

Getting started with aView

About aView 23 Viewing and editing group configurations 23 Upgrading firmware 23 Using remote commands 24 Learning more 24

Digi 6330-MX LTE Router User Guide

Getting started with aView About aView

About aView

The following actions are typically performed by your network administrator.

Changes can be made either at the device or group level. Select override from any given menu item to edit its inherited value, or navigate to the Digi 6330-MX group configuration page to update the config profile shared between all devices belonging to this group.

It is recommended that aView centrally manages the Digi 6330-MX devices; only resort to local management as necessary. For any questions regarding how to access aView, please contact Digi support or your purchasing partner.

Viewing and editing group configurations

To bring up a device in the configuration portal:

1. Use the search bar to filter devices by MAC address.

Note The device MAC address is on its bottom label.

2. Select the MAC address of your unit and bring up its Details page.

3. Navigate to the Configuration tab of the left-side menu.

4. Follow the Edit Group Configuration link.

5. Adjust the necessary settings, clicking the Update button to apply any changes.

Devices will automatically apply configuration updates after the next daily sync (1am UTC by default). Refer to Using remote commands for details on how to apply changes sooner.

Upgrading firmware

WARNING! When the Digi 6330-MX is updating firmware, its LEDs will flash red and yellow.

Do NOT remove power from the device during this process.

To view or select new firmware:

1. Navigate to the Configuration tab of the left-side menu.

2. Follow the Edit Group Configuration link.

3. Locate the Firmware pull-down menu.

4. Select on the intended version and wait for the settings to finish loading.

Digi 6330-MX LTE Router User Guide

Getting started with aView Using remote commands

5. Click on the Update button at the bottom of the page to confirm firmware selection.

Using remote commands

aView maintains a connection to all online client devices registered with the service.

Using this tunnel, network administrators can send a specific set of remote commands that will be received immediately as opposed to waiting to check in and apply any changes propagated from the cloud. The following remote commands are available:

n Check Status

n Check Signal Strength

n Perform Speed Test

n ARPing Attached Device

n Send Wake-on-LAN to Attached Device

n Check Configuration

n Reboot

Remote commands must be sent to each device in question. To do so, browse to the Device Details screen and select the desired option from the Commands pull-down.

Note Select the Check Configuration menu option to update a device immediately.

Learning more

Details on using aView can be found in the aView User Guide.

Digi 6330-MX LTE Router User Guide

Dual-WAN configurations

About dual WAN configuration 26 Failover 26 Connectivity monitoring 26 Carrier Smart Select 27 Load balancing 27

Digi 6330-MX LTE Router User Guide

Dual-WAN configurations About dual WAN configuration

About dual WAN configuration

The Digi 6330-MX is a Dual-WAN device, meaning it has two interfaces capable of providing Internet access by default -- its WAN Ethernet port and the plug-in cellular modem -- though additional LAN ports may even be reconfigured for supplemental Internet access. Active WAN connections can provide both failover and load balancing per user-defined parameters.

Failover

By default, this allows the plug-in modem to serve as a secondary (backup) WAN that becomes the active connection once the Ethernet WAN port is detected as offline. The Digi 6330-MX then monitors the offline connection to see when it comes back online, which prompts the backup interface to once again become inactive.

Each interface has a Metric value associated with its IPv4 configuration. The example on the left of this page is associated with the WAN interface, which will take priority over all other interfaces by default (as seen by its Metric value of 1).

Connectivity monitoring

Note Both tests are set via the default group config in aView—it is not built into the firmware.

Devices that have not synced with aView will not have these tests enabled by default.

To properly trigger a failover (or failback) scenario, test parameters must be defined to monitor the primary connection. Both a Ping and HTTP test come built into the Digi 6330-MX WAN port configuration by default. After 4 failed attempts, the secondary connection will take over Internet access for the Digi 6330-MX. Similarly, the monitoring tests trigger the restoration of the primary WAN connection when they detect that the interface with a higher metric has come back up.

Note Best practices dictate that redundant tests (with divergent failure conditions) will be the best

way to ensure proper connectivity monitoring and active recovery. With only a single test type, false positives could be reported. Two different tests are recommended to prevent false positives.

Digi 6330-MX LTE Router User Guide

Dual-WAN configurations Carrier Smart Select

Carrier Smart Select

Note If one of the SIM cards requires a custom or unique APN, you will need to add this APN into the

Digi 6330-MX config under the Modem > APN option.

By default, the Digi 6330-MX plug-in modem is set up for automatic SIM selection. That is, if the Digi 6330-MX is unable to connect with the SIM in slot 1, after a specified number of failures (5 by default) the Digi 6330-MX will automatically switch to use the SIM in slot 2. For this setup, you will need two SIM cards enabled, provisioned, and installed in the plug-in modem's SIM slots. The two cards can be from the same carrier or from different carriers.

Load balancing

Traffic can be balanced between the Ethernet and Cellular WAN interfaces. This feature, often referred to as load balancing, uses an interface's Weight value -- this is defined under the IPv4 expandable menu. The interfaces being balanced must share the same Metric value.

Digi 6330-MX LTE Router User Guide

Dual-WAN configurations Load balancing

It is important to note that the two SIM slots cannot be leveraged simultaneously for load balancing; the load must be shared between the cellular modem and the wireless internet connection. The Weight of an interface establishes its proportional contribution relative to the weight of its complimentary interface.

For example, setting the Ethernet WAN to a weight of 20 and the Cellular WAN to a weight of 5 establishes a 4:1 ratio—the Ethernet interface will handle 4 times the amount of data with this configuration.

Digi 6330-MX LTE Router User Guide

Interface configuration

Changing the LAN subnet 30 Creating new interfaces 30 VLAN management 31 Configure LAN port as (VLAN) 31

Digi 6330-MX LTE Router User Guide

Interface configuration Changing the LAN subnet

Changing the LAN subnet

The default subnet—192.168.2/24—is set in the IPv4 Address field of the LAN interface, and can be adjusted to any range of private IPs by completing the following steps:

1. Expand the configuration page to Network > Interfaces.

2. Select the LAN interface that needs to be adjusted and expand its IPv4 entry.

3. The Address field contains the range of IPs available for assignment.

Note The subnet mask must also be specified.

Changes made to the IPv4 Address must also be updated in the DHCP server entry to preserve functionality.

Creating new interfaces

Additional interfaces may be configured to further differentiate port functionality:

Digi 6330-MX LTE Router User Guide

Interface configuration VLAN management

1. Expand the configuration page to Network > Interfaces.

2. Name the new Interface using the text field at the bottom of the list, clicking the Add button

to continue.

3. Ensure the appropriate settings are entered into the new collapsible section generated for the

interface:

n The Enable checkbox must remain selected.

n Interface Type will stay Ethernet.

n The default Zone, "Any," suffices unless security policies necessitate a different

selection.

n Device establishes which port(s) are assigned to the new interface.

n Expand the IPv4 category to specify the Interface type and the desired address range.

n Additional settings for DNS and DHCP configuration can be adjusted as necessary.

n Refer to Failover for information on Connectivity Monitoring.

Note This assumes a static (private) IP is desired for the interface.

VLAN management

Before creating a Virtual LAN route for the Digi 6330-MX, be sure that its corresponding LAN interface has been configured (see Creating new interfaces).

The interface's Device must be set to only include the port(s) that will be utilizing the VLAN designation. Use the pull-down menu to specify an individual Ethernet LAN port, or choose the "Bridge: LAN" option to assign all four ports.

Once the interface is created, it will be selectable as a Device in the VLAN's pulldown menu.

Separate VLANs by assigning each a unique ID number.

Note For guidance on how to create bridges with less than four ports, see Configure LAN port as

(VLAN).

Configure LAN port as (VLAN)

Goal

To set up a VLAN to separate network traffic on one LAN port from all other LAN interfaces.

Digi 6330-MX LTE Router User Guide

Interface configuration Configure LAN port as (VLAN)

Setup

This example assumes the LAN ports are operating with default settings that provide DHCP connectivity to devices connected to the Digi 6330-MX LAN ports. See Default settings.

To set up the VLAN, you need the following:

n IP address range for the VLAN subnet.

n LAN Ethernet port or SSID you want to separate onto the VLAN interface.

Sample

The following diagram shows a sample setup of a 6350-SR with LAN port 4 separated from the other LAN ports and placed in a VLAN with ID #101.

VLAN 101 is configured to hand out IP addresses within the 192.168.101.100 - 192.168.101.250 range, with a gateway IP of 192.168.101.1/24.

Sample configuration

Open the configuration profile for the 6350-SR and make the following changes.

Under Network -> Virtual LAN:

1. Create a new entry named test.

2. Select the desired LAN interface under the Device drop-down.

3. Type in the desired VLAN ID number in the IDfield.

Under Network -> Interfaces:

Digi 6330-MX LTE Router User Guide

Interface configuration Configure LAN port as (VLAN)

1. Create a new entry named vlan##, where ##is the number of the VLAN ID.

2. Select VLAN: test in the Devicedrop-down.

3. Type in the desired IP address and subnet in the Addressfield.

4. Under DHCP server, ensure the Enabledoption is checked and the DHCP lease range

startandendvalues match the desired DHCP range.

Under Network -> Bridges -> LAN -> Devices:

n Remove Ethernet: LAN4 from the LAN bridge.

Digi 6330-MX LTE Router User Guide

Interface configuration Configure LAN port as (VLAN)

Digi 6330-MX LTE Router User Guide

Wi-Fi options

Note The following information applies only to the Digi 6330-MX. the Digi 6335-MX does not offer Wi-Fi

capabilities.

About Wi-Fi configuration 36 Client mode 36 Wi-Fi as WAN 36

Digi 6330-MX LTE Router User Guide

Wi-Fi options About Wi-Fi configuration

About Wi-Fi configuration

Per the default configuration profile, there will be one available SSID.

WiFi-enabled Digi 6330-MXs can broadcast up to a total of 8 WLAN SSIDs simultaneously. To create additional SSIDs or to change the configuration of existing ones:

1. Navigate to the device (or group) Configuration page.

2. Expand Network > WiFi.

3. Verify that Enabled is selected and adjust the Channel and Beacon interval if necessary.

4. Expand the Access Points menu to view existing SSIDs or create new ones.

5. Each WLAN AP is listed as its own collapsible menu featuring:

n Enabled status box

n SSID

n SSID Broadcast

n Encryption type

n Pre-shared key

6. To create a new AP, specify its name in the corresponding text field and click the Add button.

Client mode

In addition to serving as an independent WLAN Access Point, the Digi 6330-MX Wi-Fi can broadcast in Client Mode to serve as a supplemental AP to relay Wi-Fi originating from another Wi-Fi-enabled router by entering that network SSID and pre-shared key.

Wi-Fi as WAN

Client Mode can also be used to leverage the Digi 6330-MX Wi-Fi to relay Internet access (WAN) provided by another router's wireless AP.

Before configuring the Digi 6330-MX for Wi-Fi-as-WAN (WaW) Client Mode, identify the SSID that the Digi 6330-MX should connect to, including its broadcasting channel, authentication details for the SSID, and interface prioritization for the WaW connection (that is, should it take precedence over the WAN Ethernet port).

1. Under Network > WiFi > Client mode connections, create a new entry named testclient. The

name can be different if desired.

2. Enter the Channel and authentication credentials for the SSID of the secondary wireless

router.

3. Under Network > Interfaces, create a new entry named WiFiasWAN.

Note For details on how to create new interfaces, see Creating new interfaces.

4. Set the Zone for the new interface to External.

5. Set the Device for the new interface to WLAN Client: testclient.

6. Under IPv4, set the Interface type to DHCP address. NOTE:

Note This will trigger the Digi 6330-MX to obtain a DHCP connection to the secondary wireless

router's SSID network.

Digi 6330-MX LTE Router User Guide

Wi-Fi options Wi-Fi as WAN

7. Click Save.

Digi 6330-MX LTE Router User Guide

Firewall settings

The Digi 6330-MX can function as a stateful firewall. Firewall configuration options leverage two key security measures:

Port forwarding 39 Packet filtering 39

Digi 6330-MX LTE Router User Guide

Firewall settings Port forwarding

Port forwarding

Remote computers can access applications or services hosted on a local network with the Digi 6330MX by setting up port forwarding. It provides mapping instructions that direct incomming traffic to the proper device on a LAN.

To configure port forwarding:

1. Under Firewall > Port Forwarding, click the Add button.

2. Select the relevant LAN Interface.

Note Select LAN unless custom interfaces were configured.

3. The IP version and Protocol can be left at their default values unless changes are required by

the request being serviced by this port-forwarding configuration.

4. Specify the public-facing Port for remote access.

5. In the To fields, specify the port and IP address associated with the intended destination

device.

6. If necessary, expand the Access Control List to create a white list that determines which

devices are authorized to leverage this particular forwarding route.

Note Both individual IP addresses and entire zones may be white listed.

Packet filtering

Enabled by default, packet filtering will monitor traffic going to and from the Digi 6330-MX. The predefined settings are intended to block unauthorized inbound traffic while providing an unrestricted flow of data from LAN to WAN.

Digi 6330-MX LTE Router User Guide

Virtual Router Redundancy Protocol (VRRP)

About VRRP 41 Configuring VRRP 41

Digi 6330-MX LTE Router User Guide

Virtual Router Redundancy Protocol (VRRP) About VRRP

About VRRP

Virtual Router Redundancy Protocol (VRRP) is a networking protocol used to configure devices as a hot standby for a primary router, where a backup device will only start routing traffic after the network detects that the primary device is offline (using parameters set by VRRP).

Configuring VRRP

To link multiple devices together, each must be configured with the same Router ID within aView. Refer to the following step-by-step guidance for more information:

1. Expand Network > VRRP.

2. In the Add VRRP Instance text field, enter a name for the entry.

3. Enable the instance.

4. Specify an Interface—this will typically be set to LAN, meaning all four LAN ports.

5. Set the Router ID to match the number designated for this instance.

6. Priority establishes the order in which backup devices step in for offline routers.

7. The Password is a shared string of characters that must be entered for each device to

authorize its integration into the VRRP instance.

Note A higher number establishes higher priority. Refer to the Creating new interfaces for more info

on custom interfaces.

Digi 6330-MX LTE Router User Guide

Troubleshooting

Digi 6330-MX LTE Router User Guide

Troubleshooting Terminal on unit

Terminal on unit

Goal

To access the console of the Digi 6330-MX using the Terminal on Unit link presented in aView for the device.

Note Terminal on Unit leverages the management tunnel established between the Digi 6330-MX and

aView. For details on the monthly data usage for this access, see Data usage estimates.

Setup

For this setup, you need access to aView and a Digi 6330-MX online and syncing with aView. If you see the Digi 6330-MX listed as up (green status) in aView, you are good to go.

Details

Note aView uses the IPSec tunnel the Digi 6330-MX establishes to remote.accns.com to provide

terminal access to the console of the Digi 6330-MX. For details on the monthly data usage for this access, see Data usage estimates.

The following configuration sets up the Digi 6330-MX to report its IPSec tunnel local IP address as the management IP that aView can then use to access its console.

Open the configuration profile for the Digi 6330-MX. Under IPSec -> aView, set the Management priority to 10. This gives the aView IPSec tunnel the highest priority management interface, which it then reports to aView as the IP that can be used to access its console.

Digi 6330-MX LTE Router User Guide

Troubleshooting Using Terminal on Unit link

Once you apply the new configuration to the Digi 6330-MX, reboot the device so it rebuilds the IPSec tunnel and reports the new IPSec local IP address to aView. You can verify that aView is using the IPSec local IP as the management IP by looking at the Uplink IP address on the Device Details tab. This value should be set to a 172.x.x.x IP address.

Using Terminal on Unit link

Once the correct management IP is reported from the Digi 6330-MX to aView, click the Terminal on Unit to open a page on aView that provides access to the Digi 6330-MX console. Default login

credentials are below.

User: root

Password: default

Digi 6330-MX LTE Router User Guide

Troubleshooting Data usage estimates

Note There is a known issue where the predictive/auto-correct feature of the Google keyboard

renders it incompatible with the Terminal page. If you access the above Terminal with an Android phone or tablet, you will need to use a keyboard other than the native Google keyboard.

Data usage estimates

The Digi 6330-MX is sensitive to the data usage on a customer's wireless data plan. Careful consideration was applied to add reporting, alerting, and remote control features through the best-ofbreed aView cloud management system. Please note that even though the service was designed with standard reporting/ control intervals these values can be adjusted downward to obtain near-zero data utilization or, conversely, remote services can be tuned up for more aggressive monitoring at the expense of additional data utilization. The current aView architecture requires that all devices have a minimum of 1 publicly reachable IP address to access cloud-based features (see below).

Note These values are estimates to be used for planning purposes—the actual carrier data

measurement may vary.

Data Consumption for aView Services

Service/function Status/interval Usage Notes

Cloud-based Reporting/ Configuration

Remote Control (IPSec tunnel)

Note For deployments with heightened sensitivity toward data usage, the IPSec remote control

tunnel can be disabled. Cloud-based reporting and configuration can still be accomplished via SMS commands that are not subject usage metering on mobile data plans. Please consult with support for more information before leveraging this approach, "Option 2" in the table below.

Note Charges for SMS messages may apply. Please consult your cellular carrier for billing details.

Service/function Status/interval Usage Notes

Option 2 (Contact Digi for help) IPSec disabled 2MB Uses SMS on demand

Standard (every 30 min) 3MB (per

month)

Central management is enabled by default

25MB (per month)

Includes one startup sequence

Minimum keep-alive traffic

Itemized Breakdown of Services via aView

Digi 6330-MX LTE Router User Guide

Troubleshooting AT command access

Protocol/port

Service/function Status/interval Usage Notes

used

Syslog check-in Every 30 minutes 1KB Used for reporting and

Configuration check-in

Boot-up sequence

Device firmware upgrade

Modem firmware upgrade

Remote control tunnel

Once nightly -- 1am (UTC) 12KB Recommended for

Each device reboot 24KB Used for reporting and

As needed (~8 releases per year)

As needed (less frequent than device firmware updates)

Always-on, if enabled 25MB

AT command access

To gain AT command access through the Digi 6330-MX, the tester must have a PC/laptop connected to one of the LAN Ethernet ports of the Digi 6330-MX. They should receive an IP address via DHCP from the Digi 6330-MX in the 192.168.0.100-250 range. If they do not receive a DHCP address, they can configure a static IP on the PC/laptop of 192.168.0.2/24 with a gateway of 192.168.0.1

alerts

remote management

10MB Updates device firmware

upon new release

60MB Updates firmware on the

embedded cellular modem

Minimum keep-alive per month

traffic

UDP 514 (syslog)

TCP 443 (HTTPS)

UDP 123 (NTP)

UDP 514

(syslog)

TCP 443 (HTTPS)

UDP 500 and 4500 (IPSec)

1. Open a SSH session to the Digi 6330-MX. Default login credentials are:

username: root

password: default

2. Select a to access the Admin CLI. If the SSH session immediately gives you the # prompt, you are already in the Admin CLI.

3. Type atcmd and press Enter. Type n if you want exclusive access. This allows you to send AT commands to the device while still allowing the device to connect, disconnect, and/or reconnect to the Sprint network.

Example AT command access below:

$ ssh root@192.168.0.1 Password:

Access selection menu:

a: Admin CLI s: Shell q: Quit

Select access or quit [admin] : a

Connecting now, 'exit' to disconnect from Admin CLI ...

Digi 6330-MX LTE Router User Guide

Troubleshooting Resetting your device

# atcmd

Do you want exclusive access to the modem? (y/n) [y]: n Starting terminal access to modem AT commands. Note that the modem is still in operation.

To quit enter '~.' ('~~.' if using an ssh client) and press ENTER

Connected ati Manufacturer: Sierra Wireless, Incorporated Model: MC7455 Revision: SWI9X30C_02.24.03.00 r6978 CARMD-EV-FRMWR2 2017/03/02 13:36:45 MEID: 35907206045169 IMEI: 359072060451693 IMEI SV: 9 FSN: LQ650551070110 +GCAP: +CGSM OK

Resetting your device

Note While the settings are reset, the device's firmware version remains the same.

To reset the device to factory default settings, press and release the ERASE switch once on the rear of the device when the device is switched on. This will erase all device-specific settings (excluding any automatically generated keys/certificates) to their original state, and it will automatically reboot.

Out-of-band SMS commands

Note This feature is only available via aView.

A set of emergency remote commands can be sent via SMS to the device to provide Out-Of Band (OOB) recovery for the device. These SMS commands allow you to perform actions such as factory resets, reboot the device, and restore to the backup firmware partition, all without requiring the device to have an active IP (WAN) connection. Similar to the standard remote commands, these can be used to provide control over the device without any on-site interaction. To utilize this feature, SMS must be enabled for the SIM card used by the device. The complete list of SMS commands is defined in the aView User Manual.

Digi 6330-MX LTE Router User Guide

Troubleshooting Support report

Support report

Often times, it is beneficial to download a support report from the device to provide to technical support. This report is a zipfile that contains all of the current details for the device's state and a full record of the system logs from the device.

To obtain a support report from the device, login to the device's local web UI. To access the local web UI, the user must have a PC/laptop connected to one of the LAN Ethernet ports of the Digi 6330-MX. They should receive an IP address via DHCP from the Digi 6330-MX in the 192.168.2.100-250 range. If they do not receive a DHCP address, they can configure a static IP on the PC/laptop of

192.168.210.2/24 with a gateway of 192.168.210.1. Once the PC/laptop has an IP address, open the following URL in a browser on the PC:

https://192.168.210.1

Next, go to the System page, then click the Download Report button at the bottom of the page.

Persistent system logs

As of December 6th, 2017, the default behavior for all Digi 6330-MXs is to have persistent system logs disabled. Information logged on the device will be erased when the Digi 6330-MX is powered off or rebooted.

Logging can be configured to persist between power cycles by enabling the Preserve System Logs checkbox nested under the System > Log menu option.

Note Logging across reboots should be enabled only to debug issues and then disabled ASAP to avoid

unnecessary wear to the flash memory.

Digi 6330-MX LTE Router User Guide

Troubleshooting Persistent system logs

Digi 6330-MX LTE Router User Guide

Troubleshooting LTE troubleshooting tree

LTE troubleshooting tree

Digi 6330-MX LTE Router User Guide

Alternating Red/Yellow

Firmware Update in Progress: DO NOT POWER OFF DEVICE!

Troubleshooting LTE troubleshooting tree

Solid Yellow

Digi 6330-MX is starting up.

Flashing Yellow

Digi 6330-MX is trying to setup cellular modem. Wait up to 2 minutes to allow the process to finish. If status LED continues to flash yellow after several minutes, continue with below step(s):

1. Login to web UI. Open Configuration page. Verify the Modem -> Enable check box is selected.

2. If the Digi 6330-MX continues to flash yellow for more than 5 minutes, consult the troubleshooting steps for a flashing white status LED.

Digi 6330-MX LTE Router User Guide

Troubleshooting LTE troubleshooting tree

Flashing White

Ethernet link detected, connection is in progress. Wait up to 2 minutes. If LED status continues, determine the number of Signal Strength LEDs:

None

n Power off the Digi 6330-MX, swap the antennas on the back of

the Digi 6330-MX, and power on the Digi 6330-MX. If this resolves the connectivity and there are two or more bars of signal strength, this may indicate that one of the antennas is faulty. You can continue to use the Digi 6330-MX, but we suggest that you eventually order a replacement set of antennas to improve signal strength even further.

n If swapping the antennas did not resolve the issue, verify the

SIM card is inserted properly. Power cycle the Digi 6330-MX after re-insterting the SIM card. Wait 30 to 60 seconds. If the problem persists, the unit cannot detect the SIM and the Digi 6330-MX may need to be replaced.

One

Relocate the Digi 6330-MX to an area with better signal reception.

Two or more

Verify that the embedded cellular modem firmware matches the carrier type. Check the SIM card and the Modem section of the config to verify both are set up with the proper APN. Login to the web UI. Open the Status page and click on the Cellular Details Tab. Are the Provider and ICCID values listed?

n If the proper Carrier is not listed, contact the cellular provider to

verify SIM card activation.

n Try pressing the Erase button (no longer than half a second) to

restore default settings. If the SIM card requires a custom APN to connect, you will have to manually reconfigure that on the Digi 6330-MX

n If resetting the configuration did not resolve the issue, check if

the SIM card is provisioned properly. If it is, then there may not be coverage for the desired network in your area.

n Try moving the Digi 6330-MX to a different location or try using a

different cellular provider's SIM card.

Yes

Digi 6330-MX LTE Router User Guide

Troubleshooting LTE troubleshooting tree

n Power off the Digi 6330-MX, swap the antennas on the back of

n If swapping the antennas did not resolve the issue, verify the

Flashing Blue or Green

Digi 6330-MX is connected to the 3G/LTE network, but doesn't see anything connected to its Ethernet port. Check the Ethernet port, verify the client device (router, laptop, etc.) is connected via CAT5/6 to the Digi 6330-MX, and the Ethernet port on the client device is enabled

Digi 6330-MX LTE Router User Guide

Troubleshooting LTE troubleshooting tree

Solid Green

3G connectivity confirmed Should the device be on 4G?

Yes

n Verify 4G coverage is available in the area.

n Check embedded cellular modem firmware. Does it match the

type of carrier?

n Check Modem section of Digi 6330-MX config. Verify Access

Technology is set to Auto.

n Contact carrier to verify SIM card supports 4G LTE. SIM card may

need a custom APN for 4G.

Test for Internet access on the device connected to the Digi 6330-MX.

Online Does the device has a usable IP Address?

n If no, see if the client device is expecting a publicly reachable

and/or static IP address, check the SIM card and the Modem section of the Digi 6330-MX configuration to verify both are set up with the proper APN.

Are there any ports that are required but cannot be accessed on the client device? Also check if the IP Passthrough has been enabled.

n If yes, check the Services section of the configuration. Verify

none of the services are reserving the ports needed to access the client device.

n If no, check the Firewall -> Port Forwarding section of the

configuration. Verify that the desired ports are forwarded to the appropriate IP addresses.

Offline Is the client device receiving a DHCP address from the Digi 6330MX?

n If yes, check if the IP Passthrough has been enabled.

l If yes, are there any ports that are required but cannot be

accessed on the client device? Also check if the IP Passthrough has been enabled.

If yes, check the Services section of the configuration. Verify none of the services are reserving the ports needed to access the client device.

If no, check the Firewall -> Port Forwarding section of the configuration. Verify that the desired ports are forwarded to the appropriate IP addresses.

l If no, see if the client device is expecting a publicly reachable

and/or static IP address, check the SIM card and the Modem section of the configuration to verify both are set up with the proper APN.

Digi 6330-MX LTE Router User Guide

Troubleshooting LTE troubleshooting tree

n If no, verify Ethernet ports for connection status and check

Cat5/ Cat6 cable integrity. Is IP Passthrough mode enabled?

l If yes, clear DHCP leases by waiting 5 minutes, then reboot

the Digi 6330-MX. If clearing DHCP leases didn't fix issue, check that the passthrough IP works with a /30 subnet. If not, contact carrier to change IP on SIM card (may just need a reboot if using a standard APN).

l If no, verify the Network > Interfaces > LAN section of the

config is setup with a static IP and the DHCP server is enabled.

Online, but with VPN issues

Reduce the Modem > MTU option in the configuration to 1400. Alternately, if you have control of the router connected to the Ethernet port of the Digi 6330-MX, change that router's WAN MTU seting to 1400.

Briefly online

1. Disconnect Ethernet cable from the Digi 6330-MX; power cycle. Wait for the Digi 6330-MX to fully connect, then reconnect Ethernet port.

2. Verify the Digi 6330-MX is using the correct APN (e.g. on Verizon you can connect with the standard vzwinternet APN, but the SIM card is meant to connect with a static APN such as ne01.vzwstatic)

3. If that didn't fix the issue, try removing the 192.168.210.254 IP address from the Network > Interfaces > Default IP > Default Gateway option in the config.

4. If that didn't fix the issue, try disabling any/all connectivity tests in the configuration profile (labelled "ping monitoring" or "connectivity monitoring" in the config).

5. If that didn't fix the issue, contact the cellular provider to check the SIM card's activation and provisioning status.

Digi 6330-MX LTE Router User Guide

Troubleshooting LTE troubleshooting tree

Solid Blue

4G connectivity confirmed Test for Internet access on the device connected to the Digi 6330-MX.