DIGI EZ 2 Connect User Guide

The LTS firmware version 25.2 offers increased stability and
security by aligning with the Linux kernel LTS firmware. Regular
security updates and bug fixes ensure reliability and performance
improvements.

2. Subscriptions

Previously known as Premium features, Subscriptions describe the
services enrolled in and associated payments more accurately.

3. IPv6 Static Address Assignment

When using IPv6, assign a static address to a network interface
for consistent device identification and connectivity on the
network.

4. Improved Connectivity to Digi Remote Manager

Enhanced disconnect/reconnect functionality minimizes device
downtime during cellular modem firmware upgrades over the air
(OTA).

5. Regional Cellular Modem Firmware Bundles

Select specific firmware bundles for modems like Sierra EM9191
(Asia PAC) and EM7690 (worldwide) to accommodate carrier-specific
firmware images.

6. FIPS Mode Support for IPsec

Easily meet federal security standards with IPsec support in
FIPS mode, ensuring secure data transmission.

FAQ

Q: How can I update the firmware on my Digi Connect EZ 2?

A: To update the firmware, visit the digi.com website for patch
releases and follow the provided instructions for downloading and
installing updates.

Q: Can I revert back to a previous firmware version?

A: It is recommended to consult the official user guide or
contact customer support for guidance on reverting to a previous
firmware version and any associated risks.

“`

View Fullscreen

Connect EZ 2
User Guide
Firmware version 25.2

Revision history–90002458

Revisio n
U

Date
April 2025

Description
Release of Digi Connect EZ 2 LTS firmware version 25.2.
n We’ve adopted a Long-Term Support (LTS) release strategy. What does this mean for you?
l Increased stability and security. Our LTS firmware is aligned with the Linux kernel LTS firmware, which means it is based on a stable and long-term supported version of the Linux kernel. This allows for regular security updates and bug fixes ensuring that the firmware benefits from the reliability and performance improvements provided by the LTS kernel.
Note To see how we plan to respond to known security vulnerabilities in products that use the DAL OS firmware, see DAL Vulnerability Patch Policy on the digi.com website.
l Fewer releases. Plan your updates without the pressure of a quarterly timebox. This is the first release of the LTS firmware. Patch releases for security or bug fixes will be released and announced throughout the year. Feature updates will be released and announced as they are ready.
n “Premium features” has been renamed to “Subscriptions”. The word Subscriptions more accurately describes the services in which you have enrolled and the ongoing payments associated with them.
n Assign a static address to a network interface on a device with IPv6 enabled. When using IPv6, you can now assign a static address to a network interface on your device, ensuring consistent identification and connectivity of devices on the network.
n Improved disconnect/reconnect to Digi Remote Manager for a device when upgrading cellular modem firmware over the air (OTA). Device downtime is minimized so service is minimally interrupted.
n New banner notification in the Web UI and CLI. A new banner notice has been added to the web UI and CLI to indicate when the configuration of a device is being managed by a template in Digi Remote Manager. This is useful so that configuration changes to that device are not made locally. If there are issues with the device, then it is important to know that the configuration is enforced remotely and any changes you may make to the device for testing purposes or fixes may be overwritten by the template.

Digi Connect EZ 2 User Guide

Revisio

Date

Description
n Regional cellular modem firmware bundles are now available. Certain modems – Sierra EM9191 (Asia PAC) and EM7690 (worldwide) have a lot of carrier-specific firmware images. Due to size constraints of the file system on the Connect EZ 2, not all of these images could be included. Now you can choose the firmware bundle for your specific cellular modem.
n IPsec is now supported in FIPS mode. It’s now easier for you to meet the federal security standards required by FIPS and keep sensitive data safe during transmission.
Tip For more information about this release, see the digi.com blog post, New Features in Digi Remote Manager and Our First LTS Firmware Release for DAL OS.

Additional updates

n Updated serial port pinout table: Serial connector pinout n Documented External Storage feature: External storage n Updated list of serial port baud rate options: Default serial port
configurat ion n Added the DAL OS Vulnerability Patch Policy n Updated the serial port LED description: Front panel and LEDs

March Release of Digi Navigator 2.0.

2025

n Step 5: Configure RealPort from the Digi Navigator

n Configure RealPort mode using the Digi Navigator

February Release of Digi Connect EZ 2 firmware version 24.12.

2025

n New user guide – There’s a new Modem firmware user guide! With

added functionality in DAL OS 24.12.x firmware and Remote Manager,

there’s now even more ways to upgrade the modems in or attached to

your Digi routers. Make sure to review the Before you begin topic too

because the options available to you depend on the DAL OS firmware

version you are running.

n Additional query state categories added – Are you running DAL OS firmware 24.9 or newer on your devices? See the new categories added to the device-specific query state view in Remote Manager. Monitor device status in real time for Watchdog, Location, DHCP leases, SureLink, and many more groups!

Note The new query state metrics in the updated view do not replace datastream metrics. However, datastream metrics will be phased out later this year as we enhance query state metrics with additional

Digi Connect EZ 2 User Guide

Revisio

Date

Description
cat egories.
How you see this new information depends on whether you using the legacy or new device details view.
l Click the Details tab and then select a group (for example, Ethernet) to see its status. The New Device Details toggle key must be on to see this view.

l Click the State tab and then select a group (for example, Ethernet) to see its status. The New Device Details toggle key must be off to see this view.

n Add or remove custom default configuration files using the system custom-default-config CLI command.
Note This new CLI command replaces the system backup / type custom-defaults and system backup / remove custom-defaults.
Tip For more information about this release, see the blog post, Digi Software Enhancements for DAL OS 24.12 Firmware and Digi Remote Manager.

Additional changes

n Added and updated the SNMP configuration fields for enabling readonly and read/write access to SNMP versions 1 and 2c: Configure Simple Network Management Protocol (SNMP)
n Updated Use the RESET button to reset your device to the factory defaul t s

January Updated feature

2025

n Use the SIM switch button: Switch the SIM card used for cellular

network connection

Novemb Release of Digi Connect EZ 2 LTS firmware version 25.2.

er 2024

n We’ve adopted a Long-Term Support (LTS) release strategy. What does

Digi Connect EZ 2 User Guide

Revisio

Date

Description
this mean for you?
l Increased stability and security. Our LTS firmware is aligned with the Linux kernel LTS firmware, which means it is based on a stable and long-term supported version of the Linux kernel. This allows for regular security updates and bug fixes ensuring that the firmware benefits from the reliability and performance improvements provided by the LTS kernel.
Note To see how we plan to respond to known security vulnerabilities in products that use the DAL OS firmware, see DAL Vulnerability Patch Policy on the digi.com website.
l Fewer releases. Plan your updates without the pressure of a quarterly timebox. This is the first release of the LTS firmware. Patch releases for security or bug fixes will be released and announced throughout the year. Feature updates will be released and announced as they are ready.
n “Premium features” has been renamed to “Subscriptions”. The word Subscriptions more accurately describes the services in which you have enrolled and the ongoing payments associated with them.
n Assign a static address to a network interface on a device with IPv6 enabled. When using IPv6, you can now assign a static address to a network interface on your device, ensuring consistent identification and connectivity of devices on the network.
n Improved disconnect/reconnect to Digi Remote Manager for a device when upgrading cellular modem firmware over the air (OTA). Device downtime is minimized so service is minimally interrupted.
n New banner notification in the Web UI and CLI. A new banner notice has been added to the web UI and CLI to indicate when the configuration of a device is being managed by a template in Digi Remote Manager. This is useful so that configuration changes to that device are not made locally. If there are issues with the device, then it is important to know that the configuration is enforced remotely and any changes you may make to the device for testing purposes or fixes may be overwritten by the template.
n Regional cellular modem firmware bundles are now available. Certain modems – Sierra EM9191 (Asia PAC) and EM7690 (worldwide) have a lot of carrier-specific firmware images. Due to size constraints of the file system on the Connect EZ 2, not all of these images could be included. Now you can choose the firmware bundle for your specific cellular modem.

Digi Connect EZ 2 User Guide

Revisio

Date

Description
n IPsec is now supported in FIPS mode. It’s now easier for you to meet the federal security standards required by FIPS and keep sensitive data safe during transmission.
Tip For more information about this release, see the digi.com blog post, New Features in Digi Remote Manager and Our First LTS Firmware Release for DAL OS.

Additional changes n Added documentation for the Containers feature.

Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States and other countries worldwide. All other trademarks mentioned in this document are the property of their respective owners. © 2025 Digi International Inc. All rights reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a commitment on the part of Digi International. Digi provides this document ” as is,” without warranty of any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or merchantability for a particular purpose. Digi may make improvements and/or changes in this manual or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/ howt obuy/ t erms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following informat ion: Product name and model Product serial number (s) Firmware version Operating system/browser (if applicable) Logs (from time of reported issue) Trace (if possible) Description of issue Steps to reproduce

Digi Connect EZ 2 User Guide

Contact Digi technical support: Digi offers multiple technical support plans and service packages. Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to t echcomm@digi.com
Include the document title and part number (Digi Connect EZ 2 User Guide, 90002458 A) in the subject line of your email.

Digi Connect EZ 2 User Guide

Contents

Digi Connect EZ 2 User Guide

Applicable hardware

DAL OS Vulnerability Patch Policy

Get started with Connect EZ 2

Before you begin: Register your Connect EZ 2

Step 1: Verify product components

Included equipment

Optional additional cellular equipment

Step 2: Connect the power supply

Step 3: Connect to site network using an Ethernet LAN

Step 4: Discover the IP address using the Digi Navigator

Step 5: Configure RealPort from the Digi Navigator

Step 6: Connect to the web UI and update the Connect EZ 2 firmware

Step 7: Connect to Digi Remote Manager

Hardware

Front panel and LEDs

Cell service and signal LED descriptions

Back panel

Bottom panel

Change the password on the Connect EZ

Create a cellular connection using the CORE module

Prerequisit es

Switch the SIM card used for cellular network connection

Connect equipment to the Connect EZ serial port

Connect equipment to a serial port

Serial connector pinout

Mount the Connect EZ 2 device

Attach to a mounting surface using the two mounting tabs

Attach to DIN rail with clip

Power loss and Connect EZ 2 configuration

Use the RESET button to reset your device to the factory defaults

Discover the IP address using the Digi Navigator

Discover the device’s IP address: Additional methods

Discover the IP address using a Micro USB cable

Manually configure the PC and assign an IP address to the device

Connect to the local Web UI on the Connect EZ

Digi Connect EZ 2 User Guide

Device label sticker sample

Firmware configuration

Review Connect EZ 2 default settings

Local WebUI

Digi Remote Manager

Default interface configuration

Other default configuration settings

Change the default password for the admin user

Configuration methods

Using Digi Remote Manager

Access Digi Remote Manager

Using the local web interface

Review the dashboard

Log out of the web interface

Review the dashboard

Use the local REST API to configure the Connect EZ 2 device

Use the GET method to return device configuration information

Use the POST method to modify device configuration parameters and list arrays

Use the DELETE method to remove items from a list array

Access the terminal screen from the web UI

Using the command line

Access the command line interface

Exit the command line interface

Int erfaces

Define a static IP address

IP address and netmask

Wide Area Networks (WANs)

Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs)

Configure WAN/WWAN priority and default route metrics

WAN/WWAN failover

Configure SureLink active recovery to detect WAN/WWAN failures

Configure the device to reboot when a failure is detected

Disable SureLink

Example: Use a ping test for WAN failover from Ethernet to cellular

102

Using Ethernet devices in a WAN

104

Using cellular modems in a Wireless WAN (WWAN)

104

Configure a Wide Area Network (WAN)

127

Configure a Wireless Wide Area Network (WWAN)

135

Show WAN and WWAN status and statistics

146

Delete a WAN or WWAN

148

Default outbound WAN/WWAN ports

149

Local Area Networks (LANs)

151

About Local Area Networks (LANs)

152

Configure a Local Area Network (LAN)

152

Configure the ETH1 port as a LAN or in a bridge

160

Change the default LAN subnet

166

Show LAN status and statistics

167

Delete a LAN

169

DHCP servers

171

Digi Connect EZ 2 User Guide

Default services listening on LAN ports

188

Configure an interface to operate in passthrough mode

189

Virtual LANs (VLANs)

195

Create a trunked VLAN route

196

Create a VLAN using switchport mode

198

Bridging

201

Configure a bridge

202

Show SureLink status and statistics

205

Show SureLink State

205

Show SureLink status for all interfaces

205

Show SureLink status for a specific interface

206

Show SureLink status for all IPsec tunnels

207

Show SureLink status for a specific IPsec tunnel

207

Show SureLink status for all OpenVPN clients

208

Show SureLink status for a specific OpenVPN client

208

Configure a TCP connection timeout

209

Serial port

Default serial port configuration

210

Serial mode options

210

View serial port information

210

Default serial port configuration

210

Baud rate options

211

Configure Login mode for a serial port

211

Configure Remote Access mode for a serial port

216

Configure Application mode for a serial port

234

Configure PPP dial-in mode for a serial port

236

Configure UDP serial mode for a serial port

243

Configure Modem emulator mode for a serial port

256

Configure Modbus mode for a serial port

259

Configure RealPort mode using the Digi Navigator

263

Installation and configuration process

263

Digi Navigator features

263

Install the Digi Navigator

264

Configure RealPort on a Digi device from the Digi Navigator

266

Install and configure RealPort on your computer

267

Digi Navigator device discovery process

268

Services used to discover a device when connected to a network

269

Digi Navigator application features

272

Copy a serial port configuration

285

Advanced RealPort configuration without using the Digi Navigator

287

Windows Operating System

287

Linux Operating System

288

Download the RealPort driver

288

Configure RealPort on your computer

288

Configure the serial port for RealPort mode

290

Configure the RealPort service

295

Disconnect a user from a serial port

297

Show serial port status and statistics

299

Serial Status page

299

Review the serial port message log

301

Search for a port

302

Digi Connect EZ 2 User Guide

Rout ing

IP routing

304

Configure a static route

305

Delete a static route

308

Policy-based routing

309

Configure a routing policy

310

Routing services

318

Configure routing services

318

Show the routing table

321

Dynamic DNS

322

Configure dynamic DNS

322

Virtual Router Redundancy Protocol (VRRP)

327

VRRP+

327

Configure VRRP

327

Configure VRRP+

330

Example: VRRP/VRRP+ configuration

338

Configure device one (master device)

338

Configure device two (backup device)

342

Show VRRP status and statistics

348

Virtual Private Networks (VPN)

IPsec

351

IPsec data protection

351

IPsec mode

351

Internet Key Exchange (IKE) settings

351

Aut hent icat ion

352

Configure an IPsec tunnel

352

Configure IPsec failover

380

Configure SureLink active recovery for IPsec

383

Show IPsec status and statistics

399

Debug an IPsec configuration

400

Configure a Simple Certificate Enrollment Protocol client

401

Example: SCEP client configuration with Fortinet SCEP server

408

Show SCEP client status and information

413

OpenVPN

416

Configure an OpenVPN server

417

Configure an OpenVPN Authentication Group and User

426

Configure an OpenVPN client by using an .ovpn file

430

Configure an OpenVPN client without using an .ovpn file

433

Configure SureLink active recovery for OpenVPN

437

Show OpenVPN server status and statistics

454

Show OpenVPN client status and statistics

455

Generic Routing Encapsulation (GRE)

457

Configuring a GRE tunnel

457

Show GRE tunnels

462

Example: GRE tunnel over an IPSec tunnel

463

Dynamic Multipoint VPN (DMVPN)

478

Configure a DMVPN spoke

479

L2TP

485

Configure a PPP-over-L2TP tunnel

485

L2TP with IPsec

495

Show L2TP tunnel status

495

Digi Connect EZ 2 User Guide

L2TPv3 Ethernet

497

Configure an L2TPv3 tunnel

497

Show L2TPV3 tunnel status

501

MACsec

503

Configure a MACsec tunnel

503

NEMO

505

Configure a NEMO tunnel

505

Show NEMO status

510

WireGuard VPN

511

Configure the WireGuard VPN

512

Services

Allow remote access for web administration and SSH

521

Configure the web administration service

524

Configure SSH access

533

Use SSH with key authentication

540

Generating SSH key pairs

540

Configure telnet access

543

Configure DNS

548

Show DNS server

553

Simple Network Management Protocol (SNMP)

555

SNMP Security

555

Configure Simple Network Management Protocol (SNMP)

555

Download MIBs

561

Location information

562

Configure the device to use a user-defined static location

563

Configure the device to accept location messages from external sources

565

Forward location information to a remote host

569

Configure geofencing

576

Show location information

588

Modbus gateway

589

Configure the Modbus gateway

590

Modbus hardening

603

Show Modbus gateway status and statistics

605

System time synchronization

608

Configure the system time synchronization

608

Manually set the system date and time

613

Network Time Protocol

613

Configure the device as an NTP server

614

Show status and statistics of the NTP server

619

Configure a multicast route

620

Ethernet network bonding

623

Enable service discovery (mDNS)

627

Use the iPerf service

631

Example performance test using iPerf3

634

Configure the ping responder service

635

Example performance test using iPerf3

638

Appl icat ions

Develop Python applications

641

Set up the Connect EZ 2 for Python development

642

Create and test a Python application

642

Digi Connect EZ 2 User Guide

Python modules

646

Set up the Connect EZ 2 to automatically run your applications

677

Configure scripts to run automatically

677

Show script information

684

Stop a script that is currently running

685

Start an interactive Python session

686

Run a Python application at the shell prompt

687

Configure scripts to run manually

688

Task one: Upload the application

689

Task two: Configure the application to run automatically

690

Start a manual script

694

Python versions and corresponding DAL OS firmware versions

695

User authentication

Connect EZ 2 user authentication

697

User authentication methods

697

Add a new authentication method

699

Delete an authentication method

701

Rearrange the position of authentication methods

702

Authentication groups

704

Change the access rights for a predefined group

706

Add an authentication group

708

Delete an authentication group

712

Local users

714

Change a local user’s password

715

Configure a local user

717

Delete a local user

725

Terminal Access Controller Access-Control System Plus (TACACS+)

728

TACACS+ user configuration

729

TACACS+ server failover and fallback to local authentication

730

Configure your Connect EZ 2 device to use a TACACS+ server

730

Remote Authentication Dial-In User Service (RADIUS)

735

RADIUS user configuration

736

RADIUS server failover and fallback to local configuration

736

Configure your Connect EZ 2 device to use a RADIUS server

737

LDAP

740

LDAP user configuration

742

LDAP server failover and fallback to local configuration

743

Configure your Connect EZ 2 device to use an LDAP server

743

Configure serial authentication

748

Disable shell access

750

Set the idle timeout for Connect EZ 2 users

752

Example user configuration

754

Example 1: Administrator user with local authentication

754

Example 2: RADIUS, TACACS+, and local authentication for one user

756

Firewall

Firewall configuration

764

Create a custom firewall zone

764

Configure the firewall zone for a network interface

766

Delete a custom firewall zone

767

Port forwarding rules

769

Digi Connect EZ 2 User Guide

Configure port forwarding

769

Delete a port forwarding rule

774

Packet filtering

776

Configure packet filtering

776

Enable or disable a packet filtering rule

780

Delete a packet filtering rule

781

Configure custom firewall rules

783

Configure Quality of Service options

785

Web filtering

794

Configure web filtering with Cisco Umbrella

794

Configure web filtering with manual DNS servers

797

Verify your web filtering configuration

800

Show web filter service information

802

Cont ainers

Use Digi Remote Manager to deploy and run containers

804

Use an automation to start the container

807

Upload a new LXC container

808

Configure a container

809

Starting and stopping the container

814

Starting the container

814

Stopping the container

815

View the status of containers

815

Show status of all containers

816

Show status of a specific container

816

Schedule a script to run in the container

817

Create a custom container

819

Create the custom container file

819

Test the custom container file

820

System administration

Review device status

823

Configure system information

824

Update system firmware

826

Manage firmware updates using Digi Remote Manager

826

Python and DAL OS firmware updates

827

Certificate management for firmware images

827

Downgrading

827

Dual boot behavior

831

Upgrade cellular modem firmware

832

Update modem firmware over the air (OTA)

833

Update modem firmware by using a local firmware file

835

External storage

836

Configure external storage on a network server

837

Configure log location

837

Reboot your Connect EZ 2 device

838

Reboot your device immediately

838

Schedule reboots of your device

838

Erase device configuration and reset to factory defaults

840

Custom factory default settings

843

Locate the device by using the Find Me feature

846

Enable FIPS mode

847

Digi Connect EZ 2 User Guide

Configuration files

850

Save configuration changes

850

Save configuration to a file

851

Restore the device configuration

852

Schedule system maintenance tasks

855

Disable device encryption

860

Re-enable cryptography after it has been disabled.

861

Configure the speed of your Ethernet ports

863

Watchdog service

865

Configure the Watchdog service

865

View Watchdog metrics

868

Monit oring

int el l iFl ow

872

Enable intelliFlow

873

Configure service types

875

Configure domain name groups

877

Use intelliFlow to display average CPU and RAM usage

880

Use intelliFlow to display top data usage information

881

Use intelliFlow to display data usage by host over time

883

Configure NetFlow Probe

884

Central management

Digi Remote Manager support

890

Certificate-based enhanced security

890

Configure your device for Digi Remote Manager support

890

Collect device health data and set the sample interval

897

Event log upload to Digi Remote Manager

900

Reach Digi Remote Manager on a private network

902

Pinhole method

902

Proxy server method

902

VPN Tunnel method

902

Use Digi Remote Manager to view and manage your device

904

Add a device to Remote Manager

904

Add a device to Remote Manager using information from the label

904

Add a device to Remote Manager using your Remote Manager login credentials

905

Configure multiple Connect EZ 2 devices by using Digi Remote Manager configurations

906

View Digi Remote Manager connection status

907

Learn more

908

File system

The Connect EZ 2 local file system

910

Display directory contents

910

Create a directory

911

Display file contents

912

Copy a file or directory

912

Move or rename a file or directory

913

Delete a file or directory

914

Upload and download files

915

Digi Connect EZ 2 User Guide

Upload and download files by using the WebUI

915

Upload and download files by using the Secure Copy command

916

Upload and download files using SFTP

918

Diagnost ics

Perform a speedtest

920

Generate a support report

920

Support report overview

921

View system and event logs

925

View System Logs

925

View Event Logs

927

Configure syslog servers

930

Configure options for the event and system logs

932

Configure an email notification for a system event

937

Configure an SNMP trap for a system event

938

Analyze network traffic

939

Configure packet capture for the network analyzer

940

Example filters for capturing data traffic

949

Capture packets from the command line

950

Stop capturing packets

951

Show captured traffic data

952

Save captured data traffic to a file

953

Download captured data to your PC

954

Clear captured data

955

Use the ping command to troubleshoot network connections

957

Ping to check internet connection

957

Stop ping commands

957

Use the traceroute command to diagnose IP routing problems

957

Digi Connect EZ 2 regulatory and safety statements

RF exposure statement

959

Federal Communication (FCC) Part 15 Class A

959

European Community – CE Mark Declaration of Conformity (DoC)

959

CE and UKCA OEM labeling requirements

959

CE labeling requirements

959

UK Conformity Assessed (UKCA) labeling requirements

960

IFETEL

960

RoHS compliance statement

962

Cautionary statements for Connect EZ 2

962

Residential environment warnings

962

Product disposal instructions

962

Safety warnings

English

964

Bulgarian–

964

Croat ian–Hrvat ski

964

French–Français

964

Greek–

964

Hungarian–Magyar

964

It al ian–It al iano

965

Digi Connect EZ 2 User Guide

Lat vian–Lat viet is

965

Lit huanian–Liet uvis

965

Polish–Polskie

965

Port uguese–Port uguês

965

Slovak–Slovák

965

Slovenian–Esloveno

965

Spanish–Español

966

Command line interface

Access the command line interface

968

Exit the command line interface

969

Execute a command from the web interface

969

Display help for commands and parameters

970

The help command

970

The question mark (?) command

970

Display help for individual commands

971

Use the Tab key or the space bar to display abbreviated help

972

Auto-complete commands and parameters

972

Available commands

973

Use the scp command

974

Display status and statistics using the show command

976

show config

976

show system

976

show network

977

Device configuration using the command line interface

977

Execute configuration commands at the root Admin CLI prompt

977

Display help for the config command from the root Admin CLI prompt

978

Configuration mode

979

Enable configuration mode

979

Enter configuration commands in configuration mode

979

Save changes and exit configuration mode

980

Exit configuration mode without saving changes

980

Configuration actions

981

Display command line help in configuration mode

981

Move within the configuration schema

984

Manage elements in lists

985

The revert command

987

Enter strings in configuration commands

989

Example: Create a new user by using the command line

989

Command line reference

992

ain calibrate

992

ain calibration-reset

992

analyzer clear

992

analyzer save

992

analyzer start

993

analyzer stop

993

cat

993

clear dhcp-lease ip-address

993

clear dhcp-lease mac

993

994

dio state

994

grep

994

help

994

Digi Connect EZ 2 User Guide

ls mkdir modem at modem at-interactive modem firmware bundle ota check modem firmware bundle ota download modem firmware bundle ota list modem firmware bundle ota update modem firmware check modem firmware list modem firmware ota check modem firmware ota download modem firmware ota list modem firmware ota update modem firmware update modem pin change modem pin disable modem pin enable modem pin status modem pin unlock modem puk status modem puk unlock modem reset modem scan modem sim-slot modem sms send modem sms send-binary monitoring metrics upload monit oring monitoring metrics upload more mv ping poweroff pyinst al l reboot rm scp config directory: show command show ain show analyzer show arp show bluetooth-scanner log show bluetooth-scanner nearby show bluetooth-scanner static-candidate show bluetooth-scanner static-confirmed show cloud show config show containers show dhcp-lease show dio show dns show eth show event show hotspot Digi Connect EZ 2 User Guide

995 996 996 996 996 996 997 997 997 997 998 998 998 998 999 999 999 1000 1000 1000 1000 1001 1001 1001 1001 1002 1002 1002 1003 1003 1003 1003 1003 1004 1004 1004 1004 1006 1006 1006 1006 1007 1007 1007 1007 1007 1008 1008 1008 1008 1009 1009 1009 1009 1009
18

show ipsec show l2tp lac show l2tp lns show l2tpeth show location show log show manufacture show modbus-gateway show modem show nemo show network show ntp show openvpn client show openvpn server show route show scep-client show scripts show serial show surelink interface show surelink ipsec show surelink openvpn show surelink state show system show version show vrrp show web-filter iperf ssh system backup system cloud register system custom-default-config current system custom-default-config file system custom-default-config remove system disable-cryptography system duplicate-firmware system factory-erase system find-me system firmware ota check system firmware ota list system firmware ota update system firmware update system power ignition off_delay system restore system script start system script stop system serial clear system serial copy system serial ipport system serial restart system serial save system serial show system storage format system storage mount system storage show system storage unmount Digi Connect EZ 2 User Guide

1010 1010 1010 1010 1011 1011 1011 1011 1012 1012 1012 1012 1013 1013 1013 1013 1013 1014 1014 1014 1014 1015 1015 1015 1015 1016 1016 1016 1016 1017 1017 1017 1017 1018 1018 1018 1018 1019 1019 1019 1019 1019 1020 1020 1020 1020 1021 1021 1021 1022 1022 1022 1022 1023 1023
19

system support-report system time set system time sync system time test t ail t el net t racerout e vt ysh

1023 1023 1023 1024 1024 1024 1024 1025

Digi Connect EZ 2 User Guide

This guide provides reference and usage information for the Connect EZ 2.
Digi Connect EZ is Digi’s next generation Device Server product line, providing connectivity for existing critical assets in business, commercial, and industrial automation applications. This product line builds on and extends the capabilities of our previous PortServer and Digi One products along with enhanced manageability, security, intelligence, and performance, while offering seamless connectivity for existing applications.

Applicable hardware
This user guide contains information for these Connect EZ 2 models. Hardware features are shown in the table below.

Name Connect EZ 2

SKU EZ02-C000

Serial ports 2

Ethernet ports 2

DAL OS Vulnerability Patch Policy
Digi has created a vulnerability patch policy to document the guidelines and procedures we plan to take to identify, assess, and remediate security vulnerabilities in our DAL OS firmware integrated into Enterprise (EX), Industrial (IX) and Transportation routers (TX), device and serial servers (Connect EZ), console servers and USB-connected devices. Specifically, this policy outlines how quickly and effectively patches need to be applied to mitigate risks from potential threats. The policy protects against cyberattacks but also ensures that out firmware is in compliance with regulatory standards. The DAL Vulnerability Patch Policy is documented on the digi.com website, and covers the following t opics:
n Objective
n Scope
n Audience
n Introduction
n Reporting Potential Vulnerabilities
n Assessing Potential Vulnerabilities
n Information and Resolution Timelines

Digi Connect EZ 2 User Guide

Digi Connect EZ 2 User Guide
n Resolution of Potential Vulnerabilities n Receiving Information on Potential Vulnerabilities

DAL OSVulnerability Patch Policy

Digi Connect EZ 2 User Guide

Get started with Connect EZ 2
This section explains what comes with each Connect EZ model, how to install the necessary software, and how to connect the hardware. Before you begin: Register your Connect EZ 2 Step 1: Verify product components Step 2: Connect the power supply Step 3: Connect to site network using an Ethernet LAN Step 4: Discover the IP address using the Digi Navigator Step 5: Configure RealPort from the Digi Navigator Step 6: Connect to the web UI and update the Connect EZ 2 firmware Step 7: Connect to Digi Remote Manager
Optional
n Change the password on the Connect EZ n Mount the Connect EZ 2 device n Connect equipment to the Connect EZ serial port n Create a cellular connection using the CORE module
Administrators only
n Additional configuration to the device can be done in Remote Manager or in the device’s local web user interface.

Digi Connect EZ 2 User Guide

Get started with Connect EZ 2

Before you begin: Register your Connect EZ 2

Before you begin: Register your Connect EZ 2
Welcome to the Digi family! Register your new Connect EZ 2 today and start enjoying a suite of exclusive benefits, including centralized management and 24/7 technical support. Click here to register now!
Step 1: Verify product components
Verify that you have the following included equipment. NEXT STEP: If you are performing the initial device set-up, proceed to the next step after verifying the components: Step 2: Connect the power supply.
Included equipment

Equipment
Connect EZ 2

Description For detailed information about the panels, see:
n Front panel and LEDs n Back panel n Bottom panel

Power supply

Power supply. The power supply is a locking barrel output transformer rated 100240 VAC to 12 VDC, and with a 3 A output. For information about connecting the power supply, see Step 2: Connect the power supply.

Ethernet cable

CAT 6 Ethernet cable. Connect to a site network using an Ethernet cable. See Step 3: Connect to site network using an Ethernet LAN.

DIN rail clip

The DIN rail clip connects to the back of the device and is used to mount the device onto a DIN rail. Screws are included. See Attach to DIN rail with clip. The kit includes a DIN rail clip and two screws that meet these requirements:

n M4 in diameter n 5 mm in length n Countersunk n Phillips #2

n Black Steel

Global plug kit
Loose label

If you purchased the GLB version of the device, a kit that includes global outlet plugs is included.
A loose label sticker that includes information about the device is included in the box. You should retain this label sticker with your hardware records. For more information about the label, see Device label sticker sample.

Note This label includes the unique default password for the device. This unique

Digi Connect EZ 2 User Guide

Get started with Connect EZ 2

Step 2: Connect the power supply

Equipment

Description
password will be needed if the device is factory reset and you want to access the web UI on the device.

Optional additional cellular equipment
These items are required only if you are using a CORE module to connect to a cellular network.

Equipment CORE module

Description

SIM card LTE Antenna (2)

Note A SIM card is also required.
An activated SIM card provided by your cellular network operator. You can insert up to two SIM cards in the CORE module. See Create a cellular connection using the CORE module. The CORE module supports the standard mini-SIM cards (2FF).
Two LTE antennas are included.
n For connection instructions, see Create a cellular connection using the CORE module.
n Digi PN 76002118

Step 2: Connect the power supply
The power supply is included with the device. The power supply is a Direct Plugin Class 2 output transformer rated 18 W, 12 VDC, with 1.5 A out put .
1. Orient the device so the top of the device is facing you. 2. Connect the twist-lock end of the power supply cord to the device. 3. Plug the other end of the power supply cord to a main power supply.

NEXT STEP: If you are performing the initial device set-up, proceed to the next step: Step 3: Connect to site network using an Ethernet LAN.

Digi Connect EZ 2 User Guide

Get started with Connect EZ 2

Step 3: Connect to site network using an Ethernet LAN

Step 3: Connect to site network using an Ethernet LAN
This section explains how to connect to a site network using an Ethernet cable.
1. Connect one end of an Ethernet cable to your site network. 2. Connect the other end of the Ethernet cable to the Ethernet port on the Connect EZ. By
default a DHCP request will be sent to the local Ethernet network.
Note If you do not have a DHCP server on your network, you can connect locally over 192.168.210.1. See Using the local web interface.

NEXT STEP: If you are performing the initial device set-up, proceed to the next step: Step 4: Discover the IP address using the Digi Navigator.
Step 4: Discover the IP address using the Digi Navigator
You can use the Digi Navigator to quickly discover the IP address for the Connect EZ 2.
Note If you don’t have access to the Digi Navigator, you can use a manual method to discover the IP address. See Discover the device’s IP address: Additional methods.
1. To ensure that your computer and device are connected to each other and your local network, make the following connections: n Connect the device to your computer with an Ethernet cable. n Connect the device to your local network with an Ethernet cable. n Connect your computer to your local network with an Ethernet cable.
2. Download and install the Digi Navigator. 3. Launch the Digi Navigator. 4. The tool discovers the Connect EZ 2 devices that are powered on and connected to your
network. When the process is complete, a list of the devices appears. n Connected to a network: By default, the HTTPS service is enabled and used to find an IP address for the Connect EZ 2. Other services can be enabled if needed from the Filters section. See Services used to discover a device when connected to a network. n Connected directly to a device or on a network with no DHCP server: In either of these situations, a setup IP address is assigned to the device. You can specify the filters used to assign an IP address. See Use the autodiscovery protocol to discover a device and Assign a generic IP address to the device.
5. Expand a device to display the IP address.
NEXT STEP: If you are performing the initial device set-up, you should proceed to the next step after getting the device’s IP address: Step 5: Configure RealPort from the Digi Navigator.
Step 5: Configure RealPort from the Digi Navigator
You can configure the Connect EZ 2 to communicate with your computer using RealPort from the Digi Navigator. You must enable RealPort on the device and then configure your computer for Real Port .

Digi Connect EZ 2 User Guide

Get started with Connect EZ 2

Step 5: Configure RealPort from the Digi Navigator

In this step, all serial ports on the device are set to RealPort mode and the RealPort service is enabled. The COM ports on your laptop are also configured.
Note You can also manually configure the device for RealPort by logging into the device’s web UI. See Advanced RealPort configuration without using the Digi Navigator.
1. Download and install the Digi Navigator on your computer. 2. Make sure the Connect EZ 2 is powered and connected your local network or computer with
an Ethernet cable. 3. Launch the Digi Navigator. 4. A list of the devices discovered by the Digi Navigator displays. For information about how
devices are discovered and how to add a device to the list, see Digi Navigator device discovery process. 5. Configure RealPort on the device. a. Find the device that you want to configure and expand it so you can see the IP address
for the device. b. Click on the IP address of the device. The configuration pane on the right side of screen
shows information about the selected device. c. Click Configure Device for RealPort. The Enter Device Credentials screen displays. d. Enter the device’s default user name and password in the Username and Password fields.
The default user name is admin and the default password is the unique password printed on the label packaged with your device. If the defaults do not work, they may have been changed. Verify with your system administrator. e. Click OK. f. When RealPort configuration is complete, the Success message displays.

g. Click OK to close the message.
6. Configure RealPort on your computer. The RealPort service is installed during this process.
a. In the configuration pane, click Configure this PC for RealPort. The Select RealPort Features dialog displays.

n Enable Encryption to enable encryption of data. This is enabled by default.
n Enable Authentication to configure the authentication method the RealPort server uses to authenticate clients. The Authentication Configuration dialog displays.

Digi Connect EZ 2 User Guide

Get started with Connect EZ 2

Step 6: Connect to the web UI and update the Connect EZ 2 firmware

a. From the Method list box, select the Shared Secret – SHA256 option.
b. For Shared Secret, enter the authentication password to ensure secure communication. Leave this field blank to disable authentication.

n Click OK. b. The Select Ports dialog displays. By default, all of the ports on the device are selected to
be configured for RealPort. De-select the ports that you don’t want to configure for Real Port . c. Click OK. The COM Selection dialog displays. d. From the Select starting COM list box, select the first COM port that should be configured for RealPort. The first available COM port is selected by default. The number of COM ports configured matches the number of serial ports on the device e. Click OK. A series of progress messages displays. f. When the configuration is complete, a message displays.
g. Click OK to close the message. Configuration is complete.
NEXT STEP: If you are performing the initial device set-up, proceed to the next step: Step 6: Connect to the web UI and update the Connect EZ 2 firmware.
Step 6: Connect to the web UI and update the Connect EZ 2 firmware
You should update the firmware on the Connect EZ 2 device to ensure that you have the latest feat ures.
1. Make sure that an Ethernet cable is connected to the Connect EZ 2’s ETH 1 port and to a laptop or PC.
2. Open a browser and enter the IP address for the device. 3. Log into the device using the default user name and password. The default user name is
admin and the default password is the unique password printed on the label packaged with your device. 4. After logging in, the local web admin dashboard is displayed.

Digi Connect EZ 2 User Guide

Get started with Connect EZ 2

Step 7: Connect to Digi Remote Manager

5. On the main menu, click System. Under Administration, click Firmware Update.

6. Click Download from server.

7. For Version:, select the version of the device firmware to which you want to update your device.
8. Click Update Firmware.
Note For more detailed information about this process, see Update system firmware.
NEXT STEP: If you are performing the initial device set-up, proceed to the next step: Step 7: Connect to Digi Remote Manager.
Step 7: Connect to Digi Remote Manager
Connect your device to Digi Remote Manager to ensure that you receive automatic notification of firmware updates and security notices. From Remote Manager, you can also easily update firmware, ensure consistent configuration across a large group of devices, and manage and monitor cellular connect ivit y. To start Digi Remote Manager
1. If you have not already done so, click here to sign up for a Digi Remote Manager account. 2. Check your email for Digi Remote Manager login instructions. 3. Go to remotemanager.digi.com. 4. Log into your Digi Remote Manager account. For more information about configuring Remote Manager and managing devices, see Central management .
NEXT STEP: If you are performing the initial device set-up, you have now completed all of the required steps. You can return to Get started with Connect EZ 2 for information on optional steps.

Digi Connect EZ 2 User Guide

Hardware
Front panel and LEDs

Item 1 2
3 4

Name Console
Serial ports 1 and 2
ETH1
ETH2

Description
Use the USB console port to access the web UI on the device if a network is not available. For example, you can use a micro USB cable to connect the device to your laptop and then find the IP address for the device. See Discover the IP address using a Micro USB cable.
Use the serial ports to connect to devices and equipment to the Connect EZ 2. See Connect equipment to the Connect EZ serial port. The serial port LED shows the status of the connection.
n Green: The LED is solid green when a device is connected to the port. n Yellow: The LED is linked directly to the serial transmit pin. During
serial transmit, the specific LED blink pattern is very dependent on the bit rate and amount of traffic. At higher baud rates the flicker rate may be difficult to detect.
Use the ETH1 port to connect the device to your local network, using an Ethernet cable. The ETH1 LED shows the status of the connection.
n Yellow (left): There is activity on the port. n Green (right): The port is in use.
Use the ETH 2 port to connect to a second Ethernet port. This is useful for

Digi Connect EZ 2 User Guide

Hardware

Front panel and LEDs

Item Name

SIM

switch

button

Description redundancy or if you have more than one network. The ETH2 LED shows the status of the connection.
n Yellow (left): There is activity on the port. n Green (right): The port is in use.
The SIM switch button is used to manually toggle between the two SIM slots included in the Digi CORE Module. For information about using this feature, see Switch the SIM card used for cellular network connection.

Note This feature is useful only if you have connected the Digi CORE module. See Create a cellular connection using the CORE module.

Erase

Use this button to reset the device to factory defaults.

button

Power Connect the power supply. See Connect the power supply.

Cell LED Shows the status of the cell service connection. The Cell and Signal LEDs work

together to display some status information. See Cell service and signal LED

descript ions.

Signal Shows the strength of the cellular signal. The Cell and Signal LEDs work

LED

together to display some status information. See Cell service and signal LED

descript ions.

Power The Power LED shows the status of the power supply connection.

LED

n Solid green: The power source is connected and power is being

supplied to the device.

n Flashing green: The Find Me feature has been activated.

Cell service and signal LED descriptions

Cell LED Slow flash red Slow flash green Slow flash green Off Fast flash red Off Off

Signal LED Slow flash red Slow flash green Off Off Off Solid blue Solid green

Description Updating modem firmware Recovering modem firmware Waiting for modem to appear Modem not present SIM not present Modem signal strength: 5 bars Modem signal strength: 4 bars

Digi Connect EZ 2 User Guide

Hardware
Cell LED Off Off Off Off Off Solid amber Solid green Solid blue Off
Back panel

Signal LED Solid amber Solid red Slow flash red Fast flash red Off Off Off Off Off

Back panel
Description Modem signal strength: 3 bars Modem signal strength: 2 bars Modem signal strength: 1 bars Modem signal strength: 0 bars Modem signal strength: * Cell service: 2G Cell service: 3G Cell service: 4G Cell service: None

Name Digi Core Modem WWAN-1
WWAN-2

Description
Insert a Digi Core Modem to complete a cellular connection. See Create a cellular connection using the CORE module.
Antennas can be attached if the module is used to complete a cellular connection. See Create a cellular connection using the CORE module.
Antennas can be attached if the module is used to complete a cellular connection. See Create a cellular connection using the CORE module.

Bottom panel

Name Mount ing t abs
DIN rail clip

Description
The mounting tabs on the device are used to mount the device onto a mounting surface. Use round-head M4 size screws. The type and length are dependent on the mounting surface type. Screws are not provided. If you choose not to mount the device, you can permanently remove the mounting tabs with a pliers.
You can attach a DIN rail clip to the back of the device and then mount the device to a DIN rail.

Digi Connect EZ 2 User Guide

Hardware

Change the password on the Connect EZ

Change the password on the Connect EZ
The unique, factory-assigned password for the default admin user account is printed on the bottom label of the device and on the loose label included in the package. For ease of use, you may want to change the password from the default. If you erase the device configuration or reset the device to factory defaults, the password for the admin user will revert to the original, factory-assigned default password.
1. Log into the Connect EZ 2 WebUI as a user with full Admin access rights.
2. On the menu, click System > Device Configuration. The Configuration window appears.
3. Click Authentication > Users > Admin.
4. For Password, enter the new password. The password must be at least eight characters long and must contain at least one uppercase letter, one lowercase letter, one number, and one special character.

5. Click Apply to save the configuration and apply the change.
For more detailed information about this process, see Change the default password for the admin user.
Create a cellular connection using the CORE module
This section explains how to connect the Digi CORE®module and cellular antennas to the Connect EZ hardware. The CORE module has slots for two SIM cards: SIM 1 and SIM 2. Only one activated SIM card is needed to connect to the cellular network. The second card can be used for redundancy.
Note As an alternative, you can also use an Ethernet LAN connection. See Connect to site network using an Ethernet LAN.
Prerequisites
n Activated SIM card from your cellular network provider. n Digi CORE module. This may be included with your device. If it is not, you must purchase one
separat el y. To connect the hardware and connect to the cellular network:

Digi Connect EZ 2 User Guide

Hardware

Switch the SIM card used for cellular network connection

1. Make sure that your device is powered down before removing or installing the module. CORE modules are not hot-swappable.
2. Insert your activated SIM card into the CORE module. The notched end of SIM card should be inserted first, with the gold metal contacts facing down. You will hear a click once the SIM is completely inserted.
Note If one SIM card is being used, insert the SIM card into the SIM 1 slot.
3. Insert the CORE module into the device. a. Orient the device so the front of the device is facing you. b. Unscrew the CORE module slot cover from the back of the device. c. Insert the CORE module into the slot. Make sure the pin holes on the back of the module match the location of the pins in the slot. d. Push the module into the slot. e. Push the white handle down until you hear it click. f. Optionally, you can screw one of the CORE module cover screws into the center of the handle. g. Place the CORE module cover over the end of the device. Make sure that the antenna labels are oriented correctly. h. Push the cover in place.
4. Attach both of the cellular antennas. While gripping the metal connector section with your thumb and forefinger, tighten until secure. Do not tighten the antenna by holding any part of the plastic antenna housing.
5. Plug the power supply cord into at least one of the power supplies on the back of the device. 6. Plug the power supply unit into an AC power outlet to power up the Connect EZ.

Switch the SIM card used for cellular network connection
Note This feature can be used only if you have inserted a Digi CORE module into the Connect EZ 2.
The Digi CORE module includes two SIM slots, which enables you to insert two activated SIM cards. Only one SIM card is needed for a cellular network connection. If desired, you can insert a second SIM card.
n SIM 1: When only one is used, the SIM card should be inserted into the SIM 1 slot. n SIM 2: Insert a second activated SIM card into the SIM 2 slot. This SIM card can be used for
redundancy or an alternate wireless carrier.
When two activated SIM cards are inserted into the CORE module, you can use the SIM switch button on the Connect EZ 2 hardware to toggle between the SIM cards and change the SIM that is used to connect to the cellular network. Before you begin
n You must be able to physically handle the device. n You will need a small tool to push the SIM switch button.
To switch the active SIM card:

Digi Connect EZ 2 User Guide

Hardware

Connect equipment to the Connect EZ serial port

1. Orient the device so that you can see the SIM switch button on the front of the device.

2. Use the tool to press and release the SIM switch button. The Cell LED changes as the switch occurs. These changes may occur quickly.

Cell LED status OFF
Slow flash green
Solid

Description The currently active SIM card is disconnected from the cellular network. The alternate SIM card attempts to connect to the cellular network.
The alternate SIM card has connected to the cellular network and is now the active SIM for the device.

Note For more information about the Cell LED behavior, see Cell service and signal LED descriptions.

Connect equipment to the Connect EZ serial port
After your device is connected and powered up, you can connect equipment to the device using the serial ports. The serial port on the Connect EZ provides console access to connected critical equipment through a connected Ethernet LAN. Connect your network device to the Connect EZ serial port. For pinout information, see Serial connector pinout. You must use a cable with an RJ45 (10 pin) connector to connect to a serial port on the Connect EZ . Consult the user guide for the device you are connecting to the Connect EZ to determine the connector type, cable type, and pinout positions for your specific device. The serial port is enabled by default. The network devices connected to the serial port may be accessed using RealPort, Digi Remote Manager, the local web user interface, TCP, telnet, or SSH connections. TCP, telnet and SSH connections to serial ports are disabled by default and must be enabled by a device-specific configuration.
Connect equipment to a serial port
You can connect equipment to a serial port on the Connect EZ 2, and access it using a terminal emulator program, such as Tera Term or Putty.
Note Before you begin, make sure a terminal emulator is installed on your laptop and you have a serial cable.
1. Connect one end of a serial cable to a serial port on the Connect EZ 2. 2. Connect the other end of the serial cable to your equipment. 3. Verify the connection between the Connect EZ 2 and the equipment.

Digi Connect EZ 2 User Guide

Hardware

Mount the Connect EZ 2 device

a. Open your terminal emulator. b. Press Enter. c. When the connection has been make, the serial port LED is solid green.
Serial connector pinout
The Connect EZ has an RJ45 (10 pin) serial connector. The table below contains the pinout informat ion. Altpin If you enable Altpin in EIA-232 mode, the DCD and DSR signals are swapped. This allows use of DCD with 8-wire cables. Altpin has no impact on 422 or 485 mode. Data+/Data- pins (in RS 485 half duplex mode) For RS 485 cables in half duplex mode, you only need to connect one each of the Data+ and Datapins.

10-pin 8-pin

EIA-232 Signals (DTE)
RI DSR (DCD*) *When Altpin is enabled
RTS GND TxD RxD SG CTS DTR DCD (DSR*) *When Altpin is enabled

EIA-422/485 Full-duplex
TxDRxD-
RTS+ GND TxD+ RxD+ SG CTS+ RTSCTS-

EIA-485 Half-duplex
Dat aDat a-
N/A GND Dat a+ Dat a+ SG N/A N/A N/A

Mount the Connect EZ 2 device
There are two mounting options available: n Attach to a mounting surface using the two mounting tabs n Attach to DIN rail with DIN rail clip
Attach to a mounting surface using the two mounting tabs
Attach the device to a surface using the two tabs on the device. The type and length are dependent on the mounting surface type.
Note Screws are not provided.

Digi Connect EZ 2 User Guide

Hardware

Power loss and Connect EZ 2 configuration

Mounting onto soft or thin materials Examples: Wallboard, sheetrock, wood, thin sheet metal, or plastic. Use a screw that meets these requirements:
n M4 pan-head Philips screw n Coarse-thread sheet metal screw n 14 mm in length. The length should clear the mounting tab thickness and leave at least 1 cm
of screw shank to bite into the mounting material.
Mounting onto thicker metals Examples: Aluminum or steel. Use a screw that meets these requirements:
n M4 pan-head Philips screw n Machine-thread screw n 14 mm in length. The length should clear the mounting tab thickness and leave at least 1 cm
of screw shank to bite into the mounting material.
Attach to DIN rail with clip
The DIN rail clip and two screws included with the device. You will need an appropriate Phillips-head screwdriver. For details about the hardware, see DIN rail clip information.
1. Remove required items from DIN rail mounting kit: n DIN rail clip n Two flat head screws
2. Place the DIN rail clip on the rear panel of the device. Make sure the screw holes are aligned. 3. In each hole, use a Phillips-head screw driver to screw in a screw. 4. Tighten the screws as needed to securely fasten the DIN rail clip to the device. 5. Set the device onto a DIN rail and gently press until the clip snaps into the rail.
Power loss and Connect EZ 2 configuration
The Connect EZ 2 retains its configuration if power is lost and then power is restored when the device is plugged into a main power supply, or if the device is commanded to restart automatically or interactively.
Use the RESET button to reset your device to the factory defaults
You can reset the Connect EZ to the factory default settings. Resetting the device to factory defaults performs the following actions:
n Clears all configuration settings. n Deletes all user files. n Regenerates SSH keys. n Clears event and system log files. n Creates a new event in the event log, indicating a factory reset.

Digi Connect EZ 2 User Guide

Hardware

Discover the IP address using the Digi Navigator

Note While the settings are reset, the device’s firmware version remains the same.
1. Make sure that the Connect EZ has been powered on for at least 30 seconds. 2. Locate the ERASE button on the front of the device. 3. Using a pinhole tool, press and hold the RESET button. The RESET button has the following
modes: n Configuration reset: l Press and release the RESET button for 10 seconds. l The device reboots automatically and resets to factory defaults. This does not remove any automatically generated certificates and keys. n Full device reset: l After the device reboots from the first button press, immediately press and release the RESET button for 10 seconds again. l The device reboots again and resets to factory defaults, as well as also removing generated certificates and keys.
Discover the IP address using the Digi Navigator
You can use the Digi Navigator to quickly discover the IP address for the Connect EZ 2.
Note If you don’t have access to the Digi Navigator, you can use a manual method to discover the IP address. See Discover the device’s IP address: Additional methods.
1. To ensure that your computer and device are connected to each other and your local network, make the following connections: n Connect the device to your computer with an Ethernet cable. n Connect the device to your local network with an Ethernet cable. n Connect your computer to your local network with an Ethernet cable.
2. Download and install the Digi Navigator. 3. Launch the Digi Navigator. 4. The tool discovers the Connect EZ 2 devices that are powered on and connected to your
network. When the process is complete, a list of the devices appears. n Connected to a network: By default, the HTTPS service is enabled and used to find an IP address for the Connect EZ 2. Other services can be enabled if needed from the Filters section. See Services used to discover a device when connected to a network. n Connected directly to a device or on a network with no DHCP server: In either of these situations, a setup IP address is assigned to the device. You can specify the filters used to assign an IP address. See Use the autodiscovery protocol to discover a device and Assign a generic IP address to the device.
5. Expand a device to display the IP address.
Discover the device’s IP address: Additional methods
The IP address is used to log in to the Web UI for the device. If you do not have access to the Digi Navigator, you can use either of these methods to discover the IP address.

Digi Connect EZ 2 User Guide

Hardware

Discover the device’s IP address: Additional methods

n Discover the IP address using a Micro USB cable n Manually configure the PC and assign an IP address to the device
Discover the IP address using a Micro USB cable
You can use a Micro USB cable and a terminal emulation application to determine the device’s IP address.
Prerequisites
n A power supply must be connected to the device and the device powered on. n Access to a terminal emulation application. n A Micro USB cable. To use the terminal emulation application to discover the device’s IP address:
1. Connect one end of a Micro USB cable to your device and the other end to your PC. 2. Use the terminal emulation application to discover the device’s IP address.
a. Access the terminal emulation application. b. Log in to the Connect EZ 2.
n User name: admin n Password: The unique password printed on the device label. c. Type a to enter the Admin CLI. d. Type show network to show all devices currently connected to the network. e. Scroll down until you discover the Connect EZ. f. Write down the IP address shown for the device.
Manually configure the PC and assign an IP address to the device
You can manually assign an IP address to the device.
Prerequisites
n An Ethernet cable must be connected to the device and your network. n A power supply must be connected to the device and the device powered on. n Determine the IP address that you want to assign to the device. To configure your laptop and assign an IP address:
1. On your PC, navigate to the Ethernet network settings dialog. 2. Click the Internet Protocol Version 4 (TCP/IPv4) parameter.

Digi Connect EZ 2 User Guide

Hardware

Discover the device’s IP address: Additional methods

3. Click Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties dialog appears. 4. Select Use the following IP address.
Note IMPORTANT: Make note of the current IP address entries for IP address, Subnet mask, and Default gateway. You will need this information to complete the final step of the process.
5. Configure with the following details: n IP address for PC: 192.168.210.2 n Subnet: 255.255.255.0 n Gateway: 192.168.210.1

6. Click OK. 7. Open a browser window. 8. Enter the default gateway IP address: 192.168.210.1 9. Log into the device using the default user name and password. The default user name is
admin and the default password is the unique password printed on the label packaged with

Digi Connect EZ 2 User Guide

Hardware

Device label sticker sample

your device. For more detailed instructions, see Connect to the local Web UI on the Connect EZ. 10. Update the IP address for the device. 11. On your PC, revert the IP address information to the original entries. a. Return to the Internet Protocol Version 4 (TCP/IPv4) Properties dialog. b. Enter the original IP address entries for IP address, Subnet mask, and Default gateway. c. Click OK.
Connect to the local Web UI on the Connect EZ
Once you are connected to the local Web UI, you can configure your device.
Note You can also use the Digi Navigator to access the web UI and configure the device. See Access a device’s web UI from the Digi Navigator.
1. Make sure that an Ethernet cable is connected to the Connect EZ 2’s ETH 1 port and to a laptop or PC.
2. Open a browser and enter the IP address for the device. 3. Log into the device using the default user name and password. The default user name is
admin and the default password is the unique password printed on the label packaged with your device. 4. After logging in, the local web admin dashboard is displayed.
The dashboard shows the current state of the device.

Dashboard

area

Description

Network activity

Summarizes network statistics: the total number of bytes sent and received over all configured bridges and Ethernet devices.

Digi Remote Displays the device connection status for Digi Remote Manager, the amount of time

Manager

the connection has been up, and the Digi Remote Manager device ID.

See Using Digi Remote Manager.

Device

Displays the Connect EZ 2 device’s status, statistics, and identifying information.

Network

Displays the status of the network interfaces configured on the device.

Interfaces

For more information, see Using the local web interface.

Device label sticker sample
A device label sticker that includes information about the device is included in the box. You should retain this label sticker with your hardware records.

Digi Connect EZ 2 User Guide

Hardware

Device label sticker sample

Item 1 QR code
2 Label part number
3 Product name 4 Device part
number (SKU) and revision 5 Password
6 MAC address 7 Serial number
8 Device kit part number and revision level

Description Scan the QR code to display a semicolon separated list of: Product Name;DeviceID;Password;Serial Number;SKUPart Number SKUPart Revision
Note Note the space between SKUPartNumber and SKUPartRevision
Example: Connect EZ 02;00000000-00000000-112233FFFF445566;PW1234567890;EZ02-123456;EZ02-C000 B
Label part number and revision level.
Product name, such as Connect EZ Mini, Connect EZ 2, or Connect EZ 8. Device part number (SKU number) and revision. For example, EZ02-C000 A
The unique default password for the device. This unique default password will be needed if the device is factory reset and you want to access the web UI on the device.
The MAC address for the device. The unique serial number assigned to the device. The SN is needed when submitting a Digi support ticket. The part number and revision level of the device kit.

Digi Connect EZ 2 User Guide

Firmware configuration

This chapter contains the following topics:

Review Connect EZ 2 default settings

Change the default password for the admin user

Configuration methods

Using Digi Remote Manager

Access Digi Remote Manager

Using the local web interface

Review the dashboard

Use the local REST API to configure the Connect EZ 2 device

Access the terminal screen from the web UI

Using the command line

Digi Connect EZ 2 User Guide

Firmware configuration

Review Connect EZ 2 default settings

Review Connect EZ 2 default settings
You can review the default settings for your Connect EZ 2 device by using the local WebUI or Digi Remote Manager:
Local WebUI
1. Log into the Connect EZ 2 WebUI as a user with Admin access. 2. On the menu, click System > Device Configuration.
Digi Remote Manager
1. If you have not already done so, connect to your Digi Remote Manager account. 2. Click Device Management to display a list of your devices. 3. Locate and select your device as described in Use Digi Remote Manager to view and manage
your device. 4. Click Configure. The following tables list important factory default settings for the Connect EZ 2.
Default interface configuration

Interface type Wide Area Networks (WANs)

Preconfigured interfaces
n Modem

Devices
n WWAN1 cellular modem

Ethernet Network

n ETH1 n ETH2 n Loopback

n Ethernet: ETH1
n Ethernet: ETH2
n Ethernet: Loopback

n Setup IP

n Ethernet: ETH1

n Setup Linklocal IP

n Ethernet: ETH1

Default configuration
n Firewall zone: External n WAN priority: Metric=3 n SIM failover after 5
at t empt s
n Firewall zone: Edge n DHCP client enabled
n Firewall zone: Edge n DHCP client enabled
n Firewall zone: Loopback
n IP address: 127.0.0.1/8
n Firewall zone: Setup n IP address
192.168.210.1/24
n Firewall zone: Setup n IP address
169.254.100.100/16

Digi Connect EZ 2 User Guide

Firmware configuration

Change the default password for the admin user

Other default configuration settings

Feature Cent ral management Security policies
Monit oring

Configuration n Digi Remote Manager enabled as the central management service.
n Packet filtering allows all outbound traffic. n SSH and web administration:
l Enabled for local administration l Firewall zone: Set up
n Device heath metrics uploaded to Digi Remote Manager at 60 minute int erval .
n SNMP: Disabled

Change the default password for the admin user
The unique, factory-assigned password for the default admin user account is printed on the bottom label of the device and on the loose label included in the package. If you erase the device configuration or reset the device to factory defaults, the password for the admin user will revert to the original, factory-assigned default password. To change the default password for the admin user:
Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access right s.
2. Access the device configuration:
Remote Manager: a. Locate your device as described in Use Digi Remote Manager to view and manage your
device. b. Click the Device ID. c. Click Settings. d. Click to expand Config.
Local Web UI: a. On the menu, click System. Under Configuration, click Device Configuration.

The Configuration window is displayed. 3. Click Authentication > Users > admin.

Digi Connect EZ 2 User Guide

Firmware configuration

Configuration methods

4. Enter a new password for the admin user.The password must be at least eight characters long and must contain at least one uppercase letter, one lowercase letter, one number, and one special character.

5. Click Apply to save the configuration and apply the change.
Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the Connect EZ 2 local command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config (config)>
3. Set a new password for the admin user. The password must be at least eight characters long and must contain at least one uppercase letter, one lowercase letter, one number, and one special character.
(config)> auth user admin password new-password (config)>
4. Save the configuration and apply the change.
(config)> save Configuration saved. >
5. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.
Configuration methods
There are two primary methods for configuring your Connect EZ 2 device:
n Web interface. The web interface can be accessed in two ways:

Digi Connect EZ 2 User Guide

Firmware configuration

Using Digi Remote Manager

l Central management using the Digi Remote Manager, a cloud-based device management and data enablement platform that allows you to connect any device to any application, anywhere. With the Remote Manager, you can configure your Connect EZ 2 device and use the configuration as a basis for a Remote Manager configuration which can be applied to other similar devices. See Central management for more information about using the Remote Manager to manage and configure your Connect EZ 2 device.
l The local web interface. See Using the local web interface for more information about using the local web interface to manage and configure your Connect EZ 2 device.
Note Changes made to the device’s configuration by using the local web interface will not be automatically reflected in Digi Remote Manager. You must manually refresh Remote Manager for the changes to be displayed.
Web-based instructions in this guide are applicable to both the Remote Manager and the local web interface. n Command line. A robust command line allows you to perform all configuration and management tasks from within a command shell. Both the Remote Manager and the local web interface also have the option to open a terminal emulator for executing commands on your Connect EZ 2 device. See Using the command line for more information about using the command line to manage and configure your Connect EZ 2 device.
In this guide, task topics show how to perform tasks:
Web
Shows how to perform a task by using the local web interface.
Command line
Shows how to perform a task by using the command line interface.

Using Digi Remote Manager
By default, your Connect EZ 2 device is configured to use Digi Remote Manager as its central management server. Devices must be registered with Remote Manager using one of the following opt ions:
n As part of the getting started process. See the Quick Start Guide for information. n If you have not registered the device already, you can do so using the Device ID, MAC address,
IMEI, or your Remote Manager login credentials. See Add a device to Remote Manager.
For information about configuring central management for your Connect EZ 2 device, see Central management .

Access Digi Remote Manager
To access Digi Remote Manager:
1. If you have not already done so, go to https://myaccount.digi.com/ to sign up for a Digi Remote Manager account.
2. Check your email for Digi Remote Manager login instructions.

Digi Connect EZ 2 User Guide

Firmware configuration

Using the local web interface

3. Go to remotemanager.digi.com. 4. Enter your user name and password. The Digi Remote Manager Dashboard appears.

Using the local web interface
To connect to the Connect EZ 2 local Web UI:
1. Use an Ethernet cable to connect the Connect EZ 2’s ETH2 port to a laptop or PC. 2. Open a browser and go to 192.168.2.1. 3. Log into the device using a configured user name and password.
The default user name is admin and the default password is the unique password printed on the label packaged with your device.
Review the dashboard
After logging in, the local web admin dashboard is displayed. The dashboard shows the current state of the device.

Dashboard area
Network activity

Description
n Summarizes network statistics: the total number of bytes sent and received over all configured bridges and Ethernet devices.
n Displays the status of the network interfaces configured on the device.
n Provides information about the signal strength and technology of the cellular modem(s).

Digi Remote Manager

Displays the device connection status for Digi Remote Manager, the amount of time the connection has been up, and the Digi Remote Manager device ID. See Using Digi Remote Manager. The links in this section enable you to do the following:

n Launch Digi Remote Manager: Click Go To Digi Remote Manager to open the Digi Remote Manager login page.
n Add a device to Remote Manager: Click Register device in new account to add a device to Remote Manager using your Remote Manager login credent ial s.

Device

Displays the Connect EZ 2 device’s status, statistics, and identifying information.

Serial Ports

Displays information about the serial ports on the Connect EZ 2. Each serial port is identified by port name or number, followed by the serial port mode configured for the port. The icons next to the port name or number shows the serial port status:

n Empty circle: Port is not connected. n Green circle: Active connection on the port. n Red X: No signal, which is an error state where the port is not available. n Down arrow: One of the control signals is not active. This icon may display

Digi Connect EZ 2 User Guide

Firmware configuration

Review the dashboard

Dashboard area
Services

Description For for ports configured in Remote Access serial port mode and that have a signal monitor enabled (CTS or DCD) in the Monitoring Settings section.
You can click the icons at the top of the section to access other pages:
n Blue “i”: Click to access the Serial Status page. n Blue wrench: Click to access the Serial Configuration page.
Displays an option for the Watchdog service if it has been enabled.

Log out of the web interface
n On the main menu, click your user name. Click Log out.

Review the dashboard
After logging in, the local web admin dashboard is displayed. The dashboard shows the current state of the device.

Dashboard area
Network activity

Digi Remote Manager

Device

Displays the Connect EZ 2 device’s status, statistics, and identifying information.

Serial Ports Displays information about the serial ports on the Connect EZ 2. Each serial port is identified by port name or number, followed by the serial port mode configured for

Digi Connect EZ 2 User Guide

Firmware configuration

Use the local REST API to configure the Connect EZ 2 device

Dashboard area
Services

Description the port. The icons next to the port name or number shows the serial port status:
n Empty circle: Port is not connected. n Green circle: Active connection on the port. n Red X: No signal, which is an error state where the port is not available. n Down arrow: One of the control signals is not active. This icon may display
For for ports configured in Remote Access serial port mode and that have a signal monitor enabled (CTS or DCD) in the Monitoring Settings section.
You can click the icons at the top of the section to access other pages:
n Blue “i”: Click to access the Serial Status page. n Blue wrench: Click to access the Serial Configuration page.
Displays an option for the Watchdog service if it has been enabled.

Use the local REST API to configure the Connect EZ 2 device
Your Connect EZ 2 device includes a REST API that can be used to return information about the device’s configuration and to make modifications to the configuration. You can view the REST API specification from your web browser by opening the URL:
https://ip-address/cgi-bin/config.cgi For example:
https://192.168.210.1/cgi-bin/config.cgi
Use the GET method to return device configuration information
To return device configuration, issue the GET method. For example, using curl:
$ curl -k -u admin https://ip-address/cgi-bin/config.cgi/value/path -X GET where:
n ip-address is the IP address of the Connect EZ 2 device. n path is the path location in the configuration for the information being returned.
To determine allowed values for path from the Admin CLI: 1. Select the device in Remote Manager and click Actions > Open Console, or log into the Connect EZ 2 local command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI. 2. At the command line, type config to enter configuration mode:
> config (config)>

Digi Connect EZ 2 User Guide

Firmware configuration

Use the local REST API to configure the Connect EZ 2 device

3. At the config prompt, type ?(question mark):

(config)> ? auth cloud firewall monitoring network serial service system vpn

Authentication Central management Firewall Monitoring Network Serial Services System VPN

(config)>
The allowed values for path are listed in the first (left) column. 4. To determine further allowed path location values by using the ?(question mark) with
the path name:

(config> service ?

Services

Additional Configuration

——————————————————————-

————

dns

DNS

iperf

IPerf

location

Location

mdns

Service Discovery (mDNS)

modbus_gateway

Modbus Gateway

multicast

Multicast

ntp

NTP

ping

Ping responder

snmp

SNMP

ssh

SSH

telnet

Telnet

web_admin

Web administration

(config)> service For example, to use curl to return the ssh configuration:

$ curl -k -u admin https://192.168.210.1/cgi-bin/config.cgi/value/service/ssh –

X GET

Enter host password for user ‘admin’:

{

ok”: true,

“result”: {

“type”: “object”,

“path”: “service.ssh”

“collapsed”: {

“acl.zone.0”: “internal”

Digi Connect EZ 2 User Guide

Firmware configuration

Use the local REST API to configure the Connect EZ 2 device

“acl.zone.1”: “edge” , “acl.zone.2”: “ipsec” , “acl.zone.3”: “setup” , “enable”: “true” , “key”: “” , “mdns.enable”: “true” , “mdns.name”: “” , “mdns.type”: “_ssh._tcp.” , “port”: “22” , “protocol.0”: “tcp”
} } } $ You can also use the GET method to return the configuration parameters associated with an item:
curl -k -u admin https://192.168.210.1/cgi-bin/config.cgi/keys/service/ssh -X GET Enter host password for user ‘admin’: { “ok”: true, “result”: [ “acl”, “custom”, “enable”, “key”, “mdns”, “port”, “protocol” ] } $
Use the POST method to modify device configuration parameters and list arrays
Use the POST method to modify device configuration parameters
To modify configuration parameters, use the POST method with the path and value parameters.
$ curl -k -u admin “https://ip-address/cgibin/config.cgi/value?path=path&value=new_value” -X POST where:
n path is the path to the configuration parameter, in dot notation (for example, ssh.service.enable).
n new_value is the new value for the parameter. For example, to disable the ssh service using curl:
$ curl -k -u admin “https://192.168.210.1/cgibin/config.cgi/value?path=service.ssh.enable&value=false” -X POST Enter host password for user ‘admin’: { “ok”: true } $

Digi Connect EZ 2 User Guide

Firmware configuration

Use the local REST API to configure the Connect EZ 2 device

Use the POST method to add itemsto a list array
To add items to a list array, use the POST method with the path and append parameters. For example, to add the external firewall zone to the ssh service:
$ curl -k -u admin “https://192.168.210.1/cgibin/config.cgi/value?path=service.ssh.acl.zone&append=true&value=external” -X POST Enter host password for user ‘admin’: { “ok”: true, “result”: “service.ssh.acl.zone.4” } $
Use the POST method to add objectsto a list array
Objects in an array that require one or more underlying values can be set using the collapsed URI parameter. We recommend including the -g option as well, to instruct curl to turn off globbing. The below example would add a new static route for the WAN interface for the 1.2.4.0/24 destination net work:
$ curl -g -k -u admin “https://192.168.210.1/cgibin/config.cgi/value?path=network.route.static&append=true&collapsed [dst]=1.2.4.0/24&collapsed[interface]=/network/interface/wan” -X POST Enter host password for user ‘admin’: { “ok”: true, “result”: “network.route.static.1” } $

Use the DELETE method to remove items from a list array
To remove items from a list array, use the DELETE method. For example, using curl:

$ curl -k -u admin “https://192.168.210.1/cgi-bin/config.cgi/value?path=path
where path is the path to the list item, including the list number, in dot notation (for example, service.ssh.acl.zone.4). For example, to remove the external firewall zone to the ssh service:
1. Use the GET method to determine the SSH service’s list number for the external zone:

$ curl -k -u admin “https://192.168.210.1/cgi-

bin/config.cgi/value?path=service/ssh/acl/zone -X GET

{

“ok”: true,

“result”: {

“type”: “array”,

“path”: “service.ssh.acl.zone”

“collapsed”: {

“0”: “internal”

“1”: “edge”

“2”: “ipsec”

“3”: “setup”

Digi Connect EZ 2 User Guide

Firmware configuration

Access the terminal screen from the web UI

“4”: “external” }
} } $
2. Use the DELETE method to remove the external zone (list item 4).
$ curl -k -u admin https://192.168.210.1/cgibin/config.cgi/value?path=service.ssh.acl.zone.4 -X DELETE Enter host password for user ‘admin’: { “ok”: true } $

Access the terminal screen from the web UI
A user can log into a terminal screen and use CLI commands to access features.
Note You can also access the terminal screen from a port listed in the Serial Status page.
1. Log in to the web UI. 2. Click System > Terminal. The Terminal screen displays. 3. When prompted, enter your user name and password. 4. Enter the number of the port that you want to access. 5. Information about the port you are connected to displays, as well as commands.
Connecting to port5: Settings: 9600, 8, 1, none, none Type ‘~b.’ to disconnect from port Type ‘~b?’ to list commands
6. Enter ~b?to display additional commands.

Command ~b. ~bB ~bc ~br ~b?

Description Disconnect from the port. Send a BREAK sequence. Clear the history buffer. Send a DTR reset sequence. Display a list of commands.

7. Enter ~b. to disconnect from the port.

Digi Connect EZ 2 User Guide

Firmware configuration

Using the command line

Using the command line
The Digi Connect EZ 2 device provides a command-line interface that you can use to configure the device, display status and statistics, update firmware, and manage device files. See Command line interface for detailed instructions on using the command line interface and see Command line reference for information on available commands.
Access the command line interface
You can access the Connect EZ 2 command line interface using an SSH connection, a telnet connection, or a serial connection. You can use an open-source terminal software, such as PuTTYor TeraTerm, to access the device through one of these mechanisms. You can also access the command line interface in the WebUI by using the Terminal, or the Digi Remote Manager by using the Console. To access the command line, your device must be configured to allow access, and you must log in as a user who has been configured for the appropriate access. For further information about configuring access to these services, see:
n Serial: Serial port n WebUI: Configure the web administration service n SSH: Configure SSH access n Telnet: Configure telnet access
Log in to the command line interface
Command line
1. Connect to the Connect EZ 2 device by using a serial connection, SSH or telnet, or the Terminal in the WebUI or the Console in the Digi Remote Manager. See Access the command line interface for more information. n For serial connections, the default configuration is: l 9600 baud rate l 8 data bits l no parity l 1 stop bit l no flow control n For SSH and telnet connections, the Setup IP address of the device is 192.168.2.1 on the ETH1 port.
2. At the login prompt, enter the username and password of a user with Admin access:
login: admin Password: **********
The default username is admin. The default unique password for your device is printed on the device label. 3. Depending on the device configuration, you may be presented with another menu, for example:

Digi Connect EZ 2 User Guide

Firmware configuration

Using the command line

Access selection menu:
a: Admin CLI q: Quit
Select access or quit [admin] : Type a or admin to access the Connect EZ 2 command line. You will now be connected to the Admin CLI:
Connecting now… Press Tab to autocomplete commands Press ‘?’ for a list of commands and details Type ‘help’ for details on navigating the CLI Type ‘exit’ to disconnect from the Admin CLI
> See Command line interface for detailed instructions on using the command line interface.
Exit the command line interface
Command line
1. At the command prompt, type exit.
> exit 2. Depending on the device configuration, you may be presented with another menu, for
example:
Access selection menu:
a: Admin CLI q: Quit
Select access or quit [admin] : Type q or quit to exit.

Digi Connect EZ 2 User Guide

Interfaces

Connect EZ devices have several physical communications interfaces. These interfaces can be bridged in a Local Area Network (LAN) or assigned to a Wide Area Network (WAN).
This chapter contains the following topics:

Define a static IP address

Wide Area Networks (WANs)

Local Area Networks (LANs)

151

Virtual LANs (VLANs)

195

Bridging

201

Show SureLink status and statistics

205

Configure a TCP connection timeout

209

Digi Connect EZ 2 User Guide

Interfaces

Define a static IP address

Define a static IP address
You can configure a static IP address for the Connect EZ.
1. Log into the Connect EZ 2 WebUI as a user with full Admin access rights. 2. On the menu, click System. Under Configuration, click Device Configuration. The
Configuration window is displayed.

3. Click Network > Interfaces. 4. Click the desired Ethernet section, and keep the default settings.
n Enable: Selected n Interface type: Ethernet n Zone: Edge n Device: The option matches the selected Ethernet: Device: ETH1, Device: ETH2, or
Device ETH. 5. Configure IPv4 settings.
a. Click to expand IPv4 settings. b. Enable IPv4 support, if it is not enabled. This is enabled by default. c. For Type, select Static IP address. d. For Address, type the IP address and subnet of the LAN interface. Use the format IPv4_
address/netmask, for example, 192.168.2.1/24. For more information about the netmask, see IP address and netmask. e. For Default gateway, type the default gateway associated with this network interface. 6. (Optional) Add DNS servers to use with this static IP address. a. Expand the DNS Servers section. b. Click the plus sign icon next to Add DNS server. c. In the DNS server field, enter the IP address of the DNS server. d. Repeat this process if you want to add another DNS server. 7. Click Apply to save the configuration and apply the change.
IP address and netmask
The netmask is the length of the subnet mask in bits. For example, for a class C address with a subnet mask of 255.255.255.0, the length in bits would be 24.

NETMASK Netmask length

255

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

Wide Area Networks (WANs)
The Connect EZ 2 device is preconfigured with one Wide Area Network (WAN), named ETH1, and one Wireless Wide Area Network (WWAN), named Modem.

You can modify configuration settings for the existing WAN and WWANs, and you can create new WANs and WWANs.
This section contains the following topics:

Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs)

Configure WAN/WWAN priority and default route metrics

WAN/WWAN failover

Configure SureLink active recovery to detect WAN/WWAN failures

Configure the device to reboot when a failure is detected

Disable SureLink

Example: Use a ping test for WAN failover from Ethernet to cellular

102

Using Ethernet devices in a WAN

104

Using cellular modems in a Wireless WAN (WWAN)

104

Configure a Wide Area Network (WAN)

127

Configure a Wireless Wide Area Network (WWAN)

135

Show WAN and WWAN status and statistics

146

Delete a WAN or WWAN

148

Default outbound WAN/WWAN ports

149

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs)
A Wide Area Network (WAN) provides connectivity to the internet or a remote network. A WAN configuration consists of the following:
n A physical device, such as an Ethernet device or a cellular modem. n Several networking parameters for the WAN, such as firewall configuration and IPv4 and IPv6
support . n Several parameters controlling failover.
Configure WAN/WWAN priority and default route metrics
The Connect EZ 2 device is preconfigured with one Wide Area Network (WAN), named ETH1, and one Wireless Wide Area Network (WWAN), named Modem. You can also create additional WANs and WWANs. When a WAN is initialized, the Connect EZ 2 device automatically adds a Setup IP route for the WAN. The priority of the WAN is based on the metric of the default route, as configured in the WAN’s IPv4 and IPv6 metric settings.
Assigning priority to WANs
By default, the Connect EZ 2 device’s WAN (ETH1) is configured with the lowest metric (1), and is therefor the highest priority WAN. By default, the Wireless WAN (Modem) is configured with a metric of 3, which means it has a lower priority than ETH1. You can assign priority to WANs based on the behavior you want to implement for primary and backup WAN interfaces. For example, if you want a cellular connection to be your primary WAN, with an Ethernet interface as backup, configure the metric of the WWAN to be lower than the metric of the WAN.
Example: Configure cellular connection asthe primary WAN, and the Ethernet connection asbackup
Required configuration items
n Configured WAN and WWAN interfaces. This example uses the preconfigured ETH1 and Modem interfaces.
n The metric for each WAN.
Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access right s.
2. Access the device configuration:
Remote Manager: a. Locate your device as described in Use Digi Remote Manager to view and manage your
device. b. Click the Device ID. c. Click Settings. d. Click to expand Config.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

Local Web UI: a. On the menu, click System. Under Configuration, click Device Configuration.

The Configuration window is displayed. 3. Set the metrics for Modem:
a. Click Network > Interfaces > Modem > IPv4. b. For Metric, type 1. c. Click IPv6. d. For Metric, type 1. 4. Set the metrics for ETH1: a. Click Network > Interfaces > ETH1 > IPv4. b. For Metric, type 2. c. Click IPv6. d. For Metric, type 2.

5. Click Apply to save the configuration and apply the change.
The Connect EZ 2 device is now configured to use the cellular modem WWAN, Modem, as its highest priority WAN, and its Ethernet WAN, ETH1, as its secondary WAN.
Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the Connect EZ 2 local command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

2. At the command line, type config to enter configuration mode:
> config (config)>
3. Set the metrics for Modem: a. Set the IPv4 metric for Modem to 1. For example:
(config)> network interface modem ipv4 metric 1 (config)>
b. Set the IPv6 metric for Modem to 1:
(config)> network interface modem ipv6 metric 1 (config)>
4. Set the metrics for ETH1: a. Set the IPv4 metric for ETH1 to 2:
(config)> network interface eth1 ipv4 metric 2 (config)>
b. Set the IPv6 metric for ETH1 to 1:
(config)> network interface eth1 ipv6 metric 2 (config)>
5. Save the configuration and apply the change.
(config)> save Configuration saved. >
6. Type exit to exit the Admin CLI. Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.
The Connect EZ 2 device is now configured to use the cellular modem WWAN, Modem, as its highest priority WAN, and its Ethernet WAN, ETH1, as its secondary WAN.
WAN/WWAN failover
If a connection to a WAN interface is lost for any reason, the Connect EZ 2 device will immediately fail over to the next WAN or WWAN interface, based on WAN priority. See Configure WAN/WWAN priority and default route metrics for more information about WAN priority.
Active vs. passive failure detection
There are two ways to detect WAN or WWAN failure: active detection and passive detection.
n Active detection uses Digi SureLinkTM technology to send probe tests to a target host or to test the status of the interface. The WAN/WWAN is considered to be down if there are no responses for a configured amount of time. See Configure SureLink active recovery to detect WAN/WWAN failures for more information about active failure detection.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

n Passive detection involves detecting the WAN going down by monitoring its link status by some means other than active detection. For example, if an Ethernet cable is disconnected or the state of a cellular interface changes from on to off, the WAN is down.
Default Digi SureLink configuration
Surelink is enabled by default for IPv4 on all WAN and WWAN interfaces, and is configured to perform two tests on these interfaces:
n Interface connectivity. n DNS query to the DNS servers for interface’s the network connection.
DNS servers are typically received as part of the interface’s DHCP client connection, although you can manually configure the DNS servers that will be used by SureLink.
Note If your device is operating on a private APN or on wired network with firewall restrictions, ensure that the DNS servers on your private network allow DNS lookups for https://remotemanager.digi.com; otherwise, the SureLink DNS query test will fail and the Connect EZ 2 device will determine that the interface is down.
By default, these tests will be performed every 15 minutes, with a response timeout of 15 seconds. If the tests fail three consecutive times, the device will reset the network interface to attempt to recover the connection.
Configure SureLink active recovery to detect WAN/WWAN failures
Problems can occur beyond the immediate WAN/WWAN connection that prevent some IP traffic from reaching its destination. Normally this kind of problem does not cause the Connect EZ 2 device to detect that the WAN has failed, because the connection continues to work while the core problem exists somewhere else in the network. Using Digi SureLink, you can configure the Connect EZ 2 device to regularly probe connections through the WAN to determine if the WAN has failed, and to perform recovery actions, such as changing the interface metric to use a new default gateway.
Required configuration items
n Enable SureLink. By default, SureLink is enabled for the preconfigured WAN (ETH1) and WWAN (Modem). The default configuration tests the DNS servers configured for the interface. When SureLink is configured for Wireless WANs, SureLink tests are only run if the cellular modem is connected and has an IP address. Use the SIM failover options to configure the Connect EZ 2 device to automatically recover the modem in the event that it cannot obtain an IP address. See Configure a Wireless Wide Area Network (WWAN) for details about SIM failover.
n The type of tests to be performed: l Ping test: Uses ICMP to determine connectivity. The default behavior is to ping the interface gateway, which means that an initial traceroute is sent to the hostname or IP address configured in the SureLink advanced settings, and then the first hop in that route is used for the ping test. l DNS test: Performs a DNS query to the named DNS server.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

l HTTP test: Uses HTTP(s) GET requests to determine connectivity to the configured web server.
l Test DNS servers configured for this interface: Tests communication with DNS servers that are either provided by DHCP, or statically configured for this interface.
l Test the interface status: Tests the current status of the interface. The test fails if the interface is down. Failing this test infers that all other tests fail.
l Custom test: Tests the interface with custom commands.
l TCP connection test: Tests that the interface can reach a destination port on the configured host.
l Test another interface’s status: Tests the status of another interface.
n The actions to take to recover connectivity in the event of failed tests:
l Change default gateway: Increases the interface’s metric to change the default gateway. This recovery action is enabled by default for the preconfigured WAN and WWAN interfaces.
l Restart interfaceThis recovery action is enabled by default for the preconfigured WAN and WWAN interfaces.
l Reset modem: This recovery action is enabled by default for the preconfigured WWAN int erface.
l Switch to alternate SIM: Switches to an alternate SIM. This recovery action is enabled by default for the preconfigured WWAN interface.
l Reboot device.
l Execute custom Recovery commands.
l Powercycle the modem. This recovery action is enabled by default for the preconfigured WWAN interface.
l Two options also apply to every type of action:
o SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
o Override wait interval before performing the next recovery action: The time to wait before the next test is run. If set to the default value of 0s, the Test interval is used.
Additional configuration items
n The Test interval between connectivity tests.
n If more than one tests is configured, determine whether the interface should fail over based on the failure of one of the tests, or all of the tests.
n The number of test that must pass before the interface is considered to be working and its default route and DNS servers are reinstated.
n The amount of time that the device should wait for a response from an individual test before considering it to have failed.
n Advanced configuration items:
l Delayed Start: The amount of time to wait while the device is starting before SureLink testing begins. This setting is bypassed when the interface is determined to be up.
l Backoff interval: The time to add to the test interval when restarting the list of actions.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

l Test interface gateway by pinging: Used by the Interface gateway Ping test as the endpoint for traceroute to use to determine the interface gateway.
Order of precedence for SureLink actions SureLink recovery actions are preformed in the order that they are configured. As a result, if you include the Reboot Device with other SureLink recovery actions, it should be the last action in the recovery action list. Otherwise, the device will reboot and all recovery actions listed after the Reboot Device action will be ignored.
Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access right s.
2. Access the device configuration:
Remote Manager: a. Locate your device as described in Use Digi Remote Manager to view and manage your
device. b. Click the Device ID. c. Click Settings. d. Click to expand Config.
Local Web UI: a. On the menu, click System. Under Configuration, click Device Configuration.

The Configuration window is displayed. 3. Click Network > Interfaces. 4. Create a new WAN or WWAN or select an existing one:
n To create a new WAN or WWAN, see Configure a Wide Area Network (WAN) or Configure a Wireless Wide Area Network (WWAN).
n To edit an existing WAN or WWAN, click to expand the appropriate WAN or WWAN.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

5. After creating or selecting the WAN or WWAN, click SureLink.

By default, SureLink is enabled for the preconfigured WAN (ETH1) and WWAN (Modem). The default configuration tests the DNS servers configured for the interface.
When SureLink is configured for Wireless WANs, SureLink tests are only run if the cellular modem is connected and has an IP address. Use the SIM failover options to configure the Connect EZ 2 device to automatically recover the modem in the event that it cannot obtain an IP address. See Configure a Wireless Wide Area Network (WWAN) for details about SIM failover.
6. (Optional) Change the Test interval between connectivity tests.
Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}.
For example, to set Interval to ten minutes, enter 10m or 600s.
The default is 15 minutes.
7. (Optional) If more than one test target is configured, for Success condition, select either:
n One test passes: Only one test needs to pass for Surelink to consider an interface to be up.
n All test pass: All tests need to pass for SureLink to consider the interface to be up.
8. (Optional) For Pass threshold, type or select the number of times that the test must pass after failure, before the interface is determined to be working and is reinstated.
9. (Optional) For Response timeout, type the amount of time that the device should wait for a response to a test failure before considering it to have failed.
Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}.
For example, to set Response timeout to ten minutes, enter 10m or 600s.
The default is 15 seconds.
10. Click to expand Tests.
By default, Test DNS servers configured for this interface is automatically configured and enabled. This test communication with DNS servers that are either provided by DHCP, or statically configured for this interface.

Digi Connect EZ 2 User Guide

Interfaces a. Click .

Wide Area Networks (WANs)

New tests are enabled by default. To disable, click to toggle off Enable. b. Type a Label for the test. c. Click to toggle on IPv6 if the test should apply to both IPv6 rather than IPv4. d. Select the Test type.
Available test types: n Ping test: Uses ICMP to determine connectivity. If Ping test is selected, complete the following: l Ping target: The type of target for the ping, one of: o Hostname or IP address of an external server. o Ping host: hostname or IP address of the server. o The Interface gateway. If Interface gateway is selected, an initial traceroute is sent to the hostname or IP address configured in the SureLink advanced settings, and then the first hop in that route is used for the ping test. o The Interface address. o The Interface DNS server. l Ping payload size: The number of bytes to send as part of the ping payload. n DNS test: Performs a DNS query to the named DNS server. If DNS test is selected, complete the following: l DNS server: The IP address of the DNS server. n HTTP test: Uses HTTP(s) GET requests to determine connectivity to the configured web server.
If HTTP test is selected, complete the following:
l Web server: The URL of the web server. n Test DNS servers configured for this interface: Tests communication with DNS
servers that are either provided by DHCP, or statically configured for this int erface. n Test the interface status: Tests the current status of the interface. The test fails if the interface is down. Failing this test infers that all other tests fail. If Test the interface status is selected, complete the following:
l Down time: The amount of time that the interface is down before the test can be considered to have failed. Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Down time to ten minutes, enter 10m or 600s.
l Initial connection time: The amount of time to wait for the interface to connect for the first time before the test is considered to have failed.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}.
For example, to set Initial connection time to ten minutes, enter 10m or 600s.
n Custom test: Tests the interface with custom commands.
If Custom test is selected, complete the following:
l The Commands to run to test. n TCP connection test: Tests that the interface can reach a destination port on the
configured host.
If TCP connection test is selected, complete the following:
l TCP connect host: The hostname or IP address of the host to create a TCP connection to.
l TCP connect port: The TCP port to create a TCP connection to. n Test another interface’s status: Tests the status of another interface.
If Test another interface’s status is selected, complete the following:
l Test interface: The interface to test. l IP version: The type of IP connection, one of:
o Any: Either the IPv4 or IPv6 connection must be up. o Both: Both the IPv4 or IPv6 connection must be up. o IPv4: The IPv4 connection must be up. o IPv6: The IPv6 connection must be up. l Expected status: The status required for the test to past. o Up: The test will pass only if the referenced interface is up and passing its
own SureLink tests (if applicable). o Down: The test will pass only if the referenced interface is down or failing
its own SureLink tests (if applicable). e. Repeat for each additional test. 11. Add recovery actions: a. Click to expand Recovery actions.
By default, there are two preconfigured recovery actions: n Update routing: Uses the Change default gateway action, which increases the interface’s metric by 100 to change the default gateway. n Restart interface.
b. Click .

New recovery actions are enabled by default. To disable, click to toggle off Enable. c. Type a Label for the recovery action. d. For Recovery type, select Reboot device.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

e. For Recovery type, select the type of recovery action. If multiple recovery actions are configured, they are performed in the order that they are listed.
n Change default gateway: Increases the interface’s metric to change the default gat eway.
If Change default gateway is selected, complete the following:
l SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
l Increase metric to change active default gateway: Increase the interface’s metric by this amount. This should be set to a number large enough to change the routing table to use another default gateway. The default is 100.
l Override wait interval before performing the next recovery action: The time to wait before the next test is run. If set to the default value of 0s, the Test interval is used.
n Restart interface.
If Restart interface is selected, complete the following:
l SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
l Override wait interval before performing the next recovery action: The time to wait before the next test is run. If set to the default value of 0s, the Test interval is used.
n Reset modem: This recovery action is available for WWAN interfaces only.
If Reset modem is selected, complete the following:
l SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
l Override wait interval before performing the next recovery action: The time to wait before the next test is run. If set to the default value of 0s, the Test interval is used.
n Switch to alternate SIM: Switches to an alternate SIM. This recovery action is available for WWAN interfaces only.
If Switch to alternate SIM is selected, complete the following:
l SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
l Override wait interval before performing the next recovery action: The time to wait before the next test is run. If set to the default value of 0s, the Test interval is used.
n Reboot device.
If Reboot device is selected, complete the following:
l SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
l Override wait interval before performing the next recovery action: The time to wait before the next test is run. If set to the default value of 0s, the Test interval is used.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

n Execute custom Recovery commands.
If Recovery commands is selected, complete the following:
l SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
l The Commands to run to recovery connectivity. l Override wait interval before performing the next recovery action: The time to
wait before the next test is run. If set to the default value of 0s, the Test interval is used. n Powercycle the modem. This recovery action is available for WWAN interfaces only.
If Powercycle the modem is selected, complete the following:
l SureLink test failures: The number of failures for this recovery action to perform, before moving to the next recovery action.
l Override wait interval before performing the next recovery action: The time to wait before the next test is run. If set to the default value of 0s, the Test interval is used.
f. Repeat for each additional recovery action. 12. (Optional) Configure advanced SureLink parameters:
a. Click to expand Advanced settings. b. For Delayed Start, type the amount of time to wait while the device is starting before
SureLink testing begins. This setting is bypassed when the interface is determined to be up. Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Delayed start to ten minutes, enter 10m or 600s. The default is 300 seconds. c. For Backoff interval, type the time to add to the test interval when restarting the list of actions. This option is capped at 15 minutes. Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the format number{w|d|h|m|s}. For example, to set Backoff interval to ten minutes, enter 10m or 600s. The default is 300 seconds. d. Test interface gateway by pinging is used by the Interface gateway Ping test as the endpoint for traceroute to use to determine the interface gateway. The default is 8.8.8.8, and should only be changed if this IP address is not accessible due to networking issues. 13. Click Apply to save the configuration and apply the change.
Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the Connect EZ 2 local command line as a user with full Admin access rights. Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

2. At the command line, type config to enter configuration mode:
> config (config)>
3. Create a new WAN or WWAN, or edit an existing one: n To create a new WAN or WWAN, see Configure a Wide Area Network (WAN) or Configure a Wireless Wide Area Network (WWAN). n To edit an existing WAN or WWAN, change to the WAN or WWAN’s node in the configuration schema. For example, for a WAN or WWAN named my_wan, change to the my_wan node in the configuration schema:
(config)> network interface my_wan (config network interface my_wan)>
4. Enable SureLink. By default, SureLink is enabled for the preconfigured WAN (eth1) and WWAN (modemwwan2). The default configuration tests the DNS servers configured for the interface. When SureLink is configured for Wireless WANs, SureLink tests are only run if the cellular modem is connected and has an IP address. Use the SIM failover options to configure the Connect EZ 2 device to automatically recover the modem in the event that it cannot obtain an IP address. See Configure a Wireless Wide Area Network (WWAN) for details about SIM failover.
(config network interface my_wan)> surelink enable true (config network interface my_wan)>
5. By default, the Test DNS servers configured for this interface test is automatically configured and enabled. This tests communication with DNS servers that are either provided by DHCP, or statically configured for this interface. To add additional tests: a. Add a test:
(config network interface my_wan)> add surelink tests end (config network interface my_wan surelink tests 1)>
b. New tests are enabled by default. To disable:
(config network interface my_wan surelink tests 1)> enable false (config network interface my_wan surelink tests 1)>
c. Create a label for the test:
(config network interface my_wan surelink tests 1)> label string (config network interface my_wan surelink tests 1)>
d. if the test should apply to both IPv6 rather than IPv4, enable IPv6:
(config network interface my_wan surelink tests 1)> ipv6 true (config network interface my_wan surelink tests 1)>

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

e. Set the test type:
(config network interface my_wan surelink tests 1)> test value (config network interface my_wan surelink tests 1)>
where value is one of: n ping: Uses ICMP to determine connectivity. If ping is selected, complete the following: l Set the ping_method:
(config network interface my_wan surelink tests 1)> ping_ method value (config network interface my_wan surelink tests 1)>
where value is one of: o hostname: The hostname or IP address of an external server.
o Set ping_host to the hostname or IP address of the server:
(config network interface my_wan surelink tests 1)> ping_ host hostname/IP_address (config network interface my_wan surelink tests 1)>
o interface_gateway. If set, an initial traceroute is sent to the hostname or IP address configured in the SureLink advanced settings, and then the first hop in that route is used for the ping test.
o interface_address. o interface_dns: The interface’s DNS server. l Set the number of bytes to send as part of the ping payload:
(config network interface my_wan ipsec tunnel ipsec_example surelink tests 1)> ping_size int (config network interface my_wan surelink tests 1)>
n dns: Performs a DNS query to the named DNS server. If dns is set, set the IPv4 or IPv6 address of the DNS server:
(config network interface my_wan surelink tests 1)> dns_server IP_address (config network interface my_wan surelink tests 1)>
n http: Uses HTTP(s) GET requests to determine connectivity to the configured web server. If http is set, set the URL of the web server.
(config network interface my_wan surelink tests 1)> http url (config network interface my_wan surelink tests 1)>
n dns_configured: Tests communication with DNS servers that are either provided by DHCP, or statically configured for this interface.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)
n interface_up: Tests the current status of the interface. The test fails if the interface is down. Failing this test infers that all other tests fail. If interface_up is set, complete the following: l Set the amount of time that the interface is down before the test can be considered to have failed.
(config network interface my_wan surelink tests 1)> interface_down_time value (config network interface my_wan surelink tests 1)>
where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. For example, to set interface_down_time to ten minutes, enter either 10m or 600s:
(config network interface my_wan surelink tests 1)> interface_down_time 600s (config)>
l Set the amount of time to wait for the interface to connect for the first time before the test is considered to have failed.
(config network interface my_wan surelink tests 1)> interface_timeout value (config network interface my_wan surelink tests 1)>
where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. For example, to set interface_timeout to ten minutes, enter either 10m or 600s:
(config network interface my_wan surelink tests 1)> interface_timeout 600s (config)>
n custom_test: Tests the interface with custom commands. If custom_test is set, set the commands to run to perform the test:
(config network interface my_wan surelink tests 1)> custom_ test_commands “string” (config network interface my_wan surelink tests 1)>
n tcp_connection: Tests that the interface can reach a destination port on the configured host. If tcp_connection is selected, complete the following:

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

l Set the hostname or IP address of the host to create a TCP connection to:
(config network interface my_wan surelink tests 1)> tcp_host hostname/IP_address (config network interface my_wan surelink tests 1)>
l Set the TCP port to create a TCP connection to.
(config network interface my_wan surelink tests 1)> tcp_port port (config network interface my_wan surelink tests 1)>
n other: Tests the status of another interface. If other is selected, complete the following: l Set the interface to test. i. Use the ?to determine available interfaces: ii. Set the interface. For example:
(config network interface my_wan surelink tests 1)> other_ interface /network/interface/eth1 (config network interface my_wan surelink tests 1)>
l Set the type of IP connection:
(config network interface my_wan surelink tests 1)> other_ip_ version value (config network interface my_wan surelink tests 1)>
where value is one of: o any: Either the IPv4 or IPv6 connection must be up. o both: Both the IPv4 or IPv6 connection must be up. o ipv4 The IPv4 connection must be up. o ipv6: The IPv6 connection must be up. l The status required for the test to past.
(config network interface my_wan surelink tests 1)> other_ status value (config network interface my_wan surelink tests 1)>
where value is one of: o up: The test will pass only if the referenced interface is up and passing its
own SureLink tests (if applicable). o down: The test will pass only if the referenced interface is down or failing its
own SureLink tests (if applicable). f. Repeat for each additional test.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

6. Add recovery actions: a. Type … to return to the root of the configuration:
(config network interface my_wan surelink tests 1)> … (config)>
b. Add a recovery action:
(config)> add network interface my_wan surelink actions end (config network interface my_wan surelink actions 0)>
c. New actions are enabled by default. To disable:
(config network interface my_wan surelink actions 0)> enable false (config network interface my_wan surelink actions 0)>
d. Create a label for the action:
(config network interface my_wan surelink actions 0)> label string (config network interface my_wan surelink actions 0)>
e. Set the type of recovery action. If multiple recovery actions are configured, they are performed in the order that they are listed. The command varies depending on whether the interface is a WAN or WWAN: n WAN interfaces:
(config network interface my_wan surelink actions 0)> action value (config network interface my_wan surelink actions 0)>
n WWAN interfaces:
(config network interface my_wan surelink actions 0)> modem_ action value (config network interface my_wan surelink actions 0)>
where value is one of: n update_routing_table: Increases the interface’s metric to change the default gat eway. If update_routing_table is selected, complete the following: l Set the number of failures for this recovery action to perform, before moving to the next recovery action:
(config network interface my_wan surelink actions 0)> test_ failures int (config network interface my_wan surelink actions 0)>
The default is 3. l Set the amount that the interface’s metric should be increased. This should be
set to a number large enough to change the routing table to use another default gateway.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)
(config network interface my_wan surelink actions 0)> metric_ adjustment_modem int (config network interface my_wan surelink actions 0)>
The default is 100. l Set the time to wait before the next test is run. If set to the default value of 0s,
the test interval is used.
(config network interface my_wan surelink actions 0)> override_interval int (config network interface my_wan surelink actions 0)>
n restart_interface. If restart_interface is selected, complete the following: l Set the number of failures for this recovery action to perform, before moving to the next recovery action:
(config network interface my_wan surelink actions 0)> test_ failures int (config network interface my_wan surelink actions 0)>
The default is 3. l Set the time to wait before the next test is run. If set to the default value of 0s,
the test interval is used.
(config network interface my_wan surelink actions 0)> override_interval int (config network interface my_wan surelink actions 0)>
n reset_modem: This recovery action is available for WWAN interfaces only. If reset_modem is selected, complete the following: l Set the number of failures for this recovery action to perform, before moving to the next recovery action:
(config network interface my_wan surelink actions 0)> test_ failures int (config network interface my_wan surelink actions 0)>
The default is 3. l Set the time to wait before the next test is run. If set to the default value of 0s,
the test interval is used.
(config network interface my_wan surelink actions 0)> override_interval int (config network interface my_wan surelink actions 0)>
n switch_sim: Switches to an alternate SIM. This recovery action is available for WWAN interfaces only. If switch_sim is selected, complete the following:

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)
l Set the number of failures for this recovery action to perform, before moving to the next recovery action:
(config network interface my_wan surelink actions 0)> test_ failures int (config network interface my_wan surelink actions 0)>
The default is 3. l Set the time to wait before the next test is run. If set to the default value of 0s,
the test interval is used.
(config network interface my_wan surelink actions 0)> override_interval int (config network interface my_wan surelink actions 0)>
n modem_power_cycle: This recovery action is available for WWAN interfaces only. If modem_power_cycle is selected, complete the following: l Set the number of failures for this recovery action to perform, before moving to the next recovery action:
(config network interface my_wan surelink actions 0)> test_ failures int (config network interface my_wan surelink actions 0)>
The default is 3. l Set the time to wait before the next test is run. If set to the default value of 0s,
the test interval is used.
(config network interface my_wan surelink actions 0)> override_interval int (config network interface my_wan surelink actions 0)>
n reboot_device. If reboot_device is selected, complete the following: l Set the number of failures for this recovery action to perform, before moving to the next recovery action:
(config network interface my_wan surelink actions 0)> test_ failures int (config network interface my_wan surelink actions 0)>
The default is 3. l Set the time to wait before the next test is run. If set to the default value of 0s,
the test interval is used.
(config network interface my_wan surelink actions 0)> override_interval int (config network interface my_wan surelink actions 0)>
n custom_action: Execute custom recovery commands.

Digi Connect EZ 2 User Guide

Interfaces

Wide Area Networks (WANs)

If custom_action is selected, complete the following: l Set the number of failures for this recovery action to perform, before moving to the next recovery action:
(config network interface my_wan surelink actions 0)> test_ failures int (config network interface my_wan surelink actions 0)>
The default is 3. l Set the commands to run to attempt to recovery connectivity.
(config network interface my_wan surelink actions 0)> custom_ action_commands_modem “string” (config network interface my_wan surelink actions 0)>
l Set the time to wait before the next test is run. If set to the default value of 0s, the test interval is used.
(config network interface my_wan surelink actions 0)> override_interval int (config network interface my_wan surelink actions 0)>
f. Repeat for each additional recovery action. 7. Optional SureLink configuration parameters:
a. Type … to return to the root of the configuration:
(config network interface my_wan surelink actions 0)> … (config)>
b. Set the test interval between connectivity tests:
(config)> network interface my_wan surelink interval value (config)>
where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}. For example, to set interval to ten minutes, enter either 10m or 600s:
(config)> network interface my_wan surelink interval 600s (config)>
The default is 15m. c. If more than one test target is configured, set the success condition:
(config)> network interface my_wan surelink success_condition value (config)>

Documents / Resources

DIGI EZ 2 Connect [pdf] User Guide
AnywhereUSB, AnywhereUSB Plus, 90002383, EZ 2 Connect, EZ 2, Connect

References

User Manual

DIGI EZ 2 Connect User Guide

EZ 2 Connect

Specifications

Product Usage Instructions

1. LTS Firmware Benefits

2. Subscriptions

3. IPv6 Static Address Assignment

4. Improved Connectivity to Digi Remote Manager

5. Regional Cellular Modem Firmware Bundles

6. FIPS Mode Support for IPsec

FAQ

Q: How can I update the firmware on my Digi Connect EZ 2?

Q: Can I revert back to a previous firmware version?

Documents / Resources

References

Leave a comment

Cancel reply