Serial Digi-sign Routing Made Easy

Serial digi sign routing

hello and welcome I'm Ben Gartland from digi international today's demo is going to be the initial setup of a digi transport WR router will configure an Ethernet interface the cellular one interface will change the default login credentials and review and enable the firewall this demo is relevant to all transport and WR rooters we're using teratoma in this demo as this works quite well with our transport Reuters the settings to configure our speed one one five two hundred eight nine one with no flow control the first command will be entering is eighty which just is a good command to prove that serial port is working through to the route correctly then we type in ID which shows us hardware and software information so here you can see it's at WL 44 and the software build is six one zero three we'll scroll back down and then we'll have a quick look at the routing table with the command route print now here you can see that the default IP address is still on the Ethernet 0 interface 192 168 not 1.1 if we do a thorough status we can see there that the interface is active and connected but because the LAN here is not using the the same subnet as the route of default we're going to set up the DHCP client on Ethernet 0 and then check the interface again and we can see here it's obtained an IP address using DHCP the new IP address is 191 six eight zero 49 with a 24-bit mask we'll have a look at the routing table again and you can see there the IP address is shown Ethernet 0 is up on the new subnet so now we'll switch to the web browser and continue with the web-based configuration will pop in the IP address will skip the getting started wizard and we'll just log in with the default username and password the username is a username the password is password and we'll come to the the basic welcome screen we can see here the the model the part number under the firmware version so similar information to what we saw in this CLI to start with configuration we're going to go to network interfaces mobile and in here we're going to go to mobile settings and in here we're going to put in the APN to use now this differs depending on the service provider in use but the one I'm going to be using is mobile Oh to code at UK as the search for Rider is o2 if your sim has a pin enabled you can enter and confirm the pin in these two boxes if the APN you're using requires a username and password you can enter that in these boxes shown here the APN we're using does not need a username and password so we'll leave these fields blank click the apply button to apply the settings we'll go into the Advanced section and in here you can see there's the sim book and the confirm book if the sim has been locked or due to the pin being entered too many times incorrectly you can unlock the sim using the poke field here once we're happy with the configuration we can click on save configuration and click on the Save button at the top till it takes a moment to savor the configuration to flash so now we'll go into the management and network status interfaces mobile menu and we'll have a look here and confirm that the mobile one interface has come up correctly so we can see there the signal strength is good - 71 DBM the IP address there that's been obtained from the service provider along with DNS servers as we scroll down we can see the signal strength again is shown as minus 71 and the radio technology in use is LTE we've got two sierra wireless module in here which is the MC 77 10 and here you can see the iccid of the sim that's in the router the GPRS attachment status actually refers to all the radio network type so GPRS 3G and LTE so you can see there that the radio module is attached to the network and it's registered on the mobile network and also connected to the cell ID which is shown with the CI prefix so that's useful for trouble shooting as it allows you to check which cell ID the radio module is connected to on the base station will continue to scroll down and now go into the IP routing table so here we can see the default routes are shown and the only default route we have is via PPP one which is up so that's the mobile or cellular one interface that we've just configured next we'll go into security and do another important task which is changing the default username and password if you don't do this and the router has a public IP address then anybody that knows the default username and password will be able to access your router so type in a secure username something that only you know and also a secure password clicking on the access level where it says is super you will see the other access levels available that you can apply to different users this is an administrative user level so different users can have a different level of access on this router to test the username and password you have just configured don't log out of the router on this tab in case you've made a typo and you don't realize it open up a new tab pop in the IP address and enter the username and password that you have just configured then if anything goes wrong it allows you to flick back to the other tab and reconfigure the username and password again and retry if the service provider you're using on this router allocates a public route Abul IP address to the one interface then I also recommend you configure the firewall this is done through configuration security firewall and in here you can see the default firewall rule set which is pre-configured on every transport W our router the lines that you see prefixed with a hash or a comment the first rule allows FTP traffic outbound from the LAN through to the one but it's also and it was the Rooter to keep a track of the data ports that are in use and open those dynamically the next rule down allows all other outbound traffic to exit the one interface this could be traffic generated by the router itself or traffic being routed from the LAN side interfaces out through the one interface the next few rules allow for the setup of an IPSec VPN and then once the VPN is up it allows traffic over that VPN for management of the router only secure management protocols were allowed so here we allow ssh and SFTP and if you prefer a web-based configuration HTTP and finally the last rule will block or discard all of the packets anything that is blocked by this rule will create an entry in the firewall log with a brief description of why that packet was discarded to activate to the firewall on the one interface we need to scroll down further to where we see the PPP one interface pop a checkmark in the box and click apply as soon as you click apply it the firewall is active this part of the configuration is complete so let's click on the link that's going to take us through to the save option and again we'll click on save at the top now we'll return to the firewall such security firewall and on the left here you can see the hit counter and currently they are all 0 so let's go through to execute a command and we'll just send three pings through to Google's DNS server 8.8.8.8 and you can see there that we get three replies we'll return back to the firewall and you can see now the hit counter has 6 hits for that rules that's three outbound and three inbound if we were to look at a packet trace we would see an ICMP echo request out and an ICMP echo reply coming back and we'd see that three times now remember at the start we set up the router with a DHCP obtained IP address on its Ethernet interface this is probably not what you want for a route on your network you probably want it to have a static or fixed IP address on its Ethernet interface currently it's using 191 6 8 and 0 49 but we're going to change that so the first thing we need to do ideally before we change the IP address is set up a DHCP server there's going to allow the route to assign IP addresses from that new range so we'll start off with a pool at 192 168 0.20 and we'll end the pool at 192 168 0.59 they should give us enough addresses for our small LAN the gateway and DNS server need to be set to the IP address that we're going to configure on the rooters Ethernet interface so we'll use 192 168 0 dot 250 will change the lease duration to one day because we don't know how often devices are going to be connecting and disconnecting from the network and will also enable duplicate address detection just in case there is anything on the lan that has an IP address within that range already now the DHCP server is configured we'll click apply and remember this IP address 191 6 8 and 0 to 50 that's what we're going to apply on the Ethernet 0 interface so we scroll back up make sure the dot is next to use the following settings pop in the IP address 191 6 8 0 to 15 give it a optional description and click apply note that as soon as you click apply it the configuration is active and the route will be on its new IP address so we enter that in the address bar at the top and login and finally we need to make one more save to the configuration to ensure the changes we made to the DHCP server and Ethernet configuration are saved to the root of startup configuration you