Example: Configure two LANs

The default configuration of the IX20 consists of one WAN (named ETH1), one WWAN (Modem), and one LAN (ETH2). For IX20W Wi-Fi enabled devices, the default configuration of the ETH2 uses a bridge that consists of two devices, the ETH2 Ethernet device and the Digi AP Wi-Fi access point.

In this example, we will:

  1. Create a new Wi-Fi access point (IX20W models only).
  2. Create a new bridge that consists of the new access point and the ETH1 device.

    In this configuration, the ETH1 device will no longer be part of a WAN. Internet access will be provided by the cellular modem.

  3. Create two new LANs:
    • LAN1 will be configured to use the new bridge.
    • LAN2 will be configured to use the ETH2 device.

Task one: Create a new access point (IX20W models only)


  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click Network > Wi-Fi > Access points.

  4. For Add Wi-Fi access point, type Example_AP for the name of the new access point and click .

    The Wi-Fi access point configuration window is displayed.

  5. For SSID, type Example_SSID.
  6. Type a Pre-shared key that clients will use to access the AP.

  7. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX20 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Create a new access point:
    (config)> add network wifi ap Example_AP
(config network wifi ap Example_AP)>

    New access points are enabled by default.

  4. Set the SSID for the Wi-Fi access point. Up to 32 characters are allowed.
    (config network wifi ap Example_AP)> ssid Example_SSID
(config network wifi ap Example_AP)>

    SSID broadcasting is enabled by default for new access points.

  5. Set the security for the access point to WPA2:
    (config network wifi ap Example_AP)> encryption type wpa2
(config network wifi ap Example_AP)>
  6. Set the password that clients will use when connecting to the access point:
    (config network wifi ap Example_AP)> encryption key_psk2 password
(config network wifi ap Example_AP)>
  7. Save the configuration and apply the change.
    (config network wireless ap Example_AP)> save
Configuration saved.
>
  8. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.

Task two: Create a new bridge (IX20W )

 

  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click Network > Bridges.
  4. For Add Bridge, type Example_bridge and click .

    The new bridge configuration window is displayed.

  5. Click to expand Devices.
  6. For Add Device, click .
  7. For Device, select Ethernet: ETH1.
  8. Click again to add another device.
  9. For Device, select Wi-Fi access point: Example_AP.

  10. STP is used when using multiple LANs on the same device, to prevent bridge loops and other routing conflicts.

    1. Click STP.
    2. Click Enable.
    3. For Forwarding delay, enter the number of seconds that the device will spend in each of the listening and learning states before the bridge begins forwarding data. The default is 2 seconds.
  11. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX20 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Create a new bridge:
    (config)> add network bridge Example_bridge
(config network bridge Example_bridge)>

    New access points are enabled by default.

  4. Use the Tab key (twice) to determine available devices:
    (config network bridge Example_bridge)> add device end [TAB][TAB]
/network/device/eth1              /network/device/eth2
/network/device/loopback          /network/bridge/lan
/network/wifi/ap/digi_ap          /network/wifi/ap/Example_AP
(config network bridge Example_bridge)> add device end /network/
  5. Add the eth1 Ethernet device:
    (config network bridge Example_bridge)> add device end /network/device/eth1
(config network bridge Example_bridge)>
  6. Add the Example_AP Wi-Fi access point:
    (config network bridge Example_bridge)> add device end /network/wireless/ap/Example_AP
(config network bridge Example_bridge)>

  7. STP is used when using multiple LANs on the same device, to prevent bridge loops and other routing conflicts.

    1. Enable STP:
      (config network bridge Example_bridge)> stp enable true
    2. Set the number of seconds that the device will spend in each of the listening and learning states before the bridge begins forwarding data:
      (config network bridge Example_bridge)> stp forward_delay num
(config)>

      The default is 2 seconds.

  8. Save the configuration and apply the change.
    (config network bridge Example_bridge)> save
Configuration saved.
>
  9. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.

Task three: Create the LANs

  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Create LAN1:
    1. Click Network > Interfaces.
    2. For Add Interface:, type LAN1 and click .

    3. For Zone, select Internal.
    4. For Device:
      • If you are configuring a Wi-Fi enabled IX20W , select Bridge: Example_bridge.
      • If you are configuring a non-Wi-Fi IX20, select Ethernet: ETH1.

    5. Click to expand IPv4.
    6. For Address, type 192.168.3.1/24.
    7. Click to expand DHCP server.
    8. Click Enable.
  4. Create LAN2:
    1. Click Network > Interfaces.
    2. For Add Interface:, type LAN2 and click .
    3. For Zone, select Internal.
    4. For Device, select Ethernet: ETH2.
    5. Click to expand IPv4.
    6. For Address, type 192.168.4.1/24.
    7. Click to expand DHCP server.
    8. Click Enable.
  5. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX20 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Create the LAN1 interface:
    1. Add the interface:
      (config)> add network interface LAN1
(config network interface LAN1)>
    2. Configure the LAN1 interface:
      1. Enter device ? to view available devices and the proper syntax.
        (config network interface LAN1)> device ?

Device: The network device used by this network interface.
Format:
  /network/device/eth1
  /network/device/eth2
  /network/bridge/LAN
  /network/bridge/Example_bridge
  /network/wireless/ap/digi_ap
  /network/wireless/ap/Example_AP
Current value:

(config network interface LAN1)> device
      2. Set the device for the LAN1 interface:
        • If you are configuring a Wi-Fi enabled IX20W , set the device to /network/bridge/Example_bridge. 
          (config network interface LAN1)> device /network/bridge/Example_bridge
(config network interface LAN1)>
        • If you are configuring a non-Wi-Fi IX20, set the device to /network/device/eth1 . 
          (config network interface LAN1)> device /network/device/eth1
(config network interface LAN1)>
    3. Configure the firewall zone for the LAN1 interface to internal:
      (config network interface LAN1)> zone internal
(config network interface LAN1)>
    4. Configure the IPv4 address for the LAN1 interface:
      (config network interface LAN1)> ipv4 address 192.168.3.1/24
(config network interface LAN1)>
    5. Enable the DHCP server for the LAN1 interface:
      (config network interface LAN1)> ipv4 dhcp_server enable true
(config network interface LAN1)>
  4. Create the LAN2 interface:
    1. Add the interface:
      (config)> add network interface LAN2
(config network interface LAN2)>
    2. Configure the LAN2 interface:
      1. Enter device ? to view available devices and the proper syntax.
        (config network interface LAN2)> device ?

Device: The network device used by this network interface.
Format:
  /network/device/eth1
  /network/device/eth2
  /network/bridge/LAN
  /network/bridge/Example_bridge
  /network/wireless/ap/digi_ap
  /network/wireless/ap/Example_AP
Current value:

(config network interface LAN2)> device
      2. Set the device for the LAN2 interface:
        (config network interface LAN2)> device /network/device/eth1
(config network interface LAN2)>
    3. Configure the firewall zone for the LAN2 interface to internal:
      (config network interface LAN2)> zone internal
(config network interface LAN2)>
    4. Configure the IPv4 address for the LAN2 interface:
      (config network interface LAN2)> ipv4 address 192.168.4.1/24
(config network interface LAN2)>
    5. Enable the DHCP server for the LAN2 interface:
      (config network interface LAN2)> ipv4 dhcp_server enable true
(config network interface LAN2)>
  5. Save the configuration and apply the change.
    (config network interface LAN2)> save
Configuration saved.
>
  6. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.

Task four: Verify the new configuration

The final step in this example is to verify the new configuration.

  1. Verify that LAN1 is operating correctly:
    1. Connect a device to LAN1 through the ETH1 Ethernet port, or by connecting to the Example_AP Wi-Fi1 access point.
    2. Verify that the device has been provided an IP address from the LAN DHCP server in the 192.168.3.* subnet.
  2. Verify that LAN2 is operating correctly:
    1. Connect a device to LAN2 through the ETH2 Ethernet port.
    2. Verify that the device has been provided an IP address from the LAN2 DHCP server in the 192.168.4.* subnet.