By default, only devices connected to the IX30's LAN have access to the device via web administration and SSH. To enable these services for access from remote devices:
- The IX30 device must have a publicly reachable IP address.
- The External firewall zone must be added to the web administration or SSH service. See Firewall configuration for information on zones.
- See Set the idle timeout for IX30 users for information about setting the inactivity timeout for the web administration and SSH services.
To allow web administration or SSH for the External firewall zone:
Add the External firewall zone to the web administration service
Web
- Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
- Access the device configuration:
Remote Manager:
- Locate your device as described in Use Digi Remote Manager to view and manage your device.
- Click the Device ID.
- Click Settings.
- Click to expand Config.
Local Web UI:- On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
- Click Services > Web administration > Access Control List > Zones.
- For Add Zone, click .
- Select External.
- Click Apply to save the configuration and apply the change.
Command line
- Select the device in Remote Manager and click Actions > Open Console, or log into the IX30 local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
- At the command line, type config to enter configuration mode:
> config (config)>
- Add the external zone to the web administration service:
(config)> add service web_admin acl zone end external (config)>
- Save the configuration and apply the change
(config)> save Configuration saved. > - Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.
Add the External firewall zone to the SSH service
Web
- Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
- Access the device configuration:
Remote Manager:
- Locate your device as described in Use Digi Remote Manager to view and manage your device.
- Click the Device ID.
- Click Settings.
- Click to expand Config.
Local Web UI:- On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
- Click Configuration > Services > SSH > Access Control List > Zones.
- For Add Zone, click .
- Select External.
- Click Apply to save the configuration and apply the change.
Command line
- Select the device in Remote Manager and click Actions > Open Console, or log into the IX30 local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
- At the command line, type config to enter configuration mode:
> config (config)>
- Add the External zone to the SSH service:
(config)> add service ssh acl zone end external (config)>
- Save the configuration and apply the change
(config)> save Configuration saved. > - Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.
PDF
