X2-Z11-E-A Digi International, X2-Z11-E-A Datasheet - Page 96

• Manufacturer Part Number: X2-Z11-E-A
• Description: CONNECTPORT X2 2.4GHZ
• Manufacturer: Digi International
• Series: ConnectPort™ X2r

Specifications of X2-Z11-E-A

• Function: Transceiver, Xbee, Gateway
• Modulation Or Protocol: UDP/TCP, DHCP, SNMPv1
• Frequency: 2.4GHz
• Applications: General Purpose
• Interface: RJ-45
• Sensitivity: -82dBm
• Power - Output: 16dBm
• Data Rate - Maximum: 11Mbps
• Voltage - Supply: 12VDC
• Wireless Frequency: 2.4 GHz
• Interface Type: Ethernet
• Modulation: DBPSK, DQPSK
• Security: SSL Tunnel
• Operating Voltage: 9 V to 30 V
• Output Power: 1.2 W
• Antenna: 4 in Dipole
• Operating Temperature Range: - 30 C to + 70 C
• Lead Free Status / RoHS Status: Lead free / RoHS Compliant
• Features: -
• Lead Free Status / Rohs Status: Lead free / RoHS Compliant
• Other names: 602-1173

Example VPN configuration
The diagram shows a Digi Connect WAN VPN used as a primary remote site router:
How VPN tunnels work
The Digi device’s Ethernet port usually connects to a switch or hub, which then connects to other
Ethernet devices. The mobile/cellular carrier provides only one IP address to the mobile interface.
The Digi device uses Network Address Translation (NAT), where only the mobile IP address is
visible to the outside. Private IP addresses are typically used on the remote site LAN connected to
the Digi device’s Ethernet port. All outgoing traffic, except the tunneled VPN traffic, uses the
mobile IP address of the Digi device. Using the example network above, the process for initiating
VPN tunnels works like this:
1
2
3
172.17.1.1
Remote Site
Typically, a host or device on the remote subnet (in this case, 172.17.1.0) requests
information from a host on the main site (HQ) subnet (172.16.5.0). For example, a computer
at 172.17.1.20 needs a file from 172.16.5.100.
The Digi device sees the request as being on the HQ subnet and checks whether a VPN
tunnel exists between the two sites.
If no tunnel exists, the Digi device initiates a VPN tunnel request to its peer — the VPN
concentrator at HQ. The VPN policy settings are compared, and if they match, an IPsec
tunnel is created between the Digi device and the VPN concentrator. Traffic is encrypted as
defined in the VPN policies.
Connect
Digi
WAN
VPN
166.123.99.99
Data Network
Cellular
Private IP Tunnel
IPSec ESP
Internet
Appliance
C o n f i g u r e D i g i d e v i c e s
209.123.123.123
VPN
HQ
P WR
O K
A C T / C H 0
A C T / C H 1
WI C 0
WI C 0
A C T / C H 0
A C T / C H 1
E T H
A C T
C O L
172.16.5.1
9 6