This article addresses the IXrouter's local web interface, which enables you to register the IXrouter if it is not yet registered in the IXON Cloud, change the IXrouter's WAN, LAN, and Firewall configuration locally, or view the IXrouter's status overview, a more advanced alternative to the LED statusses. For additional troubleshooting help, please view: Troubleshooting - unable to connect your IXrouter to the IXON Cloud.

Select what you would like to do:

• Overview - View the IXrouter's status overview
• Configuration - Register the IXrouter
• Configuration - View or change the IXrouter's configuration
• Diagnostics - Troubleshoot the IXrouter's network connection

Overview - View the IXrouter's status overview

The "Overview" page gives information about the IXrouter's current status and it may help you to better understand the current situation or troubleshoot any problems.

• Open the local web interface
• Status overview details
• Easy remote access

Open the local web interface

Follow the steps below to open the IXrouter's local web interface.

• Connect your computer to one of the IXrouter's LAN ports using an Ethernet cable. If you want to connect remotely, establish a VPN connection instead.
• Open a new tab in your browser.
• Enter http://IXrouter3.lan and press [Enter]. If you are connected remotely, enter the IXrouter's LAN IP address instead (default 192.168.27.1).
• Go to [Overview].

Status overview details

• System
• Agent - Status
• Agent - Information
• DHCP Leases
• Network - LAN - Ethernet
• Network - LAN - Wi-Fi
• Network - WAN - Ethernet
• Network - WAN - Wi-Fi
• Network - WAN - Cellular

Easy remote access

In addition to the steps mentioned earlier, you can also create an HTTP service, but leave the "IP address"-field empty, for an easy way to open and view the IXrouter's status overview remotely.

Configuration - Register the IXrouter

If your IXrouter is not yet registered in the IXON Cloud, you can register it using a configuration file and USB flash drive, or you can register it from the IXrouter's local web interface, which is explained below.

• Open the local web interface
• Configure the IXrouter
• Register the IXrouter
• Activate the IXrouter

Open the local web interface

Follow the steps below to open the IXrouter's local web interface.

• Connect your computer to one of the IXrouter's LAN ports using an Ethernet cable.
• Open a new tab in your browser.
• Enter http://IXrouter3.lan and press [Enter]. Alternatively, you can enter the IXrouter's LAN IP address instead (default 192.168.27.1).
• Go to [Configuration] and enter the password listed on the side of the IXrouter. If there is no password listed, you're unable to use this method to register the IXrouter. Use a configuration file instead.

Configure the IXrouter

You'll first need to configure the IXrouter's network settings.

• Go to "Network - WAN" on the local web interface, configure a connection type that the IXrouter will use to connect to the IXON Cloud (details below).
  

  Ethernet	The IXrouter's current wired WAN configuration. Letting the IXrouter obtain an IP address automatically will be suitable for most situations (Connection type: DHCP). If you choose to enter a static IP address instead (Connection type: static), be sure to always consult the local IT administrator for the correct network settings (IP address, network mask, default gateway, and DNS server). The IXrouter's WAN IP range (company network, e.g. 192.168.100) needs to be different from its LAN IP range (machine network). Background information can be found here.
  Wi-Fi	The IXrouter's current Wi-Fi WAN configuration. Enter the name (SSID) of the wireless network with the correct capitalization ("guestwifi" is a different network than "GuestWiFi"). If it's password protected you'll also need enter the network's password. If you are unsure about the details, or the requirements mentioned below, please consult the local IT administrator. Letting the IXrouter obtain an IP address automatically will be suitable for most situations (Connection type: DHCP). If you choose to enter a static IP address instead (Connection type: static ; requires firmware 3.22 or higher), be sure to always consult the local IT administrator for the correct network settings (IP address, network mask, default gateway, and DNS server). The IXrouter can't connect to a Wi-Fi network if it requires you to log in to a webpage or accept their terms of use first. The IXrouter can only connect to 2.4GHz networks and only if they are on channels 1 - 11. Special characters can be used for the SSID. But it cannot end with a space. The IXrouter's WAN IP range (company network, e.g. 192.168.100) needs to be different from its LAN IP range (machine network). Background information can be found here.
  Cellular	The IXrouter's current cellular WAN configuration. Enter the provider's APN (Access Point Name) and the SIM card's PIN code. Leave the PIN field empty only if there is no PIN set on the SIM card. If required by the provider, also enter the username and password (requires firmware 3.22 or higher and a manual APN to be entered). If you are unsure about the details, or the requirements mentioned below, please consult the cellular provider. Make sure the SIM card is activated and has data available. Insert the mini SIM card (2FF) before you power on the IXrouter. The 4G/LTE models have 2 SMA connectors for your cellular antenna. The one closest to the power connector is the MAIN and the other connector is the DIV. Always connect an antenna to the MAIN. Connecting an antenna to the DIV is optional and never required. Background information can be found here.

• Go to "Network - LAN" on the local web interface, enter an IP address and subnet mask (details below).
  

  IP address	The IXrouter's LAN (machine network) IP address. Enter a unique IP address, different from the machine or other connected hardware to prevent an IP conflict. Note that this IP address does need to be in the same range as the machine.
  Mask	The IXrouter's LAN subnet mask. Enter the same subnet mask as is configured on the machine.

Register the IXrouter

Once you have configured the IXrouter's WAN and LAN, you can register the IXrouter.

• Go to "IXON Cloud" on the local web interface, enter the IXON Cloud company ID where you want to register this IXrouter (details below).
  

  Company ID

  You can find your company ID in the IXON Cloud by opening the account menu in the top right corner.

• Click [Apply].

Activate the IXrouter

After a successful registration of your IXrouter, you can activate your IXrouter, making it ready for remote access.

• Go to the IXON Cloud Fleet Manager app, which is accessible from the Apps menu in the top right corner if you are currently in a different IXON Cloud app.
• Open the main menu and go to Devices  .
• You should see a "New device" at the top of your list. Verify that it is the correct IXrouter by comparing the serial number with the one listed on the side of the IXrouter.
• Click the "New device", give it a name, and click [Activate].

Configuration - View or change the IXrouter's configuration

On the "Configuration" page you can change the IXrouter's WAN, LAN, and Firewall settings locally without needing to do this in the IXON Cloud or through a configuration file.

• Open the local web interface
• Change the configuration
• Configuration details
• Import the lastest changes into the IXON Cloud

Open the local web interface

Follow the steps below to open the IXrouter's local web interface.

• Connect your computer to one of the IXrouter's LAN ports using an Ethernet cable.
• Open a new tab in your browser.
• Enter http://IXrouter3.lan and press [Enter]. Alternatively, you can enter the IXrouter's LAN IP address instead (default 192.168.27.1).
• Go to [Configuration] and enter the password listed on the side of the IXrouter. If there is no password listed, contact us to set one for you.

Change the configuration

Making changes locally in the IXrouter does not update the online configuration in the IXON Cloud. Import the latest local configuration into the IXON Cloud after making any changes, to make sure everything is in sync.

• Make changes in the IXrouter's configuration (details below) and click [Apply].

Configuration details

Click on one of the options below for easy navigation or simply scroll through the table to view a description and relevant tips for every configuration option.

• IXON Cloud
• Network - WAN
• Network - LAN
• Internet failover
• Firewall
• Internet proxy
• Miscellaneous

IXON Cloud
Company ID	The IXON Cloud company ID where this IXrouter is currently registered. You can transfer your IXrouter to another company in the IXON Cloud, if needed.
Network - WAN
The IXrouter's current WAN configuration.
Ethernet	The IXrouter's current wired WAN configuration. Letting the IXrouter obtain an IP address automatically will be suitable for most situations (Connection type: DHCP). If you choose to enter a static IP address instead (Connection type: static), be sure to always consult the local IT administrator for the correct network settings (IP address, network mask, default gateway, and DNS server). The IXrouter's WAN IP range (company network, e.g. 192.168.100) needs to be different from its LAN IP range (machine network). Background information can be found here.
Wi-Fi	The IXrouter's current Wi-Fi WAN configuration. Enter the name (SSID) of the wireless network with the correct capitalization ("guestwifi" is a different network than "GuestWiFi"). If it's password protected you'll also need enter the network's password. If you are unsure about the details, or the requirements mentioned below, please consult the local IT administrator. Letting the IXrouter obtain an IP address automatically will be suitable for most situations (Connection type: DHCP). If you choose to enter a static IP address instead (Connection type: static), be sure to always consult the local IT administrator for the correct network settings (IP address, network mask, default gateway, and DNS server). The IXrouter can't connect to a Wi-Fi network if it requires you to log in to a webpage or accept their terms of use first. The IXrouter can only connect to 2.4GHz networks and only if they are on channels 1 - 11. Special characters can be used for the SSID. But it cannot end with a space. The IXrouter's WAN IP range (company network, e.g. 192.168.100) needs to be different from its LAN IP range (machine network). Background information can be found here. The wireless network password is not stored in the IXON Cloud. Therefore you have to send the changes directly to the IXrouter by pressing "confirm and push".
Cellular	The IXrouter's current cellular WAN configuration. Enter the provider's APN (Access Point Name) and the SIM card's PIN code. Leave the PIN field empty only if there is no PIN set on the SIM card. If you are unsure about the details, or the requirements mentioned below, please consult the cellular provider. Make sure the SIM card is activated and has data available. Insert the mini SIM card (2FF) before you power on the IXrouter. The 4G/LTE models have 2 SMA connectors for your cellular antenna. The one closest to the power connector is the MAIN and the other connector is the DIV. Always connect an antenna to the MAIN. Connecting an antenna to the DIV is optional and never required. Background information can be found here.
Network - LAN
The IXrouter's current LAN configuration.
Ethernet	IP address: The IXrouter's LAN (machine network) IP address. Enter a unique IP address, different from the machine or other connected hardware to prevent an IP conflict. Note that this IP address does need to be in the same range as the machine. Mask: The IXrouter's LAN subnet mask. Enter the same subnet mask as is configured on the machine.
Wi-Fi hotspot	Enter a network name (SSID), password, and a preferred channel for the Wi-Fi hotspot.
DHCP	Dynamic IP range: The IXrouter's own DHCP server that automatically assigns an IP address from the dynamic IP range (e.g. 192.168.140.200 - 192.168.140.250), and other necessary network parameters, to clients connected to the IXrouter's LAN ports if they do not have a static IP address configured. It is advised to choose a range that doesn't conflict with the static IP addresses of connected hardware, like PLCs and HMIs. Static IP leases: Generally, you configure your machine with a static IP address to ensure that you can always access that machine at a specific IP address. Saving you time that you would otherwise have to spend searching for the IP address or trying out different addresses. Especially valuable in time-sensitive situations. In situations where your machines are set to automatically request an IP address you are never sure about their IP address, as it can be different the next day. Whenever such a machine requests an IP address, it receives a lease for a random IP address. When you add an address reservationion to the DHCP server, that machine will always receive a lease for the same IP address, ensuring that you can always access that machine at a specific IP address.
Internet failover
Settings relevant when multiple WAN connection types have been configured. Only available on IXrouter models supporting different connection types.
Priority	The IXrouter constantly checks each configured connection to determine whether the connection is available or not. This is done by sending a keep alive message to a public IP address every couple of seconds. This keep alive message needs to fail several consecutive times for the connection to be considered unavailable. The same goes for it to be considered available again. When the preferred connection is unavailable, the IXrouter will automatically switch to its 1st fallback connection. When the 1st fallback connection is unavailable as well, the 2nd fallback connection will be used. When a higher priority connection is back up, the IXrouter will automatically switch back to that connection.
Tracking	The tracking settings are used to check if the connection is available or not. We recommend leaving the default values untouched for the best results.
Firewall
The IXrouter's firewall separates its WAN (corporate network) from its LAN (machine network).
Source NAT	Source NAT is the translation of the source IP address of a packet leaving the router. When enabled, there's no need to set up a default gateway in the machine. Source NAT is enabled by default. If you turn it off, make sure you have configured the machine correctly to maintain remote accessibility. You'll need to enter the IXrouter's LAN IP address as the machine's default gateway.
LANWAN	You can allow access to the internet, for example when you are on-site and need to look up manuals or a PLC needs to send e-mails. You can also allow access to the corporate network, for example when a PLC needs to store data on a local FTP server. The LAN to WAN allow list (requires firmware 3.22 or higher) enables you to allow configured devices on the LAN of the IXrouter limited access to both the corporate network and the internet. Allow access to corporate network: All incoming LAN traffic with the corporate network as destination (i.e. any private IP address other than the IXrouter's LAN) will be allowed through the firewall. Allow access to internet: All incoming LAN traffic with the internet as destination (i.e. any public IP address) will be allowed through the firewall. You do not need to turn on "access to corporate network" for internet access to work. LAN to WAN allow list: Allow configured devices on the LAN of the IXrouter limited access to both the corporate network and the internet. Add an entry for every device, protocol, or port you want to allow access to both the corporate network and the internet. A source (source IP / MAC) or destination (port) is required. Option Description Source IP (optional) The source device's IP address. Source MAC (optional) The source device's MAC address. Protocol (optional) Select a protocol to allow or select all to allow all protocols. Port (optional) Enter the allowed port or leave empty to allow traffic over all ports. Please note that if either of the other settings are active (Allow access to corporate network / internet), they overrule the LAN to WAN allow list.
WANLAN	Port forwarding With a port forwarding you can access the machine from inside the local corporate network, without having to establish a VPN connection first. How it works: when you are inside the local corporate network, you access the IXrouter's WAN IP address at a specific network port (e.g. 5900 for VNC traffic). The IXrouter's port forwarding will then forward the network traffic to a target IP address and network port, resulting in a connection with the target (PLC, HMI, or other). It is recommended to set a static WAN IP address for your IXrouter to maintain long-term accessibility. Consult the local IT administrator for the correct network settings. Port forwarding has no effect on the VPN connection. External port: All incoming network traffic at this port (at IXrouter's WAN) will be forwarded. The port number is application dependent. For example, VNC applications use port 5900 by default. Search online or contact the manufacturer for the correct port number. Target IP address: The IP address to which the traffic needs to be forwarded. Target port: The port number to which the traffic needs to be forwarded. Often the same as the "External port". Ethernet NAT rules With a 1:1 NAT rule for WAN (Wired) to LAN you can access the machine from inside the local corporate network, without having to establish a VPN connection first. Alternative option to Port forwarding. WiFi Cient NAT rules With a 1:1 NAT rule for WAN (Wireless) to LAN you can access the machine from inside the local corporate network, without having to establish a VPN connection first. Alternative option to Port forwarding.
VPNLAN	VPN NAT Rules: 1:1 NAT rules for VPN to LAN. When configured, there's no need to have a unique IP range at each machine to enable communication from a central server to the machine. Recommended option for machine to machine communication. Only applicable in combination with an M2M Cloud Cluster.
LANVPN	VPN Source NAT: Translates the source IP address of a packet leaving the router's VPN interface to its own VPN address. When enabled, there's no need to have a unique IP range at each machine to enable communication from the machine to a central server. Required for machine to machine communication. Only applicable in combination with an M2M Cloud Cluster.
Internet proxy
Necessary only when the internet connection passes through a proxy server (uncommon).
-	If the internet connection passes through a proxy server, you'll have to configure the IXrouter to connect via that proxy server as well, otherwise it won't be able to connect to the IXON Cloud. The local IT department will know if this is the case and can provide you with the necessary information.
Miscellaneous
UDP Broadcast Relay Port	Some software programs use what is called a UDP broadcast feature to connect to the machine. This requires a UDP Broadcast port to be configured in the router. Some examples are Rockwell Automation's RSLinx Classic and FactoryTalk Linx (port 44818) and SICK Safety Designer (port 30718).
DNS Rebind Protection	DNS Rebind protection blocks the use of private IP ranges by domains. This protection is used to prevent DNS rebinding attacks. This protection may be disabled to allow access to domains in the corporate network from inside the machine network.

Import the latest changes into the IXON Cloud

After making the changes you wanted, import the latest local configuration into the IXON Cloud to make sure everything is in sync.

• Go to the IXON Cloud Fleet Manager app, which is accessible from the Apps menu in the top right corner if you are currently in a different IXON Cloud app.
• Open the main menu , go to Devices  , and select the concerning device.
• Expand More optionsin the top right corner and click [Import config from device].

Diagnostics - Troubleshoot the IXrouter's network connection

The Diagnostics page gives advanced users tools to troubleshoot the IXrouter's network connection. Available in IXrouter3 models running firmware 3.22 or higher.

• Open the IXrouter's diagnostics page
• Troubleshooting tools

Open the IXrouter's diagnostics page

Follow the steps below to open the IXrouter's local web interface.

• Connect your computer to one of the IXrouter's LAN ports using an Ethernet cable. If you want to connect remotely, establish a VPN connection instead.
• Open a new tab in your browser and go to http://IXrouter3.lan or enter the IXrouter's LAN IP address instead (default 192.168.27.1).
• Go to Diagnostics and enter the password listed on the side of the IXrouter. If there is no password listed, contact us to set one for you.

Troubleshooting tools

Some networking knowledge is required to effectively use the tools provided.