Distech Controls ECLYPSE APEX, Руководство пользователя

Страница: 68 / 171

68 ECLYPSE APEX
RADIUS Client Settings
When Radius Server is selected in the Client Settings tab the following configuration parameters
shown in the table below are available. This centralizes access management on the RADIUS server
thereby saving time by eliminating the need to add users to each controller individually. The client RA-
DIUS server can be another ECLYPSE controller, Microsoft Windows Domain Active Directory Server,
or a suitably-configured EC-Net/EC-BOS station. See
Supported RADIUS Server Architectures .
Figure 56: Radius Client Settings
To setup the RADIUS client settings, complete the parameters as described in the following table:
Item Description
Server IP Address
IP address of the RADIUS server. This can be the IP address of an ECY series controller that is set as
the Server Radius or a suitably-configured RADIUS server on an EC-Net / EC-BOS station.
Authentication Port Port on which authentication requests are made.
Accounting Port
Port on which accounting request are made. This is only used to receive accounting requests from other
RADIUS servers.
Proxy Port Internal port used to proxy requests between a server mode and client mode.
Shared Key
Encryption key that devices use to encrypt and decrypt user authentication credentials that are sent
between devices. The shared key should be a long string made up of 16 to 132 random alphanumeric
characters and symbols that would be difficult to guess.
If EC-Net is the RADIUS server, the same value must be copied to the Shared Key parameter in the
Radius Service.
Click to copy the shared key to the clipboard.
Click to refresh the information in the list.
Apply Click Apply to apply and save the changes
Should the connection to the RADIUS server be temporarily lost, ECLYPSE controllers have a fall
back authentication mode: Users that have already authenticated themselves with the RADIUS server
and then the connection to the RADIUS server is lost, these users will still be able to login to the con-
troller as their successfully authenticated credentials are locally cached.
ECLYPSE Web Interface