Home
Distech
Controller
ECYPSE
Distech ECYPSE User Manual
4
of 1
of 1 rating
174 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
Securing an ECLY
PSE Controller
ECLYPSE User Guide
103
CHAPTER 10
S
ECURING AN
EC
L
YPSE
C
ONTROLLER
This chapter describes
how to harden an ECLYPS
E controller from
unau
thori
zed access and use.
In This Chapter
Topic
Page
Introduction
104
Passwords
105
Account M
anagement and Permissions
106
Additional Settings
107
External Factors
108
102
104
Table of Contents
Table of Contents
3
ECLYPSE User Guide
7
Chapter 1
9
Introduction
9
Introduction
10
About the ECY Series Controller
10
About the IP Protocol Suite
10
About Bacnet
10
About this User Guide
11
Purpose of the User Guide
11
ECLYPSE Introduction
11
Network Security
11
Intended Audience
11
Conventions Used in this Document
11
Related Documentation
12
Acronyms and Abbreviations Used in this Document
13
Chapter 2
15
Internet Protocol Suite Fundamentals
15
About the Internet Network
16
Internet Protocol Suite Overview
17
Chapter 3
18
Ipv4 Communication Fundamentals
18
DHCP Versus Manual Network Settings
19
Dynamic Host Configuration Protocol (DHCP)
19
Why Should ECLYPSE IP Controllers Use a Fixed IP Address or Hostname Management
19
Networking Basics
20
IP Addressing
20
About the Subnetwork Mask
20
CIDR Addressing
20
Private Ipv4 Address Ranges
21
Reserved Host Addresses
21
Default Gateway
21
Domain Name System (DNS)
22
About Routers, Switches, and Hubs
23
Connecting a Router
23
Network Address Translation / Firewall
24
IP Network Segmentation
24
Chapter 4
26
ECLYPSE Controller IP Network Protocols and Port Numbers
26
About Port Numbers
27
ECLYPSE IP Network Port Numbers and Protocols
28
ECLYPSE Services that Require Internet Connectivity
30
Chapter 5
31
Connecting IP Devices to an IP Network
31
Connecting the IP Network
32
Wired Network Cable Requirements
32
About the Integrated Ethernet Switch
34
Fail-Safe Ethernet (ECY-VAV Model Only)
34
Spanning Tree Protocol
35
Connecting the Network Cable to the ECLYPSE Controller
36
Wireless Network Connection
37
About the 2.4 Ghz ISM Band
37
Distance between ECLYPSE Wi-Fi Adapter and Sources of Interference
38
About Wi-Fi Network Channel Numbers
38
Radio Signal Range
38
Radio Signal Transmission Obstructions
39
Where to Locate Wireless Adapters
39
Transmission Obstructions and Interference
39
ECLYPSE Wi-Fi Adapter Mounting Tips
40
Planning a Wireless Network
42
ECLYPSE Wi-Fi Adapter Connection Modes
44
Wi-Fi Client Connection Mode
45
Wi-Fi Access Point
45
Wi-Fi Hotspot
46
Mesh Network
47
Wireless Network Commissioning Architectures
49
Client to Access Point Configuration
49
Client to Hotspot Configuration
50
Mesh Configuration
51
Chapter 6
52
First Time Connection to an ECLYPSE Controller
52
Connecting to the Controller
53
Controller Identification
53
Ethernet Network Connection
54
Network Connections for ECY-VAV and ECY-S1000 Model Controllers
54
Network Connections for ECY-VAV-Poe Model Controllers
55
Wi-Fi Network Connection
57
Configuring the Controller
58
Using the Xpressnetwork Utility
58
Using the Controller's Factory-Default Hostname in the Web Browser
58
Using the Controller's IP Address in the Web Browser
59
Connecting to the Controller's Configuration Web Interface
60
Next Steps
60
Chapter 7
61
Supported RADIUS Server Architectures
61
Overview
62
Authentication Fallback
62
RADIUS Server Architectures
63
Local Credential Authentication
63
ECLYPSE-Based Centralized Credential Authentication
64
EC-Net AX -Based Centralized Credential Authentication
65
Configuring the EC-Net Station's Restservice
66
Chapter 8
67
ECLYPSE Web Interface
67
Overview
68
Login Credentials
69
Web Configuration Interface
70
Main Screen
70
Menu Button
70
Network Settings
72
IP Configuration
72
Wireless Configuration
73
Hotspot Configuration
75
Advanced
75
Bacnet Settings
77
General
77
Routing
78
Network Port IP
79
BBMD Settings
80
Foreign Device Settings
81
Network Port MS/TP
82
Firmware Update
84
User Management
85
Authentication
85
Local RADIUS Server
86
Local User Management
86
Adding a User
87
Remote RADIUS Server
88
Device Information
90
System Settings
91
Saving a Certificate
92
Viewer Information
95
Chapter 9
96
Configuring the ECLYPSE Wi-Fi Adapter Wireless Networks
96
Setting up a Wi-Fi Client Wireless Network
97
Setting up a Wi-Fi Access Point Wireless Network
98
Setting up a Wi-Fi Hotspot Wireless Network
99
Setting up a Wi-Fi Mesh Wireless Network
101
Mesh Network Diagnostics
101
Chapter 10
103
Securing an ECLYPSE Controller
103
Introduction
104
Passwords
105
Change the Default Platform Credentials
105
Use Strong Passwords
105
Do Not Allow a Browser to Remember a User's Login Credentials
105
Account Management and Permissions
106
Use a Different Account for each User
106
Use Unique Service Type Accounts for each Project
106
Disable Known Accounts When Possible
106
Assign the Minimum Required Permissions
106
Use Minimum Possible Number of Admin Users
106
Additional Settings
107
Update the ECLYPSE Controller's Firmware to the Latest Release
107
External Factors
108
Install ECLYPSE Controllers in a Secure Location
108
Make Sure that ECLYPSE Controllers Are Behind a VPN
108
Chapter 11
109
Bacnet MS/TP Communication Data Bus Fundamentals
109
Bacnet MS/TP Data Transmission Essentials
110
Maximum Number of Bacnet MS/TP Devices on a Data Bus Segment and Baud Rate
112
Data Bus Segment MAC Address Range for Bacnet MS/TP Devices
112
Maximum Number of Bacnet MS/TP Devices on a Data Bus
112
Device Loading
113
Data Bus Physical Specifications and Cable Requirements
115
Data Bus Topology and EOL Terminations
116
When to Use EOL Terminations
116
When to Use EOL Terminations with Bacnet MS/TP Thermostats
116
About Setting Built-In EOL Terminations
117
Only a Daisy-Chained Data Bus Topology Is Acceptable
117
Data Bus Shield Grounding Requirements
119
ECB 24V-Powered Controller Data Bus Shield Grounding Requirements
119
ECB-PTU Line-Powered Data Bus Controller Shield Grounding Requirements
120
Data Bus Shield Grounding Requirements When Mixing both ECB 24V-Powered Controllers and ECB-PTU Line-Powered Controllers
121
Using Repeaters to Extend the Data Bus
122
Device Addressing
125
Power Supply Requirements for 24VAC-Powered Controllers
130
Chapter 12
134
Subnetwork Installation Guidelines
134
About the Subnetwork Data Bus
135
Subnetwork Connection Method
135
Subnetwork Module Compatibility and Supported Quantity Charts
136
Subnetwork Module Connection
136
Subnetwork Data Bus Length
137
Cat 5E Cable Subnetwork Data Bus
139
Cat 5E Cable Subnetwork Data Bus Cable Requirements
139
Cat 5E Cable Subnetwork Bus Topology and End-Of-Line Terminations
141
Setting the Subnet ID Addressing for Room Devices
143
Setting the Allure EC-Smart-Vue Sensor's Subnet ID Address
144
Setting the Allure EC-Smart-Vue Sensor's Subnet ID
144
Setting the Allure EC-Smart-Air and EC-Smart-Comfort Communicating Sensor Series' Subnet ID Address
145
Setting the EC-Multi-Sensor Series' Subnet ID Address
146
Setting the Ecx-Light and Ecx-Blind Series' Subnet ID Address
147
Commissioning a Connected VAV Controller with an Allure EC-Smart-Vue Sensor
149
Commissioning a Connected VAV Controller with an Allure
149
Chapter 13
150
Modbus TCP Configuration
150
Modbus TCP Device Connection
151
Device Addressing
152
Chapter 14
154
Modbus RTU Communication Data Bus Fundamentals
154
Modbus RTU Data Transmission Essentials
155
Maximum Number of Modbus RTU Devices on a Data Bus Segment and Baud Rate
156
Data Bus Segment Addressing Range for Modbus RTU Devices
156
Maximum Number of Modbus RTU Devices on a Data Bus
156
Data Bus Physical Specifications and Cable Requirements
158
Data Bus Topology and EOL Terminations
159
When to Use EOL Terminations
159
About Setting Built-In EOL Terminations
159
Only a Daisy-Chained Data Bus Topology Is Acceptable
160
Data Bus Shield Grounding Requirements
161
Modbus RTU Data Bus Shield Grounding Requirements
161
Device Addressing
162
Chapter 15
163
Resetting or Rebooting the Controller
163
Resetting or Rebooting the Controller
164
Chapter 16
166
ECY Controller Troubleshooting
166
Chapter 17
170
Allure EC-Smart-Vue Communicating Sensor Troubleshooting
170
Appendix A
173
Appendix A
174
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Distech ECYPSE and is the answer not in the manual?
Ask a question
Distech ECYPSE Specifications
General
Brand
Distech
Model
ECYPSE
Category
Controller
Language
English
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General