Distech ECYPSE - EC-Net AX -Based Centralized Credential Authentication

Supported RADIUS Server Architectures
ECLYPSE User Guide 65
Component
Description
Login
Credential 3
This is the login credential used by the EC-Net
AX
station’s RestService to
connect to any ECLYPSE controller. To program an ECLYPSE controller
with EC-gfxProgram through EC-Net
AX
, the RestService must be configured
on the EC-Net
AX
station with a login credential to all ECLYPSE controllers.
This credential is managed in this ECLYPSE controller A’s User
Management RADIUS server credential database.
Credential
Database A
This is the EC-Net
AX
station UserService credential database. This
credential database is independent of all other credential databases.
RADIUS
Server A
Credential
Database
This is the ECLYPSE controller A’s RADIUS Server credential database. If
EC-gfxProgram users are to connect to this controller through the EC-Net
AX
station, this credential database must have the credentials for EC-Net
AX
station’s RestService. This credential database must also have the
credentials for each user that will login to any ECLYPSE controller (for
example, administrators, direct connection EC-gfxProgram users,
ENVYSION users, etc.). See User Management on page 85.
Credential
Database
Cache B
This is the ECLYPSE controller B’s cached credential database. If the
connection to ECLYPSE controller A’s RADIUS Server is lost, users that
have previously authenticated themselves with the ECLYPSE controller A’s
RADIUS Server credential database on a given controller will still be able to
login to those controllers as their credentials are locally cached.
EC-Net
AX
-Based Centralized Credential Authentication
The credential database is centralized in an EC-Net
AX
station to authenticate login requests
made by all other subscribed ECLYPSE controllers.
EC-gfxProgram
EC-Net
AX
RADIUS A
ECLYPSE
Controller B
Cache B
ECLYPSE
Controller A
Cache A
1 2 2
3
EC-Net
AX
FOX
3
Figure 7-3: EC-Net
AX
-Based Centralized Credential Authentication
This authentication method has the following components.
Component
Description
Login
Credential 1
This is the login credential used by an EC-gfxProgram user to connect to
the EC-Net
AX
station. This credential is managed in the EC-Net
AX
User
Service.