Acuity Controls nLight ECLYPSE User Manual page 58

ECLYPSE Web Interface
Figure 50: Radius Client Settings
To setup the RADIUS client settings, complete the parameters as described in the following table:
Item Description
IP address of the RADIUS server. This can be the IP address of an ECLYPSE controller that is set as the Server Radius or a
Server IP Address
suitably-configured RADIUS server on a Microsoft Windows Domain Active Directory Server.
Authentication Port Port on which authentication requests are made
Accounting Port Port on which accounting request are made. This is only used to receive accounting requests from other RADIUS servers.
Proxy Port Internal port used to proxy requests between a server mode and client mode
Encryption key that devices use to encrypt and decrypt user authentication credentials that are sent between devices. The
Shared Key shared key should be a long string made up of 16 to 132 random alphanumeric characters and symbols that would be
difficult to guess.
Click to copy the shared key to the clipboard.
Click to refresh the information in the list.
Apply Click Apply to apply and save the changes
Should the connection to the RADIUS server be temporarily lost, ECLYPSE controllers have a fall back authentication
mode: Users that have already authenticated themselves with the RADIUS server and then the connection to the RADIUS
server is lost, these users will still be able to log in to the controller as their successfully authenticated credentials are lo-
cally cached.
The user profile cache is updated when the user authenticates themselves while there is a working RADIUS server connection. For this
reason, at a minimum, admin users should log in to each ECLYPSE controller at least once, so their login can be cached on that controller.
Otherwise, if there is a RADIUS server connectivity issue, and a user who has never connected to the ECLYPSE controller before will be
locked out from the controller. It is particularly important for admin user credentials to be cached on each controller as an admin user can
change the controller's network connection parameters that may be at cause for the loss of connectivity to the RADIUS server.
The port values of 1812 for authentication and 1813 for accounting are RADIUS standard port numbers. However, other
port numbers may be used. No matter which port numbers are used, make sure that the port numbers are unused by other
services on this controller and that both the RADIUS server and the RADIUS clients use the same port number values.
See also IP Network Port Numbers and
nLight ECLYPSE
Protocols.
58