Panasonic Network Camera BB-HCM381A BB-HCE481A Getting Started Manual

							Operating Instructions
53
2.3 Connecting the Camera to Your IPv6 Network
The Network page offers two options to configure the camera in IPv6.
 [Automatic Setup] automatically assigns an IPv6 address to the camera.
 [Static] allows the user to use a specific IPv6 address.
Note
 IPv6 is an expanded protocol created for future Internet expansion. Your 
network and your ISP must support IPv6 before you can use this feature.
1.Click [Network (IPv6)] on the Setup page.
2.Click a connection mode.
3.Enter each parameter in the relevant data field.
Automatic Setup
The camera is automatically assigned an IPv6 prefix from the IPv6 router, and 
produces the original IPv6 address from the IPv6 prefix. If you select [No] for 
Allow Access from the Internet, the camera can be accessed only from the 
LAN that has an same IPv6 prefix as the camera.
 Clicking [Cancel] takes you back to the previous page without saving 
changes.
Most common mode of setup.
Uses a static IP address. 
						

							Operating Instructions
54
Static Setup
You can assign a static IPv6 address to the camera. If you select [No] for Allow 
Access from the Internet, the camera can be accessed only from the LAN that 
has an same IPv6 prefix as the camera.
 Clicking [Cancel] takes you back to the previous page without saving 
changes.
4.Click [Save] when finished.
 The new settings are saved.
 When finished, the following page is displayed. 
Note
 The current network settings are shown on the Status page in the 
Maintenance section (see page 155).
5.Click [Restart].
 The camera restarts, and the Top page is displayed.
Note
 When you do not know the camera IP address while setting [Automatic 
Setup], you can search for it using the Setup Program (see page 180). Or 
you can search for it on the Status page (see page 155) after accessing 
the camera in IPv4.
 If the camera is restarted, all buffered images on the internal memory are 
deleted. The buffered images on the SD memory card are not deleted. 
						

							Operating Instructions
55
Setting Description
Allow Access from 
the Internet  If [Yes] is selected for Allow Access from the Internet, 
you can access the camera from the Internet. If [No] is 
selected, the camera can be accessed only from a LAN 
that has an same IPv6 prefix as the camera.
Port Number (Static 
Only) The default port number is 80. A unique port number 
must be set for each terminal on your network.
 Do not set the following port numbers.
FTP: 20 and 21, Telnet: 23, SMTP: 25, DNS: 53, 
POP3: 110, HTTPS: 443, ICQ: 4000 and IRC: 6661—
6667.
 Enter a number between 1—65535.
 Some ISPs do not allow you to use port 80. Ask your 
ISP or network administrator about which port 
numbers are accessible over the Internet.
IP address
(Static Only) Enter a global address. You do not need to enter a 
prefix length.
 An IPv6 address consists of 8 hexadecimal numbers 
divided by :. Consecutive 0s can be abbreviated as 
::. (E.g. 2001:2:3:4::5)
Default Gateway
(Static Only) If you have been assigned a Default Gateway IPv6 
address by your ISP or network administrator, enter it 
in this data field.
 An IPv6 address consists of 8 hexadecimal numbers 
divided by :. Consecutive 0s can be abbreviated as 
::. (E.g. 2001:2:3:4::5)
DNS Server 
Address The DNS server address is required in the following 
situations:
– Transferring camera images by E–mail or FTP
– Setting cameras by their host names on the 
Multi-Camera Setup page
– Using the DynamicDNS service
– Using the alarm log notification
 If you have been assigned a DNS server IPv6 
addresses by your ISP or network administrator, enter 
them in this data field. There are usually two 
addresses.
 An IPv6 address consists of 8 hexadecimal numbers 
divided by :. Consecutive 0s can be abbreviated as 
::. 
(E.g. 2001:2:3:4::5) 
						

							Operating Instructions
56
Max. Bandwidth 
Usage The bandwidth can be restricted.
 Select a maximum bandwidth from [Unlimited] to [0.1 
Mbps].
 This setting is valid in both IPv4 and IPv6.
Note
 Set a maximum bandwidth referring to the following file 
sizes. These are examples for a JPEG file of standard 
image quality. File sizes may change depending on the 
image quality or the brightness of the object.
– 160 x 120 pixels: About 3.5 KB (28 Kbit)
– 320 x 240 pixels: About 10 KB (80 Kbit)
– 640 x 480 pixels: About 18 KB (144 Kbit)
Connection Type  Select [Auto Negotiation] normally. If you cannot 
access the camera, see page 9 of the Troubleshooting  
on the CD-ROM.
 This setting is valid in both IPv4 and IPv6. Setting Description 
						

							Operating Instructions
57
2.4 What is IPsec?
IPsec provides security for the transmission of sensitive information over 
unprotected networks such as the Internet. IPsec authenticates IP packets 
between participating IPsec devices.
Cameras IPsec Features
The camera can use IPsec in both IPv4 and IPv6. The camera supports the 
following IPsec features.
Item Supported Feature
IKEv1 Pre-shared Key Method
Phase 1 mode :
Main mode
*1
*1 The camera does not support aggressive mode.
Phase 2 mode : Quick mode
Cipher Algorithm : DES-CBC, 3DES-CBC, AES-CBC (128, 192, 
256 bits)
Message-Digest 
Algorithm: HMAC-MD5, HMAC-SHA-1
IPsec
ESP (Encapsulating Security Payload)
*2
*2 The camera does not support authentication header (AH).
Transport mode, Tunnel mode
Cipher Algorithm : DES-CBC, 3DES-CBC, AES-CBC (128, 192, 
256 bits)
Message-Digest 
Algorithm: HMAC-MD5-96, HMAC-SHA-1-96
Malicious User
Internet Image
Allowed User
Readable Unreadable 
						

							Operating Instructions
58
IPsec Mode Selection
Select transport mode or tunnel mode to access the camera.
Transport Mode (IPv4 Only)
The image is encrypted for the whole way between the camera and your PC. The 
transport mode is available only in IPv4 for users of Windows XP Service Pack 1 
or later.
Prepare the following required items:
Item Supported Feature
PC Operating 
System: Windows XP Service Pack 1 or later
Web Browser : Internet Explorer 6.0 or later
ISP Service : A service for multiple global addresses (A 
global address must be set up on your PC.)
Note
 To use IPsec, you need to set up your operating system. See 
the Panasonic Network Camera support website at http://
panasonic.co.jp/pcc/products/en/netwkcam/ for setup 
details.
Camera ISP Service : A service for multiple global addresses (A 
global address must be set up to the camera.)
Transport Mode
Encrypted 
						

							Operating Instructions
59
Tunnel Mode (IPv4/IPv6)
An IPsec mode of operation where the entire IP packet including IP header is 
authenticated and encrypted. A new IP header is added (protecting the entire 
original packet). Both VPN clients and VPN gateways can use this mode.
Note
 The camera can be accessed only from PCs under the VPN router. Other PCs 
cannot access the camera.
Prepare the following required items:
Item Supported Feature
PC Operating 
System: Windows XP, Windows 2000, Windows Me, 
Windows 98SE (in IPv4)
: Windows XP Service Pack 1 or later (in IPv6)
Web Browser : Internet Explorer 6.0 or later
Router ISP Service 
(in IPv4): A service for static global addresses (A global 
address must be set up to the WAN side of the 
router.)
ISP Service 
(in IPv6): An IPv4/IPv6 Dual-Stack or IPv6 over IPv4 
Tunneling service
Note
 See the Panasonic Network Camera support website at http:/
/panasonic.co.jp/pcc/products/en/netwkcam/ for the 
recommended router.
Camera ISP Service 
(in IPv4): A service for multiple global addresses (A 
global address must be set up to the camera.)
ISP Service 
(in IPv6): An IPv4/IPv6 Dual-Stack or IPv6 over IPv4 
Tunneling service
Encrypted
Not EncryptedTunnel Mode WA N
LAN 
						

							Operating Instructions
60
2.5 Encrypting the Camera Image in Transport 
Mode
The camera can encrypt images using IPsec transport mode.
Note
 If you use IPsec, the refresh interval increases.
1.Click [IPsec] on the Setup page.
2.Click Camera in the Transport column.
 If you use transport mode for E-mail or FTP transfer, click No. in the Buffer/
Tr a n s f e r  c o l u m n .
Note
 To display an Alarm Log, set Alarm 1, Alarm 2 or Motion Detection for the 
Trigger Setting and check [Enable].
3.Enter each parameter in the relevant data field.Set to use 
Alarm Log.
(See page 
137)The display shows 
that the 
communication is 
in HTTP and 
anyone can 
access the 
camera if they 
have the pre-
shared key.
Set up these settings to transfer images in transport mode (see page 131). 
						

							Operating Instructions
61
4.Click [Save] when finished.
 The new settings are saved.
5.Click [Cancel].
 The IPsec page is displayed.
6.Check [Use] in the IPsec column, select an encoding strength, and click 
[Save].Setting Description
Status  Check the box to use this encryption method.
Pre-Shared Key  This is the key used in the authentication of 
communications. Enter the same pre-shared key as 
your PC.
 Enter ASCII characters for the host name (see page 
190). But [Space], [], [], [&], [] are not 
available.
Note
 If the pre-shared key becomes known to a third party, it 
may lead to illegal access, a leak of private information 
or interference. To protect your security and privacy, 
pay attention to the following points.
– Make it known only to people you trust.
– Set it as long and complex as possible.
– Change it regularly.
Setting Description
IPsec  Check the box to enable IPsec features. If you uncheck 
the box, all IPsec features will be invalid.
Encoding  strength  The encoding strength for IPsec can be selected. If you 
select [Standard], DES or NULL is valid as an 
algorithm, and the data will become easier to decrypt. 
						

							Operating Instructions
62
7.Click [Restart].
8.Set up your PC according to the requirements on page 58.
 Set the FTP server or E-mail server to transfer images.
9.Access the camera (see page 13).
 If you can access the camera, the IPsec setup is complete.
Note
 In IPsec communications, IPsec is displayed on the Top page or the 
Single Camera page.
 If you cannot communicate using IPsec, see page 24 of Troubleshooting 
on the CD-ROM.
 See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for IPsec features.