Panasonic Network Camera Bb Hcm381a Operating Instructions

							Operating Instructions
[For assistance, please call: 1-800-272-7033]                                 51
5.Click [Restar t].
 The camera restarts, and the Top page is displayed.
Note
 When you do not know the camera IP address while setting [Automatic 
Setup], you can search it by using the Setup Program (see page 142). Or 
you can search it on the Status page (see page 118) after accessing the 
camera in IPv4.
 If the camera is restarted, all buffered images on the internal memory are 
deleted. The buffered images on the SD memory card are not deleted.
SettingDescription
Allow Access from 
the Internet 
(Automatic Setup 
Only) If [Yes] is selected at the Allow Access from the Internet, 
you can access the camera from the Internet. If [No] is 
selected, the camera can be accessed only from the LAN 
that has an same IPv6 prefix as the camera.
Port Number (Static 
Only) The port number is 80 by default. The port number must be 
unique for each terminal on your network.
 Do not set the following port numbers.
E.g., FTP: 20 and 21, Telnet: 23, SMTP: 25, DNS: 53, 
POP3: 110, HTTPS: 443, ICQ: 4000 and IRC: 6661—
6667.
 Enter only the number (1—65535).
 Some ISPs do not allow you to use port 80. Ask your ISP 
or network administrator about the accessible port number 
over the Internet.
IP address
(Static Only)
 Enter a global address. You do not need to enter prefix 
length.
 IPv6 address consists of 8 hexadecimal digits divided with 
:. Consecutive 0s can be abbreviated as ::. 
(E.g. 2001:2:3:4::5)
Default Gateway
(Static Only)
 If you have the assigned Default Gateway IPv6 address by 
your ISP or network administrator, enter it in this data field.
 IPv6 address consists of 8 hexadecimal digits divided with 
:. Consecutive 0s can be abbreviated as ::. 
(E.g. 2001:2:3:4::5) 
						

							Operating Instructions
52
DNS Server 
Address DNS server address is required in the following conditions.
 Transferring camera images by E-mail or FTP
 Setting cameras by their host names on the Multi-
Camera Setup page
 Using the Viewnetcam.com service
 If you have the assigned DNS server IPv6 addresses by 
your ISP or network administrator, enter them in this data 
field. They usually have two addresses.
 IPv6 address consists of 8 hexadecimal digits divided with 
:. Consecutive 0s can be abbreviated as ::. 
(E.g. 2001:2:3:4::5)
Max. Bandwidth 
Usage The bandwidth can be restricted.
 Select the maximum bandwidth usage from [Unlimited] to 
[0.1 Mbps].
 This setting is valid in both IPv4/IPv6.
Note
Set the maximum bandwidth usage seeing the following 
file sizes. These are examples for a JPEG file with a 
standard image quality. File sizes may change depending 
on the image quality or how bright the object is.
160 x 120 pixels: About 5 KB (40 Kbit)
320 x 240 pixels: About 16 KB (128 Kbit)
640 x 480 pixels: About 33 KB (264 Kbit)
Connection Type Select [Auto Negotiation] normally. If you cannot access 
the camera, see page 48 The Top page is not displayed. 
in the Installation/Troubleshooting.
 This setting is valid in both IPv4/IPv6. Setting Description 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033]                                 53
2.4 What is IPsec?
IPsec provides security for the transmission of sensitive information over 
unprotected networks such as the Internet. IPsec authenticates IP packets 
between participating IPsec devices. 
Cameras IPsec Feature
The camera can use IPsec in both IPv4/IPv6. The camera supports the following 
IPsec feature. 
ItemSupported Feature
IKEv1Pre-shared Key Method
Phase 1 mode
Phase 2 mode
Cipher Algorithm
Message-Digest 
Algorithm
: Main mode*1
: Quick mode
: DES-CBC, 3DES-CBC, AES-CBC (128, 
192, 256 bits)
: HMAC-MD5, HMAC-SHA-1
*1The camera does not support aggressive mode.
IPsecESP (Encapsulating Security Payload)*2
Transport mode, Tunnel mode
*2The camera does not support authentication header (AH).
Cipher Algorithm
Message-Digest 
Algorithm
:DES-CBC, 3DES-CBC, AES-CBC (128, 
192, 256 bits)
:HMAC-MD5-96, HMAC-SHA-1-96




Malicious User
Internet Image
Allowed User
Readable Unreadable 
						

							Operating Instructions
54
IPsec Mode Selection
Select transport mode or tunnel mode to access the camera.
Transport Mode (IPv4 Only)
The image is encrypted in the whole way between the camera and your PC. In the 
environment of Windows XP Service Pack 1 or later, transport mode is available 
only in IPv4.
Prepare the following requirements.
ItemSupported Feature
PCOperating System
Web Browser
ISP Service
: Windows XP Service Pack 1 or later
: Internet Explorer 6.0 or later
: Services for multiple global addresses (A 
global address must be set up on your 
PC.)
Note
To use IPsec, you need to set up your operating system. 
See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for 
the setup.
CameraISP Service: Services for multiple global addresses (A 
global address must be set up to the 
camera.)
Transport Mode
Encrypted 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033]                                 55
Tunnel Mode (IPv4/IPv6)
An IPsec mode of operation where the entire IP packet including IP header is 
authenticated and encrypted. A new IP header is added (protecting the entire 
original packet). Both VPN clients and VPN gateways can use this mode.
Note
The camera can be accessed only from the PCs under the VPN router. Other 
PCs cannot access the camera.
Prepare the following requirements.
ItemSupported Feature
PCOperating System
Web Browser
: Windows XP, Windows 2000, Windows 
Me, Windows 98SE (in IPv4)
: Windows XP Service Pack 1 or later (in 
IPv6)
: Internet Explorer 6.0 or later
RouterISP Service 
(in IPv4)
ISP Service 
(in IPv6)
: Static global address service (A global 
address must be set up to the WAN side of 
the router.)
: IPv4/IPv6 Dual-Stack or IPv6 over IPv4 
Tunneling service
Note
See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for 
the recommended router.
CameraISP Service 
(in IPv4)
ISP Service 
(in IPv6)
: Services for multiple global addresses (A 
global address must be set up to the 
camera.)
: IPv4/IPv6 Dual-Stack or IPv6 over IPv4 
Tunneling service
Encrypted
Not EncryptedTunnel Mode WA N
LAN 
						

							Operating Instructions
56
2.5 Encrypt the Camera Image in Transport Mode
The camera can encrypt the image using IPsec transport mode.
Note
If you use IPsec, refresh interval slows down.
1.Click [IPsec] on the Setup page.
2.Click Camera in the Transport column.
 If you use transport mode in E-mail or FTP transfer, click No. in the Buffer/
Transfer column.
3.Enter each parameter in the data field.
The display shows that 
the communication is in 
HTTP and any people can 
access the camera if they 
have the pre-shared key 
(see page 57).
Set up these settings to transfer images in transport mode (see page 111). 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033]                                 57
4.Click [Save] when finished.
 New settings are saved.
5.Click [Cancel].
 The IPsec page is displayed.
6.Check [Use] in the IPsec column, check encoding strength, and click [Save]. 
SettingDescription
Status Check the box to use this encryption method.
Pre-Shared Key It is the key to use in the authentication of communications. 
Enter the same pre-shared key as your PC.
 Enter ASCII characters for the host name (see page 150). 
But [Space], [], [], [&], [] are not available.
Note
If the pre-shared key leaks to a third party, it may lead to illegal 
access, private information leak or interference. To protect your 
security and privacy, pay attention to the following points.
 Make it known only to the specified people.
 Set it as many characters as possible.
 Change the password regularly.
SettingDescription
IPsec Check the box to enable IPsec features. If you clear the 
box, whole IPsec features will be invalid.
Encoding strength Encoding strength for IPsec can be selected. If you select 
[Standard], DES or NULL is valid as an algorithm, and then 
the data will become easier to be decrypted. 
						

							Operating Instructions
58
7.Click [Restart].
8.Set up your PC as it fits to the requirements on page 54.
 Set the FTP server or E-mail server to transfer images.
9.Access the camera (see page 13).
 If you can access the camera, the IPsec setup is complete.
Note
 In IPsec communications, IPsec is displayed on the Top page or the 
Single Camera page.
 If you cannot communicate using IPsec, see 2.9 IPsec in the 
Troubleshooting section of the Installation/Troubleshooting.
 See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for the IPsec 
features. 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033]                                 59
2.6 Encrypt the Camera Image in Tunnel Mode
The camera can encrypt the image using IPsec tunnel mode.
Note
 Do not set IPsec on the PCs under the VPN router. Communications may 
be blocked.
 If you use IPsec, refresh interval slows down.
 The camera can be accessed only from the PCs under the VPN router. 
Other PCs cannot access the camera.
1.Click [IPsec] on the Setup page.
2.Click Add in the Tunnel column.
3.Enter each parameter in the data field. 
						

							Operating Instructions
60
4.Click [Save] when finished.
 New settings are saved.
5.Click [Cancel].
 The IPsec page is displayed.
6.Check [Use] in the IPsec column, check encoding strength, and click [Save]. 
SettingDescription
Status Check the box to use this encryption method.
Pre-Shared Key It is the key to use in the authentication of communications. 
Enter the same pre-shared key as your VPN router.
 Enter ASCII characters for the host name (see page 150). 
But [Space], [], [], [&], [] are not available.
Note
If the pre-shared key leaks to a third party, it may lead to illegal 
access, private information leak or interference. To protect your 
security and privacy, pay attention to the following points.
 Make it known only to the specified people.
 Set it as many characters as possible.
 Change the password regularly.
Network address Enter the destination network address.
 Enter IP address/Prefix length in the data field.
Router address Enter the WAN IP address of the VPN router on a 
destination network.
Note
 IPv6 link-local address is not available.
 The camera can be accessed only from the PCs under 
the VPN router. Other PCs cannot access the camera.