Panasonic Network Camera BB HCM403A Operating Guide

							Operating Instructions
51
4.Click [Save] when finished.
 The new settings are saved.
5.Click [Cancel].
 The IPsec page is displayed.
6.Check [Use] in the IPsec column, select an encoding strength, and click 
[Save].Setting Description
Status  Check the box to use this encryption method.
Pre-Shared Key  This is the key used in the authentication of 
communications. Enter the same pre-shared key as 
your PC.
 Enter ASCII characters for the host name (see page 
176). But [Space], [], [], [&], [] are not 
available.
Note
 If the pre-shared key becomes known to a third party, it 
may lead to illegal access, a leak of private information 
or interference. To protect your security and privacy, 
pay attention to the following points.
– Make it known only to people you trust.
– Set it as long and complex as possible.
– Change it regularly.
Setting Description
IPsec  Check the box to enable IPsec features. If you uncheck 
the box, all IPsec features will be invalid.
Encoding  strength  The encoding strength for IPsec can be selected. If you 
select [Standard], DES or NULL is valid as an 
algorithm, and the data will become easier to decrypt. 
						

							Operating Instructions
52
7.Click [Restart].
8.Set up your PC according to the requirements on page 48.
 Set the FTP server or E-mail server to transfer images.
9.Access the camera (see page 11).
 If you can access the camera, the IPsec setup is complete.
Note
 In IPsec communications, IPsec is displayed on the Top page or the 
Single Camera page.
 If you cannot communicate using IPsec, see page 23 of Troubleshooting 
on the CD-ROM.
 See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for IPsec features. 
						

							Operating Instructions
53
2.6 Encrypting the Camera Image in Tunnel Mode
The camera can encrypt images using IPsec tunnel mode.
Note
 Do not set IPsec on PCs under the VPN router. Communications may be 
blocked.
 If you use IPsec, the refresh interval increases.
 The camera can be accessed only from PCs under the VPN router. Other 
PCs cannot access the camera.
1.Click [IPsec] on the Setup page.
2.Click Add in the Tunnel column.
3.Enter each parameter in the relevant data field.
Setting Description
Status  Check the box to use this encryption method. 
						

							Operating Instructions
54
4.Click [Save] when finished.
 The new settings are saved.
5.Click [Cancel].
 The IPsec page is displayed.
6.Check [Use] in the IPsec column, uncheck the encoding strength, and click 
[Save]. Pre-Shared Key  This is the key used in the authentication of 
communications. Enter the same pre-shared key as 
your VPN router.
 Enter ASCII characters for the host name (see page 
176). But [Space], [], [], [&], [] are not 
available.
Note
 If the pre-shared key becomes known to a third party, it 
may lead to illegal access, a leak of private information 
or interference. To protect your security and privacy, 
pay attention to the following points.
– Make it known only to people you trust.
– Set it as long and complex as possible.
– Change it regularly.
Network address  Enter the destination network address.
 Enter IP address/Prefix length in the data field.
Router address  Enter the WAN IP address of the destination network 
VPN router.
Note
 An IPv6 link-local address is not available.
 The camera can be accessed only from PCs under 
the VPN router. Other PCs cannot access the 
camera. Setting Description 
						

							Operating Instructions
55
7.Click [Restart].
8.Set up your VPN router as shown below.
 To use tunnel mode, you need to set up your VPN router.Setting Description
IPsec  Check the box to enable IPsec features. If you uncheck 
the box, all IPsec features will be invalid.
Encoding  strength  The encoding strength for IPsec can be selected. If you 
select [Standard], DES or NULL is valid as an 
algorithm, and the data will become easier to decrypt.
IKE Items Settings
Phase 1 Authentication 
MethodPre-shared Key Method
ID Specifies by address.
Mode
Main mode
*1
*1 The camera does not support aggressive mode.
Diffie-Hellman 
MODP GroupSpecifies 1 or 2.
Cipher  Algorithm Select from DES-CBC, 3DES-CBC or 
AES-CBC (128, 192, 256 bits). 
(Multiple selections are available.)
Message-Digest 
AlgorithmHMAC-MD5, HMAC-SHA-1
Lifetime Specifies by 28800 s (Byte setting is 
not supported.)
Phase 2 Mode Quick mode
PFS Specifies either of Off, D-H Group 1 
or D-H Group 2.
Cipher Algorithm Select from DES-CBC, 3DES-CBC, 
AES-CBC (128, 192, 256 bits) or 
NULL. (Multiple selections are 
available.)
Message-Digest 
AlgorithmHMAC-MD5-96, HMAC-SHA-1-96
Lifetime Specifies by 28800 s (Byte setting is 
not supported.) 
						

							Operating Instructions
56
 Set up the IPsec policy as below.
9.Access the camera (see page 11).
 If you can access the camera, the IPsec setup is complete.
Note
 In IPsec communications, IPsec is displayed on the Top page or the 
Single Camera page.
 If you cannot communicate using IPsec, see page 23 of Troubleshooting 
on the CD-ROM.
 See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for IPsec features. Items Settings
Protocol ANY
Source Network Network address and subnet mask on the LAN side of 
the VPN router
Source IP address A global address on the WAN side of the VPN router
Destination Network A global address of the camera
Destination IP address A global address of the camera 
						

							Operating Instructions
57
2.7 Using UPnP™ (Universal Plug and Play)
UPnP™ can automatically configure your router to make it accessible from the 
Internet. In order to use this feature, your router needs to support UPnP™, and it 
must be enabled. UPnP™ is disabled on most routers by default. Most router 
manufacturers disable this feature as the default setting. 
See http://panasonic.co.jp/pcc/products/en/netwkcam/ and your routers 
manual for details of how to enable UPnP™. After UPnP™ is enabled on the router, 
set [Enable] for auto port forwarding.
Note
 The camera’s UPnP™ does not support IPv6. Use this feature in IPv4.
1.Click [UPnP] on the Setup page.
2.Set up UPnP™.
3.Click [Save] when finished.
 The new settings are saved.
 When finished, Success! is displayed.Setting Description
Auto Port 
Forwarding If the network setting is [Status] or [DHCP], enabling 
auto port forwarding allows you to access the camera 
from the Internet.
Note
 If the network setting is [Automatic Setup], also enable 
[Allow Access from the Internet] on the Network page 
(see page 40).
Display Shortcut 
Icon in My Network 
Places Enabling this creates a shortcut to the camera in the 
My Network Places folder.
Note
 To enable this feature when using Windows XP or 
Windows Me, enable the UPnP™ Windows component 
beforehand (see page 165). 
						

							Operating Instructions
58
4.Click [Go to UPnP page].
 The UPnP page is displayed.
2.7.1 Connecting the Camera to a Router that Supports 
UPnP
™ (IPv4 Only)
To allow access from the Internet with a router supporting UPnP™, follow the 
procedures shown in Getting Started.
Note
 On some routers, the UPnP™ feature is disabled by default. Enable your 
routers UPnP™ feature following the router manual before you set up the 
camera. See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for details.
 If a maximum idle time is set in PPPoE or PPTP connection with your ISP, 
disable it on the router. See the router manual for details.
2.7.2 Connecting the Camera to a Router that Does Not 
Support UPnP
™ (IPv4 Only)
To allow access from the Internet with a router that does not support UPnP™, follow 
the procedures below.
1.Select [Static] on the Network (IPv4) page.
2.Enable port forwarding*1 on the router.
Using the IP address and port number noted on step 1-(3), enable port 
forwarding on the router. See the router manual for how to enable port 
forwarding.
3.Register with the Viewnetcam.com service. (1) Access the camera (see page 11).
(2) Click the [Setup] tab at the top of the page.
(3) Select [Static] on the Network page.
 The Static IP Address Configuration page is displayed. Make a 
note of the IP address and port number, since they are required to 
enable port forwarding on the router.
Note
 You must assign a unique IP address and a unique port number 
to each camera on the LAN.
(4) Click [Save] without changing the settings.
(5) Click [Restar t]. 
						

							Operating Instructions
59
Port Forwarding feature*1 (IPv4 Only)
The port forwarding feature is required to allow camera access from the Internet 
with a router that does not support UPnP™. It exchanges a local IP address for a 
global one. 
Note
 The IP addresses shown above may differ from those offered on your 
home network.
*1Port forwarding may be called Address translation, Static IP Masquerade, Virtual server 
or Port mapping in other products.
Global IP address 
of the router
vvv.xxx.yyy.zzz:80
vvv.xxx.yyy.zzz:81
vvv.xxx.yyy.zzz:80      192.168.0.253:80
vvv.xxx.yyy.zzz:81      192.168.0.252:81Port No.
Port Forwarding feature
Local IP address192.168.0.1
192.168.0.252
Port No. 81192.168.0.253
Port No. 80 Router
Modem
CATV
xDSL
Optical cable
Internet 
						

							Operating Instructions
60
2.8 Registering with the DynamicDNS Service
DynamicDNS is a service that allows you to assign an easy-to-remember name to 
the camera, for example, similar to your favorite web site. It also allows you to easily 
access the camera, even when your ISP changes the IP address. Panasonic 
Communications recommends that you register with a DynamicDNS to access the 
camera from the Internet. See http://www.viewnetcam.com for details about the 
Viewnetcam.com service.
1.Click [DynamicDNS] on the Setup page.
 When you select [Viewnetcam.com] (see below)
 When you select [User-specified DynamicDNS] (see page 62)
When you select [Disable]
2.Check [Disable] and click [Save].
 When finished, Success! is displayed.
 Clicking [Cancel] cancels your settings without saving changes.
When you select [Viewnetcam.com]
2.Check [Viewnetcam.com] and click [Next].
 Clicking [Cancel] cancels your settings without saving changes.