Panasonic Network Camera Kx Hcm110a Operating Instructions

							Operating Instructions
[For assistance, please call: 1-800-272-7033] 51
DNS Server 
Address DNS server address is required in the following conditions.
– Transferring camera images by E-mail or FTP
– Setting cameras by their host names on the Multi-
Camera Setup page
– Using the DynamicDNS service
– Using the alarm log notification
 If you have the assigned DNS server IPv6 addresses by 
your ISP or network administrator, enter them in this data 
field. They usually have two addresses.
 IPv6 address consists of 8 hexadecimal digits divided with 
:. Consecutive 0s can be abbreviated as ::. 
 
(E.g. 2001:2:3:4::5)
Max. Bandwidth 
Usage The bandwidth can be restricted.
 Select the maximum bandwidth usage from [Unlimited] to 
[0.1 Mbps].
 This setting is valid in both IPv4/IPv6.
Note
Set the maximum bandwidth usage seeing the following 
file sizes. These are examples for a JPEG file with a 
standard image quality. File sizes may change depending 
on the image quality or how bright the object is.
160 x 120 pixels: About 3.5 KB (28 Kbit)
320 x 240 pixels: About 10 KB (80 Kbit)
640 x 480 pixels: About 18 KB (144 Kbit)
Connection Type Select [Auto Negotiation] normally. If you cannot access 
the camera, see page 
7 of the Troubleshooting on the 
Setup CD-ROM.
 This setting is valid in both IPv4/IPv6.
Setting Description 
						

							Operating Instructions
52
2.4 What is IPsec?
IPsec provides security for the transmission of sensitive information over 
unprotected networks such as the Internet. IPsec authenticates IP packets 
between participating IPsec devices. 
Cameras IPsec Feature
The camera can use IPsec in both IPv4/IPv6. The camera supports the following 
IPsec feature. 
ItemSupported Feature
IKEv1Pre-shared Key Method
Phase 1 mode
Phase 2 mode
Cipher Algorithm 
Message-Digest 
Algorithm
: Main mode*1
: Quick mode
: DES-CBC, 3DES-CBC, AES-CBC (128, 
192, 256 bits)
: HMAC-MD5, HMAC-SHA-1
*1The camera does not support aggressive mode.
IPsecESP (Encapsulating Security Payload)*2
Transport mode, Tunnel mode
*2The camera does not support authentication header (AH).
Cipher Algorithm 
Message-Digest 
Algorithm
:DES-CBC, 3DES-CBC, AES-CBC (128, 
192, 256 bits)
:HMAC-MD5-96, HMAC-SHA-1-96
Malicious User
Internet Image
Allowed User
Readable Unreadable 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033] 53
IPsec Mode Selection
Select transport mode or tunnel mode to access the camera.
Transport Mode (IPv4 Only)
The image is encrypted in the whole way between the camera and your PC. In the 
environment of Windows XP Service Pack 1 or later, transport mode is available 
only in IPv4.
Prepare the following requirements.
ItemSupported Feature
PCOperating System
Web Browser
ISP Service
: Windows XP Service Pack 1 or later
: Internet Explorer 6.0 or later
: Services for multiple global addresses (A 
global address must be set up on your 
PC.)
Note
To use IPsec, you need to set up your operating system. 
See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for 
the setup.
CameraISP Service: Services for multiple global addresses (A 
global address must be set up to the 
camera.)
Transport Mode
Encrypted 
						

							Operating Instructions
54
Tunnel Mode (IPv4/IPv6)
An IPsec mode of operation where the entire IP packet including IP header is 
authenticated and encrypted. A new IP header is added (protecting the entire 
original packet). Both VPN clients and VPN gateways can use this mode.
Note
The camera can be accessed only from the PCs under the VPN router. Other 
PCs cannot access the camera.
Prepare the following requirements.
ItemSupported Feature
PCOperating System 
 
Web Browser
: Windows XP, Windows 2000, Windows 
Me, Windows 98SE (in IPv4)
: Windows XP Service Pack 1 or later (in 
IPv6)
: Internet Explorer 6.0 or later
RouterISP Service  
(in IPv4) 
ISP Service  
(in IPv6)
: Static global address service (A global 
address must be set up to the WAN side of 
the router.)
: IPv4/IPv6 Dual-Stack or IPv6 over IPv4 
Tunneling service
Note
See the Panasonic Network Camera support website at 
http://panasonic.co.jp/pcc/products/en/netwkcam/ for 
the recommended router.
CameraISP Service  
(in IPv4) 
ISP Service  
(in IPv6)
: Services for multiple global addresses (A 
global address must be set up to the 
camera.)
: IPv4/IPv6 Dual-Stack or IPv6 over IPv4 
Tunneling service
Encrypted
Not EncryptedTunnel Mode WA N
LAN 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033] 55
2.5 Encrypt the Camera Image in Transport Mode
The camera can encrypt the image using IPsec transport mode.
Note
If you use IPsec, refresh interval slows down.
1.Click [IPsec] on the Setup page.
2.Click Camera in the Transport column.
 If you use transport mode in E-mail or FTP transfer, click No. in the Buffer/
Tr a n s f e r  c o l u m n .
Note
To display Alarm Log, set Alarm 1, Alarm 2 or Motion Detection for Trigger 
Setting and check [Enable].
3.Enter each parameter in the data field.
 
 
 
 
 
 
Set to use 
Alarm Log.
 
(See page 
123)
 
 
The display shows 
that the 
communication is 
in HTTP and any 
people can access 
the camera if they 
have the pre-
shared key.
Set up these settings to transfer images in transport mode (see page 118). 
						

							Operating Instructions
56
4.Click [Save] when finished.
 New settings are saved.
5.Click [Cancel].
 The IPsec page is displayed.
6.Check [Use] in the IPsec column, check encoding strength, and click [Save]. 
SettingDescription
Status Check the box to use this encryption method.
Pre-Shared Key It is the key to use in the authentication of communications. 
Enter the same pre-shared key as your PC.
 Enter ASCII characters for the host name (see page 168). 
But [Space], [], [], [&], [] are not available.
Note
If the pre-shared key leaks to a third party, it may lead to illegal 
access, private information leak or interference. To protect your 
security and privacy, pay attention to the following points.
 Make it known only to the specified people.
 Set it as many characters as possible.
 Change the password regularly.
SettingDescription
IPsec Check the box to enable IPsec features. If you clear the 
box, whole IPsec features will be invalid.
Encoding strength Encoding strength for IPsec can be selected. If you select 
[Standard], DES or NULL is valid as an algorithm, and then 
the data will become easier to be decrypted. 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033] 57
7.Click [Restar t].
8.Set up your PC as it fits to the requirements on page 53.
 Set the FTP server or E-mail server to transfer images.
9.Access the camera (see page 13).
 If you can access the camera, the IPsec setup is complete.
Note
 In IPsec communications, IPsec is displayed on the Top page or the 
Single Camera page.
 If you cannot communicate using IPsec, see page 20 of the 
Troubleshooting on the Setup CD-ROM.
 See the Panasonic Network Camera support website at  
http://panasonic.co.jp/pcc/products/en/netwkcam/ for the IPsec 
features. 
						

							Operating Instructions
58
2.6 Encrypt the Camera Image in Tunnel Mode
The camera can encrypt the image using IPsec tunnel mode.
Note
 Do not set IPsec on the PCs under the VPN router. Communications may 
be blocked.
 If you use IPsec, refresh interval slows down.
 The camera can be accessed only from the PCs under the VPN router. 
Other PCs cannot access the camera.
1.Click [IPsec] on the Setup page.
2.Click Add in the Tunnel column.
3.Enter each parameter in the data field. 
						

							Operating Instructions
[For assistance, please call: 1-800-272-7033] 59
4.Click [Save] when finished.
 New settings are saved.
5.Click [Cancel].
 The IPsec page is displayed.
6.Check [Use] in the IPsec column, check encoding strength, and click [Save]. 
SettingDescription
Status Check the box to use this encryption method.
Pre-Shared Key It is the key to use in the authentication of communications. 
Enter the same pre-shared key as your VPN router.
 Enter ASCII characters for the host name (see page 168). 
But [Space], [], [], [&], [] are not available.
Note
If the pre-shared key leaks to a third party, it may lead to illegal 
access, private information leak or interference. To protect your 
security and privacy, pay attention to the following points.
 Make it known only to the specified people.
 Set it as many characters as possible.
 Change the password regularly.
Network address Enter the destination network address.
 Enter IP address/Prefix length in the data field.
Router address Enter the WAN IP address of the VPN router on a 
destination network.
Note
 IPv6 link-local address is not available.
 The camera can be accessed only from the PCs under 
the VPN router. Other PCs cannot access the camera. 
						

							Operating Instructions
60
7.Click [Restart].
8.Set up your VPN router as shown below.
 To use tunnel mode, you need to set up your VPN router.
SettingDescription
IPsec Check the box to enable IPsec features. If you clear the 
box, whole IPsec features will be invalid.
Encoding strength Encoding strength for IPsec can be selected. If you select 
[Standard], DES or NULL is valid as an algorithm, and then 
the data will become easier to be decrypted.
IKE ItemsSettings
Phase 1Authentication 
MethodPre-shared Key Method
IDSpecifies by address.
ModeMain mode*1
Diffie-Hellman 
MODP GroupSpecifies 1 or 2.
Cipher AlgorithmSelect from DES-CBC, 3DES-CBC or 
AES-CBC (128, 192, 256 bits). (Multiple 
selections are available.)
Message-Digest 
AlgorithmHMAC-MD5, HMAC-SHA-1
LifetimeSpecifies by 28800 s (Byte setting is not 
supported.)