Canon VB-H610D, Operation Manual

Page: 70 / 173

70
identifying the SA, be careful not to specify an
inbound SPI whose value is already used in the SPI for
other ESP.
z
If [ S ecurity Protocol] was set to [AH] or [E S P and AH]] in
(5), (16) [ S A AH Authentication Algorithm] to (20) [ S A
AH S PI (inbound)] must be set.
(16)[ S A AH Authentication Algorithm]
Set the AH authentication algorithm to
[HMAC_SHA1_96] or [HMAC_MD5_96] according to
the authentication algorithm supported by the device
to connect to.
(17)[ S A AH Authentication Key (outbound)]
Set the SA authentication key for outbound. If
[HMAC_SHA1_96] or [HMAC_MD5_96] was selected
in (16), set a 160-bit or 128-bit hexadecimal,
respectively.
(18)[ S A AH S PI (outbound)]
Set the SA SPI value for outbound.
Set a desired value in the range of 256 to
4294967295.
(19)[ S A AH Authentication Key (inbound)]
Set the SA authentication key for inbound. If
[HMAC_SHA1_96] or [HMAC_MD5_96] was selected
in (16), set a 160-bit or 128-bit hexadecimal,
respectively.
(20)[ S A AH S PI (inbound)]
Set the SA SPI value for inbound.
Set a desired value in the range of 256 to
4294967295. Since this setting is used as an ID for
identifying the SA, be careful not to specify an
inbound SPI whose value is already used in the SPI for
another AH.
Note
If IPsec is used, video transmission performance drops.
Important
• To run this camera with IPsec, the communicating devices
and network must be set beforehand. Contact your System
Administrator for these settings.
• When connecting with IPsec, set the camera IP address
manually.
For IPv4 addresses, use addresses set with [Network] >
[IPv4 Address Setting Method] > [Manual].
For IPv6 addresses, use addresses set with [Network] >
[IPv6 Address (Manual)].
• If any setting is changed from the [IPsec] menu, the camera
may become inaccessible from the active web browser.
Check beforehand the precautions in “Important” in “[Reboot
Item] Setting Items Requiring Rebooting” (p. 76).