Panasonic KX-NS1000, Installation Manual

Page: 395 / 416

From this process, a secure communication channel is established. An SA is automatically constructed
using the IKE (Internet Key Exchange) protocol (although depending on the settings, the SA can be
established manually).
2.
After an SA is established, encapsulate packets and transmit them securely.
Example: Establishing a VPN in transport mode
LAN LAN
VPN
IP-PT
PC
Switching
Hub
Switching
Hub
IP-PT
PC
Built-in
Router
KX-NS1000
Built-in
Router
KX-NS1000
SA (Security Association)
IKE
VPN Encapsulation Encapsulation
Features
The following settings are available to modify establishing a VPN connection over IPsec.
Setting Description
IKE Settings IKE (Internet Key Exchange) settings
Security Security settings for SA
ISAKMP SA ISAKMP (Internet Security Association Key Management
Protocol) settings for SA
IKE Proposal Settings for the PBX’s IKE proposal. VPN negotiations are
performed according to these settings.
IPsec SA IPsec settings for SA
IPsec Proposal Settings for the PBX’s IPsec proposal. VPN negotiations are
performed according to these settings.
Optional Function Settings for other optional functions, such as XAUTH
authentication mode settings.
Installation Manual 395
8.6.23 VPN—IPsec