Panasonic KX-NS1000, Руководство по установке

Страница: 394 / 416

•
For bandwidth control, the PBX supports setting an upper limit on the number of frames sent of a specified
type. However, a bandwidth guarantee, where the number of frames of a specified type is guaranteed to
be sent, is not supported.
*1 PQ: Priority Queuing
*2 WRR: Weighted Round Robin
*3
SP: Strict Priority
*4 WFQ: Weighted Fair Queuing
PC Programming Manual References
27.12 Router Configuration—QoS Settings—[4] QoS Service
8.6.23 VPN—IPsec
Description
There are 2 VPN communication modes: transport mode and tunnel mode.
Transport Mode
This mode is used when IPsec is applied between hosts or between a host and site. It is useful for remote
access. In this mode, the host itself encrypts the packet before sending it.
Tunnel Mode
This mode is used when IPsec is applied between sites.
In this mode, an SA (Security Association) is created between devices (called secure gateways) that
support IPsec. Data from other clients connected to these devices is encrypted and sent. A host’s data is
encrypted by a security gateway and sent to the corresponding security gateway.
The receiving security gateway decrypts the data and sends it to the destination host.
LAN LAN
IP-PT
PC
Switching
Hub
Switching
Hub
IP-PT
PC
Built-in
Router
KX-NS1000
Built-in
Router
KX-NS1000
VPN Tunnel Mode
VPN Transport Mode
VPN Transport Mode
VPN connection procedure overview
1.
Establish a security association (SA)
An SA refers to the agreed upon results of encryption key exchange and encryption method negotiated
by the devices that will communicate over a VPN.
394 Installation Manual
8.6.23 VPN—IPsec