Canon network camera VBH41 User Manual

							[IPsec] Setting IPsec
71
5
Setting Page
(8) [IKE Pre-Shared Key] 
Enter the pre-shared key for IKE (auto key exchange) 
(up to 127 characters). 
Note
If auto key exchange is used, it will take approximately 5 to 10 
seconds before communication with the camera starts. 
IPsec Set (Manual) 
IPsec Sets 1 to 5 are available, and you can specify IPsec 
settings for one communication device for each IPsec Set. 
(1) [IPsec Set] 
Set IPsec Set to [Disable], [Enable in IPv4] or [Enable 
in IPv6]. 
(2) [IPsec Mode] 
Set IPsec mode to [Tunnel Mode] or [Transport 
Mode]. 
(3) [Destination IPv4 Address], [Destination IPv6 Address] 
Enter the IP address of the connection destination. 
(4) [Source IPv4 Address], [Source IPv6 Address] 
Enter the IP address of the source. 
(5) [Security Protocol] 
Set the IPsec protocol to [ESP], [AH] or [ESP and AH]. 
If [ESP] is selected, enter only the setting items 
relating to ESP. 
If [AH] is selected, enter only the setting items relating 
to AH.
If [ESP and AH] is selected, enter all setting items. 
(6) [Security Gateway IPv4 Address], [Security Gateway 
IPv6 Address]
If [IPsec Mode] is set to [Tunnel Mode] in (2), set the 
IP address of the security gateway. (7) [Destination Subnet Mask Length] (IPv4), [Destination 
Prefix Length] (IPv6)
This setting is required only if [IPsec Mode] is set to 
[Tunnel Mode] in (2).
If IPv6 is used, enter a desired prefix length for the 
connection destination in the range of 16 to 128. 
If IPv4 is used, enter a desired length in the range of 1 
to 32. 
zIf [Security Protocol] is set to [ESP] or [ESP and AH] in 
(5), (8) [SA ESP Encryption Algorithm] to (15) [SA ESP 
SPI (inbound)] must be set. 
(8) [SA ESP Encryption Algorithm] 
Set the ESP encryption algorithm to [AES], [3DES], 
[DES] or [NULL] according to the encryption 
algorithm supported by the device to connect to. 
Normally [AES] or [3DES] is recommended. 
(9) [SA ESP Authentication Algorithm] 
Set the ESP authentication algorithm to 
[HMAC_SHA1_96], [HMAC_MD5_96] or [No 
Authentication] according to the authentication 
algorithm supported by the device to connect to. 
If [ESP] is used alone, [No Authentication] cannot be 
selected.
(10)[SA ESP Encryption Key (outbound)] 
Set the SA encryption key for outbound. If [AES], 
[3DES] or [DES] was selected in (8), set a 128-bit, 
192-bit or 64-bit hexadecimal, respectively. This item 
need not be set if [NULL] was selected.
(11)[SA ESP Authentication Key (outbound)] 
Set the SA authentication key for outbound. If 
[HMAC_SHA1_96] or [HMAC_MD5_96] was selected 
in (9), set a 160-bit or 128-bit hexadecimal, 
respectively. This item need not be set if [No 
Authentication] was selected. 
(12)[SA ESP SPI (outbound)] 
Set the SA SPI value for outbound. 
Set a desired value in the range of 256 to 
4294967295.
(13)[SA ESP Encryption Key (inbound)] 
Set the SA encryption key for inbound. 
If [AES], [3DES] or [DES] was selected in (8), set a 
128-bit, 192-bit or 64-bit hexadecimal, respectively. 
This item need not be set if [NULL] was selected.
(14)[SA ESP Authentication Key (inbound)] 
Set the SA authentication key for inbound. 
If [HMAC_SHA1_96] or [HMAC_MD5_96] was 
selected in (9), set a 160-bit or 128-bit hexadecimal, 
respectively. This item need not be set if [No 
Authentication] was selected. 
(15)[SA ESP SPI (inbound)] 
Set the SA SPI value for inbound. 
Set a desired value in the range of 256 to 
4294967295. Since this setting is used as an ID for 
Important
If the camera is rebooted during auto key exchange 
communication, a connection error may result after rebooting. 
In this case, connect again.  
						

							72
identifying the SA, be careful not to specify an 
inbound SPI whose value is already used in the SPI for 
other ESP. 
zIf [Security Protocol] was set to [AH] or [ESP and AH] in 
(5), (16) [SA AH Authentication Algorithm] to (20) [SA 
AH SPI (inbound)] must be set. 
(16)[SA AH Authentication Algorithm] 
Set the AH authentication algorithm to 
[HMAC_SHA1_96] or [HMAC_MD5_96] according to 
the authentication algorithm supported by the device 
to connect to. 
(17)[SA AH Authentication Key (outbound)] 
Set the SA authentication key for outbound. If 
[HMAC_SHA1_96] or [HMAC_MD5_96] was selected 
in (16), set a 160-bit or 128-bit hexadecimal, 
respectively. 
(18)[SA AH SPI (outbound)] 
Set the SA SPI value for outbound. 
Set a desired value in the range of 256 to 
4294967295.
(19)[SA AH Authentication Key (inbound)] 
Set the SA authentication key for inbound. If 
[HMAC_SHA1_96] or [HMAC_MD5_96] was selected 
in (16), set a 160-bit or 128-bit hexadecimal, 
respectively. 
(20)[SA AH SPI (inbound)] 
Set the SA SPI value for inbound. 
Set a desired value in the range of 256 to 
4294967295. Since this setting is used as an ID for 
identifying the SA, be careful not to specify an 
inbound SPI whose value is already used in the SPI for 
another AH. 
Note
If IPsec is used, video transmission performance drops.
Important
 To run this camera with IPsec, the communicating devices 
and network must be set beforehand. Contact your System 
Administrator for these settings. 
 When connecting with IPsec, set the camera IP address 
manually.
For IPv4 addresses, use addresses set with [Network] > 
[IPv4 Address Setting Method] > [Manual].
For IPv6 addresses, use addresses set with [Network] > 
[IPv6 Address (Manual)].
 If any setting is changed from the [IPsec] menu, the camera 
may become inaccessible from the active web browser. 
Check beforehand the precautions in “Important” in “[Reboot 
Item] Setting Items Requiring Rebooting” (p. 78). 
						

							73
Setting Page
5
Certificates
(1) [Create Self-Signed Certificate] 
After entering each of the following settings, click 
[Exec] to create a self-signed certificate. Follow the 
instructions in the message and reboot. The certificate 
created will take effect after rebooting. 
Note
Creating a certificate takes time, so it is recommended that you 
stop video transmission and upload processes.
(2) [Certificate Status] 
If no certificate is installed, [Not Installed] will appear. 
If a certificate is installed, [Installed] will appear. 
(3) [Country (C)] 
Enter the country code. 
(4) [State/Province (ST)], [Locality (L)], [Organization (O)], 
[Organizational Unit (OU)], [Common Name (CN)] 
Enter state/province name, locality, organization 
name, organizational unit and common name in ASCII 
characters (spaces or printable characters). Enter a 
FQDN format host name, etc. to set the common 
name (required). 
(5) [Validity Period Start Date], [Validity Period End Date] 
Set the validity period of the certificate to be created in 
the range of 2001/01/01 to 2031/12/31 (required when 
creating a self-signed certificate). Certificate Management
(1) [Generate Certificate Signing Request] 
Click [Exec] to create server private key and generate 
a certificate signing request. Once processed, the 
certificate signing request will appear in a separate 
window. 
Note
Generating a certificate signing request takes time, so it is 
recommended that you stop video transmission and upload 
processes.
(2) [Display Certificate Signing Request Details] 
Click [Exec] to view the details of the certificate 
signing request. 
(3) [Install Server Certificate] 
Perform this operation to install a server certificate. 
Click [Browse] to select the certificate file for 
installation, then click [Exec]. The certificate installed 
will take effect after rebooting. 
(4) [Install Intermediate Certificate] 
Perform this operation to install an intermediate 
certificate. Select the certificate file to be installed 
using the [Browse] button and click [Exec]. The 
installed certificate will take effect after rebooting. 
Note
To install an intermediate certificate and a primary intermediate 
certificate, use a text editor or similar software to place them in 
the same file and install them as an intermediate certificate.
(5) [Delete Certificate] 
Click [Exec] to delete the certificate. However, if SSL 
communications are enabled, the certificate cannot 
be deleted. Set [SSL Communications] to [Disable] 
before deleting a certificate. The deletion will take 
effect after rebooting. 
(6) [Display Server Certificate Details] 
Click [Exec] to view the details of the certificate. 
(7) [Self CA Certificate] 
Used for the purpose of testing SSL communications, 
but otherwise not normally used. 
[SSL/TLS] Setting HTTP Communication Encryption
The following can be set here. 
 Certificates
Create an SSL/TLS certificate. 
 Certificate Management
Manage the SSL/TLS certificate. 
 Encrypted Communications
Set the encrypted communication.
Important
With regard to security, it is recommended that you use a self-
signed certificate where complete security does not need to be 
ensured through operation tests, etc. For system operation, 
acquire and install a certificate issued by a CA. 
						

							74
(8) [Backup] 
Click [Exec] to perform a backup of the certificates 
and private key. This operation can only be performed 
via SSL communications. 
(9) [Restore] 
Installs the certificates and private key from 
backup. Click [Browse] to select the backup file, 
then click [Exec]. This operation can only be 
performed via SSL communications, and will take 
effect after rebooting. 
Encrypted Communications
(1) [SSL Communications] 
Set SSL communications to [Disable] or [Enable]. The 
setting will take effect after rebooting. 
However, if no certificate is installed, SSL 
communications cannot be changed to [Enable]. 
Note
 It may take a few minutes to generate an SSL key. 
 If SSL communications are used, video transmission 
performance drops.
 Depending on the type of the certificate being installed on the 
camera, a dialog box may appear indicating that the web 
browser has accepted the certificate and a connection can be 
made.
If the dialog box does not appear, register the CA certificate in 
the web browser. 
						

							75
Setting Page
5
SD Card Operations (unmount status) 
(1) [Mount/Unmount] 
In unmount status, [Mount] will appear. Click [Mount] 
to mount the SD memory card. 
Note
SD, SDHC and SDXC memory cards can be used with the 
camera.
When an SD memory card is inserted in the card slot, it is 
mounted automatically. It is also mounted automatically if 
inserted in the camera at the time of booting. 
For inserting and removing the SD memory card, see “Installation 
Guide” > “Using an SD Memory Card”. 
(2) [Operation Settings] 
Set write operations to the SD memory card to [Save 
Log] or [Save Logs and Videos].
Note
 The following settings and operations will record video on an 
SD memory card.
- When a network error occurs during recording-mode stream
- When uploading fails
- When [Video Record Action] in the [Event] menu (p. 64) is 
set to [Record to SD Card], and an event (volume detection, 
external device input or timer) setting is enabled and 
[Enable] is selected for [Video Record]
- When manually recorded to SD memory card from the 
Admin Viewer (p. 144)
 New files cannot be saved to the SD memory card if there is no 
free space.
(3) [Video Format]
Select the [JPEG] or [H.264] video format to make 
recordings to an SD memory card. If [H.264] is 
selected, select [Use bit rate control] under [Bit Rate 
Control] in [Video]. Video is recorded in this format 
when [Record to SD Card] is selected in [Video 
Record Action] (p. 64) of the [Event] menu.
Note
 When [JPEG] is selected in [Video Format] and an upload error 
occurs, the frame rate of video recorded in JPEG format is 
always 1 fps.
 When a network error occurs during recording-mode stream, 
video is saved in the JPEG format regardless of the [Video 
Format] setting (the frame rate is fixed at 1 fps).
 Video size and quality of the recorded video are made 
according to the settings in the [Video] menu.
(4) [Pre-event Buffer (number of frames)] / [Pre-event 
Buffer (sec)]
Enter the number of frames or seconds of video to be 
buffered before the event. The maximum amount is 
number of frames for a [JPEG] selection and number 
of seconds for an [H.264] selection in [Video Format].
(5) [Post-event Buffer (number of frames)] / [Post-event 
Buffer (sec)]
Enter the number of frames or seconds of video to be 
buffered after the event. The maximum amount is 
number of frames for a [JPEG] selection and number 
of seconds for an [H.264] selection in [Video Format].
(6) [Overwrite videos]
Select [Enable] or [Disable] for the overwrite setting of 
video that is recorded to an SD memory card when an 
event occurs. If you select [Enable], videos recorded 
using an event and timer will be overwritten. 
Overwriting is performed when the number of 
recordings that can be stored (100,000 files) for each 
of events and timers is exceeded. Overwriting is not 
performed when there is insufficient space on the SD 
memory card.
(7) [Format] 
Click [Exec] to format the SD memory card. 
Formatting erases all video and logs on the memory 
card.
[Memory Card] SD Memory Card Operations and Settings 
The following can be set here. 
SD Card Operations
Perform SD memory card operations.
SD Card Information
Display information about the SD memory card. 
Important
 When an H.264 video is saved to an SD memory card, the 
following restrictions apply to [H.264] of [Video] (p. 55).
- Only [Use bit rate control] can be selected for [Bit Rate 
Control].
- Only [3072] or less can be selected for [Target Bit Rate 
(kbps)].
- Only one of [0.5], [1], and [1.5] can be selected for [I 
Frame Interval (sec)].
 Since the [Pre-event Buffer] and [Post-event Buffer] set the 
maximum value, it may not be possible to record the 
specified number of frames or seconds of video depending 
on conditions. 
						

							76
SD Card Operations (mount status) 
(1) [Mount/Unmount] 
In mount status, [Unmount] will appear. Click 
[Unmount] to unmount the 
SD memory card. 
(2) [Operation Settings], [Video Format], [Pre-event 
Buffer], [Post-event Buffer], [Overwrite videos]
These settings are the same as in “SD Card 
Operations (unmount status)”.
(3) [Delete Videos] 
Click [Exec] to delete videos from the SD memory 
card. During deletion, an indicator will appear to the 
right of [Exec]. 
Note
 It may take 40 minutes or more to delete videos from the SD 
memory card. 
 Deleting videos takes time, so it is recommended that you stop 
video transmission and upload processes.
(4) [Recreate Video Management Information] 
Click [Exec] to recreate the video management 
information. 
During re-creation, an indicator will appear to the right 
of [Exec]. The SD memory card is inaccessible during 
this time. 
Note
 It may take 90 minutes or more to recreate video management 
information.
 Recreating video management information takes time, so it is 
recommended that you stop video transmission and upload 
processes.
SD Card Information
(1) [SD Card Recognition] 
Displays the status of the SD memory card. The three 
status messages are [SD Card Not Inserted], [Not 
Mounted] and [Mounted].
(2) [SD Card Operation Status] 
Displays the operation status of the SD memory card. 
The three status messages are as follows. 
 [Operable]: This status indicates that any operation 
may be performed. 
 [Recreating video management information]: This 
status indicates that video management information 
is being recreated. Other operations cannot be 
performed. 
 [Deleting videos]: This status indicates that videos 
are being deleted. Other operations cannot be 
performed. 
(3) [Video Management Information Status] 
Displays the status of the video management 
information. The two status messages are as follows. 
 [Normal]: This status indicates that video 
management information is normal. 
 [Video Management Information Recreation 
Required]: This status indicates that management 
files are corrupted or not consistent with saved 
video files. It is necessary to click [Exec] in 
[Recreate Video Management Information] to 
recreate video management information.
(4) [Video Saving] 
Displays whether or not videos can be saved to the 
SD memory card. 
 [Can Save]: Indicates that videos can be saved to 
the SD memory card.
 [Cannot Save]: Indicates that videos cannot be 
saved to the SD memory card. This status may be 
caused when the SD memory card is not mounted, 
the video file count upper limit has been reached, 
the video management file is corrupted or the card 
is write-protected. 
(5) [SD Card Capacity (KB)] 
Displays the SD memory card storage capacity. 
(6) [Used Capacity (KB)] 
Displays information about storage used on the SD 
memory card.
Important
Be sure to perform the unmount process when turning off the 
power to the camera or removing the SD memory card. Failing 
to unmount first may result in management file problems or the 
SD memory card becoming inaccessible. 
You can use the Memory Card Unmount Tool (p. 16) to mount/
unmount memory cards from multiple cameras at the same 
time. 
						

							[Memory Card] SD Memory Card Operations and Settings
77
5
Setting Page
Note
For accessing files saved to the SD memory card, see “SD 
Memory Card Access” (p. 146). 
Important
Information recorded to the SD memory card may be regarded 
as “personal information”. Take sufficient precautions for 
handling this information when releasing to third parties for 
disposal, transfer or repair.  
						

							78
(1) [LAN] 
LAN interface, maximum packet size settings (p. 47)
(2) [IPv4] 
IP address, IPv4 settings, etc. (p. 47) 
(3) [IPv6] 
Settings regarding IPv6 (p. 48) 
(4) [Installation Conditions] 
Dome setting (p. 54) 
(5) [HTTP Server] 
Authentication method, HTTP, and HTTPS port 
settings (p. 63) 
[Reboot Item] Setting Items Requiring Rebooting 
The following settings that require rebooting before 
changes take effect can be found on a single page. 
 LAN, IPv4, IPv6, Installation Conditions (VB-H41 
only), HTTP ServerImportant
These settings relate to network connectivity. If any setting is 
changed to a value that may disable camera connection from 
the active web browser, a dialog box appears and alerts the 
user. 
Click [OK] to apply the new setting. 
Depending on the new setting, it may not be possible to 
connect to the camera again after rebooting. If this happens, a 
candidate URI for reconnecting the camera will appear if 
available. 
Try the URI displayed to reconnect the camera. 
If you cannot connect to the camera through the displayed URI, 
contact your System Administrator.
* Settings related to network connectivity in the [Reboot Item] menu 
are [LAN Interface], [Maximum Packet Size], [IPv4 Address 
Setting Method], [IPv4 Address], [Subnet Mask], [IPv4 Default 
Gateway Address], [AutoIP], [IPv6], [Auto (RA)], [Auto 
(DHCPv6)], [IPv6 Address (Manual)], [Prefix Length], [IPv6 
Default Gateway Address], [HTTP Port] and [HTTPS Port].  
						

							79
Setting Page
5
Tool
(1) [View Logs] 
Display a history of camera operations and 
connections to each viewer, etc. 
(2) [View Current Settings] 
Display a list of current settings. 
(3) [Reboot] 
The camera is rebooted. 
(4) [Restore Default Settings] 
Discard user-defined settings and restore all setting 
items to factory default settings except camera 
administrator password, network setting, date, time, 
time zone, SSL certificate, encrypted communications 
and host access restrictions. Executing this operation 
will reboot the camera automatically. 
(5) [Back Up Settings]
Back up all settings, other than the date and time, to a 
memory card.
The IP address, SSL certificates, and private key files 
are also backed up.
(6) [Restore Settings]
Restore all settings, other than the date and time, from 
a backup file on a memory card.
The IP address, SSL certificates, and private key files 
are also restored.
The camera reboots after settings are restored.
Note
 It is recommended that you write down all current setting 
values before restoring factory default settings in [Restore 
Default Settings] (p. 166). 
 The camera can be restored to factory default settings using 
the reset switch as well. Note, however, that this will reset all 
camera settings to factory default settings except for date and 
time (p. 165). 
[Maintenance] 
Viewing Event Logs and Current Settings and Performing Maintenance
The following items can be used here. 

Display or Initialize Camera Settings, and Back 
Up/Restore Settings.
Important
If the restored settings were backed up from a different camera, 
note that an address conflict on the network may occur.
Caution
 You must not turn off the camera while it is 
performing the [Restore Default Settings] 
operation. Turning off the camera at this stage 
may result in making it unable to boot correctly. 
 Never touch the camera head during 
initialization. Initialization failure or malfunction 
may result.  
						

							80