Vpn-Ipsec - Panasonic KX-NS1000 Installation Manual

•
For bandwidth control, the PBX supports setting an upper limit on the number of frames sent of a specified
type. However, a bandwidth guarantee, where the number of frames of a specified type is guaranteed to
be sent, is not supported.
PQ: Priority Queuing
*1
WRR: Weighted Round Robin
*2
*3 SP: Strict Priority
*4 WFQ: Weighted Fair Queuing
PC Programming Manual References
27.12 Router Configuration—QoS Settings—[4] QoS Service
8.6.23 VPN—IPsec
Description
There are 2 VPN communication modes: transport mode and tunnel mode.
Transport Mode
This mode is used when IPsec is applied between hosts or between a host and site. It is useful for remote
access. In this mode, the host itself encrypts the packet before sending it.
Tunnel Mode
This mode is used when IPsec is applied between sites.
In this mode, an SA (Security Association) is created between devices (called secure gateways) that
support IPsec. Data from other clients connected to these devices is encrypted and sent. A host's data is
encrypted by a security gateway and sent to the corresponding security gateway.
The receiving security gateway decrypts the data and sends it to the destination host.
PC
Switching
IP-PT
LAN
VPN connection procedure overview
1.
Establish a security association (SA)
An SA refers to the agreed upon results of encryption key exchange and encryption method negotiated
by the devices that will communicate over a VPN.
KX-NS1000
Hub
VPN Transport Mode
VPN Transport Mode
Built-in Built-in
Router Router
KX-NS1000
VPN Tunnel Mode
8.6.23 VPN—IPsec
PC
Switching
Hub
IP-PT
LAN
Installation Manual 363