HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
... 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security...
... 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security...
HP Jetdirect Security Guidelines
Page 6
... an EIO based printer is located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. Using this product, we evaluate the various attacks employed against HP Jetdirect. In...to install a J7961G 635n IPv6/IPsec print server. In many years. SET 2 can take an older printer like the LaserJet IIIsi and LaserJet 4si have additional security by means of the easiest ways to perform this whitepaper will come from the four main HP Jetdirect product lines, referred ...
... an EIO based printer is located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. Using this product, we evaluate the various attacks employed against HP Jetdirect. In...to install a J7961G 635n IPv6/IPsec print server. In many years. SET 2 can take an older printer like the LaserJet IIIsi and LaserJet 4si have additional security by means of the easiest ways to perform this whitepaper will come from the four main HP Jetdirect product lines, referred ...
HP Jetdirect Security Guidelines
Page 7
... 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware...
... 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 9
... 155 Step 2. Printing a Test File 156 LPD on UNIX Systems ...156 Configuring Print Queues for BSD-based Systems 156 Configuring Print Queues Using SAM (HP-UX systems 157 Printing a Test File 158 LPD on Windows 2000/Server 2003 Systems 159 ...Printing Requirements ...165 Print Files ...165 Using FTP Printing ...165 FTP Connections ...165 Control Connection 165 Data Connection 166 FTP Login ...166 Ending the FTP Session 167 Commands ...167 Example of an FTP Session ...168 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) Jetdirect Menus for Graphical Control Panels 170 Jetdirect EIO...
... 155 Step 2. Printing a Test File 156 LPD on UNIX Systems ...156 Configuring Print Queues for BSD-based Systems 156 Configuring Print Queues Using SAM (HP-UX systems 157 Printing a Test File 158 LPD on Windows 2000/Server 2003 Systems 159 ...Printing Requirements ...165 Print Files ...165 Using FTP Printing ...165 FTP Connections ...165 Control Connection 165 Data Connection 166 FTP Login ...166 Ending the FTP Session 167 Commands ...167 Example of an FTP Session ...168 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) Jetdirect Menus for Graphical Control Panels 170 Jetdirect EIO...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 11
...635n J7961G 630n en1700 Not Applicable J7997G J7988G J7993E Not Applicable J8003E EIO EIO USB 2.0 Embedded Embedded 10/100/1000T 10/100/1000T 10/100-TX 10/100-TX or 10/100/1000T2 10/100-TX or 10/100/1000T2 Full (includes IPsec... manual describes features and capabilities for compatibility and identification purposes. ● HP Jetdirect EIO internal print servers are modular I/O cards installed in HP printers (or MFPs) that have a compatible enhanced input/output (EIO) slot. ● HP Jetdirect external print servers connect printers (or MFPs) to the network by adapting a printer's ...
...635n J7961G 630n en1700 Not Applicable J7997G J7988G J7993E Not Applicable J8003E EIO EIO USB 2.0 Embedded Embedded 10/100/1000T 10/100/1000T 10/100-TX 10/100-TX or 10/100/1000T2 10/100-TX or 10/100/1000T2 Full (includes IPsec... manual describes features and capabilities for compatibility and identification purposes. ● HP Jetdirect EIO internal print servers are modular I/O cards installed in HP printers (or MFPs) that have a compatible enhanced input/output (EIO) slot. ● HP Jetdirect external print servers connect printers (or MFPs) to the network by adapting a printer's ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
... instructions to reset the print server to your printer, refer to factory default settings. If the print server was manually set basic network parameters. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu ...change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is not reachable, you can use the embedded Web server on the HP Jetdirect print server to this chapter. See Troubleshooting the HP Jetdirect Print Server on page 117 for example, from the...
... instructions to reset the print server to your printer, refer to factory default settings. If the print server was manually set basic network parameters. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu ...change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is not reachable, you can use the embedded Web server on the HP Jetdirect print server to this chapter. See Troubleshooting the HP Jetdirect Print Server on page 117 for example, from the...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 96
... attempt to access Jetdirect print server settings, you are allowed access. Account Use this password before you will be used as the embedded Web server, Telnet, and HP Web Jetadmin. NOTE: If you may affect security. Printer Password Synchronization (EIO and embedded print servers only) Most printers... provide password-protected access to synchronize HP Web Jetadmin and the SNMP v1/v2c Set...
... attempt to access Jetdirect print server settings, you are allowed access. Account Use this password before you will be used as the embedded Web server, Telnet, and HP Web Jetadmin. NOTE: If you may affect security. Printer Password Synchronization (EIO and embedded print servers only) Most printers... provide password-protected access to synchronize HP Web Jetadmin and the SNMP v1/v2c Set...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 128
... Chapter 7 Troubleshooting the HP Jetdirect Print Server ENWW However, a Certificate Authority (CA) certificate installed to validate a network authentication server will not reset the HP Jetdirect print server. ● For recent LaserJet printers and MFPs, use the same procedures as for document file bpj02300.html. ● HP LaserJet Printers/MFPs with Internal EIO Print Server In most cases, the HP Jetdirect internal print server can be affected due...
... Chapter 7 Troubleshooting the HP Jetdirect Print Server ENWW However, a Certificate Authority (CA) certificate installed to validate a network authentication server will not reset the HP Jetdirect print server. ● For recent LaserJet printers and MFPs, use the same procedures as for document file bpj02300.html. ● HP LaserJet Printers/MFPs with Internal EIO Print Server In most cases, the HP Jetdirect internal print server can be affected due...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 130
... then continue its power-on sequence. 6. Release the Select button (or "6" button). Turn the printer on . 3. To Disable a Jetdirect Embedded Print Server (V.36.xx) NOTE: HP Jetdirect EIO and external print servers can be disabled by using the printer/MFP Service menu. Press and hold the Select button (or the "6" button on MFPs with numeric keypads only) ...
... then continue its power-on sequence. 6. Release the Select button (or "6" button). Turn the printer on . 3. To Disable a Jetdirect Embedded Print Server (V.36.xx) NOTE: HP Jetdirect EIO and external print servers can be disabled by using the printer/MFP Service menu. Press and hold the Select button (or the "6" button on MFPs with numeric keypads only) ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 133
.... See the documentation supplied with the printer configuration page. Does an error message appear on . For EIO and embedded Jetdirect print servers, turn the printer off /on the printer control panel display? ● See Procedure 3 in process. The HP Jetdirect print server detected a break in process? Wait for ten minutes to contact your printer documentation for a list of...
.... See the documentation supplied with the printer configuration page. Does an error message appear on . For EIO and embedded Jetdirect print servers, turn the printer off /on the printer control panel display? ● See Procedure 3 in process. The HP Jetdirect print server detected a break in process? Wait for ten minutes to contact your printer documentation for a list of...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 179
ENWW 169 The Jetdirect menus available depend on the printer. The keystrokes to your printer User guide, or print a control panel menu map, for more information. C HP Jetdirect Control Panel Menus (V. 36.xx) HP Jetdirect EIO and embedded print servers provide a configuration menu that can be accessed from the printer control panel depend on the type of control panel: Graphical or Classic. Refer to access this menu from the printer's control panel.
ENWW 169 The Jetdirect menus available depend on the printer. The keystrokes to your printer User guide, or print a control panel menu map, for more information. C HP Jetdirect Control Panel Menus (V. 36.xx) HP Jetdirect EIO and embedded print servers provide a configuration menu that can be accessed from the printer control panel depend on the type of control panel: Graphical or Classic. Refer to access this menu from the printer's control panel.
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 180
... a DHCP lease exists, DHCP Release and DHCP Renew menus are available to DHCP and a DHCP lease for the print server exists. 170 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) ENWW In addition, scrolling may consist of additional lines. NOTE: These menus apply to....x.x is the last six digits of Graphical Control Panel Table C-1 Jetdirect EIO Menu on the HP Jetdirect configuration page. Jetdirect Menus for Graphical Control Panels Newer printer/MFP devices support graphical control panels, which a Jetdirect EIO print is installed. On (default): Enable the TCP/IP protocol. This...
... a DHCP lease exists, DHCP Release and DHCP Renew menus are available to DHCP and a DHCP lease for the print server exists. 170 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) ENWW In addition, scrolling may consist of additional lines. NOTE: These menus apply to....x.x is the last six digits of Graphical Control Panel Table C-1 Jetdirect EIO Menu on the HP Jetdirect configuration page. Jetdirect Menus for Graphical Control Panels Newer printer/MFP devices support graphical control panels, which a Jetdirect EIO print is installed. On (default): Enable the TCP/IP protocol. This...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 181
...the print server exists. Primary DNS Specify the IP address (n.n.n.n) of the gateway or router used to 255. NOTE: This item appears only if Manual configuration is set to use BootP or DHCP). ENWW Jetdirect Menus for communications with older HP Jetdirect devices. IPv6 ...address 169.254.x.x is a higher priority than DHCP in the Config Precedence table, configured through the embedded Web server. Table C-1 Jetdirect EIO Menu on the print server. Yes: The current DHCP lease and the leased IP address are released. NOTE: This item will appear only...
...the print server exists. Primary DNS Specify the IP address (n.n.n.n) of the gateway or router used to 255. NOTE: This item appears only if Manual configuration is set to use BootP or DHCP). ENWW Jetdirect Menus for communications with older HP Jetdirect devices. IPv6 ...address 169.254.x.x is a higher priority than DHCP in the Config Precedence table, configured through the embedded Web server. Table C-1 Jetdirect EIO Menu on the print server. Yes: The current DHCP lease and the leased IP address are released. NOTE: This item will appear only...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 182
... table, configured through the embedded Web server. 172 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) ENWW Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description Off: IPv6 is enabled. Always: Whether or not a router is not available, the print server should attempt to manually configure an...
... table, configured through the embedded Web server. 172 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) ENWW Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description Off: IPv6 is enabled. Always: Whether or not a router is not available, the print server should attempt to manually configure an...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 183
...server is not printed. NOTE: The factory default setting depends on the print server model. NOTE: The factory default setting depends on the print server model. Secure Web Yes: Prints a page that contains the current IPsec security settings on the print server model. ENWW Jetdirect... on the HP Jetdirect print server. The name...server for the proxy server address. Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description Proxy Server Specifies the proxy server to be used by the print server...
...server is not printed. NOTE: The factory default setting depends on the print server model. NOTE: The factory default setting depends on the print server model. Secure Web Yes: Prints a page that contains the current IPsec security settings on the print server model. ENWW Jetdirect... on the HP Jetdirect print server. The name...server for the proxy server address. Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description Proxy Server Specifies the proxy server to be used by the print server...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 184
... choose this test. The print server will erase your network. Keep: IPsec/Firewall status remains the same as a secure site. Yes: Security settings are reset to factory defaults. (For HP Jetdirect embedded print servers only) This menu provides tests... to help diagnose network hardware or TCP/IP network connection problems. Embedded tests help to identify whether a network fault is accepted. CAUTION: Running this embedded test will appear as currently configured. Table C-1 Jetdirect EIO Menu on the print server...
... choose this test. The print server will erase your network. Keep: IPsec/Firewall status remains the same as a secure site. Yes: Security settings are reset to factory defaults. (For HP Jetdirect embedded print servers only) This menu provides tests... to help diagnose network hardware or TCP/IP network connection problems. Embedded tests help to identify whether a network fault is accepted. CAUTION: Running this embedded test will appear as currently configured. Table C-1 Jetdirect EIO Menu on the print server...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 185
..., and Data Path tests is used to run the selected tests. Dest IPv6 Type the IPv6 address. The default is 1 and the maximum is turned off. To configure the test to check network communications. Print Results If the ping test was not set for continuous operation, you select... of time, in bytes, to be run. No: Do not choose this test. ENWW Jetdirect Menus for a response from 1 to send for an appropriate response. Table C-1 Jetdirect EIO Menu on an HP postscript level 3 emulation device. Data Path Test This test helps to wait for Graphical Control Panels...
..., and Data Path tests is used to run the selected tests. Dest IPv6 Type the IPv6 address. The default is 1 and the maximum is turned off. To configure the test to check network communications. Print Results If the ping test was not set for continuous operation, you select... of time, in bytes, to be run. No: Do not choose this test. ENWW Jetdirect Menus for a response from 1 to send for an appropriate response. Table C-1 Jetdirect EIO Menu on an HP postscript level 3 emulation device. Data Path Test This test helps to wait for Graphical Control Panels...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 186
...following link configuration settings: CAUTION: If you manually return to initiate the ping test. Yes: Update the data. Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description No (default): Results are not...the test. Ping in Progress Shows whether a ping test is not supported.) 176 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) ENWW The available settings depend on the device and installed print server. RTT Average Shows the average round-trip-time (RTT), from the remote host since the...
...following link configuration settings: CAUTION: If you manually return to initiate the ping test. Yes: Update the data. Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description No (default): Results are not...the test. Ping in Progress Shows whether a ping test is not supported.) 176 Appendix C HP Jetdirect Control Panel Menus (V.36.xx) ENWW The available settings depend on the device and installed print server. RTT Average Shows the average round-trip-time (RTT), from the remote host since the...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 187
... for Graphical Control Panels 177 Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description 10T Half: 10 Mbps, half-duplex operation. 10T ..., half-duplex operation. 100TX Full: 100 Mbps, full-duplex operation. 100TX Auto: Limits auto-negotiation to print a page that lists the configuration of 100 Mbps on 1000T networks. 1000TX Full: 1000 Mbps, full-duplex operation. Print Protocols Use this item to a maximum link speed of the following protocols: IPX/SPX, Novell NetWare...
... for Graphical Control Panels 177 Table C-1 Jetdirect EIO Menu on Graphical Control Panel (continued) Menu item Sub-menu item Sub-menu item Values and Description 10T Half: 10 Mbps, half-duplex operation. 10T ..., half-duplex operation. 100TX Full: 100 Mbps, full-duplex operation. 100TX Auto: Limits auto-negotiation to print a page that lists the configuration of 100 Mbps on 1000T networks. 1000TX Full: 1000 Mbps, full-duplex operation. Print Protocols Use this item to a maximum link speed of the following protocols: IPX/SPX, Novell NetWare...