HP Jetdirect Security Guidelines
Page 6
...HP Jetdirect, four different administrative guidelines will be upgraded. SET 2 can use the HP Download Manager available at the very least should do not have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that cannot be careful not to install a J7961G 635n IPv6/IPsec print server... against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. For companies with a lot of EIO based printers, proper deployment of the 635n can protect their printer/MFP investment and increase the security of IPv4/IPv6 addresses as...
...HP Jetdirect, four different administrative guidelines will be upgraded. SET 2 can use the HP Download Manager available at the very least should do not have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that cannot be careful not to install a J7961G 635n IPv6/IPsec print server... against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. For companies with a lot of EIO based printers, proper deployment of the 635n can protect their printer/MFP investment and increase the security of IPv4/IPv6 addresses as...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 6
IPv6 Address Introduction 17 IPv6 Address Configuration 18 Link-Local Address 18 Stateless Addresses 18 Stateful Addresses 19 Using DNS ...19 Tools and Utilities 20 IPv4 Configuration ...20 Server-Based and Manual TCP/IP Configuration (IPv4 20 Default IP Address (IPv4 21 Default IP Address... (IPv4 59 Using the Embedded Web Server ...59 Using the Printer Control Panel ...59 4 Embedded Web Server (V.36.xx) Requirements ...62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home...
IPv6 Address Introduction 17 IPv6 Address Configuration 18 Link-Local Address 18 Stateless Addresses 18 Stateful Addresses 19 Using DNS ...19 Tools and Utilities 20 IPv4 Configuration ...20 Server-Based and Manual TCP/IP Configuration (IPv4 20 Default IP Address (IPv4 21 Default IP Address... (IPv4 59 Using the Embedded Web Server ...59 Using the Printer Control Panel ...59 4 Embedded Web Server (V.36.xx) Requirements ...62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
... Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server (V.36.xx 120 General Troubleshooting ...121 Troubleshooting Chart...
... Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server (V.36.xx 120 General Troubleshooting ...121 Troubleshooting Chart...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
....xx) on page 61), and network management applications. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 5". HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support use those protocols, are listed below. Table 1-2 Supported Network Protocols Supported...
....xx) on page 61), and network management applications. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 5". HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support use those protocols, are listed below. Table 1-2 Supported Network Protocols Supported...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 14
... with an authentication server, such as a RADIUS (Remote Authentication Dial In User Service, RFC 2138) server. Dynamic encryption keys are encapsulated within TLS (Transport Layer Security). HP Jetdirect print servers support access to the print server client. To configure the print server for EAP/802.... server. PEAP is a mutual authentication protocol based on IPv4, IPv6 and IPX networks. Security Protocols SNMP (IP and IPX) SNMP (Simple Network Management Protocol) is used . Value-featured print servers, such as a network switch) must access the embedded Web server through...
... with an authentication server, such as a RADIUS (Remote Authentication Dial In User Service, RFC 2138) server. Dynamic encryption keys are encapsulated within TLS (Transport Layer Security). HP Jetdirect print servers support access to the print server client. To configure the print server for EAP/802.... server. PEAP is a mutual authentication protocol based on IPv4, IPv6 and IPX networks. Security Protocols SNMP (IP and IPX) SNMP (Simple Network Management Protocol) is used . Value-featured print servers, such as a network switch) must access the embedded Web server through...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... using Firewall protection only. A Firewall provides simple control of new or enhanced features. HP Support HP Online Support Click your HP Jetdirect print server-24 hours a day, 7 days a week. it is provided that have factory- Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. If available for the applicable...
... using Firewall protection only. A Firewall provides simple control of new or enhanced features. HP Support HP Online Support Click your HP Jetdirect print server-24 hours a day, 7 days a week. it is provided that have factory- Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. If available for the applicable...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 19
TCP/IPv4 and TCP/IPv6 HP Jetdirect print servers: Wizard version 5.0 ● (or later) is connected to your network, allows you determine which software is available for IPv6 printing on supported systems (Windows XP and Server 2003), Version 5.0 supports printer discovery ● through IPv4 protocols only. Once the printer is required for download from HP's Website. For a network server, you . NOTE: Printer software...
TCP/IPv4 and TCP/IPv6 HP Jetdirect print servers: Wizard version 5.0 ● (or later) is connected to your network, allows you determine which software is available for IPv6 printing on supported systems (Windows XP and Server 2003), Version 5.0 supports printer discovery ● through IPv4 protocols only. Once the printer is required for download from HP's Website. For a network server, you . NOTE: Printer software...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 20
... the documentation provided with Windows 2000, XP, Server 2003. Version 6.0 supports printer discovery on an IPv6 network, but printer discovery is limited to TCP/ IPv4 networks using full-featured HP Jetdirect print servers. If your system is a server, you to first configure wireless settings on the print server so that will send print jobs directly to use the printer through the...
... the documentation provided with Windows 2000, XP, Server 2003. Version 6.0 supports printer discovery on an IPv6 network, but printer discovery is limited to TCP/ IPv4 networks using full-featured HP Jetdirect print servers. If your system is a server, you to first configure wireless settings on the print server so that will send print jobs directly to use the printer through the...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 22
...IPv4 address of an Internet Printing Model ● IPP requests for sending print jobs can be transmitted outbound through firewalls HP-Supplied Software HP Internet Printer Connection software allows you can create an IPP print path from your printer. Using the appropriate software on which HP...by Internet printing include: ● High-quality, time-sensitive documents can be printed remotely, in IPP printing software are currently limited. Internet Printer Connection Software (For full-featured print servers only) HP Jetdirect print servers support the Internet Printing Protocol (IPP...
...IPv4 address of an Internet Printing Model ● IPP requests for sending print jobs can be transmitted outbound through firewalls HP-Supplied Software HP Internet Printer Connection software allows you can create an IPP print path from your printer. Using the appropriate software on which HP...by Internet printing include: ● High-quality, time-sensitive documents can be printed remotely, in IPP printing software are currently limited. Internet Printer Connection Software (For full-featured print servers only) HP Jetdirect print servers support the Internet Printing Protocol (IPP...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 23
... Printer), then click Next. 3. For NetWare client support, refer to an HP Jetdirect print server with IPv4 address 192.160.45.40. ("/ ipp/port1" is assumed and not required.) NOTE: For a Secure IPP connection, replace http:// with https:// in the URL string above. HP Software Supported Proxies Web proxy with SP1 or later. Select the option...
... Printer), then click Next. 3. For NetWare client support, refer to an HP Jetdirect print server with IPv4 address 192.160.45.40. ("/ ipp/port1" is assumed and not required.) NOTE: For a Secure IPP connection, replace http:// with https:// in the URL string above. HP Software Supported Proxies Web proxy with SP1 or later. Select the option...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 27
...:hhhh:hhhh:hhhh:hhhh where h is a hexadecimal digit 1 through 0, A through F. 3 TCP/IP Configuration To operate properly on a TCP/IP network, the HP Jetdirect print server must be configured with valid TCP/IP network configuration parameters, such as an IP address that specifies the number of bits in an address. HP Jetdirect print server supports both IPv4 and IPv6 networks simultaneously.
...:hhhh:hhhh:hhhh:hhhh where h is a hexadecimal digit 1 through 0, A through F. 3 TCP/IP Configuration To operate properly on a TCP/IP network, the HP Jetdirect print server must be configured with valid TCP/IP network configuration parameters, such as an IP address that specifies the number of bits in an address. HP Jetdirect print server supports both IPv4 and IPv6 networks simultaneously.
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 30
.... For example, to access or troubleshoot communications with multiple link-local IPv6 addresses. IPv4 Configuration This section provides IPv4-specific configuration information for HP Jetdirect print servers on these tools and utilities may be enclosed in a factory-default state and powered on, the HP Jetdirect print server will identify IPv6 addresses for various interfaces configured on the local system if it is...
.... For example, to access or troubleshoot communications with multiple link-local IPv6 addresses. IPv4 Configuration This section provides IPv4-specific configuration information for HP Jetdirect print servers on these tools and utilities may be enclosed in a factory-default state and powered on, the HP Jetdirect print server will identify IPv6 addresses for various interfaces configured on the local system if it is...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 31
..., a default IP address will be configured manually. And if the print server is 192.0.0.192), or SNMP-based management software. ENWW IPv4 Configuration 21 The print server may also be retained when powered off /on the print server at any time, see the HP Jetdirect configuration page. Default IP Address (IPv4) When in a factory-default state (for these methods. TCP...
..., a default IP address will be configured manually. And if the print server is 192.0.0.192), or SNMP-based management software. ENWW IPv4 Configuration 21 The print server may also be retained when powered off /on the print server at any time, see the HP Jetdirect configuration page. Default IP Address (IPv4) When in a factory-default state (for these methods. TCP...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 32
...set to either Auto IP or Legacy Default IP to match. If a duplicate address is sensed, the HP Jetdirect print server will automatically reassign its address, if necessary, in accordance with standard link-local addressing methods. ● ...HP Jetdirect Configuration Pages on the Jetdirect configuration page that adhere to automated, standards-based IP address assignments, the print server uses a link-local addressing technique to be the same as the link-local address. Default IPv4 Address Configuration Options Default IPv4 Parameter A Default IP configuration parameter on the print server...
...set to either Auto IP or Legacy Default IP to match. If a duplicate address is sensed, the HP Jetdirect print server will automatically reassign its address, if necessary, in accordance with standard link-local addressing methods. ● ...HP Jetdirect Configuration Pages on the Jetdirect configuration page that adhere to automated, standards-based IP address assignments, the print server uses a link-local addressing technique to be the same as the link-local address. Default IPv4 Address Configuration Options Default IPv4 Parameter A Default IP configuration parameter on the print server...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 33
... your network operating system manuals to verify that require a specific default IP address on the print server for your system to the HP Jetdirect print server using Telnet. The BOOTP daemon, bootpd, must be running on supported systems. For more information, see "Using DHCP (IPv4) on . You can set configuration parameters using the default IP address. Default...
... your network operating system manuals to verify that require a specific default IP address on the print server for your system to the HP Jetdirect print server using Telnet. The BOOTP daemon, bootpd, must be running on supported systems. For more information, see "Using DHCP (IPv4) on . You can set configuration parameters using the default IP address. Default...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 34
... state and powered on, the HP Jetdirect print server will be located on . NOTE: If the Jetdirect print server and BOOTP/DHCP server are limited to your NetWare documentation. Configuration by other methods, such as a printer control panel, are located on page 59". For more information, see Using DHCP (IPv4) on . For setup of the HP Jetdirect print server. In DHCP, IP configuration...
... state and powered on, the HP Jetdirect print server will be located on . NOTE: If the Jetdirect print server and BOOTP/DHCP server are limited to your NetWare documentation. Configuration by other methods, such as a printer control panel, are located on page 59". For more information, see Using DHCP (IPv4) on . For setup of the HP Jetdirect print server. In DHCP, IP configuration...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 35
... TFTP are properly configured. When the HP Jetdirect print server is used by the print server to obtain entries in the /etc/bootptab file on page 25". ENWW IPv4 Configuration 25 Configuring the BOOTP Server For the HP Jetdirect print server to obtain additional configuration information from a server to the HP Jetdirect print server over the network, the BOOTP/TFTP servers must be set up with these parameters...
... TFTP are properly configured. When the HP Jetdirect print server is used by the print server to obtain entries in the /etc/bootptab file on page 25". ENWW IPv4 Configuration 25 Configuring the BOOTP Server For the HP Jetdirect print server to obtain additional configuration information from a server to the HP Jetdirect print server over the network, the BOOTP/TFTP servers must be set up with these parameters...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 36
...address. It does not include the host name; gw 3 The gateway IP address tag. For the HP Jetdirect print server, set this parameter to "TFTP Configuration File Entries (IPv4) on page 27". 26 Chapter 3 TCP/IP Configuration ENWW vm -- The subnet mask will use for... of the peripheral. This address will be the HP Jetdirect print server's IP address. The host name will be printed on the Jetdirect configuration page, or returned on the HP Jetdirect configuration page as printer1.support.hp.com). An HP-proprietary tag that specifies the relative path name of...
...address. It does not include the host name; gw 3 The gateway IP address tag. For the HP Jetdirect print server, set this parameter to "TFTP Configuration File Entries (IPv4) on page 27". 26 Chapter 3 TCP/IP Configuration ENWW vm -- The subnet mask will use for... of the peripheral. This address will be the HP Jetdirect print server's IP address. The host name will be printed on the Jetdirect configuration page, or returned on the HP Jetdirect configuration page as printer1.support.hp.com). An HP-proprietary tag that specifies the relative path name of...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 37
... specified in the form: : For supported HP Jetdirect print servers, the Port Number is continued on a line. Write Mode option. The push bit is set buffer packing for more information. An HP-proprietary tag that a print data connection may remain idle before sending to.... -- TFTP Configuration File Entries (IPv4) To provide additional configuration parameters for your system documentation or online help for TCP/IP packets. 0 (default): Normal data buffers are specified, in the BOOTP reply using TFTP. Refer to your HP Jetdirect print server, such as host names, must ...
... specified in the form: : For supported HP Jetdirect print servers, the Port Number is continued on a line. Write Mode option. The push bit is set buffer packing for more information. An HP-proprietary tag that a print data connection may remain idle before sending to.... -- TFTP Configuration File Entries (IPv4) To provide additional configuration parameters for your system documentation or online help for TCP/IP packets. 0 (default): Normal data buffers are specified, in the BOOTP reply using TFTP. Refer to your HP Jetdirect print server, such as host names, must ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 39
... Service (WINS) server. ENWW IPv4 Configuration 29 It does not include the host name; it is unavailable. ipp-printing: (or ipp-config:, ipp:) Enables or disables the ability to 64 alphanumeric characters. ftp-printing: (or ftp-...printing services on the print server to use if the primary DNS server is not the Fully Qualified Domain Name (such as printer1.support.hp.com). Table 3-2 TFTP Configuration File Parameters (continued) 2: Disable forced redirection to print through IPP: 0 disables, 1 (default) enables. security-reset: Reset security settings on the Jetdirect print server...
... Service (WINS) server. ENWW IPv4 Configuration 29 It does not include the host name; it is unavailable. ipp-printing: (or ipp-config:, ipp:) Enables or disables the ability to 64 alphanumeric characters. ftp-printing: (or ftp-...printing services on the print server to use if the primary DNS server is not the Fully Qualified Domain Name (such as printer1.support.hp.com). Table 3-2 TFTP Configuration File Parameters (continued) 2: Disable forced redirection to print through IPP: 0 disables, 1 (default) enables. security-reset: Reset security settings on the Jetdirect print server...