HP Jetdirect Security Guidelines
Page 6
... come from the four main HP Jetdirect product lines, referred to as service types. • SET 4: The 635n model and the CM8000 Color MFP series (J7974E). In order to properly recommend configurations for HP Jetdirect, four different administrative guidelines will be firmware upgraded to the latest firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1/v2c SET Community Name has been changed • All non-active protocols...
... come from the four main HP Jetdirect product lines, referred to as service types. • SET 4: The 635n model and the CM8000 Color MFP series (J7974E). In order to properly recommend configurations for HP Jetdirect, four different administrative guidelines will be firmware upgraded to the latest firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1/v2c SET Community Name has been changed • All non-active protocols...
HP Jetdirect Security Guidelines
Page 9
... software from passive sniffing, consider using SSL/TLS, be provided, in the form of an upgrade programming failure (due to a network outage, client lockup, printer powered down the download file. they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the HP Jetdirect device. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect password and SNMP...
... software from passive sniffing, consider using SSL/TLS, be provided, in the form of an upgrade programming failure (due to a network outage, client lockup, printer powered down the download file. they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the HP Jetdirect device. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect password and SNMP...
HP Jetdirect Administrator's Guide
Page 7
... running print server software. Note Unless otherwise specified, the term print server in HP printers that have a compatible enhanced input/output (EIO) slot. HP Jetdirect EIO internal print servers are installed in this manual refers to or from the device at network speeds. HP Jetdirect external print servers connect printers to the network by network cables. When connected through a wireless connection to your network, an HP Jetdirect wireless print server provides the same printing services as Jetdirect print servers connected by adapting the printer's USB port to a network...
... running print server software. Note Unless otherwise specified, the term print server in HP printers that have a compatible enhanced input/output (EIO) slot. HP Jetdirect EIO internal print servers are installed in this manual refers to or from the device at network speeds. HP Jetdirect external print servers connect printers to the network by network cables. When connected through a wireless connection to your network, an HP Jetdirect wireless print server provides the same printing services as Jetdirect print servers connected by adapting the printer's USB port to a network...
HP Jetdirect Administrator's Guide
Page 8
... en3700 J7942A USB 2.0 10/100TX Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades". The supported network...
... en3700 J7942A USB 2.0 10/100TX Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades". The supported network...
HP Jetdirect Administrator's Guide
Page 13
...: ● HP Jetdirect Download Manager (Windows). HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin may be used on supported systems. For more information see Chapter 4. ● FTP (File Transfer Protocol) may be used to transfer a firmware upgrade image file to the print server. After user login, typical FTP commands to log into the device. Firmware upgrades for supported HP Jetdirect print servers may be installed over a network using your Web browser. To start an FTP session, use the device IP address or...
...: ● HP Jetdirect Download Manager (Windows). HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin may be used on supported systems. For more information see Chapter 4. ● FTP (File Transfer Protocol) may be used to transfer a firmware upgrade image file to the print server. After user login, typical FTP commands to log into the device. Firmware upgrades for supported HP Jetdirect print servers may be installed over a network using your Web browser. To start an FTP session, use the device IP address or...
HP Jetdirect Administrator's Guide
Page 19
... Setup guide provided with your print server. ● The proper printer software (printer driver) to TCP/IP networks using full-featured HP Jetdirect print servers. To configure wireless settings without a cable, you will be used in an I/O slot. Value-based print servers, such as HP Jetdirect ew2400 print servers, are not supported. The software is recommended. Note For HP Jetdirect ew2400 external wired/wireless print servers that will need a computer that contains a wireless interface card, either built-in or installed in a wireless environment, a network cable connection...
... Setup guide provided with your print server. ● The proper printer software (printer driver) to TCP/IP networks using full-featured HP Jetdirect print servers. To configure wireless settings without a cable, you will be used in an I/O slot. Value-based print servers, such as HP Jetdirect ew2400 print servers, are not supported. The software is recommended. Note For HP Jetdirect ew2400 external wired/wireless print servers that will need a computer that contains a wireless interface card, either built-in or installed in a wireless environment, a network cable connection...
HP Jetdirect Administrator's Guide
Page 24
... Printers folder (click Start, select Settings, and select Printers). 2. Windows 2000/XP/Server 2003 Integrated Software On Windows 2000/XP/Server 2003 systems, an alternative to use the IPP-client software integrated with the software. To set up a print path to the printer, follow the instructions provided with the Windows system. ENWW HP Software Solutions Summary 24 2. To install the software and set up the print path to an HP Jetdirect-connected Internet printer using the HP supplied software is compatible with support for a network printer...
... Printers folder (click Start, select Settings, and select Printers). 2. Windows 2000/XP/Server 2003 Integrated Software On Windows 2000/XP/Server 2003 systems, an alternative to use the IPP-client software integrated with the software. To set up a print path to the printer, follow the instructions provided with the Windows system. ENWW HP Software Solutions Summary 24 2. To install the software and set up the print path to an HP Jetdirect-connected Internet printer using the HP supplied software is compatible with support for a network printer...
HP Jetdirect Administrator's Guide
Page 25
... is compatible with IPP running on the screen. Novell Supplied Software The HP Jetdirect print server is installed from the Add-Ons folder on the HP Jetdirect print server. [/ipp/port#] identifies the port number, which is port 1 for a printer driver (the HP Jetdirect print server does not contain printer drivers, so your NetWare technical documentation or contact Novell. For NetWare client support, refer to a printer on the Internet and enter the print server's URL: http://IP_address[/ipp/port#] where IP_address is the IP address configured...
... is compatible with IPP running on the screen. Novell Supplied Software The HP Jetdirect print server is installed from the Add-Ons folder on the HP Jetdirect print server. [/ipp/port#] identifies the port number, which is port 1 for a printer driver (the HP Jetdirect print server does not contain printer drivers, so your NetWare technical documentation or contact Novell. For NetWare client support, refer to a printer on the Internet and enter the print server's URL: http://IP_address[/ipp/port#] where IP_address is the IP address configured...
HP Jetdirect Administrator's Guide
Page 28
... file that use the Print Center to select IP Printing or Rendezvous to configure and manage your HP Jetdirect-connected printers on networks that accompanies the software for installation instructions. If you are installing the HP LaserJet Utility from the HP Jetdirect CD-ROM, use the following installation instructions. ENWW HP Software Solutions Summary 28 On TCP/IP networks, you can use Mac OS system utilities to discover and install your printer: ● On Mac OS 9.x systems, use the Apple Desktop Printer Utility to set up LPR/LPD printing. ● On Mac...
... file that use the Print Center to select IP Printing or Rendezvous to configure and manage your HP Jetdirect-connected printers on networks that accompanies the software for installation instructions. If you are installing the HP LaserJet Utility from the HP Jetdirect CD-ROM, use the following installation instructions. ENWW HP Software Solutions Summary 28 On TCP/IP networks, you can use Mac OS system utilities to discover and install your printer: ● On Mac OS 9.x systems, use the Apple Desktop Printer Utility to set up LPR/LPD printing. ● On Mac...
HP Jetdirect Administrator's Guide
Page 36
... DHCP), this address as Telnet, a Web browser, a printer control panel, and SNMP management applications. If the print server is undefined. Link-local addresses will not route off the local link, and access to obtain an IP address during a forced TCP/IP reconfiguration (for the print server. In this parameter is initially configured with a default IP address (either 169.254/16 or 192.0.0.192. Default IP Address Configuration Options Default IP Parameter A Default IP configuration parameter on the Jetdirect configuration...
... DHCP), this address as Telnet, a Web browser, a printer control panel, and SNMP management applications. If the print server is undefined. Link-local addresses will not route off the local link, and access to obtain an IP address during a forced TCP/IP reconfiguration (for the print server. In this parameter is initially configured with a default IP address (either 169.254/16 or 192.0.0.192. Default IP Address Configuration Options Default IP Parameter A Default IP configuration parameter on the Jetdirect configuration...
HP Jetdirect Administrator's Guide
Page 46
.../DHCP Boot file (4 of 4) RFC 2132 Option Description T149 -- Interlock Mode option. An HP-proprietary tag that the entry is not allowed. TFTP server's IP address option. ENWW TCP/IP Configuration 46 An HP-proprietary tag to your HP Jetdirect print server, such as host names, must begin with a letter and can be sent. This TFTP configuration file's relative path name is 1 (default). : Option value 0 (default) disables interlock, 1 enables. A Port Number...
.../DHCP Boot file (4 of 4) RFC 2132 Option Description T149 -- Interlock Mode option. An HP-proprietary tag that the entry is not allowed. TFTP server's IP address option. ENWW TCP/IP Configuration 46 An HP-proprietary tag to your HP Jetdirect print server, such as host names, must begin with a letter and can be sent. This TFTP configuration file's relative path name is 1 (default). : Option value 0 (default) disables interlock, 1 enables. A Port Number...
HP Jetdirect Administrator's Guide
Page 55
... to allow incoming Telnet connections. The default is 5 - 120 seconds. The range is 270 seconds. The default is allowed to factory default values. ews-config: (web:) Enables or disables the print server's embedded Web server to change the setting in seconds. If this parameter instructs the print server not to access the printer. Table 3.3 TFTP Configuration File Parameters (6 of 12) idle-timeout: The number of seconds that an idle print data connection is 900 seconds. 0 disables the timeout.
... to allow incoming Telnet connections. The default is 5 - 120 seconds. The range is 270 seconds. The default is allowed to factory default values. ews-config: (web:) Enables or disables the print server's embedded Web server to change the setting in seconds. If this parameter instructs the print server not to access the printer. Table 3.3 TFTP Configuration File Parameters (6 of 12) idle-timeout: The number of seconds that an idle print data connection is 900 seconds. 0 disables the timeout.
HP Jetdirect Administrator's Guide
Page 69
... DHCP and complete your configuration session (using the Jetdirect embedded Web server or HP Web Jetadmin. The print server then attempts to acquire new configuration information by sending DHCP requests on the network to "Using Telnet" in this chapter. Therefore, if you manually provide the IP address, you should also manually set all current configuration information is deleted. You can manually modify the TCP/IP parameters through Telnet, refer to a DHCP server. For DHCP configuration through a supported Web browser using Telnet, for example), the TCP...
... DHCP and complete your configuration session (using the Jetdirect embedded Web server or HP Web Jetadmin. The print server then attempts to acquire new configuration information by sending DHCP requests on the network to "Using Telnet" in this chapter. Therefore, if you manually provide the IP address, you should also manually set all current configuration information is deleted. You can manually modify the TCP/IP parameters through Telnet, refer to a DHCP server. For DHCP configuration through a supported Web browser using Telnet, for example), the TCP...
HP Jetdirect Administrator's Guide
Page 74
... a wireless connection to configure the print server using other tools (for example, TFTP, embedded Web server, or HP Web Jetadmin software). This section describes how to your computer must be protected by an administrator password, Telnet connections are not secure. If their IP addresses do not match, then you can either change your workstation's IP address to match, or you can be disabled on the print server using Telnet. On Windows NT systems, the command prompt utility...
... a wireless connection to configure the print server using other tools (for example, TFTP, embedded Web server, or HP Web Jetadmin software). This section describes how to your computer must be protected by an administrator password, Telnet connections are not secure. If their IP addresses do not match, then you can either change your workstation's IP address to match, or you can be disabled on the print server using Telnet. On Windows NT systems, the command prompt utility...
HP Jetdirect Administrator's Guide
Page 104
... to configure the HP Jetdirect wireless print server with internal print servers), Telnet, the "arp" and "ping" commands, HP Web Jetadmin or other management software. For example, you can automatically configure IP parameters over the network using the printer's control panel (for more information on the print server. Or, you can manually configure IP parameters using BOOTP (Bootstrap Protocol) or DHCP (Dynamic Host Configuration Protocol) each time the print server is unable to retrieve a valid IP address from the network will automatically assign...
... to configure the HP Jetdirect wireless print server with internal print servers), Telnet, the "arp" and "ping" commands, HP Web Jetadmin or other management software. For example, you can automatically configure IP parameters over the network using the printer's control panel (for more information on the print server. Or, you can manually configure IP parameters using BOOTP (Bootstrap Protocol) or DHCP (Dynamic Host Configuration Protocol) each time the print server is unable to retrieve a valid IP address from the network will automatically assign...
HP Jetdirect Administrator's Guide
Page 150
... reset the 802.1X authentication settings to factory-default values. Telnet and FTP are listed in Table 4.14. To configure initial 802.1X settings before connecting to connection. In addition, you may lose your 802.1X parameters prior to your network. Disabling Telnet, FTP firmware upgrades, and RCFG is lost, you can use 802.1X protocols to control a port's access to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use an isolated LAN, or a direct computer connection using...
... reset the 802.1X authentication settings to factory-default values. Telnet and FTP are listed in Table 4.14. To configure initial 802.1X settings before connecting to connection. In addition, you may lose your 802.1X parameters prior to your network. Disabling Telnet, FTP firmware upgrades, and RCFG is lost, you can use 802.1X protocols to control a port's access to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use an isolated LAN, or a direct computer connection using...
HP Jetdirect Administrator's Guide
Page 168
..., you will see "Print Services for Plug and Play printer installation. Configuring a Network LPD Printer Adding a New LPD Printer 1. In the Add LPR Compatible Printer window, do the following: a. Select whether to install the printer driver.) Click Next. 7. Click Next. 9. LPR port is a printer server). Select the manufacturer and printer model. (If necessary, click Have Disk and follow the instructions to share this printer as a component of the HP Jetdirect print server. 6. Select Create a new port, and select LPR Port from the desktop, click Start, Printers and Faxes). 2.
..., you will see "Print Services for Plug and Play printer installation. Configuring a Network LPD Printer Adding a New LPD Printer 1. In the Add LPR Compatible Printer window, do the following: a. Select whether to install the printer driver.) Click Next. 7. Click Next. 9. LPR port is a printer server). Select the manufacturer and printer model. (If necessary, click Have Disk and follow the instructions to share this printer as a component of the HP Jetdirect print server. 6. Select Create a new port, and select LPR Port from the desktop, click Start, Printers and Faxes). 2.
HP Jetdirect Administrator's Guide
Page 195
... HP Jetdirect settings on the same physical subnet and that the printer is 9100, the default printing port of the print server. See Chapter 9 for information on the configuration page. ■ Confirm the network settings for the printer using the printer control panel (for information on a TCP/IP network, can you use Telnet to print directly to the printer (a manual form feed may be required). 12. See Chapter 9 for printers with the HP Web Jetadmin software. In the Telnet session, type...
... HP Jetdirect settings on the same physical subnet and that the printer is 9100, the default printing port of the print server. See Chapter 9 for information on the configuration page. ■ Confirm the network settings for the printer using the printer control panel (for information on a TCP/IP network, can you use Telnet to print directly to the printer (a manual form feed may be required). 12. See Chapter 9 for printers with the HP Web Jetadmin software. In the Telnet session, type...
HP Jetdirect Administrator's Guide
Page 227
... Web server, or other tools to service queries for advertising print servers or file servers that matched the configured print server or file server name.) Make sure that the print server or file server is disconnected. Assign queues to the HP Jetdirect print server. ENWW HP Jetdirect Configuration Page 227 Use the installation software, embedded Web server, or other tools to configure the print server for NetWare networks. 17 UNABLE TO FIND SERVER (Ethernet) The HP Jetdirect print server was unable to find the NetWare print server (Remote Printer mode) or file server (Queue Server mode...
... Web server, or other tools to service queries for advertising print servers or file servers that matched the configured print server or file server name.) Make sure that the print server or file server is disconnected. Assign queues to the HP Jetdirect print server. ENWW HP Jetdirect Configuration Page 227 Use the installation software, embedded Web server, or other tools to configure the print server for NetWare networks. 17 UNABLE TO FIND SERVER (Ethernet) The HP Jetdirect print server was unable to find the NetWare print server (Remote Printer mode) or file server (Queue Server mode...
HP Jetdirect Administrator's Guide
Page 257
... embedded Web server HP Web Jetadmin 103 HTTPS security 146, 180 LPD setup 128 NetWare objects 106 TFTP configuration file 55 upgrading firmware 128 using 101 viewing 104 web browsers 103 Encryption embedded Web server 114 SNMP v3 147 supported ciphers 147 ERR NEGOTIATING BUFFER SIZE 228 error messages 225 802.11 wireless 208 HP Jetdirect configuration page 202 printer control panel 191 F factory defaults, resetting 186 cold-reset 186 security parameters 50, 80, 135, 248, 252 TCP/IP from Telnet 98 wireless...
... embedded Web server HP Web Jetadmin 103 HTTPS security 146, 180 LPD setup 128 NetWare objects 106 TFTP configuration file 55 upgrading firmware 128 using 101 viewing 104 web browsers 103 Encryption embedded Web server 114 SNMP v3 147 supported ciphers 147 ERR NEGOTIATING BUFFER SIZE 228 error messages 225 802.11 wireless 208 HP Jetdirect configuration page 202 printer control panel 191 F factory defaults, resetting 186 cold-reset 186 security parameters 50, 80, 135, 248, 252 TCP/IP from Telnet 98 wireless...