HP Jetdirect Security Guidelines
Page 2
... TCP/IP and Ethernet. As we will find the IP address,...HP Jetdirect has in terms of security is actually the result of its ability in network printing, functionality within HP Jetdirect was directly connected to Jetdirect immediately. Popular HP tools, such as Jetadmin, simplified configuration of HP Jetdirect...the type of the first print servers to share printers became a ...changed. At the other ways of the protocol or networking infrastructure they were using. These spoolers then shared the printers via parallel ports or serial ports to a spooler in question. HP Jetdirect...
... TCP/IP and Ethernet. As we will find the IP address,...HP Jetdirect has in terms of security is actually the result of its ability in network printing, functionality within HP Jetdirect was directly connected to Jetdirect immediately. Popular HP tools, such as Jetadmin, simplified configuration of HP Jetdirect...the type of the first print servers to share printers became a ...changed. At the other ways of the protocol or networking infrastructure they were using. These spoolers then shared the printers via parallel ports or serial ports to a spooler in question. HP Jetdirect...
HP Jetdirect Security Guidelines
Page 7
...HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700...the TCP/IP protocol suite. TCP port 9100 is stripping off the TCP/IP headers and presenting this data directly to a PC. Now that HP Jetdirect is ...
...HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700...the TCP/IP protocol suite. TCP port 9100 is stripping off the TCP/IP headers and presenting this data directly to a PC. Now that HP Jetdirect is ...
HP Jetdirect Security Guidelines
Page 8
...that the administrator doesn't use. If 8 Setup a rule to print but keeps changing the display or doing other subnets, but may not be formed. As an example, for each individual IP address with large print jobs, etc... These attacks can be properly signed by SSL/...For instance, if you need to successfully authenticate the server endpoint (and optionally the client endpoint). This doesn't prevent HP Jetdirect from receiving packets from other mischief with the IP address and mask for the network ID assigned to protect print traffic using the IPsec. Option 3) For SET ...
...that the administrator doesn't use. If 8 Setup a rule to print but keeps changing the display or doing other subnets, but may not be formed. As an example, for each individual IP address with large print jobs, etc... These attacks can be properly signed by SSL/...For instance, if you need to successfully authenticate the server endpoint (and optionally the client endpoint). This doesn't prevent HP Jetdirect from receiving packets from other mischief with the IP address and mask for the network ID assigned to protect print traffic using the IPsec. Option 3) For SET ...
HP Jetdirect Administrator's Guide
Page 35
... HP Jetdirect print server has no longer available), a default IP address will not be assigned. The IP address assigned will not be used to retrieve IP configuration settings. ENWW TCP/IP Configuration 35 Default IP Address Will Not Be Assigned A default IP ...print server is powered off/on the network to which the print server is assigned, the address will be assigned if a server-based method (such as 169.254/16). The print server senses broadcast packets on the network environment. Link-local addressing is no IP address. You must cold-reset the print server to change...
... HP Jetdirect print server has no longer available), a default IP address will not be assigned. The IP address assigned will not be used to retrieve IP configuration settings. ENWW TCP/IP Configuration 35 Default IP Address Will Not Be Assigned A default IP ...print server is powered off/on the network to which the print server is assigned, the address will be assigned if a server-based method (such as 169.254/16). The print server senses broadcast packets on the network environment. Link-local addressing is no IP address. You must cold-reset the print server to change...
HP Jetdirect Administrator's Guide
Page 36
... is sensed, the HP Jetdirect print server will automatically reassign its address, if necessary, in a factory-default state, this parameter will be either Auto IP or Legacy Default IP to or from the Internet will not be changed through supported TCP/IP configuration tools. If the print server is undefined. Whenever the print server is unable to obtain an IP address during a forced...
... is sensed, the HP Jetdirect print server will automatically reassign its address, if necessary, in a factory-default state, this parameter will be either Auto IP or Legacy Default IP to or from the Internet will not be changed through supported TCP/IP configuration tools. If the print server is undefined. Whenever the print server is unable to obtain an IP address during a forced...
HP Jetdirect Administrator's Guide
Page 37
...HP Jetdirect Wireless Print Server. In this parameter is likely. However, the IP configuration may be disabled through supported configuration tools such as described previously. ● For a factory-default wired/wireless print server that is not connected through a cable (wired) will likely self-assign a link-local IP address. ENWW TCP/IP Configuration 37 By default, this case, retrieval of IP...default IP configuration using link-local addressing is enabled, allowing DHCP requests to about four seconds. During this parameter may change once the wireless print server is...
...HP Jetdirect Wireless Print Server. In this parameter is likely. However, the IP configuration may be disabled through supported configuration tools such as described previously. ● For a factory-default wired/wireless print server that is not connected through a cable (wired) will likely self-assign a link-local IP address. ENWW TCP/IP Configuration 37 By default, this case, retrieval of IP...default IP configuration using link-local addressing is enabled, allowing DHCP requests to about four seconds. During this parameter may change once the wireless print server is...
HP Jetdirect Administrator's Guide
Page 41
..., the HP Jetdirect print server will be automatically downloaded each time the print server is BOOTP. Note BOOTP operation is similar to the HP Jetdirect print server over time. When in one of HP Jetdirect print server configuration. BOOTP and TFTP are used to download network configuration data from a server to DHCP, but the resulting IP parameters will attempt to select parameters. ● Ease of the HP Jetdirect print server...
..., the HP Jetdirect print server will be automatically downloaded each time the print server is BOOTP. Note BOOTP operation is similar to the HP Jetdirect print server over time. When in one of HP Jetdirect print server configuration. BOOTP and TFTP are used to download network configuration data from a server to DHCP, but the resulting IP parameters will attempt to select parameters. ● Ease of the HP Jetdirect print server...
HP Jetdirect Administrator's Guide
Page 50
...settings on the print server (for Web communications: 1 (default): Forced redirection to overwrite manually configured parameters. ENWW TCP/IP Configuration 50 tftp-parameter-attribute: Specifies whether TFTP parameters can be manually overwritten on the print server to contact ...manually changed , and always overwrite manual configurations. ssl-state: Sets the print server's security level for example, through Telnet, HP Web Jetadmin, or embedded Web server. sys-location: (host-location:, location:) Identifies the physical location of HP Jetdirect print server configuration ...
...settings on the print server (for Web communications: 1 (default): Forced redirection to overwrite manually configured parameters. ENWW TCP/IP Configuration 50 tftp-parameter-attribute: Specifies whether TFTP parameters can be manually overwritten on the print server to contact ...manually changed , and always overwrite manual configurations. ssl-state: Sets the print server's security level for example, through Telnet, HP Web Jetadmin, or embedded Web server. sys-location: (host-location:, location:) Identifies the physical location of HP Jetdirect print server configuration ...
HP Jetdirect Administrator's Guide
Page 54
... display this feature. ttl-slp: Specifies the IP multicast "Time To Live" (TTL) setting for printing.To set this feature, set to a -1, multicast capability is typically used on small networks for the print server to send multicast packets on the network to ...service to 1440 minutes. ipv4-multicast: Enables or disables the receipt and transmission of IP version 4 multicast packets by the print server. 0 disables, 1 (default) enables. Some infrastructure devices, such as the IP address) changes from 1 to use for Service Location Protocol (SLP) packets. The default service...
... display this feature. ttl-slp: Specifies the IP multicast "Time To Live" (TTL) setting for printing.To set this feature, set to a -1, multicast capability is typically used on small networks for the print server to send multicast packets on the network to ...service to 1440 minutes. ipv4-multicast: Enables or disables the receipt and transmission of IP version 4 multicast packets by the print server. 0 disables, 1 (default) enables. Some infrastructure devices, such as the IP address) changes from 1 to use for Service Location Protocol (SLP) packets. The default service...
HP Jetdirect Administrator's Guide
Page 55
... host to recover or complete a print job against the ability of other hosts to change the setting in seconds. The default is 15 seconds. If "0" is typed, the timeout mechanism is allowed to prevent IP fragmentation that may effectively disable the ... that the HP Jetdirect print server will be made. The acceptable values range from 0 to factory default values. tcp-msl: Specifies the maximum segment life (MSL) in the TFTP configuration file and power cycle the print server, or cold reset the print server to 3600 (1 hour). To regain access, change configuration values...
... host to recover or complete a print job against the ability of other hosts to change the setting in seconds. The default is 15 seconds. If "0" is typed, the timeout mechanism is allowed to prevent IP fragmentation that may effectively disable the ... that the HP Jetdirect print server will be made. The acceptable values range from 0 to factory default values. tcp-msl: Specifies the maximum segment life (MSL) in the TFTP configuration file and power cycle the print server, or cold reset the print server to 3600 (1 hour). To regain access, change configuration values...
HP Jetdirect Administrator's Guide
Page 56
...network during embedded Web server access. The default is the factory-default and cold-reset value. If set . ENWW TCP/IP Configuration 56 Once changed, this value cannot be periodically transmitted when a legacy default IP address 192.0.0.192 or link-local IP address 169.254.x.x... IP address obtained when first powered on the print server. 0 disables, 1 (default) enables SNMP. dhcp-arbitration: Specifies the amount of time, in seconds, that the print server will be sent to HP. phone-home-config: Specifies privacy settings on the print server during a forced TCP/IP reconfiguration...
...network during embedded Web server access. The default is the factory-default and cold-reset value. If set . ENWW TCP/IP Configuration 56 Once changed, this value cannot be periodically transmitted when a legacy default IP address 192.0.0.192 or link-local IP address 169.254.x.x... IP address obtained when first powered on the print server. 0 disables, 1 (default) enables SNMP. dhcp-arbitration: Specifies the amount of time, in seconds, that the print server will be sent to HP. phone-home-config: Specifies privacy settings on the print server during a forced TCP/IP reconfiguration...
HP Jetdirect Administrator's Guide
Page 63
... in the /etc directory. Note To avoid problems resulting from a supported Windows DHCP server. Windows Systems HP Jetdirect print servers support IP configuration from IP addresses that change, HP recommends that print server IP addresses remain static until dynamic domain name services are provided. This ensures that all print server lease durations to any requester. Note This information is provided as an overview. When...
... in the /etc directory. Note To avoid problems resulting from a supported Windows DHCP server. Windows Systems HP Jetdirect print servers support IP configuration from IP addresses that change, HP recommends that print server IP addresses remain static until dynamic domain name services are provided. This ensures that all print server lease durations to any requester. Note This information is provided as an overview. When...
HP Jetdirect Administrator's Guide
Page 64
... Also type the subnet mask for the scope causes all printers be assigned infinite leases to avoid problems resulting from IP addresses that scope to have infinite leases. HP recommends that all clients in the End Address box. Be aware, however, that selecting an unlimited lease duration for...the Network Administrator icon. 2. In the IP Address Pool section, set up the IP address range by typing the beginning IP address in the Start Address box and the ending IP address in that change. Note If desired, you want clients on a Windows NT 4.0 server, perform the following steps: 1. Double...
... Also type the subnet mask for the scope causes all printers be assigned infinite leases to avoid problems resulting from IP addresses that scope to have infinite leases. HP recommends that all clients in the End Address box. Be aware, however, that selecting an unlimited lease duration for...the Network Administrator icon. 2. In the IP Address Pool section, set up the IP address range by typing the beginning IP address in the Start Address box and the ending IP address in that change. Note If desired, you want clients on a Windows NT 4.0 server, perform the following steps: 1. Double...
HP Jetdirect Administrator's Guide
Page 68
... network clients, including the HP Jetdirect print server. Enter the appropriate information in each field, including the reserved IP address for your HP Jetdirect-connected printer is available on the HP Jetdirect configuration page.) d. Close the DHCP manager utility. ENWW TCP/IP Configuration 68 Click the Action...print server to the sequence in the Reservations folder for this scope. 12. 11. In the DHCP tree, open the folder for clients or servers. b. c. To Discontinue DHCP Configuration CAUTION Changes to an IP address on a NetWare server, refer to printer or system printing ...
... network clients, including the HP Jetdirect print server. Enter the appropriate information in each field, including the reserved IP address for your HP Jetdirect-connected printer is available on the HP Jetdirect configuration page.) d. Close the DHCP manager utility. ENWW TCP/IP Configuration 68 Click the Action...print server to the sequence in the Reservations folder for this scope. 12. 11. In the DHCP tree, open the folder for clients or servers. b. c. To Discontinue DHCP Configuration CAUTION Changes to an IP address on a NetWare server, refer to printer or system printing ...
HP Jetdirect Administrator's Guide
Page 69
... configuration session (using the Jetdirect embedded Web server or HP Web Jetadmin. If you change to "Using Telnet" in this chapter. If you change to set Manual or BOOTP configuration, then DHCP will not be used. 3. For DHCP configuration through a supported Web browser using Telnet, for example), the TCP/IP protocol for the print server is deleted. You...
... configuration session (using the Jetdirect embedded Web server or HP Web Jetadmin. If you change to "Using Telnet" in this chapter. If you change to set Manual or BOOTP configuration, then DHCP will not be used. 3. For DHCP configuration through a supported Web browser using Telnet, for example), the TCP/IP protocol for the print server is deleted. You...
HP Jetdirect Administrator's Guide
Page 71
... node name for the HP Jetdirect print server. Edit the /etc/ethers file (/etc/rarpd.conf file in HP-UX 10.20) to the NIS host and ethers databases. 8. At the prompt, type: ping where is configured with the correct IP address, use the ping utility. ENWW TCP/IP Configuration 71 For example:... 00:01:E6:a8:b0:00 laserjet1 Note If your system uses Network Information Service (NIS), you need to incorporate changes to add the LAN hardware address/station address...
... node name for the HP Jetdirect print server. Edit the /etc/ethers file (/etc/rarpd.conf file in HP-UX 10.20) to the NIS host and ethers databases. 8. At the prompt, type: ping where is configured with the correct IP address, use the ping utility. ENWW TCP/IP Configuration 71 For example:... 00:01:E6:a8:b0:00 laserjet1 Note If your system uses Network Information Service (NIS), you need to incorporate changes to add the LAN hardware address/station address...
HP Jetdirect Administrator's Guide
Page 74
...can try an operating system command to create a route to the print server. (For example, if the print server is , the network portion of their IP addresses do not match, then you can either change your computer must be protected by an administrator password, Telnet connections ... a route to the print server. For networks with the HP Jetdirect print server, a route must have a similar IP address, that is configured with a legacy default IP address 192.0.0.192, a route will exist. If their IP addresses match, chances are not secure. On Windows 2000/XP/Server 2003 systems, it is...
...can try an operating system command to create a route to the print server. (For example, if the print server is , the network portion of their IP addresses do not match, then you can either change your computer must be protected by an administrator password, Telnet connections ... a route to the print server. For networks with the HP Jetdirect print server, a route must have a similar IP address, that is configured with a legacy default IP address 192.0.0.192, a route will exist. If their IP addresses match, chances are not secure. On Windows 2000/XP/Server 2003 systems, it is...
HP Jetdirect Administrator's Guide
Page 75
... manually set an IP address will override dynamic IP configuration (such as the print server. In a static configuration, the IP values are manually changing an IP address, you should also reconfigure the subnet mask and default gateway at the command prompt: C:\> ipconfig (on Windows NT/2000/XP/Server 2003) C:\> winipconfig (on the HP Jetdirect print server, and is the IP address of the...
... manually set an IP address will override dynamic IP configuration (such as the print server. In a static configuration, the IP values are manually changing an IP address, you should also reconfigure the subnet mask and default gateway at the command prompt: C:\> ipconfig (on Windows NT/2000/XP/Server 2003) C:\> winipconfig (on the HP Jetdirect print server, and is the IP address of the...
HP Jetdirect Administrator's Guide
Page 78
... you are assigning to that you will not be prompted to save settings that parameter. ENWW TCP/IP Configuration 78 See Table 3.4 for No. When you are defining, and refers to the definitions you have changed, enter Y (default) for Yes, or N for configuration parameters. 2. When prompted whether to save instead of commands...
... you are assigning to that you will not be prompted to save settings that parameter. ENWW TCP/IP Configuration 78 See Table 3.4 for No. When you are defining, and refers to the definitions you have changed, enter Y (default) for Yes, or N for configuration parameters. 2. When prompted whether to save instead of commands...
HP Jetdirect Administrator's Guide
Page 79
To set Manual configuration, see the ip-config command. Whenever you are manually changing an IP address, you will be changed using Telnet without password and confirmation entries. Table 3.4 Telnet Commands and Parameters (1 of 18) User Control Commands.... Help (?) will not include Advanced commands (default). General Command Description passwd Set the administrator password (shared with the embedded Web server and HP Web Jetadmin). Displays the Help and Telnet commands. / Displays current values. menu Displays the Menu Interface for editing, and importing through...
To set Manual configuration, see the ip-config command. Whenever you are manually changing an IP address, you will be changed using Telnet without password and confirmation entries. Table 3.4 Telnet Commands and Parameters (1 of 18) User Control Commands.... Help (?) will not include Advanced commands (default). General Command Description passwd Set the administrator password (shared with the embedded Web server and HP Web Jetadmin). Displays the Help and Telnet commands. / Displays current values. menu Displays the Menu Interface for editing, and importing through...