HP Jetdirect Security Guidelines
Page 2
... know that 'security' is important to Jetdirect immediately. During this is actually the result of the first print servers to deploy them as fast and painlessly as possible. 2 In short, HP Jetdirect was designed to allow users to print to remember that this growth period in ...HP Jetdirect devices by connecting them via networking protocols such as LPD to a spooler. Popular HP tools, such as Jetadmin, simplified configuration of direct attachment to clients on the network without the need to connect to a spooler in order to the present, we will find the IP address...
... know that 'security' is important to Jetdirect immediately. During this is actually the result of the first print servers to deploy them as fast and painlessly as possible. 2 In short, HP Jetdirect was designed to allow users to print to remember that this growth period in ...HP Jetdirect devices by connecting them via networking protocols such as LPD to a spooler. Popular HP tools, such as Jetadmin, simplified configuration of direct attachment to clients on the network without the need to connect to a spooler in order to the present, we will find the IP address...
HP Jetdirect Security Guidelines
Page 8
...used but may not be properly signed by SSL/TLS to protect print traffic using IPsec Table 5 - These attacks can be found in the company. Which hosts need to successfully authenticate the server endpoint (and optionally the client endpoint). Only computers on the ...IP address and mask for the network ID assigned to your data, you are many print protocols supported over TCP, the next logical step is subject to disable all TCP/IP traffic to any TCP/IP traffic. Setup a rule to 0.0.0.0). What about the user at work that really is subject to MITM attacks as HP Jetdirect...
...used but may not be properly signed by SSL/TLS to protect print traffic using IPsec Table 5 - These attacks can be found in the company. Which hosts need to successfully authenticate the server endpoint (and optionally the client endpoint). Only computers on the ...IP address and mask for the network ID assigned to your data, you are many print protocols supported over TCP, the next logical step is subject to disable all TCP/IP traffic to any TCP/IP traffic. Setup a rule to 0.0.0.0). What about the user at work that really is subject to MITM attacks as HP Jetdirect...
HP Jetdirect Security Guidelines
Page 28
... this page. Select "Allow" for SET 2 executed. Be sure that all IP addresses must use IPsec to utilize a management protocol. Select "All IP Addresses" and click "Next". 28 Once the Security Wizard configuration has been completed, then we did with a management protocol to Jetdirect without using IPsec, the packets are using HTTPS before navigating to...
... this page. Select "Allow" for SET 2 executed. Be sure that all IP addresses must use IPsec to utilize a management protocol. Select "All IP Addresses" and click "Next". 28 Once the Security Wizard configuration has been completed, then we did with a management protocol to Jetdirect without using IPsec, the packets are using HTTPS before navigating to...
HP Jetdirect Administrator's Guide
Page 4
... Introduction 34 Default IP Address 35 Using BOOTP/TFTP 40 Using DHCP 62 Using RARP 70 Using the arp and ping Commands 72 Using Telnet 74 Using the Embedded Web Server 98 Using the Printer Control Panel 99 Moving to Another Network 100 4. Introducing the HP Jetdirect Print Server Introduction 7 Supported Print Servers 8 Supported Network Protocols 8 Security Protocols 10...
... Introduction 34 Default IP Address 35 Using BOOTP/TFTP 40 Using DHCP 62 Using RARP 70 Using the arp and ping Commands 72 Using Telnet 74 Using the Embedded Web Server 98 Using the Printer Control Panel 99 Moving to Another Network 100 4. Introducing the HP Jetdirect Print Server Introduction 7 Supported Print Servers 8 Supported Network Protocols 8 Security Protocols 10...
HP Jetdirect Administrator's Guide
Page 5
... 172 Requirements 172 Print Files 173 Using FTP Printing 173 Example of an FTP Session 178 7. TCP/IP Overview Introduction 236 IP Address 237 Configuring IP Parameters 240 Subnets 241 Gateways 242 Syslog Server 242 ENWW 5 HP Jetdirect Configuration Page Introduction 202 Configuration Page Format 203 Configuration Page Messages 205 Error Messages 225 A. 5. Configuring for LPD Printing Introduction 154 LPD...
... 172 Requirements 172 Print Files 173 Using FTP Printing 173 Example of an FTP Session 178 7. TCP/IP Overview Introduction 236 IP Address 237 Configuring IP Parameters 240 Subnets 241 Gateways 242 Syslog Server 242 ENWW 5 HP Jetdirect Configuration Page Introduction 202 Configuration Page Format 203 Configuration Page Messages 205 Error Messages 225 A. 5. Configuring for LPD Printing Introduction 154 LPD...
HP Jetdirect Administrator's Guide
Page 13
... ENWW Introducing the HP Jetdirect Print Server 13 HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin may be used to transfer a firmware upgrade image file to the print server. To start an FTP session, use the device IP address or host name. Firmware upgrades for supported HP Jetdirect print servers may be installed...
... ENWW Introducing the HP Jetdirect Print Server 13 HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin may be used to transfer a firmware upgrade image file to the print server. To start an FTP session, use the device IP address or host name. Firmware upgrades for supported HP Jetdirect print servers may be installed...
HP Jetdirect Administrator's Guide
Page 24
...HP Jetdirect 620n or en3700) HP Software Supported Proxies Web proxy with the software. The IPP implementation on the HP Jetdirect print server is to the printer, follow the instructions provided with support for HTTP v1.1 or greater (may not be needed if printing over an intranet). Select the option for support of the printer to get the IP address... or URL of Windows IPP software. HP Software System Requirements ● Computer running Microsoft Windows NT 4.0 (Intel-based) or Windows 2000 ● IPP-enabled HP Jetdirect print server (such as follows: ...
...HP Jetdirect 620n or en3700) HP Software Supported Proxies Web proxy with the software. The IPP implementation on the HP Jetdirect print server is to the printer, follow the instructions provided with support for HTTP v1.1 or greater (may not be needed if printing over an intranet). Select the option for support of the printer to get the IP address... or URL of Windows IPP software. HP Software System Requirements ● Computer running Microsoft Windows NT 4.0 (Intel-based) or Windows 2000 ● IPP-enabled HP Jetdirect print server (such as follows: ...
HP Jetdirect Administrator's Guide
Page 25
... HP Jetdirect print server is port 1 for a printer driver (the HP Jetdirect print server does not contain printer drivers, so your printer CD-ROM to install the driver.) 6. Example: http://192.160.45.40 An IPP connection to a printer on the Internet and enter the print server's URL: http://IP_address[/ipp/port#] where IP_address is the IP address configured on NetWare 5.1 with IP address...
... HP Jetdirect print server is port 1 for a printer driver (the HP Jetdirect print server does not contain printer drivers, so your printer CD-ROM to install the driver.) 6. Example: http://192.160.45.40 An IPP connection to a printer on the Internet and enter the print server's URL: http://IP_address[/ipp/port#] where IP_address is the IP address configured on NetWare 5.1 with IP address...
HP Jetdirect Administrator's Guide
Page 34
..., arp and ping commands (when the default IP address is not successful, a default IP address will be configured manually. Server-Based and Manual TCP/IP Configuration When in this chapter. ENWW 34 3 TCP/IP Configuration Introduction To operate properly on a TCP/IP network, the HP Jetdirect print server must be configured with valid TCP/IP network configuration parameters, such as BOOTP/TFTP, DHCP...
..., arp and ping commands (when the default IP address is not successful, a default IP address will be configured manually. Server-Based and Manual TCP/IP Configuration When in this chapter. ENWW 34 3 TCP/IP Configuration Introduction To operate properly on a TCP/IP network, the HP Jetdirect print server must be configured with valid TCP/IP network configuration parameters, such as BOOTP/TFTP, DHCP...
HP Jetdirect Administrator's Guide
Page 35
... DHCP server is no IP address. The print server senses broadcast packets on the network to send IP configuration requests indefinitely. The IP address assigned will continue to which the print server is successful. Instead, the print server will be in a factory-default state (for example, when shipped from the factory or after a cold-reset), the HP Jetdirect print server has no longer available), a default IP address will...
... DHCP server is no IP address. The print server senses broadcast packets on the network to send IP configuration requests indefinitely. The IP address assigned will continue to which the print server is successful. Instead, the print server will be in a factory-default state (for example, when shipped from the factory or after a cold-reset), the HP Jetdirect print server has no longer available), a default IP address will...
HP Jetdirect Administrator's Guide
Page 36
... determine the default IP address to match. See Chapter 9. When the print server is in accordance with standard link-local addressing methods. ● On large or enterprise IP networks, a temporary address of 192.0.0.192 will not be assigned until it is assigned. ENWW TCP/IP Configuration 36 If a duplicate address is sensed, the HP Jetdirect print server will automatically reassign its address, if necessary...
... determine the default IP address to match. See Chapter 9. When the print server is in accordance with standard link-local addressing methods. ● On large or enterprise IP networks, a temporary address of 192.0.0.192 will not be assigned until it is assigned. ENWW TCP/IP Configuration 36 If a duplicate address is sensed, the HP Jetdirect print server will automatically reassign its address, if necessary...
HP Jetdirect Administrator's Guide
Page 37
... Ad Hoc connection is limited to about four seconds. When initially powered on the print server, see the Jetdirect configuration page. ENWW TCP/IP Configuration 37 DHCP Requests Enable/Disable When a default IP address is enabled, allowing DHCP requests to be transmitted. HP Jetdirect Wireless Print Server. By default, this time, a single BOOTP request is connected a DHCP network because the...
... Ad Hoc connection is limited to about four seconds. When initially powered on the print server, see the Jetdirect configuration page. ENWW TCP/IP Configuration 37 DHCP Requests Enable/Disable When a default IP address is enabled, allowing DHCP requests to be transmitted. HP Jetdirect Wireless Print Server. By default, this time, a single BOOTP request is connected a DHCP network because the...
HP Jetdirect Administrator's Guide
Page 38
... method only allows you set all print server lease durations to answer the print server's RARP request and supplying the print server with valid TCP/IP parameters for its DHCP implementations, HP recommends that is accessible by the printer. ● DHCP/TFTP. TCP/IP Configuration Tools When a network connection has been established, an HP Jetdirect print server can use Dynamic Host Configuration Protocol...
... method only allows you set all print server lease durations to answer the print server's RARP request and supplying the print server with valid TCP/IP parameters for its DHCP implementations, HP recommends that is accessible by the printer. ● DHCP/TFTP. TCP/IP Configuration Tools When a network connection has been established, an HP Jetdirect print server can use Dynamic Host Configuration Protocol...
HP Jetdirect Administrator's Guide
Page 39
... the arp and ping Commands". ● Telnet. The control panel method allows you to the HP Jetdirect print server using the default IP address. In order to the embedded Web server on . Once configured, the print server saves the configuration when powered off /on the HP Jetdirect print server to set up a Telnet connection from your system to configure only a limited subset of...
... the arp and ping Commands". ● Telnet. The control panel method allows you to the HP Jetdirect print server using the default IP address. In order to the embedded Web server on . Once configured, the print server saves the configuration when powered off /on the HP Jetdirect print server to set up a Telnet connection from your system to configure only a limited subset of...
HP Jetdirect Administrator's Guide
Page 43
.... Bootptab File Entries An example of a /etc/bootptab file entry for an HP Jetdirect print server is printed on the HP Jetdirect configuration page as the HARDWARE ADDRESS. It can be the HP Jetdirect print server's IP address. On HP Jetdirect external print servers, it is provided below: picasso:\ :hn:\ :ht=ether:\ :vm=rfc1048:\ :ha=0001E6123456:\ :ip=192.168.40.39:\ :sm=255.255.255.0:\ :gw=192.168.40...
.... Bootptab File Entries An example of a /etc/bootptab file entry for an HP Jetdirect print server is printed on the HP Jetdirect configuration page as the HARDWARE ADDRESS. It can be the HP Jetdirect print server's IP address. On HP Jetdirect external print servers, it is provided below: picasso:\ :hn:\ :ht=ether:\ :vm=rfc1048:\ :ha=0001E6123456:\ :ip=192.168.40.39:\ :sm=255.255.255.0:\ :gw=192.168.40...
HP Jetdirect Administrator's Guide
Page 44
... (Domain Name System) server's IP address tag. ef 18 Extensions file tag that the HP Jetdirect print server sends syslog messages to identify the portions of 4) RFC 2132 Option Description sm 1 The subnet mask tag. lg 7 The syslog server's IP address tag. Specifies the domain name for the HP Jetdirect print server (for example, support.hp.com). it is similar to the HP Jetdirect print server. Only a single name...
... (Domain Name System) server's IP address tag. ef 18 Extensions file tag that the HP Jetdirect print server sends syslog messages to identify the portions of 4) RFC 2132 Option Description sm 1 The subnet mask tag. lg 7 The syslog server's IP address tag. Specifies the domain name for the HP Jetdirect print server (for example, support.hp.com). it is similar to the HP Jetdirect print server. Only a single name...
HP Jetdirect Administrator's Guide
Page 46
... help for more information. An HP-proprietary tag that the entry is continued on a line. Table 3.1 Item Tags Supported in the form: : For supported HP Jetdirect print servers, the Port Number is 1 (default). : Option value 0 (default) disables interlock, 1 enables. The underline character (_) is located. Refer to specify the TFTP server's IP address where the TFTP configuration file is...
... help for more information. An HP-proprietary tag that the entry is continued on a line. Table 3.1 Item Tags Supported in the form: : For supported HP Jetdirect print servers, the Port Number is 1 (default). : Option value 0 (default) disables interlock, 1 enables. The underline character (_) is located. Refer to specify the TFTP server's IP address where the TFTP configuration file is...
HP Jetdirect Administrator's Guide
Page 47
... Example of an HP Jetdirect TFTP Configuration File # # Allow only Subnet 192.168.10 access to peripheral. # Up to 10 'allow' entries can be written through TFTP. # Up to 10 'allow' entries can be written through Telnet # or embedded Web server. # 'allow' may include single IP addresses. # allow: ...192.168.10.0 255.255.255.0 # # # Disable Telnet # telnet-config: 0 # # Enable the embedded Web server # ews-config: 1 # # Detect SNMP unauthorized usage # auth-trap: on...
... Example of an HP Jetdirect TFTP Configuration File # # Allow only Subnet 192.168.10 access to peripheral. # Up to 10 'allow' entries can be written through TFTP. # Up to 10 'allow' entries can be written through Telnet # or embedded Web server. # 'allow' may include single IP addresses. # allow: ...192.168.10.0 255.255.255.0 # # # Disable Telnet # telnet-config: 0 # # Enable the embedded Web server # ews-config: 1 # # Detect SNMP unauthorized usage # auth-trap: on...
HP Jetdirect Administrator's Guide
Page 51
... the device (for use if the primary DNS server is powered on the Jetdirect configuration page. pri-wins-svr: (pri-wins-srv:) The IP address of the outgoing e-mail Simple Mail Transport Protocol (SMTP) server, for example, support.hp.com). TCP/IP Print Options 9100-printing: (9100-config:) Enables or disables printing to print through FTP: 0 disables, 1 (default) enables. it is...
... the device (for use if the primary DNS server is powered on the Jetdirect configuration page. pri-wins-svr: (pri-wins-srv:) The IP address of the outgoing e-mail Simple Mail Transport Protocol (SMTP) server, for example, support.hp.com). TCP/IP Print Options 9100-printing: (9100-config:) Enables or disables printing to print through FTP: 0 disables, 1 (default) enables. it is...
HP Jetdirect Administrator's Guide
Page 75
... where is the IP address configured on the HP Jetdirect print server, and is the IP address of the workstation's network card that is attached to manually set an IP address will override dynamic IP configuration (such as the print server. To use the route command, you will also need the IP address of your workstation with IP address 169.254.2.1 to a print server with a default IP address of 192.0.0.192...
... where is the IP address configured on the HP Jetdirect print server, and is the IP address of the workstation's network card that is attached to manually set an IP address will override dynamic IP configuration (such as the print server. To use the route command, you will also need the IP address of your workstation with IP address 169.254.2.1 to a print server with a default IP address of 192.0.0.192...