Practical considerations for imaging and printing security
Page 1
... Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for...
... Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for...
HP Jetdirect Print Server 170X Installation and Configuration
Page 9
... many users. For available full-featured print server products, browse for external print servers at network speeds. The HP Jetdirect 170X is an external print server that allows you to connect supported devices directly to be conveniently located for LAN status and activity) O Test button (sends 170X configuration page to printer) ENWW Introduction 1-9 The HP Jetdirect 170X has an RJ-45 network port (10Base...
... many users. For available full-featured print server products, browse for external print servers at network speeds. The HP Jetdirect 170X is an external print server that allows you to connect supported devices directly to be conveniently located for LAN status and activity) O Test button (sends 170X configuration page to printer) ENWW Introduction 1-9 The HP Jetdirect 170X has an RJ-45 network port (10Base...
HP Jetdirect Print Server 170X Installation and Configuration
Page 31
... as the LAN HW ADDRESS. On HP Jetdirect external print servers, it is 33 characters. It specifies the server that specify the network/subnetwork number and the host address. For file format information, refer to the print server. nodename must be printed on the Jetdirect configuration page, or returned on an SNMP sysName request by the HP Jetdirect print server to . For the HP Jetdirect print server, set...
... as the LAN HW ADDRESS. On HP Jetdirect external print servers, it is 33 characters. It specifies the server that specify the network/subnetwork number and the host address. For file format information, refer to the print server. nodename must be printed on the Jetdirect configuration page, or returned on an SNMP sysName request by the HP Jetdirect print server to . For the HP Jetdirect print server, set...
HP Jetdirect Print Server 170X Installation and Configuration
Page 45
... uses Network Information Service (NIS), you need to incorporate changes to add the LAN hardware address/station address (from RARP. The default IP address is the assigned address from the configuration page) and the node name for the HP Jetdirect print server. Edit the /etc/ethers file (/etc/rarpd.conf file in HPUX 10.20... address, use the ping utility. For example: 00:60:b0:a8:b0:00 laserjet1 Note If your designated IP address and node name for the HP Jetdirect print server.
... uses Network Information Service (NIS), you need to incorporate changes to add the LAN hardware address/station address (from RARP. The default IP address is the assigned address from the configuration page) and the node name for the HP Jetdirect print server. Edit the /etc/ethers file (/etc/rarpd.conf file in HPUX 10.20... address, use the ping utility. For example: 00:60:b0:a8:b0:00 laserjet1 Note If your designated IP address and node name for the HP Jetdirect print server.
HP Jetdirect Print Server 170X Installation and Configuration
Page 46
... is made must be required for TCP/IP operation O HP Jetdirect firmware version F.08.56 or later O The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on the same network segment as Telnet, embedded web server, or HP Web Jetadmin software) to HP Jetdirect external print servers) Note On some systems, superuser rights may be...
... is made must be required for TCP/IP operation O HP Jetdirect firmware version F.08.56 or later O The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on the same network segment as Telnet, embedded web server, or HP Web Jetadmin software) to HP Jetdirect external print servers) Note On some systems, superuser rights may be...
HP Jetdirect Print Server 170X Installation and Configuration
Page 47
... the print server. O From a system command prompt (Windows): arp -s ping O From a UNIX command prompt: arp -s ping where is the desired IP address to be assigned to the arp cache on the workstation, and the ping command configures the IP address on the system, the LAN hardware address requires a specific format. To configure a Jetdirect print server, use...
... the print server. O From a system command prompt (Windows): arp -s ping O From a UNIX command prompt: arp -s ping where is the desired IP address to be assigned to the arp cache on the workstation, and the ping command configures the IP address on the system, the LAN hardware address requires a specific format. To configure a Jetdirect print server, use...
HP Jetdirect Print Server 170X Installation and Configuration
Page 49
On Windows systems, you can use Telnet commands with the HP Jetdirect print server, a route must be available from your system to that is attached to the same physical LAN as the print server. Simplistically, this means that there must be a match between the network identification of the HP Jetdirect print server. ENWW TCP/IP Configuration 3-49 Using Telnet This subsection describes...
On Windows systems, you can use Telnet commands with the HP Jetdirect print server, a route must be available from your system to that is attached to the same physical LAN as the print server. Simplistically, this means that there must be a match between the network identification of the HP Jetdirect print server. ENWW TCP/IP Configuration 3-49 Using Telnet This subsection describes...
HP Jetdirect Print Server 170X Installation and Configuration
Page 63
...configuration page: 1. Press and hold down the Test button. The PDL is auto-detected the first time the print server is sent to the printer using a page description language (PDL). Selecting a Configuration Page PDL The configuration page...63 The HP 170X configuration page is divided into the following sections: Section Description Troubleshooting Information 1 HP Jetdirect product information Firmware revision number, type of network (Ethernet), LAN hardware address, port selection type, and manufacturing identification number. 2 Print server status Overall print server status, ...
...configuration page: 1. Press and hold down the Test button. The PDL is auto-detected the first time the print server is sent to the printer using a page description language (PDL). Selecting a Configuration Page PDL The configuration page...63 The HP 170X configuration page is divided into the following sections: Section Description Troubleshooting Information 1 HP Jetdirect product information Firmware revision number, type of network (Ethernet), LAN hardware address, port selection type, and manufacturing identification number. 2 Print server status Overall print server status, ...
HP Jetdirect Print Server 170X Installation and Configuration
Page 68
... domain name of the HP Jetdirect print server currently installed in one direction only (to the desired port. PARALLEL PORT: (HP 170X print servers have a single parallel port, port 1) CENTRONICS indicates a standard parallel connection that the HP Jetdirect print server uses for Web Jetadmin services. 6-68 HP Jetdirect Configuration Page Messages ENWW Table 6.1 HP Jetdirect Product Information Message Description HP JETDIRECT JXXXXX Identifies the HP Jetdirect print server model number. MLC, ECP2...
... domain name of the HP Jetdirect print server currently installed in one direction only (to the desired port. PARALLEL PORT: (HP 170X print servers have a single parallel port, port 1) CENTRONICS indicates a standard parallel connection that the HP Jetdirect print server uses for Web Jetadmin services. 6-68 HP Jetdirect Configuration Page Messages ENWW Table 6.1 HP Jetdirect Product Information Message Description HP JETDIRECT JXXXXX Identifies the HP Jetdirect print server model number. MLC, ECP2...
HP Jetdirect Print Server 170X Installation and Configuration
Page 72
... status lines on again. Check all status messages. If the error persists, replace the HP Jetdirect print server. LAN ERRORCONTROLLER CHIP Check the network connections. Following the I /O CARD READY The HP Jetdirect print server is a status message. If the error persists, replace the HP Jetdirect print server. 6-72 HP Jetdirect Configuration Page Messages ENWW INVALID TRAP DEST ADDRESS One of the SNMP trap (Trap PDU...
... status lines on again. Check all status messages. If the error persists, replace the HP Jetdirect print server. LAN ERRORCONTROLLER CHIP Check the network connections. Following the I /O CARD READY The HP Jetdirect print server is a status message. If the error persists, replace the HP Jetdirect print server. 6-72 HP Jetdirect Configuration Page Messages ENWW INVALID TRAP DEST ADDRESS One of the SNMP trap (Trap PDU...
HP Jetdirect Print Server 170X Installation and Configuration
Page 73
... HP Jetdirect print server. If the connections are intact, run the power-on self-test: turn the print server off , then on your network cabling or the HP Jetdirect print server. If the error persists, replace the HP Jetdirect print server. Check the cabling and connectors on again. If you may be a problem with the HP Jetdirect print server. If this error cannot occur. Check network cables. LAN ERROR- LAN...
... HP Jetdirect print server. If the connections are intact, run the power-on self-test: turn the print server off , then on your network cabling or the HP Jetdirect print server. If the error persists, replace the HP Jetdirect print server. Check the cabling and connectors on again. If you may be a problem with the HP Jetdirect print server. If this error cannot occur. Check network cables. LAN ERROR- LAN...
HP Jetdirect Print Server 170X Installation and Configuration
Page 74
..., run the power-on self-test: turn the print server off , then on again. Check licenses on your network. Check the cabling and connectors on the spooling server. 6-74 HP Jetdirect Configuration Page Messages ENWW Verify operation of 13) Message LAN ERROR-RETRY FAULTS LAN ERRORTRANSMITTER OFF LAN ERRORUNDERFLOW LAN ERROR-WIRE FAULT LATE COLLISION ERROR LOSS OF CARRIER...
..., run the power-on self-test: turn the print server off , then on again. Check licenses on your network. Check the cabling and connectors on the spooling server. 6-74 HP Jetdirect Configuration Page Messages ENWW Verify operation of 13) Message LAN ERROR-RETRY FAULTS LAN ERRORTRANSMITTER OFF LAN ERRORUNDERFLOW LAN ERROR-WIRE FAULT LATE COLLISION ERROR LOSS OF CARRIER...
HP Jetdirect Print Server 170X Installation and Configuration
Page 83
...when you configured the network printer. MODE: See Table 6.2 for other general messages displayed. Queue Server Mode: The print server name. ENWW HP Jetdirect Configuration Page Messages 6-83 READY indicates the HP Jetdirect print server is registering the node address or name. REMOTE PRINTER, with the printer number following it, ...current IPX/SPX protocol status. The default name is NPIXXXXXX. Table 6.4 IPX/SPX (NetWare) Configuration Messages (1 of the LAN Hardware address. The mode used by the print server. If the printer is not configured, this field displays QUEUE...
...when you configured the network printer. MODE: See Table 6.2 for other general messages displayed. Queue Server Mode: The print server name. ENWW HP Jetdirect Configuration Page Messages 6-83 READY indicates the HP Jetdirect print server is registering the node address or name. REMOTE PRINTER, with the printer number following it, ...current IPX/SPX protocol status. The default name is NPIXXXXXX. Table 6.4 IPX/SPX (NetWare) Configuration Messages (1 of the LAN Hardware address. The mode used by the print server. If the printer is not configured, this field displays QUEUE...
HP Jetdirect Print Server 170X Installation and Configuration
Page 84
... Page Messages ENWW READY: Indicates the HP Jetdirect print server is DISABLED, a specific frame type has been manually configured. Table 6.5 DLC/LLC Configuration Messages Message DLC/LLC STATUS: Description Current DLC/LLC status: DISABLED: Indicates that LAN Server was manually disabled through the printer's control panel (if available). If the network number is awaiting data. NOT...
... Page Messages ENWW READY: Indicates the HP Jetdirect print server is DISABLED, a specific frame type has been manually configured. Table 6.5 DLC/LLC Configuration Messages Message DLC/LLC STATUS: Description Current DLC/LLC status: DISABLED: Indicates that LAN Server was manually disabled through the printer's control panel (if available). If the network number is awaiting data. NOT...
HP Jetdirect Print Server 170X Installation and Configuration
Page 110
...6-71 ERRORS RCVD 6-82 FTP printing Commands D-106 Example D-108 Exiting D-106 How to D-104 H Hardware installation 2-16 HOST NAME 6-85 HP JETDIRECT 6-68 HP Jetdirect identification and status 6-68 I I/O CARD INITIALIZING 6-72 NOT READY 6-72 READY 6-72 INITIALIZING TRYING TO CONNECT TO SERVER 6-71 INVALID GATEWAY ADDRESS 6-71...FAULTS 6-74 TRANSMITTER OFF 6-74 UNDERFLOW 6-74 WIRE FAULT 6-74 LAN HW ADDRESS 6-68 LATE COLLISION ERROR 6-74 LOSS OF CARRIER ERROR 6-74 M MEMORY ERROR 6-74 Messages DLC/LLC 6-84 HP Jetdirect 6-67 TCP/IP 6-85 messages HP Jetdirect 6-68, 6-69 MFG ID 6-68 MODE 6-83 Index-110...
...6-71 ERRORS RCVD 6-82 FTP printing Commands D-106 Example D-108 Exiting D-106 How to D-104 H Hardware installation 2-16 HOST NAME 6-85 HP JETDIRECT 6-68 HP Jetdirect identification and status 6-68 I I/O CARD INITIALIZING 6-72 NOT READY 6-72 READY 6-72 INITIALIZING TRYING TO CONNECT TO SERVER 6-71 INVALID GATEWAY ADDRESS 6-71...FAULTS 6-74 TRANSMITTER OFF 6-74 UNDERFLOW 6-74 WIRE FAULT 6-74 LAN HW ADDRESS 6-68 LATE COLLISION ERROR 6-74 LOSS OF CARRIER ERROR 6-74 M MEMORY ERROR 6-74 Messages DLC/LLC 6-84 HP Jetdirect 6-67 TCP/IP 6-85 messages HP Jetdirect 6-68, 6-69 MFG ID 6-68 MODE 6-83 Index-110...
HP JetDirect 170X - Installation and Configuration Guide
Page 27
Off On On Off Blinking On And the Activity LED is ... Not receiving power. Encountering a fault during self-test or operation. q not able to attach to the network. On; On; Off Off Blinking On (Solid) Off On Then the print server is ... no LAN activity detected. heavy LAN activity detected. 3-2 Installing the HP Jetdirect 170X Print Server LAN activity detected. On; q not configured. LEDs On the top of the following conditions: q running a self-test. If the Status LED is... Encountering one of the 170X are Status and LAN Activity LEDs.
Off On On Off Blinking On And the Activity LED is ... Not receiving power. Encountering a fault during self-test or operation. q not able to attach to the network. On; On; Off Off Blinking On (Solid) Off On Then the print server is ... no LAN activity detected. heavy LAN activity detected. 3-2 Installing the HP Jetdirect 170X Print Server LAN activity detected. On; q not configured. LEDs On the top of the following conditions: q running a self-test. If the Status LED is... Encountering one of the 170X are Status and LAN Activity LEDs.
HP JetDirect 170X - Installation and Configuration Guide
Page 28
...HP Jetdirect 170X Print Server 3-3 Plug the DC power cord from the power module into a wall outlet. 5. Verify that the Status light on . Connect the 170X to install the 170X. Caution Do not use the power module shipped with the 170X with other Jetdirect products! 4. Plug the 170X... on the 170X is blinking. Connect the 170X to the LAN and Printer 1. For technical specifications or part numbers for cable part numbers). 3. For troubleshooting information, see Appendix A. Installing the 3 HP 170X Network Cable Parallel Cable Power Figure 3-1 Connecting the 170X to the ...
...HP Jetdirect 170X Print Server 3-3 Plug the DC power cord from the power module into a wall outlet. 5. Verify that the Status light on . Connect the 170X to install the 170X. Caution Do not use the power module shipped with the 170X with other Jetdirect products! 4. Plug the 170X... on the 170X is blinking. Connect the 170X to the LAN and Printer 1. For technical specifications or part numbers for cable part numbers). 3. For troubleshooting information, see Appendix A. Installing the 3 HP 170X Network Cable Parallel Cable Power Figure 3-1 Connecting the 170X to the ...
HP JetDirect 170X - Installation and Configuration Guide
Page 50
... CONFIGURED IP ADDRESS: 0.0.0.0 SUBNET MASK: NOT SPECIFIED DEF. Figure 7-1 170X Configuration Page Sections Hewlett-Packard Jetdirect 170X (PCL Configuration Page) 1 HP Jetdirect FIRMWARE REVISION: J3258B F.08.05 LAN HW ADDRESS: 0060B01BE736 PARALLEL PORT 1: ECP2/MLC MFG ID: 38303830900703 DATE...UNSENDABLE PACKETS: 0 XMIT COLLISIONS: 0 XMIT LATE COLLISIONS: 0 IPX/SPX RETRANS: 0 4 IPX/SPX STATUS: 16 INITIALIZING NODE: QUEUE SERVER NODE NAME: NPI1BE736 NETWORK FRAME TYPE RCVD 00012345 EN 802.2 7 00000E11 EN II 3 F5AI363F EN 802.3 2 5 DLC/LLC STATUS:...
... CONFIGURED IP ADDRESS: 0.0.0.0 SUBNET MASK: NOT SPECIFIED DEF. Figure 7-1 170X Configuration Page Sections Hewlett-Packard Jetdirect 170X (PCL Configuration Page) 1 HP Jetdirect FIRMWARE REVISION: J3258B F.08.05 LAN HW ADDRESS: 0060B01BE736 PARALLEL PORT 1: ECP2/MLC MFG ID: 38303830900703 DATE...UNSENDABLE PACKETS: 0 XMIT COLLISIONS: 0 XMIT LATE COLLISIONS: 0 IPX/SPX RETRANS: 0 4 IPX/SPX STATUS: 16 INITIALIZING NODE: QUEUE SERVER NODE NAME: NPI1BE736 NETWORK FRAME TYPE RCVD 00012345 EN 802.2 7 00000E11 EN II 3 F5AI363F EN 802.3 2 5 DLC/LLC STATUS:...
HP JetDirect 170X - Installation and Configuration Guide
Page 52
...Jetdirect print servers: www.hp.com/support/net_printing. s Print a file to the printer attached directly to a PC locally using a parallel cable that you may have a printer driver or parallel cable problem. s If a configuration page is printed, the 170X is not printed, see section III below. s If the file still does not print...see chapter 3 for printing a self-test page. Troubleshooting 7-5 7 Troubleshooting For Internet users, access HP's website for status and error messages. Then select Troubleshooting. s Press the 170X Test button to the LAN (see your printer ...
...Jetdirect print servers: www.hp.com/support/net_printing. s Print a file to the printer attached directly to a PC locally using a parallel cable that you may have a printer driver or parallel cable problem. s If a configuration page is printed, the 170X is not printed, see section III below. s If the file still does not print...see chapter 3 for printing a self-test page. Troubleshooting 7-5 7 Troubleshooting For Internet users, access HP's website for status and error messages. Then select Troubleshooting. s Press the 170X Test button to the LAN (see your printer ...
HP JetDirect 170X - Installation and Configuration Guide
Page 58
... Config. If UNKNOWN is listed, the HP Jetdirect print server is NPIxxxxxx. The default name is still trying to determine which network number to locate the configured bindery servers. If no name is DISABLED, a ...HP Jetdirect Configuration Page Messages 8-3 If the message "UNABLE TO FIND FILE SERVER" appears in the "IPX/SPX STATUS:" section of the configuration page (see Table 8.2), the SERVER NAME field identifies the Jetdirect discovery method [NSQ] (Nearest Service Query) or [GSQ] (General Service Query) and the name of the LAN hardware address. INITIALIZING: Print server...
... Config. If UNKNOWN is listed, the HP Jetdirect print server is NPIxxxxxx. The default name is still trying to determine which network number to locate the configured bindery servers. If no name is DISABLED, a ...HP Jetdirect Configuration Page Messages 8-3 If the message "UNABLE TO FIND FILE SERVER" appears in the "IPX/SPX STATUS:" section of the configuration page (see Table 8.2), the SERVER NAME field identifies the Jetdirect discovery method [NSQ] (Nearest Service Query) or [GSQ] (General Service Query) and the name of the LAN hardware address. INITIALIZING: Print server...