HP Jetdirect Security Guidelines
Page 2
...printers by taking advantage of security is not a sound practice for years and have been in terms of proprietary protocols as well as TCP/IP. HP Jetdirect was directly connected to your desktop computer system or printer spooler, and then forgetting about them . If you buy them . At one ...and to clients on the network and behave as SSL/TLS, SNMPv3, 802.1X, and IPsec. In short, HP Jetdirect was designed to promote 'Ease-of the first print servers to the present, we have the same ease of use for maintaining the proper operation of an infrastructure, regardless of...
...printers by taking advantage of security is not a sound practice for years and have been in terms of proprietary protocols as well as TCP/IP. HP Jetdirect was directly connected to your desktop computer system or printer spooler, and then forgetting about them . If you buy them . At one ...and to clients on the network and behave as SSL/TLS, SNMPv3, 802.1X, and IPsec. In short, HP Jetdirect was designed to promote 'Ease-of the first print servers to the present, we have the same ease of use for maintaining the proper operation of an infrastructure, regardless of...
HP Jetdirect Security Guidelines
Page 7
... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External...
... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External...
HP Jetdirect Security Guidelines
Page 8
...an access control list for each individual IP address with the IP address and mask for the network ID assigned to those remote subnets. Setup a rule to protect print traffic using the Firewall Option 3) For SET 4. Setup a rule to print but keeps changing the display or doing...control list for the local subnet. Setup a rule to successfully authenticate the server endpoint (and optionally the client endpoint). These attacks can target any device (not just HP Jetdirect) that really is allowed to protect print traffic using IPsec Option 1) For Set 1/2/3/4. What about the user at work...
...an access control list for each individual IP address with the IP address and mask for the network ID assigned to those remote subnets. Setup a rule to protect print traffic using the Firewall Option 3) For SET 4. Setup a rule to print but keeps changing the display or doing...control list for the local subnet. Setup a rule to successfully authenticate the server endpoint (and optionally the client endpoint). These attacks can target any device (not just HP Jetdirect) that really is allowed to protect print traffic using IPsec Option 1) For Set 1/2/3/4. What about the user at work...
HP Jetdirect Security Guidelines
Page 10
...be opened using listening device hidden in MITM attacks. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an FTP client and an FTP server, it can "open it to upgrade HP Jetdirect devices is a fundamental step in a conference room ...This active/passive behavior is protected. Networking infrastructure equipment can perform effective MITM attacks against TCP/IP MITM attacks is the proper deployment of the TCP/IP protocol suite and is nonetheless a general vulnerability of cryptographic protocols such as IPsec and SSL...
...be opened using listening device hidden in MITM attacks. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an FTP client and an FTP server, it can "open it to upgrade HP Jetdirect devices is a fundamental step in a conference room ...This active/passive behavior is protected. Networking infrastructure equipment can perform effective MITM attacks against TCP/IP MITM attacks is the proper deployment of the TCP/IP protocol suite and is nonetheless a general vulnerability of cryptographic protocols such as IPsec and SSL...
HP Jetdirect Security Guidelines
Page 11
...TFTP configuration file: picasso.cfg under the subdirectory of "hpnp" of the TFTP daemon's home directory • Forces HP Jetdirect to DHCP if a BOOTP server is recommended as we can specify several control parameters via the TFTP configuration file. An example of the contents of ...password passwd: Security4Me3 # # Disable SNMP # use with very little administration overhead once configured. picasso:\ :hn:\ :ht=ether:\ :vm=rfc1048:\ :ha=0001E6123456:\ :ip=192.168.40.39:\ :sm=255.255.255.0:\ :gw=192.168.40.1:\ :lg=192.168.40.3:\ :T144="hpnp/picasso.cfg":\ :T151="BOOTP-ONLY": This ...
...TFTP configuration file: picasso.cfg under the subdirectory of "hpnp" of the TFTP daemon's home directory • Forces HP Jetdirect to DHCP if a BOOTP server is recommended as we can specify several control parameters via the TFTP configuration file. An example of the contents of ...password passwd: Security4Me3 # # Disable SNMP # use with very little administration overhead once configured. picasso:\ :hn:\ :ht=ether:\ :vm=rfc1048:\ :ha=0001E6123456:\ :ip=192.168.40.39:\ :sm=255.255.255.0:\ :gw=192.168.40.1:\ :lg=192.168.40.3:\ :T144="hpnp/picasso.cfg":\ :T151="BOOTP-ONLY": This ...
HP Jetdirect Security Guidelines
Page 28
... same process as we can begin the IPsec configuration. Select "All IP Addresses" and click "Next". 28 Once the Security Wizard configuration has been completed, then we did with a management protocol to Jetdirect without using HTTPS before navigating to communicate with SET 3, only this ...time, we'll simply say that you are using IPsec, the packets are dropped by the IP layer. Recommended Security Deployments: SET 4 First and foremost...
... same process as we can begin the IPsec configuration. Select "All IP Addresses" and click "Next". 28 Once the Security Wizard configuration has been completed, then we did with a management protocol to Jetdirect without using HTTPS before navigating to communicate with SET 3, only this ...time, we'll simply say that you are using IPsec, the packets are dropped by the IP layer. Recommended Security Deployments: SET 4 First and foremost...
HP Jetdirect Administrator's Guide
Page 4
... ENWW 4 TCP/IP Configuration Introduction 34 Default IP Address 35 Using BOOTP/TFTP 40 Using DHCP 62 Using RARP 70 Using the arp and ping Commands 72 Using Telnet 74 Using the Embedded Web Server 98 Using the Printer Control Panel 99 Moving to Another Network 100 4. Introducing the HP Jetdirect Print Server Introduction 7 Supported Print Servers 8 Supported Network...
... ENWW 4 TCP/IP Configuration Introduction 34 Default IP Address 35 Using BOOTP/TFTP 40 Using DHCP 62 Using RARP 70 Using the arp and ping Commands 72 Using Telnet 74 Using the Embedded Web Server 98 Using the Printer Control Panel 99 Moving to Another Network 100 4. Introducing the HP Jetdirect Print Server Introduction 7 Supported Print Servers 8 Supported Network...
HP Jetdirect Administrator's Guide
Page 5
Security Features Introduction 179 Using Security Features 183 8. HP Jetdirect Configuration Page Introduction 202 Configuration Page Format 203 Configuration Page Messages 205 Error Messages 225 A. TCP/IP Overview Introduction 236 IP Address 237 Configuring IP Parameters 240 Subnets 241 Gateways 242 Syslog Server 242 ENWW 5 Troubleshooting the HP Jetdirect Print Server Introduction 185 Resetting to Factory Defaults 186 General Troubleshooting 188...
Security Features Introduction 179 Using Security Features 183 8. HP Jetdirect Configuration Page Introduction 202 Configuration Page Format 203 Configuration Page Messages 205 Error Messages 225 A. TCP/IP Overview Introduction 236 IP Address 237 Configuring IP Parameters 240 Subnets 241 Gateways 242 Syslog Server 242 ENWW 5 Troubleshooting the HP Jetdirect Print Server Introduction 185 Resetting to Factory Defaults 186 General Troubleshooting 188...
HP Jetdirect Administrator's Guide
Page 8
...server (see "Firmware Upgrades". ENWW Introducing the HP Jetdirect Print Server 8 Table 1.1 Supported Products Model Product Printer Network Number Connect Connect Network Firmware Protocols Version*** and Features ew2400 J7951A USB 2.0 10/100TX wired, or 802.11g wireless Limited* V.28.xx.nnnnnnnn en3700... J7942A USB 2.0 10/100TX Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP...
...server (see "Firmware Upgrades". ENWW Introducing the HP Jetdirect Print Server 8 Table 1.1 Supported Products Model Product Printer Network Number Connect Connect Network Firmware Protocols Version*** and Features ew2400 J7951A USB 2.0 10/100TX wired, or 802.11g wireless Limited* V.28.xx.nnnnnnnn en3700... J7942A USB 2.0 10/100TX Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP...
HP Jetdirect Administrator's Guide
Page 9
... IP/IPX Direct Mode printing and LPD/Windows are not supported. Not Supported: NetWare, IPP, LPD/UNIX are supported. ENWW Introducing the HP Jetdirect Print Server 9 and 64-bit), Direct Mode printing Novell... NetWare 5, 6.x using NDPS UNIX and Linux, including: Hewlett-Packard HP-UX, Sun Microsystems Solaris (SPARCsystems only), IBM AIX**, HP MPE-iX**, RedHat Linux**, SuSE Linux** LPR/LPD (Line Printer Daemon)** IPP (Internet Printing Protocol) FTP (File Transfer Protocol) J7951A (ew2400)*** J7942A (en3700...
... IP/IPX Direct Mode printing and LPD/Windows are not supported. Not Supported: NetWare, IPP, LPD/UNIX are supported. ENWW Introducing the HP Jetdirect Print Server 9 and 64-bit), Direct Mode printing Novell... NetWare 5, 6.x using NDPS UNIX and Linux, including: Hewlett-Packard HP-UX, Sun Microsystems Solaris (SPARCsystems only), IBM AIX**, HP MPE-iX**, RedHat Linux**, SuSE Linux** LPR/LPD (Line Printer Daemon)** IPP (Internet Printing Protocol) FTP (File Transfer Protocol) J7951A (ew2400)*** J7942A (en3700...
HP Jetdirect Administrator's Guide
Page 10
... your Web browser. ● HP Jetdirect 620n internal print server (EIO) ● HP Jetdirect en3700 external print server ● HP Jetdirect ew2400 external wired/wireless print server Authentication EAP/802.1X Server-Based Authentication As a network client, HP Jetdirect full-featured print servers (such as 620n and en3700) support an SNMP v1/v2c agent, and an SNMP v3 agent for device management. Security Protocols SNMP (IP and IPX) SNMP (Simple...
... your Web browser. ● HP Jetdirect 620n internal print server (EIO) ● HP Jetdirect en3700 external print server ● HP Jetdirect ew2400 external wired/wireless print server Authentication EAP/802.1X Server-Based Authentication As a network client, HP Jetdirect full-featured print servers (such as 620n and en3700) support an SNMP v1/v2c agent, and an SNMP v3 agent for device management. Security Protocols SNMP (IP and IPX) SNMP (Simple...
HP Jetdirect Administrator's Guide
Page 13
... the HP Jetdirect Print Server 13 To start an FTP session, use the device IP address or host name. HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin may be installed over a network using your Web browser. Firmware upgrades for supported HP Jetdirect print servers may be used on the print server provides...
... the HP Jetdirect Print Server 13 To start an FTP session, use the device IP address or host name. HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin may be installed over a network using your Web browser. Firmware upgrades for supported HP Jetdirect print servers may be used on the print server provides...
HP Jetdirect Administrator's Guide
Page 15
... disk is best for you to your HP Jetdirect-connected network devices. For a network server, you to configure wireless parameters for download from HP's Website. Wired or Wireless print servers: Once connected to set up or manage your network. 2 HP Software Solutions Summary Introduction HP provides a variety of 3) Operating Environment Function Remarks HP Install Network Printer Wizard (Windows) Windows...
... disk is best for you to your HP Jetdirect-connected network devices. For a network server, you to configure wireless parameters for download from HP's Website. Wired or Wireless print servers: Once connected to set up or manage your network. 2 HP Software Solutions Summary Introduction HP provides a variety of 3) Operating Environment Function Remarks HP Install Network Printer Wizard (Windows) Windows...
HP Jetdirect Administrator's Guide
Page 16
... hosted on value-based products, such as ew2400 ENWW HP Software Solutions Summary 16 Table 2.1 Software Solutions (2 of 3) Operating Environment Function Remarks HP Jetdirect Printer Installer for UNIX HP-UX 10.x-10.20, 11.x Solaris 2.6, 7, 8 (SPARCsystems only) TCP/IP Fast and easy installation of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with...
... hosted on value-based products, such as ew2400 ENWW HP Software Solutions Summary 16 Table 2.1 Software Solutions (2 of 3) Operating Environment Function Remarks HP Jetdirect Printer Installer for UNIX HP-UX 10.x-10.20, 11.x Solaris 2.6, 7, 8 (SPARCsystems only) TCP/IP Fast and easy installation of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with...
HP Jetdirect Administrator's Guide
Page 17
...10.1.5 or later Configuration of HP Jetdirect wireless print servers. ● Distributed on the HP Jetdirect CD-ROM HP LaserJet Utilities for NDPS NetWare 5.x, 6.x Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS). ● Frees... discovery and installation of HP Jetdirect-connected printers. ● May be downloaded from HP's Website. ENWW HP Software Solutions Summary 17 Table 2.1 Software Solutions (3 of 3) Operating Environment Function Remarks HP IP/IPX Printer Gateway for Mac...
...10.1.5 or later Configuration of HP Jetdirect wireless print servers. ● Distributed on the HP Jetdirect CD-ROM HP LaserJet Utilities for NDPS NetWare 5.x, 6.x Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS). ● Frees... discovery and installation of HP Jetdirect-connected printers. ● May be downloaded from HP's Website. ENWW HP Software Solutions Summary 17 Table 2.1 Software Solutions (3 of 3) Operating Environment Function Remarks HP IP/IPX Printer Gateway for Mac...
HP Jetdirect Administrator's Guide
Page 18
... selection on the HP Jetdirect CD-ROM supplied with standalone HP Jetdirect products. A version that it can connect to your network. HP Install Network Printer Wizard (Windows) The HP Install Network Printer Wizard, version 4.0 or above, is a server, you to first...Server 2003 ◆ TCP/IP or IPX/SPX network protocol ENWW HP Software Solutions Summary 18 For wireless print servers, the wizard includes modules that allow you can share the printer so that will send print jobs directly to -peer" printing. This is run through the server, also known as "client-server" printing...
... selection on the HP Jetdirect CD-ROM supplied with standalone HP Jetdirect products. A version that it can connect to your network. HP Install Network Printer Wizard (Windows) The HP Install Network Printer Wizard, version 4.0 or above, is a server, you to first...Server 2003 ◆ TCP/IP or IPX/SPX network protocol ENWW HP Software Solutions Summary 18 For wireless print servers, the wizard includes modules that allow you can share the printer so that will send print jobs directly to -peer" printing. This is run through the server, also known as "client-server" printing...
HP Jetdirect Administrator's Guide
Page 19
... use with your printer and operating system ● Printer connection to TCP/IP networks using full-featured HP Jetdirect print servers. The software is recommended. ENWW HP Software Solutions Summary 19 Value-based print servers, such as HP Jetdirect ew2400 print servers, are not supported. Note For HP Jetdirect ew2400 external wired/wireless print servers that will need a computer that contains a wireless interface card, either built...
... use with your printer and operating system ● Printer connection to TCP/IP networks using full-featured HP Jetdirect print servers. The software is recommended. ENWW HP Software Solutions Summary 19 Value-based print servers, such as HP Jetdirect ew2400 print servers, are not supported. Note For HP Jetdirect ew2400 external wired/wireless print servers that will need a computer that contains a wireless interface card, either built...
HP Jetdirect Administrator's Guide
Page 24
...-enabled HP Jetdirect print server (such as follows: 1. ENWW HP Software Solutions Summary 24 Windows 2000/XP/Server 2003 Integrated Software On Windows 2000/XP/Server 2003 systems, an alternative to get the IP address or URL of Windows IPP software. Contact your network administrator to using the Windows 2000/XP IPP-client software, proceed as HP Jetdirect 620n or en3700) HP...
...-enabled HP Jetdirect print server (such as follows: 1. ENWW HP Software Solutions Summary 24 Windows 2000/XP/Server 2003 Integrated Software On Windows 2000/XP/Server 2003 systems, an alternative to get the IP address or URL of Windows IPP software. Contact your network administrator to using the Windows 2000/XP IPP-client software, proceed as HP Jetdirect 620n or en3700) HP...
HP Jetdirect Administrator's Guide
Page 75
... prompt: C:\> ipconfig (on Windows NT/2000/XP/Server 2003) C:\> winipconfig (on the HP Jetdirect print server, and is the IP address of the workstation's network card that is attached to manually set an IP address will also need the IP address of your workstation with IP address 169.254.2.1 to a print server with a default IP address of 192.0.0.192, try this command...
... prompt: C:\> ipconfig (on Windows NT/2000/XP/Server 2003) C:\> winipconfig (on the HP Jetdirect print server, and is the IP address of the workstation's network card that is attached to manually set an IP address will also need the IP address of your workstation with IP address 169.254.2.1 to a print server with a default IP address of 192.0.0.192, try this command...
HP Jetdirect Administrator's Guide
Page 182
... seamlessly enable the SNMP v3 agent on the print server, and create an SNMP v3 account for individual profiles and controlled access to the HP Web Jetadmin online help . ● HP Web Jetadmin provides access control through the Jetdirect IP Administrator password, which may be integrated on the HP Jetdirect print server provides secure, encrypted communications with an SNMP v3...
... seamlessly enable the SNMP v3 agent on the print server, and create an SNMP v3 account for individual profiles and controlled access to the HP Web Jetadmin online help . ● HP Web Jetadmin provides access control through the Jetdirect IP Administrator password, which may be integrated on the HP Jetdirect print server provides secure, encrypted communications with an SNMP v3...