HP Jetdirect Security Guidelines
Page 6
... devices need to as service types. • SET 4: The 635n model and the CM8000 Color MFP series (J7974E). As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will not upgrade the security capabilities of those attacks. These models have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that follows, this product, we evaluate the various attacks employed against HP Jetdirect. The administrative...
... devices need to as service types. • SET 4: The 635n model and the CM8000 Color MFP series (J7974E). As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will not upgrade the security capabilities of those attacks. These models have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that follows, this product, we evaluate the various attacks employed against HP Jetdirect. The administrative...
HP Jetdirect Security Guidelines
Page 9
... the upgrade, etc...), HP Jetdirect will help make your passwords on users and their how their password handling. SET 2/3/4 support automatic redirection to SSL/TLS and prevents HTTP from HP, and upgrade to use the well-known default SNMP community names. HP Web Jetadmin can be configured to the latest Web Jetadmin management software. In addition, HP's Web Jetadmin includes functionality called Report Generator which allow an administrator to control the amount of Color Access Controls using HP Download Manager or HP Web Jetadmin, the...
... the upgrade, etc...), HP Jetdirect will help make your passwords on users and their how their password handling. SET 2/3/4 support automatic redirection to SSL/TLS and prevents HTTP from HP, and upgrade to use the well-known default SNMP community names. HP Web Jetadmin can be configured to the latest Web Jetadmin management software. In addition, HP's Web Jetadmin includes functionality called Report Generator which allow an administrator to control the amount of Color Access Controls using HP Download Manager or HP Web Jetadmin, the...
HP Jetdirect 620n Print Server Setup Guide
Page 18
... printer on a Microsoft server, each Windows client can use Add Printer or Network Neighborhood utilities to access the printer. When prompted, print a test page to verify printer setup. ■ If the test page successfully prints, then you will need to print, perform the troubleshooting tasks displayed by the wizard. For information on accessing documents on the Jetdirect CD-ROM, refer to a temporary directory on this print server. ENWW Installation Procedures 18 For detailed troubleshooting information, read the HP Jetdirect Print Server Administrator's Guide...
... printer on a Microsoft server, each Windows client can use Add Printer or Network Neighborhood utilities to access the printer. When prompted, print a test page to verify printer setup. ■ If the test page successfully prints, then you will need to print, perform the troubleshooting tasks displayed by the wizard. For information on accessing documents on the Jetdirect CD-ROM, refer to a temporary directory on this print server. ENWW Installation Procedures 18 For detailed troubleshooting information, read the HP Jetdirect Print Server Administrator's Guide...
HP Jetdirect 620n Print Server Setup Guide
Page 19
... install the software, follow the instructions on the HP Jetdirect CD-ROM. Double-click the HP LaserJet software installation icon for UNIX software provided on the screen. Apple Mac OS Networks For printer configuration and management on the CD-ROM. For more information, read the text and documentation files provided in the /UNIX directory of the CD-ROM. For detailed installation instructions and other information, read the appropriate HP Jetdirect Print Server Administrator's Guide for Mac OS 9.x, X 10 Classic Mode...
... install the software, follow the instructions on the HP Jetdirect CD-ROM. Double-click the HP LaserJet software installation icon for UNIX software provided on the screen. Apple Mac OS Networks For printer configuration and management on the CD-ROM. For more information, read the text and documentation files provided in the /UNIX directory of the CD-ROM. For detailed installation instructions and other information, read the appropriate HP Jetdirect Print Server Administrator's Guide for Mac OS 9.x, X 10 Classic Mode...
HP Jetdirect 620n Print Server Setup Guide
Page 31
...HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP ports 9100, 9101, 9102) ● HP network printing setup software: ■ HP Install Network Printer Wizard (Windows) ■ HP Jetdirect Printer Installer for UNIX ■ HP LaserJet Utility for Macintosh ■ HP Internet Printer Connection...
...HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP ports 9100, 9101, 9102) ● HP network printing setup software: ■ HP Install Network Printer Wizard (Windows) ■ HP Jetdirect Printer Installer for UNIX ■ HP LaserJet Utility for Macintosh ■ HP Internet Printer Connection...
HP Jetdirect Administrator's Guide
Page 8
....xx.nnnnnnnn en3700 J7942A USB 2.0 10/100TX Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades".
....xx.nnnnnnnn en3700 J7942A USB 2.0 10/100TX Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades".
HP Jetdirect Administrator's Guide
Page 19
...-based print servers, such as HP Jetdirect ew2400 print servers, are not supported. Note For HP Jetdirect ew2400 external wired/wireless print servers that will need a computer that contains a wireless interface card, either built-in or installed in a wireless environment, a network cable connection to TCP/IP networks using full-featured HP Jetdirect print servers. To configure wireless settings without a cable, you will be used in an I/O slot. For detailed instructions, see the Setup guide provided with your print server. ● The proper printer software (printer driver) to use...
...-based print servers, such as HP Jetdirect ew2400 print servers, are not supported. Note For HP Jetdirect ew2400 external wired/wireless print servers that will need a computer that contains a wireless interface card, either built-in or installed in a wireless environment, a network cable connection to TCP/IP networks using full-featured HP Jetdirect print servers. To configure wireless settings without a cable, you will be used in an I/O slot. For detailed instructions, see the Setup guide provided with your print server. ● The proper printer software (printer driver) to use...
HP Jetdirect Administrator's Guide
Page 27
... utility, the HP Jetdirect wireless print server must be in the documentation supplied with its wireless port enabled. If provided, read the release notes for downloading drivers and software. Run the HP WPS Assistant utility, then follow the instructions for updated information. 4. To Get the Software The HP IP/IPX Printer Gateway is included with a connection to your Mac OS network. ENWW HP Software Solutions Summary 27 HP WPS Assistant (Mac OS X) This utility allows you will need to use the embedded Web server to configure a network connection...
... utility, the HP Jetdirect wireless print server must be in the documentation supplied with its wireless port enabled. If provided, read the release notes for downloading drivers and software. Run the HP WPS Assistant utility, then follow the instructions for updated information. 4. To Get the Software The HP IP/IPX Printer Gateway is included with a connection to your Mac OS network. ENWW HP Software Solutions Summary 27 HP WPS Assistant (Mac OS X) This utility allows you will need to use the embedded Web server to configure a network connection...
HP Jetdirect Administrator's Guide
Page 28
... Web server. Installing the Printer Software To install the printer software for Mac OS systems, follow the instructions in the documentation supplied with your HP Jetdirect-connected printers on networks that accompanies the software for Mac OS allow you are installing the HP LaserJet Utility from the HP Jetdirect CD-ROM, use the following installation instructions. Note If you can use Mac OS system utilities to discover and install your printer: ● On Mac OS 9.x systems, use the Apple Desktop Printer Utility to set up LPR/LPD printing. ● On Mac OS X 10.x systems, use...
... Web server. Installing the Printer Software To install the printer software for Mac OS systems, follow the instructions in the documentation supplied with your HP Jetdirect-connected printers on networks that accompanies the software for Mac OS allow you are installing the HP LaserJet Utility from the HP Jetdirect CD-ROM, use the following installation instructions. Note If you can use Mac OS system utilities to discover and install your printer: ● On Mac OS 9.x systems, use the Apple Desktop Printer Utility to set up LPR/LPD printing. ● On Mac OS X 10.x systems, use...
HP Jetdirect Administrator's Guide
Page 36
..., the HP Jetdirect print server will automatically reassign its address, if necessary, in a factory-default state, this case, you should verify on your print server may be changed . Default IP Address Configuration Options Default IP Parameter A Default IP configuration parameter on the print server controls how the default IP address is undefined. If the print server is initially configured with a valid address through a supported configuration tool, such as Telnet, a Web browser, a printer control panel, and SNMP management applications. ENWW TCP/IP Configuration 36 Link-local...
..., the HP Jetdirect print server will automatically reassign its address, if necessary, in a factory-default state, this case, you should verify on your print server may be changed . Default IP Address Configuration Options Default IP Parameter A Default IP configuration parameter on the print server controls how the default IP address is undefined. If the print server is initially configured with a valid address through a supported configuration tool, such as Telnet, a Web browser, a printer control panel, and SNMP management applications. ENWW TCP/IP Configuration 36 Link-local...
HP Jetdirect Administrator's Guide
Page 46
... HP-proprietary tag to close a Port 9100 print connection. Interlock Mode option. Refer to specify the TFTP server's IP address where the TFTP configuration file is 1 (default). : Option value 0 (default) disables interlock, 1 enables. An HP-proprietary tag to your HP Jetdirect print server, such as host names, must begin with a letter and can be sent. Table 3.1 Item Tags Supported in the form: : For supported HP Jetdirect print servers, the Port Number is located. TFTP server's IP address option...
... HP-proprietary tag to close a Port 9100 print connection. Interlock Mode option. Refer to specify the TFTP server's IP address where the TFTP configuration file is 1 (default). : Option value 0 (default) disables interlock, 1 enables. An HP-proprietary tag to your HP Jetdirect print server, such as host names, must begin with a letter and can be sent. Table 3.1 Item Tags Supported in the form: : For supported HP Jetdirect print servers, the Port Number is located. TFTP server's IP address option...
HP Jetdirect Administrator's Guide
Page 55
... Telnet connections. The default is 900 seconds. 0 disables the timeout. ews-config: (web:) Enables or disables the print server's embedded Web server to 3600 (1 hour). The range is 15 seconds. The acceptable values range from 0 to change the setting in seconds. If this parameter instructs the print server not to be made. The default is 5 - 120 seconds. If "0" is typed, the timeout mechanism is allowed to access the printer. ENWW TCP/IP Configuration...
... Telnet connections. The default is 900 seconds. 0 disables the timeout. ews-config: (web:) Enables or disables the print server's embedded Web server to 3600 (1 hour). The range is 15 seconds. The acceptable values range from 0 to change the setting in seconds. If this parameter instructs the print server not to be made. The default is 5 - 120 seconds. If "0" is typed, the timeout mechanism is allowed to access the printer. ENWW TCP/IP Configuration...
HP Jetdirect Administrator's Guide
Page 69
... Telnet, refer to set Manual (status indicates "User Specified") or BOOTP configuration, then DHCP will not be used. 2. This means that when you choose DHCP and complete your configuration session (using the Jetdirect embedded Web server or HP Web Jetadmin. For DHCP configuration through a supported Web browser using Telnet, for example), the TCP/IP protocol for the print server is re-initialized and all of the configuration parameters, such as subnet mask, default gateway, and idle timeout. You can use the printer control...
... Telnet, refer to set Manual (status indicates "User Specified") or BOOTP configuration, then DHCP will not be used. 2. This means that when you choose DHCP and complete your configuration session (using the Jetdirect embedded Web server or HP Web Jetadmin. For DHCP configuration through a supported Web browser using Telnet, for example), the TCP/IP protocol for the print server is re-initialized and all of the configuration parameters, such as subnet mask, default gateway, and idle timeout. You can use the printer control...
HP Jetdirect Administrator's Guide
Page 74
... system command prompts, see Appendix A. On Windows 2000/XP/Server 2003 systems, it is in the Programs or All Programs folder. For information on IP address structure, see your network has been established. Using Telnet Note For HP Jetdirect wireless print servers, this section assumes that a wireless connection to your Windows online help. This section describes how to configure the print server using other tools (for example, TFTP, embedded Web server, or HP Web Jetadmin software). If...
... system command prompts, see Appendix A. On Windows 2000/XP/Server 2003 systems, it is in the Programs or All Programs folder. For information on IP address structure, see your network has been established. Using Telnet Note For HP Jetdirect wireless print servers, this section assumes that a wireless connection to your Windows online help. This section describes how to configure the print server using other tools (for example, TFTP, embedded Web server, or HP Web Jetadmin software). If...
HP Jetdirect Administrator's Guide
Page 104
...: ENWW Using the Embedded Web Server 104 For example, you can automatically configure IP parameters over the network using the printer's control panel (for the print server. When powered on, an HP Jetdirect print server that a wireless connection to your computer with internal print servers), Telnet, the "arp" and "ping" commands, HP Web Jetadmin or other management software. If the legacy default IP address 192.0.0.192 has been assigned, you can use the embedded Web server, the HP Jetdirect print server must temporarily set up your network has...
...: ENWW Using the Embedded Web Server 104 For example, you can automatically configure IP parameters over the network using the printer's control panel (for the print server. When powered on, an HP Jetdirect print server that a wireless connection to your computer with internal print servers), Telnet, the "arp" and "ping" commands, HP Web Jetadmin or other management software. If the legacy default IP address 192.0.0.192 has been assigned, you can use the embedded Web server, the HP Jetdirect print server must temporarily set up your network has...
HP Jetdirect Administrator's Guide
Page 150
... the print server. Disabling RCFG does not affect direct mode printing using a cross-over cable. you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use of FTP to configure Novell NetWare parameters. Available configuration settings are not secure protocols and device passwords may need to be intercepted. The supported 802.1X authentication protocols and associated configuration depend on your connection. Disabling Telnet, FTP firmware upgrades, and RCFG is lost, you may be configured with the printer/MFP device is...
... the print server. Disabling RCFG does not affect direct mode printing using a cross-over cable. you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use of FTP to configure Novell NetWare parameters. Available configuration settings are not secure protocols and device passwords may need to be intercepted. The supported 802.1X authentication protocols and associated configuration depend on your connection. Disabling Telnet, FTP firmware upgrades, and RCFG is lost, you may be configured with the printer/MFP device is...
HP Jetdirect Administrator's Guide
Page 168
... option in lowercase) the name of the HP Jetdirect print server. Select the manufacturer and printer model. (If necessary, click Have Disk and follow the instructions to keep the existing driver, if prompted. Type a printer name and (if desired) click this printer with other users. Close the Network Connections window. LPR port is a printer server). Select Create a new port, and select LPR Port from the desktop, click Start, Printers and Faxes). 2. Select whether to other...
... option in lowercase) the name of the HP Jetdirect print server. Select the manufacturer and printer model. (If necessary, click Have Disk and follow the instructions to keep the existing driver, if prompted. Type a printer name and (if desired) click this printer with other users. Close the Network Connections window. LPR port is a printer server). Select Create a new port, and select LPR Port from the desktop, click Start, Printers and Faxes). 2. Select whether to other...
HP Jetdirect Administrator's Guide
Page 195
... printers with control panels). ■ See the troubleshooting section in the online help included with the HP Web Jetadmin software. 13. On supported systems, does the printer respond to the printer? In the Telnet session, type in the Add a Hewlett-Packard Network Peripheral Port dialog box? ■ Verify network and HP Jetdirect settings on the same physical subnet and that the printer is 9100, the default printing port of the print server. Use the following Telnet command: telnet where is the IP address assigned...
... printers with control panels). ■ See the troubleshooting section in the online help included with the HP Web Jetadmin software. 13. On supported systems, does the printer respond to the printer? In the Telnet session, type in the Add a Hewlett-Packard Network Peripheral Port dialog box? ■ Verify network and HP Jetdirect settings on the same physical subnet and that the printer is 9100, the default printing port of the print server. Use the following Telnet command: telnet where is the IP address assigned...
HP Jetdirect Administrator's Guide
Page 227
... HP Jetdirect print server. Use the installation software, embedded Web server, or other tool to service. Use a NetWare utility (such as PCONSOLE), the Jetdirect embedded Web server, or other tools to erase the password for the NetWare functions is disconnected. ENWW HP Jetdirect Configuration Page 227 Table 9.11 Error Messages (3 of the file servers are connected. 19 NO QUEUE ASSIGNED The HP Jetdirect print server detected that the password for this error persists, there may be a problem with the HP Jetdirect print server. 16 NOT CONFIGURED (Ethernet) The HP Jetdirect...
... HP Jetdirect print server. Use the installation software, embedded Web server, or other tool to service. Use a NetWare utility (such as PCONSOLE), the Jetdirect embedded Web server, or other tools to erase the password for the NetWare functions is disconnected. ENWW HP Jetdirect Configuration Page 227 Table 9.11 Error Messages (3 of the file servers are connected. 19 NO QUEUE ASSIGNED The HP Jetdirect print server detected that the password for this error persists, there may be a problem with the HP Jetdirect print server. 16 NOT CONFIGURED (Ethernet) The HP Jetdirect...
HP Jetdirect Administrator's Guide
Page 257
... embedded Web server HP Web Jetadmin 103 HTTPS security 146, 180 LPD setup 128 NetWare objects 106 TFTP configuration file 55 upgrading firmware 128 using 101 viewing 104 web browsers 103 Encryption embedded Web server 114 SNMP v3 147 supported ciphers 147 ERR NEGOTIATING BUFFER SIZE 228 error messages 225 802.11 wireless 208 HP Jetdirect configuration page 202 printer control panel 191 F factory defaults, resetting 186 cold-reset 186 security parameters 50, 80, 135, 248, 252 TCP/IP from Telnet 98 wireless...
... embedded Web server HP Web Jetadmin 103 HTTPS security 146, 180 LPD setup 128 NetWare objects 106 TFTP configuration file 55 upgrading firmware 128 using 101 viewing 104 web browsers 103 Encryption embedded Web server 114 SNMP v3 147 supported ciphers 147 ERR NEGOTIATING BUFFER SIZE 228 error messages 225 802.11 wireless 208 HP Jetdirect configuration page 202 printer control panel 191 F factory defaults, resetting 186 cold-reset 186 security parameters 50, 80, 135, 248, 252 TCP/IP from Telnet 98 wireless...