Practical considerations for imaging and printing security
Page 7
...HP LaserJet 4345mfp and 4730mfp. HP imaging and printing devices allow manufacturers to facilitate compliance with policy and regulatory requirements. The DSS Server may be achieved by the DSS Server...printing infrastructure maintenance and enables auditing to develop device-specific extensions using out-of networked devices. HP releases firmware updates based on enterprise networks. It is critical to be manually.... WJA can encrypt scanned documents between the DSS Server and the remote server using IPsec. Effectively Monitor and Manage Effectively Monitor and Manage ...
...HP LaserJet 4345mfp and 4730mfp. HP imaging and printing devices allow manufacturers to facilitate compliance with policy and regulatory requirements. The DSS Server may be achieved by the DSS Server...printing infrastructure maintenance and enables auditing to develop device-specific extensions using out-of networked devices. HP releases firmware updates based on enterprise networks. It is critical to be manually.... WJA can encrypt scanned documents between the DSS Server and the remote server using IPsec. Effectively Monitor and Manage Effectively Monitor and Manage ...
HP Jetdirect Print Servers - Administrator's Guide
Page 5
Table of contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
Table of contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
HP Jetdirect Print Servers - Administrator's Guide
Page 6
...IPv6 configuration ...15 IPv6 address introduction 15 IPv6 address configuration 16 Link-local address 16 Stateless addresses 17 Stateful addresses 17 Use DNS ...17 Tools and utilities 18 IPv4 configuration ...18 Server-based and manual... 21 Use BOOTP/TFTP (IPv4 22 Advantages of using BOOTP/TFTP 22 Configure the print server using BOOTP/TFTP on UNIX 22 Use DHCP (IPv4) ...34 UNIX systems 34 Windows... Use the embedded Web server ...58 Use the printer control panel ...58 4 Embedded Web server (V.38.xx) Requirements ...62 Compatible Web browsers 62 Supported HP Web Jetadmin version 62 ...
...IPv6 configuration ...15 IPv6 address introduction 15 IPv6 address configuration 16 Link-local address 16 Stateless addresses 17 Stateful addresses 17 Use DNS ...17 Tools and utilities 18 IPv4 configuration ...18 Server-based and manual... 21 Use BOOTP/TFTP (IPv4 22 Advantages of using BOOTP/TFTP 22 Configure the print server using BOOTP/TFTP on UNIX 22 Use DHCP (IPv4) ...34 UNIX systems 34 Windows... Use the embedded Web server ...58 Use the printer control panel ...58 4 Embedded Web server (V.38.xx) Requirements ...62 Compatible Web browsers 62 Supported HP Web Jetadmin version 62 ...
HP Jetdirect Print Servers - Administrator's Guide
Page 8
... problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field error messages 130 Configuration page format 130 Configuration page messages 131 HP Jetdirect Configuration/General Information 131 Security Settings 135 vi ENWW ? (Help) ...95 Support ...95 5 IPsec/Firewall configuration (V.38.xx) Default Rule example ...100 IPsec security associations (SA) ...100 HP Jetdirect IPsec/Firewall wizard 100...
... problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field error messages 130 Configuration page format 130 Configuration page messages 131 HP Jetdirect Configuration/General Information 131 Security Settings 135 vi ENWW ? (Help) ...95 Support ...95 5 IPsec/Firewall configuration (V.38.xx) Default Rule example ...100 IPsec security associations (SA) ...100 HP Jetdirect IPsec/Firewall wizard 100...
HP Jetdirect Print Servers - Administrator's Guide
Page 11
... term print server refers to a network. Supported print servers The following HP Jetdirect print server types are available: ● HP Jetdirect embedded print servers are built directly into the printer's mother board, the print server cannot be independently purchased or replaced. The following table lists the supported HP Jetdirect print server features and capabilities discussed in this manual. 1 Introducing the HP Jetdirect print server HP Jetdirect print servers connect printers and other devices directly to an HP Jetdirect print server and...
... term print server refers to a network. Supported print servers The following HP Jetdirect print server types are available: ● HP Jetdirect embedded print servers are built directly into the printer's mother board, the print server cannot be independently purchased or replaced. The following table lists the supported HP Jetdirect print server features and capabilities discussed in this manual. 1 Introducing the HP Jetdirect print server HP Jetdirect print servers connect printers and other devices directly to an HP Jetdirect print server and...
HP Jetdirect Print Servers - Administrator's Guide
Page 15
... operation, use guides, or equivalent printer documentation (shipped with printers that support IPsec can download and install the upgrade over a network by using firewall protection only. To configure the print server for supported HP Jetdirect print servers over your browser. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for and download available upgrades, visit the Hewlett-Packard Web site...
... operation, use guides, or equivalent printer documentation (shipped with printers that support IPsec can download and install the upgrade over a network by using firewall protection only. To configure the print server for supported HP Jetdirect print servers over your browser. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for and download available upgrades, visit the Hewlett-Packard Web site...
HP Jetdirect Print Servers - Administrator's Guide
Page 26
...: ● 2001:DB8::/32 (reserved for the specific host uniquely identified by default, manually configured addresses are under the direction of a router. When the print server creates a link-local address, the link-local prefix FE80::/10 is not required. Because each IPv6 host on a local network assigns itself a link-local address, a router-based infrastructure...
...: ● 2001:DB8::/32 (reserved for the specific host uniquely identified by default, manually configured addresses are under the direction of a router. When the print server creates a link-local address, the link-local prefix FE80::/10 is not required. Because each IPv6 host on a local network assigns itself a link-local address, a router-based infrastructure...
HP Jetdirect Print Servers - Administrator's Guide
Page 28
... you might need to create a route to the remote host address. ● IPv6 addresses as initially shipped or after a cold reset) and turned on, the HP Jetdirect print server attempts to a remote interface and report the response packets. The uniquely identifies the interface... on . 18 Chapter 3 TCP/IP configuration ENWW An interface IPv6 address can also configure the print server manually by specifying the appropriate command option. Tools and utilities System tools and utilities for HP Jetdirect print servers on a TCP/ IPv4 network. IPv4 configuration This section provides ...
... you might need to create a route to the remote host address. ● IPv6 addresses as initially shipped or after a cold reset) and turned on, the HP Jetdirect print server attempts to a remote interface and report the response packets. The uniquely identifies the interface... on . 18 Chapter 3 TCP/IP configuration ENWW An interface IPv6 address can also configure the print server manually by specifying the appropriate command option. Tools and utilities System tools and utilities for HP Jetdirect print servers on a TCP/ IPv4 network. IPv4 configuration This section provides ...
HP Jetdirect Print Servers - Administrator's Guide
Page 29
... re-configured by an administrator to use either 169.254/16 or 192.0.0.192. If a duplicate address is sensed, the HP Jetdirect print server automatically reassigns its address, if necessary, in accordance with standard link-local addressing methods. ● On large or enterprise IP ...-assigned default IP address is assigned, the address depends on the network to a wired print server. Instead, the print server continues to as Auto IP. If a default IP address is either server-based or manual configuration of TCP/IP settings at any time. If necessary, you can be changed. The...
... re-configured by an administrator to use either 169.254/16 or 192.0.0.192. If a duplicate address is sensed, the HP Jetdirect print server automatically reassigns its address, if necessary, in accordance with standard link-local addressing methods. ● On large or enterprise IP ...-assigned default IP address is assigned, the address depends on the network to a wired print server. Instead, the print server continues to as Auto IP. If a default IP address is either server-based or manual configuration of TCP/IP settings at any time. If necessary, you can be changed. The...
HP Jetdirect Print Servers - Administrator's Guide
Page 30
... IP address on the print server for example, when manually configured to match. For the default IP address settings actually configured on , a factory-default print server connected to complete. Default IPv4 address configuration options Default IPv4 parameter A default IP configuration parameter on , it likely self-assigns a link-local IP address. When an HP Jetdirect Wireless Print Server in a factory default...
... IP address on the print server for example, when manually configured to match. For the default IP address settings actually configured on , a factory-default print server connected to complete. Default IPv4 address configuration options Default IPv4 parameter A default IP configuration parameter on , it likely self-assigns a link-local IP address. When an HP Jetdirect Wireless Print Server in a factory default...
HP Jetdirect Print Servers - Administrator's Guide
Page 31
.... For more information, see Use DHCP (IPv4) on page 34. For more information, see "Use RARP (IPv4) on the HP Jetdirect print server to set all print server lease durations to verify that support HP Jetdirect control panel menus.) Manually enter the configuration data, using the default IP address. Configuration tools that require a specific default IP address on the...
.... For more information, see Use DHCP (IPv4) on page 34. For more information, see "Use RARP (IPv4) on the HP Jetdirect print server to set all print server lease durations to verify that support HP Jetdirect control panel menus.) Manually enter the configuration data, using the default IP address. Configuration tools that require a specific default IP address on the...
HP Jetdirect Print Servers - Administrator's Guide
Page 40
...supports only a single TCP connection, the idle timeout balances the opportunity of a host to recover or complete a print job against the ability of the print server's embedded Web server. 0: Disable. 1 (default): Enable. tcp-msl: Maximum segment life (MSL) in data retransmission. Allow incoming ...: Seconds that the HP Jetdirect print server advertises for remote networks. 2: All networks are made. A Telnet session can result in seconds. MSS affects performance by the IP address obtained when first turned on or when manually configured to use when the print server is 1 to be...
...supports only a single TCP connection, the idle timeout balances the opportunity of a host to recover or complete a print job against the ability of the print server's embedded Web server. 0: Disable. 1 (default): Enable. tcp-msl: Maximum segment life (MSL) in data retransmission. Allow incoming ...: Seconds that the HP Jetdirect print server advertises for remote networks. 2: All networks are made. A Telnet session can result in seconds. MSS affects performance by the IP address obtained when first turned on or when manually configured to use when the print server is 1 to be...
HP Jetdirect Print Servers - Administrator's Guide
Page 46
... reserved clients added are configuring an HP Jetdirect wireless print server, this section assumes that a wireless network connection is initialized. If you are displayed in each field, including the reserved IP address for your HP Jetdirect-connected printer is User Specified) or BOOTP configuration. When you change to the print server. The print server then attempts to Manual configuration, the DHCP IP address...
... reserved clients added are configuring an HP Jetdirect wireless print server, this section assumes that a wireless network connection is initialized. If you are displayed in each field, including the reserved IP address for your HP Jetdirect-connected printer is User Specified) or BOOTP configuration. When you change to the print server. The print server then attempts to Manual configuration, the DHCP IP address...
HP Jetdirect Print Servers - Administrator's Guide
Page 49
This might prevent BOOTP, DHCP, or RARP from your workstation. When manually changing an IP address, you can use the route command at the command prompt: C:\> ipconfig (on the HP Jetdirect print server, and is the IP address of their IPv4 addresses match), a route probably exists. To use... route from your computer have a similar IP address (the network portion of the workstation's network card that is configured with the HP Jetdirect print server, a route is located in the Accessories folder in a static configuration where IP values are fixed. To display it is required from...
This might prevent BOOTP, DHCP, or RARP from your workstation. When manually changing an IP address, you can use the route command at the command prompt: C:\> ipconfig (on the HP Jetdirect print server, and is the IP address of their IPv4 addresses match), a route probably exists. To use... route from your computer have a similar IP address (the network portion of the workstation's network card that is configured with the HP Jetdirect print server, a route is located in the Accessories folder in a static configuration where IP values are fixed. To display it is required from...
HP Jetdirect Print Servers - Administrator's Guide
Page 51
... network that parameter. Follow each command entry with the Infrastructure network type. Ad Hoc: (default) The print server communicates with other wireless devices directly, without an entry (a blank SSID), the desired SSID is issued without using the following and...No. desired-ssid Service set Manual configuration. NOTE: If a parameter is hpsetup in ad hoc mode. Table 3-3 Telnet Commands and Parameters Command Description Wireless 802.11 Main network-type 802.11g wireless network topology: Infrastructure: The print server communicates on your system). ENWW ...
... network that parameter. Follow each command entry with the Infrastructure network type. Ad Hoc: (default) The print server communicates with other wireless devices directly, without an entry (a blank SSID), the desired SSID is issued without using the following and...No. desired-ssid Service set Manual configuration. NOTE: If a parameter is hpsetup in ad hoc mode. Table 3-3 Telnet Commands and Parameters Command Description Wireless 802.11 Main network-type 802.11g wireless network topology: Infrastructure: The print server communicates on your system). ENWW ...
HP Jetdirect Print Servers - Administrator's Guide
Page 54
...print servers that do not support IPsec, but allow Firewall configuration. Use only HTTPS (secure HTTP) communications. 2: Disable forced redirection to the device. The default host name is scanning. Table 3-3 Telnet Commands and Parameters (continued) Current Channel (Read-only parameter) The channel that the wireless print server...on the print server to configure and enable IPsec/Firewall polices. 44 Chapter 3 TCP/IP configuration ENWW auto_ip: Automatically configure with MAC address 00a0f8387af7 is User Specified. You cannot enable IPsec/Firewall operation using manual tools, ...
...print servers that do not support IPsec, but allow Firewall configuration. Use only HTTPS (secure HTTP) communications. 2: Disable forced redirection to the device. The default host name is scanning. Table 3-3 Telnet Commands and Parameters (continued) Current Channel (Read-only parameter) The channel that the wireless print server...on the print server to configure and enable IPsec/Firewall polices. 44 Chapter 3 TCP/IP configuration ENWW auto_ip: Automatically configure with MAC address 00a0f8387af7 is User Specified. You cannot enable IPsec/Firewall operation using manual tools, ...
HP Jetdirect Print Servers - Administrator's Guide
Page 55
.... Print to the DHCP IP address pool. NOTE: If the HP Jetdirect print server is assigned as printer1.support.hp.com). IP address of the default gateway. For example: domain-name support.hp.com In the example, support.hp.com is configured by DHCP and you manually change... next Telnet connection. If you change this IP address, you should also change the print server's IP address. Table 3-3 Telnet Commands and Parameters (continued) 0: Disable IPsec/Firewall operation. 1: (Read Only) IPsec/Firewall policies are configured and enabled. To clear the IP address, set the value...
.... Print to the DHCP IP address pool. NOTE: If the HP Jetdirect print server is assigned as printer1.support.hp.com). IP address of the default gateway. For example: domain-name support.hp.com In the example, support.hp.com is configured by DHCP and you manually change... next Telnet connection. If you change this IP address, you should also change the print server's IP address. Table 3-3 Telnet Commands and Parameters (continued) 0: Disable IPsec/Firewall operation. 1: (Read Only) IPsec/Firewall policies are configured and enabled. To clear the IP address, set the value...
HP Jetdirect Print Servers - Administrator's Guide
Page 60
... for a cached DNS name, in seconds. Names are factory-default values. 3: Keep manual settings only. MSS affects performance by the Config Precedence entries accessed through the embedded Web server. DEFAULT_IP: Set the legacy default IP address 192.0.0.192. The FQDN consists of the ...use BOOTP/DHCP. The initial setting is determined by the IP address obtained when first turned on , or manually configured to use when the print server is not allowed. You cannot manually change the host name using a hexadecimal string to represent up to 120 seconds. 0: Disable. 15 (...
... for a cached DNS name, in seconds. Names are factory-default values. 3: Keep manual settings only. MSS affects performance by the Config Precedence entries accessed through the embedded Web server. DEFAULT_IP: Set the legacy default IP address 192.0.0.192. The FQDN consists of the ...use BOOTP/DHCP. The initial setting is determined by the IP address obtained when first turned on , or manually configured to use when the print server is not allowed. You cannot manually change the host name using a hexadecimal string to represent up to 120 seconds. 0: Disable. 15 (...
HP Jetdirect Print Servers - Administrator's Guide
Page 61
... Default Get community name. 0 Disable. 1 (default): Enable. Password to determine which SNMP GetRequests the HP Jetdirect print server responds to. DHCP Lease Time (Read-only parameter.) DHCP IP address lease duration time (seconds). DHCP ...HP downloading utilities is statically configured (such as HP Web Jetadmin. Table 3-3 Telnet Commands and Parameters (continued) dhcp-arbitration Amount of time, in seconds, that the print server waits for the print server to respond. (For additional security, you can prohibit communications with management applications, such as a manually...
... Default Get community name. 0 Disable. 1 (default): Enable. Password to determine which SNMP GetRequests the HP Jetdirect print server responds to. DHCP Lease Time (Read-only parameter.) DHCP IP address lease duration time (seconds). DHCP ...HP downloading utilities is statically configured (such as HP Web Jetadmin. Table 3-3 Telnet Commands and Parameters (continued) dhcp-arbitration Amount of time, in seconds, that the print server waits for the print server to respond. (For additional security, you can prohibit communications with management applications, such as a manually...
HP Jetdirect Print Servers - Administrator's Guide
Page 63
...-only parameter.) AppleTalk network printer type reported by factory default. READY: HP Jetdirect print server is pre-configured on the AppleTalk network. DISABLED: AppleTalk was manually disabled. NOTE: On HP Jetdirect 635n print servers, all network protocols except TCP/IP are disabled by the HP Jetdirect print server. ENWW IPv4 configuration 53 Table 3-3 Telnet Commands and Parameters (continued) 2 (default): Enable. AppleTalk appletalk Use...
...-only parameter.) AppleTalk network printer type reported by factory default. READY: HP Jetdirect print server is pre-configured on the AppleTalk network. DISABLED: AppleTalk was manually disabled. NOTE: On HP Jetdirect 635n print servers, all network protocols except TCP/IP are disabled by the HP Jetdirect print server. ENWW IPv4 configuration 53 Table 3-3 Telnet Commands and Parameters (continued) 2 (default): Enable. AppleTalk appletalk Use...